last executing test programs:

14m11.421786173s ago: executing program 4 (id=1180):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x4b7}})
r3 = socket(0x15, 0x4, 0x300)
write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x100, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x1fd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x7f, 0x0, 0x200, 0xfffffff8, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r6, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
r7 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r8], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x3)
shutdown(r10, 0x1)
getsockopt$bt_hci(r10, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)
ioctl$UI_DEV_CREATE(r2, 0x5501)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
socket(0x28, 0x1, 0x100)

14m9.356799436s ago: executing program 4 (id=1195):
r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[<r2=>0x0]})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000400)={r2, 0x3, 0x80, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x2, 0x0, r2})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffffb}, {0xa, 0x0, 0x3, 0x7}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r3})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086203, &(0x7f0000000080)=0x5)

14m9.193616635s ago: executing program 4 (id=1197):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xfffffffd}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x5, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x810)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
pselect6(0x40, &(0x7f00000001c0)={0x81, 0x0, 0x0, 0xffffffffffff88f3, 0x0, 0x8000000000000001, 0xfffffffffffffff8, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r9 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0)
msgget(0x2, 0x600)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000007500000a000001090001800b000100746172676574000024f80180080003009ac4200008000240000000000d000100434c415353494601800b00010064796e7365740000040002800900020073797a32000000003c00058008b72351c8953455"], 0xdc}, 0x1, 0x0, 0x0, 0x4854}, 0x20040040)

14m9.011593851s ago: executing program 4 (id=1198):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000193c0)=ANY=[@ANYBLOB="6000000010004b04000000000000", @ANYRESHEX=r1, @ANYBLOB="584000000000000093401d042a3641a1faa7f5e666c34302517269646765000030000280050016000200000008001d000900000008000100090000000600d60600020000000c001e000500000000000000000000000000000000000000000000b6cd4b00d954a1076fc6e43401d2deacc95312b305dc0ad2b7d4fcfeedd16c6c7d1534bc2c421005954a3d59fee3a90d3edccaae4758d41afde4a58cab3494c1146d54269e6abe0268334af50ce02b5a324baafc0ed2413bde404f57a24d57b74d04b9a902e4f95d1d66cbfdcff903a09996acb7d8fd"], 0x60}, 0x1, 0x0, 0x0, 0x4c885}, 0x24008014)
r2 = dup2(r0, r1)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019280)=ANY=[@ANYRES8=r2, @ANYRESHEX=r0, @ANYRES64=0x0], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000050000000000000ffff000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7200000000003900000008000300", @ANYRES32=r7, @ANYBLOB="0980040000800000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r9 = syz_usb_connect(0x3, 0x4a, &(0x7f0000019200)=ANY=[@ANYRES32=r5, @ANYRES16], 0x0)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
r10 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r10, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
unshare(0x24060400)
r11 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)
syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r9])

14m8.252151896s ago: executing program 4 (id=1201):
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00')
preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/107, 0x6b}], 0x1, 0x6, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, <r7=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
r8 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fchdir(r9)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_nd=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003c1026908ca0707a819bd0102030109021b00020204244730ebde8d7dc529ef2d5c4009090497b600d0f4b20709046b070048ceef09"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

14m8.084120456s ago: executing program 4 (id=1203):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff46040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff95}, 0x48)
unshare(0x22020400)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)

14m7.829208878s ago: executing program 32 (id=1203):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff95}, 0x48)
unshare(0x22020400)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f0000007e0000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)

12m41.225053969s ago: executing program 0 (id=1669):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x31, &(0x7f0000000000)=0x5, 0x4)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r2 = syz_io_uring_setup(0x6d5f, 0x0, 0x0, 0x0, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000)
r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x6, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a03000000000000000000010900000900030073797a32000000000900010073797a30000000004c000000060a01040000000000000000010000052400048020000180080001006e617400140002800800054000000017080001400000000108000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc0}}, 0x0)
r6 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0)
write$binfmt_script(r6, &(0x7f0000000380)={'#! ', './file0', [{0x20, '\t\t'}, {}]}, 0xf)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000180)=0x7, 0x3)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00e4ff07010af7635914dd1763bf"], 0xf)

12m40.055840778s ago: executing program 0 (id=1675):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001340)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r3=>0x0})
setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000400)={@multicast1, @multicast1, r3}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000026c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000208000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/hardlockup_count', 0x204081, 0x86)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000240)="5eb1abe5d3494ac8e0099cf334ce7ccb58c1cd060020f206eb8e6cb41fc2a68c014d041536f5e5c0222575015b2dbc2ef29437468abfea264c9ab2cb6e6d2e2f84d325c9206c3f97fadc959b4e2e76dd4233f8c50af1bce3c934ca054ea7b57035bedd42d19722c0ec7fcf497560dd28935527c8b5a1aabaa9ce2c251b50184377090d21ed5e104ebbf9022468e346017b8694b986953a4d3d76deed136b23383841377872550f755cde479f12b206beda34aff62ac0f49229e41ff9a08bd28ae95a1f919efb8173ef85a75c24793f4706887976cd0bfa5a385f6238fb", 0xdd, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r6, 0xdededede})

12m39.70398951s ago: executing program 0 (id=1677):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x1, 0xd, 0xe, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004140)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x3, 0x7fffffffffffffff, 0x0, 0x400, 0xd, 0xfffffffffffffffd, 0x9ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0xe, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f000000db40)="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", 0x2000, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x10001, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

12m38.723552207s ago: executing program 0 (id=1679):
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, 0x0})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
poll(&(0x7f0000000400)=[{r0, 0xd}], 0x1, 0xff)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x48d0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x8)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3})
set_mempolicy(0x1, 0x0, 0x40)
set_mempolicy(0x3, &(0x7f0000000000)=0xb2, 0x7f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00')
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000})
close_range(r1, 0xffffffffffffffff, 0x0)

12m37.689972005s ago: executing program 0 (id=1682):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a"], 0xc4}}, 0x4c050)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000005000000000000000001"], 0xfdef)

12m37.051390848s ago: executing program 0 (id=1684):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4009}, 0x0)
recvmsg(r5, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x2000008}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000004080)=""/4111, 0x100f}, {&(0x7f0000001680)=""/114, 0x72}, {&(0x7f0000000040)=""/78, 0x4e}, {&(0x7f00000005c0)=""/57, 0x39}], 0x5}, 0xb0a}, {{0x0, 0x0, 0x0}, 0xd3a9}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
execve(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)={[&(0x7f0000000240)='{$\\}#{$}\x00', 0xffffffffffffffff, &(0x7f0000000500)='GPL\x00', &(0x7f0000000540)='GPL\x00', &(0x7f0000000640)='++%\x00', &(0x7f0000000680)='(S},@\x00']}, &(0x7f0000001a00)={[&(0x7f0000000800)='\x00', &(0x7f0000000840)='/proc/thread-self/attr/current\x00', &(0x7f00000018c0)='GPL\x00', &(0x7f0000001900)='GPL\x00', &(0x7f0000001940)='/@+\x00', &(0x7f0000001980)='\x00', &(0x7f00000019c0)='/proc/thread-self/attr/current\x00']})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000004001880"], 0x40}}, 0x0)
socket(0xa, 0x1, 0x0)
r9 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile &'], 0xff)
getsockopt$inet6_mreq(r7, 0x88, 0x66, 0x0, &(0x7f0000000000)=0xfffffffffffffe09)
recvmmsg(r6, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000006c0)=""/237, 0xed}, {&(0x7f0000000580)=""/162, 0xa2}, {0x0}, {&(0x7f0000000880)=""/4088, 0xff8}], 0x4}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000300)=""/189, 0xbd}, {&(0x7f0000002c80)=""/79, 0x4f}, {0x0, 0x54}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/38, 0x26}, {&(0x7f0000003e00)=""/217, 0xd9}, {&(0x7f0000001a40)=""/259, 0x103}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x7}], 0x8, 0x40020062, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)

12m35.63985182s ago: executing program 33 (id=1684):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4009}, 0x0)
recvmsg(r5, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x2000008}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000004080)=""/4111, 0x100f}, {&(0x7f0000001680)=""/114, 0x72}, {&(0x7f0000000040)=""/78, 0x4e}, {&(0x7f00000005c0)=""/57, 0x39}], 0x5}, 0xb0a}, {{0x0, 0x0, 0x0}, 0xd3a9}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
execve(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)={[&(0x7f0000000240)='{$\\}#{$}\x00', 0xffffffffffffffff, &(0x7f0000000500)='GPL\x00', &(0x7f0000000540)='GPL\x00', &(0x7f0000000640)='++%\x00', &(0x7f0000000680)='(S},@\x00']}, &(0x7f0000001a00)={[&(0x7f0000000800)='\x00', &(0x7f0000000840)='/proc/thread-self/attr/current\x00', &(0x7f00000018c0)='GPL\x00', &(0x7f0000001900)='GPL\x00', &(0x7f0000001940)='/@+\x00', &(0x7f0000001980)='\x00', &(0x7f00000019c0)='/proc/thread-self/attr/current\x00']})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000004001880"], 0x40}}, 0x0)
socket(0xa, 0x1, 0x0)
r9 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile &'], 0xff)
getsockopt$inet6_mreq(r7, 0x88, 0x66, 0x0, &(0x7f0000000000)=0xfffffffffffffe09)
recvmmsg(r6, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000006c0)=""/237, 0xed}, {&(0x7f0000000580)=""/162, 0xa2}, {0x0}, {&(0x7f0000000880)=""/4088, 0xff8}], 0x4}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000300)=""/189, 0xbd}, {&(0x7f0000002c80)=""/79, 0x4f}, {0x0, 0x54}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/38, 0x26}, {&(0x7f0000003e00)=""/217, 0xd9}, {&(0x7f0000001a40)=""/259, 0x103}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x7}], 0x8, 0x40020062, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)

29.872213031s ago: executing program 5 (id=4932):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000700)={&(0x7f0000006000)={[{&(0x7f0000000340)="9311752b2890525422e50a2620cb2b315ca7f8e5f9b088f9109602060581655da1e2a4bec8926f0acf54bee805773938137ac3ac4d2fcc65b79480f6da12ffef3519cf15c82a713330a76a1b2e1ac20cd625fe60496cfc2147b38d8f1f681657fd93edd030bc7d51be5e3876ac562a2e85a6d9af34606582317a3fdad576c96acdd55654895bab479031d19270c10a117fee0efce02c67a353484096cd85bb419a552efd60adb7962c78f5a109df388f59aff121b983d85102086c1e0efc64e15dc19b4db3c5b1b01f05dad1a35b7a821635c2ddc3e60075a05e4788525e6efa0aeb3993b0e02b3e145be8517155c24f0e82f73d5e", 0xf5}, {&(0x7f0000000280)="ccd5ee80db4890b98c599735bb812ea37cfcc67345e0d5eb0d59a5a0cf47bf0c", 0x20, 0x1}, {&(0x7f0000004300)="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", 0xff0, 0x2}, {&(0x7f0000000440)="300af27344a50195227146b8db1c7007628b1a676b869597658cebe124ceca282f2f0b61eb5fd4f118c294aaf8f932a7e0ea6030f9849a86a5aec097eba6013c21acd5ba18adf45482a3b7d4218c5422c80dcae805ecc3409a7e7b0d3b1013193ecddfc9e7c9ed6d36571cf11233ba5155aca3de98dd7fd18c742ec7a99af0129be917fbfc1f4af5460a0de577ccbd6fe7a6ca8581eeda02752b103a9f1bfb06e142eeb6040db577911d2e7a21b90c8e3197483c65e8b593906db93c42569cc61e166ad7ac740ca3c51e8bfc2695", 0xce, 0x2}, {&(0x7f0000000540)="8f646dcdf59a6c8f7cda182f03b6192af841432c66758f89e9305d8c743f4b58ab39cab8a7bbd61db9b3708df3c56ce3ca31e29ed8e4010215a78c9484209b6cd9d3bd97f9d64e378fc9c2cf406edf24cfb245ddc1", 0x55, 0x2}, {&(0x7f0000000640)="4d851546972f53e3086953b1f234292d31361a1a685ace8c95ebb435af78d45ff8383d2ad8433878de3030ef60e5d6a0cfdfa15119c94634e0505adff1249a4071d0e7ae8a137c8c3d9caf7b6c53cca792a698a8000cadbacd5f6ed5a221febc5183291d4042a79df5f94ef13a84cbf3c2473d7ecde349fdcde98aa9626a41fd2b781d63c3f8ee9c7b1a16504a96b75815d1", 0x92, 0x3}]}, 0x6}, 0x1)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ptrace(0x10, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r6, @ANYRESHEX=r0], 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x100000, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

29.663324306s ago: executing program 2 (id=4933):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x4, 0x48000, 0x2, 0xffff8001, 0x2, [0xfffffffc, 0x5, 0x0, 0x5]}) (async)
close(r0)
r1 = signalfd(r0, &(0x7f00000000c0)={[0x70a0]}, 0x8)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000100)=0x1)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
write$P9_RXATTRWALK(r1, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x2}, 0xf) (async)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000200)=@add_del={0x2, &(0x7f00000001c0)='ip6_vti0\x00'}) (async)
syz_extract_tcp_res(&(0x7f0000000240), 0x9, 0x8) (async)
pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000280)="061717333919c11e5ebd1276630bc3681d39fb83e9e16d3be451d958f72f0d4bd1e912ad04e8010babd35e858a0fe567e39ef86222d1408d531bd7f3e549f5c0baaed2", 0x43}, {&(0x7f0000000300)="9ddd8c166aa26cbf168d259ca89b4cf760e01532df72dc0f1e2e54e0bd160b3b1c23aaef2989245eb97dcffb68b1227a464e28760d877a4d196f6fe1078b8701a7ff1f1bd1e0417c298586cb59a02ad8d43600e66a373758b05613306fff0af41c6b184005b471bd42fc5a1cc4bd2dd7086cee6fcff41dfbab1028ac51e11e0f958f979097f1f47bd52a7f4fe4a4a5146978aa0af0fb60d55e7b7e67c421fab5a0caa5b9437768482c87a3b7f01fd3751b576c6be96d0ec89290a1c8abf2cd2e69fcdb3c", 0xc4}, {&(0x7f0000000400)="78f5c6269f5a1bf3fda00a374add65ff8f2ba8969063a76e2559d086212ab39a02a86b7795ea4a08b02836ed0223cb8346aebd2ae01d7cad5362763fe000c407cc7ea772b8b83a3253edcd156c23c5c75eeb3743eaf63f3c5239a9522691efdb853e212ec7f5995bc92b0282f782584539a4e98ccef9a96c677b24e13668cdeeeecb69bac8da1fac174a8af76e43febd186c8d7397eb2d5b9cedaa77c96720f91efa972fd4d09765022251c11e1ae2343f7264f3a96c73486d6ee3439f215587b5107151ae3d8029f1c7a49c41d5ec379214", 0xd2}, {&(0x7f0000000500)="fa4465b6ba09eb399dfed7cafe5c2b453a67d1ddf87bd37748062e5a82b6427adfd475bebd27363a942dec6230d83cf1fa64469240fc7028193dcf6839e7c0d5b67977b49154136a9ec3d641c1ea38f9a46c4efe9c4172daef6550baabfcfe19bc5d", 0x62}, {&(0x7f0000000580)="f8aa5237a1f1a959b0cf7c", 0xb}], 0x5, 0x7f, 0x7)
r2 = semget(0x2, 0x2, 0x200)
semtimedop(r2, &(0x7f0000000640)=[{0x1, 0x8}], 0x1, &(0x7f0000000680))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f00000006c0))
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x1, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x200060c0) (async)
r3 = syz_usb_connect$uac2(0x6, 0xd7, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x4d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0xab, 0x80, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x4, 0x20, 0x4f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x1, 0x1f, 0x4}, [@processing_unit={0xb, 0x24, 0x8, 0x3, 0x4, [0x0, 0x3, 0x2]}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x3, "f58b7ea9aa93"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x40, 0x3, 0x7, 0x7, "d80ea90b"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x8, 0x2, "a8c3c343ed78"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x31, 0xaf6, 0xe0, 0x3}, @as_header={0x10, 0x24, 0x1, 0x7, 0x5, 0x1, 0x1002, 0xff, 0x6, 0x90}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf, 0x4, 0x2, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xff, 0xd8, 0x9, {0x8, 0x25, 0x1, 0x82, 0x60, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x81, 0x2, 0x88, 0x4, 'X='}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x6, 0x0, {0x8, 0x25, 0x1, 0x82, 0x3c, 0x94}}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x6, 0x8d, 0x7, 0x10, 0x3}, 0xb5, &(0x7f0000000940)={0x5, 0xf, 0xb5, 0x6, [@generic={0x6c, 0x10, 0x2, "8840d0ab17186c5fcd41748074ea38f456f71135fa3af4226d2e225c2fd0a2fb4a66b229b2d66818a764fa1c1a3e0cc1bbc19ba58140a0973cd03a052d6c4a7ff5d615fc4db67736a5e0ce670f36b1bcbf7254fe568dba5c1d41898fcdfc21412c3b795db2b9678acb"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x30, 0x4, 0xf9, 0x4, 0x4e}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x8, 0xf00, 0x8, [0x30, 0x1e, 0xff000f, 0xfffff0, 0x6018, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x9, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0xdb, 0x6, 0x5, 0x1}]}, 0x4, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x40e}}, {0x8, &(0x7f0000000ac0)=@string={0x8, 0x3, "16e004b2140d"}}]})
syz_usb_control_io(r3, &(0x7f0000000d00)={0x2c, &(0x7f0000000b80)={0x40, 0x23, 0x63, {0x63, 0x8, "606d02899526655b27e47645971aaa34a045994ec27c160fff648731e450c5abe33a8f7cb475193d19d05afd3044f7b5c75392470682198a8ee887cab79712254ddffaa612bc988e12e513f57d20f64c62bc1a5295664a68e9da31a518b6fe5d29"}}, &(0x7f0000000c00)={0x0, 0x3, 0x15, @string={0x15, 0x3, "597e8d3e9cfb5fc03a6ae19b500a054841b793"}}, &(0x7f0000000c40)={0x0, 0xf, 0x2a, {0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x1d, 0x13, 0x800}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x3, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "0b4fc6567253c1eed3ecd189b72ae25e"}]}}, &(0x7f0000000c80)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf7, 0x0, 0x9, 0x9, '\v\v\tg', "3aeace3a"}}, &(0x7f0000000cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x8, 0x8, 0x4, 0x2, 0x2, 0x1}}}, &(0x7f0000001140)={0x84, &(0x7f0000000d40)={0x20, 0x0, 0x25, "82db31abf25636fe222eddf8c1cc819cb9edfe48de96541bc11f48cc89d1054c7b7760b6ba"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000e40)={0x20, 0x0, 0x8, {0x1f8f4554069915b5, 0x4, [0x0]}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000f00)={0x40, 0xb, 0x2, 'GK'}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001000)={0x40, 0x19, 0x2, "15c1"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0xd5}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0x1}})
syz_usb_connect(0x2, 0x429, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0xaf, 0x17, 0xd0, 0x20, 0x6cd, 0x115, 0xa4de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x417, 0x2, 0x0, 0x6, 0x80, 0x4, "", [{{0x9, 0x4, 0xee, 0xc, 0x7, 0xd0, 0xea, 0x3f, 0x3a, [], [{{0x9, 0x5, 0x1, 0x1, 0x20, 0xd9, 0x1, 0x6, [@generic={0xe8, 0x5, "ed9a8b60d29037a7db89238a9ce8e889b3cdf1edfea0bddd087693751079161f9c11e3e19f1cb9948a4280f2f0d2cd59176251ef2121319e8bc003803a7797be549a95dbfff4a00eb5aeb58ca41cd93f5524bbca8481fe234e0ee233926295feb1792799a968190f74f54e3a4ab4beaa81aff2f52c673c1e5e2396c300dab1cb53ef04b0e5c6f19579960a2f2ed4c40003a37c70cc58bfa314f98d077211d9f30e8e683c90538c94f3f741e945589d80593a24a94ba71b57e1d5ebd63a5fbe75f5822a67841caeb898499074ec27b96bb76ed45fd6ab1793742a107dfb4ae3f2d0a31569da75"}, @generic={0x30, 0x31, "02a1bc7e01e726e83ea3323e57581d4034ea2c02e59f7cee386187d2263dc3c99d42d560ee4c4ea57d093193b305"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x2, 0x6, 0x8, [@generic={0x9, 0x62e692c558847e81, "c06b50f86c3015"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x9, 0xf, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x5, 0x6, 0x9}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x0, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x59, 0x1ff}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x9, 0x6, 0x11}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x5, 0x7f, 0x6, [@generic={0xe8, 0xe, "468d4617b547002207993ff9881393443c6294c0b1f30421a04af343ab57bd14a8777799264113caa5e6a1f1b904b676ed513633a41764429b4d84fa7d93668029179eddd61d53e94653cae90edb5497c42ec66975e4015660fa1be85028e26de84235046150d1bc1f2712e8bef69367851d8e24c10b75278cacd080c418687959ec553afb4cd319740c8f1846fa8df5a454dde1b647204afec0dd2c20d220518362751732f05df354c4036d5ad46e1279d2d2e8c8b52964200d4e790333991eddbc38f818cff88ea6946d65f0892bcb134ce7cbfc491fc57c9b31981bc92e4f8a5b96de12af"}]}}]}}, {{0x9, 0x4, 0x34, 0xde, 0xb, 0x7e, 0x68, 0xaf, 0xf4, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0xf, 0x30, 0xa, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x5, 0x6e, 0x2}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x4, 0x73, 0x2, "1077947778dd49"}]}], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0x1, 0xd, 0x3}}, {{0x9, 0x5, 0xe, 0x7, 0x20, 0x6, 0xfe, 0x6}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x32, 0x0, 0x7, [@generic={0x7e, 0x8, "7a5823854c3bb346da9e0613330accb79af9ab7c47caf89403d2a526ca872a7366fca72a655779cf0de39710218ecf8db3556028c913e59ef37962509d651ad365dd9f465ac1ec66dca957e6d983581d2dcaf2bdbe17b7f63e1ef79fed62535dd3342a7b44227b15101205f8b8bc65ffb2c2c900db0ffa74ae4518b0"}, @generic={0x93, 0x8, "aa413089ae505aa946304d620e2cb3b2bfa1158508c8e4420344a19fcf35aefbe700f936d824d7b91170fb46d3994c40a0b6febd7fe4bacc425ebc55bd6d8aedd7e4cafe83108fcfad6b5cb7a8e4efbe99b23ddcf8ad83e08e2294d5534c3fb5b7bc17ec2e4e7b04ec88fb04deefa4f721f2e95d0a2189f9784dddd1f7aedab600d6335dba2a23f2d8bd3218039a7f366e"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0xe, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xfe, 0x9, 0x6}}, {{0x9, 0x5, 0x2, 0x4, 0x240, 0x7, 0x66, 0x3}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x5c, 0x2, 0xf4, [@generic={0x9, 0x10, "958f6ac8bcdaae"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xa, 0x8, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x6, 0x9, 0xb}}, {{0x9, 0x5, 0x84, 0xc, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x3, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x800}]}}]}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x300, 0xc1, 0x6, 0x6, 0x20, 0xa}, 0x34, &(0x7f0000001680)={0x5, 0xf, 0x34, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xb, 0x3, 0xd1a1}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x7f, 0xf00f, 0x2, [0xc7, 0x0, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0xa, 0x1ed}, @ptm_cap={0x3}]}, 0xa, [{0x14, &(0x7f00000016c0)=@string={0x14, 0x3, "ac756f10e5957e1ea7189cdf19f7f43fc8ac"}}, {0xe8, &(0x7f0000001700)=@string={0xe8, 0x3, "34445511dfdb2aad71849efb38495ca57e591373c59ba2176fe757407758f7d515996cf2b135e02fa929d0ebf1395f4b9370d3aa28ca727c2df15309a023f6edc81a6a4f20aef90fada9d1b613a0a54add38fa21a9c72bef8e63abe2b4a36a8cbf057350cae8da4261c96bc4ed25565184196bf063ac11f483864380fff10f6a225fee1a2a914ba3157594822bf6bae5a640c662e7fcf49ff57b9cc790a15b91bd1be28d2e2535a8d1bb30e1c0eae7b4522998b8982368c5e5bc6b52b584f143151db04fe5dd304f5925ba11fd8295057dc52d5c68c95302d4edcb992e3b271d1c2c344ad9d2"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x421}}, {0x6f, &(0x7f0000001840)=@string={0x6f, 0x3, "4e97bddfe1ba0c4cf6f0efc59591f2d594de0846ab0bc276bad55a8e519ce925ad6f7830d1db8216be5ef13e246cf9fecf82702a0fcbd70da489a076308c3164cc7902c494800dc05e6d7422b30249f6a46115be520cb817a3039270ada0925ee93bacc8904285ff25018cf124"}}, {0x43, &(0x7f00000018c0)=@string={0x43, 0x3, "de07a94ae4f753d718528eb425090dbf873d0f34f9f1c3c12cd55ce6cf76558c358cac7b481c69348db8baa0263af34a2e0808f847140ff4fd32609113b9226e91"}}, {0x83, &(0x7f0000001940)=@string={0x83, 0x3, "1935de6d4863d42905af87bb1f8039615c3464613b7e296d2d4ff0e1a6a1fe9288e2f491ca2f8a778da48ee6f2972d8e6026e129a9a7547e076cf48fbc6dbb83c04ed5ef8dad5786e1c2784bd6fce4c0370761c6af9023c6a6eb222ecc9eb23efdfce51b3b11c60ae72eeea233a8873a49908b4f470fad0d0cda4b5af0d860e349"}}, {0x4, &(0x7f0000001a00)=@string={0x4, 0x3, '-f'}}, {0x94, &(0x7f0000001a40)=@string={0x94, 0x3, "5331e526b1e4fa1de4063e8ccf9a394b7589ba36cd7d59b83220f00f40412fb5474c81c3a8e4804318d4d6b4fb1b87f23db4099e213ad64ecac70425850d79a9c1b9cc4e944f704a64cabf750070bd1e3fde23c2afb26635a87a3f4a00b400ff28a9396f72d4b1aea76841a5436bdc0117a5f0e5c6079ed7aa6f4cb3441759ade2baaf9afcea81d8d422da9d557a6f9661e1"}}, {0x8d, &(0x7f0000001b00)=@string={0x8d, 0x3, "b88d0242d81db39cf29b2584d509e2e6a03552e966a7cf1f3295aca323e251d7e38e4e94456954f1845b63371f88df764a1f6a72696ef19e807ecda0f018c84cad63e34c5f5f83469691836ea94fb26a0d7f26e4ba3714cbd38202adf45a8d0ee54d8d723b694315aef3ac4daee21fb66fe4ce5a9bd7a978bf96076620bab1a7b9793054d549ae7cf458c2"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x80a}}]}) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001cc0), 0x4000, 0x0) (async)
connect$inet6(r1, &(0x7f0000001d00)={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, 0x1c) (async)
syz_clone(0x80, &(0x7f0000001d40), 0x0, &(0x7f0000001d80), &(0x7f0000001dc0), &(0x7f0000001e00)="7c510bfb1f8617cbf272b72be782bc8194914bc1a492da0d86b24f7936fede3099259389a48f53a4c4f9f67e70870458ce0daa5f183bb88eb963c19c86c670453494b0d71779aabc972114b169f6477003d6") (async)
r5 = creat(&(0x7f0000001e80)='./file0\x00', 0x85)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000001ec0)={0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}]}, 0x20)
close_range(r4, r1, 0x0) (async)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r6, &(0x7f0000002280)={0x0, &(0x7f0000001f00)=[@in_dx={0x69, 0x20, {0xfd19, 0x54ec79b167abbad2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x632, 0x7, 0x6, 0x6}}, @out_dx={0x6a, 0x28, {0xcae6, 0x0, 0xa9}}, @nested_load_code={0x12e, 0x59, {0x2, "0f01cf66400f78c2400066b81a018ed0400f01388fa978c7b100000100450ffdcd0fc75a09430f00920e00000067400f01f866baf80cb8571f7087ef66bafc0cec"}}, @wr_crn={0x67, 0x20, {0x2, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host64=0x2c00, 0xfffffffffffffff8, 0x0, 0x7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x655, 0x8000, 0xffffffffffff8001}}, @nested_amd_vmsave={0x183, 0x18}, @cpuid={0x64, 0x18, {0xd194, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x49, 0x80000001, 0x2, 0x1a3c4000}}, @wrmsr={0x65, 0x20, {0x82c, 0x7fffffff}}, @cpuid={0x64, 0x18, {0x29ba, 0x8}}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x23d}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x2, 0xc1}}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0xda}}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0x85}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x0, 0xff}}, @nested_amd_vmload={0x182, 0x18, 0x2}], 0x361})
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000022c0)) (async)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000023c0)=@buf={0x95, &(0x7f0000002300)="25e8b6d8af036e7e9bd25cd7cf0b482331b5f20c3080c947cc3b575ad7185e0d75d1e7e97b3d4da5620d95eba2d33b153e5bc5481fd05bde6d189cd13a9804952cc6ee75ee27a230aa66dff0ac94e645001eb844ffec904ffa447ee65ca78c97681ca6aca0299f86dfac8b522ffd0c778ee85d4d8e1bad7fb64c082f221a80e26a9888168f694efefdc5219d6c462cea8f22fd82a2"}) (async)
write(r5, &(0x7f0000002400)="4bfecd29aada1c749dfafc13ac39c2492fc8da46ccf000d5b824cffafcca7f068ae8c3ffc951ddb174521974694b3e8ada739ccd03d2ad0aab8cc903901d4092d363c9bd758a4940c055f5fa627a98f45f328a2d86dab962aeb7892f5e9def0aef8702dcf8f6076c9b3a81e37d6cc48337c5e3a69c61714713fb4f39b95562be1f3d34d64eda164633f1a1082aec1782a613cc89", 0x94)

