last executing test programs:

15m45.720601095s ago: executing program 32 (id=277):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd36, 0x80, 0x4, 0x81})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000000000)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
close_range(r3, r3, 0x0)

15m42.523541258s ago: executing program 33 (id=303):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001"], 0x108}}, 0x0)
r1 = socket(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

15m31.175608329s ago: executing program 34 (id=395):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020)
write$FUSE_INIT(r0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x200000f0, 0x4, 0x1, 0xc, r1, &(0x7f00000009c0)='z', 0x1, 0xf, 0x0, 0x0, r1}])
dup3(r1, r0, 0x0)

15m20.815742604s ago: executing program 35 (id=473):
fsopen(0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1', 0x1)

14m41.822035744s ago: executing program 36 (id=833):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, 0x0, 0x8)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff8850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r9, &(0x7f0000000600)='stm32g0-typec 0x3', 0x11)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0)
sendmsg$nl_route_sched(r8, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f00000000c0))
sendmsg$NLBL_MGMT_C_LISTDEF(r5, 0x0, 0x24000080)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf251900000008000300"], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r10 = syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000089000/0xd000)=nil, &(0x7f0000127000/0x2000)=nil, &(0x7f000001b000/0x1000)=nil, &(0x7f00000b8000/0x2000)=nil, &(0x7f00000d0000/0x11000)=nil, &(0x7f00001b8000/0x3000)=nil, &(0x7f000011f000/0x11000)=nil, &(0x7f00001e0000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000017e000/0x2000)=nil, &(0x7f0000000100)="0a00dea23e52", 0x6, r10}, 0x64)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000020000000000000000000000180200002020702500000000002020207b0af8ff00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000400)=@arm64={0x3, 0x8, 0x5, '\x00', 0xa9f5})

14m41.821999731s ago: executing program 37 (id=842):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e88"], 0x4c}}, 0x0)

11m45.719806629s ago: executing program 38 (id=2191):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0)
ioctl(r0, 0x40986f00, &(0x7f0000000500)="00000000010000000000010000000000030007000000000074657374")

10m22.441938175s ago: executing program 39 (id=2608):
unshare(0x64000600)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0xf)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x0)
r3 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0)
sendmsg$AUDIT_LIST_RULES(r3, 0x0, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs\x00', 0x50)
symlink(&(0x7f00000002c0)='streaming/header/h\x00', &(0x7f0000000480)='streaming/header/h/u\x00')
symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00')
symlink(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setns(0xc9, 0x0)
socket(0x2a, 0x2, 0x9)

9m45.080834567s ago: executing program 9 (id=2864):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2)
r1 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0xfff8, 0x8, 0x0, 0x1, r2}, &(0x7f0000000280)=0x10)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4107, 0x100b}], 0x1, 0x0, 0x0)

9m44.793880718s ago: executing program 9 (id=2870):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', 0x0, 0x0, 0x0)
r0 = open(&(0x7f00000002c0)='.\x00', 0x101800, 0x1d2)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

9m44.703464999s ago: executing program 9 (id=2873):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r2 = syz_open_dev$evdev(0x0, 0x40, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f0000000180)='100000', 0x6)
write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605001a00000000000000000000000c00078008000640000000070500010006000100008005000200000005000400000000000900020073797a3100000000"], 0x50}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x44}}, 0x0)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

9m44.702718812s ago: executing program 1 (id=2874):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r2 = syz_open_dev$evdev(0x0, 0x40, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f0000000180)='100000', 0x6)
write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605001a00000000000000000000000c00078008000640000000070500010006000100008005000200000005000400000000000900020073797a3100000000"], 0x50}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x44}}, 0x0)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

9m42.648220213s ago: executing program 1 (id=2880):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xd2, &(0x7f0000000580)=ANY=[@ANYBLOB="cbf0fbf4602ebbbbbbbbbbbb86dd6a000000009c1100fe8000008a0c000000000000000000aafe8000000000000000000000000000aa4e034e20"], 0x0) (fail_nth: 3)

9m42.644159872s ago: executing program 9 (id=2881):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r0 = socket$inet6(0xa, 0x805, 0x3e)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @broadcast}]}, &(0x7f00000002c0)=0xc)
getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x194)
quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000301, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a4f1ff0000000079302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007a03000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="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", 0x2c8}], 0x1}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000016c0)=""/4086, 0xff6}], 0x1}, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
syz_emit_ethernet(0x52, &(0x7f0000001880)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x1c, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x3a}], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4)
write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9m42.643811869s ago: executing program 1 (id=2882):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x10}, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
request_key(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='source', 0x0, r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r2 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000)

9m42.36253105s ago: executing program 9 (id=2883):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = open(0x0, 0x101800, 0x1d2)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

9m42.182387417s ago: executing program 9 (id=2886):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000580)={0xa0002008})
epoll_create1(0x0) (async)
epoll_create1(0x0) (async)
fcntl$dupfd(r0, 0x0, r0) (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000580)={0xa0002008}) (async)

9m42.052482393s ago: executing program 1 (id=2888):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "66b49989f46224937633d0ced8459faf7e37800d137499b486f6dad087504929bae700ba53184c895780e7d170e4ff99b9170b335a248a2af233ee5b1cab2c7a", 0x24}, 0x48, r3)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00')
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00')
write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', './cgroup'}, 0xc)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
ptrace$pokeuser(0x6, r0, 0xfffffff7, 0x214)
preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000240)=""/133, 0x85}], 0x1, 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000400)={'netdevsim0\x00', 0x20})
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x400, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x8, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x2, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x1ff, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x28, 0x8, 0x7, 0x9, 0x2, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c)
msgrcv(0x0, 0x0, 0x0, 0xcae5393dea54af18, 0x2000)

9m41.182909824s ago: executing program 1 (id=2895):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = open(0x0, 0x101800, 0x1d2)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

9m40.90428481s ago: executing program 1 (id=2898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) (fail_nth: 5)

9m26.734541431s ago: executing program 40 (id=2886):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000580)={0xa0002008})
epoll_create1(0x0) (async)
epoll_create1(0x0) (async)
fcntl$dupfd(r0, 0x0, r0) (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000580)={0xa0002008}) (async)

9m25.507774979s ago: executing program 41 (id=2898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) (fail_nth: 5)

4m29.382635315s ago: executing program 0 (id=4385):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1000, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045668, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)

4m29.210203605s ago: executing program 2 (id=4387):
r0 = syz_io_uring_setup(0x42, &(0x7f00000001c0)={0x0, 0x5961, 0x1000, 0x1, 0x4e}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x4, 0x2})
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SETXATTR={0x2a, 0x40, 0x0, 0x0, 0x0, &(0x7f000000c640)='./file0\x00', 0xff86, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0)

4m28.963534918s ago: executing program 2 (id=4388):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x26802, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpgid(0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = dup(r2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, 0x0, &(0x7f0000000200)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0x7e5, 0x0, 0x0, 0x1000, 0x6, r3}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000480)={0x0, 0xa5f8, 0x1000, 0x80, 0x389, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x1, 0x2, 0x2033f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5d64, 0x2, 0x3, 0x144, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb18c, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x2000, 0x0, 0xdffffffb, 0x0, r8}}], 0x1, 0x0, 0x0)
r9 = syz_open_pts(r0, 0x141401)
fcntl$setstatus(r9, 0x4, 0x6000)

4m28.731051623s ago: executing program 2 (id=4390):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2a3, @remote, 0xfffffffc}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=0x0, @ANYBLOB="5bbf01000064676500000c00028005001900000000000000000000000000000000c4ca9ae180f1f478783c5a77647805000000"], 0x3c}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0193aa3551c59a33cb739a9b9421140024ed20ee58fbab45f75438cf670efee1ec83b281f44e7044da087ceee2f665653d4bb05295f5a52f32b2b066f88490f1aab40bddccf68684a8623c275d26dd3d2e7cfb163b34b7fb674ee74f30c2a2130000000000ff7f5d5c", @ANYRES16=r3, @ANYBLOB="0100000000000000000030000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x814)
mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0)
ftruncate(r5, 0x200002)
r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xf)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r11 = socket$packet(0x11, 0x3, 0x300)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000040)=r12, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@multicast, @local, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x2b, 0x1c, 0xe6, 0x0, 0x40, 0x2, 0x0, @private=0xa010102, @empty}, {0x0, 0xff, 0x0, @multicast2}}}}}, 0x0)
ioctl$TCFLSH(r9, 0x400455c8, 0x4)
ioctl$TCFLSH(r9, 0x800455c9, 0x4000000)
connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r7, r6, 0x0, 0x80001d00c0d0)

4m28.121145159s ago: executing program 5 (id=4393):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e21, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x7, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)=ANY=[@ANYBLOB="2000000000090102080000000000000005000009080006400000000004000200"], 0x20}, 0x1, 0x0, 0x0, 0x24044090}, 0x40000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000200000000000800a000940900000800260094090000080027000000000008"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/dvb/dvb0.frontend0/device/uevent\x00', 0x0, 0x0)

4m27.67100868s ago: executing program 0 (id=4394):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
timer_create(0x2, 0x0, &(0x7f0000bbdffc)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_gettime(r0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r1 = fanotify_init(0x20, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
fchmod(r1, 0x80)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x402980, 0x0)
mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$binfmt_misc(r4, &(0x7f0000000100)="d8", 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10)
write(r5, &(0x7f0000000800)='file *evio.c +', 0xe)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000500)={'wlan0\x00'})
ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000040)=0x42)
r7 = getpid()
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2)
ptrace$setregset(0x4205, r7, 0x2, &(0x7f0000000340)={&(0x7f0000000200)="4d725f36403ca12ff794f89538141da66d254d1995652d2e54fc72120f03f0ae340be824108d44ab773803baa4f5fd6ef107f10cedb7fab882bfbbf296941d74125d4642356dd4947118475825b8c22265871381af7ba5a2f28e8e603473937fce8d361b9993030cbbd19b02182ef769c2a4689614260cb21bb662442cbe1d9bad5d17afcc530bf2c96ab698e9887a92198d8c42686bab7c1460ee63f8351d19e2c2c462a01b17c43eb804eedb1be25b5cb7c9abb394f93b4f7bb2f66fdf9dddc374da38cf7e51d74604326c01b066644e26ddb0adf5bcaf99c63ce4879a", 0xde})

4m27.106453373s ago: executing program 5 (id=4396):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r3 = syz_open_dev$rtc(&(0x7f0000000040), 0x101, 0x2906)
ioctl$RTC_PLL_GET(r3, 0x801c7011, &(0x7f00000001c0))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
openat$vcs(0xffffff9c, &(0x7f0000000200), 0x28c081, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

4m26.551025138s ago: executing program 0 (id=4398):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x26802, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpgid(0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = dup(r2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, 0x0, &(0x7f0000000200)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0x7e5, 0x0, 0x0, 0x1000, 0x6, r3}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000480)={0x0, 0xa5f8, 0x1000, 0x80, 0x389, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x1, 0x2, 0x2033f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5d64, 0x2, 0x3, 0x144, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb18c, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x2000, 0x0, 0xdffffffb, 0x0, r8}}], 0x1, 0x0, 0x0)
r9 = syz_open_pts(r0, 0x141401)
fcntl$setstatus(r9, 0x4, 0x6000)

4m26.16786681s ago: executing program 5 (id=4401):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00')
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e1d, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x135, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x81, 0x100000000})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'syztnl2\x00', <r3=>0x0, 0x700, 0x20, 0x7ff, 0x8, {{0x1b, 0x4, 0x0, 0x6, 0x6c, 0x64, 0x0, 0xf, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x34, 0xd7, 0x1, 0x2, [{@remote, 0x1}, {@broadcast, 0xb7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@private=0xa010101, 0x8f}, {@empty, 0x4f}, {@remote, 0x7}]}, @timestamp={0x44, 0x10, 0xe2, 0x0, 0x9, [0xd, 0x3, 0x3ff]}, @end, @noop, @rr={0x7, 0xf, 0xb5, [@dev={0xac, 0x14, 0x14, 0x2d}, @empty, @multicast2]}, @end]}}}}})
fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340100001800100026bd7000fcdbdf2520010000000000000000000000000002000000000000000000000000000000004e2400094e2200080200201000000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="fe8000000000000000000000000080bb000004d46c000000ffffffff000000000000000000000000ff010000000000000100000000000000040000000000f9ff0800000000000000060000000000000000000000000000009c0500000000000009000000000000000c0000000000000001800000000000000000000000002000ffffffffffffffff0200000009000000000000002abd7000043500000a00030102000000fe00000008001d00080000002c001700040000002bbd70002bbd70002684e6dca5dc46186ec7c61f476e839bbd700025bd7000070000000d0000000000000005000000fdffffff08"], 0x134}}, 0x801)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0xfffffe14)
write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81e8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r7=>0x0})
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000b80)={0x10, 0x0, {0xc76f, @usage=0x5, <r8=>0x0, 0x5, 0x9, 0x10, 0x7fffffff, 0x401, 0x80, @struct={0x80000000, 0x2}, 0x9, 0xa2d, [0x7fffffffffffffff, 0x0, 0x9, 0x5, 0x9, 0x5]}, {0xa32, @struct={0x7f, 0x8}, 0x0, 0x6, 0x10, 0x7, 0x2, 0x1, 0x421, @struct={0xfffffffc, 0xbc}, 0xf, 0x800, [0x9, 0x52d, 0x4, 0x1, 0x8, 0x1]}, {0x101, @usage=0x7, 0x0, 0x86ff, 0xfffffffffffffffc, 0x7f, 0x8, 0x0, 0x0, @struct={0xf9a, 0xffffffff}, 0x8, 0x6, [0xfffffffffffffff8, 0x1ff, 0x870, 0x0, 0x6, 0x2]}, {0x7fffffff, 0x7ff, 0xa7}})
ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000f80)={{r0}, r7, 0x0, @unused=[0x3, 0x4, 0x8, 0xffffffffffffffff], @devid=r8})
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000100))
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r5, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4m26.106916972s ago: executing program 2 (id=4402):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1000, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045668, &(0x7f00000002c0)=0x1)
timer_create(0x0, 0x0, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)

4m25.979662915s ago: executing program 0 (id=4403):
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x2f, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
socket$kcm(0x2, 0x7, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x305)

4m20.714781226s ago: executing program 5 (id=4404):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='196\n\x00', 0x4)
r1 = syz_io_uring_setup(0x5f86, &(0x7f0000000180)={0x0, 0x2a97, 0x10000, 0x0, 0x3b7}, &(0x7f0000000600), &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000000))
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82187202, &(0x7f0000000d80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4000000014000100cc77e4b3547334d418e32c2223439fcaf8bd70f9ff5bdf25e31c0f6108871daa78b84c3dd52d9852ef948ea10fc35682260bbfcef37a64dc0660e36f27127138eebcfdd9fb417592ffbacf99430b5390ddef5676ab73beb96648e78010c7e33ac821bd0482bc1ea0c5ebbd650744ee1bc75c25100ebe1b55f66e6e4e4aec097be88db0d110ba99e0b3b344f430806545490a244fca7dd548f9c97a49992ee038b7f3d3099e0000000000e2ae4f29e6d69298e99739b0bc986d97981e0fcc2c51e2ab2f3070f72d89254d955b7a44bc63736e66e1a3e22f3983fb1ff258650f160405558a8d", @ANYRES32=r5, @ANYBLOB="140001000000000000000000000000000000000014000600080000000c0000001b2d0000050000006af0cd3ee46330d7975f2d35b8cef19b6d755a6ce7d572b2e05aa6f747fe"], 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x2, 0x300)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'macvlan1\x00', <r11=>0x0})
sendto$packet(r10, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x11, 0x8808, r11, 0x1, 0x85, 0x6, @broadcast}, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r13, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r13, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_ttl={{0x10, 0x0, 0x2, 0x3}}], 0x10}}], 0x1, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r15=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r15, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', <r16=>0x0, 0x2f, 0x48, 0x7f, 0xffff43cb, 0x1e9564c4fddbc142, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0x6, 0x7}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000001100)=ANY=[@ANYBLOB="0c070400", @ANYRES16=r3, @ANYBLOB="28042cbd7000fddbdf250800000074000180140002006d6163766c616e30000000000000000014000200766c616e3000000000000000000000000800030002000000140002006d6163767461703000000000000000001400020070696d726567310000000000000000000800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800030002000000140002006c6f000000000000000000000000000060000180080003000300000008000100", @ANYRES32=r8, @ANYRESOCT=r2, @ANYRES32=r11, @ANYBLOB="08000300010000001400020069703667726530000000000000000000140002006c6f000000000000000000000000000014000200766c616e300000000000000000000000540001800800030000000000080003000957877608000100", @ANYRES32=r15, @ANYRESOCT=r3, @ANYRES32=r16, @ANYBLOB="080003000000000020020280db00050094da50dd2d7eb1320eb54cc362d93b29e2c15ff39c2a7fff52583c71cdfca1bf09534bbfe8b67127ada8eefe945d1c8cc5a764877a1eb5a231a55c8079fc2e173598dd198917dd0ffff177181c92bd29efa37378b90c62c4b2ef70e600440e3e950220dd72d7a683ab321d88ee5c903c6bef7565626e4d1c0385a228aa4e87a36837d43dc508693580ff18c2f5b940f4ed07dd96eea57ccd28c0502fbc102a046ea799d7e728b6a325de61744ba757fc19d70a51830f58063d86d94a192a6804ee1239259f695be8e46fa4fd53db450d37d9a08532992b000400010024000380200001800400030008000100000000000400030008000100c1000000040003000800020065150000080002000300000004000100ff00040083969e7cc585e6c1dac9bef334348871677bda75f581f953d60d395f6c466c788e6f9f1668639c84b9825365eb79c93afbe1a62cbab480e2c752d3cef39777cf13a20ea4bd88267791fffa9fe08843ddb8d28ede7c09dd3609fa8e9cb14e38f94434e7b66aca521cd1afdfd22103f1422b1349581090b81385a6d518cacd76d10494591f171164da3ec8d1078fd8ad0ab4caaf602094a6d3e5f076397f904dc01f7f143ed13289ee78b24394ed21a79ab0cb7239fab1d0f65765691267db8b8803ccec64cae06b0a61097c81978d6616008c0ea9255fc8b4140e436e463c66065b3c35cd7d7989ce70b5a8a46bb8767fd33b5b955914ace84acc370004000100"], 0x70c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000000)
getsockopt$IPT_SO_GET_REVISION_TARGET(r13, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000440)=0x1e)
io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f00000002c0)={0x37, 0x3700, 0x0, 0x0, 0x0}, 0x20)

