last executing test programs:

11.060990004s ago: executing program 4 (id=1133):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f0000000140)={{0x7000, 0xd000, 0xf000, 0x9, 0x7f, 0x8, 0xf9, 0x8, 0x0, 0x84, 0x7, 0xb}, {0x70000, 0x819b000, 0x0, 0x3, 0x1, 0x7, 0x6f, 0x9, 0x1, 0x4, 0xfa, 0x18}, {0xd000, 0x26000, 0x10, 0x4, 0x11, 0x81, 0x0, 0x5, 0x3, 0x4, 0x92, 0xc1}, {0xeeee8000, 0xfff44000, 0xc, 0x7, 0x1, 0xfa, 0xff, 0x0, 0xfa, 0x29, 0x9, 0x9}, {0xeeee8000, 0x200000, 0xf, 0x9, 0x2, 0x2, 0x7, 0xf1, 0x6, 0x6e, 0x0, 0x8}, {0x26000, 0x1ff8, 0xf, 0x2, 0xed, 0x2, 0x4, 0x1, 0x5, 0xe, 0x9, 0xa}, {0xdddd1000, 0xa000, 0x3, 0x0, 0x9, 0x5, 0x7, 0x22, 0xa, 0x6, 0xff, 0x7}, {0x1, 0xeeef0000, 0x8, 0xe, 0x13, 0x1e, 0x3, 0xe, 0x5, 0x7, 0x2, 0x4}, {0x100000, 0x405}, {0x100000, 0xff81}, 0x0, 0x0, 0x6000, 0x0, 0x6, 0x2580, 0x800f900, 0x0, [0x40000000006257, 0x2, 0x8000000000002003, 0xc]})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
capset(0x0, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = eventfd2(0x9, 0x0)
io_submit(0x0, 0x0, 0x0)
write$eventfd(r2, 0x0, 0x0)
read(r2, &(0x7f0000000480)=""/82, 0x52)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000340)=""/54, &(0x7f0000000440)=0x36)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00')
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)='2', 0x1}, {0x0}], 0x2)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r7, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6)
r8 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00')
r9 = openat(r8, &(0x7f0000000d00)='nfsd.fh/channel\x00', 0x20002, 0x0)
write(r9, &(0x7f0000000e00)='localhost 1 \\x00000001  000000000 /\n', 0x24)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="20002dbd7000fedbdf25060000001400028005000d0001000000080009004d3bc95c080004000400000008000500eeea0000040001800800040005000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20000090)
sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000580)={0x128, r10, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x64}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x20004005}, 0x14)

9.927256756s ago: executing program 4 (id=1137):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000600)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000640)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0xc0802, 0x0)
pwritev(r2, &(0x7f0000000800)=[{&(0x7f0000000840)="00214717a7070000000083e7555ab44c3c0a7e1bbbaa90", 0x17}], 0x100000000000027c, 0x14, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000680)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000006c0)={0x28, 0x4, r1, r1, 0x7, 0x101, 0x3fff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000001840))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x9, 0xfff, 0x7, 0x0, 0x12, 0xd, 0x3e, 0x4, 0x2b, 0x3, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x0, 0x9, 0x18, 0x4, 0x81, 0x97, 0x40, 0x5, 0xbc, 0x4, 0xd, 0x3}, {0xd3, 0x80b0, 0x5, 0x2, 0x84, 0x9, 0xfc, 0xe, 0xe, 0x9, 0xe, 0x6, 0x4}]})
listns(&(0x7f00000001c0)={0x20, 0x0, 0x2, 0x1c020080, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000080))
r5 = socket(0x10, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000016c0)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000001700)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000001740), 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'pim6reg0\x00'})
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000001780)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r6, &(0x7f00000017c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000001800)=0x1, 0x4)
close_range(r5, r6, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000240)="095630535f09d18ca623889b57562a65414011185f0e12586f489ca543d9cfa50acedbdda3299233c698d4bf82ec81bd4cd103e4dd3c701659ffce801c2bfbc88639f725a54a2d7888198aa37a14f9f43ada10f40ffff49d774a8efec472a3262b849f1aaa186e81294009c015d379c8ce8fe2e7a2ea7986b52f29f4511864d3c899a26f3ec5f0", 0x87}, {&(0x7f00000003c0)="bcfd3e8020fdca790cfd0da8ebc86c7cedfbdf5a236702f58b6274645d718ff24d915c0c60c0122606ab617f95718e5de34526e536a28da62f7ce148918fae0ba4dc576b393f5c82cdaf69ee24929f31a328767a5d3dda5d48ac5c5ffbc2028713181f1e7e17f683cdb1e5a1fb9e2ddef093a759a4d9157c39211d211e7e5f8e5cd587acc62642d673198ee7ea900016a4d3b84d53c1", 0x5}, {&(0x7f0000000480)="dcff061b3aa0be709452def6c06af75aad6108a83dd2f5883638c53ed371ddd9569a4f00864e6d9627c64b89b5ada46ed848dc10b6053a5b756d01958575a1f2af01a1c7c6a68d51bb8e1fb90fd27a7fd0a4b35fed8e7d25fbeccb9b7d33b73b47ee763b595c3a9c0e295c1ec0fbd9976c4716ee8127d5fac2eb38c4c8be3d06da229b7c20c0d0eb8790c3b7231e48f3", 0x90}, {&(0x7f0000000540)="9554217463bea5dfac86be6b8611c2a4c2971e5bccd106005a454d61743ee3342773e9ff93c6064847657145e6441a43f01f97d02758b1570c3391515900c441a66d67281840797541a290ca44cdf3f0bf9f4e3b80a9caefab81eb15ae7b8b837eebd45c4acac43fd8114fa16037b589e20001c8f77f4f", 0x77}, {0x0}, {&(0x7f0000000740)="6567276ef1e07194accd1997d4ef42c1724e15b95747a5587decb17a7fdf80824e10d058b39d8455ad6237573631c87e4b5f6672bf6ee68537fa4ad8a904d99b99ea547efb8a8bd8841a9ea0fe6e3d1d8f7edf1c2c508fb6625e7d1766987c080fb365", 0x46}], 0x6)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x7, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450})

9.2711268s ago: executing program 4 (id=1140):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0xfff, 0x0, 0x9, 0x549, 0xfffffe0000000001, 0xfa13, 0xffffffff}, 0x0)
sendfile(r0, r0, 0x0, 0x20000005) (async)
r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) (async)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000100)=0x79, 0x4) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfe, 0x7ffc1ffb}]}) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x7fffffffffffffff, 0x800)
fchmod(r4, 0x1) (async)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x10) (async)
sendto$inet(r3, 0x0, 0x0, 0x240467bc, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10)
write(r3, &(0x7f0000000300)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d2b3173d11d86322843bc6ee4beeff184bfeb2f15cfd1ae189bb68995feab724d720656d528d8b67823c02941343f1f478e74a152bdc0a55b2ce0c3dfb338c25e4b63a3a3063c240ea4a0712507fad227c65b7da6ed66f943a61c724a0db0d774b994b4fc8ddc44a10c32f59e555e5d1b07195df685079189c3140956b641b5617e9bab446bc57bd614e99827f8e1797ec6d59fc7cf1057bd947f233de2e12d217aa517da60e38a648e3a3ef7359bacef04e583e430786d6606bc06d8d48297e76deaecc592b98ff4c4024f7cbb9ab9b3d0c5aa08e940fdc7462fd7e92632f3a36576d83088a30f960b69d972c263d6d5a21f4f69b131f762326bddbcc121602419c39bd32a198a9996df6e84f9f09ffe48c3c9581158c0fdeca83338d36f6e5665f090a667d0c62c967a87b6099f4c03c87ee4c09d2d47724f7b7a69d7c1f06936eb49bb92dd9ff83859c3a0218d618a8831666d7060ef6f39af904daf0bf662f7ae82b1527f3251dbebded35df44065981f486bfff3a3493e6b5c9eaef877d7a74356b1d83a0d65df13789ad181270d98d1f09a9e021354910cf891ae4f027bd4864b8d6888b807b70b499eb0d934c1f899ac1cbb8378da0e43c0161003d0d8107e0367174107436ab7b7199373d30415d89a77a0c91c313a191bb95751ed33cdb641b0a7d2a57166941ec6d68461cfc1d7b01f3f560f2d06669ac83b83c210593f1072f985a623cc7167353272b4aa91e9d1d4f992ba9e38841818850e90f144671", 0x2e7) (async)
sendto$inet(r3, &(0x7f0000000600)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000006c0)=0x474c, 0x4) (async)
connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @empty}, 0x10) (async)
sendmmsg(r2, &(0x7f0000000740), 0x800001d, 0x300)
setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000780)=0x6, 0x4) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @local}, 0x10) (async)
r5 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x28008841)
preadv2(r1, &(0x7f0000000a00)=[{&(0x7f00000001c0)=""/62, 0x3e}, {0x0}, {&(0x7f00000009c0)=""/61, 0x3d}], 0x3, 0x0, 0x0, 0x0) (async)
sendmsg$can_raw(r5, 0x0, 0x84841) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d132, 0xffffffffffffffff, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000406d0493c20000000000fd090224"], 0x0)

5.834159719s ago: executing program 0 (id=1154):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008080}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000003000000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

5.705313298s ago: executing program 0 (id=1155):
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r0 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbd8, 0x100, 0x0, 0xfffffffe}, &(0x7f0000000040), &(0x7f0000000480), &(0x7f0000000080))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4)
close(0x3)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000002840)={0x0, 0x0, 0x3, 0x2}, 0x1)
r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x40200, 0x2, 0x4}, 0x18)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x1)

5.109153543s ago: executing program 0 (id=1158):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000003c00)={0x78, 0x10, 0x701, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x63, 0x1, 0x0, 0x0, @str='!\x8f17k.\xb4\\\xc9\x89\x18\v$7\xbf\x05\xeau7~|N\x15\x86|\xadd\x96 \xef\x97\xc7\xd8\xc8/a\xf6\x87^r-`\xac\xcd\x0f\t\xf5\xf3\x89y6\xce\xf3u\xe4\xd8k\x8b\xdc\x95\xe6F:\bZ\x012\xd2\xe8\xb03\x06\xaa\xbf\x87\xdbL\x9a\x1c+\x0e\x98\xdbN\x84f\x81\x00\x98@\x00\x00\x00\x00\x00'}]}, 0x78}}, 0x0)

4.997376897s ago: executing program 0 (id=1160):
socket(0x10, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000140), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160d1b08cbacc95291d000905", @ANYRES8=r2, @ANYBLOB="0100"], 0x0) (async)
r3 = syz_open_dev$audion(&(0x7f0000000680), 0x3, 0x1) (async)
pipe(&(0x7f00000006c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
dup(0xffffffffffffffff) (async)
timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
read$FUSE(r4, 0x0, 0x0)
syz_clone(0x810011, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
gettid() (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
readv(r1, 0x0, 0x0) (async)
write$P9_RVERSION(r3, &(0x7f0000000740)=ANY=[], 0xfffffcd9) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000780)=0x8) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000007c0)={0x0, 0x0})
symlinkat(&(0x7f0000000800)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd98df26cf76010eb, 0x28012, r5, 0xddf46000)
r6 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mount$fuseblk(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x0, 0x1151400, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000200), 0x4)

4.842743316s ago: executing program 3 (id=1161):
r0 = gettid()
timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000002c0))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x8001}]})
r2 = signalfd(r1, &(0x7f00000000c0)={[0x6]}, 0x8)
mkdir(&(0x7f0000000100)='./control\x00', 0x111)
close(r2)
inotify_init1(0x800)
fcntl$setstatus(r2, 0x4, 0x2c00)
r3 = gettid()
fcntl$setown(r2, 0x8, r3)
inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0x40000c17)
rt_sigprocmask(0x0, &(0x7f00000001c0)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000280)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
rmdir(&(0x7f0000000340)='./control\x00')
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
r4 = socket(0x10, 0x3, 0x9)
connect$netlink(r4, &(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="0a00000a140000001100011b00000000000000000a00000a"], 0x28}}, 0x90)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a40)={'syz0\x00', {0xfff7, 0x6, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0xfffffffc, 0x7f, 0xfffffffd, 0x7fff, 0x9, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x5], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x0, 0x10, 0x6, 0x7, 0x8, 0xe61, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x3, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x0, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0xc, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0xfc, 0x1003, 0xf1, 0x6, 0x6, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0xfffffff3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8d, 0x2, 0xa347, 0x77, 0x3, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x3, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x8, 0x5d3a, 0x5, 0x9, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf79f, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x8, 0x200, 0xd970, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8400, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x215c, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x206, 0x8, 0x431, 0x7, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000980), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000009c0), 0x2, 0x141102)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0)

3.733145696s ago: executing program 2 (id=1165):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000600003805c0000800c000180060001001e1c00004c000a8045d56569be0aab000100ca058da6f12e9e8997d7b642895db891e7a37595523d845fb5c9f317af99cffaf8299fa09598c351993ea0c9887b171e8a7ab4f6c49c0a38ca99db610d000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
bind$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x2, 0x4e21, @multicast2}, 0x10)
set_mempolicy(0x3, &(0x7f0000000b00)=0xffffffffffffff00, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x2, 0x4e21, @loopback}, 0x10)
r2 = signalfd4(r1, &(0x7f0000000b80)={[0xffeffffffffffffa]}, 0x8, 0x800)
openat$mice(0xffffffffffffff9c, 0x0, 0x0)
r3 = syz_io_uring_setup(0xf0c, &(0x7f0000000bc0)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000c40)=<r4=>0x0, &(0x7f0000000c80)=<r5=>0x0, &(0x7f0000000cc0)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000d00)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x3208}})
io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
pause()
fcntl$setsig(0xffffffffffffffff, 0xa, 0x41)
r7 = gettid()
timer_create(0x0, &(0x7f0000000d80)={0x0, 0x11, 0x4, @tid=r7}, &(0x7f0000000dc0))
timer_settime(0x0, 0x0, &(0x7f0000000e00)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000e40)='bic', 0x3)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000e80), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000ec0), 0xffffffffffffff94, 0xb, 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000f00)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r8 = gettid()
timer_create(0x0, &(0x7f0000000880)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f00000008c0))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000900)={0x1, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000940), 0x0)

3.614564827s ago: executing program 1 (id=1166):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = signalfd(r0, &(0x7f0000000040)={[0xb3]}, 0x8)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1d168b9c22861b5044f07b4882c3ec89e5b8093ca6505a6becdb2ce34a69cc4ec0f385b303761160a528df8fa04b3d5000d24284e5c947d968619af40dde0262487bc4dc3fb8b07a99f9b507bc9b1833a97ff372d3a3ff7801e0716e7d86cce7fea7a1b0a3323a836660b752a75f6ab78993195b5f190c507f8315c5337b83fdc9f253fd7abf2302ca0f442c990d5de68c7cb847dbe4ade06abdd5df6493677633b0894b1f311bdadc9535e954a4b5a83fb2c4fa5b282a8c28af692822402aa01094c6af515c35e5bca397d6046bf7cd4c340b8bc926df3b19061f90e6801f9cc1d065ef8b1e2f54a999", @ANYRES16=r0, @ANYRESDEC=r1], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000280)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000440)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1})
openat$sequencer2(0xffffff9c, &(0x7f0000000480), 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000004c0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800050000000400380205000900010000000500"], 0x88}}, 0x0)

3.516976416s ago: executing program 1 (id=1167):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = syz_clone(0x31b4a180, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, r5, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r6, &(0x7f0000002780)={0x2020}, 0x2020)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r7 = fsopen(&(0x7f0000000100)='bfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x77)
unlinkat(r8, &(0x7f0000000700)='./file0\x00', 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x4002000ff9, 0xf)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c)
r10 = socket$kcm(0x10, 0x2, 0x4)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
io_setup(0x8, &(0x7f0000000600))
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

3.413095618s ago: executing program 4 (id=1168):
openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x80802, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000140)=@id, 0x10, 0x0}, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x9, 0x2, @SEQ_CONTROLLER=0xfe, 0x10, 0x7, 0xb})

2.635147296s ago: executing program 2 (id=1169):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
ioctl$int_in(r0, 0x5452, &(0x7f00000003c0)=0xffffffffffffff6e)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockname$netlink(r1, 0x0, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async)
sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000740)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x4040) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket(0x40000000015, 0x3, 0x0)
ppoll(&(0x7f0000000780)=[{r4, 0x800}], 0x1, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000000300010029bd7000fedbdf25000000004332", @ANYRES16=r0, @ANYBLOB="242400002248000008001300", @ANYRES32=0x0, @ANYBLOB="140003006970766c616e31000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x0) (async)
fstat(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000940)={r6, r7, 0xffffffffffffffff}, 0xc)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmmsg$alg(r4, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="1990c2fdb5be57761b563585002dd81506f19d44cbc05a39ae55099360dd4ecdb448c131b50b2dd19492844d5676b8e1185db5dc3dd7659524a3d399ae3b711e4fd182e88b6e40a48b9eb16fc33e5389a5e0ca244e35d17cb5628a8917f845429642ff61484c2fe7e027f27b9e", 0x6d}], 0x1, &(0x7f0000000880)=[@iv={0x70, 0x117, 0x2, 0x55, "16de19aae8db73c0ec00000000000000005666d1fb0d35dffc167d15259ed6cf74493147a3d5dffd7fd34e46144968b747ead90d726a11f1b5335391204f499030cc6c72807e956c387664968e701246c534206db2"}], 0x70}], 0x1, 0x48840) (async, rerun: 64)
ioctl$KVM_SET_TSC_KHZ_vm(r9, 0xaea2, 0xffffffff) (async, rerun: 64)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xa, @mcast1, 0xfffffffc}, 0x1c) (async)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40009}, 0x10) (async, rerun: 64)
syz_emit_ethernet(0x4e, &(0x7f0000000e40)=ANY=[@ANYBLOB="ffffffffffff00100000000086dd67001b0100183afffe880000000000000000000000000201ff00000000000000000000000000800186009078ff02030001000000f6ffffff0501c89600000500dd0b0f6d9ab468460d85f83f6bf1140832c8ce879697802c0e7bcfc5be594acf89fbdb7920305d5cfdd411df820d0db3a288e5b7e2815b33d4a75e9e3db3044146c4a250ea16"], 0x0) (async, rerun: 64)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async)
syz_open_procfs(r6, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