29.638939475s ago: executing program 2 (id=4934):
syz_usbip_server_init(0x1)
r0 = syz_usbip_server_init(0x2)
mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0)
mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
write$apparmor_exec(r0, &(0x7f0000000240)={'stack ', '!\x00'}, 0x8)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200070008d90467a000000000000109022400010000a02009040106010300020009210000000122080009058103000400", @ANYRES8=0x0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\b\x00'], 0x0}, 0x0)

29.191867695s ago: executing program 1 (id=4937):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000017e000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x2752, &(0x7f00000001c0)={0x0, 0x193c, 0x1, 0x3, 0x363})
r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0x2e5, 0x0, r0})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x300, 0x0, @void, @value=0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000300)="2796b94e9ec11dd65cddc09f2c7e7bdb0420cb8ae57e686282157cc01a5db52b90cf21719fd94686c4f3d39e440ddfad652d4012fd75a826599587582a588058f9e48afb1a2fe30bad4f7b9650348ba4dceaa25363635ec429e02169ba7b4d199defecf4c72f894987705c1b9433601d630645a1bd4607ca57b4cd5a763497b6cd0b23c24cfe1dc7649d44e30fdc38cea9fb308b56982ae6591b7c69d33558ff7eccf5635b3e758db093")
getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

28.993738826s ago: executing program 5 (id=4938):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/134, &(0x7f00000000c0)=0x86)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x6, 0x401, 0x64f, 0x208, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0xb}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x4, 0x20}, 0xc)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000580)=""/240, 0xf0, <r6=>0x0, &(0x7f0000000680)=""/235, 0xeb}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50)
r9 = openat2(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x400, 0x21, 0x21}, 0x18)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x10, r0}, 0x18)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x8, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7600000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x1, 0x5, 0x1, 0x7}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @alu={0x0, 0x1, 0xc, 0xb, 0x0, 0x20, 0xfffffffffffffff0}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @generic={0x1, 0xd, 0xe, 0xe0, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x907e}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0xa7, &(0x7f0000000400)=""/167, 0x41000, 0x40, '\x00', 0x0, @fallback=0x7, r5, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xb, 0x5, 0x9}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r7, r8, r9, r10], 0x0, 0x10, 0x6}, 0x94)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000b40)="29ae3f31d21e91013b138a8ab991bc204967b5ad4f0445abc1511c8c7a383c485dd7e970c561cd361d6039402cbe189a83aa19adcedaacbedcd6ee26f3960ce60c9045bf368622b402ba36ef96fe8c74347809594e78a7ab89a114be4c576311c991f42f756a59907c0435401950d67c9ca5deaedbe1e481c00be6ad973f4d13f949a0cdc4a640b8b4ab160b9a38f21285eda03bc3ad38161001cdda3b920ea99fd1515e0ef2649435db40988038c920bd1e40061d361b1d8685abea87c008c233fdc96880fc0dfecd2c0223130d53c12b1f757e00f31fed8a0be7405868767cca406716a9001f985d58b5fb72", 0xed)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r9)
sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000e40)={&(0x7f0000000c40), 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x108, r12, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "f5cca31479c5d10f1c29dff1d8da067210a9decd73e30b77302d0873"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "674c1b215388bde4c0af7917d8ae559d1009d811e46c22c9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "9fe0c3c8d2b82e2ce2218d727ecfa4babfe944b31caa82c0f4c77d25"}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40000)
pread64(r1, &(0x7f0000000e80), 0x0, 0x15c)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r11, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0], 0x0, 0x9f, &(0x7f0000001000)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0x5e, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10)
sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f0000001300)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x58, r13, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c850}, 0x8)
ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000001340)={0x2b58, 0x6, 0x2, 0x7, 0x3, [0xa97, 0x100, 0xa8bb, 0x6]})
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f0000001380)=@gcm_128={{0x304}, "bafcd236d7ede59a", "30493981b7bbfe4ff28bf4949d66e0b3", "c8ecec96", "86ff8c13ec5ae1c5"}, 0x28)
r15 = accept4$unix(0xffffffffffffffff, &(0x7f00000013c0), &(0x7f0000001440)=0x6e, 0x80000)
recvfrom(r15, &(0x7f0000001480)=""/117, 0x75, 0x10000, &(0x7f0000001500)=@nl=@unspec, 0x80)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24004005)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000027c0)=<r16=>0x0)
r17 = getpgrp(0xffffffffffffffff)
syz_clone3(&(0x7f0000002840)={0x100c000, &(0x7f00000016c0), &(0x7f0000001700), &(0x7f0000001740), {0x6}, &(0x7f0000001780)=""/4096, 0x1000, &(0x7f0000002780)=""/10, &(0x7f0000002800)=[0xffffffffffffffff, r16, r17], 0x3, {r9}}, 0x58)

28.953825407s ago: executing program 1 (id=4939):
r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff9000/0x4000)=nil)
read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
lstat(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
statx(0xffffffffffffffff, &(0x7f0000002100)='./file0\x00', 0x400, 0x20, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresgid(&(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)=<r6=>0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002300)={'\x00', 0x1000, 0x80000001, 0x10, 0x7ff, 0x7, <r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002380)={0x0, <r8=>0x0})
shmctl$IPC_SET(r0, 0x1, &(0x7f0000002400)={{0x1, r1, r4, r5, r6, 0x40, 0x3}, 0x7, 0x0, 0xd1b1, 0xff, r7, r8, 0x5})
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002480)='/proc/consoles\x00', 0x0, 0x0)
quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000024c0)=@rnullb, r3, &(0x7f0000002500))
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000002540)=""/114)
r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f0000002600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r11 = socket$l2tp6(0xa, 0x2, 0x73)
close_range(r11, r10, 0x0)
waitid(0x3, r8, &(0x7f0000002840), 0x80000000, &(0x7f00000028c0))
ioprio_get$pid(0x2, r7)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000029c0)={0x0, 0x0, <r12=>0x0, 0x0, 0x0, 0x6, &(0x7f0000002980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000002a00)=r12)
kcmp(r2, r2, 0x2, r10, r10)
ioctl$FIOCLEX(r10, 0x5451)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000002a40)="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", 0x1000)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r9, 0x4068aea3, &(0x7f0000003a40)={0xdf, 0x0, 0x1000})
shmctl$SHM_LOCK(r0, 0xb)
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000003ac0), 0x200800, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(r9, 0x3b89, &(0x7f0000003b40)={0x28, 0x0, 0x0, 0x0, <r14=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000003b00)})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r13, 0x3b8b, &(0x7f0000003b80)={0x10, 0x1, r14})
ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f0000003bc0)={0x3, 0x2, 0xe000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x6, r10})
r15 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TCSETSW(r15, 0x5403, &(0x7f0000003c80)={0x0, 0x401, 0x0, 0x3d8, 0xf, "ad7fc473786c484b9a2806e83a87c7e385b56d"})

28.83584969s ago: executing program 1 (id=4940):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xc3609000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000700)={'nat\x00', 0x0, 0x0, 0x0, [0x8000, 0x80000001, 0x2, 0x8, 0x81, 0x3], 0x0, 0x0}, 0x78)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cdff000001021b0100080006000000000008000e002ac00000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)
socket$kcm(0x10, 0x2, 0x0)

28.822676286s ago: executing program 5 (id=4941):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/asound/seq/clients\x00', 0x41, 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80b, 0x9, 0x1, 0x10}, 0xb, 0x1, 0x8000032, 0x5, 0x9, 0x7, 0x9, 0x7, 0xfd, 0x7, {0xffff1c72, 0x23, 0x3, 0x8, 0x9, 0x800}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f000000a7c0)={0x2020}, 0x2055)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001540))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sndctrl(0x0, 0xe26, 0x101400)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000003040)='devices.allow\x00', 0x2, 0x0)
sendmmsg$unix(r5, &(0x7f0000004440), 0x0, 0x4000040)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0xa, 0x3, 0x3a)
read$FUSE(r5, &(0x7f0000006740)={0x2020}, 0x2020)

28.773343063s ago: executing program 1 (id=4942):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', <r1=>0x0})
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x70b925, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x0) (async)
r2 = inotify_init() (async, rerun: 64)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) (rerun: 64)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) (async, rerun: 64)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@hyper}) (rerun: 64)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, 0x0) (async, rerun: 64)
r6 = eventfd2(0x1, 0x80800) (rerun: 64)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000080)={0x4000, r6}) (async)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000040)={0x8, r6}) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) (async)
modify_ldt$read(0x0, 0x0, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000000)={0x15, 0x7, 0x8, 0x8001, 0xfc76, 0x9, 0x5, 0xc, 0xfa91, 0xffffdfff}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
unshare(0x2c020680) (async)
fstat(r7, &(0x7f00000002c0)) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r9=>r0}, './file0\x00'})
ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000100))

28.459457092s ago: executing program 1 (id=4944):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
unshare(0x8040480)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) (async)
fsopen(0x0, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r3 = dup(r2)
write$binfmt_elf32(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000003000000fe03200001000700080007000000000003000000ffffff7f0200000000040000800900"], 0x79) (async)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async)
socket(0x2b, 0xa, 0x7) (async)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
unshare(0x80)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x6c}}, 0x40) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x81}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a0000000000ff"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0)
timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000244100, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, 0xffffffffffffffff, 0x2000)

27.848186933s ago: executing program 2 (id=4946):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$apparmor_current(r1, &(0x7f00000003c0)=ANY=[], 0x1b)
vmsplice(r0, &(0x7f0000000ac0)=[{&(0x7f0000000540)="ee97d1cdcd", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff96}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643a73797a20303030303030303030303030303030303430393600d31fe8315523c8b4cfdeba81fc00bbaefc93b718dd02477f1c9a3f99fc72cbad683ade070000004798fac5751b29bba2d64d03c3cce6cb054f389c32b83fe4fe3cf46abc1374e2c392b2a987e85b175af3991a01e33c321db0394629842363d47ebcb28ad64f3e4b6624a8a2c7c3ecd0ce387783f2ae4f6e47ffd323fb18303e69117aac298324be154be6384874726a4d4fd50411e76cc24f789083fb045066f2000000000000"], 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, 0x0, 0x1d, 0xfffffffffffffffd)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

27.743080705s ago: executing program 2 (id=4947):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000400)=@abs={0x1, 0x0, 0x40}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0)
ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x5)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
syz_usb_connect(0x5, 0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b20102020194052406"], 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000dbd1165de155eb965e1d22873e603000000000000000a00000a4c000000060a03000000000d0000000000000000200004801c0001800a00010071756575650000000c00028006bcf0c1695bfb4239000340000200000900010073797e30000000000900020073797a3200"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f00000002c0))
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000500)="66b87f000f01b0279b0000ea4641ab83b5003e0fc76e00c74424000d000000c744240200500000c7442406000000000f0114242e0fc75f000f79707df30f01ea663626f3a70f0095000000000f09", 0x4e}], 0x1, 0x44, 0x0, 0x0)
syz_open_dev$video4linux(0x0, 0x877, 0x101000)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r11, &(0x7f00000003c0)={0x1d, r2, 0x3, {0x0, 0xf0, 0x4}}, 0x18)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x2, 0xe05, 0xe7, 0x4})
close_range(r0, 0xffffffffffffffff, 0x0)

27.434148741s ago: executing program 5 (id=4949):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x7c)
fchdir(r1)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffff, 0x0, &(0x7f0000006680)=0x3)
modify_ldt$write2(0x11, &(0x7f0000000200)={0x7, 0x100000, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10)
r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x20000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$loop(0x0, 0xffff, 0x14f600)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900"], 0xe4}, 0x1, 0x0, 0x0, 0x48045}, 0x20010840)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960656de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000100140007000000"], 0x90}, 0x1, 0x7}, 0x0)
modify_ldt$write(0x1, &(0x7f0000000140)={0x3, 0x20001000, 0x1000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
modify_ldt$write(0x1, &(0x7f0000000100)={0x28, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f00000002c0)=@add_del={0x3, &(0x7f0000000240)='macvlan0\x00'})
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x55e8, 0x0, 0x0, 0x4, 0x9, 0x1f, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac75e70000170000000400", "f4bd00000100000000000000000000000000000000ffffffffffffffe700", [0x3, 0x8000000000000000]}})
ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x3})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
syz_usb_control_io(r9, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="001000000000337c28164047db16f86025a0c81ccb295224"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_emit_ethernet(0x6f, &(0x7f00000008c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x61, 0xfffd, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x2d9, {[@timestamp={0x8, 0xa, 0x29, 0xfffffaa4}]}}, {"b03cd43733f12be37260d966141dd1a3e8b0c2a705d7e52dbb4fb4da1afb191ebd48102be97316c4aec36b4dff"}}}}}}, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)={0x666666666666763})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9)

26.343663395s ago: executing program 6 (id=4952):
r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000040))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002041)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0x6, 0x1, 0x7b})
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e002100f8ff1f070000000500000000000000a9e20000000000"], 0x28}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', <r5=>0x0})
bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r5, 0x1, {0x0, 0x1, 0x1}, 0xfe}, 0x18)
r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xffff, 0xee}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x40000000, {0xa}}, 0x14}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000140)={0x100, r9}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r10 = socket$netlink(0x10, 0x3, 0xb)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)

26.046556943s ago: executing program 6 (id=4955):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b}) (async, rerun: 64)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async)
read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x8, 0x4000010, r2, 0x82000000) (async)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b07200001400190900000000000000250a0819fe", @ANYRES32=r6, @ANYBLOB="14000100000000000000000000000000000000011400060000000000ffffffff0001000007000000"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) (async)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) (async)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmsg$tipc(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x400c0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r8, @ANYBLOB="003000000000000014001a80100004800c00098008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="18220000", @ANYRES32, @ANYRES16, @ANYRES64=0x0, @ANYRES32], 0x0}, 0x94) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000))

25.995231497s ago: executing program 2 (id=4956):
r0 = syz_usb_connect(0x2, 0x46, &(0x7f0000000840)=ANY=[@ANYRES16], 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', <r2=>0x0}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) (async, rerun: 64)
r4 = userfaultfd(0x80001) (rerun: 64)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x12d}) (async)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x5, @local, 0x8000}, 0x1c) (async)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000010f000/0x3000)=nil, 0x3000}, 0x4}) (async)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080)
r5 = syz_open_dev$audion(&(0x7f0000000240), 0x43, 0x1)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000200)=0x7fff) (async)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)=0x5) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) (async)
sendmsg$TIPC_NL_KEY_FLUSH(r5, 0x0, 0x14) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000001440)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001400)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x13, 0x7, 0x1, 0x0, "87269b6adaecadbf4f0780629edf09"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0xa0, 0x5, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x61, 0xc, "2cec35e6cb7e20bed54a4ed0805ab757736806ee7c54e5cb86ce5ede417fff4e1ec2251e42b8a5d2f59c16500c52051a3029550ae0eb525a49a3055eb4320ac86d389001a1576c3388a09ae5bf20bc148c75b593aa3a2a8e97d78a7b3d"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELRULE={0x1b8, 0x8, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x184, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x110, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x100, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xfa, 0x3, "fd586c163baff36d79052d8e2b5542b8856788ed7555ec0d162aa4bef3aa437b429f614612cf05bff654bbefa6be7d5f73e685da6556135c740042fb20fa8ec054f505ce4d2a2f61b5a8912535b495933701f10deaf7b3636191d01e23a4d5902cebf6191e6c004744eb81bf641cc5d3b14e19fb9814c743542d1c7acebaaf8d6079dcb72ef233339c3ec3cffb860c2ffb3a1e4ca2dad7022157c5a76107e2b67f2a32619caa9be616cb526368ef56e53dc49f2135a8a4abdc1891895be92f806450c68bf070d524bd5f2ab3d2924f708e3ceba887d4cb670179fdf8aecf77eeeb5659798cef84574c2d69df894ee875f1cd3a67dc40"}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x664, 0xb, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_DESC={0x128, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x114, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5cf5b30b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x67e8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x372}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc6b}]}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFTA_SET_EXPRESSIONS={0xac, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xaf}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8}]}}}]}, @NFTA_SET_DESC={0x458, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xf0, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x380}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x27}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2a84fd9c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x799f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x16c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x78, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x174, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x812}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe86}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ec}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x38}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd7cffac}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1b}]}, @NFT_MSG_NEWCHAIN={0x130, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x32, 0xc, "70fb06a73e98a709a3e23f7b267a4f1d2a0e7e83bae7914b1652b3e4440ef343ae466d73f4666e284e2936be21e5"}, @NFTA_CHAIN_USERDATA={0xe8, 0xc, "890e3437fc6de65105694aecbf82053ac80475dcacb1d02749913a86185862488fbef3ce6417d27e83104ab71f1c436b26731673e234a1234201dbac357e292ba64e1aed31acffbef8ea89f141184e1714b710aa7e2f5d3fd8ad1be7b9932ca0cd9ad6ff63400fd238f02834831f484fc97837db7ad996a7b515c01b286ac844b249fe5c19946541b22f518ea798b80309515292a0bbbdf0189d4c373d24fb120fd43fb491a631bdbb79873d367cf217af7c2ca6dd4ef7ae9e2e2f99a77f41ffbaccefef44e95cd438be9223cb0c7b8b2a9d1823cefc02ac4ccd19a8ca8f245b078f2a7a"}]}], {0x14}}, 0xb0c}, 0x1, 0x0, 0x0, 0xf35d1a3262468ff0}, 0x44091) (async)
recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0xf0b, 0x400000, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2, 0x34, 0x2, 0x0, 0x80}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40810}, 0x24040040) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000480), 0x10) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="020300030d0000000000000000000000030006000000000002000000000000000000000000000000030005000000000002000000ac1c140000000000000000000200090008000000e90000000000000002000100000000000000fbff00000000010018"], 0x68}, 0x1, 0x7}, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async, rerun: 32)
mmap(&(0x7f0000ec5000/0x4000)=nil, 0x4000, 0x400000e, 0x109132, 0xffffffffffffffff, 0x9a29b000) (async, rerun: 32)
syz_usb_control_io$uac2(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="400d610000006107436e6b0a87753e04540d923bd55e581e177f1d53c48dd3c74e756af4e8e6d0a009078147386cb258f0237e2e926cf3976d18c6860c1328aa54caab8c1d42e8c2bcb909ccb01ef7140657221b5ccd04bb0332122fb110613cd5920344fc4acb"], &(0x7f0000000400)=ANY=[@ANYBLOB="0003040000000403090cd67f66c0f9e565bc320001000042c8fdecd8539ac187fb868b13766fc6114f8d7de7b3549a"]}, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x40, 0x8, 0x70, "8304a7e5374f0708d0a53103b02cc35199ad63bd25c703a4191c5e1bdf6de1d7212fd3d2234c4dbf218323dff1633bf35abea1574b5b29b4b45f75a23ee578e0708aea59014005b095943516c4e40cc942415266aaf9216461a46fd975ad9fb2675b8e7ef4b63e9c165dd937646eb236"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)=ANY=[@ANYBLOB="208101000000a4c56cf234b70f5d165c556e0406a317861df2f77ce642526b0b08f19dbe104210b350fed4a5709889afd279c8849075"], &(0x7f0000000280)={0x20, 0x82, 0x3, "27a8fa"}, &(0x7f00000002c0)={0x20, 0x83, 0x1, 'B'}, &(0x7f0000000300)={0x20, 0x84, 0x4, 'W#$U'}, &(0x7f0000000340)={0x20, 0x85, 0x3, "1643b2"}}) (async)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1100000014000d00"], 0x24}, 0x1, 0x0, 0x0, 0x2404a855}, 0x44000)
mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000007)

25.818070515s ago: executing program 6 (id=4957):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000003940)=0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x4, 0x4)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mprotect(&(0x7f0000178000/0x4000)=nil, 0x4000, 0x100000d)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
r4 = dup2(r3, r3)
ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0)
read$char_usb(r4, &(0x7f00000000c0)=""/192, 0xc0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004810)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)=0x3f8e)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@wrmsr={0x65, 0x20, {0x12, 0x84}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee8000, 0xed7d}}, @set_irq_handler={0xc8, 0x20, {0xe2, 0x401}}, @nested_amd_invlpga={0x17d, 0x20, {0x54000, 0xbc01}}, @nested_vmresume={0x130, 0x18}, @wr_crn={0x67, 0x20, {0x3, 0xfffffffffffffff9}}, @nested_amd_clgi={0x17f, 0x10}], 0xc8})
r5 = syz_pidfd_open(0x0, 0x0)
pidfd_send_signal(r5, 0x29, 0x0, 0x0)

25.696310779s ago: executing program 5 (id=4958):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000700), 0x100, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x128, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000004}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x404c000}, 0x40c00)
read$FUSE(r1, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$FUSE_DIRENT(r2, &(0x7f0000000180)={0x30, 0x0, 0x0, [{0x5, 0x0, 0x8, 0x3, 'ethtool\x00'}]}, 0x30)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000000)={0x18, r4, 0x0, 0x0, &(0x7f00000004c0)})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r4, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10})
socket$inet(0x2, 0x3, 0x9)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r6 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400))
syz_usb_control_io$hid(r5, 0x0, 0x0)
r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x6, &(0x7f0000000240)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}})
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r8, 0x8004510b, &(0x7f0000000200))
r9 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2000000, 0xffffffff}})
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="a90018"], 0x0, 0x0, 0x0, 0x0})

25.628015778s ago: executing program 3 (id=4959):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/asound/seq/clients\x00', 0x41, 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80b, 0x9, 0x1, 0x10}, 0xb, 0x1, 0x8000032, 0x5, 0x9, 0x7, 0x9, 0x7, 0xfd, 0x7, {0xffff1c72, 0x23, 0x3, 0x8, 0x9, 0x800}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f000000a7c0)={0x2020}, 0x2055)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001540))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sndctrl(0x0, 0xe26, 0x101400)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000003040)='devices.allow\x00', 0x2, 0x0)
sendmmsg$unix(r5, &(0x7f0000004440), 0x0, 0x4000040)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read$FUSE(r5, &(0x7f0000006740)={0x2020}, 0x2020)

25.309781279s ago: executing program 6 (id=4960):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a"], 0xc4}}, 0x4c050)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000883e00000000000001"], 0xfdef)

24.994122321s ago: executing program 6 (id=4961):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f00000000c0))
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0x5}]}, 0x95}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00@\x00\x00\x00\x00'}}}}}}}, 0x0)

24.89093396s ago: executing program 6 (id=4962):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0xc9, 0x1, 0x0, 0x2000009, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0x0, 0x0, 0x40})
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}, 0x0, 0x30})
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x800}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x81}]}}}]}, 0x48}, 0x1, 0xba01}, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
writev(r3, &(0x7f0000001580)=[{&(0x7f0000000280)="99cb", 0x2}], 0x1)
ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000380), 0x2080, 0x0)
ioctl$int_out(r4, 0x2, &(0x7f0000000340))
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x3, {{0x2, 0xfffd, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r5=>0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x2a0040, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000480)=<r7=>0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000920000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xff5, &(0x7f0000001840)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11d}, 0x94)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
unshare(0x8040480)
recvmmsg(r9, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, &(0x7f0000000bc0))
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000002c0)=0x82f6, 0x4)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
kcmp(r5, r7, 0x4, r0, r11)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x8, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast1}}}, 0x108)