4m20.695200368s ago: executing program 0 (id=4405):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x8400)
ppoll(&(0x7f0000000100)=[{r1, 0x4000}], 0x1, 0x0, 0x0, 0x0)
ioperm(0x0, 0x2, 0x7e)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=<r6=>0x0)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r5, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x4, 0x29dc5, 0x0, 0x0, 0xd})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r10 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x2, 0x0)
ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000100)={'pcl818\x00', [0x300, 0x5, 0x3]})
setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f00000000c0)={0x70004, 0xfffffffe}, 0x8)
io_uring_enter(0xffffffffffffffff, 0x7637, 0x1d7a, 0x140, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=<r11=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_lifetime={0x4, 0x3, 0x1, 0x401, 0x1, 0x4}]}, 0x98}, 0x1, 0x7}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80000001, 0x9769}}]}]}]}, 0x50}}, 0x80)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r11, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
shutdown(r9, 0x0)
ioctl$KDGETKEYCODE(r8, 0x4b4c, 0x0)

4m19.72175515s ago: executing program 2 (id=4406):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xffd4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x13, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20)
syz_open_dev$hidraw(0x0, 0x0, 0x418000)
r1 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000180))
r2 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d130f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0x0, 0x380000}, 0x10}, 0x94)

4m19.476986535s ago: executing program 3 (id=4407):
r0 = syz_io_uring_setup(0x42, &(0x7f00000001c0)={0x0, 0x5961, 0x1000, 0x1, 0x4e}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x4, 0x2})
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SETXATTR={0x2a, 0x40, 0x0, 0x0, 0x0, &(0x7f000000c640)='./file0\x00', 0xff86, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0)

4m19.457374463s ago: executing program 5 (id=4408):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x64, r5, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}, 0x1, 0x620b}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)=ANY=[@ANYBLOB="04d54037112ba3ab18d7c757ad8915808d99b9ec44e2375d3b71f733f17d27270748a0f30a9e8d01822d77afab39f13ad1b5eebc93d6", @ANYRES16=r2, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b0002000000060001000b000000"], 0x34}}, 0x20)
r6 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
pwritev2(r6, &(0x7f0000000940)=[{&(0x7f0000000080)="091b88a68ad353c505da7fc3730ded7719f206afa9f944e5ab8960559f31bab6e05202a91e6145c1bb67b602463786694cb7e1238db972f68696642373aff4ae51c8a5a1cf46cc0d61f7fb19d5c29dc5151e226ff2f7604826803fba5d8dfefed555f3", 0x63}, {&(0x7f0000000500)="a5e00528efb7ec267c8b6385f98f4b549882675912b139ec3ed68789bf56f2f188331e1b59732aaa9f631ae15ae1da8a669635eb6c1ca71aa88075c2f606a024aef0e1b114b82f17cb086584a65a3a3721b913f1d2afb4c3dcc567ecc5897d7facec420711aef9e05ffb404a6b9d1c406dfecfac3b040a142cffb86186175c81bf89693da6a0b07002bad09b64986cc44155fc42042f0bb23a9eb040a39094b6730db4201c2befc2a6e624a93f6f2fd82202d613cfb5184079af03eb0f406aa4bf13067a80c043a82e380e75fce836a560152c52f6c840fb1d853da270110aa59a", 0xe1}, {&(0x7f0000000600)="38638537ee4f801f86ac9bc337405fc4689c8c01b1a76b052e52e6b3a8737cd1abe9089de00d3e4eddfe3fa58a9091374a618ff49b6b8ec7299739a8e00ff45190e3e0c40ee03f644d0b666e3f109962cfb3c041db2c8791e4e71c6068f074361961f1", 0x63}, {&(0x7f0000000680)="fbe5580b514a7fa743c1bd2a461b0a3ff9b2a7b11c10071b4985d49db2bf9eafcf61bc40f406d0325df2bae133233f4adc453bef13bd7754bc9f8235879e01b8087a24af858344261078f3609dcb664d42c8b9c8e5cf5e8c43f8c31f3aac69f657152937159b766ddb8a3c7c1076926c84c49af3e71e66127da30aefaeeb8d6fd1d78bbce63ba2f1beac41319d693e9592dd9c7d1fa3c5a32faf42d6c5abd1eb94bf5527c89bf500790cd38350d59bf86b09c61080ef883d1ade88dca97a78cb9a71b4d84c2b9954fddd264b1ac253c06040f7fb72846745f8473a9099155de7236feab650ab9f67a558740492", 0xed}, {&(0x7f0000000780)="a8e5061d51337ca007947ba5765e07f14baa01d7de7da88f71b3f177efef5fab42ee7521ecf72a84d03279a951c2a66dc5f242f206b4936f755c360d89f19526398eb8ae317d39ef4db665e58bd3875a2c3627157a7a53ad4029bb2a50301f", 0x5f}, {&(0x7f0000000800)="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", 0xfe}, {&(0x7f0000000900)="4475e36bc8e3598bac8b261d1a5cd40ad10f53dcb6e7954f773f82a8cc", 0x1d}], 0x7, 0xe7, 0x4, 0x5)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r8, &(0x7f0000000040), 0xe09)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001a00)={'syztnl2\x00', &(0x7f0000001980)={'ip6tnl0\x00', <r9=>0x0, 0x4, 0x5, 0x7f, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x34}, @private1, 0x1, 0xa3cd93d92f05621, 0x0, 0x6}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001bc0)={r8, 0x20, &(0x7f0000001b80)={&(0x7f0000001ac0)=""/13, 0xd, <r10=>0x0, &(0x7f0000001b00)=""/114, 0x72}}, 0x10)
r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/kvm/exits\x00', 0x0, 0x0)
read(r11, &(0x7f0000000200)=""/256, 0x100)
r12 = creat(&(0x7f0000001c00)='./file0\x00', 0x4)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_clone3(&(0x7f0000001fc0)={0x434000000, &(0x7f0000001d80), &(0x7f0000001dc0), &(0x7f0000001e00)=<r15=>0x0, {0x33}, &(0x7f0000001e40)=""/203, 0xcb, &(0x7f0000001f40)=""/9, &(0x7f0000001f80)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$nl_generic(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002040)={0x1028, 0x27, 0x200, 0x70bd25, 0x25dfdbfc, {0x3}, [@generic="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", @typed={0xc, 0x32, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x156, 0x0, 0x0, @pid=r15}]}, 0x1028}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000088)
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x18, 0x14, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8f400000}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x3, 0x1000, &(0x7f0000000980)=""/4096, 0x41100, 0x24, '\x00', r9, @fallback=0x27, r8, 0x8, &(0x7f0000001a40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001a80)={0x3, 0xe, 0x4, 0x3}, 0x10, r10, r8, 0x3, &(0x7f0000001c40)=[r11, r8, r12, r8, r8], &(0x7f0000001c80)=[{0x4, 0x2, 0x2, 0x7}, {0x1, 0x2, 0x4, 0xb}, {0x3, 0x2, 0xb, 0x2}], 0x10, 0x1}, 0x94)
r16 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
ioctl$BLKTRACESETUP(r11, 0xc0401273, &(0x7f0000003080)={'\x00', 0x80, 0xfffffffa, 0x0, 0x6, 0x483, r14})
fstat(r16, &(0x7f0000000080))
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d96000100000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

4m19.183973706s ago: executing program 3 (id=4409):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x7000000)

4m13.140533245s ago: executing program 3 (id=4410):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2a3, @remote, 0xfffffffc}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=0x0, @ANYBLOB="5bbf01000064676500000c00028005001900000000000000000000000000000000c4ca9ae180f1f478783c5a77647805000000"], 0x3c}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0193aa3551c59a33cb739a9b9421140024ed20ee58fbab45f75438cf670efee1ec83b281f44e7044da087ceee2f665653d4bb05295f5a52f32b2b066f88490f1aab40bddccf68684a8623c275d26dd3d2e7cfb163b34b7fb674ee74f30c2a2130000000000ff7f5d5c", @ANYRES16=r3, @ANYBLOB="0100000000000000000030000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x814)
mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0)
ftruncate(r5, 0x200002)
r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xf)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r11 = socket$packet(0x11, 0x3, 0x300)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000040)=r12, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@multicast, @local, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x2b, 0x1c, 0xe6, 0x0, 0x40, 0x2, 0x0, @private=0xa010102, @empty}, {0x0, 0xff, 0x0, @multicast2}}}}}, 0x0)
ioctl$TCFLSH(r9, 0x400455c8, 0x4)
ioctl$TCFLSH(r9, 0x800455c9, 0x4000000)
connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r7, r6, 0x0, 0x80001d00c0d0)

4m13.111329971s ago: executing program 0 (id=4411):
r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x5, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x10000005, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x3, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0x7, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x0, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="09030400709c06034a04"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x44, &(0x7f0000001e00)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = openat$dsp(0xffffff9c, &(0x7f0000000540), 0x80, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000580))
write$char_usb(r2, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/llc/core\x00')
read$snapshot(r4, &(0x7f0000000000)=""/176, 0xb0)
ioctl$SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f00000005c0))

4m13.110922955s ago: executing program 5 (id=4412):
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x240}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffcffff03400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x41)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f0000905"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='reno', 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0], 0x140}}, 0x4000800)
syz_usb_control_io$cdc_ecm(r4, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, &(0x7f0000000000)=""/104, 0x68)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, r8, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "29f9"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000200))

4m12.973088117s ago: executing program 3 (id=4413):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{'udp\x00'}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000500)={0xfffffffe, 0xffffffffffffffff, 0x1})
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000100)=0x4, 0x8)
write(r0, &(0x7f0000000b00)='0x', 0x2)

4m12.863148012s ago: executing program 2 (id=4414):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1000, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045668, &(0x7f00000002c0)=0x1)
timer_create(0x0, 0x0, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)

4m12.81290595s ago: executing program 3 (id=4415):
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

4m12.502288759s ago: executing program 3 (id=4416):
r0 = syz_io_uring_setup(0x4877, &(0x7f0000000000)={0x0, 0xbd5e, 0x400, 0x2, 0x3a7}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "3e90445a31b1d533c65571fad489b9fc"}) (async, rerun: 64)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)={0xa, 0x80000, <r1=>r0}) (rerun: 64)
read$char_usb(r1, &(0x7f00000001c0)=""/185, 0xb9) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0xe, 0x2, 0x4, 0x0, 0xc}) (async, rerun: 32)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000580)={&(0x7f0000001000)={[{&(0x7f0000000300)="d20224f579ec02ce66f4c36de1f39b7ac81007d1d2960433a49ce13cf53c4da2107d81906bc829df2900de054210c534bd9bc53ea1379fa3c1ff69b2ceffbc10924f31194d787ab89225f4ddf317091ef4d6b5e5267405fccd805d7e977af531de185a4c52d24eefe7fab48e6c5be050d23027526aa74758ae0295759d16420218f53f6cdd7d6c3d7201ef533dbb28e6dc15a0f31d70ab4fb48ce6742d29131f16c6c5566ecdf4c4614645e2bec8087c752608eab5416c6066f89dce732a4a1f96e602a88a19b456c7422886251bd007325166b23f33e661811f43b7b7e9489834f201f3c64878c2d518451d19", 0xed}, {&(0x7f0000000400)="eaa5f4272e82b91fee520c30ceb81aad3f47fefef0351f5e98ea88ab2b79a64af758f6c78e26a1e3a0dfe5ad4a42ed9dc46407694f1e49", 0x37, 0x3}, {&(0x7f0000000440)="ef5de53522fbef6982a416da8cba61db7c745decd4ec445afa9867d32e6a5f62354b81b1127284f437790c741b8feb392be1da39bab6d2624d8753fb7e2e540dcc7875d01aca2c3a913bd2767d896008554e697c357a470ce51a44678bc4ee47ad3b256a07c487ded8a0e9b7f79d6d31b7780026ce631a0a84206aab47d9e4c5e3c3fd61212f02e5edf98de18d2a21d6c14f3ff8a0138fe0aedc3f0f06ac530a085267d332c8cc4c1d24f6dbaadbfffdddb082a5f7f57a8cf266a3d6268c", 0xbe, 0x1}, {&(0x7f0000000500)="58cef1", 0x3, 0x2}, {&(0x7f0000000540), 0x0, 0x2}]}, 0x5, 0x1, 0x3}, 0x1) (async, rerun: 32)
ioctl$KVM_TDX_FINALIZE_VM(r1, 0xc004aeba, &(0x7f00000005c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r2=>r1, {<r3=>0xee01, 0xee00}}, './file0\x00'}) (async)
read$FUSE(r1, &(0x7f0000002000)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x2, &(0x7f0000004040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}], [{@fowner_gt={'fowner>', r3}}, {@flag='rw'}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_type={'subj_type', 0x3d, '\x00'}}]}}) (async)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000004100)) (async)
r5 = accept4(r1, &(0x7f0000004180)=@pppol2tp={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000004200)=0x80, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000004140), r6) (async)
setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000004240)={{0x1d, @multicast2, 0x4e21, 0x3, 'lblc\x00', 0x20, 0x89, 0x2c}, {@broadcast, 0x4e21, 0x2000, 0x200, 0x5, 0x8}}, 0x44) (async, rerun: 64)
getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f00000042c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000004300)=0x2c) (rerun: 64)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000004400)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8080) (async, rerun: 64)
readv(r6, &(0x7f00000044c0)=[{&(0x7f0000004440)=""/104, 0x68}], 0x1) (async, rerun: 64)
r7 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000004540)={{0x3, 0x6, 0xf2, 0x7, 'syz0\x00', 0xf}, 0x5, 0x200, 0x4e5e0fc9, r7, 0x4, 0x5, 'syz0\x00', &(0x7f0000004500)=['rfdno', 'rw', ':[&/[}!\fK{^\x00', '/\xdf\'$-*$\x00'], 0x1b}) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000004740)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004700)={&(0x7f00000046c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x90)
mmap$IORING_MAP_OFF_ZCRX_REGION(0x0, 0x2, 0x200000c, 0x84851, r0, 0x3140d2dc) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000004780), r1) (async)
setsockopt$MRT_PIM(r5, 0x0, 0xcf, &(0x7f00000047c0), 0x4) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000004800)=<r8=>0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000004840)={{0x1, 0x1, 0x18, <r9=>r0, {r8}}, './file0\x00'})
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000004880)={0x6}) (async)
socket$key(0xf, 0x3, 0x2)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, &(0x7f00000048c0)={{0x3, 0x5}, 'port0\x00', 0x22, 0x40000, 0x7, 0x6, 0x2, 0x3, 0xb, 0x0, 0x2, 0xd}) (async, rerun: 32)
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r9, 0xc0106440, &(0x7f0000004a00)={0x0, 0x7f, &(0x7f0000004980)}) (rerun: 32)

3m36.690626488s ago: executing program 42 (id=4412):
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x240}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffcffff03400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x41)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f0000905"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='reno', 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0], 0x140}}, 0x4000800)
syz_usb_control_io$cdc_ecm(r4, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, &(0x7f0000000000)=""/104, 0x68)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, r8, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "29f9"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000200))

3m36.393055606s ago: executing program 43 (id=4411):
r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x5, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x10000005, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x3, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0x7, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x0, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="09030400709c06034a04"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x44, &(0x7f0000001e00)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = openat$dsp(0xffffff9c, &(0x7f0000000540), 0x80, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000580))
write$char_usb(r2, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/llc/core\x00')
read$snapshot(r4, &(0x7f0000000000)=""/176, 0xb0)
ioctl$SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f00000005c0))

3m36.22905913s ago: executing program 44 (id=4416):
r0 = syz_io_uring_setup(0x4877, &(0x7f0000000000)={0x0, 0xbd5e, 0x400, 0x2, 0x3a7}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "3e90445a31b1d533c65571fad489b9fc"}) (async, rerun: 64)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)={0xa, 0x80000, <r1=>r0}) (rerun: 64)
read$char_usb(r1, &(0x7f00000001c0)=""/185, 0xb9) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0xe, 0x2, 0x4, 0x0, 0xc}) (async, rerun: 32)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000580)={&(0x7f0000001000)={[{&(0x7f0000000300)="d20224f579ec02ce66f4c36de1f39b7ac81007d1d2960433a49ce13cf53c4da2107d81906bc829df2900de054210c534bd9bc53ea1379fa3c1ff69b2ceffbc10924f31194d787ab89225f4ddf317091ef4d6b5e5267405fccd805d7e977af531de185a4c52d24eefe7fab48e6c5be050d23027526aa74758ae0295759d16420218f53f6cdd7d6c3d7201ef533dbb28e6dc15a0f31d70ab4fb48ce6742d29131f16c6c5566ecdf4c4614645e2bec8087c752608eab5416c6066f89dce732a4a1f96e602a88a19b456c7422886251bd007325166b23f33e661811f43b7b7e9489834f201f3c64878c2d518451d19", 0xed}, {&(0x7f0000000400)="eaa5f4272e82b91fee520c30ceb81aad3f47fefef0351f5e98ea88ab2b79a64af758f6c78e26a1e3a0dfe5ad4a42ed9dc46407694f1e49", 0x37, 0x3}, {&(0x7f0000000440)="ef5de53522fbef6982a416da8cba61db7c745decd4ec445afa9867d32e6a5f62354b81b1127284f437790c741b8feb392be1da39bab6d2624d8753fb7e2e540dcc7875d01aca2c3a913bd2767d896008554e697c357a470ce51a44678bc4ee47ad3b256a07c487ded8a0e9b7f79d6d31b7780026ce631a0a84206aab47d9e4c5e3c3fd61212f02e5edf98de18d2a21d6c14f3ff8a0138fe0aedc3f0f06ac530a085267d332c8cc4c1d24f6dbaadbfffdddb082a5f7f57a8cf266a3d6268c", 0xbe, 0x1}, {&(0x7f0000000500)="58cef1", 0x3, 0x2}, {&(0x7f0000000540), 0x0, 0x2}]}, 0x5, 0x1, 0x3}, 0x1) (async, rerun: 32)
ioctl$KVM_TDX_FINALIZE_VM(r1, 0xc004aeba, &(0x7f00000005c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r2=>r1, {<r3=>0xee01, 0xee00}}, './file0\x00'}) (async)
read$FUSE(r1, &(0x7f0000002000)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x2, &(0x7f0000004040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}], [{@fowner_gt={'fowner>', r3}}, {@flag='rw'}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_type={'subj_type', 0x3d, '\x00'}}]}}) (async)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000004100)) (async)
r5 = accept4(r1, &(0x7f0000004180)=@pppol2tp={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000004200)=0x80, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000004140), r6) (async)
setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000004240)={{0x1d, @multicast2, 0x4e21, 0x3, 'lblc\x00', 0x20, 0x89, 0x2c}, {@broadcast, 0x4e21, 0x2000, 0x200, 0x5, 0x8}}, 0x44) (async, rerun: 64)
getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f00000042c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000004300)=0x2c) (rerun: 64)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000004400)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8080) (async, rerun: 64)
readv(r6, &(0x7f00000044c0)=[{&(0x7f0000004440)=""/104, 0x68}], 0x1) (async, rerun: 64)
r7 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000004540)={{0x3, 0x6, 0xf2, 0x7, 'syz0\x00', 0xf}, 0x5, 0x200, 0x4e5e0fc9, r7, 0x4, 0x5, 'syz0\x00', &(0x7f0000004500)=['rfdno', 'rw', ':[&/[}!\fK{^\x00', '/\xdf\'$-*$\x00'], 0x1b}) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000004740)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004700)={&(0x7f00000046c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x90)
mmap$IORING_MAP_OFF_ZCRX_REGION(0x0, 0x2, 0x200000c, 0x84851, r0, 0x3140d2dc) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000004780), r1) (async)
setsockopt$MRT_PIM(r5, 0x0, 0xcf, &(0x7f00000047c0), 0x4) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000004800)=<r8=>0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000004840)={{0x1, 0x1, 0x18, <r9=>r0, {r8}}, './file0\x00'})
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000004880)={0x6}) (async)
socket$key(0xf, 0x3, 0x2)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, &(0x7f00000048c0)={{0x3, 0x5}, 'port0\x00', 0x22, 0x40000, 0x7, 0x6, 0x2, 0x3, 0xb, 0x0, 0x2, 0xd}) (async, rerun: 32)
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r9, 0xc0106440, &(0x7f0000004a00)={0x0, 0x7f, &(0x7f0000004980)}) (rerun: 32)