2.088855813s ago: executing program 1 (id=1170):
r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', <r7=>0x0})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000340)=""/185, 0xb9, <r8=>0x0, &(0x7f0000000400)=""/136, 0x88}}, 0x10)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000580)=ANY=[@ANYRESHEX=r7, @ANYRES32=0x1, @ANYBLOB="0000000000000000182e0000", @ANYRES32=r0, @ANYBLOB="0000fabb0f00000000000065c18a"], &(0x7f00000005c0)='syzkaller\x00', 0x100, 0xdb, &(0x7f0000000600)=""/219, 0x41000, 0x14, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x1, 0x400, 0x4b}, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x3, 0x6, 0x1}, {0x7, 0x5, 0xb, 0x7}], 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000080000000000000400000018110000c76fae550f28931297535732ca28c434a9fefd3c2aa8c8960340aa352cb288e47b1f1a308e6539b7b125ba38bfad66062fbf354c8683f57c2954510c703ed3a848509d8cec125b15c2f9363e00882bf2b20401d2c8a39c6dd5e94c7cd6def984734a0d883c26ad19062955e003f24235b2f96b4023a4490d3737abd74feb5f8c2f6beb1a7dccdb719521a16e9f3fbf1e1dc1a70f88bc9fa4f262896d", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000008a7060004000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x3, 0x9a, &(0x7f0000000a40)=""/154, 0x40f00, 0x4b, '\x00', r4, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x0, 0x4, 0x7ff, 0x8}, 0x10, r8, r9, 0x3, 0x0, &(0x7f0000000b40)=[{0x1, 0x3, 0x2, 0xb}, {0x3, 0x5, 0x9, 0x8}, {0x4, 0x2, 0xd, 0x2}], 0x10, 0x40}, 0x94)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000001380)={'erspan0\x00', {0x2, 0x0, @loopback}})
socket(0x21, 0x6, 0x4)
sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000001340)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f0000000c00)=ANY=[@ANYBLOB="fc0600f9", @ANYRES16=r10, @ANYBLOB="00047f000000fddbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x6fc}, 0x1, 0x0, 0x0, 0x80}, 0x40084)

1.998538117s ago: executing program 3 (id=1171):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x8, 0x0, 0xffffff80, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5], [0x800, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x400003, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x5, 0x800, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7, 0x2, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800002], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x4, 0xffc, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x219, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000006480))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x8, 0x0, 0xffffff80, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5], [0x800, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x400003, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x5, 0x800, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7, 0x2, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800002], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x4, 0xffc, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x3]}, 0x45c) (async)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x219, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0) (async)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000006480)) (async)

1.93314236s ago: executing program 1 (id=1172):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x40, @private1, 0x8}, 0x1a)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async)
r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r7 = socket$tipc(0x1e, 0x2, 0x0) (async)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x800000, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x8000042}, 0x10) (async)
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000002c0)={0x42, 0x1}, 0x10) (async)
sendmsg$tipc(r9, &(0x7f0000000300)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x84c) (async)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r11)
sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0)

1.82089004s ago: executing program 0 (id=1173):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3d}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x4000840)

1.729201767s ago: executing program 3 (id=1174):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000600)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000640)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0xc0802, 0x0)
pwritev(r2, &(0x7f0000000800)=[{&(0x7f0000000840)="00214717a7070000000083e7555ab44c3c0a7e1bbbaa90", 0x17}], 0x100000000000027c, 0x14, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000680)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000006c0)={0x28, 0x4, r1, r1, 0x7, 0x101, 0x3fff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000001840))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
listns(&(0x7f00000001c0)={0x20, 0x0, 0x2, 0x1c020080, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000080))
r6 = socket(0x10, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f00000016c0)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000001700)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000001740), 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'pim6reg0\x00'})
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000001780)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r7, &(0x7f00000017c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000001800)=0x1, 0x4)
close_range(r6, r7, 0x0)
writev(r5, &(0x7f0000001640)=[{&(0x7f0000000240)="095630535f09d18ca623889b57562a65414011185f0e12586f489ca543d9cfa50acedbdda3299233c698d4bf82ec81bd4cd103e4dd3c701659ffce801c2bfbc88639f725a54a2d7888198aa37a14f9f43ada10f40ffff49d774a8efec472a3262b849f1aaa186e81294009c015d379c8ce8fe2e7a2ea7986b52f29f4511864d3c899a26f3ec5f0", 0x87}, {&(0x7f00000003c0)="bcfd3e8020fdca790cfd0da8ebc86c7cedfbdf5a236702f58b6274645d718ff24d915c0c60c0122606ab617f95718e5de34526e536a28da62f7ce148918fae0ba4dc576b393f5c82cdaf69ee24929f31a328767a5d3dda5d48ac5c5ffbc2028713181f1e7e17f683cdb1e5a1fb9e2ddef093a759a4d9157c39211d211e7e5f8e5cd587acc62642d673198ee7ea900016a4d3b84d53c1", 0x5}, {&(0x7f0000000480)="dcff061b3aa0be709452def6c06af75aad6108a83dd2f5883638c53ed371ddd9569a4f00864e6d9627c64b89b5ada46ed848dc10b6053a5b756d01958575a1f2af01a1c7c6a68d51bb8e1fb90fd27a7fd0a4b35fed8e7d25fbeccb9b7d33b73b47ee763b595c3a9c0e295c1ec0fbd9976c4716ee8127d5fac2eb38c4c8be3d06da229b7c20c0d0eb8790c3b7231e48f3", 0x90}, {&(0x7f0000000540)="9554217463bea5dfac86be6b8611c2a4c2971e5bccd106005a454d61743ee3342773e9ff93c6064847657145e6441a43f01f97d02758b1570c3391515900c441a66d67281840797541a290ca44cdf3f0bf9f4e3b80a9caefab81eb15ae7b8b837eebd45c4acac43fd8114fa16037b589e20001c8f77f4f", 0x77}, {0x0}, {&(0x7f0000000740)="6567276ef1e07194accd1997d4ef42c1724e15b95747a5587decb17a7fdf80824e10d058b39d8455ad6237573631c87e4b5f6672bf6ee68537fa4ad8a904d99b99ea547efb8a8bd8841a9ea0fe6e3d1d8f7edf1c2c508fb6625e7d1766987c080fb365", 0x46}], 0x6)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x7, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450})

1.673164486s ago: executing program 0 (id=1175):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8fd00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000d400000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0xffe, &(0x7f0000000200)=""/4094, 0x41000}, 0x94)
r1 = inotify_init()
r2 = socket$packet(0x11, 0x2, 0x300)
open(&(0x7f0000001200)='./file1\x00', 0x60142, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000001280)='./file1\x00', &(0x7f00000012c0), 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000001380)={0x2020, 0x0, <r4=>0x0}, 0x2020)
open(&(0x7f00000033c0)='./file1\x00', 0x5482, 0x7e3111f862955f54)
write$FUSE_INIT(r3, &(0x7f0000003400)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50)
read$FUSE(r3, &(0x7f0000003480)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r3, &(0x7f00000054c0)={0x10, 0xffffffffffffffda, r5}, 0x10)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000005500), 0x20080, 0x0)
dup3(r6, r3, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f0000005540)='./file1\x00', 0x103042, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005580), 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000055c0)={{0xffffffffffffffff, 0x3, 0x2, 0x3, 0x8}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000005600)={'syz_tun\x00'})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000005640)={0x0, 0x0, &(0x7f0000005680)={&(0x7f00000056c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x3)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

1.615005005s ago: executing program 4 (id=1176):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}}, 0x14}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYBLOB="01"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0x3}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0)
listen(r4, 0x5)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x240000d4, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r10 = dup(r9)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

1.602590638s ago: executing program 2 (id=1177):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = signalfd(r0, &(0x7f0000000040)={[0xb3]}, 0x8)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1d168b9c22861b5044f07b4882c3ec89e5b8093ca6505a6becdb2ce34a69cc4ec0f385b303761160a528df8fa04b3d5000d24284e5c947d968619af40dde0262487bc4dc3fb8b07a99f9b507bc9b1833a97ff372d3a3ff7801e0716e7d86cce7fea7a1b0a3323a836660b752a75f6ab78993195b5f190c507f8315c5337b83fdc9f253fd7abf2302ca0f442c990d5de68c7cb847dbe4ade06abdd5df6493677633b0894b1f311bdadc9535e954a4b5a83fb2c4fa5b282a8c28af692822402aa01094c6af515c35e5bca397d6046bf7cd4c340b8bc926df3b19061f90e6801f9cc1d065ef8b1e2f54a999", @ANYRES16=r0, @ANYRESDEC=r1], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000280)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df})
read(r2, &(0x7f0000000380)=""/40, 0x28)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000440)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1})
openat$sequencer2(0xffffff9c, &(0x7f0000000480), 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000004c0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800050000000400380205000900010000000500"], 0x88}}, 0x0)

1.358067692s ago: executing program 2 (id=1178):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000554000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00')
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = dup(0xffffffffffffffff)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003704000080000000000000000000", @ANYRES32=r4, @ANYBLOB="83840500000100070000000000000000677265001400028006000e00030000000500170000"], 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x8840)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}], 0x20}}], 0x1, 0x40000)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r8 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)

1.28506829s ago: executing program 4 (id=1179):
r0 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x6, 0x101000)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000300)={0xd, 0x0, '\x00', {0x0, @reserved}}) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0x701, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x1, 0x6b}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x50)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000580)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000005c0)={0x28, 0x6, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000600)}) (async)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
syz_usb_control_io$uac1(r6, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x14, 0x18, "6c700406c5d9e4eb219bcc6fdd2ccdb01a935a98beb4098a"}, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000280)={0x20, 0x81, 0x1, '['}, 0x0, &(0x7f0000000200)={0x20, 0x83, 0x3, "b09694"}, &(0x7f00000003c0)={0x20, 0x84, 0x1, "b2"}, 0x0})

969.763094ms ago: executing program 1 (id=1180):
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xf0f041, 0x0, '\x00', @value=0x100}}) (async)
r0 = socket$kcm(0x2, 0x3, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x9, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55) (async)
ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, 0x0) (async)
openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2000010, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000002340)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50) (async)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006780)={0x0, 0x0, &(0x7f00000067c0)={&(0x7f0000006800)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000068c0)={&(0x7f0000006900)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x5c, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
recvmmsg$unix(r4, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f00000069c0)=[{&(0x7f0000006a00)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) (async)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000006cc0)={[0xfffffffffffffff7]}, 0x8, 0x0)
read$FUSE(r6, &(0x7f0000006d00)={0x2020}, 0x2020)
syz_clone3(&(0x7f0000008d40)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(&(0x7f0000008dc0)={0x20000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006b00)={0x0, 0x0, &(0x7f0000006b40)={&(0x7f0000006b80)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x104201, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xd}, {0xe, 0x3}, {0xfff2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004099}, 0x44800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006bc0)={0x0, 0x0, &(0x7f0000006c00)={0x0}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006c40)={0x0, 0x0, &(0x7f0000006c80)={&(0x7f0000006cc0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) (async)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000006d00), 0x4000000000001f2, 0x0) (async)
syz_fuse_handle_req(r1, &(0x7f00000023c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d4b8bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a80acb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461a65c8424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d00", 0x2000, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x20, 0x0, 0x9, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioprio_set$uid(0x0, r3, 0x2007) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x26d01, 0x0) (async)
io_setup(0x202, &(0x7f0000004500)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000004540)=[&(0x7f0000004580)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r8, &(0x7f00000045c0)='1', 0x20, 0xf, 0x0, 0x0, r8}]) (async)
syz_fuse_handle_req(r1, &(0x7f0000004600)="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", 0x2000, &(0x7f0000006600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x18, 0x0, 0x8, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

782.417197ms ago: executing program 3 (id=1181):
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001c80)={0x2, 0x0, &(0x7f0000000080)=""/119, &(0x7f0000000b80)=""/4096, &(0x7f0000001b80)=""/227, 0x41000})
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000400)=0x6a, 0x4)
bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000480)=0x6a2f, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00')
getdents64(r2, 0x0, 0x43)
connect$inet(r1, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10)
sendto(r1, &(0x7f0000000940)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x69, 0x4008044, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000b00)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207", 0x5f, 0x0, 0x0, 0x0)

689.182318ms ago: executing program 3 (id=1182):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
r5 = socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1c001280ff80dbe4c5468235586800000c0002806a00070006000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast})
write$tun(r9, &(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYRES32=r0, @ANYRES8=r5], 0x19a)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)

434.931538ms ago: executing program 3 (id=1183):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000002c0)={0x0, 0x30b2, 0x0, 0x5, 0x280}, &(0x7f00000013c0)=<r2=>0x0, &(0x7f0000001400)=<r3=>0x0, &(0x7f0000001440)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000001480)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001500)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000001540)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000001580)={0x0, 0x1, 0x1000, 0x3, 0x247}, &(0x7f0000001600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800005, 0x400, 0x2, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x200, 0xfffffffe, 0x18b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8623, 0x80, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x3, 0x367, 0x0, r1}}], 0x1, &(0x7f0000001880)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000001900)={0x33, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x800, @dev={0xac, 0x14, 0x14, 0x16}}}}, 0x108)
r9 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000001a80)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001c80)={'batadv0\x00', <r10=>0x0})
r11 = memfd_create(&(0x7f0000001cc0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r12 = dup(r11)
r13 = fanotify_init(0x200, 0x0)
fanotify_mark(r13, 0x1, 0x8001030, r12, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002100)={0xffffffffffffffff, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ec0)=[0x0], <r14=>0x0, 0x7f, &(0x7f0000001f00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001f40), &(0x7f0000001f80), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000001fc0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x7, 0x19, &(0x7f0000001ac0)=ANY=[@ANYBLOB="180000000d00"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000001832000003000000000000000000000029b01000ffffffff18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000185a0000020000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001bc0)='GPL\x00', 0x9, 0x58, &(0x7f0000001c00)=""/88, 0x41000, 0x4, '\x00', r10, @fallback=0xd, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e00)={0x3, 0x0, 0xa, 0x6}, 0x10, r14, 0xffffffffffffffff, 0x2, &(0x7f0000002140)=[0x1], &(0x7f0000002180)=[{0x5, 0x3, 0x3, 0x1}, {0x2, 0x4, 0x9, 0x4}], 0x10, 0x1}, 0x94)
close(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={<r15=>0xffffffffffffffff}, 0x13f}}, 0x20)
r16 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r16, &(0x7f0000002280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmsg$inet(r16, &(0x7f00000022c0)={&(0x7f0000002300)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x30}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0xa, @local}, {0xa, 0x0, 0xfffffff5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x640100ff}, 0x2000a8a9}, r15, 0xfa}}, 0x48)
r17 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r17, 0x7a7, &(0x7f00000001c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r17, 0x7a0, &(0x7f0000000200)={@local})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r17, 0x7af, &(0x7f0000000240)={@hyper, 0x6})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r17, 0x7b1, &(0x7f0000000280)={&(0x7f00000003c0)=[0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x0, 0x0, 0x3, 0xfffffffb, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x81, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xddbc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbde0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa232, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffe, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x295, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ac27e1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffff01, 0x0, 0x72d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfb, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff74, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], 0x1, 0x400})
r18 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000206010200000000000000000000000984ec39000600000015000300686173683a69702c706f72742c6e65740000000005000400000000000900020073797a30000000000500050000000000"], 0x50}}, 0x0)
inotify_init()

339.75477ms ago: executing program 2 (id=1184):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x40, 0x16f)
execve(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001580)={0x1, 0x1, 0x4000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="e1"], 0x14}, 0x1, 0x0, 0x0, 0x22004011}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000014c0)='smaps_rollup\x00')
fchdir(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001500)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001540)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000000400000004000000ecffffffffffffff289191ac4b54d96d6a5506460da3bf8a55f18d53b1a3387a181c200180c0bdd57ba53a5c7765f4cadbcb23006f5868cd1d35ca7f81412a54e534de7df60061447b80543019ed9bbea442e7feb038a69e7e263946479bea0fb00e0b7cfcfc42c143ff665aaf16efdc5533a7b3d367c786557dc18a2d82fbfda8e5c57dd74640b2422d849346d1da4f9369c2f394c01c3c0bd0087f012226a118be1e1d0fc49361ce91dc3d2f2a7304841b8609de1e762cbff4ec6e518d9ddd28de0250ce5a205d63a195dfb63a7dc8870e0cc526f174c781818b1f71ba1e637782778c54d000f76e77e25726d0c9e86092956ad74697f4deeb5a9cb0afc166c1f08c57816d39477d6f8f0ea13766060ebe243062a46f87ad3609c5fe093ba815edaa8364727dde9d955671e0e58517ad3d0e325c504b4a8f5efcd6f55616f464b14bb5ce7b574e95f78f2ad52739f41c0ca6738ecdc0cf0dbff5482ccb7fd62c59c280dbcd687f79cb04bbb469ddaade845215f4a3c009b591cb432df350be6871593c82ea4d27c83024645b0a2b9bada4c9955f8881b97ea06849eb04e28e330781851490acc17aab735d2a8133cb0849d5c8d676011cc0a42938d919", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = creat(&(0x7f0000000500)='./file0\x00', 0x2ea)
syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb8900100000fe880000000000000000000000000001fc02000000000000000000000000000000010000000000160100c20476"], 0x0)
unshare(0x20000400)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/kcm\x00')
r5 = socket$kcm(0x29, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00'}, 0x48)
r7 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000001080)={&(0x7f00000010c0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000001100)={r7, r6})
preadv(r4, &(0x7f0000001140)=[{&(0x7f0000001180)=""/243, 0xf3}], 0x1, 0x7, 0x3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0500ffff"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x64}, 0x94)

204.466611ms ago: executing program 2 (id=1185):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0x17, 0x301, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000016c0)={'netdevsim0\x00', <r3=>0x0})
r4 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x2002)
ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f00000004c0)=0x1)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000540)={'team_slave_1\x00', {0x2, 0x4e23, @multicast2}})
ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000500))
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x80, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0xff}}]}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r10 = dup(r9)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
bind$l2tp6(r10, &(0x7f0000000440)={0xa, 0x0, 0x101, @private0={0xfc, 0x0, '\x00', 0x8}, 0x26b9, 0x3}, 0x20)
sendmsg$nl_route_sched(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@delchain={0x24, 0x2a, 0xf31, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf}}}, 0x24}}, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
write$binfmt_misc(r11, &(0x7f0000000200), 0xfffffecc)
syz_io_uring_setup(0x48ce, &(0x7f0000000240)={0x0, 0x4266, 0x0, 0x1, 0x1c4, 0x0, r11}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340))