24.477069858s ago: executing program 1 (id=4963):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635002000000f30f3ff07baf80c66b850b9e7870f784f07bafc0cb015e6640f01c90fc758380f2ac00f218766b8010000000f01c1b8d0008ee80f7820", 0x45}], 0x1, 0x10, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, @dstype3={0x7, 0x7}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x4, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100]}, 0x20)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58)
syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)={0xb0000013})
unshare(0x22020400)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48)
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f0000000040)=0x8)

24.225114342s ago: executing program 3 (id=4964):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1ca0fe001a00010028bd7004fe000000000000010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004880}, 0x884)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000)

23.561322535s ago: executing program 3 (id=4965):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000400)={'tunl0\x00', <r4=>0x0, 0x0, 0x40, 0xaa9, 0x0, {{0x1f, 0x4, 0x0, 0x11, 0x7c, 0x64, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp_addr={0x44, 0x24, 0x99, 0x1, 0x0, [{@local, 0x1b}, {@remote, 0x88a}, {@broadcast, 0x94b2}, {@private=0xa010102, 0x8}]}, @ssrr={0x89, 0x1f, 0xbf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @broadcast, @empty, @private=0xa010101, @remote]}, @lsrr={0x83, 0x13, 0xda, [@empty, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @remote]}, @timestamp={0x44, 0x10, 0xba, 0x0, 0x8, [0x8f7, 0x1, 0x2]}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001900)={&(0x7f0000000b40)={0xd8c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x260, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'CT\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1b, 0x4, "cc296d0db5743577052686a2c15060b62984b3d90a9173"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8c46}, @ETHTOOL_A_BITSET_MASK={0x23, 0x5, "c4a80bcdf2df8a76428e47dfc5e92241e9f2fbb4f00ee1c234748b9a6a5b26"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*:$.$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&}\x03\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '((@[$[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "b0928cb813d716ce8be60ab31fd6c219ed95222053156d54a75d6bedc70062596d14f0f10992879c626bee3ddad37ede0054701d514314bff03115f4215787ea9ea90413a0f2086dbeb024fc68098da26218aa40d07208c8e14a68c7e6a76c873d070ef5a1894e5a88c5f1612841c1e8673d54cf00bc86565727835da70385d836275fc824f6df1c4f909c5beffa9f01fad1d4113f692aed0f9e04a14449af8fd017d3273bd08fc69069cd8ea6ba2355b68edc78cda92ae6812eae82d28b3c73f57e2d7eaf98f5bab7eae3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x7e, 0x5, "ebd16b2e4f867809be005ad7109ac9c21bfc1d7de4651bd85104447cbd2f730b2e29c20513b1072edabccc2874941b1bfedf0289b6a5294ef7671d494c3666543bdb1edd55cc6b34190b144047a581680bc3c145d10d7d57012b101b7d6915db1d148a9c343f6ccf8a5df40ee2b1230a258fbf8190686257bf67"}]}, @ETHTOOL_A_FEATURES_WANTED={0xd8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "c5c8fcaf133671d6fb97e22b7a4ec6c788541e5440029b9f4c6455269b49413ef138a40af10857aea020d8761cc60ca5f111196a015d18c01670aa4ce6c899ac17fe588ddabb64e2837c65ee7e6de30b2e9565c53812ed3e101a24d302"}, @ETHTOOL_A_BITSET_VALUE={0x68, 0x4, "15709b972625d1bb066c227de358a6bf3e866f8a0b50599c32682be553a01469e3e2058a603bccb7c7d1464e8830176123deb0c88cb87aaf819ff5321d0d6bc1ae88884108732bd693839e474443406f03ac57887e79c77a5a015b2156cc6adb1aa8faaa"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}, @ETHTOOL_A_FEATURES_WANTED={0x62c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_MASK={0x10, 0x5, "86fb9c787f7f78da0f12eaae"}, @ETHTOOL_A_BITSET_MASK={0xf9, 0x5, "38c915c1d475b1bfe9425e11758c75f5731fe78f1463c6cf559e112be0b2a66ea0aa0dc5b68dae2fc0a69147119141d5b3afae613aa26732f98d712e5c27af5da62fce444a6a4cf596f1a029bce1e50c4fc79c7665f49b129e5a88ac8f7522eca653fe1c72844f7744f49550e61579e1a9ea636b12429c2eddb9ccff770ff3cffca2879bd100b5e3e23333059d08bae84e56ea520e701f9384c922c5519ae71fe1475bfe8c911e0706909fa3fa019032b5486f2afad72459b2ff78b6740d5a9424f8094baa9505e9f53b65f8a7edabd679a53d1842f679b0524ff79cc1713cdaf94f8ef511b0097e602fa7deb1d12b5dd7ebda3005"}, @ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x120}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x25ba}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '!%-(}#:-\'-\'-'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '>/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'TRACE\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x7f, 0x4, "1a604c09aabdb971edf81067565982fe47f001eab30d4223cc2d8699862fd2ebb6a12bb7b94b7643957347b126a48cf9e54809e7ac4503838497f8c2c58572b6e61310d8a574b6beb71ebccc679afa1236d3dc71ac29f8aeae26e65851922a9a135ecc09c231092d7db6a66e48113673ceaafd1f4b5d75d6fb145d"}, @ETHTOOL_A_BITSET_BITS={0x354, 0x3, 0x0, 0x1, [{0x2ec, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x2c4, 0x2, '\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'recent\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/proc/vmstat\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x3a, 0x4, "ca12fc0e7be697b3c07bee221760d7e32defceb2bcde6a1a0ea65d8c2cd4a132cfab8c27e839dea009cff9dbdb07e17a9f5ffc30e0f3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}]}, @ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x254, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "22f44b36db5dbc7957b1c749a7abb14359e0d952cb7f3a24ab2d9f2699c350d3b4f9673f75240ed6d5f3bd3951e87443eed03e10d641f8453a6c3bf1d036fd17ff2f0e0299789c286f1dd3524f0ddc4fd57fe6e34017f6bbc64ce5fd1bc33d573c0dfa718e435c808f557ecbc37151189e050e7cff4065c6b2dd27da15384978c808aeadc6ba03e8d034b90adc9733cc961f0cdbf459b71e26"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "43530b46dc1c26f9c3229dac56aab38763cb4bc2f0caa7cf3f749bd21263cba12791b8c65512acfd25e0d34e2117f98ad86afeba9bb5b369184330c2f0f18e390518cae727b6ecc676e98e3d03895d3c248046beab44f0fa545d74ad8cbb54f4eacd31f10acc977843b67e8da8bca6684dfdc0ffc43e5eaeee2bb129cc1d1baa495242449633832782397e2ad5e69a2c1ae44e37b42f36bdf4f2240438cf39e586e4453a15d1"}, @ETHTOOL_A_BITSET_MASK={0xfb, 0x5, "0df2090c1ce68c47c75d231daaf1b47cbb214676c7e516ea94f03b79aa06d4c2307218eba47d0079949582e7861ea20aa66a317e0741e60d515a05741e545f28c3ba6588c6cf5de35cc38c08f5160b1be8b09d01339a48313dd549e9718fbc2a5a7f1e603de18a30c5f95531735b10f036c0ca48806e8525fd6e21013aa453674b34712adb439a7210e60360a9c50ab80f3b54db0a70ad8ebfea22052dca888ae5048ef168d5ba802613c42af42d096ddd8edeada24ebd50ea8c624d354f8caa89603029ce460835f7aa664b77f0a5c6dba56d282e2af86ce2357bc7d7cea1025709f153819c835ee0263931513a12ff41569d96d99aa7"}]}, @ETHTOOL_A_FEATURES_WANTED={0xdc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa, 0x4, "6a0f363e7cfe"}, @ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "85d2d26aaf8363cdadd5ee730f66778aca07483b5b6a21f4853c8358410f2ea46e14375481efc0983a3acb7c0ac5d6565cb2e0e86277b9747dd8de88581d734d6261c13c578df8e4a2af33699fdbde74fdef5c00"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'set\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xaa)\x00'}]}]}]}]}, 0xd8c}, 0x1, 0x0, 0x0, 0x24000001}, 0x38cbfb300e1613d1)
r6 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xb)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522)
r8 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x4000})
ioctl$F2FS_IOC_GET_FEATURES(r8, 0x8004f50c, &(0x7f0000000300))
r9 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r8, 0x40106e80, &(0x7f0000000340)={0xfff, 0x1})
write$P9_RVERSION(r9, &(0x7f0000002200)=ANY=[], 0xfffffcd9)
socket(0x840000000002, 0x3, 0xff)
r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r10, 0xc018643a, &(0x7f0000000080)={0x1, 0x0, 0x3})
ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000100)=0x40005)
close_range(r1, 0xffffffffffffffff, 0x0)

20.450298629s ago: executing program 5 (id=4966):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_setup(0x1b56, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000140)="a22c52241d76090000005895ee19a5a73072e680a11a8ea67d46fa11b8e9911d9f7c0d6897e33eb84cd515ce71fcb367e330d1", 0x33, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x6}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x44080)
shutdown(r2, 0x2)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x3, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x39b})
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10)
r7 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r7, 0x402, 0x5)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r8, 0x6000000)
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18})
syz_emit_ethernet(0x227, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050)

20.335344068s ago: executing program 2 (id=4967):
unshare(0x2a020400)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x44)
recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x800000000000001e)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40102, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x35dfdbf8, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r9, {0x0, 0x8b3391ce9f0dc488}, {0xfff2, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x54, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xe}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8d50}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xffffffb4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x2}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xa}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x7fffffff}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x10000}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004070}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
close(r2)
r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4400, 0x0)
ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000500)=""/118, 0x76}, {&(0x7f00000018c0)=""/193, 0xc1}, {&(0x7f0000000680)=""/4089, 0x4cf}, {&(0x7f0000000080)=""/132, 0x84}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000440)=""/43, 0x2b}], 0x6}, 0x80000007}], 0x3, 0x40002000, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38)

17.137284083s ago: executing program 3 (id=4968):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141b41, 0x191)
fallocate(r0, 0x0, 0x1000000, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x2000000)
creat(&(0x7f00000000c0)='./file0\x00', 0x50)

15.834952352s ago: executing program 3 (id=4969):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
fcntl$setown(r0, 0x8, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async)
fcntl$setown(r0, 0x8, 0x0) (async)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) (async)

15.506866062s ago: executing program 3 (id=4970):
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
r0 = socket$inet6(0xa, 0x80000, 0x44)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0fc79eb78200000fc72ec4c2798e239a040001001000b8010000000f01c1f0875d5426657f550fbea50200000066b816008ee066b80d010f00d8", 0x3a}], 0x1, 0x42, &(0x7f00000001c0)=[@cr4], 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40f20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x8}]}}}]}, 0x44}}, 0x0)
r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000)
ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x10001)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba01006f1000004800128009000100766c616e000000003800028006000100040000000c00020011000000130000001c0003805c00010004000000ac87e9000c00010007000000010000000400048008000500", @ANYRES32=r6, @ANYBLOB="0500110001"], 0x78}}, 0x8004002)
syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x8100)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) (async)
socket$inet6(0xa, 0x80000, 0x44) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0fc79eb78200000fc72ec4c2798e239a040001001000b8010000000f01c1f0875d5426657f550fbea50200000066b816008ee066b80d010f00d8", 0x3a}], 0x1, 0x42, &(0x7f00000001c0)=[@cr4], 0x1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40f20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x8}]}}}]}, 0x44}}, 0x0) (async)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) (async)
ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x10001) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba01006f1000004800128009000100766c616e000000003800028006000100040000000c00020011000000130000001c0003805c00010004000000ac87e9000c00010007000000010000000400048008000500", @ANYRES32=r6, @ANYBLOB="0500110001"], 0x78}}, 0x8004002) (async)
syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x8100) (async)

8.886495652s ago: executing program 34 (id=4962):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0xc9, 0x1, 0x0, 0x2000009, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0x0, 0x0, 0x40})
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}, 0x0, 0x30})
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x800}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x81}]}}}]}, 0x48}, 0x1, 0xba01}, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
writev(r3, &(0x7f0000001580)=[{&(0x7f0000000280)="99cb", 0x2}], 0x1)
ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000380), 0x2080, 0x0)
ioctl$int_out(r4, 0x2, &(0x7f0000000340))
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x3, {{0x2, 0xfffd, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r5=>0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x2a0040, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000480)=<r7=>0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000920000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xff5, &(0x7f0000001840)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11d}, 0x94)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
unshare(0x8040480)
recvmmsg(r9, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, &(0x7f0000000bc0))
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000002c0)=0x82f6, 0x4)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
kcmp(r5, r7, 0x4, r0, r11)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x8, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast1}}}, 0x108)

3.290323725s ago: executing program 35 (id=4963):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635002000000f30f3ff07baf80c66b850b9e7870f784f07bafc0cb015e6640f01c90fc758380f2ac00f218766b8010000000f01c1b8d0008ee80f7820", 0x45}], 0x1, 0x10, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, @dstype3={0x7, 0x7}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x4, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100]}, 0x20)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58)
syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)={0xb0000013})
unshare(0x22020400)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48)
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f0000000040)=0x8)

3.201225882s ago: executing program 36 (id=4967):
unshare(0x2a020400)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x44)
recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x800000000000001e)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40102, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x35dfdbf8, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r9, {0x0, 0x8b3391ce9f0dc488}, {0xfff2, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x54, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xe}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8d50}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xffffffb4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x2}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xa}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x7fffffff}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x10000}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004070}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
close(r2)
r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4400, 0x0)
ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000500)=""/118, 0x76}, {&(0x7f00000018c0)=""/193, 0xc1}, {&(0x7f0000000680)=""/4089, 0x4cf}, {&(0x7f0000000080)=""/132, 0x84}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000440)=""/43, 0x2b}], 0x6}, 0x80000007}], 0x3, 0x40002000, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38)

2.990894907s ago: executing program 37 (id=4966):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_setup(0x1b56, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000140)="a22c52241d76090000005895ee19a5a73072e680a11a8ea67d46fa11b8e9911d9f7c0d6897e33eb84cd515ce71fcb367e330d1", 0x33, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x6}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x44080)
shutdown(r2, 0x2)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x3, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x39b})
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10)
r7 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r7, 0x402, 0x5)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r8, 0x6000000)
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18})
syz_emit_ethernet(0x227, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050)

0s ago: executing program 38 (id=4970):
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
r0 = socket$inet6(0xa, 0x80000, 0x44)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0fc79eb78200000fc72ec4c2798e239a040001001000b8010000000f01c1f0875d5426657f550fbea50200000066b816008ee066b80d010f00d8", 0x3a}], 0x1, 0x42, &(0x7f00000001c0)=[@cr4], 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40f20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x8}]}}}]}, 0x44}}, 0x0)
r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000)
ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x10001)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba01006f1000004800128009000100766c616e000000003800028006000100040000000c00020011000000130000001c0003805c00010004000000ac87e9000c00010007000000010000000400048008000500", @ANYRES32=r6, @ANYBLOB="0500110001"], 0x78}}, 0x8004002)
syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x8100)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) (async)
socket$inet6(0xa, 0x80000, 0x44) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0fc79eb78200000fc72ec4c2798e239a040001001000b8010000000f01c1f0875d5426657f550fbea50200000066b816008ee066b80d010f00d8", 0x3a}], 0x1, 0x42, &(0x7f00000001c0)=[@cr4], 0x1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40f20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x8}]}}}]}, 0x44}}, 0x0) (async)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) (async)
ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x10001) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba01006f1000004800128009000100766c616e000000003800028006000100040000000c00020011000000130000001c0003805c00010004000000ac87e9000c00010007000000010000000400048008000500", @ANYRES32=r6, @ANYBLOB="0500110001"], 0x78}}, 0x8004002) (async)
syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x8100) (async)

kernel console output (not intermixed with test programs):