3m35.911950983s ago: executing program 45 (id=4414):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1000, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045668, &(0x7f00000002c0)=0x1)
timer_create(0x0, 0x0, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)

21.103713952s ago: executing program 6 (id=4765):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00')
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="d13fd2618f5312a6de4da42959c45ac931d641aeef0345c37696963450", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r3, &(0x7f00000000c0)='1\x00', 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r4, &(0x7f00000001c0)='1', 0x1)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x211)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r7=>0x0], &(0x7f0000000180)=[<r8=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000003c0)={0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000240)=[r7, r8], 0x2})

18.530009218s ago: executing program 6 (id=4771):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
io_setup(0x3, &(0x7f0000000140))
getpid()
r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregset(0x4205, r1, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60})
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1)

16.722315158s ago: executing program 6 (id=4774):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000500)="14000000140005b7ffccca38b9000000060860", 0x13)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$nci(r2, &(0x7f00000001c0)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x1, 0x3, 0x7, 0x3, 0x1}, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
msgget(0x1, 0x223)
msgget(0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
inotify_init()
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf2529000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'dummy0\x00'})

13.201684941s ago: executing program 6 (id=4777):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_open_dev$evdev(0x0, 0x3, 0x822b01)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20000000)
landlock_create_ruleset(&(0x7f0000000000)={0x445, 0x1, 0x3}, 0x30, 0x1)
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0xf4)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x67f, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1001, 0x400, 0x4002004c4, 0x8, 0x0, 0x2000000097, 0x10, 0x0, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x402})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0400011104"], 0x7)
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r10, 0x10e, 0x6, &(0x7f0000000080)={0x8, 0xf95, 0x3, 0x1}, 0x10)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)

12.97068701s ago: executing program 6 (id=4780):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x7, 0x1, 0x0, 0x3, 0x12, 0x0, 0x0, 0xfffffffffffffffc, 0x200007, 0x7, 0x4, 0x100000000001], 0x1000, 0x4fb40})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

11.845124183s ago: executing program 6 (id=4782):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0xf00, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0'}, 0xb)
r3 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r2)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

6.431794574s ago: executing program 8 (id=4790):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
chdir(0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4c43, 0x0)
sendto$inet(r0, &(0x7f0000000640)="a5825aaff41e0e0a218e58cc046e14c04696df585c99b4193b8f42325958d64f3df3cd343d7367d052a8927ba2e0f6879203fa6ad28d8fb7bbb05966f5b17f6325fb468dcb574aa7c3b618e374be9a576520168a3bd276822b815137381f3813931e72627e1c9f7d061f47910000e596d2c1d0c51dc6ad1e433a8404a452c6245a6861a84370aace57a7224089c12c296f7e5ac09f468b4a5da5412afc753cec", 0xa0, 0x4010, &(0x7f0000000700)={0x2, 0x4e23, @private=0xa010101}, 0x10)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000200)="27031c00160014000200", 0xa}, {&(0x7f0000000300)="7d3ed2ea1f2f210c0784b2ce65c9e34b1100301a03df46a4853ed1b3f1ccf39fd05125be49192357d9a926b74955e3d836f3b20c", 0x34}], 0x2}, 0x2400c8cc)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r0, 0x83000000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0)
syz_usb_connect$uac3(0x6, 0xd2, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x7f, 0x30, 0x7, {0x8, 0xb, 0x1, 0x2, 0x1, 0x22, 0x30, 0xf}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2f, 0x9}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x100, 0x2, 0x1, 0x93, 0x9, 0x3, 0x0, 0x9}, @processing_unit={0x11, 0x24, 0x9, 0x6, 0x6, [0x2, 0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0xfa, "448a1de8aca2e366"}, @as_header={0x17, 0x24, 0x1, 0x2, 0xc85, 0x5, 0x4, 0x1, 0x9, 0x6, 0xff}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x10, 0x30, 0x2, {0xa, 0x25, 0x25, 0x1000, 0xff, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x10, 0x8, 0x2, {0xa, 0x25, 0x25, 0x3, 0x7, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x8, 0x40, 0xd2, 0xff, 0xc9}, 0x5a, &(0x7f0000000140)={0x5, 0xf, 0x5a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x6, 0xfff}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x9, 0x401}, @generic={0x44, 0x10, 0x1d, "7d92b2e26a7ff704d19304941d5eb3219aab4fafe310604e95722c8be7e36ba72f658d89dc1a024f2bc9760d12089fefa42a2cc606596f696672124b5d30a1678a"}, @ptm_cap={0x3}]}, 0x5, [{0xbb, &(0x7f00000001c0)=@string={0xbb, 0x3, "f8e1c06cb355795b78eed51a545c9b877d61f2483f1128822dcadab0bba9d8c04bca022beaa67a5fd5f22ebeaf463f5d1f2012e2ca6630a8e5ee48515e789307c9cbe47e06079277fdbf3b44af833c4af6092c1e1b842bcb2e471308e8b1f9becf86194f2519c97be5e9c6ce08707c17b933e0b7ff91b8f87fcd9412c734b70a834549451326679896a600fb5c9b3b60efd3d1f15a82bc090675990727de672e9db0497324ba4474ac701af8ce23b0427503464baa1cf9991a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x62, &(0x7f0000000340)=@string={0x62, 0x3, "b708871da5b4f3af6451fd7315e4299d7f427ef6654b93cee35aa8441006695bc60e51c6d8ba8b033c9dd6266809e69a142136b36142cd4d59945e4862b1e24e4dc006646edb58a742c5c421c9b151359da286abcedf4c6d0c4ab287539f10a9"}}, {0xa7, &(0x7f0000000440)=@string={0xa7, 0x3, "977692a732fe2063a62a879030690b07f589306e041ab8a1911f3db7f7e21272aa4aad2284623d8b8b66de6ef35aa1286c7d3af989f50f583338cd5536b81f3340295f243aae88265ac7bed6156443e5c83aa5fa4f36b70e4adf0c76c9c759b6b3e1515424c221fcf2529175a8312affe6a7ca2e6d8e3a877bd39ad48fa155ef3b72a5175ba151e7e1015cfc5bfa087fbd6acd687ebf3e6cede26d97250789101326df0e5b"}}]})
syz_usb_control_io$cdc_ecm(r3, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

3.250577478s ago: executing program 8 (id=4804):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x820000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49, 0x1}]}]}, 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000001100)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.642166866s ago: executing program 7 (id=4807):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x12, @empty, 0x2}, {0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)

2.642014357s ago: executing program 7 (id=4808):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000040)=0x9, 0x4)

2.585577128s ago: executing program 7 (id=4809):
unshare(0x22020600)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000500), 0x4)

2.572881791s ago: executing program 7 (id=4810):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000340)=0xc291)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

2.532883538s ago: executing program 7 (id=4811):
unshare(0x40400)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6)

2.477022627s ago: executing program 7 (id=4812):
r0 = syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r1, &(0x7f0000000080)=""/189, 0xbd)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x39000, 0x0)
r5 = memfd_create(&(0x7f0000000180)='<Z2>J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x0)
splice(r3, 0x0, r5, 0x0, 0x400c5, 0x5)
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

2.025513832s ago: executing program 8 (id=4814):
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x21c9b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0)

1.739606614s ago: executing program 4 (id=4815):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x300, 0xfffe, 0x201}})

1.539173638s ago: executing program 4 (id=4816):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="68000000100037040000800000000f0000000000", @ANYRES32=r1, @ANYBLOB="c3040500000000004800128008000100677470003c000280050005"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)

1.2817458s ago: executing program 4 (id=4817):
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)

1.098409644s ago: executing program 8 (id=4818):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)

899.110253ms ago: executing program 8 (id=4819):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f338ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08)

741.848628ms ago: executing program 8 (id=4820):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0xb4, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x8, 0x0, 0x7, 0x3, 0x4, 0x8, 0x1000, 0x10001, [{0x1ff, 0x8, 0x7, 0x1000}, {0x6, 0x9, 0x2, 0x1}, {0x3, 0xfffffbff, 0xa, 0x3ff}, {0x5524, 0x4, 0x6, 0x101}, {0x0, 0xf, 0x5, 0x3}, {0x8, 0x2, 0x8}, {0x4, 0xfb, 0x1000, 0xd3ba}]}}]}}]}, 0xb4}}, 0x0)
write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20)

181.293197ms ago: executing program 4 (id=4821):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x15}, 0x400c8c4)

88.016003ms ago: executing program 4 (id=4822):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newsa={0x180, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x5959, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x567ffffffc, 0x0, 0x0, 0x10001}, {0x401, 0x9}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x7a}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_crypt={0x48, 0x2, {{'xchacha20-neon\x00'}}}]}, 0x180}}, 0x24000058)

0s ago: executing program 4 (id=4823):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091)
write$cgroup_devices(r2, 0x0, 0xfffffeff)
sendmsg$kcm(r1, 0x0, 0x2400c094)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x34068096)

kernel console output (not intermixed with test programs):