0s ago: executing program 1 (id=1186):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000080)={0x22, 0x40000000, 0x0, 0x0})
ioctl(r1, 0x4048aec9, &(0x7f0000000100)="01000000000000001000"/72)
ioctl(r1, 0x400caed0, &(0x7f0000000180)="0100000000000000ffffffff")
ioctl(r1, 0x4048aecb, &(0x7f0000000300)="000000000000000000000200"/72)
ioctl(r2, 0x4048aecb, &(0x7f0000000280)='\b\x00\x00\x00\x00\x00\x00\x000\x00'/72)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

l tt entry: aa:aa:aa:aa:aa:0c
[  293.506021][   T29] usb 2-1: Using ep0 maxpacket: 8
[  293.509549][   T29] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  293.562548][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.562576][   T29] usb 2-1: Product: syz
[  293.562591][   T29] usb 2-1: Manufacturer: syz
[  293.562606][   T29] usb 2-1: SerialNumber: syz
[  293.568860][   T29] usb 2-1: config 0 descriptor??
[  293.621383][ T5945] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  293.701521][ T5939] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  293.752198][ T9327] syzkaller0: entered promiscuous mode
[  293.811417][ T5945] usb 5-1: Using ep0 maxpacket: 8
[  293.815691][ T5945] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  293.836081][ T5945] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  293.836100][ T5945] usb 5-1: config 179 has no interface number 0
[  293.836128][ T5945] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  293.836147][ T5945] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  293.836187][ T5945] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  293.836206][ T5945] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  293.836226][ T5945] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  293.836256][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.854190][ T5939] usb 3-1: Using ep0 maxpacket: 8
[  293.857498][ T5939] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  293.885740][ T9323] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  293.887183][ T5939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  293.887246][ T5939] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  293.887409][ T5939] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  293.904037][   T29] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  293.925624][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.925715][ T5939] usb 3-1: Product: syz
[  293.925756][ T5939] usb 3-1: Manufacturer: syz
[  293.925796][ T5939] usb 3-1: SerialNumber: syz
[  294.223154][ T5949] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input24
[  294.309882][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.310349][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.320156][ T5939] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  294.320222][ T5939] usb 3-1: clock source 0 is not valid, cannot use
[  294.326180][ T5939] usb 3-1: 1:1: cannot get freq (v2/v3): err -71
[  294.328620][ T5939] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  294.491565][    C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[  294.680313][ T5939] usb 3-1: USB disconnect, device number 58
[  294.827135][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  295.229693][   T30] kauditd_printk_skb: 98 callbacks suppressed
[  295.229718][   T30] audit: type=1326 audit(1792284511.951:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.0.958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c799e559 code=0x7ffc0000
[  295.267480][   T30] audit: type=1326 audit(1792284511.961:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.0.958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4c799e559 code=0x7ffc0000
[  295.267539][   T30] audit: type=1326 audit(1792284511.961:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.0.958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c799e559 code=0x7ffc0000
[  295.267597][   T30] audit: type=1326 audit(1792284512.001:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.0.958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4c799e559 code=0x7ffc0000
[  295.267641][   T30] audit: type=1326 audit(1792284512.001:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.0.958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c799e559 code=0x7ffc0000
[  295.286699][   T30] audit: type=1326 audit(1792284512.021:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.0.958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4c799e559 code=0x7ffc0000
[  295.315407][   T30] audit: type=1326 audit(1792284512.021:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.0.958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c799e559 code=0x7ffc0000
[  295.315557][   T30] audit: type=1326 audit(1792284512.051:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.0.958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c799e559 code=0x7ffc0000
[  295.337933][   T30] audit: type=1326 audit(1792284512.071:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.0.958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa4c799e559 code=0x7ffc0000
[  295.338085][   T30] audit: type=1326 audit(1792284512.071:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.0.958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c799e559 code=0x7ffc0000
[  295.366902][ T9339] binder: 9333:9339 ioctl c0306201 200000001c80 returned -14
[  295.900072][   T29] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  295.912046][   T29] dvbdev: DVB: registering new adapter (Terratec H7)
[  295.912112][   T29] usb 2-1: media controller created
[  295.998040][ T9340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.011631][ T9340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.131707][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'.
[  296.131744][ T9345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.961'.
[  296.226750][ T8551] tipc: Subscription rejected, illegal request
[  296.228287][   T29] usb read operation failed. (-71)
[  296.292104][   T29] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  296.318794][   T29] usb 2-1: USB disconnect, device number 68
[  296.528183][ T9345] geneve3: entered promiscuous mode
[  296.528221][ T9345] geneve3: entered allmulticast mode
[  296.545487][ T8551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.546180][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.546223][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.546259][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.595087][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  296.595092][ T5707] usb 5-1: USB disconnect, device number 42
[  296.595443][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  296.836752][ T9355] netlink: 104 bytes leftover after parsing attributes in process `syz.2.963'.
[  297.931467][ T5707] usb 2-1: new low-speed USB device number 69 using dummy_hcd
[  298.056905][ T9389] input: syz1 as /devices/virtual/input/input25
[  298.168922][ T5824] tipc: Subscription rejected, illegal request
[  298.951397][   T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  299.072936][ T9410] netlink: 104 bytes leftover after parsing attributes in process `syz.2.975'.
[  299.125797][   T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  299.144545][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.144575][   T24] usb 5-1: Product: syz
[  299.144591][   T24] usb 5-1: Manufacturer: syz
[  299.144607][   T24] usb 5-1: SerialNumber: syz
[  299.606592][   T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  299.606649][   T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  299.609710][   T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  299.609749][   T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  299.610217][   T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  299.993424][   T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32
[  300.171439][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout
[  300.179989][   T29] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  300.180010][   T29] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  300.355575][ T9430] syz.2.980 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000
[  300.355637][ T9430] CPU: 0 UID: 0 PID: 9430 Comm: syz.2.980 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  300.355663][ T9430] Tainted: [L]=SOFTLOCKUP
[  300.355670][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  300.355682][ T9430] Call Trace:
[  300.355690][ T9430]  <TASK>
[  300.355698][ T9430]  dump_stack_lvl+0xe8/0x150
[  300.355744][ T9430]  dump_header+0xd3/0x4b0
[  300.355778][ T9430]  oom_kill_process+0x3ab/0x9e0
[  300.355813][ T9430]  out_of_memory+0x1064/0x1480
[  300.355840][ T9430]  ? try_charge_memcg+0xc32/0x15e0
[  300.355879][ T9430]  ? __pfx_out_of_memory+0x10/0x10
[  300.355906][ T9430]  ? do_raw_spin_unlock+0xf5/0x200
[  300.355948][ T9430]  try_charge_memcg+0xcdf/0x15e0
[  300.355994][ T9430]  ? __pfx_try_charge_memcg+0x10/0x10
[  300.356034][ T9430]  ? percpu_ref_tryget+0x15/0x180
[  300.356075][ T9430]  ? __memcg_kmem_charge_page+0x15a/0x520
[  300.356105][ T9430]  __memcg_kmem_charge_page+0x330/0x520
[  300.356131][ T9430]  ? __memcg_kmem_charge_page+0x15a/0x520
[  300.356161][ T9430]  __alloc_frozen_pages_noprof+0x24a/0x5a0
[  300.356192][ T9430]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  300.356225][ T9430]  ? __pfx_policy_nodemask+0x10/0x10
[  300.356256][ T9430]  ? trace_kmalloc+0x2a/0xf0
[  300.356283][ T9430]  ? __kmalloc_node_track_caller_noprof+0x4d2/0x720
[  300.356314][ T9430]  alloc_pages_mpol+0x21e/0x390
[  300.356353][ T9430]  alloc_pages_noprof+0xb1/0x2b0
[  300.356387][ T9430]  alloc_skb_with_frags+0x264/0x760
[  300.356426][ T9430]  sock_alloc_send_pskb+0x878/0x990
[  300.356470][ T9430]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  300.356497][ T9430]  ? __pfx_autoremove_wake_function+0x10/0x10
[  300.356527][ T9430]  ? sock_def_readable+0xae/0x550
[  300.356562][ T9430]  ? sock_def_readable+0x2ff/0x550
[  300.356588][ T9430]  ? sock_def_readable+0xae/0x550
[  300.356620][ T9430]  unix_stream_sendmsg+0x4ba/0xde0
[  300.356670][ T9430]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  300.356704][ T9430]  ? aa_sock_msg_perm+0x129/0x210
[  300.356755][ T9430]  ? apparmor_socket_sendmsg+0x98/0x360
[  300.356787][ T9430]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  300.356816][ T9430]  sock_sendmsg_nosec+0x13a/0x180
[  300.356851][ T9430]  ____sys_sendmsg+0x54e/0x850
[  300.356881][ T9430]  ? __pfx_____sys_sendmsg+0x10/0x10
[  300.356917][ T9430]  ? import_iovec+0x73/0xa0
[  300.356935][ T9430]  ___sys_sendmsg+0x2a5/0x360
[  300.356952][ T9430]  ? __lock_acquire+0x747/0x2de0
[  300.356972][ T9430]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.356993][ T9430]  ? futex_wait+0x2a2/0x390
[  300.357032][ T9430]  ? __fget_files+0x2a/0x420
[  300.357046][ T9430]  ? __fget_files+0x3a2/0x420
[  300.357068][ T9430]  __x64_sys_sendmsg+0x1b1/0x290
[  300.357108][ T9430]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  300.357142][ T9430]  do_syscall_64+0x166/0x520
[  300.357161][ T9430]  ? trace_irq_disable+0x3b/0x140
[  300.357180][ T9430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.357196][ T9430]  ? clear_bhb_loop+0x70/0xc0
[  300.357216][ T9430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.357234][ T9430] RIP: 0033:0x7f08bbf9e559
[  300.357250][ T9430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.357264][ T9430] RSP: 002b:00007f08bcdf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.357282][ T9430] RAX: ffffffffffffffda RBX: 00007f08bc225fa0 RCX: 00007f08bbf9e559
[  300.357295][ T9430] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005
[  300.357305][ T9430] RBP: 00007f08bc035ab8 R08: 0000000000000000 R09: 0000000000000000
[  300.357316][ T9430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.357326][ T9430] R13: 00007f08bc226038 R14: 00007f08bc225fa0 R15: 00007f08bc34fa48
[  300.357351][ T9430]  </TASK>
[  300.437188][ T9430] memory: usage 96kB, limit 96kB, failcnt 119
[  300.437236][ T9430] memory+swap: usage 284kB, limit 9007199254740988kB, failcnt 0
[  300.437281][ T9430] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0
[  300.437363][ T9430] Memory cgroup stats for /syz2/test:
[  300.437835][ T9430] cache 0
[  300.437859][ T9430] rss 0
[  300.437880][ T9430] rss_huge 0
[  300.437901][ T9430] shmem 0
[  300.437921][ T9430] mapped_file 0
[  300.437973][ T9430] dirty 0
[  300.437994][ T9430] writeback 0
[  300.438008][ T9430] workingset_refault_anon 0
[  300.438040][ T9430] workingset_refault_file 0
[  300.438063][ T9430] swap 192512
[  300.438092][ T9430] swapcached 192512
[  300.438114][ T9430] pgpgin 47
[  300.438143][ T9430] pgpgout 47
[  300.438164][ T9430] pgfault 52
[  300.447153][ T9430] pgmajfault 0
[  300.447194][ T9430] inactive_anon 0
[  300.447216][ T9430] active_anon 0
[  300.447230][ T9430] inactive_file 0
[  300.447252][ T9430] active_file 0
[  300.447266][ T9430] unevictable 0
[  300.447287][ T9430] hierarchical_memory_limit 98304
[  300.447316][ T9430] hierarchical_memsw_limit 9223372036854771712
[  300.447338][ T9430] total_cache 0
[  300.447359][ T9430] total_rss 0
[  300.447381][ T9430] total_rss_huge 0
[  300.447402][ T9430] total_shmem 0
[  300.456402][ T9430] total_mapped_file 0
[  300.456433][ T9430] total_dirty 0
[  300.456454][ T9430] total_writeback 0
[  300.456476][ T9430] total_workingset_refault_anon 0
[  300.456525][ T9430] total_workingset_refault_file 0
[  300.456548][ T9430] total_swap 192512
[  300.456568][ T9430] total_swapcached 192512
[  300.456598][ T9430] total_pgpgin 47
[  300.456620][ T9430] total_pgpgout 47
[  300.456642][ T9430] total_pgfault 52
[  300.456665][ T9430] total_pgmajfault 0
[  300.456686][ T9430] total_inactive_anon 0
[  300.456708][ T9430] total_active_anon 0
[  300.456739][ T9430] total_inactive_file 0
[  300.456761][ T9430] total_active_file 0
[  300.456776][ T9430] total_unevictable 0
[  300.456796][ T9430] anon_cost 0
[  300.456817][ T9430] file_cost 0
[  300.456839][ T9430] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.980,pid=9429,uid=0
[  300.582067][ T9430] Memory cgroup out of memory: Killed process 9429 (syz.2.980) total-vm:106768kB, anon-rss:2104kB, file-rss:27412kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[  301.556545][   T30] kauditd_printk_skb: 42 callbacks suppressed
[  301.556568][   T30] audit: type=1326 audit(1792284518.281:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.978" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f0939e559 code=0x0
[  301.600916][ T5938] usb 5-1: USB disconnect, device number 43
[  301.693602][    C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c
[  301.776770][ T8546] tipc: Subscription rejected, illegal request
[  302.121439][   T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  302.261184][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout
[  302.262711][   T29] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  302.262736][   T29] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  302.304143][   T24] usb 3-1: Using ep0 maxpacket: 8
[  302.304890][   T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  302.307665][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  302.307683][   T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  302.307722][   T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  302.398134][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.398165][   T24] usb 3-1: Product: syz
[  302.398181][   T24] usb 3-1: Manufacturer: syz
[  302.398197][   T24] usb 3-1: SerialNumber: syz
[  302.715462][   T24] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  302.715484][   T24] usb 3-1: clock source 0 is not valid, cannot use
[  302.720771][   T24] usb 3-1: 1:1: cannot get freq (v2/v3): err -71
[  302.721147][   T24] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  302.861355][ T5938] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  303.012824][ T5938] usb 5-1: Using ep0 maxpacket: 32
[  303.013445][ T5938] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  303.018668][ T5938] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  303.018688][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.018703][ T5938] usb 5-1: config 0 has no interface number 0
[  303.018731][ T5938] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  303.018748][ T5938] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  303.018768][ T5938] usb 5-1: config 0 interface 196 has no altsetting 0
[  303.053474][   T24] usb 3-1: USB disconnect, device number 60
[  303.076889][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.076910][ T5938] usb 5-1: Product: syz
[  303.076921][ T5938] usb 5-1: Manufacturer: syz
[  303.076931][ T5938] usb 5-1: SerialNumber: syz
[  303.135475][ T5938] usb 5-1: config 0 descriptor??
[  303.347317][ T6116] udevd[6116]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  303.383075][ T9471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.392383][ T9471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.425952][ T9471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.446747][ T9471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.469877][ T9471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.470284][ T9471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.491814][ T9471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.492366][ T9471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.494958][ T9471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.495295][ T9471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.331401][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout
[  304.332326][   T29] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  304.332348][   T29] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  305.311472][   T24] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[  305.381756][ T9502] fuse: Bad value for 'fd'
[  305.483086][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  305.501721][   T24] usb 2-1: not running at top speed; connect to a high speed hub
[  305.501758][   T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[  305.522193][   T24] usb 2-1: config 5 has an invalid interface number: 246 but max is 0
[  305.522228][   T24] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  305.522268][   T24] usb 2-1: config 5 has no interface number 0
[  305.522311][   T24] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  305.522339][   T24] usb 2-1: config 5 interface 246 has no altsetting 0
[  305.527673][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.527702][   T24] usb 2-1: Product: syz
[  305.527718][   T24] usb 2-1: Manufacturer: syz
[  305.527735][   T24] usb 2-1: SerialNumber: syz
[  305.712180][ T5938] ipheth 5-1:0.196: Unable to find endpoints
[  305.718867][ T5938] usb 5-1: USB disconnect, device number 44
[  305.911069][   T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  305.947626][ T5824] usb 2-1: Failed to submit usb control message: -71
[  305.947667][ T5824] usb 2-1: unable to send the bmi data to the device: -71
[  305.947688][ T5824] usb 2-1: unable to get target info from device
[  305.947722][ T5824] usb 2-1: could not get target info (-71)
[  305.947955][ T5824] usb 2-1: could not probe fw (-71)
[  305.962028][   T24] usb 2-1: USB disconnect, device number 70
[  306.524627][ T9520] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1000'.
[  306.571411][   T29] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  306.571439][   T29] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  306.571464][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout
[  306.851092][ T8551] tipc: Subscription rejected, illegal request
[  307.141375][   T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  307.311639][   T24] usb 5-1: Using ep0 maxpacket: 8
[  307.312494][   T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  307.316343][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  307.316368][   T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  307.316425][   T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  307.318900][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.318926][   T24] usb 5-1: Product: syz