0 ses=4294967295 subj=unconfined pid=32083 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1021.973263][   T29] audit: type=1326 audit(1777174398.532:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32083 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1021.973386][T32057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1022.005299][   T29] audit: type=1326 audit(1777174398.532:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32083 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1022.044278][   T29] audit: type=1326 audit(1777174398.542:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32083 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1022.069777][T32057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1022.070448][   T29] audit: type=1326 audit(1777174398.542:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32083 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1022.102440][T32057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1022.104267][   T29] audit: type=1326 audit(1777174398.542:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32083 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1022.149084][T13282] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1022.165231][   T29] audit: type=1326 audit(1777174398.542:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32083 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1022.185726][T13282] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1022.189504][   T29] audit: type=1326 audit(1777174398.542:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32083 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1022.203015][T13282] usb 6-1: can't read configurations, error -71
[ 1022.295809][T13283] usb 2-1: USB disconnect, device number 117
[ 1022.318004][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1022.336242][T31852] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1022.378677][T31852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1022.427374][T31852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1022.542847][T13151] batman_adv: batadv0: Interface deactivated: macsec1
[ 1022.557454][T13151] batman_adv: batadv0: Removing interface: macsec1
[ 1022.602481][T31852] hsr_slave_0: entered promiscuous mode
[ 1022.614322][T31852] hsr_slave_1: entered promiscuous mode
[ 1022.622179][T31852] debugfs: 'hsr0' already exists in 'hsr'
[ 1022.627933][T31852] Cannot create hsr debugfs directory
[ 1022.633871][T32166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4605'.
[ 1022.741316][T13151] hsr_slave_0: left promiscuous mode
[ 1022.753572][T13151] hsr_slave_1: left promiscuous mode
[ 1022.770438][T13151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1022.783272][T13151] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1022.802845][T13151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1022.817438][T13151] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1022.863755][T13151] veth1_vlan: left promiscuous mode
[ 1022.871667][T13151] veth0_vlan: left promiscuous mode
[ 1022.900001][T13283] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1023.001957][T17728] Bluetooth: hci4: command tx timeout
[ 1023.121285][T13283] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[ 1023.145842][T13283] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1023.155622][T13283] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1023.171829][T13283] usb 2-1: config 220 has no interface number 2
[ 1023.178501][T13283] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1023.193765][T13283] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1023.201974][T13283] usb 2-1: config 220 interface 76 has no altsetting 0
[ 1023.209543][T13283] usb 2-1: config 220 interface 1 has no altsetting 0
[ 1023.219429][T13283] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1023.229160][T13283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.237305][T13283] usb 2-1: Product: syz
[ 1023.244781][T13283] usb 2-1: Manufacturer: syz
[ 1023.250537][T13283] usb 2-1: SerialNumber: syz
[ 1023.301556][T13151] team_slave_1 (unregistering): left allmulticast mode
[ 1023.309219][T13282] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[ 1023.320641][T13151] team0 (unregistering): Port device team_slave_1 removed
[ 1023.345800][T13151] team_slave_0 (unregistering): left allmulticast mode
[ 1023.355904][T13151] team0 (unregistering): Port device team_slave_0 removed
[ 1023.448570][T13151] dummy0 (unregistering): left allmulticast mode
[ 1023.464083][T13151] team0 (unregistering): Port device dummy0 removed
[ 1023.468934][T13282] usb 6-1: Using ep0 maxpacket: 16
[ 1023.482210][T13282] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1023.493651][T13282] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1023.503476][T13282] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1023.513250][T13282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.523030][T13282] usb 6-1: Product: syz
[ 1023.527262][T13282] usb 6-1: Manufacturer: syz
[ 1023.533131][T13282] usb 6-1: SerialNumber: syz
[ 1023.545338][T13282] usb 6-1: config 0 descriptor??
[ 1023.603582][ T5286] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1023.831897][T13282] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input94
[ 1023.998317][    C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1024.011770][T13282] imon:send_packet: packet tx failed (-71)
[ 1024.040074][T13282] imon 6-1:0.0: panel buttons/knobs setup failed
[ 1024.124024][T32299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4609'.
[ 1024.199959][T13282] rc_core: IR keymap rc-imon-pad not found
[ 1024.213201][T13282] Registered IR keymap rc-empty
[ 1024.228969][T13282] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1024.254461][T13282] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1024.284356][T13282] imon:send_packet: packet tx failed (-71)
[ 1024.320664][T13282] imon 6-1:0.0: remote input dev register failed
[ 1024.333090][T13282] imon 6-1:0.0: imon_init_intf0: rc device setup failed
[ 1024.462266][T13282] imon 6-1:0.0: unable to initialize intf0, err 0
[ 1024.482749][T13282] imon:imon_probe: failed to initialize context!
[ 1024.507822][T13282] imon 6-1:0.0: unable to register, err -19
[ 1024.528546][T13282] usb 6-1: USB disconnect, device number 102
[ 1025.080681][T17728] Bluetooth: hci4: command tx timeout
[ 1025.174448][T32357] loop5: detected capacity change from 0 to 7
[ 1025.195193][T32357] Dev loop5: unable to read RDB block 7
[ 1025.201620][T31852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1025.208447][T32357]  loop5: unable to read partition table
[ 1025.217308][T31852] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1025.224999][T32357] loop5: partition table beyond EOD, truncated
[ 1025.232273][T31852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1025.240399][T32357] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1025.265338][T31852] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1025.286445][T31852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1025.323931][T31852] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1025.353413][T31852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1025.368180][T31852] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1025.503150][T31852] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1025.558164][T31852] 8021q: adding VLAN 0 to HW filter on device team0
[ 1025.585203][T13139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1025.592398][T13139] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1025.664162][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1025.671369][ T7428] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1025.821880][T31852] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1025.926551][T31852] veth0_vlan: entered promiscuous mode
[ 1025.945084][T13283] usb 2-1: selecting invalid altsetting 0
[ 1025.965671][T31852] veth1_vlan: entered promiscuous mode
[ 1025.977687][T13283] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1025.995474][T13283] uvcvideo 2-1:220.0: No valid video chain found.
[ 1026.027877][T13283] usb 2-1: selecting invalid altsetting 0
[ 1026.043917][T13283] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[ 1026.076000][T13283] usb 2-1: USB disconnect, device number 118
[ 1026.091458][T31852] veth0_macvtap: entered promiscuous mode
[ 1026.127173][T31852] veth1_macvtap: entered promiscuous mode
[ 1026.161259][T31852] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1026.196778][T31852] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1026.215615][T14073] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1026.237234][T14073] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1026.256739][T14073] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1026.277622][T14073] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1026.456710][T14073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1026.477674][T14073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1026.523139][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1026.538522][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1026.676999][T32453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4616'.
[ 1026.812694][T32463] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4617'.
[ 1027.131424][T32488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4621'.
[ 1027.143015][T32488] xt_hashlimit: size too large, truncated to 1048576
[ 1027.166306][T17728] Bluetooth: hci4: command tx timeout
[ 1027.191773][T13297] usb 6-1: new low-speed USB device number 103 using dummy_hcd
[ 1027.350158][T13297] usb 6-1: Invalid ep0 maxpacket: 64
[ 1027.499319][T13297] usb 6-1: new low-speed USB device number 104 using dummy_hcd
[ 1027.658926][T13297] usb 6-1: Invalid ep0 maxpacket: 64
[ 1027.666653][T13297] usb usb6-port1: attempt power cycle
[ 1028.010943][T13297] usb 6-1: new low-speed USB device number 105 using dummy_hcd
[ 1028.051946][T13297] usb 6-1: Invalid ep0 maxpacket: 64
[ 1028.059839][ T5753] usb 3-1: new full-speed USB device number 110 using dummy_hcd
[ 1028.140626][T32543] loop2: detected capacity change from 0 to 7
[ 1028.199064][T13297] usb 6-1: new low-speed USB device number 106 using dummy_hcd
[ 1028.216997][T32546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4626'.
[ 1028.231050][T13297] usb 6-1: Invalid ep0 maxpacket: 64
[ 1028.241466][ T5753] usb 3-1: config 0 has an invalid interface number: 176 but max is 2
[ 1028.255368][ T5753] usb 3-1: config 0 has an invalid interface number: 3 but max is 2
[ 1028.264345][ T5753] usb 3-1: config 0 has no interface number 0
[ 1028.270803][ T5753] usb 3-1: config 0 has no interface number 1
[ 1028.279675][T13297] usb usb6-port1: unable to enumerate USB device
[ 1028.281558][ T5753] usb 3-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30
[ 1028.299260][ T5753] usb 3-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1028.314852][ T5753] usb 3-1: config 0 interface 3 has no altsetting 0
[ 1028.322627][ T5753] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[ 1028.333328][T32543] Dev loop2: unable to read RDB block 7
[ 1028.339203][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.349534][ T5753] usb 3-1: config 0 descriptor??
[ 1028.374302][T32543]  loop2: AHDI p1 p2
[ 1028.385374][T32543] loop2: partition table partially beyond EOD, truncated
[ 1028.402934][T32543] loop2: p1 start 1700753509 is beyond EOD, truncated
[ 1028.430503][ T4991] Dev loop2: unable to read RDB block 7
[ 1028.440914][ T4991]  loop2: AHDI p1 p2
[ 1028.449400][ T4991] loop2: partition table partially beyond EOD, truncated
[ 1028.487384][ T4991] loop2: p1 start 1700753509 is beyond EOD, truncated
[ 1028.573099][T32524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1028.588426][T32524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1028.608556][ T5753] usb 3-1: Could not set interface, error -71
[ 1028.653803][ T5753] usb 3-1: selecting invalid altsetting 0
[ 1028.677383][ T5753] usb 3-1: Could not set interface, error -22
[ 1028.718996][ T5753] usb 3-1: USB disconnect, device number 110
[ 1028.923862][T32588] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4632'.
[ 1028.935255][T32588] xt_hashlimit: size too large, truncated to 1048576
[ 1029.109531][T13297] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1029.205734][T32600] loop8: detected capacity change from 0 to 39
[ 1029.258912][T13297] usb 2-1: Using ep0 maxpacket: 32
[ 1029.304667][T13297] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1029.329534][T13297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1029.353408][T13297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1029.376205][T13297] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1029.395625][T13297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1029.421780][T13297] usb 2-1: config 0 descriptor??
[ 1029.441085][T32581] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1029.520002][T13297] hub 2-1:0.0: USB hub found
[ 1029.872528][T13297] hub 2-1:0.0: 2 ports detected
[ 1029.875714][T32625] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in;
[ 1029.875714][T32625]    program syz.5.4637 not setting count and/or reply_len properly
[ 1030.058567][T32629] 8021q: VLANs not supported on vcan0
[ 1030.579468][T32639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4641'.
[ 1030.840397][   T10] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 1031.008937][   T10] usb 3-1: Using ep0 maxpacket: 8
[ 1031.015898][   T10] usb 3-1: config 8 has an invalid interface number: 108 but max is 1
[ 1031.024671][   T10] usb 3-1: config 8 has an invalid interface descriptor of length 2, skipping
[ 1031.033668][   T10] usb 3-1: config 8 has an invalid interface number: 135 but max is 1
[ 1031.042164][   T10] usb 3-1: config 8 has no interface number 0
[ 1031.048507][   T10] usb 3-1: config 8 has no interface number 1
[ 1031.054755][   T10] usb 3-1: config 8 interface 108 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 1031.066065][   T10] usb 3-1: config 8 interface 108 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1031.079641][   T10] usb 3-1: config 8 interface 108 has no altsetting 0
[ 1031.093712][   T10] usb 3-1: config 8 interface 135 has no altsetting 0
[ 1031.109005][ T5753] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 1031.125806][   T10] usb 3-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice=77.df
[ 1031.152472][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1031.191469][   T10] usb 3-1: Product: syz
[ 1031.202076][   T10] usb 3-1: Manufacturer: syz
[ 1031.213989][   T10] usb 3-1: SerialNumber: syz
[ 1031.217849][T32656] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4643'.
[ 1031.235663][T32656] xt_hashlimit: size too large, truncated to 1048576
[ 1031.276875][ T5753] usb 6-1: config index 0 descriptor too short (expected 8195, got 36)
[ 1031.297668][ T5753] usb 6-1: config 220 has too many interfaces: 53, using maximum allowed: 32
[ 1031.308065][ T5753] usb 6-1: config 220 has an invalid descriptor of length 108, skipping remainder of the config
[ 1031.319658][ T5753] usb 6-1: config 220 has 0 interfaces, different from the descriptor's value: 53
[ 1031.333265][ T5753] usb 6-1: string descriptor 0 read error: -22
[ 1031.340189][ T5753] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.40
[ 1031.352077][ T5753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1031.573616][T32677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1031.599542][T32677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1031.610907][T32677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1031.621304][T32683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1031.623205][T32677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1031.651315][T32683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1032.005784][   T10] whiteheat 3-1:8.108: required endpoints missing
[ 1032.019540][   T10] whiteheat 3-1:8.135: required endpoints missing
[ 1032.037345][   T10] usb 3-1: USB disconnect, device number 111
[ 1032.293684][ T5753] usb 6-1: USB disconnect, device number 107
[ 1032.360992][T13291] usb 2-1: USB disconnect, device number 119
[ 1032.367111][T13297] hub 2-1:0.0: set hub depth failed
[ 1032.739185][ T5753] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 1032.902854][ T5753] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1032.912334][ T5753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.928991][ T5753] usb 6-1: Product: syz
[ 1032.934846][ T5753] usb 6-1: Manufacturer: syz
[ 1032.940002][ T5753] usb 6-1: SerialNumber: syz
[ 1032.951955][ T5753] usb 6-1: config 0 descriptor??
[ 1033.328945][   T10] usb 3-1: new full-speed USB device number 112 using dummy_hcd
[ 1033.379678][T32733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1033.391264][T32733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1033.813061][T32733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1033.823986][T32733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1033.849609][ T5753] usb 6-1: Firmware version (0.0) predates our first public release.
[ 1033.863578][ T5753] usb 6-1: Please update to version 0.2 or newer
[ 1033.924989][ T2363] pvrusb2: request_firmware fatal error with code=-110
[ 1033.940937][ T2363] pvrusb2: Failure uploading firmware1
[ 1033.958368][ T2363] pvrusb2: Device initialization was not successful.
[ 1033.967681][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1033.978729][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1034.001317][T13290] pvrusb2: Device being rendered inoperable
[ 1034.001617][ T5753] usb 6-1: USB disconnect, device number 108
[ 1034.349965][T13290] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1034.597386][  T327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4655'.
[ 1035.195209][  T342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4656'.
[ 1035.237264][  T343] syzkaller0: entered promiscuous mode
[ 1035.244311][  T343] syzkaller0: entered allmulticast mode
[ 1035.311270][  T342] xt_hashlimit: size too large, truncated to 1048576
[ 1035.950713][T13290] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1036.082833][  T368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4661'.
[ 1036.111073][T13290] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1036.131273][T13290] usb 4-1: config 0 has no interfaces?
[ 1036.145617][T13290] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1036.165677][T13290] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1036.174807][T13290] usb 4-1: Product: syz
[ 1036.181048][T13290] usb 4-1: Manufacturer: syz
[ 1036.203610][T13290] usb 4-1: config 0 descriptor??
[ 1036.442463][   T29] kauditd_printk_skb: 59 callbacks suppressed
[ 1036.442480][   T29] audit: type=1326 audit(1777174413.072:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=389 comm="syz.5.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891f9cdd9 code=0x7ffc0000
[ 1036.473315][   T29] audit: type=1326 audit(1777174413.072:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=389 comm="syz.5.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891f9cdd9 code=0x7ffc0000
[ 1036.478175][ T5753] usb 4-1: USB disconnect, device number 109
[ 1036.510811][   T29] audit: type=1326 audit(1777174413.102:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=389 comm="syz.5.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3891f9cdd9 code=0x7ffc0000
[ 1036.535272][   T29] audit: type=1326 audit(1777174413.102:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=389 comm="syz.5.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891f9cdd9 code=0x7ffc0000
[ 1036.559876][   T29] audit: type=1326 audit(1777174413.102:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=389 comm="syz.5.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f3891f9cdd9 code=0x7ffc0000
[ 1036.585304][   T29] audit: type=1326 audit(1777174413.102:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=389 comm="syz.5.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891f9cdd9 code=0x7ffc0000
[ 1036.610031][   T29] audit: type=1400 audit(1777174413.102:1933): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26090260 pid=358 comm="syz.3.4660"
[ 1036.630155][T13297] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1036.638006][   T29] audit: type=1326 audit(1777174413.102:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=389 comm="syz.5.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3891f5d60e code=0x7ffc0000
[ 1036.661969][   T29] audit: type=1326 audit(1777174413.102:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=389 comm="syz.5.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3891f9ca6b code=0x7ffc0000
[ 1036.687954][   T29] audit: type=1326 audit(1777174413.132:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=389 comm="syz.5.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3891f9ca6b code=0x7ffc0000
[ 1036.738925][T13282] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[ 1036.809131][T13297] usb 2-1: Using ep0 maxpacket: 8
[ 1036.818350][T13297] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1036.828417][T13297] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1036.837054][T13297] usb 2-1: Product: syz
[ 1036.841947][T13297] usb 2-1: Manufacturer: syz
[ 1036.846551][T13297] usb 2-1: SerialNumber: syz
[ 1036.854529][T13297] usb 2-1: config 0 descriptor??
[ 1036.862506][T13297] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1036.879877][T13282] usb 6-1: device descriptor read/64, error -71
[ 1037.119456][T13282] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[ 1037.183058][  T410] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1037.269179][T13282] usb 6-1: device descriptor read/64, error -71
[ 1037.379224][T13282] usb usb6-port1: attempt power cycle
[ 1037.482837][  T383] syzkaller0: entered promiscuous mode
[ 1037.488411][  T383] syzkaller0: entered allmulticast mode
[ 1037.610637][T13297] gspca_zc3xx: reg_w_i err -71
[ 1037.615554][T13297] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1037.627601][T13297] usb 2-1: USB disconnect, device number 120
[ 1037.730360][T13282] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 1037.749660][T13282] usb 6-1: device descriptor read/8, error -71
[ 1037.986889][  T428] syzkaller0: entered promiscuous mode
[ 1037.992588][  T428] syzkaller0: entered allmulticast mode
[ 1037.999363][T13282] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 1038.030404][T13282] usb 6-1: device descriptor read/8, error -71
[ 1038.158487][T13282] usb usb6-port1: unable to enumerate USB device
[ 1038.303830][  T453] vivid-001: =================  START STATUS  =================
[ 1038.311844][  T453] vivid-001: Radio HW Seek Mode: Bounded
[ 1038.320703][  T453] vivid-001: Radio Programmable HW Seek: false
[ 1038.329285][  T453] vivid-001: RDS Rx I/O Mode: Block I/O
[ 1038.336016][  T453] vivid-001: Generate RBDS Instead of RDS: false
[ 1038.344294][  T453] vivid-001: RDS Reception: true
[ 1038.350707][T13297] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1038.359444][  T453] vivid-001: RDS Program Type: 0 inactive
[ 1038.365882][  T453] vivid-001: RDS PS Name:  inactive
[ 1038.371294][  T453] vivid-001: RDS Radio Text:  inactive
[ 1038.376823][  T453] vivid-001: RDS Traffic Announcement: false inactive
[ 1038.383759][  T453] vivid-001: RDS Traffic Program: false inactive
[ 1038.391131][  T453] vivid-001: RDS Music: false inactive
[ 1038.396741][  T453] vivid-001: ==================  END STATUS  ==================
[ 1038.469102][T13282] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1038.510871][T13297] usb 3-1: config 0 has an invalid interface number: 199 but max is 1
[ 1038.538968][T13297] usb 3-1: config 0 has no interface number 1
[ 1038.546911][  T458] loop5: detected capacity change from 0 to 7
[ 1038.547512][T13297] usb 3-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0
[ 1038.566603][  T458] Dev loop5: unable to read RDB block 7
[ 1038.571330][T13297] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1038.578734][  T458]  loop5: unable to read partition table
[ 1038.585997][T13297] usb 3-1: config 0 interface 199 has no altsetting 0
[ 1038.589638][  T458] loop5: partition table beyond EOD, truncated
[ 1038.597375][T13297] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[ 1038.604951][  T458] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1038.611423][T13297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1038.630448][T13297] usb 3-1: SerialNumber: syz
[ 1038.642366][T13297] usb 3-1: config 0 descriptor??
[ 1038.649663][T13282] usb 2-1: Using ep0 maxpacket: 8
[ 1038.678312][T13282] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1038.702639][T13282] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1038.712743][T13282] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1038.719999][T13282] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[ 1038.734248][T13282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1038.765380][T13282] usb 2-1: config 0 descriptor??
[ 1038.913101][  T438] syzkaller0: entered promiscuous mode
[ 1038.918652][  T438] syzkaller0: entered allmulticast mode
[ 1038.998932][ T5753] usb 4-1: new full-speed USB device number 110 using dummy_hcd
[ 1039.018295][ T5625] kworker/0:4 (5625) used greatest stack depth: 14872 bytes left
[ 1039.171380][ T5753] usb 4-1: descriptor type invalid, skip
[ 1039.177405][ T5753] usb 4-1: descriptor type invalid, skip
[ 1039.185751][ T5753] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1039.196432][ T5753] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1039.209101][ T5753] usb 4-1: language id specifier not provided by device, defaulting to English
[ 1039.220733][ T5753] usb 4-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40
[ 1039.230478][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1039.238913][ T5753] usb 4-1: Product: Г
[ 1039.243542][ T5753] usb 4-1: SerialNumber: 榔ↈ��躵޺鋜戾ॽ
[ 1039.266670][  T447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.299978][  T447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.331736][T13282] smartjoyplus 0003:6666:8804.0040: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.1-1/input0
[ 1039.344887][T13282] smartjoyplus 0003:6666:8804.0040: Force feedback for SmartJoy PLUS PS2/USB adapter
[ 1039.466529][ T5753] usb 4-1: USB disconnect, device number 110
[ 1039.545315][T13282] usb 2-1: USB disconnect, device number 121
[ 1040.267855][  T521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4679'.
[ 1040.543620][  T532] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4681'.
[ 1040.642008][  T529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4680'.
[ 1042.775373][T13297] uvcvideo 3-1:0.199: Found UVC 0.00 device <unnamed> (0002:0000)
[ 1042.818598][T13297] uvcvideo 3-1:0.199: No valid video chain found.
[ 1042.886929][T13297] usb 3-1: USB disconnect, device number 113
[ 1042.936308][  T558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1042.952824][  T558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1042.990135][  T571] loop5: detected capacity change from 0 to 7
[ 1042.998407][  T571] Dev loop5: unable to read RDB block 7
[ 1043.008870][  T571]  loop5: unable to read partition table
[ 1043.016820][  T571] loop5: partition table beyond EOD, truncated
[ 1043.023412][  T571] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1043.039571][ T4991] Dev loop5: unable to read RDB block 7
[ 1043.048366][ T4991]  loop5: unable to read partition table
[ 1043.055844][ T4991] loop5: partition table beyond EOD, truncated
[ 1043.248899][T13297] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1043.398906][T13297] usb 3-1: Using ep0 maxpacket: 8
[ 1043.405837][T13297] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1043.415428][T13297] usb 3-1: config 1 has an invalid descriptor of length 10, skipping remainder of the config
[ 1043.425731][T13297] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 115, changing to 10
[ 1043.437239][T13297] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x8E has invalid maxpacket 25441, setting to 1024
[ 1043.448433][T13297] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1043.455154][T13291] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1043.465155][T13297] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1043.474388][T13297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1043.482483][T13297] usb 3-1: Product: syz
[ 1043.486625][T13297] usb 3-1: Manufacturer: syz
[ 1043.490272][T13283] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 1043.491333][T13297] usb 3-1: SerialNumber: syz
[ 1043.611112][T13291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1043.622233][T13291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1043.632220][T13291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1043.646136][T13291] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1043.655425][T13291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.666040][T13291] usb 2-1: config 0 descriptor??
[ 1043.687104][T13283] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1043.696390][T13283] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1043.707322][T13283] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1043.717060][T13283] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1043.808732][T13297] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1043.822628][T13297] usb 3-1: USB disconnect, device number 114
[ 1043.856464][T12772] udevd[12772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1043.898725][T13283] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1043.911624][T13283] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1043.913067][  T589] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[ 1043.920425][T13283] usb 6-1: Product: syz
[ 1043.932562][T13283] usb 6-1: Manufacturer: syz
[ 1043.947681][T13283] cdc_wdm 6-1:1.0: skipping garbage
[ 1043.953299][T13283] cdc_wdm 6-1:1.0: skipping garbage
[ 1043.958594][T13283] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1044.039188][ T5753] usb 4-1: new full-speed USB device number 111 using dummy_hcd
[ 1044.143748][T13291] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1044.205773][ T5753] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1044.218906][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.230569][ T5753] usb 4-1: Product: syz
[ 1044.234778][ T5753] usb 4-1: Manufacturer: syz
[ 1044.240266][ T5753] usb 4-1: SerialNumber: syz
[ 1044.251377][ T5753] usb 4-1: config 0 descriptor??
[ 1044.279810][ T5753] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1044.317495][T13283] usb 6-1: USB disconnect, device number 113
[ 1044.678154][ T5753] gspca_stk1135: reg_w 0x3 err -71
[ 1044.688616][ T5753] gspca_stk1135: serial bus timeout: status=0x00
[ 1044.695533][ T5753] gspca_stk1135: Sensor write failed
[ 1044.701385][ T5753] gspca_stk1135: serial bus timeout: status=0x00
[ 1044.707882][ T5753] gspca_stk1135: Sensor write failed
[ 1044.713448][ T5753] gspca_stk1135: serial bus timeout: status=0x00
[ 1044.720674][ T5753] gspca_stk1135: Sensor read failed
[ 1044.726059][ T5753] gspca_stk1135: serial bus timeout: status=0x00
[ 1044.732460][ T5753] gspca_stk1135: Sensor read failed
[ 1044.738770][ T5753] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1044.742699][T13291] usb 2-1: USB disconnect, device number 122
[ 1044.745815][ T5753] gspca_stk1135: serial bus timeout: status=0x00
[ 1044.762037][ T5753] gspca_stk1135: Sensor read failed
[ 1044.767671][ T5753] gspca_stk1135: serial bus timeout: status=0x00
[ 1044.774287][ T5753] gspca_stk1135: Sensor read failed
[ 1044.779989][ T5753] gspca_stk1135: serial bus timeout: status=0x00
[ 1044.786954][ T5753] gspca_stk1135: Sensor write failed
[ 1044.792758][ T5753] gspca_stk1135: serial bus timeout: status=0x00
[ 1044.799946][ T5753] gspca_stk1135: Sensor write failed
[ 1044.805987][ T5753] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[ 1044.829080][ T5753] usb 4-1: USB disconnect, device number 111
[ 1045.237871][  T674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4693'.
[ 1045.249086][  T672] kvm: Disabled LAPIC found during irq injection
[ 1045.251404][  T674] veth0_macvtap: left promiscuous mode
[ 1045.428105][  T687] syzkaller0: entered promiscuous mode
[ 1045.435292][  T687] syzkaller0: entered allmulticast mode
[ 1045.449334][  T687] simple: basic_2
[ 1045.576194][  T691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4696'.
[ 1045.591584][  T691] xfrm0: entered promiscuous mode
[ 1045.596780][  T691] xfrm0: entered allmulticast mode
[ 1045.603689][  T691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4696'.
[ 1045.701847][  T700] loop5: detected capacity change from 0 to 7
[ 1045.713019][  T700] Dev loop5: unable to read RDB block 7
[ 1045.719471][  T700]  loop5: unable to read partition table
[ 1045.725689][  T700] loop5: partition table beyond EOD, truncated
[ 1045.734356][  T700] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1045.853475][  T691] overlay: Unknown parameter 'ä-CV5dë�øgÉq¿Þ‹hâ»ÁšÍM¹ÿ38‘Š–j²®#Ø¢ÕØ2žºÔ–ÛQ·²E·‡omöÆÐs'óÀ9(Såçƒà]±[(3ü3Óµ0ò^{2×ÔrN‹aÏ‚\lïG+X¹JÙð´tnG¨j§þG*3Ý]‡WŒ¼ƒ5n‡í—†¾Oä»ÔœKêTñ ‘ìÁ
¹EؽÅøùüËc}vgœi…ùÍ«+G ‹äò‘Á*©^ÅØA7ï„ö¼7Ø)b'
[ 1045.952209][  T716] sctp: [Deprecated]: syz.6.4701 (pid 716) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1045.952209][  T716] Use struct sctp_sack_info instead
[ 1046.062704][T13290] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1046.261943][T13290] usb 4-1: config 0 has an invalid interface number: 76 but max is 0
[ 1046.284821][T13290] usb 4-1: config 0 has no interface number 0
[ 1046.319198][T13290] usb 4-1: too many endpoints for config 0 interface 76 altsetting 1: 52, using maximum allowed: 30
[ 1046.359626][T13290] usb 4-1: config 0 interface 76 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 52
[ 1046.410696][T13290] usb 4-1: config 0 interface 76 has no altsetting 0
[ 1046.437155][T13290] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1046.471454][T13290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.513937][T13290] usb 4-1: config 0 descriptor??
[ 1046.532460][T13290] cp210x 4-1:0.76: cp210x converter detected
[ 1046.968968][ T5753] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1047.005821][T13290] cp210x 4-1:0.76: failed to get vendor val 0x000e size 3: -32
[ 1047.026180][T13290] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1047.041496][T13290] usb 4-1: USB disconnect, device number 112
[ 1047.058105][T13290] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1047.087213][T13290] cp210x 4-1:0.76: device disconnected
[ 1047.117881][  T749] binder: 738:749 ioctl c0306201 200000000280 returned -14
[ 1047.137197][ T5753] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1047.147253][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.155543][  T755] �ÿ: renamed from bond_slave_0
[ 1047.161441][ T5753] usb 3-1: Product: syz
[ 1047.177240][ T5753] usb 3-1: Manufacturer: syz
[ 1047.186024][ T5753] usb 3-1: SerialNumber: syz
[ 1047.204790][ T5753] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1047.226483][T13283] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1047.647928][  T734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1047.662072][  T734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1047.676490][  T734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1047.686544][  T734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1047.756938][  T734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1047.782976][  T734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1047.819150][ T5753] usb 6-1: new full-speed USB device number 114 using dummy_hcd
[ 1047.999765][  T809] usb 3-1: USB disconnect, device number 115
[ 1048.107730][  T794] syzkaller0: entered promiscuous mode
[ 1048.113470][  T794] syzkaller0: entered allmulticast mode
[ 1048.149220][ T5753] usb 6-1: device descriptor read/64, error -71
[ 1048.284637][T13283] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1048.295592][T13283] ath9k_htc: Failed to initialize the device
[ 1048.303716][  T809] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1048.419523][ T5753] usb 6-1: new full-speed USB device number 115 using dummy_hcd
[ 1048.550060][  T814] fuse: Invalid rootmode
[ 1048.572226][ T5753] usb 6-1: device descriptor read/64, error -71
[ 1048.699462][ T5753] usb usb6-port1: attempt power cycle
[ 1049.039160][ T5753] usb 6-1: new full-speed USB device number 116 using dummy_hcd
[ 1049.069878][ T5753] usb 6-1: device descriptor read/8, error -71
[ 1049.309358][ T5753] usb 6-1: new full-speed USB device number 117 using dummy_hcd
[ 1049.329395][ T5753] usb 6-1: device descriptor read/8, error -71
[ 1049.406557][  T837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4720'.
[ 1049.422592][  T837] xt_hashlimit: size too large, truncated to 1048576
[ 1049.440003][ T5753] usb usb6-port1: unable to enumerate USB device
[ 1049.516464][  T844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4721'.
[ 1049.677674][  T852] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1049.938888][ T5753] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1050.088874][ T5753] usb 3-1: Using ep0 maxpacket: 16
[ 1050.096022][ T5753] usb 3-1: config 8 has an invalid interface number: 39 but max is 0
[ 1050.104509][ T5753] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1050.115026][ T5753] usb 3-1: config 8 has no interface number 0
[ 1050.123122][ T5753] usb 3-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1050.136180][ T5753] usb 3-1: config 8 interface 39 has no altsetting 0
[ 1050.148428][ T5753] usb 3-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77
[ 1050.157838][ T5753] usb 3-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3
[ 1050.166071][ T5753] usb 3-1: Product: syz
[ 1050.170796][ T5753] usb 3-1: Manufacturer: syz
[ 1050.175476][ T5753] usb 3-1: SerialNumber: syz
[ 1050.400237][ T5753] ipheth 3-1:8.39: Unable to find endpoints
[ 1050.419226][ T5753] usb 3-1: USB disconnect, device number 116
[ 1050.605997][  T885] ipvlan2: entered promiscuous mode
[ 1050.745004][ T5753] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1050.910865][ T5753] usb 3-1: Using ep0 maxpacket: 16
[ 1050.921426][ T5753] usb 3-1: config 8 has an invalid interface number: 39 but max is 0
[ 1050.940198][ T5753] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1050.956424][ T5753] usb 3-1: config 8 has no interface number 0
[ 1050.963130][ T5753] usb 3-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1050.981244][ T5753] usb 3-1: config 8 interface 39 has no altsetting 0
[ 1051.001617][ T5753] usb 3-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77
[ 1051.008921][T13290] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[ 1051.021300][ T5753] usb 3-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3
[ 1051.039346][ T5753] usb 3-1: Product: syz
[ 1051.053206][  T920] netlink: 179596 bytes leftover after parsing attributes in process `syz.3.4727'.
[ 1051.056491][ T5753] usb 3-1: Manufacturer: syz
[ 1051.081759][ T5753] usb 3-1: SerialNumber: syz
[ 1051.168928][T13290] usb 6-1: Using ep0 maxpacket: 8
[ 1051.177125][T13290] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1051.186717][T13290] usb 6-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config
[ 1051.197660][T13290] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1051.263516][T13290] usb 6-1: New USB device found, idVendor=0499, idProduct=0001, bcdDevice= 0.00
[ 1051.272952][T13290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.281431][T13290] usb 6-1: Product: ﮙ퀉䭛춴ಕ���ꮠⳂ뚋ꡂ鿥텉尔腡앬슕뾶ꮪᯋ트埔ẛ�檞猩槜뷾�쿒펢�说ū筬�鼽鰲챑녘쪌瞛⾖钞逻�쓶䒫㊙Ἢꈨꑽ톕称㸃챋⾓煯弶潈ﻼ▘ྻ�წ껪Ż瘫ᔽ뚾皺걾Ŗ�楟㛘翫屙�៘꤈יּ鉘腙쌼ᓅꠖ埢춷ﻉ䔄㱻㄀俘��헨䭖蔪뙗떑ž㴓ꕯ��狉䄗ኲ�环
[ 1051.323526][ T5753] ipheth 3-1:8.39: Unable to find endpoints
[ 1051.339910][T13290] usb 6-1: Manufacturer: ï“¿
[ 1051.347678][ T5753] usb 3-1: USB disconnect, device number 117
[ 1051.357172][T13290] usb 6-1: SerialNumber: à �
[ 1051.584396][T13290] usb 6-1: BAAD MICROPHONE c_chmask mismatch
[ 1051.704731][T13290] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1051.723362][T13290] usb 6-1: USB disconnect, device number 118
[ 1051.746570][T12772] udevd[12772]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1052.004902][  T985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4732'.
[ 1052.152800][  T995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4734'.
[ 1052.180530][  T995] xt_hashlimit: size too large, truncated to 1048576
[ 1052.416328][ T1017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4738'.
[ 1052.429103][T13290] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[ 1052.493764][ T1025] FAULT_INJECTION: forcing a failure.
[ 1052.493764][ T1025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1052.507151][ T1025] CPU: 1 UID: 0 PID: 1025 Comm: syz.2.4739 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1052.507181][ T1025] Tainted: [L]=SOFTLOCKUP
[ 1052.507187][ T1025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1052.507199][ T1025] Call Trace:
[ 1052.507206][ T1025]  <TASK>
[ 1052.507214][ T1025]  dump_stack_lvl+0xe8/0x150
[ 1052.507242][ T1025]  should_fail_ex+0x412/0x560
[ 1052.507269][ T1025]  _copy_to_user+0x31/0xb0
[ 1052.507297][ T1025]  simple_read_from_buffer+0xe1/0x170
[ 1052.507323][ T1025]  proc_fail_nth_read+0x1bb/0x230
[ 1052.507349][ T1025]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1052.507383][ T1025]  ? rw_verify_area+0x2a6/0x4d0
[ 1052.507406][ T1025]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1052.507430][ T1025]  vfs_read+0x20c/0xa70
[ 1052.507458][ T1025]  ? __pfx___mutex_lock+0x10/0x10
[ 1052.507480][ T1025]  ? __pfx_vfs_read+0x10/0x10
[ 1052.507505][ T1025]  ? __fget_files+0x2a/0x420
[ 1052.507530][ T1025]  ? __fget_files+0x3a0/0x420
[ 1052.507550][ T1025]  ? __fget_files+0x2a/0x420
[ 1052.507578][ T1025]  ksys_read+0x150/0x270
[ 1052.507605][ T1025]  ? __pfx_ksys_read+0x10/0x10
[ 1052.507636][ T1025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.507657][ T1025]  do_syscall_64+0x15f/0xf80
[ 1052.507676][ T1025]  ? trace_irq_disable+0x3b/0x140
[ 1052.507701][ T1025]  ? clear_bhb_loop+0x40/0x90
[ 1052.507723][ T1025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.507742][ T1025] RIP: 0033:0x7f7dae55d60e
[ 1052.507759][ T1025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1052.507775][ T1025] RSP: 002b:00007f7daf4c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1052.507794][ T1025] RAX: ffffffffffffffda RBX: 00007f7daf4c96c0 RCX: 00007f7dae55d60e
[ 1052.507807][ T1025] RDX: 000000000000000f RSI: 00007f7daf4c90a0 RDI: 0000000000000004
[ 1052.507819][ T1025] RBP: 00007f7daf4c9090 R08: 0000000000000000 R09: 0000000000000000
[ 1052.507830][ T1025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1052.507841][ T1025] R13: 00007f7dae816038 R14: 00007f7dae815fa0 R15: 00007f7dae93fa48
[ 1052.507870][ T1025]  </TASK>
[ 1052.786641][T13283] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1052.803179][T13290] usb 6-1: Using ep0 maxpacket: 32
[ 1052.815948][T13290] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1052.841176][T13290] usb 6-1: config 0 has no interfaces?
[ 1052.862057][T13290] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1052.871246][T13290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1052.879429][T13290] usb 6-1: Product: syz
[ 1052.883632][T13290] usb 6-1: Manufacturer: syz
[ 1052.888236][T13290] usb 6-1: SerialNumber: syz
[ 1052.902894][T13290] usb 6-1: config 0 descriptor??
[ 1052.964643][ T1048] netlink: 'syz.3.4741': attribute type 1 has an invalid length.
[ 1052.978884][T13283] usb 2-1: Using ep0 maxpacket: 8
[ 1052.990150][T13283] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1052.998575][T13283] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1053.018159][T13283] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1053.030598][T13283] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1053.050869][T13283] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1053.064638][T13283] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1053.073920][T13283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.222599][  T998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1053.238276][  T998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1053.439761][T13290] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1053.622535][T13290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1053.645970][T13290] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1053.672627][T13290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1053.701487][T13290] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1053.728714][T13290] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1053.756190][T13290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.788194][  T809] usb 2-1: USB disconnect, device number 123
[ 1053.826735][T13290] usb 3-1: config 0 descriptor??
[ 1054.251851][T13290] hdpvr 3-1:0.0: unexpected answer of status request, len -71
[ 1054.269393][T13290] hdpvr 3-1:0.0: device init failed
[ 1054.277128][T13290] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[ 1054.335202][T13290] usb 3-1: USB disconnect, device number 118
[ 1054.361905][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.373925][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.049940][ T1148] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4744'.
[ 1055.369667][T13297] usb 6-1: USB disconnect, device number 119
[ 1055.731395][ T1175] syzkaller0: entered promiscuous mode
[ 1055.737146][ T1175] syzkaller0: entered allmulticast mode
[ 1055.840320][T13297] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[ 1055.952181][ T1184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4749'.
[ 1055.965441][ T1184] xt_hashlimit: size too large, truncated to 1048576
[ 1055.979087][T13297] usb 6-1: device descriptor read/64, error -71
[ 1056.121905][ T1189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1056.228949][T13297] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 1056.358901][T13297] usb 6-1: device descriptor read/64, error -71
[ 1056.469221][T13297] usb usb6-port1: attempt power cycle
[ 1056.519041][T13290] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 1056.668934][T13290] usb 3-1: Using ep0 maxpacket: 16
[ 1056.676016][T13290] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 1056.684305][T13290] usb 3-1: config 0 has no interface number 0
[ 1056.692597][T13290] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1056.702017][T13290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1056.710116][T13290] usb 3-1: Product: syz
[ 1056.714297][T13290] usb 3-1: Manufacturer: syz
[ 1056.718982][T13290] usb 3-1: SerialNumber: syz
[ 1056.725760][T13290] usb 3-1: config 0 descriptor??
[ 1056.809153][T13297] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 1056.841768][T13297] usb 6-1: device descriptor read/8, error -71
[ 1056.895343][ T1218] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4755'.
[ 1056.950281][T13290] hub 3-1:0.132: bad descriptor, ignoring hub
[ 1056.968251][T13290] hub 3-1:0.132: probe with driver hub failed with error -5
[ 1057.006188][T13290] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input96
[ 1057.099333][T13297] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 1057.111072][T13290] usb 3-1: USB disconnect, device number 119
[ 1057.140125][T13297] usb 6-1: device descriptor read/8, error -71
[ 1057.206785][ T1238] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4757'.
[ 1057.280203][T13297] usb usb6-port1: unable to enumerate USB device
[ 1057.859151][T13290] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 1058.003798][ T1263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4761'.
[ 1058.013193][T13290] usb 3-1: Using ep0 maxpacket: 32
[ 1058.021592][T13290] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1058.031326][T13290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.046280][ T1263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4761'.
[ 1058.054343][T13290] usb 3-1: config 0 descriptor??
[ 1058.151229][ T1272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4762'.
[ 1058.183863][ T1272] xt_hashlimit: size too large, truncated to 1048576
[ 1058.377635][T13290] usb 3-1: string descriptor 0 read error: -71
[ 1058.388072][T13290] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1058.395391][T13290] gspca_vc032x: reg_r err -71
[ 1058.400508][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.405823][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.411248][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.416577][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.422039][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.427442][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.432831][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.438130][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.443552][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.448941][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.454255][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.459970][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.465292][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.475379][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.480776][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.488449][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.494335][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.513347][T13290] gspca_vc032x: I2c Bus Busy Wait 00
[ 1058.531857][T13290] gspca_vc032x: Unknown sensor...
[ 1058.548105][T13290] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[ 1058.577777][T13290] usb 3-1: USB disconnect, device number 120
[ 1058.741965][ T1336] kAFS: unable to lookup cell 'ÿ'
[ 1058.762805][ T1336] kAFS: unable to lookup cell '(,c¾Ì'
[ 1058.783189][ T1338] syzkaller0: entered promiscuous mode
[ 1058.829875][ T1338] syzkaller0: entered allmulticast mode
[ 1058.898558][ T1336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4765'.
[ 1059.299201][ T5753] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 1059.470743][ T5753] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1059.497426][ T5753] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1059.522502][ T5753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.557834][ T5753] usb 6-1: config 0 descriptor??
[ 1059.595567][ T5753] pwc: Askey VC010 type 2 USB webcam detected.
[ 1059.992933][ T5753] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1060.005434][ T5753] pwc: recv_control_msg error -32 req 02 val 2700
[ 1060.156707][ T1425] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4771'.
[ 1060.216008][ T5753] pwc: recv_control_msg error -32 req 04 val 1000
[ 1060.231782][ T5753] pwc: recv_control_msg error -32 req 04 val 1300
[ 1060.248657][ T5753] pwc: recv_control_msg error -32 req 04 val 1400
[ 1060.265922][ T5753] pwc: recv_control_msg error -32 req 02 val 2000
[ 1060.289342][ T5753] pwc: recv_control_msg error -32 req 02 val 2100
[ 1060.304165][ T5753] pwc: recv_control_msg error -32 req 04 val 1500
[ 1060.532481][ T5753] pwc: recv_control_msg error -71 req 02 val 2400
[ 1060.540381][ T5753] pwc: recv_control_msg error -71 req 02 val 2600
[ 1060.548575][ T5753] pwc: recv_control_msg error -71 req 02 val 2900
[ 1060.556026][ T5753] pwc: recv_control_msg error -71 req 02 val 2800
[ 1060.568122][ T5753] pwc: recv_control_msg error -71 req 04 val 1100
[ 1060.580275][ T5753] pwc: recv_control_msg error -71 req 04 val 1200
[ 1060.596764][ T5753] pwc: Registered as video103.
[ 1060.608564][ T5753] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input97
[ 1060.653031][ T5753] usb 6-1: USB disconnect, device number 124
[ 1060.801597][ T1436] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4773'.
[ 1060.810745][ T1436] openvswitch: netlink: Flow key attr not present in new flow.
[ 1060.977958][ T1453] ip6gre1: entered promiscuous mode
[ 1060.989048][ T1453] ip6gre1: entered allmulticast mode
[ 1061.137930][ T1460] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4776'.
[ 1061.162037][ T1460] ALSA: mixer_oss: invalid OSS volume ''
[ 1061.409196][T13290] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1061.570493][T13290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1061.589868][T13290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1061.610303][T13290] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1061.637202][T13290] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1061.663103][T13290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.684303][T13290] usb 4-1: config 0 descriptor??
[ 1061.892551][ T1474] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[ 1061.899114][ T1474] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1061.908316][ T1474] vhci_hcd vhci_hcd.0: Device attached
[ 1061.932840][ T1476] vhci_hcd: connection closed
[ 1061.932994][T13139] vhci_hcd vhci_hcd.2: stop threads
[ 1061.970095][T13139] vhci_hcd vhci_hcd.2: release socket
[ 1061.993786][T13139] vhci_hcd vhci_hcd.2: disconnect device
[ 1062.127334][T13290] usbhid 4-1:0.0: can't add hid device: -71
[ 1062.142042][T13290] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1062.161178][T13290] usb 4-1: USB disconnect, device number 113
[ 1062.228157][ T1495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4779'.
[ 1062.241303][ T1495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4779'.
[ 1062.638903][ T5753] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1062.671080][   T10] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 1062.828927][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 1062.839368][ T5753] usb 3-1: Using ep0 maxpacket: 16
[ 1062.848132][   T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1062.861320][ T5753] usb 3-1: config 0 has no interfaces?
[ 1062.875466][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1062.876469][ T5753] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1062.905671][   T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1062.920485][ T5753] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1062.931980][ T5753] usb 3-1: Manufacturer: syz
[ 1062.942783][   T10] usb 6-1: config 1 has no interface number 1
[ 1062.957169][ T5753] usb 3-1: config 0 descriptor??
[ 1062.962546][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1062.977686][   T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1062.993806][   T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1063.005027][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1063.015647][   T10] usb 6-1: Product: syz
[ 1063.019968][   T10] usb 6-1: Manufacturer: syz
[ 1063.024802][   T10] usb 6-1: SerialNumber: syz
[ 1063.239331][ T5708] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1063.409007][ T5708] usb 4-1: Using ep0 maxpacket: 8
[ 1063.418642][ T5708] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1063.436276][ T5708] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1063.446936][ T5708] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1063.459649][ T5708] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1063.478114][ T5708] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1063.492414][   T10] usb 6-1: USB disconnect, device number 125
[ 1063.514121][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.585407][ T5708] hub 4-1:1.0: bad descriptor, ignoring hub
[ 1063.602749][ T5708] hub 4-1:1.0: probe with driver hub failed with error -5
[ 1063.617245][ T5708] cdc_wdm 4-1:1.0: skipping garbage
[ 1063.630823][ T5708] cdc_wdm 4-1:1.0: skipping garbage
[ 1063.645090][ T5708] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1063.668040][ T5708] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1064.159281][ T5708] usb 4-1: USB disconnect, device number 114
[ 1064.820941][ T1638] QAT: failed to copy from user.
[ 1065.134110][   T10] usb 3-1: USB disconnect, device number 121
[ 1065.465357][ T1654] input: syz1 as /devices/virtual/input/input98
[ 1065.852443][ T1666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4793'.
[ 1066.229278][ T5708] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1066.409151][ T5708] usb 6-1: Using ep0 maxpacket: 16
[ 1066.427596][ T5708] usb 6-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6
[ 1066.438917][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.465916][ T5708] usb 6-1: Product: syz
[ 1066.480650][ T5708] usb 6-1: Manufacturer: syz
[ 1066.515098][ T5708] usb 6-1: SerialNumber: syz
[ 1066.674196][ T5708] usb 6-1: config 0 descriptor??
[ 1066.682197][ T5708] safe_serial 6-1:0.0: safe_serial converter detected
[ 1066.693293][ T5708] usb 6-1: safe_serial converter now attached to ttyUSB0
[ 1067.044515][ T5708] usb 6-1: USB disconnect, device number 126
[ 1067.062735][ T5708] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0
[ 1067.080128][ T5708] safe_serial 6-1:0.0: device disconnected
[ 1067.532878][ T1721] geneve1: entered promiscuous mode
[ 1067.542651][ T1721] macsec1: entered promiscuous mode
[ 1067.548123][ T1721] macsec1: entered allmulticast mode
[ 1067.554071][ T1721] geneve1: entered allmulticast mode
[ 1067.563580][ T1721] geneve1: left allmulticast mode
[ 1067.572378][ T1721] geneve1: left promiscuous mode
[ 1067.639048][T13297] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 1067.788872][T13297] usb 3-1: Using ep0 maxpacket: 8
[ 1067.796663][T13297] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[ 1067.805188][T13297] usb 3-1: config 250 has an invalid interface number: 228 but max is -1
[ 1067.813886][T13297] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0
[ 1067.823002][T13297] usb 3-1: config 250 has no interface number 0
[ 1067.829351][T13297] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[ 1067.840987][T13297] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1067.849245][ T5753] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1067.851553][T13297] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1067.871827][T13297] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[ 1067.885801][T13297] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[ 1067.900820][T13297] usb 3-1: config 250 interface 228 has no altsetting 0
[ 1067.909634][T13297] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[ 1067.918760][T13297] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[ 1067.927129][T13297] usb 3-1: Product: syz
[ 1067.931461][T13297] usb 3-1: SerialNumber: syz
[ 1067.946573][T13297] hub 3-1:250.228: bad descriptor, ignoring hub
[ 1067.953447][T13297] hub 3-1:250.228: probe with driver hub failed with error -5
[ 1068.023634][ T5753] usb 4-1: Using ep0 maxpacket: 16
[ 1068.041341][ T5753] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1068.061448][ T5753] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1068.077370][ T5753] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1068.086674][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.098506][ T5753] usb 4-1: config 0 descriptor??
[ 1068.148722][ T1720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.174094][ T1720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1068.268901][T13283] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1068.274195][T13297] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 122 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[ 1068.341909][T13297] usb 3-1: USB disconnect, device number 122
[ 1068.373082][T13297] usblp0: removed
[ 1068.429358][T13283] usb 2-1: Using ep0 maxpacket: 32
[ 1068.442186][T13283] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1068.470815][T13283] usb 2-1: config 0 has no interface number 0
[ 1068.526003][ T1776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4804'.
[ 1068.536087][ T5753] mcp2221 0003:04D8:00DD.0042: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[ 1068.635210][T13283] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1068.666940][T13283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1068.707143][T13283] usb 2-1: Product: syz
[ 1068.723644][T13283] usb 2-1: Manufacturer: syz
[ 1068.751903][T13283] usb 2-1: SerialNumber: syz
[ 1068.787204][T13283] usb 2-1: config 0 descriptor??
[ 1068.941691][   T10] usb 4-1: USB disconnect, device number 115
[ 1068.961825][T13297] usb 6-1: new full-speed USB device number 127 using dummy_hcd
[ 1069.130596][T13297] usb 6-1: config 0 has an invalid interface number: 231 but max is 0
[ 1069.138999][T13297] usb 6-1: config 0 has no interface number 0
[ 1069.145218][T13297] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1069.160965][T13297] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[ 1069.170162][T13297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.178184][T13297] usb 6-1: Product: syz
[ 1069.182463][T13297] usb 6-1: Manufacturer: syz
[ 1069.187173][T13297] usb 6-1: SerialNumber: syz
[ 1069.194469][T13297] usb 6-1: config 0 descriptor??
[ 1069.204429][ T1800] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1069.226834][T13297] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 1a:69:07:51:96:9b
[ 1069.261725][T13283] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1069.281119][T13283] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1069.658489][ T1850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4809'.
[ 1071.399354][ T5753] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 1071.524690][T13283] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32
[ 1071.541074][T13283] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[ 1071.569251][ T5753] usb 3-1: Using ep0 maxpacket: 32
[ 1071.581473][ T5753] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1071.610555][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1071.643198][ T5753] usb 3-1: config 0 descriptor??
[ 1071.680477][ T5753] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1071.716314][T13283] usb 6-1: USB disconnect, device number 127
[ 1071.740255][T13283] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[ 1072.340474][   T29] kauditd_printk_skb: 29 callbacks suppressed
[ 1072.340492][   T29] audit: type=1326 audit(1777174448.972:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1937 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1072.391837][   T29] audit: type=1326 audit(1777174449.012:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1937 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1072.416671][   T29] audit: type=1326 audit(1777174449.012:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1937 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1072.441409][   T29] audit: type=1326 audit(1777174449.012:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1937 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1072.475705][   T29] audit: type=1326 audit(1777174449.012:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1937 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1072.502392][   T29] audit: type=1326 audit(1777174449.012:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1937 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1072.534456][   T29] audit: type=1326 audit(1777174449.012:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1937 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1072.571317][   T29] audit: type=1326 audit(1777174449.012:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1937 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1072.626714][   T29] audit: type=1326 audit(1777174449.012:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1937 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1072.653732][   T29] audit: type=1326 audit(1777174449.012:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1937 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f0b60f9cdd9 code=0x7ffc0000
[ 1072.831430][ T5753] gspca_sunplus: reg_w_riv err -110
[ 1072.837624][ T5753] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[ 1072.871423][ T5753] usb 2-1: USB disconnect, device number 124
[ 1072.989841][T13290] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[ 1073.109353][   T10] usb 4-1: new full-speed USB device number 116 using dummy_hcd
[ 1073.119665][T13290] usb 6-1: device descriptor read/64, error -71
[ 1073.248970][   T10] usb 4-1: device descriptor read/64, error -71
[ 1073.258577][ T1990] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4820'.
[ 1073.359641][T13290] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[ 1073.492093][   T10] usb 4-1: new full-speed USB device number 117 using dummy_hcd
[ 1073.508998][T13290] usb 6-1: device descriptor read/64, error -71
[ 1073.622079][T13290] usb usb6-port1: attempt power cycle
[ 1073.629908][   T10] usb 4-1: device descriptor read/64, error -71
[ 1073.752437][   T10] usb usb4-port1: attempt power cycle
[ 1073.969024][T13297] usb 2-1: new full-speed USB device number 125 using dummy_hcd
[ 1073.979298][T13290] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[ 1074.009691][T13290] usb 6-1: device descriptor read/8, error -71
[ 1074.064356][ T2024] netlink: 'syz.6.4822': attribute type 21 has an invalid length.
[ 1074.074042][ T2024] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4822'.
[ 1074.083710][ T2024] netlink: 'syz.6.4822': attribute type 4 has an invalid length.
[ 1074.092103][ T2024] netlink: 'syz.6.4822': attribute type 5 has an invalid length.
[ 1074.100182][   T10] usb 4-1: new full-speed USB device number 118 using dummy_hcd
[ 1074.110582][ T2024] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4822'.
[ 1074.139569][   T10] usb 4-1: device descriptor read/8, error -71
[ 1074.167213][ T5753] usb 3-1: USB disconnect, device number 123
[ 1074.234756][T13297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64
[ 1074.259147][T13290] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[ 1074.283953][T13297] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1074.295296][T13297] usb 2-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0
[ 1074.305118][T13297] usb 2-1: Manufacturer: syz
[ 1074.312098][T13290] usb 6-1: device descriptor read/8, error -71
[ 1074.330359][T13297] usb 2-1: config 0 descriptor??
[ 1074.355543][ T2008] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1074.399173][   T10] usb 4-1: new full-speed USB device number 119 using dummy_hcd
[ 1074.430543][   T10] usb 4-1: device descriptor read/8, error -71
[ 1074.437300][T13290] usb usb6-port1: unable to enumerate USB device
[ 1074.550626][   T10] usb usb4-port1: unable to enumerate USB device
[ 1074.638997][ T2092] qrtr: Invalid version 30
[ 1074.762140][ T2008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1074.777996][ T2096] gtp0: entered allmulticast mode
[ 1074.813259][ T2008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1075.048182][ T2008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1075.115362][ T2008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1075.127338][ T2008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1075.140142][ T2008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1075.153583][ T2008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1075.174885][ T2008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1075.191905][ T2008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1075.202249][ T2008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1075.350239][ T5753] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1075.430690][T13297] elan 0003:04F3:0755.0043: unknown main item tag 0x0
[ 1075.438379][T13297] elan 0003:04F3:0755.0043: unknown main item tag 0x0
[ 1075.445451][T13297] elan 0003:04F3:0755.0043: unknown main item tag 0x0
[ 1075.460027][T13297] elan 0003:04F3:0755.0043: unknown main item tag 0x0
[ 1075.470920][T13297] elan 0003:04F3:0755.0043: unknown main item tag 0x0
[ 1075.481690][T13297] elan 0003:04F3:0755.0043: hidraw0: USB HID v1.01 Device [syz] on usb-dummy_hcd.1-1/input0
[ 1075.520910][ T5753] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1075.530386][ T5753] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1075.541837][ T5753] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1075.559940][ T5753] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1075.587367][ T5753] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1075.617592][ T5753] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1075.646126][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1075.663106][ T5753] usb 3-1: Product: syz
[ 1075.672688][ T5753] usb 3-1: Manufacturer: syz
[ 1075.712566][ T5753] cdc_wdm 3-1:1.0: skipping garbage
[ 1075.721728][ T5753] cdc_wdm 3-1:1.0: skipping garbage
[ 1075.753770][ T5753] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1075.767159][ T5753] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1075.912360][ T2125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1075.928544][ T2125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1076.248228][T13297] usb 2-1: USB disconnect, device number 125
[ 1076.391256][T13291] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1076.401475][ T2229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4839'.
[ 1076.509195][ T5753] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1076.548879][T13291] usb 4-1: Using ep0 maxpacket: 32
[ 1076.556125][T13291] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1076.564502][T13291] usb 4-1: config 0 has no interface number 0
[ 1076.571097][T13291] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[ 1076.584287][T13291] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1076.593471][T13291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.601625][T13291] usb 4-1: Product: syz
[ 1076.606004][T13291] usb 4-1: Manufacturer: syz
[ 1076.610903][T13291] usb 4-1: SerialNumber: syz
[ 1076.617701][T13291] usb 4-1: config 0 descriptor??
[ 1076.628692][T13291] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1076.639329][T13291] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22
[ 1076.669416][ T5753] usb 6-1: Using ep0 maxpacket: 16
[ 1076.677484][ T5753] usb 6-1: config 0 has no interfaces?
[ 1076.685929][ T5753] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1076.696150][ T5753] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1076.704603][ T5753] usb 6-1: Manufacturer: syz
[ 1076.711028][ T5708] usb 2-1: new full-speed USB device number 126 using dummy_hcd
[ 1076.713881][T13291] usb 3-1: USB disconnect, device number 124
[ 1076.722857][ T5753] usb 6-1: config 0 descriptor??
[ 1076.884578][ T5708] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1076.893357][ T5708] usb 2-1: not running at top speed; connect to a high speed hub
[ 1076.902407][ T5708] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4
[ 1076.915545][ T5708] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[ 1076.927768][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.942791][  T809] usb 4-1: USB disconnect, device number 120
[ 1076.952316][ T5708] usb 2-1: Product: syz
[ 1076.966129][ T5708] usb 2-1: Manufacturer: syz
[ 1076.982334][ T5708] usb 2-1: SerialNumber: syz
[ 1077.156700][ T2278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4844'.
[ 1077.248516][ T2190] Set syz1 is full, maxelem 6117 reached
[ 1077.314525][ T5708] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1077.331589][ T5753] usb 6-1: USB disconnect, device number 6
[ 1077.344037][ T2286] netlink: 'syz.3.4845': attribute type 1 has an invalid length.
[ 1077.347187][ T5708] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1077.360315][ T5708] usb 2-1: unit 3 not found!
[ 1077.422588][ T2286] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1077.481675][ T2309] bond1: (slave gretap1): making interface the new active one
[ 1077.492769][ T5708] usb 2-1: USB disconnect, device number 126
[ 1077.541605][ T2309] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1077.616030][T14683] udevd[14683]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1077.730468][T13283] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1077.903761][T13283] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[ 1077.933767][T13283] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1077.955066][T13283] usb 4-1: config 220 has no interface number 2
[ 1077.976433][T13283] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1078.000170][T13283] usb 4-1: config 220 interface 0 has no altsetting 0
[ 1078.007553][T13283] usb 4-1: config 220 interface 76 has no altsetting 0
[ 1078.015060][T13283] usb 4-1: config 220 interface 1 has no altsetting 0
[ 1078.043536][T13283] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1078.091090][T13283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1078.110042][T13283] usb 4-1: Product: syz
[ 1078.152002][T13283] usb 4-1: Manufacturer: syz
[ 1078.171180][T13283] usb 4-1: SerialNumber: syz
[ 1078.226734][ T2366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4848'.
[ 1078.469476][T13283] usb 4-1: selecting invalid altsetting 0
[ 1078.498159][T13283] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1078.585054][T13283] uvcvideo 4-1:220.0: No valid video chain found.
[ 1078.624624][ T2378] pim6reg: entered allmulticast mode
[ 1078.655153][T13283] usb 4-1: selecting invalid altsetting 0
[ 1078.695011][T13283] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[ 1078.753995][T13283] usb 4-1: USB disconnect, device number 121
[ 1079.591048][ T2423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4855'.
[ 1079.878126][ T2438] futex_wake_op: syz.3.4857 tries to shift op by -1; fix this program
[ 1079.887190][ T2437] futex_wake_op: syz.3.4857 tries to shift op by -1; fix this program
[ 1080.189464][T13297] usb 4-1: new full-speed USB device number 122 using dummy_hcd
[ 1080.347266][T13297] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1080.371014][T13297] usb 4-1: not running at top speed; connect to a high speed hub
[ 1080.395556][T13297] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4
[ 1080.423497][T13297] usb 4-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40
[ 1080.433368][T13297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1080.469175][T13297] usb 4-1: Product: �
[ 1080.488684][T13297] usb 4-1: SerialNumber: 
[ 1080.529297][ T2452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4858'.
[ 1080.543972][ T2452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4858'.
[ 1080.727950][T13297] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1080.765038][T13297] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1080.799338][T13297] usb 4-1: unit 3 not found!
[ 1080.973728][T13297] usb 4-1: USB disconnect, device number 122
[ 1081.604950][ T2378] pim6reg: left allmulticast mode
[ 1081.799308][   T10] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1081.886606][ T2505] netlink: 'syz.1.4860': attribute type 2 has an invalid length.
[ 1081.961308][   T10] usb 4-1: config 0 has no interfaces?
[ 1081.967092][   T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1081.986961][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1082.001767][ T2548] loop5: detected capacity change from 0 to 7
[ 1082.004598][ T2548] Dev loop5: unable to read RDB block 7
[ 1082.004627][ T2548]  loop5: unable to read partition table
[ 1082.004751][ T2548] loop5: partition table beyond EOD, truncated
[ 1082.004762][ T2548] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1082.020699][   T10] usb 4-1: config 0 descriptor??
[ 1082.230732][ T2525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1082.251161][ T2525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1082.323957][ T2588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1082.361905][ T2588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1082.402974][T13297] usb 4-1: USB disconnect, device number 123
[ 1082.453492][ T2505] bond0: (slave macsec1): Error -34 calling dev_set_mtu
[ 1082.548910][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1082.616656][ T2615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4871'.
[ 1082.660641][ T2614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4872'.
[ 1082.678909][   T10] usb 6-1: device descriptor read/64, error -71
[ 1082.806461][ T2619] netlink: 'syz.2.4871': attribute type 1 has an invalid length.
[ 1082.843220][ T2619] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1082.875553][ T2619] bond1: (slave gretap1): making interface the new active one
[ 1082.885782][ T2619] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1082.919646][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1082.944024][ T2680] loop5: detected capacity change from 0 to 7
[ 1082.953097][ T2680] Dev loop5: unable to read RDB block 7
[ 1082.959203][ T2680]  loop5: unable to read partition table
[ 1082.965840][ T2680] loop5: partition table beyond EOD, truncated
[ 1082.972655][ T2680] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1083.059132][   T10] usb 6-1: device descriptor read/64, error -71
[ 1083.189403][   T10] usb usb6-port1: attempt power cycle
[ 1083.378897][T13283] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1083.413771][ T2715] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[ 1083.420320][ T2715] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1083.438177][ T2715] vhci_hcd vhci_hcd.0: Device attached
[ 1083.457168][ T2717] vhci_hcd: connection closed
[ 1083.457477][T13151] vhci_hcd vhci_hcd.6: stop threads
[ 1083.468437][T13151] vhci_hcd vhci_hcd.6: release socket
[ 1083.474592][T13151] vhci_hcd vhci_hcd.6: disconnect device
[ 1083.529662][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1083.561414][   T10] usb 6-1: device descriptor read/8, error -71
[ 1083.561461][T13283] usb 4-1: Using ep0 maxpacket: 32
[ 1083.575219][T13283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1083.586891][T13283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1083.598400][T13283] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1083.607841][T13283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1083.632275][T13283] usb 4-1: config 0 descriptor??
[ 1083.649584][ T5708] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[ 1083.662866][T13283] hub 4-1:0.0: USB hub found
[ 1083.799389][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1083.823639][   T10] usb 6-1: device descriptor read/8, error -71
[ 1083.859546][T13283] hub 4-1:0.0: 1 port detected
[ 1083.876496][ T5708] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.939387][   T10] usb usb6-port1: unable to enumerate USB device
[ 1083.956467][ T5708] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[ 1083.972895][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.987864][ T5708] usb 2-1: Product: syz
[ 1084.001351][ T5708] usb 2-1: Manufacturer: syz
[ 1084.016196][ T5708] usb 2-1: SerialNumber: syz
[ 1084.203650][ T2754] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4883'.
[ 1084.328358][   T10] usb 4-1: USB disconnect, device number 124
[ 1084.461681][ T2771] netlink: 'syz.3.4884': attribute type 1 has an invalid length.
[ 1084.618264][ T2814] loop5: detected capacity change from 0 to 7
[ 1084.635065][ T2814] Dev loop5: unable to read RDB block 7
[ 1084.642438][ T2814]  loop5: unable to read partition table
[ 1084.649055][ T2814] loop5: partition table beyond EOD, truncated
[ 1084.650305][ T5708] usb 2-1: selecting invalid altsetting 1
[ 1084.674286][ T2814] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1084.889449][ T5708] LME2510(C): Firmware Status: 00 00 00 00 00 00
[ 1084.889615][ T5708] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22
[ 1084.995494][ T2716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1085.009003][T13291] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1085.011599][ T2716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1085.053274][   T10] usb 2-1: USB disconnect, device number 127
[ 1085.178896][T13291] usb 4-1: Using ep0 maxpacket: 32
[ 1085.195499][T13291] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[ 1085.223569][T13291] usb 4-1: config 0 has no interface number 0
[ 1085.242401][T13291] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1085.272109][T13291] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1085.284777][T13291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1085.293201][T13291] usb 4-1: Product: syz
[ 1085.298518][T13291] usb 4-1: Manufacturer: syz
[ 1085.318433][T13291] usb 4-1: SerialNumber: syz
[ 1085.330920][T13291] usb 4-1: config 0 descriptor??
[ 1085.343576][ T2819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1085.566811][ T2819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1085.719371][ T5708] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1085.755012][ T2904] kvm: pic: non byte write
[ 1085.881384][ T5708] usb 6-1: config 0 has no interfaces?
[ 1085.887177][ T5708] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1085.898034][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.911435][ T5708] usb 6-1: config 0 descriptor??
[ 1085.933742][T12241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1085.959372][T12241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1085.969820][T12241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1085.979075][T12241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1085.986701][T12241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1086.058950][   T10] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1086.139298][ T2928] loop5: detected capacity change from 0 to 7
[ 1086.164715][ T2928] Dev loop5: unable to read RDB block 7
[ 1086.177423][ T5708] usb 6-1: USB disconnect, device number 11
[ 1086.228969][   T10] usb 3-1: Using ep0 maxpacket: 8
[ 1086.243478][   T10] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[ 1086.246678][ T2928]  loop5: unable to read partition table
[ 1086.269363][   T10] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[ 1086.299196][   T10] usb 3-1: config 0 has no interface number 0
[ 1086.309107][   T10] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10
[ 1086.314703][ T2928] loop5: partition table beyond EOD, 
[ 1086.351462][   T10] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024
[ 1086.354883][ T2928] truncated
[ 1086.373796][ T2928] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1086.380260][   T10] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1086.475815][   T10] usb 3-1: config 0 interface 52 has no altsetting 0
[ 1086.490996][   T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[ 1086.520161][   T10] usb 3-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34
[ 1086.528567][   T10] usb 3-1: Product: syz
[ 1086.535345][   T10] usb 3-1: SerialNumber: syz
[ 1086.548493][   T10] usb 3-1: config 0 descriptor??
[ 1086.598524][ T2819] loop3: detected capacity change from 0 to 7
[ 1086.615219][ T2819] Dev loop3: unable to read RDB block 7
[ 1086.625446][ T2819]  loop3: unable to read partition table
[ 1086.632077][ T2819] loop3: partition table beyond EOD, truncated
[ 1086.638353][ T2819] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1086.650053][T13291] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1086.660799][T13291] asix 4-1:0.188: probe with driver asix failed with error -61
[ 1086.766500][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1086.775570][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1086.782483][   T10] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input100
[ 1086.784181][ T2920] bridge_slave_0: entered allmulticast mode
[ 1086.800909][ T2920] bridge_slave_0: entered promiscuous mode
[ 1086.811816][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1086.819474][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1086.826773][ T2920] bridge_slave_1: entered allmulticast mode
[ 1086.834772][ T2920] bridge_slave_1: entered promiscuous mode
[ 1086.937089][ T2920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1086.963994][ T2920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1087.101422][ T2920] team0: Port device team_slave_0 added
[ 1087.110921][ T2920] team0: Port device team_slave_1 added
[ 1087.183217][ T2920] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1087.201137][ T2920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1087.229928][ T2920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1087.251405][ T2920] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1087.258709][ T2920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1087.285117][ T2920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1087.415098][ T2920] hsr_slave_0: entered promiscuous mode
[ 1087.451990][ T2920] hsr_slave_1: entered promiscuous mode
[ 1087.460557][ T2920] debugfs: 'hsr0' already exists in 'hsr'
[ 1087.466415][ T2920] Cannot create hsr debugfs directory
[ 1087.748130][ T3114] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4898'.
[ 1088.039413][T12241] Bluetooth: hci5: command tx timeout
[ 1088.164650][ T3236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.178612][ T3236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.237290][ T2920] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1088.251063][ T2920] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1088.260358][ T2920] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1088.271537][ T2920] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1088.282078][ T2920] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1088.293755][ T2920] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1088.302687][ T2920] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1088.312944][ T2920] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1088.469352][ T2920] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1088.505007][ T2920] 8021q: adding VLAN 0 to HW filter on device team0
[ 1088.520213][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1088.527348][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1088.555121][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1088.562369][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1088.674138][    C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[ 1088.674138][T13282] usb 3-1: USB disconnect, device number 125
[ 1088.745068][ T2920] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1088.833233][ T2920] veth0_vlan: entered promiscuous mode
[ 1088.863543][ T2920] veth1_vlan: entered promiscuous mode
[ 1088.889524][ T2920] veth0_macvtap: entered promiscuous mode
[ 1088.898696][ T2920] veth1_macvtap: entered promiscuous mode
[ 1088.926395][ T2920] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1088.958129][ T2920] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1088.992475][T13150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1089.013892][T13150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1089.036337][T13150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1089.054824][T13150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1089.317728][T13283] usb 4-1: USB disconnect, device number 125
[ 1089.475019][T13150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.494687][T13150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1089.587362][T13145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.607517][T13145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1089.947147][ T3337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1089.964351][ T3337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1089.970923][ T3341] loop5: detected capacity change from 0 to 7
[ 1089.992518][ T3341] Dev loop5: unable to read RDB block 7
[ 1090.000641][ T3341]  loop5: unable to read partition table
[ 1090.008758][ T3341] loop5: partition table beyond EOD, truncated
[ 1090.017355][ T3341] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1090.119360][T12241] Bluetooth: hci5: command tx timeout
[ 1090.406140][ T3357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4910'.
[ 1090.466484][ T3357] xt_hashlimit: size too large, truncated to 1048576
[ 1090.522271][ T3365] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4911'.
[ 1090.765281][ T3375] input: syz0 as /devices/virtual/input/input101
[ 1091.087675][ T3398] loop5: detected capacity change from 0 to 7
[ 1091.101606][ T3398] Dev loop5: unable to read RDB block 7
[ 1091.107768][ T3398]  loop5: unable to read partition table
[ 1091.126072][ T3398] loop5: partition table beyond EOD, truncated
[ 1091.133037][ T3398] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1091.232683][ T3410] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1091.280736][ T3410] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1091.292981][ T3417] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4921'.
[ 1091.411041][  T809] IPVS: starting estimator thread 0...
[ 1091.539769][ T3437] IPVS: using max 32 ests per chain, 76800 per kthread
[ 1091.701101][  T809] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[ 1091.908061][ T3471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4923'.
[ 1091.985236][  T809] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1092.026922][  T809] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1092.062514][  T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1092.102040][  T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64
[ 1092.123858][  T809] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1092.133990][  T809] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[ 1092.143906][  T809] usb 6-1: Product: syz
[ 1092.148223][  T809] usb 6-1: Manufacturer: syz
[ 1092.153125][  T809] usb 6-1: SerialNumber: syz
[ 1092.170259][  T809] usb 6-1: config 0 descriptor??
[ 1092.187693][ T3417] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1092.193480][   T10] usb 3-1: new full-speed USB device number 126 using dummy_hcd
[ 1092.212522][T12241] Bluetooth: hci5: command tx timeout
[ 1092.359648][  T809] rc_core: IR keymap rc-imon-rsc not found
[ 1092.360028][   T10] usb 3-1: device descriptor read/64, error -71
[ 1092.396299][  T809] Registered IR keymap rc-empty
[ 1092.404120][  T809] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1092.447430][  T809] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input102
[ 1092.495265][ T3417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1092.543170][ T3417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1092.578831][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[ 1092.651992][   T29] kauditd_printk_skb: 108 callbacks suppressed
[ 1092.652009][   T29] audit: type=1326 audit(1777174469.282:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3413 comm="syz.5.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891f9cdd9 code=0x7ffc0000
[ 1092.699238][   T10] usb 3-1: new full-speed USB device number 127 using dummy_hcd
[ 1092.747933][   T29] audit: type=1326 audit(1777174469.282:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3413 comm="syz.5.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891f9cdd9 code=0x7ffc0000
[ 1092.893291][   T29] audit: type=1326 audit(1777174469.282:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3413 comm="syz.5.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891f9cdd9 code=0x7ffc0000
[ 1092.983461][   T10] usb 3-1: device descriptor read/64, error -71
[ 1093.027400][   T29] audit: type=1326 audit(1777174469.282:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3413 comm="syz.5.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891f9cdd9 code=0x7ffc0000
[ 1093.106362][   T29] audit: type=1326 audit(1777174469.332:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3413 comm="syz.5.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891f9cdd9 code=0x7ffc0000
[ 1093.110063][   T10] usb usb3-port1: attempt power cycle
[ 1093.230055][   T29] audit: type=1326 audit(1777174469.332:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3413 comm="syz.5.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3891f9cb42 code=0x7ffc0000
[ 1093.328626][   T29] audit: type=1326 audit(1777174469.332:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3413 comm="syz.5.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3891f9cbd7 code=0x7ffc0000
[ 1093.359982][   T29] audit: type=1326 audit(1777174469.332:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3413 comm="syz.5.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3891f59ad1 code=0x7ffc0000
[ 1093.384914][   T29] audit: type=1326 audit(1777174469.332:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3413 comm="syz.5.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3891f9dbc9 code=0x7ffc0000
[ 1093.412561][   T29] audit: type=1326 audit(1777174469.332:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3413 comm="syz.5.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3891f59b3b code=0x7ffc0000
[ 1093.700758][   T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[ 1093.742508][   T10] usb 3-1: device descriptor read/8, error -71
[ 1093.998922][   T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[ 1094.030126][   T10] usb 3-1: device descriptor read/8, error -71
[ 1094.149274][   T10] usb usb3-port1: unable to enumerate USB device
[ 1094.270693][T13283] usb 6-1: USB disconnect, device number 12
[ 1094.289431][T12241] Bluetooth: hci5: command tx timeout
[ 1094.622747][ T3584] loop5: detected capacity change from 0 to 7
[ 1094.633225][ T3584] Dev loop5: unable to read RDB block 7
[ 1094.639588][ T3584]  loop5: unable to read partition table
[ 1094.647370][ T3584] loop5: partition table beyond EOD, truncated
[ 1094.654722][ T3584] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1094.896865][ T3614] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4932'.
[ 1094.978276][ T3623] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[ 1094.984839][ T3623] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1095.000589][ T3623] vhci_hcd vhci_hcd.0: Device attached
[ 1095.020083][ T3627] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6)
[ 1095.026655][ T3627] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1095.034863][ T3627] vhci_hcd vhci_hcd.0: Device attached
[ 1095.137696][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4936'.
[ 1095.154593][ T3638] fuse: Unknown parameter '0x0000000000000003'
[ 1095.249824][T13296] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[ 1095.278986][   T10] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[ 1095.425701][ T3645] syzkaller0: entered promiscuous mode
[ 1095.430646][   T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1095.431292][ T3645] syzkaller0: entered allmulticast mode
[ 1095.440746][   T10] usb 3-1: config 0 has no interface number 0
[ 1095.452218][   T10] usb 3-1: config 0 interface 1 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1095.463999][   T10] usb 3-1: config 0 interface 1 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[ 1095.476001][   T10] usb 3-1: config 0 interface 1 has no altsetting 0
[ 1095.483568][   T10] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[ 1095.493255][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1095.504340][   T10] usb 3-1: config 0 descriptor??
[ 1095.511491][ T3623] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1095.928148][   T10] holtek_mouse 0003:04D9:A067.0044: unknown main item tag 0x0
[ 1095.935875][   T10] holtek_mouse 0003:04D9:A067.0044: unknown main item tag 0x0
[ 1095.943664][   T10] holtek_mouse 0003:04D9:A067.0044: unknown main item tag 0x0
[ 1095.951295][   T10] holtek_mouse 0003:04D9:A067.0044: unknown main item tag 0x0
[ 1095.965249][   T10] holtek_mouse 0003:04D9:A067.0044: unknown main item tag 0x0
[ 1095.973608][   T10] holtek_mouse 0003:04D9:A067.0044: unknown main item tag 0x0
[ 1095.981303][   T10] holtek_mouse 0003:04D9:A067.0044: unknown main item tag 0x0
[ 1095.989130][   T10] holtek_mouse 0003:04D9:A067.0044: unknown main item tag 0x0
[ 1096.000408][   T10] holtek_mouse 0003:04D9:A067.0044: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input1
[ 1096.019650][T13283] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1096.137700][ T3628] vhci_hcd: connection closed
[ 1096.139739][T13150] vhci_hcd vhci_hcd.2: stop threads
[ 1096.151438][ T3625] vhci_hcd: connection reset by peer
[ 1096.156910][   T10] usb 3-1: USB disconnect, device number 4
[ 1096.170877][T13150] vhci_hcd vhci_hcd.2: release socket
[ 1096.182112][T13150] vhci_hcd vhci_hcd.2: disconnect device
[ 1096.190914][T13150] vhci_hcd vhci_hcd.2: stop threads
[ 1096.192119][T13283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1096.204009][T13150] vhci_hcd vhci_hcd.2: release socket
[ 1096.222418][T13150] vhci_hcd vhci_hcd.2: disconnect device
[ 1096.226984][T13283] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1096.258460][T13283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1096.278704][T13283] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1096.298749][T13283] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1096.318048][T13283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1096.332837][T13283] usb 6-1: config 0 descriptor??
[ 1096.567327][T13283] hdpvr 6-1:0.0: unexpected answer of status request, len -71
[ 1096.575663][T13283] hdpvr 6-1:0.0: device init failed
[ 1096.581674][T13283] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12
[ 1096.596230][T13283] usb 6-1: USB disconnect, device number 13
[ 1096.761126][ T3722] trusted_key: encrypted_key: insufficient parameters specified
[ 1096.779658][ T3722] trusted_key: encrypted_key: insufficient parameters specified
[ 1096.841146][ T3718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4945'.
[ 1097.074648][ T3738] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4948'.
[ 1097.219614][T13283] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1097.402051][T13283] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1097.428208][T13283] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1097.466202][T13283] usb 3-1: config 2 interface 0 has no altsetting 0
[ 1097.489203][T13297] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1097.500028][T13283] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[ 1097.517129][T13283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.533631][T13283] usb 3-1: Product: syz
[ 1097.543077][T13283] usb 3-1: Manufacturer: syz
[ 1097.553158][T13283] usb 3-1: SerialNumber: syz
[ 1097.658985][T13297] usb 6-1: Using ep0 maxpacket: 32
[ 1097.677039][T13297] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1097.694825][T13297] usb 6-1: config 0 has no interface number 0
[ 1097.712278][T13297] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1097.722739][T13297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.732080][T13297] usb 6-1: Product: syz
[ 1097.736638][T13297] usb 6-1: Manufacturer: syz
[ 1097.741846][T13297] usb 6-1: SerialNumber: syz
[ 1097.747566][ T3751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4950'.
[ 1097.757055][ T3752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4950'.
[ 1097.769515][T13297] usb 6-1: config 0 descriptor??
[ 1097.782977][T13297] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1097.793031][T13297] usb 6-1: selecting invalid altsetting 1
[ 1097.799743][T13297] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1097.813476][T13297] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1097.829151][T13297] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1097.851024][T13297] usb 6-1: media controller created
[ 1097.934752][T13297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1097.982387][T13283] usb 3-1: USB disconnect, device number 5
[ 1098.233351][T13297] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1098.428078][T13297] usb 6-1: USB disconnect, device number 14
[ 1098.597025][ T3822] binder: BINDER_SET_CONTEXT_MGR already set
[ 1098.622938][ T3822] binder: 3821:3822 ioctl 4018620d 200000000100 returned -16
[ 1098.633701][ T3823] binder: BINDER_SET_CONTEXT_MGR already set
[ 1098.662004][ T3823] binder: 3821:3823 ioctl 4018620d 200000004a80 returned -16
[ 1098.675593][ T3822] binder: BINDER_SET_CONTEXT_MGR already set
[ 1098.697728][ T3822] binder: 3821:3822 ioctl 4018620d 200000000100 returned -16
[ 1098.807841][ T3850] vivid-002: =================  START STATUS  =================
[ 1098.832641][ T3850] vivid-002: Radio HW Seek Mode: Bounded
[ 1098.854147][ T3850] vivid-002: Radio Programmable HW Seek: false
[ 1098.879454][T13283] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[ 1098.905462][ T3850] vivid-002: RDS Rx I/O Mode: Block I/O
[ 1098.965433][ T3850] vivid-002: Generate RBDS Instead of RDS: false
[ 1098.997406][ T3865] dlm: non-version read from control device 0
[ 1099.003854][ T3850] vivid-002: RDS Reception: true
[ 1099.033832][ T3850] vivid-002: RDS Program Type: 0 inactive
[ 1099.040928][ T3850] vivid-002: RDS PS Name:  inactive
[ 1099.049080][T13283] usb 3-1: device descriptor read/64, error -71
[ 1099.055855][ T3850] vivid-002: RDS Radio Text:  inactive
[ 1099.076647][ T3850] vivid-002: RDS Traffic Announcement: false inactive
[ 1099.110871][ T3850] vivid-002: RDS Traffic Program: false inactive
[ 1099.135881][ T3850] vivid-002: RDS Music: false inactive
[ 1099.150919][ T3850] vivid-002: ==================  END STATUS  ==================
[ 1099.239195][T13291] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1099.279465][ T3876] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4960'.
[ 1099.289401][T13297] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1099.300744][ T3876] xt_hashlimit: size too large, truncated to 1048576
[ 1099.309399][T13283] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[ 1099.400750][T13291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1099.412611][T13291] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1099.422784][T13291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1099.433021][T13291] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1099.443329][T13291] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1099.448947][T13283] usb 3-1: device descriptor read/64, error -71
[ 1099.452548][T13297] usb 6-1: Using ep0 maxpacket: 32
[ 1099.464272][T13291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1099.489661][T13297] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[ 1099.500167][T13297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1099.509278][T13297] usb 6-1: Product: syz
[ 1099.514291][T13291] usb 4-1: config 0 descriptor??
[ 1099.527254][T13297] usb 6-1: Manufacturer: syz
[ 1099.534188][T13297] usb 6-1: SerialNumber: syz
[ 1099.548596][T13297] usb 6-1: config 0 descriptor??
[ 1099.559432][T13283] usb usb3-port1: attempt power cycle
[ 1099.603719][ T3888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4961'.
[ 1099.614417][ T3888] l2tp_ppp: sess 2/0: no socket in recv
[ 1099.778740][T13297] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 015
[ 1099.824393][T13291] hdpvr 4-1:0.0: unexpected answer of status request, len -71
[ 1099.835515][T13291] hdpvr 4-1:0.0: device init failed
[ 1099.841198][T13291] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[ 1099.857278][T13291] usb 4-1: USB disconnect, device number 126
[ 1099.909564][T13283] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[ 1099.929929][T13283] usb 3-1: device descriptor read/8, error -71
[ 1100.179225][T13283] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[ 1100.200901][T13283] usb 3-1: device descriptor read/8, error -71
[ 1100.309501][T13283] usb usb3-port1: unable to enumerate USB device
[ 1100.323947][ T3913] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1100.349747][T13296] vhci_hcd vhci_hcd.2: vhci_device speed not set
[ 1103.915920][  T809] usb 6-1: USB disconnect, device number 15
[ 1104.161322][ T3925] set match dimension is over the limit!
[ 1104.481299][ T5753] usb 4-1: new full-speed USB device number 127 using dummy_hcd
[ 1104.751462][ T5753] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[ 1104.774625][ T5753] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[ 1104.815038][ T3913] 8021q: adding VLAN 0 to HW filter on device team0
[ 1104.839142][ T5753] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1104.934892][ T5753] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1104.947570][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1104.956547][ T5753] usb 4-1: Product: syz
[ 1104.961018][ T5753] usb 4-1: Manufacturer: syz
[ 1104.974207][ T5753] usb 4-1: SerialNumber: syz
[ 1106.713940][ T5753] usb 4-1: config 0 descriptor??
[ 1106.812425][ T3925] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1107.033535][ T5753] usb 4-1: selecting invalid altsetting 0
[ 1108.219375][   T29] kauditd_printk_skb: 457 callbacks suppressed
[ 1108.219388][   T29] audit: type=1800 audit(1777174484.842:2551): pid=3968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4968" name="file0" dev="tmpfs" ino=2148 res=0 errno=0
[ 1108.472671][ T5753] usb 4-1: USB disconnect, device number 127
[ 1108.816753][T12384] udevd[12384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1109.163478][ T3986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4970'.
[ 1112.600439][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1115.899658][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.906148][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1123.689942][T17728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1123.928338][ T4010] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1123.956912][T17728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1123.975061][T17728] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1123.995885][T17728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1124.005765][T17728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1124.016778][T17728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1124.032233][T17728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1124.040871][T17728] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1124.091172][T12241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1124.170313][ T3913] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1124.343722][T12241] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1124.364467][T12241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1124.372770][T12241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1124.382891][T12241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1124.400606][T12241] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1124.647495][T12241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1124.675184][T12241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1124.685616][T12241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1124.693978][T12241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1124.701752][T12241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1124.942008][T18923] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1124.965995][T18923] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1124.975246][T18923] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1124.983654][T18923] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1124.997764][T18923] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1126.279208][T12241] Bluetooth: hci6: command tx timeout
[ 1126.359054][T12241] Bluetooth: hci0: command tx timeout
[ 1126.519092][T12241] Bluetooth: hci7: command tx timeout
[ 1126.759545][T12241] Bluetooth: hci2: command tx timeout
[ 1127.101458][T12241] Bluetooth: hci8: command tx timeout
[ 1128.359175][T12241] Bluetooth: hci6: command tx timeout
[ 1128.442366][T12241] Bluetooth: hci0: command tx timeout
[ 1128.599027][T12241] Bluetooth: hci7: command tx timeout
[ 1128.844888][T12241] Bluetooth: hci2: command tx timeout
[ 1129.159066][T12241] Bluetooth: hci8: command tx timeout
[ 1130.439247][T12241] Bluetooth: hci6: command tx timeout
[ 1130.519178][T12241] Bluetooth: hci0: command tx timeout
[ 1130.678982][T12241] Bluetooth: hci7: command tx timeout
[ 1130.924966][T12241] Bluetooth: hci2: command tx timeout
[ 1131.239453][T12241] Bluetooth: hci8: command tx timeout
[ 1132.519198][T12241] Bluetooth: hci6: command tx timeout
[ 1132.599095][T12241] Bluetooth: hci0: command tx timeout
[ 1132.759726][T12241] Bluetooth: hci7: command tx timeout
[ 1133.004747][T12241] Bluetooth: hci2: command tx timeout
[ 1133.319163][T12241] Bluetooth: hci8: command tx timeout
[ 1143.489739][T12241] Bluetooth: hci4: command 0x0406 tx timeout
[ 1170.138833][    C1] sched: DL replenish lagged too much
[ 1177.242776][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.251811][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1183.476490][ T4067] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1183.499981][ T4067] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1183.545088][ T4067] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1183.581310][ T4067] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1183.595726][ T4067] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1183.603156][ T4008] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1183.615937][ T4008] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1183.625132][ T4008] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1183.645434][ T4008] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1183.654919][ T4067] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1183.704986][ T4008] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1183.717831][ T4067] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1183.725402][ T4008] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1183.737857][T12241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1183.749675][T12241] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1183.760976][T12241] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1183.771019][T12241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1183.780977][T12241] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1183.788753][T17728] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1183.797578][T17728] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1185.461646][ T4010] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1185.534741][ T4010] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1185.617356][ T4010] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1185.667434][ T4010] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1185.703818][ T4010] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1185.879200][T17728] Bluetooth: hci11: command tx timeout
[ 1185.887439][ T4010] Bluetooth: hci5: command tx timeout
[ 1186.040063][T17728] Bluetooth: hci10: command tx timeout
[ 1186.048500][ T4010] Bluetooth: hci9: command tx timeout
[ 1187.880288][T17728] Bluetooth: hci12: command tx timeout
[ 1187.959726][ T4010] Bluetooth: hci11: command tx timeout
[ 1187.966917][T17728] Bluetooth: hci5: command tx timeout
[ 1188.119513][ T4010] Bluetooth: hci10: command tx timeout
[ 1188.125084][T17728] Bluetooth: hci9: command tx timeout
[ 1189.959173][T17728] Bluetooth: hci12: command tx timeout
[ 1190.039178][ T4010] Bluetooth: hci5: command tx timeout
[ 1190.046811][T17728] Bluetooth: hci11: command tx timeout
[ 1190.199116][ T4010] Bluetooth: hci9: command tx timeout
[ 1190.206858][T17728] Bluetooth: hci10: command tx timeout
[ 1192.039004][ T4010] Bluetooth: hci12: command tx timeout
[ 1192.119002][ T4010] Bluetooth: hci5: command tx timeout
[ 1192.124474][T17728] Bluetooth: hci11: command tx timeout
[ 1192.281599][ T4010] Bluetooth: hci10: command tx timeout
[ 1192.287170][T17728] Bluetooth: hci9: command tx timeout
[ 1194.119039][T17728] Bluetooth: hci12: command tx timeout
[ 1238.862563][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.885054][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1245.877778][T12241] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1245.898458][T12241] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1245.920216][T12241] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1245.934889][T12241] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1245.955025][T12241] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1246.138561][T17728] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 1246.166800][T17728] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 1246.177120][T17728] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 1246.198502][T17728] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 1246.211335][T17728] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 1246.279444][T12241] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1246.307111][T12241] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1246.320348][T12241] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1246.352140][T12241] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1246.360159][T12241] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1246.530576][T12241] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[ 1246.561196][T12241] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[ 1246.572454][T12241] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[ 1246.581765][T12241] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[ 1246.590206][T12241] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[ 1246.826109][T12241] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[ 1246.846396][T12241] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[ 1246.857442][T12241] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[ 1246.871532][T12241] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[ 1246.881046][T12241] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[ 1248.039123][T12241] Bluetooth: hci14: command tx timeout
[ 1248.280265][T12241] Bluetooth: hci15: command tx timeout
[ 1248.519417][T12241] Bluetooth: hci13: command tx timeout
[ 1248.762742][T12241] Bluetooth: hci16: command tx timeout
[ 1249.004111][ T4067] Bluetooth: hci17: command tx timeout
[ 1250.123934][ T4008] Bluetooth: hci14: command tx timeout
[ 1250.226819][   T30] INFO: task kworker/u8:8:1163 blocked for more than 143 seconds.
[ 1250.247817][   T30]       Tainted: G             L      syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1250.289214][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1250.298037][   T30] task:kworker/u8:8    state:D stack:21592 pid:1163  tgid:1163  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1250.330778][   T30] Workqueue: events_unbound linkwatch_event
[ 1250.346086][   T30] Call Trace:
[ 1250.369077][ T4008] Bluetooth: hci15: command tx timeout
[ 1250.380766][   T30]  <TASK>
[ 1250.414363][   T30]  __schedule+0x17b4/0x5680
[ 1250.443248][   T30]  ? __pfx___schedule+0x10/0x10
[ 1250.482405][   T30]  ? schedule+0x90/0x360
[ 1250.499003][   T30]  schedule+0x164/0x360
[ 1250.503290][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1250.515819][   T30]  __mutex_lock+0x7f7/0x1550
[ 1250.521668][   T30]  ? __mutex_lock+0x608/0x1550
[ 1250.526522][   T30]  ? linkwatch_event+0xe/0x60
[ 1250.531695][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1250.536796][   T30]  ? process_scheduled_works+0xa70/0x1860
[ 1250.543091][   T30]  ? process_scheduled_works+0xa70/0x1860
[ 1250.550569][   T30]  linkwatch_event+0xe/0x60
[ 1250.555137][   T30]  process_scheduled_works+0xb5d/0x1860
[ 1250.562392][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1250.568460][   T30]  ? assign_work+0x3d5/0x5e0
[ 1250.577543][   T30]  worker_thread+0xa53/0xfc0
[ 1250.582987][   T30]  kthread+0x388/0x470
[ 1250.587115][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1250.592764][   T30]  ? __pfx_kthread+0x10/0x10
[ 1250.597406][   T30]  ret_from_fork+0x514/0xb70
[ 1250.602353][ T4008] Bluetooth: hci13: command tx timeout
[ 1250.608450][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1250.614152][   T30]  ? __switch_to+0xc79/0x1410
[ 1250.619305][   T30]  ? __pfx_kthread+0x10/0x10
[ 1250.623965][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1250.839121][ T4008] Bluetooth: hci16: command tx timeout
[ 1250.976542][   T30]  </TASK>
[ 1250.980166][   T30] INFO: task kworker/u8:12:13151 blocked for more than 144 seconds.
[ 1250.988292][   T30]       Tainted: G             L      syzkaller #0
[ 1250.996412][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1251.031688][   T30] task:kworker/u8:12   state:D stack:21208 pid:13151 tgid:13151 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1251.044750][   T30] Workqueue: ipv6_addrconf addrconf_dad_work
[ 1251.051061][   T30] Call Trace:
[ 1251.054394][   T30]  <TASK>
[ 1251.057340][   T30]  __schedule+0x17b4/0x5680
[ 1251.062800][   T30]  ? __pfx___schedule+0x10/0x10
[ 1251.067709][   T30]  ? schedule+0x90/0x360
[ 1251.073381][   T30]  schedule+0x164/0x360
[ 1251.084964][ T4067] Bluetooth: hci17: command tx timeout
[ 1251.094345][ T4067] Bluetooth: hci8: command 0x0406 tx timeout
[ 1251.101869][ T4008] Bluetooth: hci0: command 0x0406 tx timeout
[ 1251.109224][ T4067] Bluetooth: hci7: command 0x0406 tx timeout
[ 1251.122988][ T4008] Bluetooth: hci6: command 0x0406 tx timeout
[ 1251.131053][ T4067] Bluetooth: hci2: command 0x0406 tx timeout
[ 1251.249138][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1251.274775][   T30]  __mutex_lock+0x7f7/0x1550
[ 1251.295433][   T30]  ? __mutex_lock+0x608/0x1550
[ 1251.301359][   T30]  ? addrconf_dad_work+0x11e/0x14c0
[ 1251.306824][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1251.312041][   T30]  addrconf_dad_work+0x11e/0x14c0
[ 1251.317113][   T30]  ? lock_acquire+0x106/0x350
[ 1251.328390][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1251.334241][   T30]  ? __pfx_addrconf_dad_work+0x10/0x10
[ 1251.339925][   T30]  ? process_scheduled_works+0xa70/0x1860
[ 1251.345808][   T30]  ? process_scheduled_works+0xa70/0x1860
[ 1251.352243][   T30]  ? process_scheduled_works+0xa70/0x1860
[ 1251.358027][   T30]  process_scheduled_works+0xb5d/0x1860
[ 1251.366486][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1251.374720][   T30]  ? assign_work+0x3d5/0x5e0
[ 1251.379470][   T30]  worker_thread+0xa53/0xfc0
[ 1251.384136][   T30]  kthread+0x388/0x470
[ 1251.388222][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1251.393812][   T30]  ? __pfx_kthread+0x10/0x10
[ 1251.410419][   T30]  ret_from_fork+0x514/0xb70
[ 1251.415087][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1251.420706][   T30]  ? __switch_to+0xc79/0x1410
[ 1251.425467][   T30]  ? __pfx_kthread+0x10/0x10
[ 1251.431347][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1251.436309][   T30]  </TASK>
[ 1251.458146][   T30] INFO: task kworker/0:9:13290 blocked for more than 144 seconds.
[ 1251.466115][   T30]       Tainted: G             L      syzkaller #0
[ 1251.474872][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1251.492382][   T30] task:kworker/0:9     state:D stack:20672 pid:13290 tgid:13290 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1251.504601][   T30] Workqueue: events netdev_rx_mode_work
[ 1251.510745][   T30] Call Trace:
[ 1251.514082][   T30]  <TASK>
[ 1251.517024][   T30]  __schedule+0x17b4/0x5680
[ 1251.521765][   T30]  ? wq_worker_sleeping+0x101/0x250
[ 1251.527036][   T30]  ? __pfx___schedule+0x10/0x10
[ 1251.532086][   T30]  ? schedule+0x90/0x360
[ 1251.536389][   T30]  schedule+0x164/0x360
[ 1251.827071][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1251.837803][   T30]  __mutex_lock+0x7f7/0x1550
[ 1251.874399][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[ 1251.879905][   T30]  ? __mutex_lock+0x608/0x1550
[ 1251.884731][   T30]  ? netdev_rx_mode_work+0x19/0x3c0
[ 1251.890413][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1251.895516][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1251.901703][   T30]  ? process_scheduled_works+0xa70/0x1860
[ 1251.907488][   T30]  ? process_scheduled_works+0xa70/0x1860
[ 1251.918378][   T30]  ? process_scheduled_works+0xa70/0x1860
[ 1251.927109][   T30]  netdev_rx_mode_work+0x19/0x3c0
[ 1251.932759][   T30]  ? process_scheduled_works+0xa70/0x1860
[ 1251.938585][   T30]  process_scheduled_works+0xb5d/0x1860
[ 1251.944661][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1251.950979][   T30]  ? assign_work+0x3d5/0x5e0
[ 1251.955620][   T30]  worker_thread+0xa53/0xfc0
[ 1251.963254][   T30]  kthread+0x388/0x470
[ 1251.967382][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1251.972949][   T30]  ? __pfx_kthread+0x10/0x10
[ 1251.977614][   T30]  ret_from_fork+0x514/0xb70
[ 1251.984973][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1251.992880][   T30]  ? __switch_to+0xc79/0x1410
[ 1251.997708][   T30]  ? __pfx_kthread+0x10/0x10
[ 1252.003531][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1252.008378][   T30]  </TASK>
[ 1252.035012][   T30] INFO: task syz.6.4962:3892 blocked for more than 145 seconds.
[ 1252.042962][   T30]       Tainted: G             L      syzkaller #0
[ 1252.050487][   T30]       Blocked by coredump.
[ 1252.055132][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1252.064306][   T30] task:syz.6.4962      state:D stack:26840 pid:3892  tgid:3889  ppid:2920   task_flags:0x40054c flags:0x00080001
[ 1252.110537][   T30] Call Trace:
[ 1252.113875][   T30]  <TASK>
[ 1252.116818][   T30]  __schedule+0x17b4/0x5680
[ 1252.121610][   T30]  ? unwind_get_return_address+0x4d/0x90
[ 1252.127521][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1252.134036][   T30]  ? __pfx___schedule+0x10/0x10
[ 1252.139330][   T30]  ? schedule+0x90/0x360
[ 1252.143625][   T30]  schedule+0x164/0x360
[ 1252.147799][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1252.153318][   T30]  __mutex_lock+0x7f7/0x1550
[ 1252.157950][   T30]  ? task_work_run+0x1d9/0x270
[ 1252.162913][   T30]  ? do_exit+0x70f/0x22c0
[ 1252.167286][   T30]  ? do_group_exit+0x21b/0x2d0
[ 1252.172406][   T30]  ? __mutex_lock+0x608/0x1550
[ 1252.177218][   T30]  ? ip_mc_drop_socket+0x7f/0x270
[ 1252.182283][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1252.187318][   T30]  ? sock_close+0x9b/0x240
[ 1252.191816][   T30]  ip_mc_drop_socket+0x7f/0x270
[ 1252.196685][   T30]  inet_release+0x4b/0x190
[ 1252.201825][ T4070] Bluetooth: hci14: command tx timeout
[ 1252.208073][   T30]  sock_close+0xc3/0x240
[ 1252.216562][   T30]  ? __pfx_sock_close+0x10/0x10
[ 1252.221875][   T30]  __fput+0x44f/0xa60
[ 1252.226389][   T30]  task_work_run+0x1d9/0x270
[ 1252.231557][   T30]  ? __pfx_task_work_run+0x10/0x10
[ 1252.236726][   T30]  ? do_exit+0x70a/0x22c0
[ 1252.248698][   T30]  ? kmem_cache_free+0x182/0x650
[ 1252.254107][   T30]  ? put_net+0x191/0x260
[ 1252.258428][   T30]  do_exit+0x70f/0x22c0
[ 1252.263320][   T30]  ? try_to_wake_up+0x7f2/0x1380
[ 1252.268327][   T30]  ? __pfx_do_exit+0x10/0x10
[ 1252.273527][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1252.278638][   T30]  do_group_exit+0x21b/0x2d0
[ 1252.285525][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1252.291447][   T30]  get_signal+0x1284/0x1330
[ 1252.296019][   T30]  arch_do_signal_or_restart+0xbc/0x830
[ 1252.302047][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1252.308295][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.314848][   T30]  exit_to_user_mode_loop+0x86/0x480
[ 1252.325108][   T30]  ? rcu_is_watching+0x15/0xb0
[ 1252.334343][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.340708][   T30]  do_syscall_64+0x33e/0xf80
[ 1252.345367][   T30]  ? trace_irq_disable+0x3b/0x140
[ 1252.351243][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1252.355969][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.367134][   T30] RIP: 0033:0x7faf34b9cdd9
[ 1252.371971][   T30] RSP: 002b:00007faf35a410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1252.381017][   T30] RAX: fffffffffffffe00 RBX: 00007faf34e16098 RCX: 00007faf34b9cdd9
[ 1252.389453][   T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faf34e16098
[ 1252.397503][   T30] RBP: 00007faf34e16090 R08: 0000000000000000 R09: 0000000000000000
[ 1252.406037][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1252.414785][   T30] R13: 00007faf34e16128 R14: 00007faf34f3f960 R15: 00007faf34f3fa48
[ 1252.424356][   T30]  </TASK>
[ 1252.433772][   T30] INFO: task syz.5.4966:3949 blocked for more than 145 seconds.
[ 1252.442034][ T4070] Bluetooth: hci15: command tx timeout
[ 1252.482585][   T30]       Tainted: G             L      syzkaller #0
[ 1252.489237][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1252.498042][   T30] task:syz.5.4966      state:D stack:28360 pid:3949  tgid:3939  ppid:14693  task_flags:0x400140 flags:0x00080002
[ 1252.510476][   T30] Call Trace:
[ 1252.513796][   T30]  <TASK>
[ 1252.516738][   T30]  __schedule+0x17b4/0x5680
[ 1252.521794][   T30]  ? __pfx___schedule+0x10/0x10
[ 1252.526795][   T30]  ? schedule+0x90/0x360
[ 1252.531212][   T30]  schedule+0x164/0x360
[ 1252.535631][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1252.546140][   T30]  __mutex_lock+0x7f7/0x1550
[ 1252.551031][   T30]  ? kernel_text_address+0xa5/0xe0
[ 1252.556207][   T30]  ? __mutex_lock+0x608/0x1550
[ 1252.561173][   T30]  ? rtnetlink_rcv_msg+0x722/0xbe0
[ 1252.569563][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1252.574702][   T30]  rtnetlink_rcv_msg+0x722/0xbe0
[ 1252.580487][   T30]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[ 1252.587763][   T30]  ? netlink_sendmsg+0x5d4/0xb40
[ 1252.597946][   T30]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1252.603821][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1252.610688][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[ 1252.615686][   T30]  netlink_rcv_skb+0x232/0x4b0
[ 1252.620874][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1252.626473][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1252.632553][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1252.637921][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1252.643663][   T30]  netlink_unicast+0x75c/0x8e0
[ 1252.648494][   T30]  netlink_sendmsg+0x813/0xb40
[ 1252.656915][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1252.662857][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1252.667852][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1252.673666][   T30]  ____sys_sendmsg+0x972/0x9f0
[ 1252.678496][   T30]  ? __might_fault+0xaf/0x130
[ 1252.683840][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1252.699327][   T30]  ? import_iovec+0x73/0xa0
[ 1252.705760][   T30]  ___sys_sendmsg+0x2a5/0x360
[ 1252.713062][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[ 1252.718071][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1252.721839][T12241] Bluetooth: hci13: command tx timeout
[ 1252.724161][   T30]  ? futex_wait+0x2a2/0x390
[ 1252.733564][   T30]  ? __fget_files+0x2a/0x420
[ 1252.738203][   T30]  ? __fget_files+0x3a0/0x420
[ 1252.743548][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1252.748551][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1252.754730][   T30]  ? rcu_is_watching+0x15/0xb0
[ 1252.764021][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.770484][ T3913] bridge_slave_0: left promiscuous mode
[ 1252.776139][   T30]  do_syscall_64+0x15f/0xf80
[ 1252.781156][   T30]  ? trace_irq_disable+0x3b/0x140
[ 1252.786283][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1252.792061][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.798010][   T30] RIP: 0033:0x7f3891f9cdd9
[ 1252.802670][   T30] RSP: 002b:00007f3892e42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1252.812004][   T30] RAX: ffffffffffffffda RBX: 00007f3892216270 RCX: 00007f3891f9cdd9
[ 1252.822391][   T30] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000006
[ 1252.830821][   T30] RBP: 00007f3892032d69 R08: 0000000000000000 R09: 0000000000000000
[ 1252.840218][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1252.848402][   T30] R13: 00007f3892216308 R14: 00007f3892216270 R15: 00007f389233fa48
[ 1252.856564][   T30]  </TASK>
[ 1252.879062][   T30] INFO: task syz.2.4967:3945 blocked for more than 146 seconds.
[ 1252.915863][   T30]       Tainted: G             L      syzkaller #0
[ 1252.922633][T17728] Bluetooth: hci16: command tx timeout
[ 1252.928219][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1252.939843][   T30] task:syz.2.4967      state:D stack:28120 pid:3945  tgid:3940  ppid:31852  task_flags:0x400040 flags:0x00080002
[ 1252.952114][   T30] Call Trace:
[ 1252.956960][   T30]  <TASK>
[ 1252.962810][   T30]  __schedule+0x17b4/0x5680
[ 1252.967407][   T30]  ? __pfx___schedule+0x10/0x10
[ 1252.972831][   T30]  ? schedule+0x90/0x360
[ 1252.977138][   T30]  schedule+0x164/0x360
[ 1252.986032][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1252.992210][   T30]  __mutex_lock+0x7f7/0x1550
[ 1252.996864][   T30]  ? __mutex_lock+0x608/0x1550
[ 1253.004294][   T30]  ? __tun_chr_ioctl+0x3bc/0x1e10
[ 1253.009802][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1253.014897][   T30]  __tun_chr_ioctl+0x3bc/0x1e10
[ 1253.020484][   T30]  ? __pfx___tun_chr_ioctl+0x10/0x10
[ 1253.025846][   T30]  ? __fget_files+0x2a/0x420
[ 1253.030952][   T30]  ? __fget_files+0x3a0/0x420
[ 1253.035687][   T30]  ? __fget_files+0x2a/0x420
[ 1253.041735][   T30]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1253.046855][   T30]  ? __pfx_tun_chr_ioctl+0x10/0x10
[ 1253.053905][   T30]  __se_sys_ioctl+0xfc/0x170
[ 1253.058576][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.065131][   T30]  do_syscall_64+0x15f/0xf80
[ 1253.069920][   T30]  ? trace_irq_disable+0x3b/0x140
[ 1253.075424][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1253.080770][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.086717][   T30] RIP: 0033:0x7f7dae59cdd9
[ 1253.094935][   T30] RSP: 002b:00007f7daf4a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1253.103446][   T30] RAX: ffffffffffffffda RBX: 00007f7dae816090 RCX: 00007f7dae59cdd9
[ 1253.112273][   T30] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003
[ 1253.124503][   T30] RBP: 00007f7dae632d69 R08: 0000000000000000 R09: 0000000000000000
[ 1253.132950][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1253.141556][   T30] R13: 00007f7dae816128 R14: 00007f7dae816090 R15: 00007f7dae93fa48
[ 1253.151033][   T30]  </TASK>
[ 1253.161992][T17728] Bluetooth: hci17: command tx timeout
[ 1253.186052][   T30] INFO: task syz.2.4967:3947 blocked for more than 146 seconds.
[ 1253.193931][   T30]       Tainted: G             L      syzkaller #0
[ 1253.204849][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1253.213990][   T30] task:syz.2.4967      state:D stack:26656 pid:3947  tgid:3940  ppid:31852  task_flags:0x400140 flags:0x00080002
[ 1253.226531][   T30] Call Trace:
[ 1253.230559][   T30]  <TASK>
[ 1253.233540][   T30]  __schedule+0x17b4/0x5680
[ 1253.238094][   T30]  ? __pfx___schedule+0x10/0x10
[ 1253.246455][   T30]  ? schedule+0x90/0x360
[ 1253.251258][   T30]  schedule+0x164/0x360
[ 1253.255473][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1253.262683][   T30]  __mutex_lock+0x7f7/0x1550
[ 1253.267345][   T30]  ? __mutex_lock+0x608/0x1550
[ 1253.273733][   T30]  ? tipc_nl_compat_doit+0x22a/0x650
[ 1253.279482][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1253.284578][   T30]  ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0
[ 1253.295334][   T30]  tipc_nl_compat_doit+0x22a/0x650
[ 1253.350762][   T30]  ? __pfx_tipc_nl_compat_doit+0x10/0x10
[ 1253.356639][   T30]  ? bpf_lsm_capable+0x9/0x20
[ 1253.362036][   T30]  ? security_capable+0x7e/0x2c0
[ 1253.367045][   T30]  tipc_nl_compat_recv+0x8d3/0xcf0
[ 1253.373720][   T30]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[ 1253.381256][   T30]  ? __mutex_trylock_common+0x158/0x260
[ 1253.386873][   T30]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1253.393319][   T30]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[ 1253.404780][   T30]  ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10
[ 1253.411972][   T30]  ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0
[ 1253.418301][   T30]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1253.428370][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1253.434889][   T30]  genl_rcv_msg+0x61c/0x7a0
[ 1253.440123][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1253.445227][   T30]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[ 1253.451504][   T30]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1253.457092][   T30]  ? __asan_memcpy+0x40/0x70
[ 1253.462226][   T30]  ? __skb_clone+0x63/0x7a0
[ 1253.467959][   T30]  netlink_rcv_skb+0x232/0x4b0
[ 1253.473545][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1253.478649][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1253.488146][   T30]  ? down_read+0x270/0x2e0
[ 1253.496119][   T30]  ? genl_rcv+0xd/0x40
[ 1253.500778][   T30]  genl_rcv+0x28/0x40
[ 1253.504815][   T30]  netlink_unicast+0x75c/0x8e0
[ 1253.510085][   T30]  netlink_sendmsg+0x813/0xb40
[ 1253.514908][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1253.520707][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1253.525718][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1253.536210][   T30]  ____sys_sendmsg+0x972/0x9f0
[ 1253.541308][   T30]  ? __might_fault+0xaf/0x130
[ 1253.546043][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1253.551848][   T30]  ? import_iovec+0x73/0xa0
[ 1253.556775][   T30]  ___sys_sendmsg+0x2a5/0x360
[ 1253.562529][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[ 1253.567519][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1253.573214][   T30]  ? futex_wait+0x2a2/0x390
[ 1253.577806][   T30]  ? __fget_files+0x2a/0x420
[ 1253.583392][   T30]  ? __fget_files+0x3a0/0x420
[ 1253.588126][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1253.594873][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1253.601872][   T30]  ? rcu_is_watching+0x15/0xb0
[ 1253.606721][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.614452][   T30]  do_syscall_64+0x15f/0xf80
[ 1253.621257][   T30]  ? trace_irq_disable+0x3b/0x140
[ 1253.627299][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1253.633497][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.644447][   T30] RIP: 0033:0x7f7dae59cdd9
[ 1253.651198][   T30] RSP: 002b:00007f7daf487028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1253.659939][   T30] RAX: ffffffffffffffda RBX: 00007f7dae816180 RCX: 00007f7dae59cdd9
[ 1253.668091][   T30] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004
[ 1253.676664][   T30] RBP: 00007f7dae632d69 R08: 0000000000000000 R09: 0000000000000000
[ 1253.685383][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1253.693773][   T30] R13: 00007f7dae816218 R14: 00007f7dae816180 R15: 00007f7dae93fa48
[ 1253.703750][   T30]  </TASK>
[ 1253.706874][   T30] INFO: task syz.2.4967:3948 blocked for more than 146 seconds.
[ 1253.716944][   T30]       Tainted: G             L      syzkaller #0
[ 1253.724059][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1253.733110][   T30] task:syz.2.4967      state:D stack:27168 pid:3948  tgid:3940  ppid:31852  task_flags:0x400140 flags:0x00080002
[ 1253.830178][   T30] Call Trace:
[ 1253.833551][   T30]  <TASK>
[ 1253.836503][   T30]  __schedule+0x17b4/0x5680
[ 1253.844746][   T30]  ? __pfx___schedule+0x10/0x10
[ 1253.850272][   T30]  ? schedule+0x90/0x360
[ 1253.854570][   T30]  schedule+0x164/0x360
[ 1253.862741][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1253.868377][   T30]  __mutex_lock+0x7f7/0x1550
[ 1253.873480][   T30]  ? __mutex_lock+0x608/0x1550
[ 1253.885465][   T30]  ? rtnetlink_rcv_msg+0x722/0xbe0
[ 1253.891396][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1253.896493][   T30]  rtnetlink_rcv_msg+0x722/0xbe0
[ 1253.901833][   T30]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1253.907976][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1253.913637][   T30]  ? ref_tracker_free+0x693/0x840
[ 1253.920858][   T30]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1253.926301][   T30]  ? __asan_memcpy+0x40/0x70
[ 1253.932616][   T30]  ? __skb_clone+0x63/0x7a0
[ 1253.937207][   T30]  netlink_rcv_skb+0x232/0x4b0
[ 1253.943697][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1253.952909][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1253.958293][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1253.972300][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1253.977591][   T30]  netlink_unicast+0x75c/0x8e0
[ 1253.989552][   T30]  netlink_sendmsg+0x813/0xb40
[ 1253.994424][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1254.000354][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1254.005350][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1254.011473][   T30]  ____sys_sendmsg+0x972/0x9f0
[ 1254.016305][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1254.022033][   T30]  ? import_iovec+0x73/0xa0
[ 1254.026774][   T30]  ___sys_sendmsg+0x2a5/0x360
[ 1254.034896][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[ 1254.050721][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1254.062965][   T30]  ? futex_wait+0x2a2/0x390
[ 1254.067567][   T30]  ? __fget_files+0x2a/0x420
[ 1254.073163][   T30]  ? __fget_files+0x3a0/0x420
[ 1254.077922][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1254.086430][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1254.095134][   T30]  ? rcu_is_watching+0x15/0xb0
[ 1254.100688][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.106818][   T30]  do_syscall_64+0x15f/0xf80
[ 1254.112017][   T30]  ? trace_irq_disable+0x3b/0x140
[ 1254.117097][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1254.122530][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.128493][   T30] RIP: 0033:0x7f7dae59cdd9
[ 1254.133688][   T30] RSP: 002b:00007f7daf466028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1254.145564][   T30] RAX: ffffffffffffffda RBX: 00007f7dae816270 RCX: 00007f7dae59cdd9
[ 1254.154970][   T30] RDX: 0000000000060000 RSI: 0000200000000000 RDI: 0000000000000005
[ 1254.163656][   T30] RBP: 00007f7dae632d69 R08: 0000000000000000 R09: 0000000000000000
[ 1254.183024][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1254.195138][   T30] R13: 00007f7dae816308 R14: 00007f7dae816270 R15: 00007f7dae93fa48
[ 1254.203637][   T30]  </TASK>
[ 1254.206753][   T30] INFO: task syz.2.4967:3950 blocked for more than 147 seconds.
[ 1254.216109][   T30]       Tainted: G             L      syzkaller #0
[ 1254.223317][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1254.232342][   T30] task:syz.2.4967      state:D stack:27168 pid:3950  tgid:3940  ppid:31852  task_flags:0x400140 flags:0x00080002
[ 1254.244751][   T30] Call Trace:
[ 1254.248089][   T30]  <TASK>
[ 1254.252757][   T30]  __schedule+0x17b4/0x5680
[ 1254.257345][   T30]  ? __pfx___schedule+0x10/0x10
[ 1254.265064][   T30]  ? schedule+0x90/0x360
[ 1254.271158][   T30]  schedule+0x164/0x360
[ 1254.275576][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1254.282085][T18923] Bluetooth: hci14: command tx timeout
[ 1254.288040][   T30]  __mutex_lock+0x7f7/0x1550
[ 1254.293059][   T30]  ? __mutex_lock+0x608/0x1550
[ 1254.361785][   T30]  ? rtnetlink_rcv_msg+0x722/0xbe0
[ 1254.368519][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1254.374088][   T30]  rtnetlink_rcv_msg+0x722/0xbe0
[ 1254.380680][   T30]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1254.385869][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1254.391817][   T30]  ? ref_tracker_free+0x693/0x840
[ 1254.396903][   T30]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1254.403176][   T30]  ? __asan_memcpy+0x40/0x70
[ 1254.407841][   T30]  ? __skb_clone+0x63/0x7a0
[ 1254.418982][   T30]  netlink_rcv_skb+0x232/0x4b0
[ 1254.423806][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1254.429992][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1254.435441][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1254.447252][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1254.454524][   T30]  netlink_unicast+0x75c/0x8e0
[ 1254.459965][   T30]  netlink_sendmsg+0x813/0xb40
[ 1254.464790][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1254.471677][   T30]  ? __se_sys_ioctl+0x47/0x170
[ 1254.476555][   T30]  ? do_syscall_64+0x15f/0xf80
[ 1254.519566][T18923] Bluetooth: hci15: command tx timeout
[ 1254.559770][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1254.564801][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1254.570228][   T30]  ____sys_sendmsg+0x972/0x9f0
[ 1254.575479][   T30]  ? __might_fault+0xaf/0x130
[ 1254.583094][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1254.588494][   T30]  ? import_iovec+0x73/0xa0
[ 1254.594774][   T30]  ___sys_sendmsg+0x2a5/0x360
[ 1254.603912][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[ 1254.609551][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1254.614829][   T30]  ? tomoyo_path_number_perm+0x219/0x630
[ 1254.621041][   T30]  ? __fget_files+0x2a/0x420
[ 1254.625714][   T30]  ? __fget_files+0x3a0/0x420
[ 1254.634207][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1254.639993][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1254.645529][   T30]  ? rcu_is_watching+0x15/0xb0
[ 1254.651815][   T30]  ? __pfx_kcov_ioctl+0x10/0x10
[ 1254.656733][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.663389][   T30]  do_syscall_64+0x15f/0xf80
[ 1254.668030][   T30]  ? trace_irq_disable+0x3b/0x140
[ 1254.673799][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1254.678721][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.688737][   T30] RIP: 0033:0x7f7dae59cdd9
[ 1254.695312][   T30] RSP: 002b:00007f7daf445028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1254.705498][   T30] RAX: ffffffffffffffda RBX: 00007f7dae816360 RCX: 00007f7dae59cdd9
[ 1254.715009][   T30] RDX: 0000000004008000 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1254.724293][   T30] RBP: 00007f7dae632d69 R08: 0000000000000000 R09: 0000000000000000
[ 1254.732941][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1254.745572][   T30] R13: 00007f7dae8163f8 R14: 00007f7dae816360 R15: 00007f7dae93fa48
[ 1254.755128][   T30]  </TASK>
[ 1254.758293][   T30] INFO: task syz.2.4967:3951 blocked for more than 147 seconds.
[ 1254.771441][T18923] Bluetooth: hci13: command tx timeout
[ 1254.777712][   T30]       Tainted: G             L      syzkaller #0
[ 1254.784676][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1254.794146][   T30] task:syz.2.4967      state:D stack:28760 pid:3951  tgid:3940  ppid:31852  task_flags:0x400140 flags:0x00080002
[ 1254.806535][   T30] Call Trace:
[ 1254.811117][   T30]  <TASK>
[ 1254.814099][   T30]  __schedule+0x17b4/0x5680
[ 1254.818724][   T30]  ? __kasan_slab_free+0x5c/0x80
[ 1254.825993][   T30]  ? tomoyo_path_number_perm+0x501/0x630
[ 1254.831994][   T30]  ? __pfx___schedule+0x10/0x10
[ 1254.836905][   T30]  ? schedule+0x90/0x360
[ 1254.841815][   T30]  schedule+0x164/0x360
[ 1254.846060][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1254.854679][   T30]  __mutex_lock+0x7f7/0x1550
[ 1254.859652][   T30]  ? __mutex_lock+0x608/0x1550
[ 1254.864486][   T30]  ? dev_ioctl+0x7a4/0x1150
[ 1254.869450][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1254.874553][   T30]  ? cap_capable+0x123/0x460
[ 1254.879956][   T30]  ? security_capable+0xb9/0x2c0
[ 1254.884950][   T30]  ? dev_load+0x21/0x1f0
[ 1254.889906][   T30]  dev_ioctl+0x7a4/0x1150
[ 1254.894307][   T30]  sock_do_ioctl+0x23e/0x320
[ 1254.899331][   T30]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1254.904530][   T30]  sock_ioctl+0x5c6/0x7f0
[ 1254.909628][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[ 1254.914537][   T30]  ? __fget_files+0x2a/0x420
[ 1254.921517][   T30]  ? __fget_files+0x3a0/0x420
[ 1254.926544][   T30]  ? __fget_files+0x2a/0x420
[ 1254.946303][   T30]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1254.951673][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[ 1254.956593][   T30]  __se_sys_ioctl+0xfc/0x170
[ 1254.964228][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.971006][   T30]  do_syscall_64+0x15f/0xf80
[ 1254.975731][   T30]  ? trace_irq_disable+0x3b/0x140
[ 1254.981248][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1254.986002][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.992610][   T30] RIP: 0033:0x7f7dae59cdd9
[ 1254.997081][   T30] RSP: 002b:00007f7daf424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1255.006101][T18923] Bluetooth: hci16: command tx timeout
[ 1255.012260][   T30] RAX: ffffffffffffffda RBX: 00007f7dae816450 RCX: 00007f7dae59cdd9
[ 1255.020595][   T30] RDX: 0000200000000300 RSI: 0000000000008922 RDI: 0000000000000005
[ 1255.028639][   T30] RBP: 00007f7dae632d69 R08: 0000000000000000 R09: 0000000000000000
[ 1255.038409][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1255.048067][   T30] R13: 00007f7dae8164e8 R14: 00007f7dae816450 R15: 00007f7dae93fa48
[ 1255.056403][   T30]  </TASK>
[ 1255.060342][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[ 1255.073354][   T30] 
[ 1255.073354][   T30] Showing all locks held in the system:
[ 1255.085172][   T30] 4 locks held by ksoftirqd/0/15:
[ 1255.090843][   T30] 1 lock held by khungtaskd/30:
[ 1255.095876][   T30]  #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1255.106329][   T30] 3 locks held by kworker/u8:8/1163:
[ 1255.111974][   T30]  #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1255.124568][   T30]  #1: ffffc9000572fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1255.135908][   T30]  #2: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1255.147547][   T30] 1 lock held by klogd/4980:
[ 1255.155401][   T30]  #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150
[ 1255.166794][   T30] 2 locks held by getty/5379:
[ 1255.172915][   T30]  #0: ffff888036f1d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1255.185630][   T30]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[ 1255.196198][   T30] 6 locks held by kworker/u8:13/7428:
[ 1255.202153][   T30]  #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1255.213749][   T30]  #1: ffffc900032a7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1255.224645][   T30]  #2: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1255.235385][   T30]  #3: ffff88805a872128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[ 1255.245975][T18923] Bluetooth: hci17: command tx timeout
[ 1255.252977][   T30]  #4: ffff88805a871258 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[ 1255.265145][   T30]  #5: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[ 1255.275431][   T30] 3 locks held by kworker/u8:12/13151:
[ 1255.282324][   T30]  #0: ffff888032101940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1255.297886][   T30]  #1: ffffc90003627c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1255.312958][   T30]  #2: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0
[ 1255.323886][   T30] 3 locks held by kworker/1:8/13282:
[ 1255.329544][   T30]  #0: ffff88813fe41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1255.342603][   T30]  #1: ffffc90003227c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1255.354026][   T30]  #2: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x1090
[ 1255.365164][   T30] 3 locks held by kworker/0:9/13290:
[ 1255.372266][   T30]  #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1255.383585][   T30]  #1: ffffc90003027c40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1255.398599][   T30]  #2: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x3c0
[ 1255.414281][   T30] 1 lock held by syz.5.4611/32341:
[ 1255.419670][   T30]  #0: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[ 1255.428730][   T30] 1 lock held by syz-executor/2920:
[ 1255.434341][   T30]  #0: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[ 1255.443816][   T30] 2 locks held by syz.6.4962/3892:
[ 1255.449154][   T30]  #0: ffff88805a186240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[ 1255.459432][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x7f/0x270
[ 1255.470444][   T30] 1 lock held by syz.1.4963/3913:
[ 1255.475528][   T30] 1 lock held by syz.5.4966/3949:
[ 1255.487189][   T30]  #0: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[ 1255.496855][   T30] 1 lock held by syz.2.4967/3945:
[ 1255.503192][   T30]  #0: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[ 1255.512888][   T30] 3 locks held by syz.2.4967/3947:
[ 1255.518029][   T30]  #0: ffffffff8fe3dd08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1255.529177][   T30]  #1: ffffffff8fe3db40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1255.538287][   T30]  #2: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_compat_doit+0x22a/0x650
[ 1255.549599][   T30] 1 lock held by syz.2.4967/3948:
[ 1255.554663][   T30]  #0: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[ 1255.565392][   T30] 1 lock held by syz.2.4967/3950:
[ 1255.571211][   T30]  #0: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[ 1255.581965][   T30] 1 lock held by syz.2.4967/3951:
[ 1255.587025][   T30]  #0: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[ 1255.601855][   T30] 2 locks held by syz.3.4970/3986:
[ 1255.611383][   T30]  #0: ffffffff90329c48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1255.625154][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[ 1255.636058][   T30] 2 locks held by syz.3.4970/3990:
[ 1255.642956][   T30]  #0: ffffffff90323c50 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1255.652809][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[ 1255.662526][   T30] 2 locks held by syz-executor/4013:
[ 1255.667845][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1255.679187][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1255.692098][   T30] 2 locks held by syz-executor/4014:
[ 1255.697457][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1255.708908][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1255.722716][   T30] 2 locks held by syz-executor/4025:
[ 1255.728067][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1255.737598][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1255.751504][   T30] 2 locks held by syz-executor/4032:
[ 1255.756844][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1255.767278][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1255.779540][   T30] 2 locks held by syz-executor/4038:
[ 1255.784875][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1255.795186][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1255.812966][   T30] 2 locks held by syz-executor/4076:
[ 1255.818540][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1255.830189][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1255.841777][   T30] 2 locks held by syz-executor/4077:
[ 1255.847135][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1255.857293][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1255.871003][   T30] 2 locks held by syz-executor/4082:
[ 1255.876361][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1255.887454][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1255.898605][   T30] 2 locks held by syz-executor/4083:
[ 1255.904265][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1255.915202][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1255.927553][   T30] 2 locks held by syz-executor/4090:
[ 1255.933195][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1255.949571][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1255.963820][   T30] 2 locks held by syz-executor/4115:
[ 1255.969824][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1255.981911][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1255.992876][   T30] 2 locks held by syz-executor/4116:
[ 1255.998196][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1256.008477][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1256.020889][   T30] 2 locks held by syz-executor/4124:
[ 1256.026233][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1256.037235][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1256.048267][   T30] 2 locks held by syz-executor/4125:
[ 1256.055440][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1256.065263][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1256.076334][   T30] 2 locks held by syz-executor/4133:
[ 1256.082526][   T30]  #0: ffffffff8fdbfc08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1256.095564][   T30]  #1: ffffffff8fdce8c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[ 1256.107119][   T30] 
[ 1256.109985][   T30] =============================================
[ 1256.109985][   T30] 
[ 1256.118556][   T30] NMI backtrace for cpu 1
[ 1256.118575][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1256.118600][   T30] Tainted: [L]=SOFTLOCKUP
[ 1256.118607][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1256.118618][   T30] Call Trace:
[ 1256.118626][   T30]  <TASK>
[ 1256.118633][   T30]  dump_stack_lvl+0xe8/0x150
[ 1256.118660][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[ 1256.118686][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1256.118709][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1256.118736][   T30]  sys_info+0x135/0x170
[ 1256.118758][   T30]  watchdog+0xfd3/0x1030
[ 1256.118800][   T30]  ? watchdog+0x1c9/0x1030
[ 1256.118829][   T30]  kthread+0x388/0x470
[ 1256.118853][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1256.118876][   T30]  ? __pfx_kthread+0x10/0x10
[ 1256.118900][   T30]  ret_from_fork+0x514/0xb70
[ 1256.118921][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1256.118941][   T30]  ? __switch_to+0xc79/0x1410
[ 1256.118968][   T30]  ? __pfx_kthread+0x10/0x10
[ 1256.118992][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1256.119028][   T30]  </TASK>
[ 1256.230020][   T30] Sending NMI from CPU 1 to CPUs 0:
[ 1256.235280][    C0] NMI backtrace for cpu 0
[ 1256.235299][    C0] CPU: 0 UID: 0 PID: 11835 Comm: kworker/0:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1256.235321][    C0] Tainted: [L]=SOFTLOCKUP
[ 1256.235326][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1256.235337][    C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[ 1256.235365][    C0] RIP: 0010:lock_release+0x129/0x3c0
[ 1256.235385][    C0] Code: dd 00 48 89 ef 4c 89 f6 e8 a4 e9 05 0a 44 89 64 24 14 45 89 e5 85 c0 0f 84 d7 00 00 00 48 85 ed 0f 84 13 01 00 00 83 7d 24 00 <0f> 85 d6 01 00 00 8b 45 20 3d 00 00 20 00 48 8b 5c 24 08 8b 54 24
[ 1256.235398][    C0] RSP: 0018:ffffc90000006df0 EFLAGS: 00000046
[ 1256.235411][    C0] RAX: 0000000000000001 RBX: 0000000000000014 RCX: 0000000080000101
[ 1256.235423][    C0] RDX: ffffc90000006f01 RSI: ffffffff8e95cd60 RDI: ffff88807e39aaf0
[ 1256.235433][    C0] RBP: ffff88807e39aaf0 R08: ffffc90000007c00 R09: 0000000000000000
[ 1256.235445][    C0] R10: ffffc90000006f78 R11: fffff52000000df1 R12: 0000000000000004
[ 1256.235456][    C0] R13: 0000000000000004 R14: ffffffff8e95cd60 R15: ffff88807e399ec0
[ 1256.235467][    C0] FS:  0000000000000000(0000) GS:ffff888125295000(0000) knlGS:0000000000000000
[ 1256.235479][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1256.235490][    C0] CR2: 000055f72a8e1ed8 CR3: 000000003bb24000 CR4: 00000000003526f0
[ 1256.235505][    C0] Call Trace:
[ 1256.235511][    C0]  <IRQ>
[ 1256.235518][    C0]  ? unwind_next_frame+0xa6/0x2550
[ 1256.235539][    C0]  ? unwind_next_frame+0xa6/0x2550
[ 1256.235556][    C0]  unwind_next_frame+0x1bba/0x2550
[ 1256.235575][    C0]  ? unwind_next_frame+0xa6/0x2550
[ 1256.235593][    C0]  ? NF_HOOK+0x336/0x3c0
[ 1256.235610][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1256.235632][    C0]  arch_stack_walk+0x11b/0x150
[ 1256.235653][    C0]  ? process_backlog+0xaa3/0x1950
[ 1256.235670][    C0]  stack_trace_save+0xa9/0x100
[ 1256.235691][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1256.235712][    C0]  ? stack_trace_save+0xa9/0x100
[ 1256.235734][    C0]  kasan_save_track+0x3e/0x80
[ 1256.235754][    C0]  ? kasan_save_track+0x3e/0x80
[ 1256.235771][    C0]  ? kasan_save_free_info+0x46/0x50
[ 1256.235786][    C0]  ? __kasan_slab_free+0x5c/0x80
[ 1256.235805][    C0]  ? kfree+0x1c5/0x640
[ 1256.235822][    C0]  ? skb_release_data+0x828/0xa60
[ 1256.235839][    C0]  ? __kfree_skb+0x5d/0x210
[ 1256.235855][    C0]  ? nft_synproxy_eval_v4+0x352/0x4e0
[ 1256.235875][    C0]  ? nft_synproxy_do_eval+0x305/0x580
[ 1256.235894][    C0]  ? nft_do_chain+0x467/0x19f0
[ 1256.235915][    C0]  ? nft_do_chain_inet+0x360/0x4b0
[ 1256.235934][    C0]  ? nf_hook_slow+0xc5/0x220
[ 1256.235952][    C0]  ? NF_HOOK+0x21f/0x3c0
[ 1256.235966][    C0]  ? NF_HOOK+0x336/0x3c0
[ 1256.235995][    C0]  kasan_save_free_info+0x46/0x50
[ 1256.236011][    C0]  __kasan_slab_free+0x5c/0x80
[ 1256.236030][    C0]  kfree+0x1c5/0x640
[ 1256.236052][    C0]  ? skb_release_data+0x828/0xa60
[ 1256.236071][    C0]  skb_release_data+0x828/0xa60
[ 1256.236091][    C0]  __kfree_skb+0x5d/0x210
[ 1256.236108][    C0]  nft_synproxy_eval_v4+0x352/0x4e0
[ 1256.236130][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[ 1256.236151][    C0]  ? nf_ip_checksum+0x13c/0x510
[ 1256.236173][    C0]  nft_synproxy_do_eval+0x305/0x580
[ 1256.236193][    C0]  ? __ip_vs_conn_in_get+0xa6/0x10f0
[ 1256.236214][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 1256.236236][    C0]  ? __pfx___ip_vs_conn_in_get+0x10/0x10
[ 1256.236257][    C0]  nft_do_chain+0x467/0x19f0
[ 1256.236283][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[ 1256.236311][    C0]  ? nf_nat_inet_fn+0x95b/0xbf0
[ 1256.236330][    C0]  nft_do_chain_inet+0x360/0x4b0
[ 1256.236351][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1256.236374][    C0]  ? nf_nat_ipv4_local_in+0x223/0x720
[ 1256.236393][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1256.236413][    C0]  nf_hook_slow+0xc5/0x220
[ 1256.236433][    C0]  NF_HOOK+0x21f/0x3c0
[ 1256.236449][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1256.236464][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1256.236478][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1256.236491][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[ 1256.236508][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1256.236526][    C0]  ? ip_local_deliver+0x12a/0x1b0
[ 1256.236542][    C0]  NF_HOOK+0x336/0x3c0
[ 1256.236557][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1256.236572][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1256.236586][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1256.236601][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1256.236618][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1256.236632][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1256.236646][    C0]  ? process_backlog+0x3eb/0x1950
[ 1256.236661][    C0]  process_backlog+0xaa3/0x1950
[ 1256.236687][    C0]  __napi_poll+0xae/0x340
[ 1256.236700][    C0]  ? skb_defer_free_flush+0x233/0x260
[ 1256.236716][    C0]  net_rx_action+0x627/0xf70
[ 1256.236731][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1256.236750][    C0]  ? __pfx_net_rx_action+0x10/0x10
[ 1256.236772][    C0]  ? try_to_wake_up+0x7f2/0x1380
[ 1256.236796][    C0]  handle_softirqs+0x22a/0x840
[ 1256.236813][    C0]  ? do_softirq+0x76/0xd0
[ 1256.236830][    C0]  ? wg_socket_send_skb_to_peer+0x16b/0x1d0
[ 1256.236851][    C0]  do_softirq+0x76/0xd0
[ 1256.236865][    C0]  </IRQ>
[ 1256.236870][    C0]  <TASK>
[ 1256.236876][    C0]  __local_bh_enable_ip+0xf8/0x130
[ 1256.236892][    C0]  wg_socket_send_skb_to_peer+0x16b/0x1d0
[ 1256.236915][    C0]  wg_packet_tx_worker+0x1c8/0x7c0
[ 1256.236936][    C0]  ? process_scheduled_works+0xa70/0x1860
[ 1256.236952][    C0]  process_scheduled_works+0xb5d/0x1860
[ 1256.236978][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1256.236996][    C0]  ? assign_work+0x3d5/0x5e0
[ 1256.237012][    C0]  worker_thread+0xa53/0xfc0
[ 1256.237040][    C0]  kthread+0x388/0x470
[ 1256.237060][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1256.237074][    C0]  ? __pfx_kthread+0x10/0x10
[ 1256.237093][    C0]  ret_from_fork+0x514/0xb70
[ 1256.237109][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1256.237124][    C0]  ? __switch_to+0xc79/0x1410
[ 1256.237145][    C0]  ? __pfx_kthread+0x10/0x10
[ 1256.237163][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1256.237186][    C0]  </TASK>
[ 1256.884475][ T3913] xfrm0: left promiscuous mode
[ 1256.889747][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1256.896626][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1256.907308][   T30] Tainted: [L]=SOFTLOCKUP
[ 1256.911632][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1256.921694][   T30] Call Trace:
[ 1256.924995][   T30]  <TASK>
[ 1256.927929][   T30]  vpanic+0x56c/0xa60
[ 1256.931923][   T30]  ? __pfx___schedule+0x10/0x10
[ 1256.936789][   T30]  ? __pfx_vpanic+0x10/0x10
[ 1256.941301][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[ 1256.947472][   T30]  panic+0xc5/0xd0
[ 1256.951204][   T30]  ? __pfx_panic+0x10/0x10
[ 1256.955633][   T30]  ? preempt_schedule_thunk+0x16/0x30
[ 1256.961025][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1256.967197][   T30]  watchdog+0x102c/0x1030
[ 1256.971546][   T30]  ? watchdog+0x1c9/0x1030
[ 1256.976154][   T30]  kthread+0x388/0x470
[ 1256.980236][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1256.984928][   T30]  ? __pfx_kthread+0x10/0x10
[ 1256.989528][   T30]  ret_from_fork+0x514/0xb70
[ 1256.994129][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1256.999251][   T30]  ? __switch_to+0xc79/0x1410
[ 1257.003955][   T30]  ? __pfx_kthread+0x10/0x10
[ 1257.008562][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1257.013352][   T30]  </TASK>
[ 1257.016717][   T30] Kernel Offset: disabled
[ 1257.021026][   T30] Rebooting in 86400 seconds..