 subj=unconfined pid=21132 comm="syz.7.4499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[  961.143065][   T42] audit: type=1326 audit(1785729564.084:14618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.7.4499" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f28fec code=0x7ffc0000
[  961.159707][   T42] audit: type=1326 audit(1785729564.084:14619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.7.4499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[  961.209615][T21145] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4500'.
[  961.218572][   T42] audit: type=1326 audit(1785729564.094:14620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.7.4499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[  961.232912][   T42] audit: type=1326 audit(1785729564.104:14621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.7.4499" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f28fec code=0x7ffc0000
[  961.244172][   T42] audit: type=1326 audit(1785729564.104:14622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.7.4499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[  961.257066][   T42] audit: type=1326 audit(1785729564.104:14623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.7.4499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[  961.267835][   T42] audit: type=1326 audit(1785729564.114:14624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.7.4499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[  961.287757][   T42] audit: type=1326 audit(1785729564.114:14625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.7.4499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[  961.302770][T21146] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  962.079117][T21145] ehci-pci 0000:00:1d.7: remove, state 1
[  962.336511][T21145] usb usb1: USB disconnect, device number 1
[  962.393145][T21145] usb 1-1: USB disconnect, device number 2
[  962.887001][T21152] netlink: 'syz.4.4498': attribute type 11 has an invalid length.
[  964.217128][T21155] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  964.718675][T21145] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  964.786689][T21148] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI
[  965.011763][T21172] 9pnet_virtio: no channels available for device syz
[  965.026371][ T9902] usb 2-1: new full-speed USB device number 2 using uhci_hcd
[  965.290079][T21174] netlink: 'syz.8.4505': attribute type 11 has an invalid length.
[  965.465360][ T8973] usb 11-1: new high-speed USB device number 35 using dummy_hcd
[  965.633643][ T8973] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  965.645802][ T8973] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  965.664448][ T8973] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  965.694782][ T8973] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  965.726787][ T8973] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  965.744584][ T8973] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.760020][ T8973] usb 11-1: Product: syz
[  965.774331][ T8973] usb 11-1: Manufacturer: syz
[  965.797716][ T8973] usb 11-1: SerialNumber: syz
[  965.834388][ T8973] usb 11-1: config 0 descriptor??
[  965.973937][ T9902] usb 2-1: not running at top speed; connect to a high speed hub
[  966.002277][ T9902] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  966.006112][ T9902] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  966.009164][ T9902] usb 2-1: Product: QEMU USB Tablet
[  966.011022][ T9902] usb 2-1: Manufacturer: QEMU
[  966.012701][ T9902] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  966.103566][ T9902] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0013/input/input77
[  966.145677][ T9902] hid-generic 0003:0627:0001.0013: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  966.262952][ T8973] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  966.496336][ T8973] usb 11-1: USB disconnect, device number 35
[  967.518489][T21180] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  969.825970][T21197] netlink: 'syz.4.4509': attribute type 11 has an invalid length.
[  969.849269][T20311] usb 11-1: new high-speed USB device number 36 using dummy_hcd
[  970.069990][T20311] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  970.076101][T20311] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  970.080014][T20311] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  970.084684][T20311] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  970.098894][T20311] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  970.102354][T20311] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  970.107433][T20311] usb 11-1: Manufacturer: syz
[  970.167517][T20311] usb 11-1: config 0 descriptor??
[  971.442719][T21208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  971.456992][T21208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  971.712852][T20311] usbhid 11-1:0.0: can't add hid device: -71
[  971.715678][T20311] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[  971.758045][T21212] netlink: 'syz.7.4512': attribute type 11 has an invalid length.
[  971.770267][T20311] usb 11-1: USB disconnect, device number 36
[  972.532626][T21212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  972.734289][T20634] Bluetooth: hci0: link tx timeout
[  972.736857][T20634] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  972.827701][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4513'.
[  974.875455][T20634] Bluetooth: hci0: command 0x0406 tx timeout
[  975.018003][T21239] fuse: Bad value for 'user_id'
[  975.020262][T21239] fuse: Bad value for 'user_id'
[  975.136608][ T8973] usb 12-1: new high-speed USB device number 15 using dummy_hcd
[  977.519337][T21246] netlink: 'syz.6.4520': attribute type 11 has an invalid length.
[  979.003384][T21256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4523'.
[  979.028355][T21256] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4523'.
[  979.108700][ T8973] usb 12-1: unable to read config index 0 descriptor/start: -71
[  979.223764][ T8973] usb 12-1: can't read configurations, error -71
[  979.291045][T21263] netlink: 'syz.6.4524': attribute type 11 has an invalid length.
[  980.832649][T21274] netlink: 'syz.7.4526': attribute type 10 has an invalid length.
[  981.315089][T21274] team0: Port device dummy0 added
[  982.386421][T20723] usb 11-1: new high-speed USB device number 37 using dummy_hcd
[  982.567245][T21280] netlink: 'syz.8.4530': attribute type 11 has an invalid length.
[  982.706179][T20723] usb 11-1: Using ep0 maxpacket: 8
[  982.747503][T20723] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  982.752084][T21286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.752582][T20723] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2
[  982.762675][T20723] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  982.770929][T20723] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  982.774928][T20723] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  982.778239][T20723] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.914068][T20723] hub 11-1:1.0: bad descriptor, ignoring hub
[  982.924780][T20723] hub 11-1:1.0: probe with driver hub failed with error -5
[  982.931365][T20723] cdc_wdm 11-1:1.0: skipping garbage
[  982.950670][T20723] cdc_wdm 11-1:1.0: skipping garbage
[  982.952703][T20723] cdc_wdm 11-1:1.0: skipping garbage
[  983.289269][T20723] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device
[  983.308923][T20723] cdc_wdm 11-1:1.0: Unknown control protocol
[  983.315743][T20311] usb 12-1: new high-speed USB device number 17 using dummy_hcd
[  983.377724][T21291] netlink: 'syz.4.4531': attribute type 11 has an invalid length.
[  984.187084][T20311] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  984.191559][T20311] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  984.196868][T20311] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  984.201287][T20311] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  984.218148][T20311] usb 12-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  984.221728][T20311] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.224935][T20311] usb 12-1: Product: syz
[  984.344194][T20311] usb 12-1: Manufacturer: syz
[  984.364288][T20311] usb 12-1: SerialNumber: syz
[  984.573302][ T8988] usb 13-1: new high-speed USB device number 26 using dummy_hcd
[  984.587088][T20311] usb 12-1: config 0 descriptor??
[  984.943348][ T8988] usb 13-1: Using ep0 maxpacket: 8
[  985.026194][ T8988] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  985.049974][ T8988] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2
[  985.113912][ T8988] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  985.136669][ T8988] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  985.153213][ T8988] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  985.161976][ T8988] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.231309][ T8988] hub 13-1:1.0: bad descriptor, ignoring hub
[  985.234014][ T8988] hub 13-1:1.0: probe with driver hub failed with error -5
[  985.238615][ T8988] cdc_wdm 13-1:1.0: skipping garbage
[  985.240933][ T8988] cdc_wdm 13-1:1.0: skipping garbage
[  985.243683][ T8988] cdc_wdm 13-1:1.0: skipping garbage
[  985.247619][ T8988] cdc_wdm 13-1:1.0: cdc-wdm1: USB WDM device
[  985.265447][ T8988] cdc_wdm 13-1:1.0: Unknown control protocol
[  985.644467][ T8988] usb 13-1: USB disconnect, device number 26
[  985.696287][T20723] usb 11-1: USB disconnect, device number 37
[  986.204435][T20634] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[  987.059452][T21316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  987.095326][T20320] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  987.275666][T20320] usb 9-1: Using ep0 maxpacket: 8
[  987.310267][T20320] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  987.335207][T20320] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  987.353999][T20320] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  987.409671][T20320] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  987.463348][T20320] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  987.529532][T20320] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.775457][T20320] hub 9-1:1.0: bad descriptor, ignoring hub
[  987.792762][T20320] hub 9-1:1.0: probe with driver hub failed with error -5
[  987.821291][T20320] cdc_wdm 9-1:1.0: skipping garbage
[  987.833299][T20320] cdc_wdm 9-1:1.0: skipping garbage
[  987.848301][T20320] cdc_wdm 9-1:1.0: skipping garbage
[  989.355018][T21295] cdc_wdm 11-1:1.0: Error autopm - -16
[  989.638265][T20311] adutux 12-1:0.0: ADU208  now attached to /dev/usb/adutux1
[  989.725784][T20320] cdc_wdm 9-1:1.0: cdc-wdm2: USB WDM device
[  989.727616][T20320] cdc_wdm 9-1:1.0: Unknown control protocol
[  989.732057][T21313] cdc_wdm 11-1:1.0: Error autopm - -16
[  990.483151][T20311] usb 12-1: USB disconnect, device number 17
[  990.495965][T20320] usb 9-1: USB disconnect, device number 18
[  996.836100][ T9902] usb 13-1: new low-speed USB device number 27 using dummy_hcd
[  996.916147][T21356] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  996.961878][T20634] Bluetooth: hci0: unexpected subevent 0x18 length: 30 > 19
[  996.966202][T20634] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  997.135443][ T8973] libceph: connect (1)[c::]:6789 error -101
[  997.138188][ T8973] libceph: mon0 (1)[c::]:6789 connect error
[  997.420184][   T56] libceph: connect (1)[c::]:6789 error -101
[  997.420505][ T9902] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55520, setting to 8
[  997.422748][   T56] libceph: mon0 (1)[c::]:6789 connect error
[  997.443245][ T9902] usb 13-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  997.447506][ T9902] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.475265][ T8973] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  997.645186][ T8973] usb 9-1: Using ep0 maxpacket: 16
[  997.650021][ T8973] usb 9-1: unable to get BOS descriptor or descriptor too short
[  997.656189][ T8973] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  997.659679][ T8973] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  997.668795][ T8973] usb 9-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  997.675260][ T8973] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  997.684361][ T8973] usb 9-1: Product: syz
[  997.687499][ T8973] usb 9-1: Manufacturer: syz
[  997.689092][ T8973] usb 9-1: SerialNumber: syz
[  997.697861][ T9902] usb 13-1: config 0 descriptor??
[  997.710659][T21359] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  997.954124][T21367] ceph: No mds server is up or the cluster is laggy
[  997.965372][   T56] libceph: connect (1)[c::]:6789 error -101
[  997.970039][   T56] libceph: mon0 (1)[c::]:6789 connect error
[  999.276920][T21392] JFS: discard option not supported on device
[  999.288047][ T9902] usbhid 13-1:0.0: can't add hid device: -71
[  999.305263][T21392] Mount JFS Failure: -5
[  999.307627][T21392] jfs_mount failed w/return code = -5
[  999.310065][ T9902] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[  999.462801][ T9902] usb 13-1: USB disconnect, device number 27
[ 1000.472368][ T8973] usb 9-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[ 1000.511324][ T8973] usb 9-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[ 1000.649136][ T8973] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1000.698933][ T8973] usb 9-1: USB disconnect, device number 19
[ 1000.833510][T21417] netlink: 'syz.4.4560': attribute type 11 has an invalid length.
[ 1000.860619][T21348] udevd[21348]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1000.865425][T20311] usb 12-1: new high-speed USB device number 18 using dummy_hcd
[ 1001.245662][   T74] usb 11-1: new high-speed USB device number 38 using dummy_hcd
[ 1001.418688][   T74] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[ 1001.421864][   T74] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1001.424973][   T74] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1001.432766][   T74] usb 11-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[ 1001.438935][   T74] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.485485][T21420] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1001.540397][   T74] cyberjack 11-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[ 1001.629014][   T74] usb 11-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1002.244931][T20311] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1002.513547][T21418] syzkaller0: entered promiscuous mode
[ 1002.517098][T21418] syzkaller0: entered allmulticast mode
[ 1002.636789][T20311] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1002.639914][T20311] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1002.643265][T20311] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1002.648470][T20311] usb 12-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1002.651450][T20311] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.654012][T20311] usb 12-1: Product: syz
[ 1002.655488][T20311] usb 12-1: Manufacturer: syz
[ 1002.657132][T20311] usb 12-1: SerialNumber: syz
[ 1002.660044][T20311] usb 12-1: config 0 descriptor??
[ 1002.768838][   T34] usb 11-1: USB disconnect, device number 38
[ 1002.774874][   T34] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1002.779200][   T34] cyberjack 11-1:1.0: device disconnected
[ 1002.816962][T20311] adutux 12-1:0.0: ADU208  now attached to /dev/usb/adutux0
[ 1002.833029][T20311] usb 12-1: USB disconnect, device number 18
[ 1003.111566][T21422] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1003.169135][   T42] kauditd_printk_skb: 3 callbacks suppressed
[ 1003.169148][   T42] audit: type=1326 audit(1785729606.184:14629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21431 comm="syz.7.4563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[ 1003.183070][   T42] audit: type=1326 audit(1785729606.184:14630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21431 comm="syz.7.4563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[ 1003.193034][   T42] audit: type=1326 audit(1785729606.194:14631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21431 comm="syz.7.4563" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f28fec code=0x7ffc0000
[ 1003.210308][   T42] audit: type=1326 audit(1785729606.194:14632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21431 comm="syz.7.4563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[ 1003.231987][   T42] audit: type=1326 audit(1785729606.194:14633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21431 comm="syz.7.4563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[ 1003.255700][   T42] audit: type=1326 audit(1785729606.194:14634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21431 comm="syz.7.4563" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f28fec code=0x7ffc0000
[ 1003.289824][   T42] audit: type=1326 audit(1785729606.194:14635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21431 comm="syz.7.4563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[ 1003.308320][   T42] audit: type=1326 audit(1785729606.194:14636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21431 comm="syz.7.4563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[ 1003.325876][   T42] audit: type=1326 audit(1785729606.194:14637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21431 comm="syz.7.4563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[ 1003.334836][   T42] audit: type=1326 audit(1785729606.194:14638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21431 comm="syz.7.4563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000
[ 1003.423954][T21437] netlink: 'syz.4.4565': attribute type 11 has an invalid length.
[ 1004.071960][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[ 1004.074486][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[ 1006.025356][T20311] usb 12-1: new full-speed USB device number 19 using dummy_hcd
[ 1006.219103][T20311] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1006.337139][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.902328][T20311] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1007.012610][T20311] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1007.028978][T20311] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1007.035294][T20311] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1007.046167][T20311] usb 12-1: config 0 descriptor??
[ 1007.323277][T14525] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1007.358389][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1007.495929][T20311] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[ 1008.385505][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1008.545358][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1008.763233][T21469] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1009.271845][T21477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1009.278137][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1009.294283][T21477] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4577'.
[ 1009.345441][T13114] Bluetooth: hci4: command 0x1003 tx timeout
[ 1009.346184][T20634] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1009.435310][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1009.487639][T21481] netlink: 'syz.7.4576': attribute type 11 has an invalid length.
[ 1009.644537][   T34] usb 12-1: USB disconnect, device number 19
[ 1010.122063][   T42] kauditd_printk_skb: 9 callbacks suppressed
[ 1010.122076][   T42] audit: type=1804 audit(1785729613.134:14648): pid=21477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4577" name="/newroot/46/file0/file0" dev="9p" ino=78395507 res=1 errno=0
[ 1010.307374][T21477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.311592][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.465623][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1011.416195][T21492] Cache volume key already in use (9p,syz,)
[ 1011.599023][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1011.723065][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1012.433491][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1012.647144][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1012.656738][T21499] netlink: 'syz.7.4585': attribute type 11 has an invalid length.
[ 1013.070684][T21501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1013.076121][T21501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1013.081679][T21501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1013.419874][T21501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1013.441691][T21501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1013.519622][T21501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.511489][T21518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4583'.
[ 1015.613213][   T42] audit: type=1804 audit(1785729618.624:14649): pid=21518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4583" name="/newroot/42/file0/file0" dev="9p" ino=78395507 res=1 errno=0
[ 1015.779349][T21521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1015.876647][  T118] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1016.488653][T21525] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4587'.
[ 1016.583754][T21525] 9pnet_virtio: no channels available for device syz
[ 1016.888931][T21535] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1016.982900][T14525] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1017.459764][T21538] netlink: 'syz.6.4588': attribute type 11 has an invalid length.
[ 1017.665457][T12663] Bluetooth: hci4: command 0x1003 tx timeout
[ 1017.671188][T20634] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1017.826198][ T8973] net_ratelimit: 215 callbacks suppressed
[ 1017.826213][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1017.831295][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1018.592623][T21529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1018.715319][T20311] usb 9-1: new low-speed USB device number 20 using dummy_hcd
[ 1018.725190][ T8973] usb 13-1: new high-speed USB device number 28 using dummy_hcd
[ 1018.865986][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1018.877117][ T8973] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1018.877340][T20311] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55520, setting to 8
[ 1018.881873][ T8973] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1018.886055][T20311] usb 9-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1018.889852][ T8973] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1018.893560][T20311] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1018.898276][ T8973] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1018.904920][T20311] usb 9-1: config 0 descriptor??
[ 1018.907792][ T8973] usb 13-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1018.909379][T21550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1018.911704][ T8973] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1018.917979][ T8973] usb 13-1: Product: syz
[ 1018.919773][ T8973] usb 13-1: Manufacturer: syz
[ 1018.921730][ T8973] usb 13-1: SerialNumber: syz
[ 1018.927804][ T8973] usb 13-1: config 0 descriptor??
[ 1019.025381][T13114] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1019.025458][T20634] Bluetooth: hci5: command 0x1003 tx timeout
[ 1019.143092][ T8973] adutux 13-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[ 1019.241812][T20311] usbhid 9-1:0.0: can't add hid device: -71
[ 1019.243821][T20311] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1019.254663][T20311] usb 9-1: USB disconnect, device number 20
[ 1019.312392][T13114] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[ 1019.382815][ T8973] usb 13-1: USB disconnect, device number 28
[ 1019.629069][T21557] netlink: 'syz.7.4594': attribute type 11 has an invalid length.
[ 1019.841592][T21560] 9pnet_virtio: no channels available for device syz