[  307.318943][   T24] usb 5-1: Manufacturer: syz
[  307.318959][   T24] usb 5-1: SerialNumber: syz
[  307.648774][   T24] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  307.649201][   T24] usb 5-1: clock source 0 is not valid, cannot use
[  307.668841][   T24] usb 5-1: 1:1: cannot get freq (v2/v3): err -71
[  307.670133][   T24] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  307.867132][ T5939] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  307.943905][   T24] usb 5-1: USB disconnect, device number 45
[  308.024041][ T5939] usb 3-1: device descriptor read/64, error -71
[  308.281437][ T5939] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  308.283528][ T6116] udevd[6116]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  308.411704][ T5939] usb 3-1: device descriptor read/64, error -71
[  308.526407][ T5939] usb usb3-port1: attempt power cycle
[  308.651728][   T29] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  308.651748][   T29] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  308.681959][   T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  308.733097][ T5677] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  308.833437][   T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  308.834483][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.834538][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.834556][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  308.834589][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.840229][   T24] usb 5-1: config 0 descriptor??
[  308.861978][ T5939] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  308.881808][ T5677] usb 2-1: Using ep0 maxpacket: 8
[  308.884474][ T5677] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  308.888677][ T5677] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  308.888802][ T5677] usb 2-1: config 0 has no interface number 0
[  308.906233][ T5939] usb 3-1: device descriptor read/8, error -71
[  308.908447][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.908508][ T5677] usb 2-1: Product: syz
[  308.908600][ T5677] usb 2-1: Manufacturer: syz
[  308.908639][ T5677] usb 2-1: SerialNumber: syz
[  308.964562][ T5677] usb 2-1: config 0 descriptor??
[  309.151365][ T5939] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  309.172235][ T5939] usb 3-1: device descriptor read/8, error -71
[  309.256172][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  309.256218][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  309.256239][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  309.256257][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  309.256276][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  309.256295][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  309.256314][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  309.256347][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  309.256366][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  309.256707][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  309.285733][ T5939] usb usb3-port1: unable to enumerate USB device
[  309.358196][   T24] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  309.872705][ T5945] usb 5-1: USB disconnect, device number 46
[  310.264223][ T9555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.307019][ T9555] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.799223][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'.
[  310.815291][ T9574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.835962][ T9574] syzkaller0: mtu less than device minimum
[  310.882331][ T5707] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  311.033281][ T5707] usb 5-1: Using ep0 maxpacket: 8
[  311.034053][ T5707] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  311.035679][ T5707] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  311.035705][ T5707] usb 5-1: config 0 has no interface number 0
[  311.073403][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.073432][ T5707] usb 5-1: Product: syz
[  311.073449][ T5707] usb 5-1: Manufacturer: syz
[  311.073465][ T5707] usb 5-1: SerialNumber: syz
[  311.105899][ T5707] usb 5-1: config 0 descriptor??
[  311.168339][ T9583] FAULT_INJECTION: forcing a failure.
[  311.168339][ T9583] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  311.168380][ T9583] CPU: 0 UID: 0 PID: 9583 Comm: syz.3.1014 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  311.168410][ T9583] Tainted: [L]=SOFTLOCKUP
[  311.168419][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  311.168433][ T9583] Call Trace:
[  311.168441][ T9583]  <TASK>
[  311.168452][ T9583]  dump_stack_lvl+0xe8/0x150
[  311.168492][ T9583]  should_fail_ex+0x410/0x560
[  311.168530][ T9583]  prepare_alloc_pages+0x223/0x600
[  311.168564][ T9583]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  311.168598][ T9583]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  311.168626][ T9583]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  311.168658][ T9583]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  311.168692][ T9583]  ? __pfx_policy_nodemask+0x10/0x10
[  311.168721][ T9583]  ? __get_vm_area_node+0x155/0x2f0
[  311.168742][ T9583]  ? __vmalloc_node_range_noprof+0x343/0x1540
[  311.168777][ T9583]  ? __vmalloc_noprof+0xd2/0x120
[  311.168801][ T9583]  __alloc_pages_noprof+0x10/0x100
[  311.168830][ T9583]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[  311.168865][ T9583]  ? alloc_pages_noprof+0x140/0x2b0
[  311.168912][ T9583]  __kasan_populate_vmalloc+0xb7/0x1c0
[  311.168943][ T9583]  alloc_vmap_area+0xd1a/0x1420
[  311.168988][ T9583]  ? __pfx_alloc_vmap_area+0x10/0x10
[  311.169018][ T9583]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  311.169044][ T9583]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  311.169068][ T9583]  ? __get_vm_area_node+0x155/0x2f0
[  311.169093][ T9583]  __get_vm_area_node+0x200/0x2f0
[  311.169120][ T9583]  __vmalloc_node_range_noprof+0x343/0x1540
[  311.169143][ T9583]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  311.169169][ T9583]  ? __lock_acquire+0x747/0x2de0
[  311.169218][ T9583]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  311.169257][ T9583]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  311.169282][ T9583]  __vmalloc_noprof+0xd2/0x120
[  311.169303][ T9583]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  311.169351][ T9583]  bpf_prog_alloc_no_stats+0x47/0x560
[  311.169378][ T9583]  ? bpf_prog_alloc+0x2a/0x1a0
[  311.169407][ T9583]  bpf_prog_alloc+0x3c/0x1a0
[  311.169436][ T9583]  bpf_prog_load+0x7f8/0x1c20
[  311.169477][ T9583]  ? __pfx_bpf_prog_load+0x10/0x10
[  311.169531][ T9583]  __sys_bpf+0xd0d/0xd90
[  311.169566][ T9583]  ? __pfx___sys_bpf+0x10/0x10
[  311.169604][ T9583]  ? __fget_files+0x2a/0x420
[  311.169643][ T9583]  ? ksys_write+0x242/0x270
[  311.169668][ T9583]  ? __pfx_ksys_write+0x10/0x10
[  311.169697][ T9583]  __x64_sys_bpf+0xba/0xd0
[  311.169724][ T9583]  do_syscall_64+0x166/0x520
[  311.169751][ T9583]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.169774][ T9583]  ? clear_bhb_loop+0x70/0xc0
[  311.169801][ T9583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.169822][ T9583] RIP: 0033:0x7fbf1779e559
[  311.169842][ T9583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.169860][ T9583] RSP: 002b:00007fbf18676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  311.169883][ T9583] RAX: ffffffffffffffda RBX: 00007fbf17a25fa0 RCX: 00007fbf1779e559
[  311.169900][ T9583] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005
[  311.169913][ T9583] RBP: 00007fbf18676090 R08: 0000000000000000 R09: 0000000000000000
[  311.169927][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.169940][ T9583] R13: 00007fbf17a26038 R14: 00007fbf17a25fa0 R15: 00007fbf17b4fa48
[  311.169973][ T9583]  </TASK>
[  311.170281][ T9583] syz.3.1014: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  311.170359][ T9583] CPU: 0 UID: 0 PID: 9583 Comm: syz.3.1014 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  311.170386][ T9583] Tainted: [L]=SOFTLOCKUP
[  311.170394][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  311.170409][ T9583] Call Trace:
[  311.170417][ T9583]  <TASK>
[  311.170426][ T9583]  dump_stack_lvl+0xe8/0x150
[  311.170460][ T9583]  warn_alloc+0x24d/0x270
[  311.170487][ T9583]  ? lockdep_hardirqs_on+0x7b/0x110
[  311.170515][ T9583]  ? __pfx_warn_alloc+0x10/0x10
[  311.170539][ T9583]  ? kfree+0x1c5/0x650
[  311.170566][ T9583]  ? __get_vm_area_node+0x219/0x2f0
[  311.170596][ T9583]  __vmalloc_node_range_noprof+0x36b/0x1540
[  311.170620][ T9583]  ? __lock_acquire+0x747/0x2de0
[  311.170671][ T9583]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  311.170704][ T9583]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  311.170730][ T9583]  __vmalloc_noprof+0xd2/0x120
[  311.170754][ T9583]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  311.170784][ T9583]  bpf_prog_alloc_no_stats+0x47/0x560
[  311.170811][ T9583]  ? bpf_prog_alloc+0x2a/0x1a0
[  311.170839][ T9583]  bpf_prog_alloc+0x3c/0x1a0
[  311.170869][ T9583]  bpf_prog_load+0x7f8/0x1c20
[  311.170908][ T9583]  ? __pfx_bpf_prog_load+0x10/0x10
[  311.170961][ T9583]  __sys_bpf+0xd0d/0xd90
[  311.170997][ T9583]  ? __pfx___sys_bpf+0x10/0x10
[  311.171036][ T9583]  ? __fget_files+0x2a/0x420
[  311.171074][ T9583]  ? ksys_write+0x242/0x270
[  311.171100][ T9583]  ? __pfx_ksys_write+0x10/0x10
[  311.171128][ T9583]  __x64_sys_bpf+0xba/0xd0
[  311.171181][ T9583]  do_syscall_64+0x166/0x520
[  311.171208][ T9583]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.171237][ T9583]  ? clear_bhb_loop+0x70/0xc0
[  311.171264][ T9583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.171286][ T9583] RIP: 0033:0x7fbf1779e559
[  311.171305][ T9583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.171323][ T9583] RSP: 002b:00007fbf18676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  311.171345][ T9583] RAX: ffffffffffffffda RBX: 00007fbf17a25fa0 RCX: 00007fbf1779e559
[  311.171361][ T9583] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005
[  311.171375][ T9583] RBP: 00007fbf18676090 R08: 0000000000000000 R09: 0000000000000000
[  311.171389][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.171401][ T9583] R13: 00007fbf17a26038 R14: 00007fbf17a25fa0 R15: 00007fbf17b4fa48
[  311.171434][ T9583]  </TASK>
[  311.425645][ T5677] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  311.425847][ T5677] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized!
[  311.426134][ T5677] uvcvideo 2-1:0.31: Failed to create links for entity 5
[  311.426186][ T5677] uvcvideo 2-1:0.31: Failed to register entities (-22).
[  311.775630][ T5677] usb 2-1: USB disconnect, device number 71
[  311.834940][ T9583] Mem-Info:
[  311.834955][ T9583] active_anon:8690 inactive_anon:12 isolated_anon:0
[  311.834955][ T9583]  active_file:149 inactive_file:56949 isolated_file:0
[  311.834955][ T9583]  unevictable:0 dirty:383 writeback:0
[  311.834955][ T9583]  slab_reclaimable:9815 slab_unreclaimable:101688
[  311.834955][ T9583]  mapped:30830 shmem:2642 pagetables:2068
[  311.834955][ T9583]  sec_pagetables:0 bounce:0
[  311.834955][ T9583]  kernel_misc_reclaimable:0
[  311.834955][ T9583]  free:1082434 free_pcp:12375 free_cma:0
[  311.835008][ T9583] Node 0 active_anon:34760kB inactive_anon:48kB active_file:596kB inactive_file:227392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123112kB dirty:1356kB writeback:0kB shmem:10568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14016kB pagetables:8104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  311.835083][ T9583] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208kB dirty:176kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  311.835147][ T9583] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  311.835229][ T9583] lowmem_reserve[]: 0 2468 2468 2468 2468
[  311.835266][ T9583] Node 0 DMA32 free:372368kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34760kB inactive_anon:48kB active_file:596kB inactive_file:227392kB unevictable:0kB writepending:1356kB zspages:832kB present:3129332kB managed:2527504kB mlocked:0kB bounce:0kB free_pcp:49500kB local_pcp:23412kB free_cma:0kB
[  311.835325][ T9583] lowmem_reserve[]: 0 0 0 0 0
[  311.835380][ T9583] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  311.835434][ T9583] lowmem_reserve[]: 0 0 0 0 0
[  311.835470][ T9583] Node 1 Normal free:3942008kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:404kB unevictable:0kB writepending:176kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  311.835552][ T9583] lowmem_reserve[]: 0 0 0 0 0
[  311.835588][ T9583] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  311.835735][ T9583] Node 0 DMA32: 4649*4kB (UM) 2746*8kB (UME) 1477*16kB (ME) 1257*32kB (UME) 816*64kB (UME) 452*128kB (UME) 175*256kB (UME) 55*512kB (UME) 21*1024kB (UME) 9*2048kB (UM) 11*4096kB (UM) = 372452kB
[  311.835917][ T9583] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  311.836044][ T9583] Node 1 Normal: 4*4kB (M) 5*8kB (U) 2*16kB (U) 11*32kB (UM) 5*64kB (U) 5*128kB (U) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (M) 960*4096kB (M) = 3942008kB
[  311.836241][ T9583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  311.836284][ T9583] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB
[  311.836300][ T9583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  311.836315][ T9583] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  311.836330][ T9583] 59752 total pagecache pages
[  311.836342][ T9583] 16 pages in swap cache
[  311.836350][ T9583] Free swap  = 124616kB
[  311.836357][ T9583] Total swap = 124996kB
[  311.836365][ T9583] 2097051 pages RAM
[  311.836372][ T9583] 0 pages HighMem/MovableOnly
[  311.836379][ T9583] 433559 pages reserved
[  311.836386][ T9583] 0 pages cma reserved
[  312.503921][ T9600] netlink: 'syz.1.1016': attribute type 6 has an invalid length.
[  312.503944][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'.
[  312.602115][ T8551] tipc: Subscription rejected, illegal request
[  312.829143][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.829913][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.336274][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  313.392241][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.001363][ T8552] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.001440][ T8552] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.001479][ T8552] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.001526][ T8552] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.088966][ T5707] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  314.089036][ T5707] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized!
[  314.089151][ T5707] uvcvideo 5-1:0.31: Failed to create links for entity 5
[  314.089168][ T5707] uvcvideo 5-1:0.31: Failed to register entities (-22).
[  314.140770][ T5707] usb 5-1: USB disconnect, device number 47
[  314.319075][ T9615] FAULT_INJECTION: forcing a failure.
[  314.319075][ T9615] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  314.319112][ T9615] CPU: 1 UID: 0 PID: 9615 Comm: syz.4.1021 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  314.319140][ T9615] Tainted: [L]=SOFTLOCKUP
[  314.319148][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  314.319160][ T9615] Call Trace:
[  314.319168][ T9615]  <TASK>
[  314.319177][ T9615]  dump_stack_lvl+0xe8/0x150
[  314.319213][ T9615]  should_fail_ex+0x410/0x560
[  314.319247][ T9615]  _copy_from_user+0x2d/0xb0
[  314.319270][ T9615]  do_sock_getsockopt+0x462/0x7e0
[  314.319299][ T9615]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  314.319338][ T9615]  ? __fget_files+0x3a2/0x420
[  314.319357][ T9615]  ? __fget_files+0x2a/0x420
[  314.319391][ T9615]  __x64_sys_getsockopt+0x1a4/0x240
[  314.319424][ T9615]  do_syscall_64+0x166/0x520
[  314.319448][ T9615]  ? trace_irq_disable+0x3b/0x140
[  314.319471][ T9615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.319492][ T9615]  ? clear_bhb_loop+0x70/0xc0
[  314.319517][ T9615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.319538][ T9615] RIP: 0033:0x7fdd8939e559
[  314.319557][ T9615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.319575][ T9615] RSP: 002b:00007fdd8a264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  314.319596][ T9615] RAX: ffffffffffffffda RBX: 00007fdd89625fa0 RCX: 00007fdd8939e559
[  314.319630][ T9615] RDX: 0000000000000001 RSI: 000000000000011b RDI: 0000000000000003
[  314.319643][ T9615] RBP: 00007fdd8a264090 R08: 0000200000000280 R09: 0000000000000000
[  314.319658][ T9615] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  314.319672][ T9615] R13: 00007fdd89626038 R14: 00007fdd89625fa0 R15: 00007fdd8974fa48
[  314.319706][ T9615]  </TASK>
[  314.957039][ T9624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1023'.
[  315.119435][ T9630] netlink: 'syz.1.1025': attribute type 1 has an invalid length.
[  315.161371][ T5722] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  315.208108][ T9633] bond2: (slave geneve2): making interface the new active one
[  315.209047][ T9633] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  315.228578][ T8546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  315.228749][ T8546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  315.228776][ T8546] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  315.228800][ T8546] netdevsim netdevsim1 �: set [1, 0] type 2 family 0 port 20000 - 0
[  315.228936][ T5941] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  315.283082][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1025'.
[  315.296767][ T9630] 8021q: adding VLAN 0 to HW filter on device bond2
[  315.328342][ T5722] usb 4-1: Using ep0 maxpacket: 32
[  315.391416][ T5941] usb 5-1: Using ep0 maxpacket: 16
[  315.392281][ T5941] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  315.394458][ T5941] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.394490][ T5941] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.394515][ T5941] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  315.394542][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0
[  315.394578][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.468009][ T5941] usb 5-1: config 0 descriptor??
[  315.604209][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short
[  315.604260][ T5722] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  315.613046][ T5937] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  315.671780][ T5722] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[  315.671818][ T5722] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[  315.671840][ T5722] usb 4-1: config 14 has no interface number 0
[  315.671858][ T5722] usb 4-1: config 14 has no interface number 1
[  315.671921][ T5722] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  315.671939][ T5722] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping
[  315.671968][ T5722] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  315.672008][ T5722] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  315.672034][ T5722] usb 4-1: config 14 interface 57 has no altsetting 0
[  315.672051][ T5722] usb 4-1: config 14 interface 228 has no altsetting 0
[  315.675996][ T9624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.676368][ T9624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.804243][ T5937] usb 3-1: device descriptor read/64, error -71
[  315.881467][ T5941] usbhid 5-1:0.0: can't add hid device: -71
[  315.882562][ T5941] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  315.907041][ T5941] usb 5-1: USB disconnect, device number 48
[  315.961434][ T9638] Format for deleting device is "id" (uint).
[  316.082857][ T5937] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  316.231366][ T5937] usb 3-1: device descriptor read/64, error -71
[  316.344847][ T5937] usb usb3-port1: attempt power cycle
[  316.692278][ T5937] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  316.714035][ T5937] usb 3-1: device descriptor read/8, error -71