[ 1019.905892][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1019.928071][T21556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1020.385201][   T24] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1020.555889][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1020.559315][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1020.562327][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1020.569037][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1020.573930][   T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1020.577454][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.580150][   T24] usb 9-1: Product: syz
[ 1020.581492][   T24] usb 9-1: Manufacturer: syz
[ 1020.583414][   T24] usb 9-1: SerialNumber: syz
[ 1020.590490][   T24] usb 9-1: config 0 descriptor??
[ 1020.834063][   T24] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[ 1020.879606][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.954954][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.005832][T20801] usb 11-1: new low-speed USB device number 39 using dummy_hcd
[ 1021.057148][   T34] usb 9-1: USB disconnect, device number 21
[ 1021.179203][T21587] netlink: 'syz.8.4602': attribute type 11 has an invalid length.
[ 1021.207979][T20801] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55520, setting to 8
[ 1021.232590][T20801] usb 11-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1021.254117][T20801] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.379855][T20801] usb 11-1: config 0 descriptor??
[ 1021.405105][T21577] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1022.154436][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1022.159254][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1023.185652][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1023.289146][T20801] usbhid 11-1:0.0: can't add hid device: -71
[ 1023.292418][T20801] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[ 1023.307887][T20801] usb 11-1: USB disconnect, device number 39
[ 1023.556601][T21599] netlink: 'syz.7.4604': attribute type 11 has an invalid length.
[ 1023.626007][ T5865] usb 13-1: new high-speed USB device number 29 using dummy_hcd
[ 1023.866860][ T5865] usb 13-1: Using ep0 maxpacket: 8
[ 1023.891398][ T5865] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1023.907292][ T5865] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1023.922826][ T5865] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.935572][T20801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1023.943097][T21602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.965854][ T5865] usb 13-1: config 0 descriptor??
[ 1024.031501][T21614] FAULT_INJECTION: forcing a failure.
[ 1024.031501][T21614] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1024.038843][T21614] CPU: 3 UID: 0 PID: 21614 Comm: syz.4.4608 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1024.038872][T21614] Tainted: [L]=SOFTLOCKUP
[ 1024.038878][T21614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1024.038889][T21614] Call Trace:
[ 1024.038897][T21614]  <TASK>
[ 1024.038903][T21614]  dump_stack_lvl+0x100/0x190
[ 1024.038935][T21614]  should_fail_ex.cold+0x5/0xa
[ 1024.038954][T21614]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1024.038981][T21614]  should_fail_alloc_page+0xeb/0x140
[ 1024.039004][T21614]  prepare_alloc_pages+0x1f0/0x5f0
[ 1024.039029][T21614]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1024.039051][T21614]  ? rcu_is_watching+0x12/0xc0
[ 1024.039073][T21614]  ? trace_mm_page_alloc+0x164/0x1c0
[ 1024.039097][T21614]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[ 1024.039121][T21614]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1024.039144][T21614]  ? stack_trace_save+0x8e/0xc0
[ 1024.039168][T21614]  ? __pfx_stack_trace_save+0x10/0x10
[ 1024.039191][T21614]  ? stack_depot_save_flags+0x27/0x9d0
[ 1024.039222][T21614]  ? is_bpf_text_address+0x94/0x1a0
[ 1024.039250][T21614]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1024.039274][T21614]  ? __kasan_slab_alloc+0x89/0x90
[ 1024.039295][T21614]  ? kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 1024.039316][T21614]  ? alloc_vmap_area+0x640/0x2bb0
[ 1024.039337][T21614]  ? __get_vm_area_node+0x1ca/0x330
[ 1024.039359][T21614]  ? __vmalloc_node_range_noprof+0x228/0x1630
[ 1024.039384][T21614]  ? __vmalloc_node_noprof+0xad/0xf0
[ 1024.039408][T21614]  ? __vmalloc_noprof+0xa3/0x120
[ 1024.039432][T21614]  ? bpf_prog_alloc_no_stats+0x58/0x640
[ 1024.039454][T21614]  ? bpf_prog_alloc+0x3b/0x200
[ 1024.039477][T21614]  ? bpf_prog_load+0x4a9/0x2fa0
[ 1024.039494][T21614]  ? __sys_bpf+0x18dc/0x4e80
[ 1024.039511][T21614]  ? __ia32_sys_bpf+0xcc/0x170
[ 1024.039529][T21614]  ? __do_fast_syscall_32+0xe7/0x970
[ 1024.039564][T21614]  ? do_fast_syscall_32+0x32/0x70
[ 1024.039605][T21614]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1024.039636][T21614]  alloc_pages_bulk_noprof+0x5de/0x13c0
[ 1024.039662][T21614]  ? policy_nodemask+0xed/0x4f0
[ 1024.039691][T21614]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[ 1024.039725][T21614]  __kasan_populate_vmalloc+0xf0/0x210
[ 1024.039753][T21614]  alloc_vmap_area+0x95d/0x2bb0
[ 1024.039785][T21614]  ? kasan_save_track+0x14/0x30
[ 1024.039806][T21614]  ? __kasan_kmalloc+0xaa/0xb0
[ 1024.039828][T21614]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1024.039853][T21614]  ? __get_vm_area_node+0x101/0x330
[ 1024.039881][T21614]  __get_vm_area_node+0x1ca/0x330
[ 1024.039911][T21614]  __vmalloc_node_range_noprof+0x228/0x1630
[ 1024.039940][T21614]  ? bpf_prog_alloc_no_stats+0x58/0x640
[ 1024.039964][T21614]  ? find_held_lock+0x2b/0x80
[ 1024.039987][T21614]  ? process_measurement+0x4c8/0x2350
[ 1024.040009][T21614]  ? process_measurement+0x4c8/0x2350
[ 1024.040033][T21614]  ? bpf_prog_alloc_no_stats+0x58/0x640
[ 1024.040064][T21614]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1024.040094][T21614]  ? tomoyo_check_open_permission+0x1db/0x3c0
[ 1024.040129][T21614]  ? bpf_prog_alloc_no_stats+0x58/0x640
[ 1024.040152][T21614]  __vmalloc_node_noprof+0xad/0xf0
[ 1024.040178][T21614]  ? bpf_prog_alloc_no_stats+0x58/0x640
[ 1024.040205][T21614]  __vmalloc_noprof+0xa3/0x120
[ 1024.040232][T21614]  ? __pfx___vmalloc_noprof+0x10/0x10
[ 1024.040260][T21614]  ? rcu_is_watching+0x12/0xc0
[ 1024.040282][T21614]  ? apparmor_capable+0x1d7/0x4d0
[ 1024.040304][T21614]  bpf_prog_alloc_no_stats+0x58/0x640
[ 1024.040328][T21614]  ? security_capable+0x80/0x260
[ 1024.040349][T21614]  bpf_prog_alloc+0x3b/0x200
[ 1024.040371][T21614]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1024.040400][T21614]  bpf_prog_load+0x4a9/0x2fa0
[ 1024.040424][T21614]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1024.040444][T21614]  ? __lock_acquire+0x49f/0x1a40
[ 1024.040494][T21614]  __sys_bpf+0x18dc/0x4e80
[ 1024.040521][T21614]  ? __pfx___sys_bpf+0x10/0x10
[ 1024.040546][T21614]  ? find_held_lock+0x2b/0x80
[ 1024.040566][T21614]  ? get_pid_task+0xfc/0x250
[ 1024.040591][T21614]  ? get_pid_task+0xfc/0x250
[ 1024.040619][T21614]  ? proc_fail_nth_write+0x9f/0x220
[ 1024.040645][T21614]  ? find_held_lock+0x2b/0x80
[ 1024.040673][T21614]  ? rcu_read_lock_any_held+0x6a/0xa0
[ 1024.040696][T21614]  ? find_held_lock+0x2b/0x80
[ 1024.040717][T21614]  ? ksys_write+0x190/0x250
[ 1024.040733][T21614]  ? ksys_write+0x190/0x250
[ 1024.040768][T21614]  ? fput+0x79/0x100
[ 1024.040791][T21614]  ? __ia32_sys_bpf+0xcc/0x170
[ 1024.040809][T21614]  __ia32_sys_bpf+0xcc/0x170
[ 1024.040829][T21614]  ? __do_fast_syscall_32+0x98/0x970
[ 1024.040880][T21614]  __do_fast_syscall_32+0xe7/0x970
[ 1024.040904][T21614]  ? lockdep_hardirqs_on+0x78/0x100
[ 1024.040929][T21614]  do_fast_syscall_32+0x32/0x70
[ 1024.040954][T21614]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1024.040976][T21614] RIP: 0023:0xf7fe2fec
[ 1024.040998][T21614] Code: Unable to access opcode bytes at 0xf7fe2fc2.
[ 1024.041007][T21614] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[ 1024.041026][T21614] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080
[ 1024.041037][T21614] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[ 1024.041047][T21614] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1024.041058][T21614] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1024.041068][T21614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1024.041092][T21614]  </TASK>
[ 1024.041197][T21614] syz.4.4608: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[ 1024.262571][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.317489][T21616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.320368][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.335597][T21616] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4609'.
[ 1024.352409][T21614] ,cpuset=/,mems_allowed=0-1
[ 1024.354723][T21614] CPU: 3 UID: 0 PID: 21614 Comm: syz.4.4608 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1024.354750][T21614] Tainted: [L]=SOFTLOCKUP
[ 1024.354757][T21614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1024.354768][T21614] Call Trace:
[ 1024.354775][T21614]  <TASK>
[ 1024.354783][T21614]  dump_stack_lvl+0x100/0x190
[ 1024.354811][T21614]  warn_alloc.cold+0x94/0xa8
[ 1024.354832][T21614]  ? __pfx_warn_alloc+0x10/0x10
[ 1024.354851][T21614]  ? lockdep_hardirqs_on+0x78/0x100
[ 1024.354879][T21614]  ? __get_vm_area_node+0x2cd/0x330
[ 1024.354909][T21614]  ? __get_vm_area_node+0x208/0x330
[ 1024.354939][T21614]  __vmalloc_node_range_noprof+0xccd/0x1630
[ 1024.354968][T21614]  ? find_held_lock+0x2b/0x80
[ 1024.355022][T21614]  ? process_measurement+0x4c8/0x2350
[ 1024.355044][T21614]  ? process_measurement+0x4c8/0x2350
[ 1024.355069][T21614]  ? bpf_prog_alloc_no_stats+0x58/0x640
[ 1024.355116][T21614]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1024.355147][T21614]  ? tomoyo_check_open_permission+0x1db/0x3c0
[ 1024.355180][T21614]  ? bpf_prog_alloc_no_stats+0x58/0x640
[ 1024.355203][T21614]  __vmalloc_node_noprof+0xad/0xf0
[ 1024.355230][T21614]  ? bpf_prog_alloc_no_stats+0x58/0x640
[ 1024.355257][T21614]  __vmalloc_noprof+0xa3/0x120
[ 1024.355284][T21614]  ? __pfx___vmalloc_noprof+0x10/0x10
[ 1024.355312][T21614]  ? rcu_is_watching+0x12/0xc0
[ 1024.355334][T21614]  ? apparmor_capable+0x1d7/0x4d0
[ 1024.355358][T21614]  bpf_prog_alloc_no_stats+0x58/0x640
[ 1024.355382][T21614]  ? security_capable+0x80/0x260
[ 1024.355404][T21614]  bpf_prog_alloc+0x3b/0x200
[ 1024.355426][T21614]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1024.355454][T21614]  bpf_prog_load+0x4a9/0x2fa0
[ 1024.355479][T21614]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1024.355499][T21614]  ? __lock_acquire+0x49f/0x1a40
[ 1024.355553][T21614]  __sys_bpf+0x18dc/0x4e80
[ 1024.355580][T21614]  ? __pfx___sys_bpf+0x10/0x10
[ 1024.355600][T21614]  ? find_held_lock+0x2b/0x80
[ 1024.355622][T21614]  ? get_pid_task+0xfc/0x250
[ 1024.355645][T21614]  ? get_pid_task+0xfc/0x250
[ 1024.355673][T21614]  ? proc_fail_nth_write+0x9f/0x220
[ 1024.355699][T21614]  ? find_held_lock+0x2b/0x80
[ 1024.355726][T21614]  ? rcu_read_lock_any_held+0x6a/0xa0
[ 1024.355749][T21614]  ? find_held_lock+0x2b/0x80
[ 1024.355770][T21614]  ? ksys_write+0x190/0x250
[ 1024.355787][T21614]  ? ksys_write+0x190/0x250
[ 1024.355822][T21614]  ? fput+0x79/0x100
[ 1024.355846][T21614]  ? __ia32_sys_bpf+0xcc/0x170
[ 1024.355864][T21614]  __ia32_sys_bpf+0xcc/0x170
[ 1024.355885][T21614]  ? __do_fast_syscall_32+0x98/0x970
[ 1024.355912][T21614]  __do_fast_syscall_32+0xe7/0x970
[ 1024.355936][T21614]  ? lockdep_hardirqs_on+0x78/0x100
[ 1024.355961][T21614]  do_fast_syscall_32+0x32/0x70
[ 1024.355986][T21614]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1024.356009][T21614] RIP: 0023:0xf7fe2fec
[ 1024.356031][T21614] Code: Unable to access opcode bytes at 0xf7fe2fc2.
[ 1024.356039][T21614] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[ 1024.356056][T21614] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080
[ 1024.356068][T21614] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[ 1024.356079][T21614] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1024.356090][T21614] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1024.356100][T21614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1024.356123][T21614]  </TASK>
[ 1024.393247][   T42] audit: type=1804 audit(1785729627.404:14650): pid=21616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4609" name="/newroot/52/file0/file0" dev="9p" ino=78395507 res=1 errno=0
[ 1024.520829][T19503] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1024.528316][T21616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.532049][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.543196][T21614] Mem-Info:
[ 1024.544627][T21614] active_anon:8255 inactive_anon:2612 isolated_anon:4
[ 1024.544627][T21614]  active_file:2646 inactive_file:16483 isolated_file:7
[ 1024.544627][T21614]  unevictable:1768 dirty:288 writeback:0
[ 1024.544627][T21614]  slab_reclaimable:7500 slab_unreclaimable:73834
[ 1024.544627][T21614]  mapped:22723 shmem:10489 pagetables:1002
[ 1024.544627][T21614]  sec_pagetables:371 bounce:0
[ 1024.544627][T21614]  kernel_misc_reclaimable:0
[ 1024.544627][T21614]  free:36937 free_pcp:6278 free_cma:0
[ 1024.618832][T21614] Node 0 active_anon:1196kB inactive_anon:276kB active_file:0kB inactive_file:1092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8160kB pagetables:1004kB sec_pagetables:1288kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1024.632787][T21614] Node 1 active_anon:31888kB inactive_anon:10136kB active_file:10640kB inactive_file:65768kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:90944kB dirty:1176kB writeback:0kB shmem:39028kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6528kB pagetables:3056kB sec_pagetables:196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1024.647405][T21614] Node 0 DMA free:2820kB boost:2048kB min:2792kB low:2976kB high:3160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1024.659987][T21614] lowmem_reserve[]: 0 280 280 280 280
[ 1024.662252][T21614] Node 0 DMA32 free:30612kB boost:16384kB min:30304kB low:33784kB high:37264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1196kB inactive_anon:276kB active_file:0kB inactive_file:1092kB unevictable:1536kB writepending:0kB zspages:1348kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:4292kB local_pcp:0kB free_cma:0kB
[ 1024.675392][T21614] lowmem_reserve[]: 0 0 0 0 0
[ 1024.677494][T21614] Node 1 DMA32 free:110368kB boost:0kB min:46008kB low:57508kB high:69008kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31888kB inactive_anon:10136kB active_file:10640kB inactive_file:66380kB unevictable:5536kB writepending:1176kB zspages:9532kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:23312kB local_pcp:948kB free_cma:0kB
[ 1024.691712][T21614] lowmem_reserve[]: 0 0 0 0 0
[ 1024.693399][T21614] Node 0 DMA: 177*4kB (U) 48*8kB (U) 10*16kB (U) 9*32kB (U) 2*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2820kB
[ 1024.701783][T21614] Node 0 DMA32: 817*4kB (UME) 334*8kB (UME) 50*16kB (UM) 132*32kB (UME) 81*64kB (UME) 29*128kB (UME) 2*256kB (M) 8*512kB (UM) 2*1024kB (U) 2*2048kB (M) 0*4096kB = 30612kB
[ 1024.707365][T21614] Node 1 DMA32: 1093*4kB (UME) 967*8kB (UM) 606*16kB (UME) 273*32kB (UME) 231*64kB (UE) 168*128kB (UME) 90*256kB (UME) 26*512kB (UM) 3*1024kB (M) 2*2048kB (M) 0*4096kB = 110348kB
[ 1024.713297][T21614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1024.716593][T21614] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1024.720643][T21614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1024.723814][T21614] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1024.728927][T21614] 31780 total pagecache pages
[ 1024.730433][T21614] 1204 pages in swap cache
[ 1024.731817][T21614] Free swap  = 120kB
[ 1024.733018][T21614] Total swap = 124996kB
[ 1024.734437][T21614] 524155 pages RAM
[ 1024.735834][T21614] 0 pages HighMem/MovableOnly
[ 1024.737443][T21614] 211532 pages reserved
[ 1024.738716][T21614] 0 pages cma reserved
[ 1024.833443][ T5865] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1024.844457][T21621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer.
[ 1025.057424][   T24] usb 13-1: USB disconnect, device number 29
[ 1025.097438][T20634] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11
[ 1025.292614][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1026.331449][T21636] ALSA: mixer_oss: invalid OSS volume 'RCLEV'
[ 1026.352288][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1026.504976][T21640] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4617'.
[ 1026.519228][T21640] 9pnet_virtio: no channels available for device syz
[ 1026.549660][T13114] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1026.550768][   T64] Bluetooth: hci4: command 0x1003 tx timeout
[ 1026.570676][ T1175] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1026.986554][T21649] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9)
[ 1026.989506][T21649] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1027.000472][T21649] vhci_hcd vhci_hcd.0: Device attached
[ 1027.243276][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1027.448880][T21659] netlink: 'syz.6.4621': attribute type 11 has an invalid length.
[ 1027.548274][   T24] usb 52-1: SetAddress Request (2) to port 0
[ 1027.665041][   T24] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1028.612181][T21651] vhci_hcd: connection reset by peer
[ 1028.614144][ T5837] vhci_hcd vhci_hcd.7: stop threads
[ 1028.616100][ T5837] vhci_hcd vhci_hcd.7: release socket
[ 1028.617997][ T5837] vhci_hcd vhci_hcd.7: disconnect device
[ 1028.625782][T20634] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1028.631060][T12663] Bluetooth: hci5: command 0x1003 tx timeout
[ 1028.721015][ T8973] net_ratelimit: 1 callbacks suppressed
[ 1028.721026][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1028.954461][T21676] netlink: 'syz.4.4623': attribute type 11 has an invalid length.
[ 1029.641804][T21683] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[ 1029.672455][T21674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1029.682310][   T42] audit: type=1326 audit(1785729632.694:14651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.6.4625" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000
[ 1029.702267][   T42] audit: type=1326 audit(1785729632.704:14652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.6.4625" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000
[ 1029.742315][   T42] audit: type=1326 audit(1785729632.704:14653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.6.4625" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000
[ 1029.751440][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1029.775561][   T42] audit: type=1326 audit(1785729632.704:14654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.6.4625" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000
[ 1029.780592][T21685] fuse: Bad value for 'group_id'
[ 1029.795268][   T42] audit: type=1326 audit(1785729632.704:14655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.6.4625" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f85fec code=0x7ffc0000
[ 1029.807107][T21681] netlink: 'syz.8.4624': attribute type 11 has an invalid length.
[ 1029.822513][T21685] fuse: Bad value for 'group_id'
[ 1029.824617][   T42] audit: type=1326 audit(1785729632.704:14656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.6.4625" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000
[ 1029.842681][   T42] audit: type=1326 audit(1785729632.704:14657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.6.4625" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000
[ 1029.861563][   T42] audit: type=1326 audit(1785729632.704:14658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.6.4625" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f85fec code=0x7ffc0000
[ 1029.870682][   T42] audit: type=1326 audit(1785729632.704:14659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.6.4625" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000
[ 1029.878049][   T42] audit: type=1326 audit(1785729632.704:14660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.6.4625" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000
[ 1030.020597][T21681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1030.285291][   T34] usb 12-1: new low-speed USB device number 20 using dummy_hcd
[ 1030.309271][T20801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1030.437535][   T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55520, setting to 8
[ 1030.441355][   T34] usb 12-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1030.444293][   T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1030.448846][   T34] usb 12-1: config 0 descriptor??
[ 1030.450969][T21691] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1030.799051][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1031.693976][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1031.825531][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1032.113928][T21704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4627'.
[ 1032.705875][   T24] usb 52-1: device descriptor read/8, error -110
[ 1032.822352][   T41] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1032.875315][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1033.139093][   T24] usb usb52-port1: attempt power cycle
[ 1033.366261][T20801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1033.630549][   T34] usbhid 12-1:0.0: can't add hid device: -71
[ 1033.635805][   T34] usbhid 12-1:0.0: probe with driver usbhid failed with error -71
[ 1033.655999][   T34] usb 12-1: USB disconnect, device number 20
[ 1033.766703][   T24] usb usb52-port1: unable to enumerate USB device
[ 1033.905583][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1034.019120][T21729] netlink: 'syz.7.4633': attribute type 11 has an invalid length.
[ 1034.305499][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1034.918270][T20634] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1034.940079][T21728] netlink: 'syz.6.4634': attribute type 11 has an invalid length.
[ 1035.058522][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1036.077057][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1036.386543][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1037.612013][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1037.666591][T20634] Bluetooth: hci3: command 0x0406 tx timeout
[ 1037.666766][   T64] Bluetooth: hci0: command 0x0406 tx timeout
[ 1037.670693][T13114] Bluetooth: hci1: command 0x0406 tx timeout
[ 1037.672835][T12663] Bluetooth: hci2: command 0x0406 tx timeout
[ 1038.133311][T21760] netlink: 'syz.4.4640': attribute type 11 has an invalid length.
[ 1038.650073][T21752] netlink: 'syz.7.4636': attribute type 11 has an invalid length.
[ 1038.716986][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1038.893443][T21756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1039.219837][T21770] netlink: 'syz.8.4642': attribute type 11 has an invalid length.
[ 1039.276966][T20320] usb 11-1: new low-speed USB device number 40 using dummy_hcd
[ 1039.459072][T20801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1039.749217][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1039.969052][T20311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1039.997017][T20801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1040.046930][T21769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1040.240512][T20320] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55520, setting to 8
[ 1040.245764][T20320] usb 11-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1040.249593][T20320] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.274473][T20320] usb 11-1: config 0 descriptor??
[ 1040.311757][T21767] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1040.407623][   T34] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 1040.580271][   T34] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[ 1040.585936][   T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1040.592620][   T34] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1040.614496][   T34] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[ 1040.642116][   T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.787879][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1040.948565][T21774] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1041.095155][   T34] cyberjack 9-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[ 1041.428743][   T34] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1041.618217][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1041.664349][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1041.835535][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1041.920649][T20311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1042.071239][T20320] usbhid 11-1:0.0: can't add hid device: -71
[ 1042.073338][T20320] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[ 1042.086823][T20320] usb 11-1: USB disconnect, device number 40
[ 1042.116472][T21779] syzkaller0: entered promiscuous mode
[ 1042.118407][T21779] syzkaller0: entered allmulticast mode
[ 1042.199508][T20311] usb 9-1: USB disconnect, device number 22
[ 1042.204203][T20311] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1042.211451][T20311] cyberjack 9-1:1.0: device disconnected
[ 1042.392416][T21790] netlink: 'syz.8.4646': attribute type 11 has an invalid length.
[ 1042.875841][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1043.685240][T18935] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1043.751819][T21805] FAULT_INJECTION: forcing a failure.
[ 1043.751819][T21805] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1043.760620][T21805] CPU: 2 UID: 0 PID: 21805 Comm: syz.7.4649 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1043.760651][T21805] Tainted: [L]=SOFTLOCKUP
[ 1043.760659][T21805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1043.760671][T21805] Call Trace:
[ 1043.760679][T21805]  <TASK>
[ 1043.760688][T21805]  dump_stack_lvl+0x100/0x190
[ 1043.760733][T21805]  should_fail_ex.cold+0x5/0xa
[ 1043.760783][T21805]  _copy_from_user+0x2e/0xd0
[ 1043.760818][T21805]  get_compat_msghdr+0xb3/0x480
[ 1043.760856][T21805]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1043.760888][T21805]  ? rcu_is_watching+0x12/0xc0
[ 1043.760915][T21805]  ? ___sys_recvmsg+0x177/0x1a0
[ 1043.760937][T21805]  ? kfree+0x1e5/0x6c0
[ 1043.760956][T21805]  ? __lock_acquire+0x49f/0x1a40
[ 1043.760989][T21805]  ___sys_recvmsg+0x193/0x1a0
[ 1043.761012][T21805]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1043.761048][T21805]  ? __pfx___might_resched+0x10/0x10
[ 1043.761084][T21805]  do_recvmmsg+0x54d/0x740
[ 1043.761108][T21805]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1043.761132][T21805]  ? find_held_lock+0x2b/0x80
[ 1043.761157][T21805]  ? ksys_write+0x190/0x250
[ 1043.761177][T21805]  ? ksys_write+0x190/0x250
[ 1043.761205][T21805]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1043.761237][T21805]  __sys_recvmmsg+0x21f/0x270
[ 1043.761267][T21805]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 1043.761298][T21805]  ? ksys_write+0x1ac/0x250
[ 1043.761319][T21805]  __ia32_compat_sys_recvmmsg_time32+0xc4/0x160
[ 1043.761344][T21805]  ? __do_fast_syscall_32+0x98/0x970
[ 1043.761373][T21805]  ? lockdep_hardirqs_on+0x78/0x100
[ 1043.761397][T21805]  __do_fast_syscall_32+0xe7/0x970
[ 1043.761423][T21805]  ? lockdep_hardirqs_on+0x78/0x100
[ 1043.761450][T21805]  do_fast_syscall_32+0x32/0x70
[ 1043.761477][T21805]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1043.761503][T21805] RIP: 0023:0xf7f28fec
[ 1043.761526][T21805] Code: Unable to access opcode bytes at 0xf7f28fc2.
[ 1043.761535][T21805] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151
[ 1043.761556][T21805] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002e80
[ 1043.761570][T21805] RDX: 0000000004000071 RSI: 000000000000830b RDI: 0000000000000000
[ 1043.761582][T21805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1043.761599][T21805] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1043.761611][T21805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1043.761633][T21805]  </TASK>
[ 1043.885208][T18935] usb 9-1: Using ep0 maxpacket: 8
[ 1043.891068][T18935] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1043.895197][T18935] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1043.899126][T18935] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1043.904742][T18935] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1043.908641][T18935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.917853][T18935] hub 9-1:1.0: bad descriptor, ignoring hub
[ 1043.920547][T18935] hub 9-1:1.0: probe with driver hub failed with error -5
[ 1043.924263][T18935] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1044.277236][T18935] usb 9-1: USB disconnect, device number 23
[ 1044.348099][T21808] netlink: 'syz.8.4650': attribute type 11 has an invalid length.
[ 1044.503661][T21813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1044.565273][T18935] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 1044.715475][T18935] usb 9-1: Using ep0 maxpacket: 8
[ 1044.721675][T18935] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1044.729156][T18935] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1044.735337][T18935] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1044.744569][T18935] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1044.750623][T18935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1044.760010][T21818] vivid-002: disconnect
[ 1044.771315][T18935] hub 9-1:1.0: bad descriptor, ignoring hub
[ 1044.776101][T18935] hub 9-1:1.0: probe with driver hub failed with error -5
[ 1044.779881][T18935] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1044.798609][T21818] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4651'.
[ 1044.946500][T20320] net_ratelimit: 2 callbacks suppressed
[ 1044.946519][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1045.080122][T18935] usb 9-1: USB disconnect, device number 24
[ 1045.345366][T20311] usb 12-1: new low-speed USB device number 21 using dummy_hcd
[ 1045.463556][T21816] vivid-002: reconnect
[ 1045.515534][T20311] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55520, setting to 8
[ 1045.528508][T20311] usb 12-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1045.552110][T20311] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1045.562598][T20311] usb 12-1: config 0 descriptor??
[ 1045.571832][T21820] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1045.854654][T21825] netlink: 'syz.4.4655': attribute type 11 has an invalid length.
[ 1046.105175][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1046.122254][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1046.127532][T20801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1046.290661][T21831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1046.295040][T20311] usbhid 12-1:0.0: can't add hid device: -71
[ 1046.297104][T20311] usbhid 12-1:0.0: probe with driver usbhid failed with error -71
[ 1046.308173][T20311] usb 12-1: USB disconnect, device number 21
[ 1046.490571][T21840] Cannot find add_set index 2 as target
[ 1046.946012][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1047.146417][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1047.161226][T20311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1047.195309][T18935] usb 13-1: new low-speed USB device number 30 using dummy_hcd
[ 1047.266363][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1047.346941][T18935] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55520, setting to 8
[ 1047.350773][T18935] usb 13-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1047.354386][T18935] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1047.361160][T18935] usb 13-1: config 0 descriptor??
[ 1047.364455][T21843] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1047.625374][   T34] usb 11-1: new high-speed USB device number 41 using dummy_hcd
[ 1047.664627][T18935] usbhid 13-1:0.0: can't add hid device: -71
[ 1047.668254][T18935] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[ 1047.673825][T18935] usb 13-1: USB disconnect, device number 30
[ 1047.705227][T20311] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1047.789367][   T34] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[ 1047.793850][   T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1047.797969][   T34] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1047.801921][   T34] usb 11-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[ 1047.805671][   T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1047.815739][T21850] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1047.822148][   T34] cyberjack 11-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[ 1047.842638][   T34] usb 11-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1047.857460][T20311] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[ 1047.865939][T20311] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1047.874651][T20311] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1047.878617][T20311] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[ 1047.882312][T20311] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1047.888755][T21853] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1047.893932][T20311] cyberjack 9-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[ 1047.908600][T20311] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1
[ 1048.035618][T21850] syzkaller0: entered promiscuous mode
[ 1048.038016][T21850] syzkaller0: entered allmulticast mode
[ 1048.080758][T20311] usb 11-1: USB disconnect, device number 41
[ 1048.139784][T20311] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1048.148530][T20311] cyberjack 11-1:1.0: device disconnected
[ 1048.180471][T21853] syzkaller0: entered promiscuous mode
[ 1048.182239][T21853] syzkaller0: entered allmulticast mode
[ 1048.238167][T18935] usb 9-1: USB disconnect, device number 25
[ 1048.311893][T18935] cyberjack ttyUSB1: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB1
[ 1048.312945][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1048.317941][T18935] cyberjack 9-1:1.0: device disconnected
[ 1049.187237][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1049.459614][T21876] netlink: 'syz.6.4665': attribute type 11 has an invalid length.
[ 1050.149124][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1050.156636][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1050.193156][T21876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1050.419971][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1050.759452][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1050.773118][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1050.907783][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1050.943681][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1051.940831][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1052.949091][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1053.145225][T18935] usb 13-1: new high-speed USB device number 31 using dummy_hcd
[ 1053.236771][T21905] netlink: 'syz.4.4669': attribute type 11 has an invalid length.
[ 1053.434576][T21890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1054.027406][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1054.197693][T18935] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1054.201186][T18935] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1054.204185][T18935] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1054.725253][T18935] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1054.814554][T18935] usb 13-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1054.825173][T18935] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.835161][T18935] usb 13-1: Product: syz
[ 1054.836559][T18935] usb 13-1: Manufacturer: syz
[ 1054.842522][T18935] usb 13-1: SerialNumber: syz
[ 1054.852864][T18935] usb 13-1: config 0 descriptor??
[ 1055.064217][T21913] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1055.370745][T21918] 9pnet_virtio: no channels available for device syz
[ 1055.430234][ T9902] net_ratelimit: 1 callbacks suppressed
[ 1055.430278][ T9902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1055.602543][T21924] netlink: 'syz.6.4675': attribute type 11 has an invalid length.
[ 1056.161308][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1056.644051][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1056.758152][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1057.055661][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1057.199911][T18935] adutux 13-1:0.0: ADU208  now attached to /dev/usb/adutux0
[ 1057.241482][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1057.245680][T21928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4676'.
[ 1057.251999][T18935] usb 13-1: USB disconnect, device number 31
[ 1057.331181][   T41] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1057.491456][ T5865] usb 12-1: new high-speed USB device number 22 using dummy_hcd
[ 1057.664214][ T5865] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1057.675714][ T5865] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1057.686072][ T5865] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1057.695405][ T5865] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1057.716312][ T5865] usb 12-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1057.724871][ T5865] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1057.731422][ T5865] usb 12-1: Product: syz
[ 1057.732992][ T5865] usb 12-1: Manufacturer: syz
[ 1057.745056][ T5865] usb 12-1: SerialNumber: syz
[ 1057.807547][ T5865] usb 12-1: config 0 descriptor??
[ 1058.225995][   T24] usb 13-1: new low-speed USB device number 32 using dummy_hcd
[ 1058.414385][   T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55520, setting to 8
[ 1058.447483][   T24] usb 13-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1058.481464][   T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.555241][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1058.574853][   T24] usb 13-1: config 0 descriptor??
[ 1058.622912][T21936] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1058.722493][ T5865] adutux 12-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[ 1058.976348][ T5865] usb 12-1: USB disconnect, device number 22
[ 1059.052809][   T24] usbhid 13-1:0.0: can't add hid device: -71
[ 1059.055563][   T24] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[ 1059.063241][   T24] usb 13-1: USB disconnect, device number 32
[ 1059.236014][T18935] usb 11-1: new high-speed USB device number 42 using dummy_hcd
[ 1059.345299][T20634] Bluetooth: hci4: command 0x1003 tx timeout
[ 1059.353910][   T64] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1059.385245][T18935] usb 11-1: Using ep0 maxpacket: 8
[ 1059.388461][T18935] usb 11-1: config 0 has an invalid interface number: 186 but max is 0
[ 1059.392530][T18935] usb 11-1: config 0 has no interface number 0
[ 1059.394559][T18935] usb 11-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1059.398610][T18935] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1059.401816][T18935] usb 11-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1059.406009][T18935] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1059.409511][T18935] usb 11-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1059.415805][T18935] usb 11-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1059.421605][T18935] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1059.427369][T18935] usb 11-1: Product: syz
[ 1059.428811][T18935] usb 11-1: Manufacturer: syz
[ 1059.434187][T18935] usb 11-1: SerialNumber: syz
[ 1059.439265][T18935] usb 11-1: config 0 descriptor??
[ 1059.597742][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1060.156093][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1060.387969][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1060.565241][T20634] Bluetooth: hci0: ACL packet for unknown connection handle 200
[ 1060.567872][T20634] Bluetooth: hci0: ACL packet for unknown connection handle 200
[ 1060.591213][   T42] kauditd_printk_skb: 1 callbacks suppressed
[ 1060.591237][   T42] audit: type=1326 audit(1785729663.604:14662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21955 comm="syz.4.4683" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x0
[ 1060.605234][T20320] usb 13-1: new high-speed USB device number 33 using dummy_hcd
[ 1060.627635][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1060.756903][T20320] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1060.760557][T20320] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1060.764329][T20320] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1060.769334][T20320] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1060.775065][T20320] usb 13-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1060.779244][T20320] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1060.782625][T20320] usb 13-1: Product: syz
[ 1060.784379][T20320] usb 13-1: Manufacturer: syz
[ 1060.786285][T20320] usb 13-1: SerialNumber: syz
[ 1060.789655][T20320] usb 13-1: config 0 descriptor??
[ 1061.007163][T20320] adutux 13-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[ 1061.207714][T20311] usb 13-1: USB disconnect, device number 33
[ 1061.671015][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1061.973915][T21971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1062.280717][T18935] iowarrior 11-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[ 1062.297009][T18935] usb 11-1: USB disconnect, device number 42
[ 1062.309073][T20311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.545347][T20634] Bluetooth: hci3: command 0x0406 tx timeout
[ 1062.622932][T21982] netlink: 'syz.8.4686': attribute type 11 has an invalid length.
[ 1062.705596][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1063.041789][T21981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1063.276069][T21987] netlink: 'syz.7.4687': attribute type 11 has an invalid length.
[ 1063.502795][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1064.605067][T21990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1065.152150][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1065.510313][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[ 1065.512434][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[ 1066.225990][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1066.548309][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1066.864205][T20723] usb 9-1: new low-speed USB device number 26 using dummy_hcd
[ 1067.108532][T20723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55520, setting to 8
[ 1067.129241][T20723] usb 9-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1067.132355][T20723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.181603][T20723] usb 9-1: config 0 descriptor??
[ 1067.195517][T21998] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1067.210223][T22001] netlink: 'syz.8.4691': attribute type 11 has an invalid length.
[ 1067.270866][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1067.355261][T20311] usb 11-1: new low-speed USB device number 43 using dummy_hcd
[ 1067.507203][T20311] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55520, setting to 8
[ 1067.512127][T22006] binder: 22002:22006 ioctl c0306201 80000080 returned -14
[ 1067.522872][T20311] usb 11-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1067.532290][T20311] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.548330][T20311] usb 11-1: config 0 descriptor??
[ 1067.557256][T22005] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1068.035664][T20311] usbhid 11-1:0.0: can't add hid device: -71
[ 1068.042897][T20311] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[ 1068.055028][T20311] usb 11-1: USB disconnect, device number 43
[ 1068.146520][   T74] usb 12-1: new high-speed USB device number 23 using dummy_hcd
[ 1068.317539][   T74] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[ 1068.334447][   T74] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1068.343135][   T74] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1068.348971][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1068.359096][   T74] usb 12-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[ 1068.373568][   T74] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.391745][T22012] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1068.405307][   T74] cyberjack 12-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[ 1068.442054][   T74] usb 12-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1068.498593][T20723] usbhid 9-1:0.0: can't add hid device: -71
[ 1068.501183][T20723] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1068.544967][T20723] usb 9-1: USB disconnect, device number 26
[ 1068.556840][T22025] usb_phy_generic pcspkr: dummy supplies not allowed for exclusive requests (id=vbus)
[ 1068.566702][T22025] FAULT_INJECTION: forcing a failure.
[ 1068.566702][T22025] name failslab, interval 1, probability 0, space 0, times 0
[ 1068.574277][T22025] CPU: 2 UID: 0 PID: 22025 Comm: syz.8.4696 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1068.574296][T22025] Tainted: [L]=SOFTLOCKUP
[ 1068.574300][T22025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1068.574308][T22025] Call Trace:
[ 1068.574322][T22025]  <TASK>
[ 1068.574327][T22025]  dump_stack_lvl+0x100/0x190
[ 1068.574466][T22025]  should_fail_ex.cold+0x5/0xa
[ 1068.574487][T22025]  should_failslab+0xc2/0x120
[ 1068.574520][T22025]  kmem_cache_alloc_noprof+0x91/0x6a0
[ 1068.574536][T22025]  ? skb_clone+0x190/0x400
[ 1068.574596][T22025]  skb_clone+0x190/0x400
[ 1068.574612][T22025]  netlink_broadcast_filtered+0xb22/0xf20
[ 1068.574647][T22025]  netlink_broadcast+0x39/0x50
[ 1068.574660][T22025]  kobject_uevent_env+0xcdd/0x18b0
[ 1068.574722][T22025]  kobject_synth_uevent+0x6f0/0x7d0
[ 1068.574738][T22025]  ? __pfx_kobject_synth_uevent+0x10/0x10
[ 1068.574768][T22025]  ? find_held_lock+0x2b/0x80
[ 1068.574794][T22025]  ? __pfx_uevent_store+0x10/0x10
[ 1068.574843][T22025]  uevent_store+0x24/0x50
[ 1068.574858][T22025]  dev_attr_store+0x58/0x80
[ 1068.574876][T22025]  ? __pfx_dev_attr_store+0x10/0x10
[ 1068.574893][T22025]  sysfs_kf_write+0xf2/0x150
[ 1068.574917][T22025]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 1068.574930][T22025]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1068.574946][T22025]  vfs_write+0x6ac/0x1050
[ 1068.574959][T22025]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1068.574974][T22025]  ? __pfx_vfs_write+0x10/0x10
[ 1068.574983][T22025]  ? find_held_lock+0x2b/0x80
[ 1068.575011][T22025]  ksys_write+0x12a/0x250
[ 1068.575022][T22025]  ? __pfx_ksys_write+0x10/0x10
[ 1068.575032][T22025]  ? ksys_write+0x1ac/0x250
[ 1068.575042][T22025]  ? __pfx_ksys_write+0x10/0x10
[ 1068.575055][T22025]  __do_fast_syscall_32+0xe7/0x970
[ 1068.575078][T22025]  ? lockdep_hardirqs_on+0x78/0x100
[ 1068.575094][T22025]  do_fast_syscall_32+0x32/0x70
[ 1068.575110][T22025]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1068.575126][T22025] RIP: 0023:0xf6fdefec
[ 1068.575141][T22025] Code: Unable to access opcode bytes at 0xf6fdefc2.
[ 1068.575146][T22025] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[ 1068.575158][T22025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[ 1068.575166][T22025] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000
[ 1068.575172][T22025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1068.575179][T22025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1068.575186][T22025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1068.575201][T22025]  </TASK>
[ 1068.657354][T22012] syzkaller0: entered promiscuous mode
[ 1068.659248][T22012] syzkaller0: entered allmulticast mode
[ 1068.684131][   T74] usb 12-1: USB disconnect, device number 23
[ 1068.703196][   T74] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1068.713652][T22027] tmpfs: Bad value for 'mpol'
[ 1068.713735][   T74] cyberjack 12-1:1.0: device disconnected
[ 1068.716344][T22027] random: crng reseeded on system resumption
[ 1069.425799][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1069.587643][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1069.716185][T22036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1069.757342][T22037] netlink: 'syz.6.4699': attribute type 11 has an invalid length.