[  316.961364][ T5937] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  316.989072][ T5937] usb 3-1: device descriptor read/8, error -71
[  317.064417][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  317.064477][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  317.064733][    C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[  317.066765][    C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b
[  317.139071][ T5937] usb usb3-port1: unable to enumerate USB device
[  317.470205][ T9657] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  317.630538][ T9659] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  317.665045][ T9659] bond0: (slave lo): Enslaving as an active interface with an up link
[  317.665401][ T9659] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  319.113342][ T9667] syz.2.1032 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  319.113410][ T9667] CPU: 0 UID: 0 PID: 9667 Comm: syz.2.1032 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  319.113442][ T9667] Tainted: [L]=SOFTLOCKUP
[  319.113451][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  319.113465][ T9667] Call Trace:
[  319.113474][ T9667]  <TASK>
[  319.113488][ T9667]  dump_stack_lvl+0xe8/0x150
[  319.113528][ T9667]  dump_header+0xd3/0x4b0
[  319.113561][ T9667]  oom_kill_process+0x3ab/0x9e0
[  319.113603][ T9667]  out_of_memory+0x1064/0x1480
[  319.113635][ T9667]  ? try_charge_memcg+0xc32/0x15e0
[  319.113682][ T9667]  ? __pfx_out_of_memory+0x10/0x10
[  319.113714][ T9667]  ? do_raw_spin_unlock+0xf5/0x200
[  319.113761][ T9667]  try_charge_memcg+0xcdf/0x15e0
[  319.113815][ T9667]  ? __pfx_try_charge_memcg+0x10/0x10
[  319.113846][ T9667]  ? lock_acquire+0x115/0x350
[  319.113890][ T9667]  ? charge_memcg+0x47/0x310
[  319.113925][ T9667]  charge_memcg+0x1dd/0x310
[  319.113967][ T9667]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  319.114001][ T9667]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  319.114038][ T9667]  swap_cache_alloc_folio+0x4de/0x990
[  319.114075][ T9667]  swap_cluster_readahead+0x4f2/0x630
[  319.114107][ T9667]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  319.114157][ T9667]  swapin_readahead+0x1a3/0xc50
[  319.114194][ T9667]  ? __pfx_swapin_readahead+0x10/0x10
[  319.114221][ T9667]  ? swap_table_get+0x1e/0x260
[  319.114249][ T9667]  ? swap_table_get+0x1e/0x260
[  319.114275][ T9667]  ? swap_table_get+0x1e/0x260
[  319.114313][ T9667]  ? swap_table_get+0x216/0x260
[  319.114340][ T9667]  ? swap_cache_get_folio+0x2e7/0x2f0
[  319.114372][ T9667]  do_swap_page+0x3fb/0x4c10
[  319.114411][ T9667]  ? do_swap_page+0x126/0x4c10
[  319.114436][ T9667]  ? __pfx_do_swap_page+0x10/0x10
[  319.114461][ T9667]  ? __pte_offset_map+0x1ae/0x240
[  319.114489][ T9667]  ? pte_offset_map_rw_nolock+0xea/0x160
[  319.114517][ T9667]  handle_mm_fault+0x1398/0x3750
[  319.114550][ T9667]  ? handle_mm_fault+0xf1/0x3750
[  319.114584][ T9667]  ? __pfx_handle_mm_fault+0x10/0x10
[  319.114620][ T9667]  ? __lock_acquire+0x747/0x2de0
[  319.114660][ T9667]  ? lock_mm_and_find_vma+0xa7/0x340
[  319.114682][ T9667]  do_user_addr_fault+0x746/0x1340
[  319.114714][ T9667]  exc_page_fault+0x6a/0xc0
[  319.114737][ T9667]  asm_exc_page_fault+0x26/0x30
[  319.114754][ T9667] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[  319.114783][ T9667] Code: 68 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 4f 68 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  319.114798][ T9667] RSP: 0018:ffffc90006687658 EFLAGS: 00050202
[  319.114816][ T9667] RAX: 00007ffffffff001 RBX: dffffc0000000000 RCX: 0000000000000ec0
[  319.114829][ T9667] RDX: 0000000000000001 RSI: 0000200000488094 RDI: ffff88809a45a000
[  319.114842][ T9667] RBP: ffffc900066877a8 R08: ffff88809a45aebf R09: 1ffff1101348b5d7
[  319.114855][ T9667] R10: dffffc0000000000 R11: ffffed101348b5d8 R12: ffffc90006687e10
[  319.114868][ T9667] R13: 0000000000487c54 R14: 0000000000000ec0 R15: 0000000000000ec0
[  319.114894][ T9667]  _copy_from_iter+0x408/0x1660
[  319.114930][ T9667]  ? __pfx__copy_from_iter+0x10/0x10
[  319.114969][ T9667]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  319.114995][ T9667]  skb_copy_datagram_from_iter+0xe6/0x720
[  319.115022][ T9667]  ? get_pid+0x52/0x80
[  319.115043][ T9667]  ? skb_put+0x112/0x210
[  319.115063][ T9667]  unix_stream_sendmsg+0x5ce/0xde0
[  319.115087][ T9667]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  319.115121][ T9667]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  319.115167][ T9667]  ? aa_sock_msg_perm+0x129/0x210
[  319.115200][ T9667]  ? apparmor_socket_sendmsg+0x98/0x360
[  319.115227][ T9667]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  319.115252][ T9667]  sock_sendmsg_nosec+0x13a/0x180
[  319.115281][ T9667]  ____sys_sendmsg+0x54e/0x850
[  319.115310][ T9667]  ? __pfx_____sys_sendmsg+0x10/0x10
[  319.115352][ T9667]  ? import_iovec+0x73/0xa0
[  319.115378][ T9667]  ___sys_sendmsg+0x2a5/0x360
[  319.115404][ T9667]  ? __lock_acquire+0x747/0x2de0
[  319.115435][ T9667]  ? __pfx____sys_sendmsg+0x10/0x10
[  319.115467][ T9667]  ? futex_wait+0x2a2/0x390
[  319.115523][ T9667]  ? __fget_files+0x2a/0x420
[  319.115545][ T9667]  ? __fget_files+0x3a2/0x420
[  319.115577][ T9667]  __x64_sys_sendmsg+0x1b1/0x290
[  319.115608][ T9667]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  319.115660][ T9667]  do_syscall_64+0x166/0x520
[  319.115687][ T9667]  ? trace_irq_disable+0x3b/0x140
[  319.115714][ T9667]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.115737][ T9667]  ? clear_bhb_loop+0x70/0xc0
[  319.115767][ T9667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.115790][ T9667] RIP: 0033:0x7f08bbf9e559
[  319.115807][ T9667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  319.115823][ T9667] RSP: 002b:00007f08bcdf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.115842][ T9667] RAX: ffffffffffffffda RBX: 00007f08bc225fa0 RCX: 00007f08bbf9e559
[  319.115855][ T9667] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005
[  319.115867][ T9667] RBP: 00007f08bc035ab8 R08: 0000000000000000 R09: 0000000000000000
[  319.115878][ T9667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.115889][ T9667] R13: 00007f08bc226038 R14: 00007f08bc225fa0 R15: 00007f08bc34fa48
[  319.115918][ T9667]  </TASK>
[  319.129852][ T9667] memory: usage 96kB, limit 96kB, failcnt 348
[  319.129912][ T9667] memory+swap: usage 264kB, limit 9007199254740988kB, failcnt 0
[  319.129998][ T9667] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0
[  319.130035][ T9667] Memory cgroup stats for /syz2/test:
[  319.130903][ T9667] cache 0
[  319.130993][ T9667] rss 0
[  319.131020][ T9667] rss_huge 0
[  319.131041][ T9667] shmem 0
[  319.131060][ T9667] mapped_file 0
[  319.131080][ T9667] dirty 0
[  319.131099][ T9667] writeback 0
[  319.131160][ T9667] workingset_refault_anon 14
[  319.131182][ T9667] workingset_refault_file 0
[  319.131210][ T9667] swap 172032
[  319.132746][ T9667] swapcached 393216
[  319.132775][ T9667] pgpgin 103
[  319.132795][ T9667] pgpgout 103
[  319.132814][ T9667] pgfault 112
[  319.132834][ T9667] pgmajfault 4
[  319.132904][ T9667] inactive_anon 0
[  319.132925][ T9667] active_anon 0
[  319.132955][ T9667] inactive_file 0
[  319.133892][ T9667] active_file 0
[  319.133921][ T9667] unevictable 0
[  319.134003][ T9667] hierarchical_memory_limit 98304
[  319.134030][ T9667] hierarchical_memsw_limit 9223372036854771712
[  319.134052][ T9667] total_cache 0
[  319.134073][ T9667] total_rss 0
[  319.134097][ T9667] total_rss_huge 0
[  319.134105][ T9667] total_shmem 0
[  319.134135][ T9667] total_mapped_file 0
[  319.134144][ T9667] total_dirty 0
[  319.134152][ T9667] total_writeback 0
[  319.134160][ T9667] total_workingset_refault_anon 14
[  319.134168][ T9667] total_workingset_refault_file 0
[  319.134176][ T9667] total_swap 172032
[  319.134184][ T9667] total_swapcached 393216
[  319.134192][ T9667] total_pgpgin 103
[  319.134200][ T9667] total_pgpgout 103
[  319.134208][ T9667] total_pgfault 112
[  319.134215][ T9667] total_pgmajfault 4
[  319.134222][ T9667] total_inactive_anon 0
[  319.134230][ T9667] total_active_anon 0
[  319.134238][ T9667] total_inactive_file 0
[  319.134246][ T9667] total_active_file 0
[  319.134279][ T9667] total_unevictable 0
[  319.134287][ T9667] anon_cost 0
[  319.134295][ T9667] file_cost 0
[  319.134303][ T9667] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1032,pid=9666,uid=0
[  319.136069][ T9667] Memory cgroup out of memory: Killed process 9666 (syz.2.1032) total-vm:106768kB, anon-rss:5944kB, file-rss:27412kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000
[  320.207307][ T5822] tipc: Subscription rejected, illegal request
[  320.541353][ T5707] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  320.724184][ T5707] usb 2-1: Using ep0 maxpacket: 8
[  320.727765][ T5707] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  320.732362][ T5707] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.732427][ T5707] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  320.732902][ T5707] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  320.745609][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.745733][ T5707] usb 2-1: Product: syz
[  320.745775][ T5707] usb 2-1: Manufacturer: syz
[  320.745819][ T5707] usb 2-1: SerialNumber: syz
[  320.775520][ T5941] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  320.896825][ T9703] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1041'.
[  320.952140][ T5941] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  320.953805][ T5941] usb 5-1: config 0 has an invalid descriptor of length 192, skipping remainder of the config
[  320.953858][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4
[  320.953889][ T5941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  320.953934][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.960528][ T5941] usb 5-1: config 0 descriptor??
[  321.090753][ T5707] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  321.090781][ T5707] usb 2-1: clock source 0 is not valid, cannot use
[  321.095284][ T5707] usb 2-1: 1:1: cannot get freq (v2/v3): err -71
[  321.096624][ T5707] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  321.254344][ T5707] usb 2-1: USB disconnect, device number 72
[  321.366899][ T5722] usb 4-1: string descriptor 0 read error: -71
[  321.367037][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.470240][ T5722] usb 4-1: can't set config #14, error -71
[  321.484069][ T6116] udevd[6116]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  321.521354][ T5722] usb 4-1: USB disconnect, device number 42
[  321.813368][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'.
[  321.869671][ T5941] ath6kl: Failed to submit usb control message: -71
[  321.869725][ T5941] ath6kl: unable to send the bmi data to the device: -71
[  321.869741][ T5941] ath6kl: Unable to send get target info: -71
[  321.893239][ T5941] ath6kl: Failed to init ath6kl core: -71
[  321.894559][ T5941] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  321.947246][ T5941] usb 5-1: USB disconnect, device number 49
[  322.072928][ T5937] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  322.164873][ T9716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.165372][ T9716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.254476][ T5937] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  322.255942][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.255995][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.258297][ T5937] usb 2-1: config 0 descriptor??
[  322.306708][ T5937] pwc: Askey VC010 type 2 USB webcam detected.
[  322.373861][   T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  322.403213][ T9721] syz.0.1048 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  322.403261][ T9721] CPU: 1 UID: 0 PID: 9721 Comm: syz.0.1048 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  322.403292][ T9721] Tainted: [L]=SOFTLOCKUP
[  322.403301][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  322.403316][ T9721] Call Trace:
[  322.403325][ T9721]  <TASK>
[  322.403336][ T9721]  dump_stack_lvl+0xe8/0x150
[  322.403377][ T9721]  dump_header+0xd3/0x4b0
[  322.403410][ T9721]  oom_kill_process+0x3ab/0x9e0
[  322.403450][ T9721]  out_of_memory+0x1064/0x1480
[  322.403483][ T9721]  ? try_charge_memcg+0xc32/0x15e0
[  322.403531][ T9721]  ? __pfx_out_of_memory+0x10/0x10
[  322.403561][ T9721]  ? do_raw_spin_unlock+0xf5/0x200
[  322.403609][ T9721]  try_charge_memcg+0xcdf/0x15e0
[  322.403665][ T9721]  ? __pfx_try_charge_memcg+0x10/0x10
[  322.403720][ T9721]  ? charge_memcg+0x47/0x310
[  322.403755][ T9721]  charge_memcg+0x1dd/0x310
[  322.403790][ T9721]  __mem_cgroup_charge+0x25/0x80
[  322.403822][ T9721]  do_wp_page+0x11a8/0x4b80
[  322.403879][ T9721]  ? __pfx_do_wp_page+0x10/0x10
[  322.403912][ T9721]  ? do_raw_spin_lock+0x12b/0x2f0
[  322.403950][ T9721]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  322.403998][ T9721]  handle_mm_fault+0x15d7/0x3750
[  322.404047][ T9721]  ? handle_mm_fault+0xf1/0x3750
[  322.404101][ T9721]  ? __pfx_handle_mm_fault+0x10/0x10
[  322.404153][ T9721]  ? __pfx___up_read+0x10/0x10
[  322.404192][ T9721]  ? lock_mm_and_find_vma+0xa7/0x340
[  322.404223][ T9721]  do_user_addr_fault+0x746/0x1340
[  322.404274][ T9721]  exc_page_fault+0x6a/0xc0
[  322.404304][ T9721]  asm_exc_page_fault+0x26/0x30
[  322.404328][ T9721] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[  322.404363][ T9721] Code: 68 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 4f 68 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  322.404383][ T9721] RSP: 0018:ffffc900071ff3f8 EFLAGS: 00050206
[  322.404404][ T9721] RAX: ffffffff84de1801 RBX: ffff88807a4d0000 RCX: 0000000000005bc0
[  322.404422][ T9721] RDX: 0000000000000000 RSI: ffff88807a4d2440 RDI: 0000200000184000
[  322.404438][ T9721] RBP: ffffc900071ff578 R08: ffff88807a4d7fff R09: 1ffff1100f49afff
[  322.404457][ T9721] R10: dffffc0000000000 R11: ffffed100f49b000 R12: 1ffff92000e3ffc3
[  322.404475][ T9721] R13: 0000200000181bc0 R14: ffffc900071ffe28 R15: 0000000000008000
[  322.404501][ T9721]  ? _copy_to_iter+0x161/0x1810
[  322.404543][ T9721]  _copy_to_iter+0x255/0x1810
[  322.404574][ T9721]  ? sock_recvmsg+0x196/0x1e0
[  322.404606][ T9721]  ? ____sys_recvmsg+0x1e6/0x4a0
[  322.404631][ T9721]  ? ___sys_recvmsg+0x213/0x5a0
[  322.404655][ T9721]  ? __x64_sys_recvmsg+0x1ae/0x290
[  322.404697][ T9721]  ? __pfx__copy_to_iter+0x10/0x10
[  322.404749][ T9721]  __skb_datagram_iter+0x419/0x980
[  322.404781][ T9721]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  322.404820][ T9721]  skb_copy_datagram_iter+0xb5/0x240
[  322.404855][ T9721]  unix_stream_read_actor+0x6c/0xb0
[  322.404890][ T9721]  unix_stream_read_generic+0xa73/0x22e0
[  322.404954][ T9721]  ? __pfx_unix_stream_read_generic+0x10/0x10
[  322.404986][ T9721]  ? __pfx_autoremove_wake_function+0x10/0x10
[  322.405029][ T9721]  ? stack_trace_save+0xa9/0x100
[  322.405054][ T9721]  ? __pfx_stack_trace_save+0x10/0x10
[  322.405077][ T9721]  ? kasan_save_track+0x4f/0x80
[  322.405115][ T9721]  unix_stream_recvmsg+0x16b/0x1d0
[  322.405152][ T9721]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  322.405182][ T9721]  ? kasan_save_free_info+0x40/0x50
[  322.405204][ T9721]  ? __pfx_unix_stream_read_actor+0x10/0x10
[  322.405246][ T9721]  ? aa_sock_msg_perm+0x129/0x210
[  322.405289][ T9721]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  322.405323][ T9721]  ? security_socket_recvmsg+0x7e/0x2c0
[  322.405352][ T9721]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  322.405386][ T9721]  sock_recvmsg+0x196/0x1e0
[  322.405422][ T9721]  ____sys_recvmsg+0x1e6/0x4a0
[  322.405460][ T9721]  ? __pfx_____sys_recvmsg+0x10/0x10
[  322.405508][ T9721]  ? import_iovec+0x73/0xa0
[  322.405534][ T9721]  ___sys_recvmsg+0x213/0x5a0
[  322.405569][ T9721]  ? __pfx____sys_recvmsg+0x10/0x10
[  322.405594][ T9721]  ? do_vfs_ioctl+0x116f/0x1530
[  322.405629][ T9721]  ? lock_acquire+0x115/0x350
[  322.405675][ T9721]  ? __fget_files+0x3a2/0x420
[  322.405710][ T9721]  __x64_sys_recvmsg+0x1ae/0x290
[  322.405741][ T9721]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  322.405768][ T9721]  ? kfree+0x4d/0x650
[  322.405800][ T9721]  ? __pfx_kcov_ioctl+0x10/0x10
[  322.405837][ T9721]  do_syscall_64+0x166/0x520
[  322.405866][ T9721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.405891][ T9721]  ? clear_bhb_loop+0x70/0xc0
[  322.405921][ T9721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.405945][ T9721] RIP: 0033:0x7fa4c799e559
[  322.405967][ T9721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.405987][ T9721] RSP: 002b:00007fa4c8852028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  322.406011][ T9721] RAX: ffffffffffffffda RBX: 00007fa4c7c26090 RCX: 00007fa4c799e559
[  322.406029][ T9721] RDX: 0000000040000300 RSI: 0000200000001240 RDI: 0000000000000006
[  322.406045][ T9721] RBP: 00007fa4c7a35ab8 R08: 0000000000000000 R09: 0000000000000000
[  322.406060][ T9721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  322.406074][ T9721] R13: 00007fa4c7c26128 R14: 00007fa4c7c26090 R15: 00007fa4c7d4fa48
[  322.406113][ T9721]  </TASK>
[  322.505040][ T9721] memory: usage 96kB, limit 96kB, failcnt 68
[  322.505061][ T9721] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0
[  322.505078][ T9721] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0
[  322.535190][ T5941] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  322.551293][   T10] usb 3-1: Using ep0 maxpacket: 8
[  322.553796][ T9721] Memory cgroup stats for /syz0/test:
[  322.554530][ T9721] cache 0
[  322.554714][ T9721] rss 0
[  322.554736][ T9721] rss_huge 0
[  322.554756][ T9721] shmem 0
[  322.554776][ T9721] mapped_file 0
[  322.585093][   T10] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.40
[  322.600282][ T9721] dirty 0
[  322.600381][ T9721] writeback 0
[  322.600403][ T9721] workingset_refault_anon 0
[  322.600432][ T9721] workingset_refault_file 0
[  322.600456][ T9721] swap 0
[  322.600470][ T9721] swapcached 0
[  322.600549][ T9721] pgpgin 0
[  322.600570][ T9721] pgpgout 0
[  322.600592][ T9721] pgfault 0
[  322.600615][ T9721] pgmajfault 0
[  322.600630][ T9721] inactive_anon 0
[  322.600652][ T9721] active_anon 0
[  322.600738][ T9721] inactive_file 0
[  322.600759][ T9721] active_file 0
[  322.600787][ T9721] unevictable 0
[  322.600809][ T9721] hierarchical_memory_limit 98304
[  322.600839][ T9721] hierarchical_memsw_limit 9223372036854771712
[  322.600939][ T9721] total_cache 0
[  322.600961][ T9721] total_rss 0
[  322.600984][ T9721] total_rss_huge 0
[  322.601004][ T9721] total_shmem 0
[  322.601025][ T9721] total_mapped_file 0
[  322.601127][ T9721] total_dirty 0
[  322.601150][ T9721] total_writeback 0
[  322.601170][ T9721] total_workingset_refault_anon 0
[  322.601193][ T9721] total_workingset_refault_file 0
[  322.601350][ T9721] total_swap 0
[  322.601378][ T9721] total_swapcached 0
[  322.601399][ T9721] total_pgpgin 0
[  322.601420][ T9721] total_pgpgout 0
[  322.601442][ T9721] total_pgfault 0
[  322.601534][ T9721] total_pgmajfault 0
[  322.601562][ T9721] total_inactive_anon 0
[  322.601585][ T9721] total_active_anon 0
[  322.601605][ T9721] total_inactive_file 0
[  322.601626][ T9721] total_active_file 0
[  322.601700][ T9721] total_unevictable 0
[  322.601728][ T9721] anon_cost 0
[  322.601750][ T9721] file_cost 0
[  322.601772][ T9721] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null)
[  322.602847][   T10] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 58, changing to 9
[  322.602985][   T10] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  322.603060][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[  322.619309][ T9721] ,cpuset=syz0
[  322.658582][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.658614][   T10] usb 3-1: Product: syz
[  322.658630][   T10] usb 3-1: Manufacturer: syz
[  322.658674][   T10] usb 3-1: SerialNumber: syz
[  322.679251][ T9721] ,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.1048,pid=9718,uid=0
[  322.739141][ T9721] Memory cgroup out of memory: Killed process 9718 (syz.0.1048) total-vm:102532kB, anon-rss:3012kB, file-rss:22996kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  322.784448][ T5941] usb 5-1: unable to get BOS descriptor or descriptor too short
[  322.784503][ T5941] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=73.9f
[  322.813925][ T5941] usb 5-1: config 2 has an invalid interface number: 69 but max is 0
[  322.813954][ T5941] usb 5-1: config 2 has no interface number 0
[  322.813982][ T5941] usb 5-1: config 2 interface 69 has no altsetting 0
[  322.878568][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.878594][ T5941] usb 5-1: Product: syz
[  322.878607][ T5941] usb 5-1: Manufacturer: syz
[  322.878619][ T5941] usb 5-1: SerialNumber: syz
[  323.091812][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.110159][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.274469][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.310270][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.376232][ T5937] pwc: recv_control_msg error -32 req 02 val 2b00
[  323.403709][ T5937] pwc: recv_control_msg error -32 req 02 val 2700
[  323.406715][ T5937] pwc: recv_control_msg error -32 req 02 val 2c00
[  323.469904][ T5937] pwc: recv_control_msg error -32 req 04 val 1000
[  324.014834][ T5937] pwc: recv_control_msg error -71 req 04 val 1300
[  324.015394][ T5937] pwc: recv_control_msg error -71 req 04 val 1400
[  324.015951][ T5937] pwc: recv_control_msg error -71 req 02 val 2000
[  324.016496][ T5937] pwc: recv_control_msg error -71 req 02 val 2100
[  324.016953][ T5937] pwc: recv_control_msg error -71 req 04 val 1500
[  324.017443][ T5937] pwc: recv_control_msg error -71 req 02 val 2500
[  324.017908][ T5937] pwc: recv_control_msg error -71 req 02 val 2400
[  324.018417][ T5937] pwc: recv_control_msg error -71 req 02 val 2600
[  324.018899][ T5937] pwc: recv_control_msg error -71 req 02 val 2900
[  324.019384][ T5937] pwc: recv_control_msg error -71 req 02 val 2800
[  324.020055][ T5937] pwc: recv_control_msg error -71 req 04 val 1100
[  324.020536][ T5937] pwc: recv_control_msg error -71 req 04 val 1200
[  324.087691][ T5937] pwc: Registered as video103.
[  324.118558][ T5937] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26
[  324.163425][ T5937] usb 2-1: USB disconnect, device number 73
[  325.248444][   T10] usbhid 3-1:1.0: can't add hid device: -71
[  325.248562][   T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  325.269765][   T10] usb 3-1: USB disconnect, device number 69
[  325.298155][ T5735] udevd[5735]: setting mode of /dev/bus/usb/003/069 to 020664 failed: No such file or directory
[  325.298283][ T5735] udevd[5735]: setting owner of /dev/bus/usb/003/069 to uid=0, gid=0 failed: No such file or directory
[  325.340085][ T5941] snd_usb_podhd 5-1:2.69: Line 6 POD HD300 found
[  325.349987][ T5941] snd_usb_podhd 5-1:2.69: set_interface failed
[  325.350200][ T5941] snd_usb_podhd 5-1:2.69: Line 6 POD HD300 now disconnected
[  325.350374][ T5941] snd_usb_podhd 5-1:2.69: probe with driver snd_usb_podhd failed with error -71
[  325.378469][ T5941] usb 5-1: USB disconnect, device number 50
[  325.438987][ T9750] IPVS: length: 112 != 24
[  325.444567][ T9749] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1053'.
[  325.598815][   T30] audit: type=1800 audit(1792284542.331:2848): pid=9752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1054" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  325.771700][   T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  325.911354][   T10] usb 3-1: device descriptor read/64, error -71
[  326.001471][ T5937] usb 5-1: new low-speed USB device number 51 using dummy_hcd
[  326.171316][   T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  326.172715][ T5937] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  326.176058][ T5937] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  326.176076][ T5937] usb 5-1: config 0 has no interface number 0
[  326.176124][ T5937] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  326.176155][ T5937] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  326.176187][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.186507][ T5937] usb 5-1: config 0 descriptor??
[  326.194635][ T9756] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  326.249751][ T5937] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  326.311781][   T10] usb 3-1: device descriptor read/64, error -71
[  326.424497][   T10] usb usb3-port1: attempt power cycle
[  326.516393][ T5707] usb 5-1: USB disconnect, device number 51
[  326.530941][ T9751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.771366][   T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  326.803178][   T10] usb 3-1: device descriptor read/8, error -71
[  326.954061][ T9765] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  326.954082][ T9765] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  326.954175][ T9765] vhci_hcd vhci_hcd.0: Device attached
[  326.983606][ T9766] vhci_hcd: connection closed
[  326.983932][ T5822] vhci_hcd vhci_hcd.1: stop threads
[  326.983956][ T5822] vhci_hcd vhci_hcd.1: release socket
[  326.983976][ T5822] vhci_hcd vhci_hcd.1: disconnect device
[  327.053814][   T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  327.073323][   T10] usb 3-1: device descriptor read/8, error -71
[  327.181631][   T10] usb usb3-port1: unable to enumerate USB device
[  327.312842][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1056'.
[  328.414502][ T9779] syz.1.1059 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000
[  328.414547][ T9779] CPU: 1 UID: 0 PID: 9779 Comm: syz.1.1059 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  328.414580][ T9779] Tainted: [L]=SOFTLOCKUP
[  328.414589][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  328.414603][ T9779] Call Trace:
[  328.414613][ T9779]  <TASK>
[  328.414624][ T9779]  dump_stack_lvl+0xe8/0x150
[  328.414665][ T9779]  dump_header+0xd3/0x4b0
[  328.414699][ T9779]  oom_kill_process+0x3ab/0x9e0
[  328.414739][ T9779]  out_of_memory+0x1064/0x1480
[  328.414771][ T9779]  ? try_charge_memcg+0xc32/0x15e0
[  328.414821][ T9779]  ? __pfx_out_of_memory+0x10/0x10
[  328.414853][ T9779]  ? do_raw_spin_unlock+0xf5/0x200
[  328.414902][ T9779]  try_charge_memcg+0xcdf/0x15e0
[  328.414964][ T9779]  ? __pfx_try_charge_memcg+0x10/0x10
[  328.415002][ T9779]  ? percpu_ref_tryget+0x15/0x180
[  328.415049][ T9779]  ? __obj_cgroup_charge+0x36/0x2c0
[  328.415083][ T9779]  __obj_cgroup_charge+0x1fd/0x2c0
[  328.415112][ T9779]  ? __obj_cgroup_charge+0x36/0x2c0
[  328.415145][ T9779]  __memcg_slab_post_alloc_hook+0x766/0xd90
[  328.415196][ T9779]  ? __alloc_skb+0x1db/0x7a0
[  328.415220][ T9779]  kmem_cache_alloc_node_noprof+0x406/0x610
[  328.415258][ T9779]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  328.415284][ T9779]  ? __alloc_skb+0x1db/0x7a0
[  328.415306][ T9779]  ? __alloc_skb+0x1db/0x7a0
[  328.415336][ T9779]  __alloc_skb+0x1db/0x7a0
[  328.415366][ T9779]  alloc_skb_with_frags+0xc6/0x760
[  328.415391][ T9779]  ? __lock_acquire+0x747/0x2de0
[  328.415430][ T9779]  sock_alloc_send_pskb+0x878/0x990
[  328.415468][ T9779]  ? __pfx__copy_from_iter+0x10/0x10
[  328.415513][ T9779]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  328.415548][ T9779]  ? sock_def_readable+0xae/0x550
[  328.415587][ T9779]  ? sock_def_readable+0x2ff/0x550
[  328.415618][ T9779]  ? sock_def_readable+0xae/0x550
[  328.415654][ T9779]  unix_stream_sendmsg+0x4ba/0xde0
[  328.415709][ T9779]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  328.415747][ T9779]  ? aa_sock_msg_perm+0x129/0x210
[  328.415791][ T9779]  ? apparmor_socket_sendmsg+0x98/0x360
[  328.415827][ T9779]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  328.415859][ T9779]  sock_sendmsg_nosec+0x13a/0x180
[  328.415897][ T9779]  ____sys_sendmsg+0x54e/0x850
[  328.415932][ T9779]  ? __pfx_____sys_sendmsg+0x10/0x10
[  328.415970][ T9779]  ? import_iovec+0x73/0xa0
[  328.415997][ T9779]  ___sys_sendmsg+0x2a5/0x360
[  328.416024][ T9779]  ? __lock_acquire+0x747/0x2de0
[  328.416056][ T9779]  ? __pfx____sys_sendmsg+0x10/0x10
[  328.416088][ T9779]  ? futex_wait+0x2a2/0x390
[  328.416146][ T9779]  ? __fget_files+0x2a/0x420
[  328.416168][ T9779]  ? __fget_files+0x3a2/0x420
[  328.416203][ T9779]  __x64_sys_sendmsg+0x1b1/0x290
[  328.416242][ T9779]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  328.416294][ T9779]  do_syscall_64+0x166/0x520
[  328.416323][ T9779]  ? trace_irq_disable+0x3b/0x140
[  328.416350][ T9779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.416375][ T9779]  ? clear_bhb_loop+0x70/0xc0
[  328.416406][ T9779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.416430][ T9779] RIP: 0033:0x7f0f0939e559
[  328.416453][ T9779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  328.416475][ T9779] RSP: 002b:00007f0f0a1cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  328.416501][ T9779] RAX: ffffffffffffffda RBX: 00007f0f09625fa0 RCX: 00007f0f0939e559
[  328.416520][ T9779] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005
[  328.416536][ T9779] RBP: 00007f0f09435ab8 R08: 0000000000000000 R09: 0000000000000000
[  328.416552][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  328.416568][ T9779] R13: 00007f0f09626038 R14: 00007f0f09625fa0 R15: 00007f0f0974fa48
[  328.416606][ T9779]  </TASK>
[  328.576397][ T9779] memory: usage 96kB, limit 96kB, failcnt 672
[  328.576421][ T9779] memory+swap: usage 916kB, limit 9007199254740988kB, failcnt 0
[  328.576439][ T9779] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0
[  328.576454][ T9779] Memory cgroup stats for /syz1/test:
[  328.576639][ T9779] cache 0
[  328.576650][ T9779] rss 0
[  328.576658][ T9779] rss_huge 0
[  328.576667][ T9779] shmem 0
[  328.576676][ T9779] mapped_file 0
[  328.576685][ T9779] dirty 0
[  328.576694][ T9779] writeback 0
[  328.576702][ T9779] workingset_refault_anon 19
[  328.576712][ T9779] workingset_refault_file 0
[  328.576729][ T9779] swap 839680
[  328.576738][ T9779] swapcached 917504
[  328.576747][ T9779] pgpgin 224
[  328.576755][ T9779] pgpgout 224
[  328.576764][ T9779] pgfault 408
[  328.576772][ T9779] pgmajfault 19
[  328.576782][ T9779] inactive_anon 0
[  328.576791][ T9779] active_anon 0
[  328.576799][ T9779] inactive_file 0
[  328.576809][ T9779] active_file 0
[  328.576828][ T9779] unevictable 0
[  328.576837][ T9779] hierarchical_memory_limit 98304
[  328.576846][ T9779] hierarchical_memsw_limit 9223372036854771712
[  328.576857][ T9779] total_cache 0
[  328.576865][ T9779] total_rss 0
[  328.576874][ T9779] total_rss_huge 0
[  328.576882][ T9779] total_shmem 0
[  328.576890][ T9779] total_mapped_file 0
[  328.576898][ T9779] total_dirty 0
[  328.576907][ T9779] total_writeback 0
[  328.576914][ T9779] total_workingset_refault_anon 19
[  328.576924][ T9779] total_workingset_refault_file 0
[  328.576934][ T9779] total_swap 839680
[  328.576941][ T9779] total_swapcached 917504
[  328.576951][ T9779] total_pgpgin 224
[  328.576959][ T9779] total_pgpgout 224
[  328.576967][ T9779] total_pgfault 408
[  328.576976][ T9779] total_pgmajfault 19
[  328.576984][ T9779] total_inactive_anon 0
[  328.576994][ T9779] total_active_anon 0
[  328.577002][ T9779] total_inactive_file 0
[  328.577011][ T9779] total_active_file 0
[  328.577020][ T9779] total_unevictable 0
[  328.577075][ T9779] anon_cost 0
[  328.577085][ T9779] file_cost 0
[  328.577094][ T9779] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.1059,pid=9778,uid=0
[  328.582179][ T9779] Memory cgroup out of memory: Killed process 9778 (syz.1.1059) total-vm:102532kB, anon-rss:3692kB, file-rss:23272kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000
[  329.133065][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'.
[  329.340323][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'.
[  329.703539][ T9800] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1064'.
[  330.030724][ T9804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.353723][ T9809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.717569][ T9822] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1073'.
[  331.159104][ T9834] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1075'.
[  331.282190][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'.
[  331.344175][ T9841] binder: 9836:9841 ioctl 8933 200000000480 returned -22
[  331.476984][ T9843] syzkaller1: entered promiscuous mode
[  331.477011][ T9843] syzkaller1: entered allmulticast mode
[  331.505567][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'.
[  331.581369][ T5951] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  331.739799][ T5951] usb 5-1: not running at top speed; connect to a high speed hub
[  331.739836][ T5951] usb 5-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  331.752714][ T5951] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  331.771851][ T5951] usb 5-1: string descriptor 0 read error: -22
[  331.771986][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.791871][ T5943] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  331.794516][ T9841] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  331.832778][ T5951] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  331.832832][ T5951] usb 5-1: MIDIStreaming interface descriptor not found
[  331.942013][ T5943] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00
[  331.965522][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.965552][ T5943] usb 3-1: Product: syz
[  331.965568][ T5943] usb 3-1: Manufacturer: syz
[  331.965585][ T5943] usb 3-1: SerialNumber: syz
[  332.091256][ T9850] FAULT_INJECTION: forcing a failure.
[  332.091256][ T9850] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  332.091294][ T9850] CPU: 0 UID: 0 PID: 9850 Comm: syz.1.1081 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  332.091324][ T9850] Tainted: [L]=SOFTLOCKUP
[  332.091333][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  332.091347][ T9850] Call Trace:
[  332.091356][ T9850]  <TASK>
[  332.091367][ T9850]  dump_stack_lvl+0xe8/0x150
[  332.091414][ T9850]  should_fail_ex+0x410/0x560
[  332.091450][ T9850]  _copy_from_user+0x2d/0xb0
[  332.091475][ T9850]  ___sys_sendmsg+0x1c6/0x360
[  332.091500][ T9850]  ? __lock_acquire+0x747/0x2de0
[  332.091530][ T9850]  ? __pfx____sys_sendmsg+0x10/0x10
[  332.091561][ T9850]  ? irqentry_exit+0x218/0x920
[  332.091615][ T9850]  ? __fget_files+0x2a/0x420
[  332.091638][ T9850]  ? __fget_files+0x3a2/0x420
[  332.091669][ T9850]  __x64_sys_sendmsg+0x1b1/0x290
[  332.091698][ T9850]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  332.091746][ T9850]  do_syscall_64+0x166/0x520
[  332.091774][ T9850]  ? trace_irq_disable+0x3b/0x140
[  332.091799][ T9850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.091822][ T9850]  ? clear_bhb_loop+0x70/0xc0
[  332.091849][ T9850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.091872][ T9850] RIP: 0033:0x7f0f0939e559
[  332.091892][ T9850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.091913][ T9850] RSP: 002b:00007f0f0a1cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  332.091937][ T9850] RAX: ffffffffffffffda RBX: 00007f0f09625fa0 RCX: 00007f0f0939e559
[  332.091954][ T9850] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003
[  332.091969][ T9850] RBP: 00007f0f0a1cd090 R08: 0000000000000000 R09: 0000000000000000
[  332.091983][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.091998][ T9850] R13: 00007f0f09626038 R14: 00007f0f09625fa0 R15: 00007f0f0974fa48
[  332.092032][ T9850]  </TASK>
[  332.310130][ T5943] cdc_acm 3-1:1.0: ttyACM0: USB ACM device
[  332.443417][ T5943] usb 3-1: USB disconnect, device number 74
[  332.871341][ T5943] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  333.002648][ T5943] usb 3-1: device descriptor read/64, error -71
[  333.092779][ T9855] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1083'.
[  333.241326][ T5943] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  333.371437][ T5707] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  333.371800][ T5943] usb 3-1: device descriptor read/64, error -71
[  333.482005][ T5943] usb usb3-port1: attempt power cycle
[  333.531578][ T5707] usb 4-1: Using ep0 maxpacket: 32
[  333.532857][ T5707] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  333.535103][ T5707] usb 4-1: config 0 has an invalid interface number: 146 but max is 0
[  333.535131][ T5707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  333.535159][ T5707] usb 4-1: config 0 has no interface number 0
[  333.535187][ T5707] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[  333.535206][ T5707] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  333.535223][ T5707] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[  333.535241][ T5707] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  333.535265][ T5707] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  333.535284][ T5707] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  333.535302][ T5707] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  333.535320][ T5707] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  333.535336][ T5707] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  333.537550][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.537582][ T5707] usb 4-1: Product: syz
[  333.537593][ T5707] usb 4-1: Manufacturer: syz
[  333.537605][ T5707] usb 4-1: SerialNumber: syz
[  333.653002][ T5707] usb 4-1: config 0 descriptor??
[  333.668073][ T9854] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  333.721970][ T5707] usb 4-1: will this work? Command EP is not usually 12
[  333.721997][ T5707] usb 4-1: will this work? Response EP is not usually 3
[  333.722027][ T5707] usb 4-1: will this work? Image data EP is not usually 2
[  333.755978][ T5707] scsi host1: microtekX6
[  333.770586][ T8540] usb 4-1: error -90 submitting URB
[  333.792932][   T25] usb 4-1: error -90 submitting URB
[  333.821415][ T5943] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  333.834490][   T25] usb 4-1: error -90 submitting URB
[  333.842333][ T5943] usb 3-1: device descriptor read/8, error -71
[  333.871495][   T25] usb 4-1: error -90 submitting URB
[  333.925761][ T5707] usb 4-1: USB disconnect, device number 43
[  334.081404][ T5943] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  334.103550][ T5943] usb 3-1: device descriptor read/8, error -71
[  334.211642][ T5943] usb usb3-port1: unable to enumerate USB device
[  334.367557][ T5943] usb 5-1: USB disconnect, device number 52
[  334.417831][ T9867] loop9: detected capacity change from 0 to 8
[  334.483317][ T9867] loop9: detected capacity change from 8 to 7
[  334.490039][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  334.490144][    C0] buffer_io_error: 465 callbacks suppressed
[  334.490159][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  334.528731][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  334.528815][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  334.529073][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  334.529149][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  334.537016][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  334.537315][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  334.538618][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  334.538874][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  334.540332][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  334.540539][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  334.541109][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  334.541175][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  334.542961][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  334.543138][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  334.543732][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  334.543901][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  334.544937][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  334.545108][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  334.547087][ T9867] ldm_validate_partition_table(): Disk read failed.
[  334.603911][ T9867] Dev loop9: unable to read RDB block 0
[  334.607441][ T9867]  loop9: unable to read partition table
[  334.610145][ T9867] loop9: partition table beyond EOD, truncated
[  334.610255][ T9867] loop_reread_partitions: partition scan of loop9 (|LC�Tn1�`BPY������꽡7��=���ݥ4�ɫ,
��߸�M�y����V��4!�4) failed (rc=-5)
[  334.791346][ T5943] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  334.857045][ T9877] netlink: NAT attribute has 8 unknown bytes
[  334.857072][ T9877] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.941541][ T5943] usb 5-1: Using ep0 maxpacket: 32
[  334.988561][ T9867] batman_adv: batadv0: Adding interface: gretap1
[  334.988592][ T9867] batman_adv: batadv0: The MTU of interface gretap1 is too small (1412) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.988658][ T9867] batman_adv: batadv0: Interface activated: gretap1
[  335.033473][ T5943] usb 5-1: unable to get BOS descriptor or descriptor too short
[  335.033527][ T5943] usb 5-1: New USB device found, idVendor=147f, idProduct=2758, bcdDevice=be.e6
[  335.034756][ T5943] usb 5-1: unable to read config index 0 descriptor/start: -71
[  335.034793][ T5943] usb 5-1: can't read configurations, error -71
[  335.081522][ T9881] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  335.088262][ T4985] ldm_validate_partition_table(): Disk read failed.
[  335.094831][ T4985] Dev loop9: unable to read RDB block 0
[  335.113527][ T4985]  loop9: unable to read partition table
[  335.113713][ T4985] loop9: partition table beyond EOD, truncated
[  335.401588][ T5707] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  335.562083][ T5707] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  335.569203][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.569227][ T5707] usb 4-1: Product: syz
[  335.569241][ T5707] usb 4-1: Manufacturer: syz
[  335.569270][ T5707] usb 4-1: SerialNumber: syz
[  336.068809][ T9904] netlink: 'syz.2.1097': attribute type 2 has an invalid length.
[  336.326945][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  336.327002][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  336.344662][ T5937] usb 3-1: new low-speed USB device number 79 using dummy_hcd
[  336.532176][ T5937] usb 3-1: No LPM exit latency info found, disabling LPM.
[  336.532219][ T5937] usb 3-1: New USB device found, idVendor=04f1, idProduct=3011, bcdDevice=b4.6e
[  336.535659][ T5937] usb 3-1: config 5 has an invalid interface number: 154 but max is 2
[  336.535684][ T5937] usb 3-1: config 5 has an invalid interface number: 204 but max is 2
[  336.535706][ T5937] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  336.535741][ T5937] usb 3-1: config 5 has 2 interfaces, different from the descriptor's value: 3
[  336.535843][ T5937] usb 3-1: config 5 has no interface number 0
[  336.535862][ T5937] usb 3-1: config 5 has no interface number 1
[  336.535972][ T5937] usb 3-1: config 5 interface 154 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 8
[  336.536013][ T5937] usb 3-1: config 5 interface 204 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 8
[  336.536043][ T5937] usb 3-1: config 5 interface 204 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 8
[  336.536096][ T5937] usb 3-1: config 5 interface 204 altsetting 1 endpoint 0x8 has invalid maxpacket 64, setting to 8
[  336.536125][ T5937] usb 3-1: config 5 interface 204 altsetting 1 endpoint 0xE has invalid maxpacket 16, setting to 8
[  336.536152][ T5937] usb 3-1: config 5 interface 204 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  336.536178][ T5937] usb 3-1: config 5 interface 204 altsetting 1 endpoint 0xB has invalid maxpacket 32, setting to 8
[  336.536206][ T5937] usb 3-1: config 5 interface 204 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[  336.536255][ T5937] usb 3-1: config 5 interface 204 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  336.536280][ T5937] usb 3-1: config 5 interface 204 altsetting 1 endpoint 0x5 has invalid maxpacket 64, setting to 8
[  336.536308][ T5937] usb 3-1: config 5 interface 204 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 12
[  336.536336][ T5937] usb 3-1: config 5 interface 204 has no altsetting 0
[  336.825760][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  336.825822][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  336.830814][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  336.865739][ T5707] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  337.118730][ T9916] warning: `syz.4.1101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  337.183939][ T9919] misc userio: No port type given on /dev/userio
[  337.287404][ T9921] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  338.111523][   T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  338.262377][   T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  338.263561][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.267966][   T10] usb 5-1: config 0 descriptor??
[  338.294765][   T10] cp210x 5-1:0.0: cp210x converter detected
[  338.298917][ T9931] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1106'.
[  338.675468][   T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71
[  338.675996][   T10] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71
[  338.676022][   T10] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  338.679939][   T10] usb 5-1: cp210x converter now attached to ttyUSB0
[  338.722854][   T10] usb 5-1: USB disconnect, device number 55
[  338.744429][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  338.745127][   T10] cp210x 5-1:0.0: device disconnected
[  338.761938][ T5943] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  338.891419][ T5943] usb 2-1: device descriptor read/64, error -71
[  339.041156][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.056107][ T5937] usb 3-1: can't set config #5, error -71
[  339.060981][ T5937] usb 3-1: USB disconnect, device number 79
[  339.131771][ T5943] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  339.261417][ T5943] usb 2-1: device descriptor read/64, error -71
[  339.302160][ T9953] bond1: option updelay: invalid value (18446744073256566793)
[  339.302184][ T9953] bond1: option updelay: allowed values 0 - 2147483647
[  339.303379][ T9953] bond1 (unregistering): Released all slaves
[  339.339930][ T9955] netlink: Conntrack attr has 8 unknown bytes
[  339.339955][ T9955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.373769][ T5943] usb usb2-port1: attempt power cycle
[  339.376218][ T9955] bond0 (unregistering): (slave lo): Releasing backup interface
[  339.376610][ T9955] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  339.385072][ T9955] bond0 (unregistering): Released all slaves
[  339.481340][ T5937] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  339.533708][ T9957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1113'.
[  339.557701][ T9957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1113'.
[  339.641467][ T5937] usb 3-1: Using ep0 maxpacket: 16
[  339.642231][ T5937] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  339.643455][ T5937] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  339.643489][ T5937] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.643513][ T5937] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  339.643542][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0
[  339.643577][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.647494][ T5937] usb 3-1: config 0 descriptor??
[  339.751432][ T5943] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  339.773705][ T5943] usb 2-1: device descriptor read/8, error -71
[  339.821521][ T5707] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  339.841351][ T5951] usb 4-1: USB disconnect, device number 44
[  339.952790][ T5707] usb 5-1: device descriptor read/64, error -71
[  339.983918][ T9960] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  340.011356][ T5943] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  340.032065][ T5943] usb 2-1: device descriptor read/8, error -71
[  340.141829][ T5943] usb usb2-port1: unable to enumerate USB device
[  340.211996][ T5707] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  340.335051][ T5937] usb 3-1: string descriptor 0 read error: -71
[  340.345753][ T5707] usb 5-1: device descriptor read/64, error -71
[  340.361623][ T5937] usbhid 3-1:0.0: can't add hid device: -71
[  340.361719][ T5937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  340.375786][ T5937] usb 3-1: USB disconnect, device number 80
[  340.421998][   T30] audit: type=1326 audit(1792284557.161:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.3.1116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1779e559 code=0x7ffc0000
[  340.422235][   T30] audit: type=1326 audit(1792284557.161:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.3.1116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1779e559 code=0x7ffc0000
[  340.422706][   T30] audit: type=1326 audit(1792284557.161:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.3.1116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fbf1779e559 code=0x7ffc0000
[  340.423152][   T30] audit: type=1326 audit(1792284557.161:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.3.1116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1779e559 code=0x7ffc0000
[  340.423377][   T30] audit: type=1326 audit(1792284557.161:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.3.1116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1779e559 code=0x7ffc0000
[  340.423788][   T30] audit: type=1326 audit(1792284557.161:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.3.1116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fbf1779e559 code=0x7ffc0000
[  340.424089][   T30] audit: type=1326 audit(1792284557.161:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.3.1116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1779e559 code=0x7ffc0000
[  340.424306][   T30] audit: type=1326 audit(1792284557.161:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.3.1116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1779e559 code=0x7ffc0000
[  340.424636][   T30] audit: type=1326 audit(1792284557.161:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.3.1116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf1779e559 code=0x7ffc0000
[  340.424831][   T30] audit: type=1326 audit(1792284557.161:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.3.1116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1779e559 code=0x7ffc0000
[  340.462498][ T5707] usb usb5-port1: attempt power cycle
[  340.660689][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'.
[  340.660790][ T9968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1117'.
[  340.702397][ T9968] geneve2: entered promiscuous mode
[  340.702469][ T9968] geneve2: entered allmulticast mode
[  340.722366][ T8550] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.722507][ T8550] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.722555][ T8550] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.722592][ T8550] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.801642][ T5707] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  340.833326][ T5707] usb 5-1: device descriptor read/8, error -71
[  340.920711][ T9975] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  341.067983][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  341.075103][ T5707] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  341.101941][ T5707] usb 5-1: device descriptor read/8, error -71
[  341.211826][ T5707] usb usb5-port1: unable to enumerate USB device
[  341.301389][ T5951] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  341.452723][ T5951] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  341.454725][ T5951] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  341.454754][ T5951] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  341.465864][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.465893][ T5951] usb 3-1: Product: syz
[  341.465914][ T5951] usb 3-1: Manufacturer: syz
[  341.465926][ T5951] usb 3-1: SerialNumber: syz
[  341.714366][ T5951] usb 3-1: Cannot retrieve CPort count: 0
[  341.714448][ T5951] usb 3-1: Cannot retrieve CPort count: -5
[  341.714477][ T5951] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -5
[  342.617793][ T8547] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  342.617977][ T9996] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  342.771460][ T5943] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  342.803192][ T8550] tipc: Subscription rejected, illegal request
[  342.921677][ T5943] usb 2-1: Using ep0 maxpacket: 32
[  342.927701][ T5943] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  342.927731][ T5943] usb 2-1: too many configurations: 17, using maximum allowed: 8
[  342.928735][ T5943] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  342.928761][ T5943] usb 2-1: config 0 has no interface number 0
[  342.928803][ T5943] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  342.928837][ T5943] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  342.929766][ T5943] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  342.929791][ T5943] usb 2-1: config 0 has no interface number 0
[  342.929838][ T5943] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  342.929861][ T5943] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  342.930756][ T5943] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  342.930779][ T5943] usb 2-1: config 0 has no interface number 0
[  342.930816][ T5943] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  342.930844][ T5943] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  342.943899][ T5943] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  342.943964][ T5943] usb 2-1: config 0 has no interface number 0
[  342.944056][ T5943] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  342.944187][ T5943] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  342.959898][T10002] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  342.981498][ T5943] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  342.981594][ T5943] usb 2-1: config 0 has no interface number 0
[  342.981697][ T5943] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  342.981790][ T5943] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  343.006732][ T5943] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  343.006875][ T5943] usb 2-1: config 0 has no interface number 0
[  343.007025][ T5943] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  343.007105][ T5943] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  343.016897][ T5943] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  343.017306][ T5943] usb 2-1: config 0 has no interface number 0
[  343.030308][ T5943] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  343.030496][ T5943] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  343.062144][ T5943] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  343.062279][ T5943] usb 2-1: config 0 has no interface number 0
[  343.062450][ T5943] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  343.062520][ T5943] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  343.105031][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.105113][ T5943] usb 2-1: Product: syz
[  343.105196][ T5943] usb 2-1: Manufacturer: syz
[  343.105253][ T5943] usb 2-1: SerialNumber: syz
[  343.133912][   T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  343.140850][ T5943] usb 2-1: config 0 descriptor??
[  343.172814][ T5943] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz)
[  343.293591][   T24] usb 5-1: Using ep0 maxpacket: 8
[  343.294154][   T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  343.295431][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  343.295479][   T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  343.295581][   T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  343.299476][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.299514][   T24] usb 5-1: Product: syz
[  343.299526][   T24] usb 5-1: Manufacturer: syz
[  343.299591][   T24] usb 5-1: SerialNumber: syz
[  343.464517][T10006] ipvlan1: MTU too low for tipc bearer
[  343.464558][T10006] tipc: Enabling of bearer <eth:ipvlan1> rejected, failed to enable media
[  343.562833][   T24] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  343.562866][   T24] usb 5-1: clock source 0 is not valid, cannot use
[  343.567547][   T24] usb 5-1: 1:1: cannot get freq (v2/v3): err -71
[  343.570703][   T24] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  343.677829][   T24] usb 5-1: USB disconnect, device number 60
[  343.746965][ T8552] IPVS: starting estimator thread 0...
[  343.758893][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  343.832506][T10009] IPVS: using max 29 ests per chain, 69600 per kthread
[  343.887751][ T5943] etas_es58x 2-1:0.2: could not retrieve the product info string
[  343.956657][ T5943] usb 2-1: USB disconnect, device number 78
[  343.961169][ T5943] etas_es58x 2-1:0.2: Disconnecting syz syz
[  344.082027][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'.
[  344.082066][T10011] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1128'.
[  344.139137][   T24] usb 3-1: USB disconnect, device number 81
[  344.317241][T10020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.343623][T10020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.449509][T10031] FAULT_INJECTION: forcing a failure.
[  344.449509][T10031] name failslab, interval 1, probability 0, space 0, times 0
[  344.449546][T10031] CPU: 1 UID: 0 PID: 10031 Comm: syz.4.1132 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  344.449575][T10031] Tainted: [L]=SOFTLOCKUP
[  344.449583][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  344.449596][T10031] Call Trace:
[  344.449603][T10031]  <TASK>
[  344.449613][T10031]  dump_stack_lvl+0xe8/0x150
[  344.449649][T10031]  should_fail_ex+0x410/0x560
[  344.449684][T10031]  should_failslab+0xa8/0x100
[  344.449716][T10031]  __kmalloc_cache_noprof+0xa3/0x600
[  344.449742][T10031]  ? bpf_diag_init+0x87/0x140
[  344.449768][T10031]  ? bpf_diag_init+0x87/0x140
[  344.449801][T10031]  bpf_diag_init+0x87/0x140
[  344.449831][T10031]  bpf_check+0x5dc/0x2ef0
[  344.449891][T10031]  ? __pfx_bpf_check+0x10/0x10
[  344.449921][T10031]  ? bpf_obj_name_cpy+0x194/0x1e0
[  344.449959][T10031]  bpf_prog_load+0x14d6/0x1c20
[  344.450000][T10031]  ? __pfx_bpf_prog_load+0x10/0x10
[  344.450051][T10031]  __sys_bpf+0xd0d/0xd90
[  344.450088][T10031]  ? __pfx___sys_bpf+0x10/0x10
[  344.450127][T10031]  ? __fget_files+0x2a/0x420
[  344.450165][T10031]  ? ksys_write+0x242/0x270
[  344.450202][T10031]  ? __pfx_ksys_write+0x10/0x10
[  344.450236][T10031]  __x64_sys_bpf+0xba/0xd0
[  344.450257][T10031]  do_syscall_64+0x166/0x520
[  344.450276][T10031]  ? trace_irq_disable+0x3b/0x140
[  344.450293][T10031]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.450310][T10031]  ? clear_bhb_loop+0x70/0xc0
[  344.450329][T10031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.450345][T10031] RIP: 0033:0x7fdd8939e559
[  344.450360][T10031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.450375][T10031] RSP: 002b:00007fdd8a264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  344.450392][T10031] RAX: ffffffffffffffda RBX: 00007fdd89625fa0 RCX: 00007fdd8939e559
[  344.450404][T10031] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005
[  344.450415][T10031] RBP: 00007fdd8a264090 R08: 0000000000000000 R09: 0000000000000000
[  344.450425][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  344.450435][T10031] R13: 00007fdd89626038 R14: 00007fdd89625fa0 R15: 00007fdd8974fa48
[  344.450459][T10031]  </TASK>
[  345.014760][T10035] netlink: 'syz.4.1133': attribute type 10 has an invalid length.
[  345.014785][T10035] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1133'.
[  345.641634][ T5941] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  345.792530][ T5941] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  345.793517][ T5941] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  345.793541][ T5941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129
[  345.833987][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.834013][ T5941] usb 2-1: Product: syz
[  345.834029][ T5941] usb 2-1: Manufacturer: syz
[  345.834044][ T5941] usb 2-1: SerialNumber: syz
[  345.869546][ T5941] usb 2-1: config 0 descriptor??
[  346.080278][ T5941] mos7840 2-1:0.0: required endpoints missing
[  346.290192][ T5937] usb 2-1: USB disconnect, device number 79
[  346.360786][T10067] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  346.470208][T10071] netlink: 'syz.2.1139': attribute type 1 has an invalid length.
[  346.584670][T10071] bond2: (slave gretap2): making interface the new active one
[  346.610690][T10071] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  346.664592][T10076] vlan2: entered allmulticast mode
[  346.664628][T10076] bond2: entered allmulticast mode
[  346.664639][T10076] gretap2: entered allmulticast mode
[  346.702451][T10076] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  346.730864][   T30] kauditd_printk_skb: 29 callbacks suppressed
[  346.730884][   T30] audit: type=1326 audit(1792284563.471:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.4.1140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8939e559 code=0x7ffc0000
[  346.731016][   T30] audit: type=1326 audit(1792284563.471:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.4.1140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8939e559 code=0x7ffc0000
[  346.791143][   T30] audit: type=1326 audit(1792284563.471:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.4.1140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdd8939e559 code=0x7ffc0000
[  346.791199][   T30] audit: type=1326 audit(1792284563.471:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.4.1140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8939e559 code=0x7ffc0000
[  346.791887][   T30] audit: type=1326 audit(1792284563.471:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.4.1140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8939e559 code=0x7ffc0000
[  346.816048][   T30] audit: type=1326 audit(1792284563.551:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.4.1140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdd8939e559 code=0x7ffc0000
[  347.175348][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'.
[  347.175389][T10093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1141'.
[  347.201429][ T5707] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[  347.374817][T10093] geneve3: entered promiscuous mode
[  347.374843][T10093] geneve3: entered allmulticast mode
[  347.398950][ T5707] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  347.398997][ T5707] usb 5-1: too many configurations: 253, using maximum allowed: 8
[  347.405921][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.405995][ T5707] usb 5-1: config 0 has no interfaces?
[  347.408954][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  347.409474][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  347.409876][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  347.410143][ T5822] netdevsim netdevsim1 �: set [1, 1] type 2 family 0 port 6081 - 0
[  347.419922][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.419998][ T5707] usb 5-1: config 0 has no interfaces?
[  347.436608][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.436680][ T5707] usb 5-1: config 0 has no interfaces?
[  347.464207][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.464302][ T5707] usb 5-1: config 0 has no interfaces?
[  347.482972][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.483049][ T5707] usb 5-1: config 0 has no interfaces?
[  347.503048][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.503121][ T5707] usb 5-1: config 0 has no interfaces?
[  347.527168][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.527258][ T5707] usb 5-1: config 0 has no interfaces?
[  347.542962][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.543034][ T5707] usb 5-1: config 0 has no interfaces?
[  347.543140][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.597868][ T5707] usb 5-1: config 0 descriptor??
[  348.101411][ T5943] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  348.211358][ T5941] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  348.254085][ T5943] usb 3-1: unable to get BOS descriptor or descriptor too short
[  348.254137][ T5943] usb 3-1: New USB device found, idVendor=2582, idProduct=004c, bcdDevice= 0.40
[  348.256747][ T5943] usb 3-1: config 1 descriptor has 1 excess byte, ignoring
[  348.256775][ T5943] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  348.286409][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.286437][ T5943] usb 3-1: Product: syz
[  348.286453][ T5943] usb 3-1: Manufacturer: syz
[  348.286470][ T5943] usb 3-1: SerialNumber: syz
[  348.361537][ T5941] usb 2-1: Using ep0 maxpacket: 16
[  348.362320][ T5941] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  348.363862][ T5941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  348.363940][ T5941] usb 2-1: config 1 interface 2 altsetting 3 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  348.363979][ T5941] usb 2-1: config 1 interface 2 has no altsetting 1
[  348.367531][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.367557][ T5941] usb 2-1: Product: syz
[  348.367574][ T5941] usb 2-1: Manufacturer: syz
[  348.367616][ T5941] usb 2-1: SerialNumber: syz
[  348.555515][ T5943] usb 3-1: unit 4 not found!
[  348.637364][ T5943] usb 3-1: USB disconnect, device number 82
[  348.702883][ T6322] udevd[6322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  349.182253][ T5941] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  349.187764][ T5941] usb 2-1: 2:3 : no or invalid class specific endpoint descriptor
[  349.187792][ T5941] usb 2-1: 2:3: invalid format type 0x1002 is detected, processed as PCM
[  349.187816][ T5941] usb 2-1: 2:3 : sample bitwidth 60 in over sample bytes 3
[  349.187843][ T5941] usb 2-1: 2:3 : invalid UAC_FORMAT_TYPE desc
[  349.295016][ T5941] usb 2-1: USB disconnect, device number 80
[  349.351292][T10116] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  349.404389][ T5735] udevd[5735]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  349.724605][T10125] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1152'.
[  349.750137][ T8550] tipc: Subscription rejected, illegal request
[  350.048501][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'.
[  350.048539][T10131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1153'.
[  350.101327][   T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  350.271282][   T10] usb 3-1: Using ep0 maxpacket: 8
[  350.276709][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  350.280017][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  350.280041][   T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  350.280097][   T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  350.308341][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.308412][   T10] usb 3-1: Product: syz
[  350.308453][   T10] usb 3-1: Manufacturer: syz
[  350.308494][   T10] usb 3-1: SerialNumber: syz
[  350.393233][ T5941] usb 5-1: USB disconnect, device number 61
[  350.592602][   T10] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  350.592633][   T10] usb 3-1: clock source 0 is not valid, cannot use
[  350.593116][   T10] usb 3-1: 1:1: cannot get freq (v2/v3): err -71
[  350.594429][   T10] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  350.796794][   T10] usb 3-1: USB disconnect, device number 83
[  350.867647][T10144] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1159'.
[  350.911943][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  351.233553][   T30] audit: type=1326 audit(1792284567.971:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf1779e559 code=0x0
[  352.123559][T10175] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1165'.
[  352.278600][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'.
[  352.278638][T10179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1166'.
[  352.641415][ T5943] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  352.792915][ T5943] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  352.794969][ T5943] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  352.795002][ T5943] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  352.795030][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.800093][T10185] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  352.853689][ T5943] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  353.325293][T10190] ip_tables: iptables: counters copy to user failed while replacing table
[  353.635326][ T5941] usb 5-1: USB disconnect, device number 62
[  354.049666][T10210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1171'.
[  354.064226][T10212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1171'.
[  354.403981][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'.
[  354.594088][T10230] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  354.803384][T10235] __nla_validate_parse: 1 callbacks suppressed
[  354.803404][T10235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1178'.
[  354.831383][ T5937] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  354.991754][ T5937] usb 5-1: Using ep0 maxpacket: 8
[  354.992472][ T5937] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  354.993634][ T5937] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  354.996020][ T5937] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  354.996046][ T5937] usb 5-1: Product: syz
[  354.996064][ T5937] usb 5-1: Manufacturer: syz
[  354.996078][ T5937] usb 5-1: SerialNumber: syz
[  355.158729][T10248] netlink: 'syz.3.1182': attribute type 1 has an invalid length.
[  355.191062][T10248] 8021q: adding VLAN 0 to HW filter on device bond1
[  355.203706][ T5937] usb 5-1: Handspring Visor / Palm OS: No valid connect info available
[  355.203726][ T5937] usb 5-1: Handspring Visor / Palm OS: port 6, is for Remote File System use
[  355.203741][ T5937] usb 5-1: Handspring Visor / Palm OS: port 217, is for unknown use
[  355.203754][ T5937] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2
[  355.206917][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'.
[  355.247163][T10248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1182'.
[  355.264315][T10248] syzkaller1: entered promiscuous mode
[  355.264333][T10248] syzkaller1: entered allmulticast mode
[  355.405494][ T5937] usb 5-1: palm_os_3_probe - error -71 getting bytes available request
[  355.405571][ T5937] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  355.449797][ T5937] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  355.471457][ T5937] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  355.479373][ T5937] usb 5-1: USB disconnect, device number 63
[  355.505735][ T5937] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  355.521067][ T5937] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  355.532423][ T5937] visor 5-1:1.0: device disconnected
[  355.753968][T10260] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1183'.
[  355.932460][T10262] ------------[ cut here ]------------
[  355.932477][T10262] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva)
[  355.932494][T10262] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#0: syz.1.1186/10262
[  355.957694][T10262] Modules linked in:
[  355.963070][T10262] CPU: 0 UID: 0 PID: 10262 Comm: syz.1.1186 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  355.974202][T10262] Tainted: [L]=SOFTLOCKUP
[  355.978558][T10262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  355.988748][T10262] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710
[  355.994982][T10262] Code: c6 05 7b ff 22 10 01 48 c7 c7 ba ff 44 8e be 43 04 00 00 48 c7 c2 c0 43 02 8c e8 db df 62 00 e9 81 ee ff ff e8 51 3c 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff
[  356.014712][T10262] RSP: 0018:ffffc90005607540 EFLAGS: 00010287
[  356.020879][T10262] RAX: ffffffff8140d4cf RBX: ffff888000000000 RCX: 0000000000080000
[  356.029131][T10262] RDX: ffffc90005d1a000 RSI: 0000000000001809 RDI: 000000000000180a
[  356.037419][T10262] RBP: ffffc900056076d8 R08: ffffffff917a747f R09: 1ffffffff22f4e8f
[  356.045748][T10262] R10: dffffc0000000000 R11: fffffbfff22f4e90 R12: 1ffff92000ac0ebc
[  356.053928][T10262] R13: ffff88802bb46190 R14: ffff888000000000 R15: ffffffffffffff01
[  356.062088][T10262] FS:  00007f0f0a1cd6c0(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000
[  356.071078][T10262] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  356.077787][T10262] CR2: 000000110c28779c CR3: 000000007743c000 CR4: 00000000003526f0
[  356.085853][T10262] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[  356.094349][T10262] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  356.102782][T10262] Call Trace:
[  356.106109][T10262]  <TASK>
[  356.109095][T10262]  ? kvm_gpc_refresh+0x31/0x110
[  356.114049][T10262]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[  356.119597][T10262]  kvm_gpc_refresh+0xe1/0x110
[  356.124476][T10262]  kvm_xen_inject_pending_events+0xfb/0x540
[  356.130447][T10262]  ? lock_acquire+0x115/0x350
[  356.135214][T10262]  ? __pfx_kvm_xen_inject_pending_events+0x10/0x10
[  356.141820][T10262]  ? __vmx_complete_interrupts+0xe7/0x640
[  356.147606][T10262]  vcpu_run+0x6599/0x7aa0
[  356.152043][T10262]  ? vcpu_run+0x3616/0x7aa0
[  356.156646][T10262]  ? __pfx_vcpu_run+0x10/0x10
[  356.161445][T10262]  ? lock_acquire+0x115/0x350
[  356.166185][T10262]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[  356.171873][T10262]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[  356.177639][T10262]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  356.182585][T10262]  kvm_vcpu_ioctl+0xa61/0xfd0
[  356.187313][T10262]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  356.192588][T10262]  ? hook_file_ioctl+0x1f2/0x600
[  356.197603][T10262]  ? __fget_files+0x2a/0x420
[  356.202273][T10262]  ? __fget_files+0x2a/0x420
[  356.206909][T10262]  ? __fget_files+0x3a2/0x420
[  356.211710][T10262]  ? __fget_files+0x2a/0x420
[  356.216367][T10262]  ? bpf_lsm_file_ioctl+0x9/0x20
[  356.221383][T10262]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  356.226633][T10262]  __se_sys_ioctl+0xfc/0x170
[  356.231327][T10262]  do_syscall_64+0x166/0x520
[  356.235994][T10262]  ? trace_irq_disable+0x3b/0x140
[  356.241064][T10262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.247268][T10262]  ? clear_bhb_loop+0x70/0xc0
[  356.252065][T10262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.257998][T10262] RIP: 0033:0x7f0f0939e559
[  356.262488][T10262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.282248][T10262] RSP: 002b:00007f0f0a1cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  356.290732][T10262] RAX: ffffffffffffffda RBX: 00007f0f09625fa0 RCX: 00007f0f0939e559
[  356.298849][T10262] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  356.306931][T10262] RBP: 00007f0f09435ab8 R08: 0000000000000000 R09: 0000000000000000
[  356.314987][T10262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.323018][T10262] R13: 00007f0f09626038 R14: 00007f0f09625fa0 R15: 00007f0f0974fa48
[  356.331045][T10262]  </TASK>
[  356.334141][T10262] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  356.341457][T10262] CPU: 0 UID: 0 PID: 10262 Comm: syz.1.1186 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  356.352443][T10262] Tainted: [L]=SOFTLOCKUP
[  356.356794][T10262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  356.366884][T10262] Call Trace:
[  356.370199][T10262]  <TASK>
[  356.373163][T10262]  vpanic+0x56d/0xa60
[  356.377203][T10262]  ? __pfx__printk+0x10/0x10
[  356.381843][T10262]  ? __pfx_vpanic+0x10/0x10
[  356.386414][T10262]  ? is_bpf_text_address+0x292/0x2b0
[  356.391741][T10262]  ? is_bpf_text_address+0x26/0x2b0
[  356.396989][T10262]  panic+0xc5/0xd0
[  356.400758][T10262]  ? __pfx_panic+0x10/0x10
[  356.405236][T10262]  __warn+0x315/0x4c0
[  356.409266][T10262]  ? __kvm_gpc_refresh+0x1510/0x1710
[  356.414607][T10262]  ? __kvm_gpc_refresh+0x1510/0x1710
[  356.419949][T10262]  __report_bug+0x276/0x570
[  356.424551][T10262]  ? __kvm_gpc_refresh+0x1510/0x1710
[  356.429894][T10262]  ? __pfx___report_bug+0x10/0x10
[  356.434970][T10262]  ? __lock_acquire+0x747/0x2de0
[  356.439984][T10262]  ? __kvm_gpc_refresh+0x1510/0x1710
[  356.445323][T10262]  report_bug+0x16b/0x220
[  356.449712][T10262]  ? __kvm_gpc_refresh+0x1510/0x1710
[  356.455035][T10262]  ? __kvm_gpc_refresh+0x1512/0x1710
[  356.460371][T10262]  handle_bug+0x9c/0x200
[  356.464689][T10262]  exc_invalid_op+0x1a/0x50
[  356.469252][T10262]  asm_exc_invalid_op+0x1a/0x20
[  356.474139][T10262] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710
[  356.480081][T10262] Code: c6 05 7b ff 22 10 01 48 c7 c7 ba ff 44 8e be 43 04 00 00 48 c7 c2 c0 43 02 8c e8 db df 62 00 e9 81 ee ff ff e8 51 3c 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff
[  356.499720][T10262] RSP: 0018:ffffc90005607540 EFLAGS: 00010287
[  356.505853][T10262] RAX: ffffffff8140d4cf RBX: ffff888000000000 RCX: 0000000000080000
[  356.513883][T10262] RDX: ffffc90005d1a000 RSI: 0000000000001809 RDI: 000000000000180a
[  356.521889][T10262] RBP: ffffc900056076d8 R08: ffffffff917a747f R09: 1ffffffff22f4e8f
[  356.529895][T10262] R10: dffffc0000000000 R11: fffffbfff22f4e90 R12: 1ffff92000ac0ebc
[  356.537890][T10262] R13: ffff88802bb46190 R14: ffff888000000000 R15: ffffffffffffff01
[  356.545904][T10262]  ? __kvm_gpc_refresh+0x150f/0x1710
[  356.551256][T10262]  ? kvm_gpc_refresh+0x31/0x110
[  356.556150][T10262]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[  356.561669][T10262]  kvm_gpc_refresh+0xe1/0x110
[  356.566414][T10262]  kvm_xen_inject_pending_events+0xfb/0x540
[  356.572348][T10262]  ? lock_acquire+0x115/0x350
[  356.577068][T10262]  ? __pfx_kvm_xen_inject_pending_events+0x10/0x10
[  356.583637][T10262]  ? __vmx_complete_interrupts+0xe7/0x640
[  356.589411][T10262]  vcpu_run+0x6599/0x7aa0
[  356.593799][T10262]  ? vcpu_run+0x3616/0x7aa0
[  356.598379][T10262]  ? __pfx_vcpu_run+0x10/0x10
[  356.603105][T10262]  ? lock_acquire+0x115/0x350
[  356.607838][T10262]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[  356.613421][T10262]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[  356.619173][T10262]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  356.624057][T10262]  kvm_vcpu_ioctl+0xa61/0xfd0
[  356.628772][T10262]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  356.633996][T10262]  ? hook_file_ioctl+0x1f2/0x600
[  356.638995][T10262]  ? __fget_files+0x2a/0x420
[  356.643619][T10262]  ? __fget_files+0x2a/0x420
[  356.648243][T10262]  ? __fget_files+0x3a2/0x420
[  356.652951][T10262]  ? __fget_files+0x2a/0x420
[  356.657568][T10262]  ? bpf_lsm_file_ioctl+0x9/0x20
[  356.662527][T10262]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  356.667755][T10262]  __se_sys_ioctl+0xfc/0x170
[  356.672385][T10262]  do_syscall_64+0x166/0x520
[  356.677005][T10262]  ? trace_irq_disable+0x3b/0x140
[  356.682058][T10262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.688159][T10262]  ? clear_bhb_loop+0x70/0xc0
[  356.692888][T10262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.698793][T10262] RIP: 0033:0x7f0f0939e559
[  356.703225][T10262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.722851][T10262] RSP: 002b:00007f0f0a1cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  356.731288][T10262] RAX: ffffffffffffffda RBX: 00007f0f09625fa0 RCX: 00007f0f0939e559
[  356.739291][T10262] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  356.747276][T10262] RBP: 00007f0f09435ab8 R08: 0000000000000000 R09: 0000000000000000
[  356.755276][T10262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.763312][T10262] R13: 00007f0f09626038 R14: 00007f0f09625fa0 R15: 00007f0f0974fa48
[  356.771323][T10262]  </TASK>
[  356.774985][T10262] Kernel Offset: disabled
[  356.779348][T10262] Rebooting in 86400 seconds..