[ 1069.938760][T22037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1070.467631][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1071.523920][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1071.905537][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1072.224677][T22049] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1072.596130][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1072.625943][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1073.479120][T22055] usb usb8: usbfs: process 22055 (syz.8.4705) did not claim interface 0 before use
[ 1073.666349][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1074.451832][T22070] ubi: mtd0 is already attached to ubi0
[ 1074.712533][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1075.383299][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1075.388749][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1075.393676][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1075.429806][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1076.005359][   T24] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1076.185347][   T24] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1076.191291][   T24] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1076.207109][   T24] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[ 1076.210782][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.217758][   T24] usb 9-1: Product: syz
[ 1076.224918][   T24] usb 9-1: Manufacturer: syz
[ 1076.371920][   T24] usb 9-1: SerialNumber: syz
[ 1076.962884][   T34] net_ratelimit: 233 callbacks suppressed
[ 1076.962904][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1077.722216][   T24] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected
[ 1077.995896][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1078.101769][   T24] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[ 1078.116815][   T24] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[ 1078.503513][T22107] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1079.029374][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.484111][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.507168][T18935] usb 9-1: USB disconnect, device number 27
[ 1079.514316][T18935] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[ 1079.524977][T18935] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[ 1079.554472][T18935] ti_usb_3410_5052 9-1:2.0: device disconnected
[ 1080.206721][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1080.244694][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1080.263877][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1080.267042][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1080.269889][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1080.274920][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1080.485655][ T5865] usb 12-1: new high-speed USB device number 24 using dummy_hcd
[ 1080.570558][T20801] usb 11-1: new high-speed USB device number 44 using dummy_hcd
[ 1080.645702][ T5865] usb 12-1: Using ep0 maxpacket: 8
[ 1080.665622][ T5865] usb 12-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config
[ 1080.677355][ T5865] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1080.704950][ T5865] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1080.720873][ T5865] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1080.732765][ T5865] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.750921][T20801] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1080.812657][T20801] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1080.825304][T20801] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1080.850771][T20801] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1080.879080][ T5865] hub 12-1:1.0: bad descriptor, ignoring hub
[ 1080.904774][ T5865] hub 12-1:1.0: probe with driver hub failed with error -5
[ 1080.910212][T20801] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1080.913391][T20801] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1080.917458][T22133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1080.922830][ T5865] cdc_wdm 12-1:1.0: skipping garbage
[ 1080.929675][ T5865] cdc_wdm 12-1:1.0: skipping garbage
[ 1080.931543][ T5865] cdc_wdm 12-1:1.0: skipping garbage
[ 1080.937770][T20801] usb 11-1: Product: syz
[ 1080.939341][T20801] usb 11-1: Manufacturer: syz
[ 1080.940978][T20801] usb 11-1: SerialNumber: syz
[ 1080.946746][ T5865] cdc_wdm 12-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1081.008487][T20801] usb 11-1: config 0 descriptor??
[ 1081.290237][ T5865] usb 12-1: USB disconnect, device number 24
[ 1081.325566][T20320] usb 9-1: new full-speed USB device number 28 using dummy_hcd
[ 1081.477444][T20320] usb 9-1: config 0 has an invalid interface number: 205 but max is 0
[ 1081.481092][T20320] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1081.496576][T20320] usb 9-1: config 0 has no interface number 0
[ 1081.504236][T20320] usb 9-1: config 0 interface 205 has no altsetting 0
[ 1081.528782][T20320] usb 9-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[ 1081.549290][T20320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.559670][T20320] usb 9-1: Product: syz
[ 1081.561555][T20320] usb 9-1: Manufacturer: syz
[ 1081.568014][T20801] adutux 11-1:0.0: ADU208  now attached to /dev/usb/adutux0
[ 1081.568990][T20320] usb 9-1: SerialNumber: syz
[ 1081.577336][T20320] usb 9-1: config 0 descriptor??
[ 1081.684505][T20320] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[ 1081.699685][T20801] usb 11-1: USB disconnect, device number 44
[ 1081.702899][T20320] dvb-usb: bulk message failed: -22 (3/0)
[ 1081.775714][T20320] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1081.791457][T20320] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[ 1081.817270][T20320] usb 9-1: media controller created
[ 1081.825591][T20320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1081.830695][ T5865] usb 12-1: new high-speed USB device number 25 using dummy_hcd
[ 1081.881986][T20320] dvb-usb: bulk message failed: -22 (6/0)
[ 1081.885846][T20320] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[ 1081.904829][T20320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input78
[ 1081.922609][T20320] dvb-usb: schedule remote query interval to 150 msecs.
[ 1081.932395][T20320] dvb-usb: bulk message failed: -22 (3/0)
[ 1081.956051][T20320] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[ 1081.986014][ T5865] usb 12-1: Using ep0 maxpacket: 8
[ 1082.010139][ T5865] usb 12-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config
[ 1082.013607][ T5865] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1082.027602][ T5865] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1082.032749][ T5865] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1082.039335][ T5865] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1082.068234][ T5868] net_ratelimit: 72 callbacks suppressed
[ 1082.068302][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1082.086889][T20320] dvb-usb: bulk message failed: -22 (1/0)
[ 1082.101269][ T5865] hub 12-1:1.0: bad descriptor, ignoring hub
[ 1082.103529][ T5865] hub 12-1:1.0: probe with driver hub failed with error -5
[ 1082.103547][T20320] dvb-usb: error while querying for an remote control event.
[ 1082.112049][ T5865] cdc_wdm 12-1:1.0: skipping garbage
[ 1082.114341][ T5865] cdc_wdm 12-1:1.0: skipping garbage
[ 1082.116626][ T5865] cdc_wdm 12-1:1.0: skipping garbage
[ 1082.118501][ T5865] cdc_wdm 12-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1082.135742][T20801] usb 11-1: new high-speed USB device number 45 using dummy_hcd
[ 1082.283106][T20320] dvb-usb: bulk message failed: -22 (1/0)
[ 1082.286787][T20320] dvb-usb: error while querying for an remote control event.
[ 1082.391179][T22141] binder: 22135:22141 unknown command 268435456
[ 1082.393984][T22141] binder: 22135:22141 ioctl c0306201 80000480 returned -22
[ 1082.415163][T20801] usb 11-1: Using ep0 maxpacket: 8
[ 1082.435359][T18935] usb 12-1: USB disconnect, device number 25
[ 1082.463265][T20320] dvb-usb: bulk message failed: -22 (1/0)
[ 1082.469600][T20320] dvb-usb: error while querying for an remote control event.
[ 1082.487976][T20801] usb 11-1: config 0 has an invalid interface number: 186 but max is 0
[ 1082.490759][T20801] usb 11-1: config 0 has no interface number 0
[ 1082.493214][T20801] usb 11-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1082.507175][T20801] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1082.510617][T20801] usb 11-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1082.514943][T20801] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1082.520642][T20801] usb 11-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1082.553709][T20801] usb 11-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1082.557282][T20801] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.560095][T20801] usb 11-1: Product: syz
[ 1082.561672][T20801] usb 11-1: Manufacturer: syz
[ 1082.564620][T20801] usb 11-1: SerialNumber: syz
[ 1082.637154][T20320] dvb-usb: bulk message failed: -22 (1/0)
[ 1082.648639][T20320] dvb-usb: error while querying for an remote control event.
[ 1082.663694][T20801] usb 11-1: config 0 descriptor??
[ 1082.714727][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1082.815322][T20320] dvb-usb: bulk message failed: -22 (1/0)
[ 1082.820842][T20320] dvb-usb: error while querying for an remote control event.
[ 1082.987726][T20320] dvb-usb: bulk message failed: -22 (1/0)
[ 1082.993645][T20320] dvb-usb: error while querying for an remote control event.
[ 1083.066593][T20320] usb 9-1: USB disconnect, device number 28
[ 1083.179825][T20320] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[ 1083.836711][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1084.015308][T22166] netlink: 'syz.4.4729': attribute type 11 has an invalid length.
[ 1085.038119][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1085.164057][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1085.915974][T22161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1086.012640][T20801] iowarrior 11-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[ 1086.072343][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1086.078146][  T118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1086.083726][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1086.093387][T18935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1086.107638][T20801] usb 11-1: USB disconnect, device number 45
[ 1086.444489][T18935] usb 13-1: new high-speed USB device number 34 using dummy_hcd
[ 1086.649738][T18935] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 1086.659289][T18935] usb 13-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[ 1086.671797][T18935] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1086.785347][T22178] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1087.304831][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1087.483328][T18935] opticon 13-1:1.0: opticon converter detected
[ 1087.488731][T18935] usb 13-1: opticon converter now attached to ttyUSB0
[ 1088.226647][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1088.305515][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1088.865535][T22202] netlink: 'syz.6.4738': attribute type 11 has an invalid length.
[ 1089.374442][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1089.700687][   T24] usb 13-1: USB disconnect, device number 34
[ 1089.714557][   T24] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[ 1089.729224][   T24] opticon 13-1:1.0: device disconnected
[ 1090.387659][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1090.547919][T22214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1091.107928][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1091.267770][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1091.430007][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1091.703174][T22218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4742'.
[ 1091.783885][  T118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1091.794867][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1092.341222][T18935] usb 12-1: new full-speed USB device number 26 using dummy_hcd
[ 1092.365287][T20311] usb 11-1: new high-speed USB device number 46 using dummy_hcd
[ 1092.518426][T18935] usb 12-1: config 0 has an invalid interface number: 205 but max is 0
[ 1092.521183][T18935] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1092.527127][T18935] usb 12-1: config 0 has no interface number 0
[ 1092.529126][T18935] usb 12-1: config 0 interface 205 has no altsetting 0
[ 1092.557918][T20311] usb 11-1: Using ep0 maxpacket: 32
[ 1092.568343][T18935] usb 12-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[ 1092.574727][T20311] usb 11-1: unable to get BOS descriptor or descriptor too short
[ 1092.578529][T18935] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.584333][T20311] usb 11-1: config 14 has an invalid interface number: 57 but max is 1
[ 1092.589785][T20311] usb 11-1: config 14 has an invalid interface number: 228 but max is 1
[ 1092.592796][T18935] usb 12-1: Product: syz
[ 1092.594196][T18935] usb 12-1: Manufacturer: syz
[ 1092.601994][T20311] usb 11-1: config 14 has no interface number 0
[ 1092.604143][T20311] usb 11-1: config 14 has no interface number 1
[ 1092.606596][T18935] usb 12-1: SerialNumber: syz
[ 1092.612846][T20311] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1092.625974][T18935] usb 12-1: config 0 descriptor??
[ 1092.627757][T20311] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1092.639145][T18935] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[ 1092.642992][T20311] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1092.649134][T18935] dvb-usb: bulk message failed: -22 (3/0)
[ 1092.651265][T20311] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1092.659780][T20311] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 1092.667149][T20311] usb 11-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1092.678448][T18935] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1092.681181][T20311] usb 11-1: config 14 interface 57 has no altsetting 0
[ 1092.685904][T20311] usb 11-1: config 14 interface 228 has no altsetting 0
[ 1092.690889][T18935] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[ 1092.697394][T18935] usb 12-1: media controller created
[ 1092.703069][T20311] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1092.708071][T18935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1092.710829][T20311] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.715708][T20311] usb 11-1: Product: syz
[ 1092.717399][T20311] usb 11-1: Manufacturer: syz
[ 1092.725981][T20311] usb 11-1: SerialNumber: syz
[ 1092.734130][T18935] dvb-usb: bulk message failed: -22 (6/0)
[ 1092.739076][T18935] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[ 1092.756921][T18935] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input79
[ 1092.764270][T18935] dvb-usb: schedule remote query interval to 150 msecs.
[ 1092.773669][T18935] dvb-usb: bulk message failed: -22 (3/0)
[ 1092.795198][T18935] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[ 1092.872632][ T8973] net_ratelimit: 1 callbacks suppressed
[ 1092.872646][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1092.925192][T18935] dvb-usb: bulk message failed: -22 (1/0)
[ 1092.927110][T18935] dvb-usb: error while querying for an remote control event.
[ 1093.085175][T18935] dvb-usb: bulk message failed: -22 (1/0)
[ 1093.087113][T18935] dvb-usb: error while querying for an remote control event.
[ 1093.245161][   T24] dvb-usb: bulk message failed: -22 (1/0)
[ 1093.247132][   T24] dvb-usb: error while querying for an remote control event.
[ 1093.296869][T20311] legousbtower 11-1:14.57: interrupt endpoints not found
[ 1093.417863][   T24] dvb-usb: bulk message failed: -22 (1/0)
[ 1093.419812][   T24] dvb-usb: error while querying for an remote control event.
[ 1093.595278][   T24] dvb-usb: bulk message failed: -22 (1/0)
[ 1093.597209][   T24] dvb-usb: error while querying for an remote control event.
[ 1093.756550][   T24] dvb-usb: bulk message failed: -22 (1/0)
[ 1093.758491][   T24] dvb-usb: error while querying for an remote control event.
[ 1093.905324][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1094.309975][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1094.727796][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1094.795232][   T24] dvb-usb: bulk message failed: -22 (1/0)
[ 1094.797151][   T24] dvb-usb: error while querying for an remote control event.
[ 1094.845723][ T5865] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1094.945441][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1094.955313][   T24] dvb-usb: bulk message failed: -22 (1/0)
[ 1094.957130][   T24] dvb-usb: error while querying for an remote control event.
[ 1095.115345][   T24] dvb-usb: bulk message failed: -22 (1/0)
[ 1095.117453][   T24] dvb-usb: error while querying for an remote control event.
[ 1095.150700][ T5865] usb 9-1: Using ep0 maxpacket: 8
[ 1095.175965][ T5865] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1095.179437][ T5865] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1095.190221][ T5865] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[ 1095.194447][ T5865] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[ 1095.200536][ T5865] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[ 1095.204930][ T5865] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1095.208114][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1095.263921][ T5865] hub 9-1:1.0: bad descriptor, ignoring hub
[ 1095.267031][ T5865] hub 9-1:1.0: probe with driver hub failed with error -5
[ 1095.273255][ T5865] cdc_wdm 9-1:1.0: skipping garbage
[ 1095.279122][ T5865] cdc_wdm 9-1:1.0: skipping garbage
[ 1095.281810][ T5865] cdc_wdm 9-1:1.0: skipping garbage
[ 1095.284625][ T5865] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1095.303914][   T24] dvb-usb: bulk message failed: -22 (1/0)
[ 1095.318515][   T24] dvb-usb: error while querying for an remote control event.
[ 1095.485421][   T24] dvb-usb: bulk message failed: -22 (1/0)
[ 1095.487901][   T24] dvb-usb: error while querying for an remote control event.
[ 1095.526419][   T24] usb 12-1: USB disconnect, device number 26
[ 1095.553184][   T24] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[ 1095.606778][ T5865] usb 9-1: USB disconnect, device number 29
[ 1095.747384][ T8973] usb 13-1: new low-speed USB device number 35 using dummy_hcd
[ 1095.906018][T22245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1095.909134][T22245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1095.912337][T22245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1095.918759][T22245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1095.921499][ T8973] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55520, setting to 8
[ 1095.925718][T22245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1095.933691][ T8973] usb 13-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1095.937528][ T8973] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1095.940493][T22245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1095.958945][ T8973] usb 13-1: config 0 descriptor??
[ 1095.967251][T22242] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 1095.974842][ T5865] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1096.145764][ T5865] usb 9-1: Using ep0 maxpacket: 8
[ 1096.319375][ T5865] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1096.323572][ T5865] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1096.375900][ T5865] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[ 1096.380262][ T5865] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[ 1096.384227][ T5865] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[ 1096.490753][ T5865] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1096.494033][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1096.558941][T22252] netlink: 'syz.7.4750': attribute type 11 has an invalid length.
[ 1096.769917][ T5865] hub 9-1:1.0: bad descriptor, ignoring hub
[ 1096.772631][ T5865] hub 9-1:1.0: probe with driver hub failed with error -5
[ 1096.829359][ T5865] cdc_wdm 9-1:1.0: skipping garbage
[ 1096.831822][ T5865] cdc_wdm 9-1:1.0: skipping garbage
[ 1096.834113][ T5865] cdc_wdm 9-1:1.0: skipping garbage
[ 1096.836853][ T5865] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1097.055945][   T24] usb 9-1: USB disconnect, device number 30
[ 1097.292553][ T8973] usbhid 13-1:0.0: can't add hid device: -71
[ 1097.294565][ T8973] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[ 1097.312611][ T8973] usb 13-1: USB disconnect, device number 35
[ 1098.327889][T20311] legousbtower 11-1:14.228: get version request failed: -32
[ 1098.337521][T20311] legousbtower 11-1:14.228: probe with driver legousbtower failed with error -32
[ 1098.445436][T22261] net_ratelimit: 512 callbacks suppressed
[ 1098.445451][T22261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1098.452594][T22261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1098.634678][T20634] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[ 1098.818843][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1099.940021][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1100.162793][T22276] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1100.340204][T22279] netlink: 'syz.4.4757': attribute type 11 has an invalid length.
[ 1101.165810][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1101.711622][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1101.714596][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1102.275182][ T8973] usb 9-1: new low-speed USB device number 31 using dummy_hcd
[ 1102.443056][ T8973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55520, setting to 8
[ 1102.451752][ T8973] usb 9-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 1102.466891][ T8973] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.515153][ T8973] usb 9-1: config 0 descriptor??
[ 1102.534980][T22297] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1102.838426][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1102.949130][T20801] usb 12-1: new high-speed USB device number 27 using dummy_hcd
[ 1103.163673][T20801] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1103.170096][T20801] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1103.174579][T20801] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1103.194801][T20801] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1103.247492][T20801] usb 12-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1103.250802][T20801] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.263520][T20801] usb 12-1: Product: syz
[ 1103.269285][T20801] usb 12-1: Manufacturer: syz
[ 1103.271086][T20801] usb 12-1: SerialNumber: syz
[ 1103.350650][T20801] usb 12-1: config 0 descriptor??
[ 1103.941774][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1104.236657][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1104.948398][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1105.048584][   T74] usb 13-1: new full-speed USB device number 36 using dummy_hcd
[ 1105.211229][   T74] usb 13-1: config 0 has an invalid interface number: 205 but max is 0
[ 1105.213912][   T74] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1105.222031][   T74] usb 13-1: config 0 has no interface number 0
[ 1105.224069][   T74] usb 13-1: config 0 interface 205 has no altsetting 0
[ 1105.237577][   T74] usb 13-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[ 1105.242806][   T74] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1105.247926][   T74] usb 13-1: Product: syz
[ 1105.255055][   T74] usb 13-1: Manufacturer: syz
[ 1105.256792][   T74] usb 13-1: SerialNumber: syz
[ 1105.263698][   T74] usb 13-1: config 0 descriptor??
[ 1105.284157][   T74] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[ 1105.309712][   T74] dvb-usb: bulk message failed: -22 (3/0)
[ 1105.329697][   T74] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1105.335716][   T74] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[ 1105.342642][ T8973] usbhid 9-1:0.0: can't add hid device: -71
[ 1105.345075][ T8973] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1105.350880][   T74] usb 13-1: media controller created
[ 1105.353000][ T8973] usb 9-1: USB disconnect, device number 31
[ 1105.358347][   T74] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1105.370327][   T74] dvb-usb: bulk message failed: -22 (6/0)
[ 1105.380448][   T74] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[ 1105.396744][   T74] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb13/13-1/input/input80
[ 1105.401611][   T74] dvb-usb: schedule remote query interval to 150 msecs.
[ 1105.406174][   T74] dvb-usb: bulk message failed: -22 (3/0)
[ 1105.427246][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[ 1105.429717][   T74] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[ 1105.528547][T20801] adutux 12-1:0.0: ADU208  now attached to /dev/usb/adutux0
[ 1105.566253][ T8973] dvb-usb: bulk message failed: -22 (1/0)
[ 1105.569758][ T8973] dvb-usb: error while querying for an remote control event.
[ 1105.569999][T20801] usb 12-1: USB disconnect, device number 27
[ 1105.682522][T22316] 9p: Bad value for 'rfdno'
[ 1105.750307][ T8973] dvb-usb: bulk message failed: -22 (1/0)
[ 1105.763739][ T8973] dvb-usb: error while querying for an remote control event.
[ 1105.938931][T20320] dvb-usb: bulk message failed: -22 (1/0)
[ 1105.941122][T20320] dvb-usb: error while querying for an remote control event.
[ 1106.020237][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1106.105437][   T74] dvb-usb: bulk message failed: -22 (1/0)
[ 1106.107715][   T74] dvb-usb: error while querying for an remote control event.
[ 1106.276528][   T74] dvb-usb: bulk message failed: -22 (1/0)
[ 1106.291602][   T74] dvb-usb: error while querying for an remote control event.
[ 1106.515430][   T74] dvb-usb: bulk message failed: -22 (1/0)
[ 1106.517443][   T74] dvb-usb: error while querying for an remote control event.
[ 1106.675187][   T74] dvb-usb: bulk message failed: -22 (1/0)
[ 1106.677580][   T74] dvb-usb: error while querying for an remote control event.
[ 1106.834826][   T74] usb 13-1: USB disconnect, device number 36
[ 1106.880406][T22318] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[ 1106.940067][T22318] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]
[ 1106.971994][T22318] pci 0000:00:01.0: BAR 2 [mem 0x80001000-0x80001fff]
[ 1106.976528][   T74] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[ 1106.987789][T22318] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[ 1107.003778][T22318] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[ 1107.013809][T22318] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12377 usecs
[ 1107.047610][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1107.347841][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1107.351058][T22318] pci 0000:00:01.0: Adding to iommu group 1
[ 1107.382315][T22318] Failed to set up IOMMU for device 0000:00:01.0; retaining platform DMA ops
[ 1107.397604][T22318] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[ 1107.399880][T22318] pci 0000:00:01.0: vgaarb: bridge control possible
[ 1107.401830][T22318] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[ 1107.459437][T22318] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned
[ 1107.478220][T22318] pci 0000:00:01.0: BAR 2 [mem 0x80001000-0x80001fff]: assigned
[ 1107.514063][T22318] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[ 1107.661296][T22318] [drm] Found bochs VGA, ID 0xb0c5.
[ 1107.677355][T22318] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80001000.
[ 1107.700758][T22318] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[ 1108.089896][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1108.293485][T22338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1108.304403][T22338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1109.012257][T18935] usb 13-1: new high-speed USB device number 37 using dummy_hcd
[ 1109.112087][T22344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1109.130165][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1109.594181][T18935] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1110.180480][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1110.522887][T18935] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1110.707785][T18935] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1110.713567][T18935] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1110.719744][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1110.955304][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1110.977022][T18935] usb 13-1: string descriptor 0 read error: -71
[ 1110.979393][T18935] usb 13-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1110.983272][T18935] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.990816][T18935] usb 13-1: config 0 descriptor??
[ 1110.993445][T18935] usb 13-1: can't set config #0, error -71
[ 1110.996468][T18935] usb 13-1: USB disconnect, device number 37
[ 1111.191189][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1111.245213][T20320] usb 12-1: new high-speed USB device number 28 using dummy_hcd
[ 1111.401494][T20320] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[ 1111.409141][T20320] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1111.423220][T20320] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1111.441486][T20320] usb 12-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[ 1111.451019][T20320] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1111.501985][T22355] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1111.533350][T20320] cyberjack 12-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[ 1111.628530][T20320] usb 12-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1111.912878][T20320] usb 9-1: new full-speed USB device number 32 using dummy_hcd
[ 1112.038941][T22355] syzkaller0: entered promiscuous mode
[ 1112.048167][T22355] syzkaller0: entered allmulticast mode
[ 1112.568623][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1112.775236][ T8973] usb 12-1: USB disconnect, device number 28
[ 1112.850439][ T8973] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1112.858031][ T8973] cyberjack 12-1:1.0: device disconnected
[ 1113.587294][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1113.751333][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1113.909802][T22380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1114.245602][T20320] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1114.431074][T20320] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[ 1114.437964][T20320] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1114.450231][T20320] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1114.463186][T20320] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[ 1114.483235][T20320] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1114.516633][T22371] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1114.547395][T20320] cyberjack 9-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[ 1114.580810][T20320] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1114.630726][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1114.763349][T22371] syzkaller0: entered promiscuous mode
[ 1114.771131][T22371] syzkaller0: entered allmulticast mode
[ 1114.826292][T20320] usb 9-1: USB disconnect, device number 33
[ 1114.831907][T20320] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1114.836410][T20320] cyberjack 9-1:1.0: device disconnected
[ 1115.665675][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1115.761793][T22389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1115.769986][T22389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1116.235210][T18935] usb 13-1: new high-speed USB device number 38 using dummy_hcd
[ 1116.385333][T18935] usb 13-1: Using ep0 maxpacket: 8
[ 1116.393090][T18935] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1116.402939][T18935] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1116.425252][T18935] usb 13-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[ 1116.429749][T18935] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[ 1116.433990][T18935] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[ 1116.447381][T18935] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1116.451132][T18935] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1116.460271][T18935] hub 13-1:1.0: bad descriptor, ignoring hub
[ 1116.462857][T18935] hub 13-1:1.0: probe with driver hub failed with error -5
[ 1116.466760][T18935] cdc_wdm 13-1:1.0: skipping garbage
[ 1116.469356][T18935] cdc_wdm 13-1:1.0: skipping garbage
[ 1116.471628][T18935] cdc_wdm 13-1:1.0: skipping garbage
[ 1116.473995][T18935] cdc_wdm 13-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1116.708839][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1116.765540][T18935] usb 13-1: USB disconnect, device number 38
[ 1116.790431][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1117.124898][T22399] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1117.165535][   T24] usb 13-1: new high-speed USB device number 39 using dummy_hcd
[ 1117.325469][   T24] usb 13-1: Using ep0 maxpacket: 8
[ 1117.351415][   T24] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1117.368346][   T24] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1117.382253][   T24] usb 13-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[ 1117.400566][   T24] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[ 1117.416687][   T24] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[ 1117.436282][   T24] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1117.450378][   T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.597513][   T24] hub 13-1:1.0: bad descriptor, ignoring hub
[ 1117.607679][   T24] hub 13-1:1.0: probe with driver hub failed with error -5
[ 1117.629398][   T24] cdc_wdm 13-1:1.0: skipping garbage
[ 1117.636866][   T24] cdc_wdm 13-1:1.0: skipping garbage
[ 1117.651083][   T24] cdc_wdm 13-1:1.0: skipping garbage
[ 1117.661431][   T24] cdc_wdm 13-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1118.036397][T18935] usb 13-1: USB disconnect, device number 39
[ 1118.704958][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1118.739407][T22405] netlink: 'syz.4.4785': attribute type 11 has an invalid length.
[ 1119.229013][T22413] netlink: 'syz.8.4787': attribute type 11 has an invalid length.
[ 1119.493190][T22409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1119.591537][T22400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1119.678904][T22415] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4788'.
[ 1119.747211][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1119.790554][   T42] audit: type=1804 audit(1785729722.804:14663): pid=22416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4788" name="/newroot/93/file0/file0" dev="9p" ino=78395507 res=1 errno=0
[ 1119.825856][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1119.868307][   T72] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1120.160306][T22421] 9pnet_virtio: no channels available for device syz
[ 1120.546022][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1120.787552][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1120.793169][T20320] usb 13-1: new high-speed USB device number 40 using dummy_hcd
[ 1120.956912][T20320] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1120.961196][T20320] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1120.968789][T20320] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1120.977478][T20320] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1120.987522][T20320] usb 13-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1120.991268][T20320] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.999048][T20320] usb 13-1: Product: syz
[ 1121.000795][T20320] usb 13-1: Manufacturer: syz
[ 1121.006251][T20320] usb 13-1: SerialNumber: syz
[ 1121.021445][T20320] usb 13-1: config 0 descriptor??
[ 1121.621984][T20320] adutux 13-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[ 1121.821667][T20320] usb 13-1: USB disconnect, device number 40
[ 1121.831474][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1121.915787][   T64] Bluetooth: hci4: command 0x1003 tx timeout
[ 1121.922386][T20634] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1122.865704][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1122.868541][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1123.492949][T22455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4804'.
[ 1123.917241][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1124.960154][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1125.205609][T22513] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4816'.
[ 1125.983181][T20723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1126.011120][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1126.537577][T22554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4822'.
[ 1126.783864][T22558] 
[ 1126.784833][T22558] ======================================================
[ 1126.787358][T22558] WARNING: possible circular locking dependency detected
[ 1126.789729][T22558] syzkaller #0 Tainted: G             L     
[ 1126.791827][T22558] ------------------------------------------------------
[ 1126.794212][T22558] syz.7.4812/22558 is trying to acquire lock:
[ 1126.796066][T22558] ffff88806083fc60 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80
[ 1126.798693][T22558] 
[ 1126.798693][T22558] but task is already holding lock:
[ 1126.801106][T22558] ffff88801d2c8450 (sb_writers#5){.+.+}-{0:0}, at: __do_splice+0x33b/0x370
[ 1126.803888][T22558] 
[ 1126.803888][T22558] which lock already depends on the new lock.
[ 1126.803888][T22558] 
[ 1126.807100][T22558] 
[ 1126.807100][T22558] the existing dependency chain (in reverse order) is:
[ 1126.809855][T22558] 
[ 1126.809855][T22558] -> #5 (sb_writers#5){.+.+}-{0:0}:
[ 1126.812173][T22558]        lock_acquire+0x1b9/0x370
[ 1126.813805][T22558]        mnt_want_write+0x6f/0x410
[ 1126.815370][T22558]        path_openat+0xad9/0x4280
[ 1126.816937][T22558]        do_file_open+0x20e/0x430
[ 1126.818483][T22558]        file_open_name+0x1c3/0x3e0
[ 1126.820080][T22558]        filp_open+0x2e/0x50
[ 1126.821567][T22558]        fsg_lun_open+0x6b/0x7b0
[ 1126.823182][T22558]        fsg_store_file+0x1e7/0x450
[ 1126.824804][T22558]        configfs_write_iter+0x302/0x4e0
[ 1126.826535][T22558]        vfs_write+0x6ac/0x1050
[ 1126.828057][T22558]        ksys_write+0x12a/0x250
[ 1126.829598][T22558]        __do_fast_syscall_32+0xe7/0x970
[ 1126.831424][T22558]        do_fast_syscall_32+0x32/0x70
[ 1126.833136][T22558]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1126.835215][T22558] 
[ 1126.835215][T22558] -> #4 (&common->filesem){+.+.}-{4:4}:
[ 1126.837545][T22558]        lock_acquire+0x1b9/0x370
[ 1126.839112][T22558]        down_write+0x8b/0x1f0
[ 1126.840598][T22558]        fsg_store_file+0x193/0x450
[ 1126.842230][T22558]        configfs_write_iter+0x302/0x4e0
[ 1126.844217][T22558]        vfs_write+0x6ac/0x1050
[ 1126.846056][T22558]        ksys_write+0x12a/0x250
[ 1126.847828][T22558]        __do_fast_syscall_32+0xe7/0x970
[ 1126.849720][T22558]        do_fast_syscall_32+0x32/0x70
[ 1126.851367][T22558]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1126.853391][T22558] 
[ 1126.853391][T22558] -> #3 (&p->frag_sem){++++}-{4:4}:
[ 1126.855585][T22558]        lock_acquire+0x1b9/0x370
[ 1126.857102][T22558]        down_read+0x99/0x4c0
[ 1126.858539][T22558]        __configfs_open_file+0xe8/0x9c0
[ 1126.860210][T22558]        do_dentry_open+0x6ab/0x14d0
[ 1126.861855][T22558]        vfs_open+0x82/0x3f0
[ 1126.863298][T22558]        dentry_open+0x71/0xd0
[ 1126.864744][T22558]        ima_calc_file_hash+0xe1/0x380
[ 1126.866422][T22558]        ima_collect_measurement+0x94f/0xb30
[ 1126.868288][T22558]        process_measurement+0xdfe/0x2350
[ 1126.870023][T22558]        ima_file_check+0xcc/0x120
[ 1126.871636][T22558]        security_file_post_open+0xc4/0x210
[ 1126.873510][T22558]        path_openat+0x985/0x4280
[ 1126.875238][T22558]        do_file_open+0x20e/0x430
[ 1126.877098][T22558]        do_sys_openat2+0x10f/0x1e0
[ 1126.879020][T22558]        __ia32_compat_sys_openat+0x12d/0x210
[ 1126.881119][T22558]        __do_fast_syscall_32+0xe7/0x970
[ 1126.882867][T22558]        do_fast_syscall_32+0x32/0x70
[ 1126.884532][T22558]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1126.886713][T22558] 
[ 1126.886713][T22558] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[ 1126.889810][T22558]        lock_acquire+0x1b9/0x370
[ 1126.891656][T22558]        __mutex_lock+0x1a4/0x1bd0
[ 1126.893220][T22558]        process_measurement+0x5ab/0x2350
[ 1126.895093][T22558]        ima_file_check+0xcc/0x120
[ 1126.897005][T22558]        security_file_post_open+0xc4/0x210
[ 1126.898970][T22558]        path_openat+0x985/0x4280
[ 1126.900673][T22558]        do_file_open_root+0x2f6/0x5a0
[ 1126.902544][T22558]        file_open_root+0x1c6/0x3f0
[ 1126.904233][T22558]        kernel_read_file_from_path_initns+0x189/0x260
[ 1126.906402][T22558]        _request_firmware+0x733/0x13c0
[ 1126.908099][T22558]        request_firmware+0x35/0x50
[ 1126.909636][T22558]        reg_reload_regdb+0x85/0x460
[ 1126.911311][T22558]        genl_family_rcv_msg_doit+0x214/0x300
[ 1126.913238][T22558]        genl_rcv_msg+0x560/0x800
[ 1126.914860][T22558]        netlink_rcv_skb+0x159/0x420
[ 1126.916563][T22558]        genl_rcv+0x28/0x40
[ 1126.917983][T22558]        netlink_unicast+0x585/0x850
[ 1126.919623][T22558]        netlink_sendmsg+0x8b0/0xda0
[ 1126.921265][T22558]        ____sys_sendmsg+0xa4d/0xbe0
[ 1126.922893][T22558]        ___sys_sendmsg+0x190/0x1e0
[ 1126.924449][T22558]        __sys_sendmsg+0x160/0x210
[ 1126.926182][T22558]        __do_fast_syscall_32+0xe7/0x970
[ 1126.927915][T22558]        do_fast_syscall_32+0x32/0x70
[ 1126.929550][T22558]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1126.931740][T22558] 
[ 1126.931740][T22558] -> #1 (cb_lock){++++}-{4:4}:
[ 1126.933802][T22558]        lock_acquire+0x1b9/0x370
[ 1126.935357][T22558]        down_read+0x99/0x4c0
[ 1126.936815][T22558]        genl_rcv+0x19/0x40
[ 1126.938191][T22558]        netlink_unicast+0x585/0x850
[ 1126.939757][T22558]        netlink_sendmsg+0x8b0/0xda0
[ 1126.941409][T22558]        sock_sendmsg+0x394/0x410
[ 1126.942973][T22558]        splice_to_socket+0xb3c/0x11a0
[ 1126.944723][T22558]        do_splice+0x109c/0x1f90
[ 1126.946265][T22558]        __do_splice+0x33b/0x370
[ 1126.947766][T22558]        __ia32_sys_splice+0x189/0x250
[ 1126.948304][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[ 1126.949475][T22558]        __do_fast_syscall_32+0xe7/0x970
[ 1126.952287][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[ 1126.953924][T22558]        do_fast_syscall_32+0x32/0x70
[ 1126.958227][T22558]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1126.960295][T22558] 
[ 1126.960295][T22558] -> #0 (&pipe->mutex){+.+.}-{4:4}:
[ 1126.962583][T22558]        check_prev_add+0xeb/0xe60
[ 1126.964156][T22558]        __lock_acquire+0x136c/0x1a40
[ 1126.965966][T22558]        lock_acquire+0x1b9/0x370
[ 1126.967531][T22558]        __mutex_lock+0x1a4/0x1bd0
[ 1126.969093][T22558]        pipe_lock+0x69/0x80
[ 1126.970488][T22558]        iter_file_splice_write+0x1fd/0x10b0
[ 1126.972318][T22558]        do_splice+0x109c/0x1f90
[ 1126.973861][T22558]        __do_splice+0x33b/0x370
[ 1126.975375][T22558]        __ia32_sys_splice+0x189/0x250
[ 1126.976982][T22558]        __do_fast_syscall_32+0xe7/0x970
[ 1126.978635][T22558]        do_fast_syscall_32+0x32/0x70
[ 1126.980199][T22558]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1126.982242][T22558] 
[ 1126.982242][T22558] other info that might help us debug this:
[ 1126.982242][T22558] 
[ 1126.985285][T22558] Chain exists of:
[ 1126.985285][T22558]   &pipe->mutex --> &common->filesem --> sb_writers#5
[ 1126.985285][T22558] 
[ 1126.989840][T22558]  Possible unsafe locking scenario:
[ 1126.989840][T22558] 
[ 1126.992450][T22558]        CPU0                    CPU1
[ 1126.994476][T22558]        ----                    ----
[ 1126.996477][T22558]   rlock(sb_writers#5);
[ 1126.998121][T22558]                                lock(&common->filesem);
[ 1127.000770][T22558]                                lock(sb_writers#5);
[ 1127.003331][T22558]   lock(&pipe->mutex);
[ 1127.004919][T22558] 
[ 1127.004919][T22558]  *** DEADLOCK ***
[ 1127.004919][T22558] 
[ 1127.007912][T22558] 1 lock held by syz.7.4812/22558:
[ 1127.009878][T22558]  #0: ffff88801d2c8450 (sb_writers#5){.+.+}-{0:0}, at: __do_splice+0x33b/0x370
[ 1127.013308][T22558] 
[ 1127.013308][T22558] stack backtrace:
[ 1127.015545][T22558] CPU: 3 UID: 0 PID: 22558 Comm: syz.7.4812 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1127.015571][T22558] Tainted: [L]=SOFTLOCKUP
[ 1127.015578][T22558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1127.015589][T22558] Call Trace:
[ 1127.015603][T22558]  <TASK>
[ 1127.015610][T22558]  dump_stack_lvl+0x100/0x190
[ 1127.015652][T22558]  print_circular_bug.cold+0x178/0x1c7
[ 1127.015679][T22558]  check_noncircular+0x146/0x160
[ 1127.015709][T22558]  check_prev_add+0xeb/0xe60
[ 1127.015729][T22558]  ? stack_depot_save_flags+0x27/0x9d0
[ 1127.015768][T22558]  __lock_acquire+0x136c/0x1a40
[ 1127.015794][T22558]  ? __do_fast_syscall_32+0xe7/0x970
[ 1127.015822][T22558]  lock_acquire+0x1b9/0x370
[ 1127.015846][T22558]  ? pipe_lock+0x69/0x80
[ 1127.015859][T22558]  ? __pfx___might_resched+0x10/0x10
[ 1127.015887][T22558]  __mutex_lock+0x1a4/0x1bd0
[ 1127.015909][T22558]  ? pipe_lock+0x69/0x80
[ 1127.015924][T22558]  ? pipe_lock+0x69/0x80
[ 1127.015940][T22558]  ? __pfx___mutex_lock+0x10/0x10
[ 1127.015964][T22558]  ? __kasan_kmalloc+0xaa/0xb0
[ 1127.015984][T22558]  ? __kmalloc_noprof+0x343/0x820
[ 1127.016007][T22558]  ? pipe_lock+0x69/0x80
[ 1127.016020][T22558]  pipe_lock+0x69/0x80
[ 1127.016036][T22558]  iter_file_splice_write+0x1fd/0x10b0
[ 1127.016054][T22558]  ? aa_file_perm+0x7f3/0x14d0
[ 1127.016082][T22558]  ? __pfx_aa_file_perm+0x10/0x10
[ 1127.016102][T22558]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1127.016121][T22558]  ? __lock_acquire+0x49f/0x1a40
[ 1127.016145][T22558]  ? __pfx___might_resched+0x10/0x10
[ 1127.016176][T22558]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1127.016189][T22558]  do_splice+0x109c/0x1f90
[ 1127.016200][T22558]  ? __lock_acquire+0x49f/0x1a40
[ 1127.016219][T22558]  ? __pfx_do_splice+0x10/0x10
[ 1127.016230][T22558]  ? __pfx_pipe_clear_nowait+0x10/0x10
[ 1127.016241][T22558]  ? find_held_lock+0x2b/0x80
[ 1127.016255][T22558]  __do_splice+0x33b/0x370
[ 1127.016267][T22558]  ? __pfx___do_splice+0x10/0x10
[ 1127.016280][T22558]  __ia32_sys_splice+0x189/0x250
[ 1127.016293][T22558]  __do_fast_syscall_32+0xe7/0x970
[ 1127.016308][T22558]  ? lockdep_hardirqs_on+0x78/0x100
[ 1127.016323][T22558]  do_fast_syscall_32+0x32/0x70
[ 1127.016339][T22558]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1127.016354][T22558] RIP: 0023:0xf7f28fec
[ 1127.016365][T22558] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1127.016394][T22558] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000139
[ 1127.016407][T22558] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000
[ 1127.016414][T22558] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000000400c5
[ 1127.016421][T22558] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000
[ 1127.016427][T22558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1127.016434][T22558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1127.016444][T22558]  </TASK>
[ 1127.121678][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1128.146323][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1129.035778][T20801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1129.187138][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1130.145785][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1130.235406][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1131.267359][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1132.066235][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1132.306181][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1133.346882][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1134.388398][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1135.107255][T20801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1135.430426][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1136.467974][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog