last executing test programs:

11m34.407959572s ago: executing program 32 (id=508):
bpf$BPF_LINK_CREATE(0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3a, 0x0, @val=@netfilter={0x0, 0x0, 0x6, 0x1}}, 0x20)
modify_ldt$write(0x1, &(0x7f0000000040)={0x8000000c, 0x20100000}, 0x10)
syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)

3m6.710758772s ago: executing program 33 (id=2343):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001900)={{r0}, r1, 0x8, @unused=[0x1, 0x7b3b, 0x400, 0x9], @name="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"})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x66}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x90}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4c0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r8, &(0x7f0000000740)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @private0, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000380)=';', 0x1}], 0x1}}], 0x2, 0x40088d5)
shutdown(r8, 0x1)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x196d}, 0x8)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605008000000000000000010000520500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r7, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/29, 0x1d}, {0x0}, {&(0x7f0000000180)=""/76, 0x4c}], 0x3}, 0x20)

2m43.166198515s ago: executing program 5 (id=2400):
r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
write$char_usb(r1, &(0x7f0000006800)="10", 0x20)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
close(r1)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) (async)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x6, 0x0) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x6, 0x0)
read$FUSE(r4, &(0x7f00000049c0)={0x2020}, 0x2020)
landlock_restrict_self(r3, 0xe)

2m41.88698338s ago: executing program 0 (id=2402):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000", @ANYRESHEX], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b09007a15b3"], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040)

2m38.43974363s ago: executing program 5 (id=2408):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x9f527ef601c99f49, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0)
r3 = socket$kcm(0x10, 0x2, 0x0)
unshare(0x22020600)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
ptrace$setopts(0x4206, 0x0, 0x10001, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)

2m37.986298968s ago: executing program 0 (id=2410):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x19, 0x4, 0x4, 0x2, 0x18ca0, 0x1, 0x2}, 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3)
sendmmsg$inet(r2, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa", 0xd9}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}], 0x2}}], 0x1, 0x4000000)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c918020009050402100000fa000905840240"], 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)
close(0x3)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x20}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x4c}}, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"})
r7 = syz_open_pts(r4, 0x0)
ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000080)=0x6)
ioctl$TCFLSH(r7, 0x540b, 0x2)
syz_emit_ethernet(0x16, &(0x7f0000000340)={@link_local, @dev, @void, {@llc={0x4, {@snap={0xaa, 0xff, 'o', "e8309b", 0xf3fb}}}}}, 0x0)
r8 = syz_open_dev$sndpcmc(0x0, 0x3, 0x100)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r8, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
sendmmsg$inet(r2, 0x0, 0x0, 0x4000900)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x4e21, @rand_addr=0x64010101}})

2m33.762850158s ago: executing program 5 (id=2415):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r0, 0x1, 0x1, &(0x7f0000000680)=""/251, &(0x7f0000000000)=0xfb)
r1 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x7, 0x40008, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x67, 0x0, 0xa, 0x4, 0x0, @loopback, @multicast1}}}})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x240, 0x0, 0xffffffff, 0x0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x7e}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @remote, @multicast1, @gre_key=0x8, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'bond0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv6=@mcast1, @port=0x4e21, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e27, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="00222200000096010006010003000000002ab0a0753883c83e25"], 0x0}, 0x0)
r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x40, 0x9, 0x1, 'd'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, &(0x7f00000004c0)={0x14, &(0x7f0000000280)={0x0, 0xc, 0xae, {0xae, 0x6, "f66b7ff5e71ba14636fd1aad73bf72db669012c3ba932a7a4095f39ee02b01e1bef3ef54e52aee5e9b1121665b1bf086cefe4235a5fa2b6c2ce57d7621236d29fcec4bbff5cae80022e516be05ab177764a6ee68356f3d15667433c463fea3680cfbbf8c4e6c7d5d5b1cba6ddf12588908e28a20d0e7cd92a0c29cb304abe4c79458bfeb4955364cd7a29e62ea90bff728fdb07821d40187f09feafe40c2c44ba665f11f628f656eae5bdf86"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="4010ec00000098efbea60708916ee9996c856831fb41e41985963cf0b777c85540bc9873ec29c96de80dbaef353ff2f5fe1fc6eac1b595fd50fbebe6a8ab78814f1d760016e89c8dbe3ef2f7e4830131802fff9455f85507dee801628ff95be55d6d24b5390f0673c720bbfdcdff965ddd6ee88700a91ffe2cab05a2cdeb4e78db180b2897d88302e0abae1a058d82da6cb27f424571c1606d05ed568d19ac47af2910f22cfbd798d297da0a28e27c8bab0f3f95051001ad738c172d130028468224cf78b7341af4ce449b1bbd76d1aaf2cd1697c4f120983feb170b1095ccb587cef4db939ec430a94db060e535a18a361a"], &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x1}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
iopl(0x1)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f00000000c0)=""/221)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

2m33.166814677s ago: executing program 0 (id=2416):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x44, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x2e, 0x30, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x10000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x11, 0x0, 0x4, {0xa, 0x25, 0x25, 0x7, 0x3, 0x300}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0xff, 0xb, {0xa, 0x25, 0x25, 0x9, 0x3, 0x8}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x0, 0xf7, {0xf7, 0x21, "c4082ab44410280abd7c4b0087635215a0c537495e910ec238b6709b5c27d7579b02991833fbd59fe752a16a187adba15fea9bbcbd3ef5657aacd9536c9a8b9cda7c06561fcdcd1b97c64b7b0bfc8f8bf562025aecfb08fad4792b2e34d90470756de7240336b1ae3d9407cafef2660792e21361c95613fabe940f76783e5112026a4f35373af63c20d7b9e28e5c2db891ab90c58bddf1993a1f539a5c7eea10ae3f073be55ad773132adf9a845b6a199a3defe37a490279f3a174543aa69b9d72601b73b51c7ada10a7ad9176378706ebd532220df825744fde439e105af9c43fb230d063c7b90e1857a5d829b749caf63e0c95d6"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x20, 0x15, 0xe7, "2bdd75d8f6e2e516b33ede7c323723fbffaa0f84f235fea1e0186379c520038e0cf88a77f86ab3f3a03f69438975010685c84ebbfee5e756662056d394d43ac5f00ce04782a85c36174defa0255ea9e3aecbcae057aeeee68b884134ffbb042a036c52079d0b593d4ee65527f7c48b8687d074d911b0dee2f523ecc287380b2d73a53e6571dcf98a7e24ed7ce4439a5d65b8dae7db15d65c686cef5074181687080ef7dea883cf6a7b5b8517e4a4214037abd271ee0180fe6ab4d6c76aac9d4ac1cf58c5a8cea2968027b2e035a3710d1d44534625e956d0ca320660b349df4579cae16a90c329"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x81, 0x3, "f15e81"}, &(0x7f00000004c0)={0x20, 0x82, 0x1, "18"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "372dba"}, &(0x7f0000000540)={0x20, 0x84, 0x3, "614ed0"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "63df60"}})

2m32.394625599s ago: executing program 1 (id=2417):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000)
r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0)

2m30.333195413s ago: executing program 0 (id=2419):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000", @ANYRESHEX], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b09007a15b3"], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040)

2m30.079850056s ago: executing program 5 (id=2420):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000180)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003600))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
remap_file_pages(&(0x7f000069b000/0x1000)=nil, 0x1000, 0x3000018, 0x6, 0x24001)

2m28.835875487s ago: executing program 1 (id=2421):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000140)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)=ANY=[@ANYBLOB="48000000420001000000000000000000030100000f0000002600010000112233445566778899aabb08004500001c00002000011100000101010102020202000004000280040003"], 0x48}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r6, 0xfffffffffffffffd, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r8, 0x2, {0x1, 0xf0, 0x6}, 0x2}, 0x18)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202"], 0x0)

2m28.702134953s ago: executing program 6 (id=2370):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)
unshare(0x2c020400)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x6f4})
sendmsg$nl_netfilter(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1b0, 0x6, 0x1, 0x301, 0x70bd2d, 0x25dfdbfc, {0x3, 0x0, 0x7}, [@typed={0x101, 0x39, 0x0, 0x0, @binary="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"}, @generic="54daf73ec164e805f7c4cb5f72ad4b4783069c9c29b02f130480fdc3b8f64f66c7257a9624913b24539794b3fc1235ded761c34ba65cd9185127c1abad9d1d88b9ab5157a23e53ed4c02c4b911ef48d79d226ab8cc3234f65fe243152d2c34062f0192035e6210a660b6540bdac3d99e0e90f6b3bd8cdca074648bbe34162accd967d8ffc5f892934a5428442caea435b38e75355f9ec8"]}, 0x1b0}}, 0x810)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
modify_ldt$write(0x1, &(0x7f0000000100)={0xe, 0xc363ac0399f6d33e, 0x2000, 0x1, 0x2, 0x1, 0x1}, 0x10)
socket$inet6_sctp(0xa, 0x2, 0x84)
syz_usb_connect(0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x4, 0x2, 0x7, 0x40, 0x7f}, 0x36, &(0x7f0000000080)={0x5, 0xf, 0x36, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0xc7, 0x4, 0x400, 0xff0f, 0x7, [0x3fc0, 0xff3f00, 0x3f, 0xff0030]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x0, 0x5, 0x4, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xe, 0x3, 0xe}]}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x827}}, {0xd6, &(0x7f0000000180)=@string={0xd6, 0x3, "23cf4bd834e3483e5b70912408db0e93f895d08a552e47e46394260321216dee653938bfbf822fa30f8245f4c8f3f03d377b00ba16db114045d6012168f3120a34f124e7e6295a9462b383789c57896956f4a1a302d02c7ec9f631511741640cfb4034d21adedd6cd9820bc85d46d8efc17ed4909298d2a82ef20701e2c82c0bff76f8f1731b1c91754ba30f1d9cf7c19186c334e443c12b7749e5aff1d568b10940867a528a25b4bd8111550792d69e4117eaa8dc145ce41930f683e9fc0e45a12d3435d51cc58a391670788953a6fff5a8ac44"}}, {0xf, &(0x7f0000000280)=@string={0xf, 0x3, "e81a8bc2b9c70bc500e3a0fd97"}}, {0x49, &(0x7f00000002c0)=@string={0x49, 0x3, "4831b706edb747e6f58da65eb4e4cae05cf5cd4b0aa317cbfa320cbcc065c12f95d70f3759f3313ba1074b941f1df8f1d9107a4bb48e4e8b1f5ac7799154da9d4e429004b97d63"}}, {0xfa, &(0x7f0000000340)=@string={0xfa, 0x3, "af728503ca2f03fbfe7816b2da2f05eea0b79b9fc5b68b1f9e6924ee2588e777a2db421430f046af3864a65ba4cb4b6fa4252dc61625f165a7f7705f8b63d1779d07aac753dd5d8f902799482bfce81a0a203163e68623fbfaadcdf3c3eb9552fc16f68fa6887986b6562ddb715e6e0dc3b54db04f43625b85ba60383bc1b0cf4d350d413ccdc77c9ac3bf2ba9fd4ff1d1d423a7d8f6cfec41957a99cf3a45e0277a217acc9bbfdec0352679e0af159ae90e22d8fa469bc588d0c75c099ebc95f306e80bb4683b0d4d610d9186aee8378cbb447c2edaf1bda0d38fabfba58eefc3eb31e37b3d00986de84136954e8777bf4bde020cb302ea"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3c0a}}]})
read$usbmon(0xffffffffffffffff, &(0x7f0000000780)=""/4096, 0x1000)

2m26.708321672s ago: executing program 0 (id=2424):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0)
migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000300)=0x272)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x38, 0x20000000}}], 0x1, 0x20040801)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x5dc}], 0x1}, 0x20004014)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000090000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
sendmsg$kcm(r7, &(0x7f00000018c0)={&(0x7f00000005c0)=@in6={0xa, 0x4e20, 0x80, @local, 0x2}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000640)="4ae6521efad3c38f51393d2c8a41d0fffd7fc93d7e7566ec121bc3d00144429ab56e5dfa5a43b1f999ddbeb8f3e47dddf67de6ca061775bfc64c8cf60fe1e67b03a4b2456aaedb2b95d2f758d418a493b2157aba945cf266af78029aad950875b45c16b760c50ad1521bcbeb1ca9eb3c6308f10c8d8515c32ebb8c3ea6c8979164bfe4de4ee12cb9dfc6eea52915e734010c63338d7066370d85", 0x9a}, {&(0x7f0000000880)="e9dc11b153070b8a31481ddb0fb80bfb5eb3a12a002ab11508ca1d94fdc65416725688788df08f994d8bb549b0d939c92eb898c9688aa34d3e6142d9cf74bb5b905739bb7800eaefe67187f710d9fb4662b4f44197048e6b142432ae17fb73076352957c395204c63c50fdee4f1c8523e64542a787e6c51d43d1ab0117ac753b0b30c3fc9f344a76864dc16a7cd81e30bb70e98aa403ddc87ffde0fca1ee499c9637a8dc5335697a6a1c4032ae1977585789512c210c8ad269e01664651237841f82d59df65bc7353aa0eed59a80b03279f35b8283fab7c6c687ebb78eed25d26d522e139cbe8692c81175b512f55d35a2dfbefeeef185346c705e6c286b9aefd9d9c2fbad33bcb888cc4ddfaf1f76e65570cec8f1f6a7fb5dbca3250b8a2b85588ae26fe1d607329bd125ba357f633b04af17c4f5991df39ea23d076c2aff940a61297cf60585af47906c13d50ca11612ef385b6df611b0488ab6e1369946290c99962cea99d638205a3bdf221415aa0c3df142b0794f18df8150f2c50c7049fb6de1d54ca02a663b03eb1e3b3dc283987556800785a56d5d9debd81f20a2db67dacba5338913d5f8f2e749b3630edd335f3f4082f9fb7430115907f28ca1ed10f1d3377f40065e95f93150a1929d78541e7f556633da3c9b27b309996b81f47414a9cadf7d55fa78bf20c87547e009504b48abfa67c59d0887d8c14209053f1c1de363b1345c330f97053063813fb2946d8cd77567c718abef7cc5e149cc0beeca242adea8576c052f0ebef1f7a7d47195eeeb61ee648d485effe04773252cd29613d6a8d4e8ff1f578104f51254157b3e6236e02a92f6167e9df184491e8bf223a08b63788042f96665c59a4295a5ddadc396569cafdf023dee39a5772a880195b67e323f129da395cb00ccffd59f0293364a5fefed68c77edcba93f69852dbd130cf80f1758cdee595fbb11b66058f5c1c62a9c2f427f92aa1fe44276b722fc8dc789387bf37c42e00a82377af873353995a1e445d492f41fa48fc17cda8a8181a1f8ab0aa608a5c9230e2b79b3d655d9f4dcdbd45d4f758bcc1b7bfe37640f8289ce063e130ba49b986dab9625cc86e4a056f3b06c61426fb6a429b055e34690a82333c9c02b999c41746917c46ff4a4ca725966e1ef3f0e79dac16c914279fa88baae7812c9ebd1412d6a5a9c80b919402c82e09546f7dc3aa6f8f012def3d3a0f699de31bc3635d4c11fb2f74fbc1ec91820a74ddff9c8b7150c5c8ed30c01da56d5ece4ab127f723b809b22f371959ac185033b03fe19d372acb93e0002b102d4fe59f34f83391b2c7350caa41132d9dc592a2bd1695c6cb94f845729e268807fc80fa14813509c3125ad278af200b8cf2e3a09fb81520c5b493c0aaf51528e5fb48aa994c1a603585be9a651dff9822a5301e07fe7535b150859303183002d2d6e0933dc7dfa16f25c59c16d68039aa95dcd712411451ac127ba6724e9ca5c94575999cc045769dfcdf135a7db4bf70b60d7938296ca35e83c886f05ba9142c257b91e7de14b95de58c201960704aa2f26f858ab3777e561bdbe4c5e5eff44536246218eb74ae272cae42969a7b15af7731b68e0a3f293f96de071d3e20eccb3ad976790c0d5b7d68f79a39821eab7f93d1eb16a8b0083f96dd3585c54bef0281004f5308c1e692497ee10f1f6361f157e1dbb5b3952516fbe6c0ffcee29f901645d59b247c5b600e2a9e222062bddea3ab60fc516f6eaf3a3de2d30d669f3ecc048044358415ecc48a32c23e2b5f88d5e8b1711729d5f32c1e1176374ece19141abcfced9471e6ccb78a235f3493ac95cb088c6868dee6969137ccdfb3f8cc3255139c4041bc7423c203dac5e7f7c30da2bfc8debb8e72b4ca88bc7398d44921606e0395bb9d86151f06eb4dfaf7e1ea6a4f883f9ad6701cc9036112880c2b06d4a03fd46dfe580f7d38ac3330f463803deb763ee7dff0c2320d76ffa4fe49ec14336f28cf566fd0122406678bc81262a9f76a6af3ab0793310cc2d92baa556614fd8ad4bdc2dee440a641165a4db7318a54bed1cc6b55224bacd04c5973ca8e3afc9e1911e236122a5abcc1bb73219b8a22d437afedab26d617cee33e072a3c72f51124499226b8ed6c19ec6713b78fffb5c025d2bb40b8586b33ed4f59ae6d741daaa4a9db9d2839c8528964ec93acb6d8d392b45f06df11292949e83b902d8fdf89c2712cf1406909e7edeb40eab0d2f4ccb160077108e46df8efedcdf20cb73b0be33ef114314f2fa6bc0cbb79793f686d78ca6ced0ba8221e1c50cdcec27da71768e10afb36b9dfd9e14b32a107dee6e253251910d4b6ef8649d9f939d91adaabbcb584dcd0d68d8a2bbf15b456654c5ddccb2dda3857027fb07bb7ed8df390d67e23519093b34b6c3224ce9dc5ec9fb1015213debac8058c300ba083dc93a240337ff3970464e1464c6208ebfc44c907de43507814194799ddad87aefb11042fe2932d56a3c1109aed8ebd9afc28899ec22d882904ee733264dc6a94b8de52bd810b6505bf99678a964e41b090482ad13fc9bfd783e939973428f402d88152fc50ed146e307d344a8b06c7df3b8d8b31f93021672e223c174e8c2a0cef30162a50c74dcbfc3aa6ac244e75a2dbbd295335b9311d3242c567f58b26cf94363c5501e9b039a496cb8252b0fd6299cb0a0f7f46c7a18d6e86bf8dda1865f61b7a272410993dd3d890b56e409d06dc98e3b8664b2738a759930022ff083614c568e118795143f93e43507aa75da257dd7cd07055946d5996155df43f50d571652c731fffab235bf27539bc246f21c1c709e1271370b5c911dbe1eb4aabf5ff2fb4f1d735b3218a3920af24a5bfe957f37c6e238d9ac088af83e9c697e323affab25d5c850b6c69aa2f8a8cb1939b1e0d9d2389ec6188516b69b4e30a19cfeb8ce743e22200d101dea5fa53a84a8f8dfb558aac3e993b45474b188892310452319fb07a8c57d9549a3b297e6143b90ca5f03cfd0c070524676e94fb7dfce316f967cefc10565a57fb954fcbe11ed2866d09ce0961ef904bcebf156b8e402bf17954cc81ab38070a965673abcdc5c838ebe82c872b82a12140d080a33b33a9be18a3c7f7575f5988d6004f0cde7982757d32e0ab85675dec1b5c60a14775201ffff4e4b17a51cb273970f6a927e157b35847809838107fd94b79be13b55e483b9b72c696acef408b569b07a000fe025a4b8c90bd050feb788db9d02adc934ddce8c9fa92741e2d74d31cb60d9534a9104fabb3af6f63c5346f3760952c35702ec14dd1a37d8465ed32b2b516ecf51514b494c586329a15eb497782a8da5645a1922b381dd9943dfd55e239a6452d2e2cdbd061dd03b55cc8c8cda006e8f6fb985f6372486312c79e8bf105e33c2e8c2c41caa798bce7d9439093ca77c0e4f753d86959bc1ecf1f0d80194a1c326e7cb87daa4efda212662947ada4ffd5dab4f94e1639f3d4f77edcc8ecf5cf19dd0f67e76bd8802975929c4d3ef5da32ad0eb8b1d333ca5cbf0cf3b79eaf109fa90eeb290f732b781cde39adf9fed0c18cd8732d7f6c903176e3576a01e7ffb0bb3ae01f53d811bee5969a1f57be06a93613c7c22da50a0e480829bbde3477877eea2a58b8394f27e278c4893110f65d6aa60e3cc2cab35b92beb8aaa9f385054df63738a375e413324e76c9149e00c2e1f445c8a56bfb3954254f0bf89c2868c3ae381d004fc5b79a1cec813fa9d08a69dd28df392ce6e96f1f06f75259519a8414083583ed5ea9ec63320840d40ffd0c19191384adc9988ee9b8e98be673c25072f3a9621697555a14675998a1dd4d37c0ae582d25da547c670165712c06428fe75aea8b1445fbda1be54a5de873ccfcf408cfb568e9d683cc8d329d09d6f905337bc17fdc95b9ec0adbb3cd093e51ca9b8740f6911f638026748f20a4cc958ac5c35b5a079712d3982428eba423335a795384e64a3070186d6d9a6e649c802bab90faa3d82a726c3423851c7f7beda89eea1e3d69b4a0f20ab13580da37d7b51dff56bc5a03c4db6c0a3168bca8e34d8991aafe3a21d354bea512d0b49efec53b40d25963700a24ccb208db2379bbb59f96011893c4e4e40fef08384d3e0533792cd392e89c49aea48e3d58e886870ab3d65606266ae30fd996e5be57c0041221ceaed90be064ad7933306b33c0ca07f2041fe17fef2c92586a4a923fe70b7c649c7fb90b2890b0442fce057715fc3e2746bd5cd37757c378a7d74f4025a1582835d3774d24d1b0c65d21fc15c9baf1580be51b3bfb64d8f98bf4fee93cacce8318328ef33331caa96d22341f7aa64a8314da954edc8f91af60101ebabd0142c261be5d6673a503b5bbab8f49974a8ee35c632e6d35ea7e60ecc2352c1e25fb93c8fa9168e2d17e2bb7ab33519cc4af294b7ec24d8c79a733d70b19686d641e2ea8e5830ff8076aeeddfcd1d75ed5128dfe6d776472b9124e88903c53abf8a5dff84f3b68baa75ca99921192eaba9ac42b6ef9e46442f08664e3831ddedd47d41eb79cceb399c3185a2aa83be19a1f958e9731ad4453489fc842ccc939b83784010056fa7368a487fd9a9f362ca50e8a443d5aca0f497afb73c812857119911475dcaaabb7d63bbf681e7ab5f3d31bb723cba8041e5b2bb69b0e80770d7192ce5026dfbb391567940522496db37736d7cdb46576948b099cc0fde4e3b620a8da46e9fefdb4ab6aa77fabdf89186b9f54b911627473df77191e758b565439c7d09a5dc40c32621f45913b9cb737ee8c083d3be8bb1cc62f7f3bbd84f00e727897385a5865a5f5f11cc5bc2af3c9bc8de71b28e30b3801174d8894c606e578980a387a146a2d6deed36d4a410b840539690fd35b9f009adb10edf19fc500560c6ab997249a20a1f9c1398b7f5d9c13a5d0feceab3eebf8d5bd698735f22bcdedd3a2a43d78adf6a003b05604f464e50230f412898338b1b99388811f63268feca1578d6be48eaa33c3ef59469afde1b4ce79e64f0149e8c3d51db3f3e6c645053892115c560a5932cee991b1cc83ade0b3104e3edebdf24aee38ae5647de7b3d709fb95517ff9f8f5c89a14556337a131d462ca7366320d2f514e4afe1e33dfe12b1e09644b19eebecfb2e46d7e2035f489eec1183c28ff1b804e11a2071f4c6cd8b662b2bfe3970c6415f0f8caa631ab9e4d1af463e9f10f72dc7a7d6d3ede8a3f3010f5a35883c630841895f7b8e66ddd07b60e7b8c543edaf809d12edd3ce75f8a8f9e9bc188d868b9136a9815b48a122a5cbfd61cb252731fb120623ddf6806f46ffaacf5297c38d3694abdf7cf6bdba7a1a74944f2b889cc42b4fb3ef42f1b5e7d9153dae7c53259a13fa1db14408004161c0277f30a8b76267257835c5d38606b4f2ab1d012e0fb5ffd570e5da83cfd3bea0a942f90b11b66afb74cb31f1b36738a237527a4878d7e482ececf571bdfa8354617a8b0314ac36c67fc49e98f9f0c85f0caee03b038faaa3b50ee521de59e4a49fed4576eb7b95445984d1af7f7ea74aa92a2406ea5e4edda7b8dc9471f0ecbfa6f7c631b43632b5ad434d6193d3cf53e1a94680a2fd50b032633291c555757329aca14ae88397ed99336ef13ba477a359d81ae5293c47c4f179ec0bb1d15406bfdb87b9440081351bf9f270fb8b0b61f362e7eae36ceeebc2b1b501b9424227abd6a02058434d8a2477872f37cee437e2732288c2ddcfbf54ed5842d51186d9b008bf5a44c55f24502a1c0daf34eb827221406a2436c0033", 0x1000}], 0x2}, 0x4040080)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2010000000100004199f8c6aa4a", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r9, &(0x7f0000000600), 0x0}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000240)={'syztnl0\x00', <r12=>0x0, 0x7800, 0x8, 0xa, 0x5, {{0x3a, 0x4, 0x0, 0x0, 0xe8, 0x66, 0x0, 0xe, 0x2f, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x1c, 0x3f, 0x3, 0x0, [{@private=0xa010101, 0xb}, {@private=0xa010100, 0x1}, {@broadcast, 0x9}]}, @timestamp_addr={0x44, 0x4c, 0x1c, 0x1, 0x0, [{@local, 0x101}, {@remote, 0x1}, {@local, 0x80000000}, {@multicast1, 0x8}, {@private=0xa010101, 0x3}, {@remote, 0x3}, {@multicast2, 0xff}, {@local, 0x1}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_addr={0x44, 0x24, 0x41, 0x1, 0x4, [{@local, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010100, 0x7}, {@remote, 0x7fffffff}]}, @end, @lsrr={0x83, 0x7, 0x56, [@remote]}, @cipso={0x86, 0x3e, 0x0, [{0x0, 0xd, "a7a19905724386f1b73fa2"}, {0x1, 0x5, '{ry'}, {0x1, 0xc, "8085c85a9da0819de7ee"}, {0x0, 0xf, "0454b2512279265a413270e42c"}, {0x0, 0xb, "0ad0fc3d2d5ab75fe0"}]}]}}}}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xac, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffff543}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xd2f5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}]}, 0xac}, 0x1, 0x0, 0x0, 0x90}, 0x1)

2m25.869396838s ago: executing program 5 (id=2425):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x200, 0x0, {}, {0x2, 0x1, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800})
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000eeff00", [0x0, 0x31]}})

2m25.649190471s ago: executing program 0 (id=2426):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x2000006, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x80007, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0xffffffff, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x12, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r3, &(0x7f0000000b00)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_supported_states={{0xe}, {0x2, "17033026e212e277"}}}}, 0xf)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x10, 0xa}, {0x6, 0xfff9, 0x9c, 0x3, 0xfff9}}}}, 0x17)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x20004450)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2e, 0xca, 0x57, 0x8, 0x497, 0xc001, 0x6c24, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x7d, 0x0, 0x0, 0x3b, 0x2b, 0xd7}}]}}]}}, 0x0)
syz_usb_control_io$uac3(r8, 0x0, 0x0)

2m25.647299592s ago: executing program 5 (id=2427):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000000)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001f00), &(0x7f0000003000)=0x8)

2m24.43097351s ago: executing program 1 (id=2428):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)
socket$netlink(0x10, 0x3, 0x13)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4)
sendmmsg$unix(r7, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x117}}], 0x20, 0x20000000}}], 0x2, 0x4040085)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, <r8=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000500)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x200000, 0xffffffec, 0x334e8a})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

2m24.068108145s ago: executing program 6 (id=2430):
pipe2(0x0, 0x80080)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0xfffe}]}, 0x1, 0x0, 0x2}, 0x1)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0xfd, "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"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}})
io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x1, 0x4)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40840, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000140)={'filter\x00', 0x0, [0x5, 0x20000003, 0x20000000, 0x4010005, 0x393a72d]}, &(0x7f0000000040)=0x54)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4040}, 0x41)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, 0x0)
connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(r8, r9, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00')
write$proc_mixer(0xffffffffffffffff, 0x0, 0x8c)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff, 0x0, 'dvmrp1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x80, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x687, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390)
close(0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)

2m23.269720098s ago: executing program 3 (id=2431):
socket$unix(0x1, 0x2, 0x0)
landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$inet6_sctp(0xa, 0xc986e5f58795008c, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24040045) (async)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x2bea0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000580)=<r5=>0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000680)={'gretap0\x00', &(0x7f00000005c0)={'gre0\x00', <r6=>0x0, 0x700, 0x7800, 0x8599, 0x7, {{0x23, 0x4, 0x0, 0x7, 0x8c, 0x68, 0x0, 0xf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @lsrr={0x83, 0x23, 0x74, [@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @rand_addr=0x64010102, @multicast1]}, @cipso={0x86, 0x1d, 0x2, [{0x2, 0xe, "4ae866533e7e12a1d1535b23"}, {0x7, 0x4, "917f"}, {0x2, 0x5, "82db94"}]}, @timestamp={0x44, 0xc, 0x60, 0x0, 0x2, [0x9, 0xfbfa08c]}, @noop, @lsrr={0x83, 0x7, 0x6, [@remote]}, @lsrr={0x83, 0x23, 0xb3, [@private=0xa010101, @broadcast, @multicast2, @remote, @private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f00000006c0)={'syztnl1\x00', r6, 0x80, 0x8000, 0x63, 0x5, {{0x26, 0x4, 0x1, 0x9, 0x98, 0x68, 0x0, 0x1, 0x4, 0x0, @empty, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x200}, @timestamp_prespec={0x44, 0x34, 0xf1, 0x3, 0x2, [{@broadcast, 0x4}, {@remote, 0x7}, {@loopback, 0x6}, {@loopback}, {@multicast1, 0xfffffff7}, {@rand_addr=0x64010101, 0x32}]}, @timestamp={0x44, 0x28, 0x26, 0x0, 0x5, [0xf0, 0x3ff, 0x2, 0xdbd, 0x9, 0x10, 0xa36, 0xfffffff9, 0x5]}, @cipso={0x86, 0x1f, 0x0, [{0x2, 0xb, "5ca0d31fa18b274ed2"}, {0x1, 0xa, "612b914fbcc0f4dd"}, {0xc, 0x4, "cfd4"}]}]}}}}}) (async)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, 0x0, &(0x7f0000000280)={0x0, 0x41, 0x8, 0x2, 0x258}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffd, 0x400, 0x6104, 0x86, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7421, 0x0, 0x1, 0x388, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8, 0x2, 0x24d}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x25, 0x0, 0x0}}, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
getpeername$inet(r9, 0x0, 0x0)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000000240)={0x80, 0x3, 0x3, 0x3}, 0x8) (async)
bind$inet(r9, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') (async)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000115b16ec52f85704d0000000000004dc1b55fc6b508000000000000004782bb69b34ab749ac77cb75c32cee088ff6b65bc73e"], 0xc)

2m20.661409658s ago: executing program 1 (id=2432):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
socket$inet(0xa, 0x801, 0x84) (async)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8) (async)
listen(r3, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)
socket$netlink(0x10, 0x3, 0x13) (async)
socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$devlink(&(0x7f0000008280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)
unshare(0x1e000980)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

2m19.902935551s ago: executing program 3 (id=2433):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r0) (async)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x7}) (async, rerun: 64)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
userfaultfd(0x80001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="200003800400010010000400004017b402000000000000000800020049"], 0x40}}, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x42043, 0x0)
ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0}) (async)
openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
read$FUSE(r6, 0x0, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000400)=ANY=[@ANYBLOB="2cbd70000bdcdf25000000000000000000003d0f2341668a5c000000224127ea152c9c4199d06e4e24fffa020080208800"/72, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000000004d53300000000000000000000000000000000000000ff01000000000000a2000000000000000700000000000000fcffffffffffffff00000000000000000400000000000000ff7f000000000000fe4800000000000004000000000000000900000000000000df5f000000000000940b00000000000005000000f8ffffff0900000026bd7000000000000a00027f010000000000000003000000de00000008001e0056340000ac000700fe8000000000000000000000000000bbfc0100000000000000000000000000014e2200024e21000d020020a032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000800000000000000100000000000000008000000000000000200000000000000100000000000000009000000000000000002000000000000490e000000000000d8ffffffffffffff0900000000000000070000000000000005000000b36b6e000100000300000000"], 0x1ac}, 0x1, 0x0, 0x0, 0x4075}, 0xc800)

2m16.152968139s ago: executing program 3 (id=2434):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000", @ANYRESHEX], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b09007a15b3"], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040)

2m13.215701604s ago: executing program 1 (id=2435):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0)
r1 = dup(r0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r3 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xb1e1, 0x2, 0xfffffffe, 0x181})
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001"], 0xc, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
close_range(r3, r3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000080)={@rand_addr=0x64010100, @multicast2, @loopback}, 0xc)
listen(r2, 0x8)
r5 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8)
fallocate(r1, 0x10, 0x0, 0x1062200)

2m12.837997161s ago: executing program 3 (id=2436):
setns(0xffffffffffffffff, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000100)=[{0x7, 0x0, 0x3, 0x3, @time={0x1, 0x7f}, {0x5a, 0xe}, {0x8, 0x5}, @raw32={[0x4, 0x9cf, 0x79]}}, {0x6, 0x4, 0x2, 0x9, @time={0xa4, 0x1}, {0x48, 0xb}, {0x8, 0x3}, @ext={0x4c, &(0x7f0000000000)="f95c3b51f5944e1148e9f34a8955b22342fcca241faa9d6a5245cb44086bc3fc0023b208240ed0f4e0278e206bec24437ade8ca9b543d7b6ee8e9e5aed79a3a79ef1b4f8b049d6b546dfd910"}}, {0x1, 0x81, 0x2, 0x8, @time={0xe, 0x1000}, {0x8, 0x5}, {0x7, 0x9}, @ext={0x73, &(0x7f0000000080)="ebcfbfff86fbf2adcfce20210eda376681b2fc5bf49c597adca3e2a6eeb17165bb7e4d3380db0546d7e32d271289f436e9fdbba25b143ecfb2bb2264e2ef5fc9275d458de03b743940bd0aa3bacee4d8f7d54039e79f82da8f5f16766abd207ac2c1c3085c434242a95d9cfad116567be7f876"}}, {0xf6, 0x1, 0xe, 0xc, @tick=0x74d35beb, {0xb}, {0x10, 0x4}, @queue={0xc, {0x968, 0x7da}}}, {0xf, 0x9, 0x3, 0x8, @tick=0x6e, {0x7b, 0x6}, {0x0, 0x4}, @addr={0x7, 0x1}}], 0x8c)
ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000001c0))
r0 = syz_open_dev$vivid(&(0x7f0000000200), 0x0, 0x2)
lseek(r0, 0xffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000280)={0x0, 0x6ff, 0x5, '\x00', &(0x7f0000000240)=0x5})
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0x1, 0x50424752, 0x1, @stepwise={0x8, 0x2, 0xa, 0xfffffffd, 0x800, 0xa87d}})
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000300))
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000380)={0x0, 0x9, 0x2})
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000400)={0x4, "f7dc55aecddb9949b74bc9347d387055fffebbff0669e8b283581af0267f4597", 0x2, 0x2, 0x2, 0x80, 0x4})
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0xed, 0x0, 0x3ff})
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12)
ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000500)={0xc1, 0x0, 0x2})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000580))
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000640)={<r4=>0x0, 0x67, "b5454747257499411e43a1ad111dba3a2952c6a179c55c09aa81269243b2296f2063ebf9866209856aacf055a4745381c864191f4cac0f18dde42ebe13db98d88131aae6323408573017e3426603dc2c589242de2d1466abcce6db7653d3227831335dbc2734b2"}, &(0x7f00000006c0)=0x6f)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000700)={r4, 0x9, 0x400}, &(0x7f0000000740)=0x10)
r5 = socket$unix(0x1, 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001d40)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}}}, &(0x7f0000001e40)=0xe8)
read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
r8 = fcntl$getown(r0, 0x9)
newfstatat(0xffffffffffffff9c, &(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f00)={0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003f80)={0x0, <r10=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000004000)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f0000004100)=0xe8)
getresgid(&(0x7f0000004140), &(0x7f0000004180)=<r12=>0x0, &(0x7f00000041c0))
r13 = syz_clone(0x1700, &(0x7f0000004200)="21de367b5263945a0ae372bbb3dd6a9f5d4d34035c636377107879ffee9e96846dee4528fa765b3a4a284431232867f7d55679b3382c7e747537a9c40554243c847e6f9a3e6bf4b2bcae2ed90c7d12b9", 0x50, &(0x7f0000004280), &(0x7f00000042c0), &(0x7f0000004300)="9a4157c4824085c0d89df4ff3be8a592a87c22510ed2493e6d1353443cf6b736f1237e7e1ece1fea6c6be9ac2b31656b68ca704ac5153bfbd35455ef2cc6c581e7ad7d3441d7cf2f134e8b40fa7999868494ce37877bbf37e3c16052935eb97a882d706929594f3c8d8df7ec2872e656c97928c171295e278fc34bc75acd155e6f72fc5b566b37106e20c244d49bc765362fcf932dc17dd65cf88e20adcc0662d58ced4109230b4183cbbea3c3043e1e82365747")
lstat(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
sendmsg$unix(r5, &(0x7f0000004600)={&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000800)="2b5ce0f515c13dd5c07fdd0bd637399b709425ddc49f8fac60b3f9558ecfa6669a8844c5809c02a96962b72ebf1e1c83f4a26aae43febe1d33b498caf601ee02956888db8f03a24056f7e4789e8694d7b3a2c91e41564722d196ac3436ddf9acb0abc50db1ed2fd024913c403df533107655142ecebb3c4e749f75234445f0db92394dd2efe748054e7132d446beb0dab67a4cab17ca1c3270515cd23cdedafb64029aaf395736c931300a", 0xab}, {&(0x7f00000008c0)="3706a89cb8cd1003d103a6e00c7b9889fb8185b58d99fdf9afffe24e36f138c687406dc9b482d1782ae41157877b394ff9d7159207bb4ec6686b806ad0db4a6d81ae63d79e5879ebda748fa04fef6577809397bd8bbaf1ad67944048b027c2346846ea756502c9ddb2878b0bfda76167c6caa44562d398a6e85acc32c734bcb2b5a4de382098b8d50986a146b866fc9bb7663a3f6b9f2b7b6e131d327098d15feaa186ee8378010e483a25eb9410e5308a3747fa02a63d7d4f114a4fc66771a177693b628396e5d189d348390a5c229b6e75ccec6b8f76be17e578", 0xdb}, {&(0x7f00000009c0)="d366163a80cba7492eac100040fc8d5054a8e1af83bad9744e2b61f9bd61fbe346a996dfbc61ee5e65df60aa21e2061c9536236094d9036e12584af67840222b", 0x40}, {&(0x7f0000000a00)="0c9e3ff0b7ecc39a29c53e57e0725f59caf39739d4e6bd71b1471addf1282aa59d4c6914d02067e6b4189083aec0782b9489fbb0208923", 0x37}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="f601970453d45c693218f57de0db3ab1752d82d6288eca9f772dfbd05004972a28724a04cf8e71d77d4d55765c1893fadeecf77b5b0045a7a0e5f317a71926aed724b05fd63835", 0x47}, {&(0x7f0000001ac0)="d3fcd773ac6a849c485b70327dc6deaa18862638c35fdd3f69ddf6ebc5d74cf695c8ef1828048a8007408e349efd384f83c402e6882dbac713dfd18d93876f68efb3d8461b0e248adc620ea0b7b54a93096fc2c28840c8043d3db723b4e9eeef946b0aeb76210a7401c9f69791b06a8c22ded938e86a7616c391a7eba0d429aa88778e3e364fcf6fc50624dd1b", 0x8d}, {&(0x7f0000001b80)="89aed3429bb49f2d350648d9ab0dca685b4ee29dbe095992c9620ed302e929e9736b9669a248a3e557b9dcca5d2ce3703bc1c1e63a37", 0x36}, {&(0x7f0000001bc0)="5519cc86f285e4277a52819c165dc8ba891a263fc69aa9f8910fa728bbae1f839ce3e3c8d8cd993e44d9a222a5b853ea55ce226d48537b0054f8c2ec7024af899543f31b1c0edf83873c5e024b7d187608b9ce76172d292557a320ffd1e71f58d885fdd92b5ec2cf66e17a59bccc89f923f6dcde89a726c4da8b0ed60929ada7da84cdcb0d", 0x85}], 0x9, &(0x7f0000004540)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xee01, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xc0}, 0x400c001)

2m12.511154247s ago: executing program 3 (id=2437):
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x110000014})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff0000000079a100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20}, 0x94)

2m12.33698346s ago: executing program 3 (id=2438):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x18)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r5=>0x0})
socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r5], 0x20}}, 0x8080)

2m12.079485682s ago: executing program 1 (id=2439):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
epoll_create1(0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, 0x0, 0x0, 0x80000001, 0xb66}) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0)
r3 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmdt(r3) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x10000004, @loopback, 0x5}, {0xa, 0x4e20, 0x3, @loopback, 0x800}, r5, 0x8d4}}, 0x48)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r5, 0x4}}, 0x10) (async)
close_range(r4, r4, 0x0) (async)
syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0xb10, 0x8e2, 0xa20]}) (async)
r6 = syz_io_uring_setup(0x617a, &(0x7f00000002c0)={0x0, 0x1992, 0x20000, 0x1, 0x15a}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0))
io_uring_enter(r6, 0x1b60, 0xe8ba, 0x0, &(0x7f0000000400)={[0x10001]}, 0x8) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000)
munlockall() (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) (async)
r8 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0)
ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f00000005c0)) (async)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\'Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\/\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9H\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7', 0x0)

1m50.428427903s ago: executing program 34 (id=2426):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x2000006, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x80007, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0xffffffff, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x12, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r3, &(0x7f0000000b00)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_supported_states={{0xe}, {0x2, "17033026e212e277"}}}}, 0xf)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x10, 0xa}, {0x6, 0xfff9, 0x9c, 0x3, 0xfff9}}}}, 0x17)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x20004450)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2e, 0xca, 0x57, 0x8, 0x497, 0xc001, 0x6c24, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x7d, 0x0, 0x0, 0x3b, 0x2b, 0xd7}}]}}]}}, 0x0)
syz_usb_control_io$uac3(r8, 0x0, 0x0)

1m50.150053787s ago: executing program 35 (id=2439):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
epoll_create1(0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, 0x0, 0x0, 0x80000001, 0xb66}) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0)
r3 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmdt(r3) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x10000004, @loopback, 0x5}, {0xa, 0x4e20, 0x3, @loopback, 0x800}, r5, 0x8d4}}, 0x48)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r5, 0x4}}, 0x10) (async)
close_range(r4, r4, 0x0) (async)
syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0xb10, 0x8e2, 0xa20]}) (async)
r6 = syz_io_uring_setup(0x617a, &(0x7f00000002c0)={0x0, 0x1992, 0x20000, 0x1, 0x15a}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0))
io_uring_enter(r6, 0x1b60, 0xe8ba, 0x0, &(0x7f0000000400)={[0x10001]}, 0x8) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000)
munlockall() (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) (async)
r8 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0)
ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f00000005c0)) (async)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\'Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\/\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9H\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7', 0x0)

1m50.029348604s ago: executing program 36 (id=2427):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000000)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001f00), &(0x7f0000003000)=0x8)

1m49.564988422s ago: executing program 37 (id=2438):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x18)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r5=>0x0})
socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r5], 0x20}}, 0x8080)

1m49.100310705s ago: executing program 38 (id=2430):
pipe2(0x0, 0x80080)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0xfffe}]}, 0x1, 0x0, 0x2}, 0x1)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0xfd, "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"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}})
io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x1, 0x4)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40840, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000140)={'filter\x00', 0x0, [0x5, 0x20000003, 0x20000000, 0x4010005, 0x393a72d]}, &(0x7f0000000040)=0x54)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4040}, 0x41)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, 0x0)
connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(r8, r9, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00')
write$proc_mixer(0xffffffffffffffff, 0x0, 0x8c)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff, 0x0, 'dvmrp1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x80, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x687, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390)
close(0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)

46.431550894s ago: executing program 7 (id=2590):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async, rerun: 32)
r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x0, @ANYBLOB="060015000800000020001680"], 0x60}}, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b41"], 0x0) (async, rerun: 64)
ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f0000000080)) (async, rerun: 64)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

46.107485987s ago: executing program 4 (id=2591):
ioprio_get$uid(0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1101"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r1 = userfaultfd(0x801)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
syz_clone(0x80000011, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
socket$inet(0x2, 0x3, 0x0)
listen(0xffffffffffffffff, 0xfff)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet(0xa, 0x801, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0xa, 0x7ff00003}]})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

44.6548073s ago: executing program 2 (id=2596):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x200, 0x0, {}, {0x2, 0x1, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800})
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000a5ffffff00", [0x0, 0x31]}})

44.309411362s ago: executing program 7 (id=2597):
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0x6, &(0x7f00000007c0)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f0000001480))

44.261596988s ago: executing program 2 (id=2598):
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x81, 0x98, 0xb7, 0x10, 0xbb4, 0xa1b, 0xcb45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x69, 0x0, 0x2, "", [{{0x9, 0x4, 0xe6, 0x7d, 0x0, 0x7d, 0xf4, 0xf7, 0x8}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x5, &(0x7f0000000b40)={0x5, 0xf, 0x5}})

43.735884609s ago: executing program 7 (id=2600):
socket$inet6(0xa, 0x2, 0x7fd3)
r0 = socket$inet(0x2, 0x1, 0x100)
fcntl$lock(r0, 0x5, &(0x7f0000000240)={0x2, 0x2, 0x5, 0x3})
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0xcf)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x1000271f, 0x0, &(0x7f00000001c0))
fcntl$setlease(r3, 0x400, 0x1)
r5 = syz_open_dev$video(&(0x7f00000003c0), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x59555956, 0x2, 0x1, [{0x1, 0x1}, {0x3, 0xa}, {0x10001, 0x200}, {0xc061, 0x5}, {0xfffffff8, 0x7}, {0x1, 0xc00}, {0x4, 0x8}, {0x3, 0x400}], 0x0, 0x9b, 0x0, 0x0, 0x5}})

42.870833132s ago: executing program 7 (id=2602):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x40}) (async)
r0 = gettid()
syz_clone3(&(0x7f0000002d80)={0x1000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58)

42.576355104s ago: executing program 2 (id=2604):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000340)=0xfffffffffffffffb, 0x8)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xd4\bj@5\x1dN\xe3\rf\xe5W\xcers\x04\x84)\xecq\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\xab\xfa\x032-{\x96{\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19n\xc7\xf2\vIR=T\x05)jIeR}\xecNg\x9b\a \x84\x93\x82\x1d1i\xf0\xa1\xe2\xf6L\xe84\xb6\n\x16\xc7\xa1\xf6\x7f\nl\x969\x99>\xf0\xdd\xfe\x06\xdd\xa5\f\xd3E\xdd\xae-\xf1\xfd\xc4@\x85L\x1e\xd2\x18\xc5TN\x0f\xe6@\xa0\xfd\xdaf\x9d<\xdb\xf1<\xff\xf4]\xd1K\xe1xj\x16\xaaQ(:\xa6'}], 0xa, "c3c7b2e1312e0841e5544d48428c89e0"}, 0xee)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000480))
futex(0x0, 0x85, 0x2, 0x0, &(0x7f00000002c0)=0x4, 0x94ffffff)
read$watch_queue(r0, &(0x7f00000002c0)=""/1, 0x1)
keyctl$revoke(0x3, r4)
ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000200)=0x1)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[])
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000d80))
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000)
r7 = dup2(r6, r6)
write$vhost_msg_v2(r7, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000400)=""/124, 0x7c, 0x0, 0x1, 0x2}}, 0x48)

42.342003427s ago: executing program 7 (id=2605):
r0 = eventfd2(0x8, 0x0)
write(r0, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x111, 0xa}}, 0x20)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1000}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf2b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r4, @ANYRES32=r4], 0x0)

41.514473365s ago: executing program 8 (id=2607):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x3, 0x1, 0x0, &(0x7f0000000480)=""/94, 0x0, 0x4000})
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b70795"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x2)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1, r2})
close(0x3)

41.039267489s ago: executing program 9 (id=2608):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x200, 0x0, {}, {0x2, 0x1, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800})
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000a6ffffff00", [0x0, 0x31]}})

40.729778556s ago: executing program 4 (id=2609):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4, 0x41}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x149800, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0xe, 0x0, 0xfffffff4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00')
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b000100000000090400"], 0x0)
preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000080)=""/47, 0x2f}], 0x5, 0x1fe, 0x12)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2a, &(0x7f00000019c0)=0x5, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x19, &(0x7f0000000400)=@raw=[@printk={@llx}, @generic={0xd, 0x8, 0xa, 0x3, 0x5}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x2, 0x3, 0x8, 0x20}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x59}], &(0x7f00000005c0)='GPL\x00', 0xfffffffa, 0xd4, &(0x7f0000000600)=""/212, 0x0, 0x4e, '\x00', r1, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x8, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000780)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x1, 0x5, 0x4, 0xa}, {0x2, 0x2, 0x10, 0x5}, {0x2, 0x3, 0x8, 0x3}, {0x1, 0x2, 0xd, 0x1}, {0x0, 0x2, 0x7, 0x3}, {0x3, 0x2, 0x9, 0xb}, {0x5, 0x2, 0xb, 0x1}], 0x10, 0x40000005}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB='6\x00\x00\x00\b\x00\x00\x00', @ANYBLOB="ee60b85b30702b3d0017dc383b6cea583c07cdeb4b858cc30364e5692eb3c7aee8f5f6dcb0c1f7bfcecc3af9e67306cadfb83087e200951f3ea97e8149ce1aeaed728389e185653695ece09d692652f1b09cb6242b0a2651919927fba7bf9485440b4328ce", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r4], 0x20)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000009c0)={"d3c39859", 0x80, 0x5, 0x9, 0x9, 0xc, "52d4eb4eb3ed82e17e2b0dca030984", "828fb2e1", "f6c355fe", "260a72a6", ["dad27fe25162fa37cf059a40", "0ea13f5528659d8bab9e8237", "f05a39e8ea0bda6561f49bc2", "fd4e44e88935c7894d7115e9"]})
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x5e}, 0x1c)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r10, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1}, {0x1, 0x9, 0x80}, 0xfffffffc}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@broadcast, 0xfffffffd, 0x4, 0x3, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x1, 0x0, 0x4, 0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20006854}, 0x800)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x7, 0x6, 0xaaca, 0x80000001, 0x2}}]})
ioctl$KVM_IRQ_LINE_STATUS(r10, 0xc008ae67, &(0x7f0000000140)={0x0, 0x3fe})
r12 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
pread64(r12, &(0x7f0000000100)=""/253, 0xfd, 0x36)
ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @raw_data=[0xe5d8, 0x3, 0x4, 0x10000, 0x7ffffefe, 0x2, 0xff, 0x10001, 0x3, 0x9, 0x80005, 0xffffd983, 0x3, 0xf, 0x2, 0x7fff]})

40.517997727s ago: executing program 9 (id=2610):
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0x6, &(0x7f00000007c0)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f0000001480))

40.329200415s ago: executing program 9 (id=2611):
socket$kcm(0x2d, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4800)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
socket(0x1, 0x800, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r6, &(0x7f00000002c0), 0x4, &(0x7f0000000400))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x6, &(0x7f0000000080)=0x45, 0x4)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={r4, 0x0, 0x47, 0x9, 0x5, 0x8}, &(0x7f0000000280)=0x14)
sendmmsg$inet6(r7, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058)

39.706545082s ago: executing program 2 (id=2612):
read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0) (async, rerun: 32)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
socket$nl_route(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0xffffffff, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "c800", "fa0700f22b42a3023be516d1"]}) (async)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r1}, 0xffffffffffffffff, 0xfe, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0)

39.115761607s ago: executing program 7 (id=2613):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000402000008"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000500000000000000800000001811"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCMGET(r3, 0x541e, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
syz_emit_ethernet(0x87a2f, 0x0, 0x0)
write(r4, &(0x7f0000000200)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
read$FUSE(r4, &(0x7f0000000680)={0x2020}, 0x2020)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x42000000)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f0009ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4)
r6 = socket$inet(0x2, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x0, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x0, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:crack_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:dmesg_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:devicekit_var_run_t:s0\x00'}, @NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:agp_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:hald_mac_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:vhost_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:systemd_notify_exec_t:s0\x00'}]}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000)
setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r8 = socket$netlink(0x10, 0x3, 0x0)
close(0x3)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

38.342911864s ago: executing program 4 (id=2614):
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100100000040fd070400400001020304000000000301827006080b0002012230100904000000010130000a2401030a000c0000000904010000010230000904010101010230000905010960002503020a25250104000005060009040200000102300009040201010102300009058209ff030629c00a2525ffffff7f06dd0b"], 0x0)
truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x7ff) (async)
truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x7ff)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xa, 0x20, 0xc, "", [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5, 0x40, 0x8}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x4, 0x6, 0x0, 0x20, 0xf5}, 0x2c, &(0x7f0000000080)={0x5, 0xf, 0x2c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0xd, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xe, 0xe0, 0x8001, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x3, 0x85b}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x16, 0x4, 0x4, 0x4, 0xd}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2409}}]})
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000340)={<r0=>0xffffffffffffffff, &(0x7f0000000240)='{\\\x00', 0x208400, &(0x7f0000000280)={@align=0xffffffffffff5754, {0xda, 0x800, 0x3, 0x7}}, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x8})
landlock_restrict_self(r0, 0x1) (async)
landlock_restrict_self(r0, 0x1)

38.270602631s ago: executing program 2 (id=2615):
creat(&(0x7f0000000100)='./file0\x00', 0x7a)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x44000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00')
syz_open_dev$dri(&(0x7f0000000340), 0x1ff, 0x4000)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = dup(0xffffffffffffffff)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000335bcfc08404f1ff800000ffff", @ANYRES32=r4, @ANYBLOB="83840500000000002000128008000100677265001400028006000e00030000000500170001000000"], 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}], 0x20}}], 0x1, 0x40000)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000030601080000000000000000050000070900020073797a32000000000900020073797a300000000005000100070000000900020073797a3000000000e1"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r6 = socket(0xa44b653ba8a7709c, 0x80004, 0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
poll(&(0x7f0000000140)=[{r7, 0x1100}], 0x1, 0x20002081)
ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x800000, '\x00', @ptr}})
close_range(r5, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)

37.591734305s ago: executing program 8 (id=2616):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000967964d7d5df93ea2eba636f5be10000406d0493c200000000000109022400010009000109040000011900"/61], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db2870905"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, 0x0, &(0x7f0000000000)=0xfd77)
syz_usb_control_io(r1, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x280, 0xcd)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0xc, @dev={0xac, 0x14, 0x14, 0x40}, 0x4e20, 0x2, 'nq\x00', 0x9, 0x7, 0x5d}, 0x2c)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000340)={0xe, 0x8bec, {0x57, 0x9, 0x300, {0xa, 0x3}, {0x8, 0x1}, @cond=[{0x9d7, 0x4, 0x9, 0x4, 0x2, 0x1000}, {0xfff, 0x3, 0xe, 0x50, 0x0, 0x7fff}]}, {0x55, 0xc, 0xff00, {0x3ff, 0x8000}, {0x38}, @period={0x5c, 0xa, 0x0, 0x309, 0x3e2, {0x8, 0x4, 0x4, 0xd}, 0x1, &(0x7f0000000280)=[0xd9f]}}})
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000003c0)=0x2)
readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x1)
r5 = syz_open_dev$cec(0x0, 0x0, 0x22581)
ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000000)={0x0, 0xb, 0x80006, 0x200006, 0x8, 0x1, "260000000000000754439400", 0xa, 0x0, 0x5, 0x2, 0x1, 0xfd, 0x9d})
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000140)=ANY=[], 0x48)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000200)=0x2)
sendfile(0xffffffffffffffff, r3, 0x0, 0x7fffffff)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="040061ca0be567ed000004"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x80, 0x0, 0x0)
syz_clone(0x800, &(0x7f0000000480)="ff70feed233b770e7be324306d75fd0f7070fedfa0998d4165cef7726805b5baf018429ed9775092f5593000dbd2acbbe72dd16ed9c98751a379569a0fa619850548a9960f6c64bf687c9ab22e729a0a08b747d9499ddab1460d4d09c1953caf6561a4694b0aaa019bbddc43440ae8f64e3d3245f9d217305a194ebc68cbc0988f65d3d9b17d7d54c7c5abbf531296057994850c16296696c3ed85d2b013c5db3ddab11fb07882136fcf1a58284e23ad4da93d0430f86faacd5a740ad7747d82b08e3520d58370825c", 0xc9, &(0x7f0000000580), &(0x7f00000005c0), 0x0)
getpgrp(0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)={0x0, 0x7, 0x9, "c41d21447228b2d6c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

27.419388562s ago: executing program 4 (id=2617):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0xa})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x0, 0x9, 0x7d, 0x0, 0x1, 0x9, 0x3, 0x8, 0x1, 0x2, 0x5, 0x40, 0x0, 0x1, 0x1, 0xc0, 0xfd, 0x9, 0x2, '\x00', 0x5, 0xffffffff})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40141, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x3)
ioctl$TIOCSSOFTCAR(r3, 0x80047437, &(0x7f0000000040)=0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

27.099556353s ago: executing program 2 (id=2618):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'batadv_slave_0\x00', 0x400})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYRES8=r8], 0xffdd)
r9 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x8, 0x0, 0x18)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x100000be)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r12=>0x0})
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000980)=ANY=[@ANYBLOB="1110", @ANYRES8=r12, @ANYRES8=r2], 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r12, @ANYRES32, @ANYRES64=r4, @ANYRES32, @ANYRESDEC=r11, @ANYRESHEX=r4, @ANYBLOB="e55ce6ec63d807acb2b4ca964c7269c1e1cc0389c312cae3e3d6537fbd509fb41f98c4d5387b469c1d0835aba6273a69c1993bbf135c62e1066c816c83984294f0d849f2252b0784dbbc6b58946b7f0779771dc8fea29aa881cbfcff1913bc07bf278db56df79f41c1241218470f56b6bbd72d2548d2dd858c", @ANYRES64=r1, @ANYRES32], 0x50)
close(r5)
close(r1)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000480)={0x3, 0xc76})

27.008672988s ago: executing program 8 (id=2619):
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1404, 0x428, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/173, 0x30, 0xad, 0x0, 0x6}, 0x28)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x1d4c, 0x800, 0x1, 0x1fc}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x59bc, 0x1000, 0x0, 0x2e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa910, 0x0, 0x3, 0x41}}, {0x0, 0x0, <r0=>0xffffffffffffffff, {0x0, 0x2c0a, 0x50, 0x2, 0x49}}, {0x0, 0x0, <r1=>0xffffffffffffffff, {0x0, 0xdef, 0x10000, 0x2, 0x228}, 0xffffffffffffffff, 0x0, 0x0, <r2=>0x0}], 0x4, &(0x7f0000001540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, '\x00', {0x4, 0x6ff, 0x0, &(0x7f0000000540)=@buf_4k="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"}}, &(0x7f00000015c0))
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001600)={0x0, 0xa4ff, 0x8000, 0x1, 0x35b}, &(0x7f0000001680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd4f4, 0x20000, 0x1, 0x1aa}}, {0x0, 0x0, <r3=>0xffffffffffffffff, {0x0, 0x22e1, 0x1, 0x1, 0x3be}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x482f, 0x2000, 0x0, 0x9b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xccd6, 0x400, 0x1, 0x1d6}}], 0x4, &(0x7f0000002900)={0x2e, 0x7, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xef}, 0x0, 0x0, '\x00', {0x4, 0xbad, 0x0, &(0x7f0000001900)=@buf_max_buf="740e28d0eac58ec82ef0f13dca5eb50c2f133db77676df55df0b2cca577693f2519b8dea49f69e3e039258a47a845b9ec04ea8f621b63a88b62da81db3b16545b0cba8fc002fa2bbc689f376506c1e763d8787d793079ba40a39c7eee85d2a20dc5c6b1c7a8b74a805f507379b33449b0dcf5e352e645250037325d3d8fd95479d8512cb628bba9a83a010b71fc84af4d6f4afeff8e84c20168c5333f6f881564cd811e5c06b326fc30a59c3b7bd555dcd11a73e7e41fb2a15aed12f8c5d3a9ba5a1bdd39f4fdaf04bc706f5a629e46fbe057a7ea92e65b2337970998926a88fd983637c8fb5a54cd21261ad1d79aaa2ecc7431460e8dae74a717c3d242b8d7966163ced20c824fb24d173f8b54428e975490ba9e50d6e128de0df8858379f45036f3e4df85b2ef0d434caebe13b5a532adf720fdc3211fee86e9aea748138d4fd6e170d21819549c6c3527fca7a21a6dae3012d9e54ff5e2318b70419635eac06745ec72398b2be78288d5d7be33e7708102972ebf7db44e62daaa5d5d7f90ffd141a695d6dd86f0cd420bea9f6ced4927bf2456b8db935d76609cb39a97b81ead85c35af5cfa1a224a0d216802076ae8a3eafb475a1d2f5dadce5d343f9816ba90495c772109daf7b4697df41eaaa44c7023028bb108a311b3d6a40843ecda8f8f1a5c8a4ed30c978f35e07771651dc91c99986c3b3beeb9263842f7f7572350066ff51d80fce1af50dac3ffd1bc6fb2f19fe9d321367a42f26823644f521f05b42026e58fb139779a3ac9d1398ecd7ad805789b7b4629ba365e242930b3a77ee3416f603b54c55f4cefc2939744287226377a6e9fdda14fd3927e9d600796b403b4ebf32c1d2d4e14568262cf6f8dc0442cd53d03ee91c9a5f2e4d40ed5901396fb73698a36ded63fd2252a3176ba5da60b3c2097f58e9cb5f2d4700e3b7f9f3a77f3750e497fbecbdc59375720b90972b0f03d4a010554ea39f57f9323e3c754c06586bc03232464e4699179daa6e518c677c1c9710d4e1d88427b8a66472a5e3c858d464b8c44226af66c5338c3cf3f7f1244d76eea99ebc22cd9f8c8b2f6da0259039eabfef912eaf0004d552534f845ee3618aa1290807f67203a6c61106fc53e39ae12824148e80f4c49be11257f32ca554b41e5b2e834c4f07ac86750dd55952e41c8183b1be37b9dd4d2a06fc1f8a1573a239e37dc8913ee2111aa3faf145742929b0173c3cc48c2c54a7ddfc0ac9af8613faa0d2e9caeb9021573fcfe9125316bf3c2c59391d4202f62006f85a5d7a57a881e4d712a47a76206742875b32cbdb5e0bb52ef34bd4e92b51563a1681548746c6c9876cff6bd9503262e683ad489ef097a2de148b4d8bd0a2cf4f1c6ac5d6101ea50cf0aba408a88d8ba008223e499397ee16fdc32384a5ef8c21da4a713467b23f24deda49fe8d5239c2c752e6f3ff29135a60c2b2fe063b056e1d54ab421ce08abc7701e2f99640fb67d55bc0f40f3a2c7fafd7386cbdfb8d2337250f04152243518ecf15338234ea13fdbbd182957d874e7c9ac3555989184e976c2d0692f813f745edb73f5f723a7deb61521541cd3ee119f89e5ab90c39cde99e879790ddef3dce6319715e54f3100e79229aa9ab64547f76ee747cf8f4b02772da07795adf924b8bb04d4d6e1e3b1f40512f940e86b3d33bedeeb8b789a60ef22cc9b57308fe46ed21d56286918178c5b4265a1ba80eef832c52c22c36a5a3e77d77781d21f20c61dc3ae4d1ec2ef6430369340d82922f434ecb745e67ec63ca3bada28d533d4434c4074c9fe333a1019b55cc539eecfa724fbbfa1de954c1cb2797144467b6e9c8bbf52c42b0416465c06b744f36d903001970a3f49287cf51686814d41c04f3d79feec1309170fb9ff963bce9646a00e59448cfcf28d205220958713f0c33714a2a4fd078e6c874379607b68289429645e28c81b2c1bedcced2ecc66ad536d79c0c4510da033611dd2968bfb4f26dcec337a56260acf64ca3cdd6a8f4d9f790be8e9afaf206da197a66e6990d0c8dc9f558fd77445a2db524c40369877c4f45121dfef96cb28afb732b4689ccaf45b2c319867d40729c4b185bd8110afe91d9cb234da9f1fc2fc7f6fe3ca394766b1f4e74c25afbda367c60aabbeb28e4954699c97f22b6d5b32f2f9589a967ac5689192def5892c9f9b4f598e22c85eb0bec564baffe6d046d020a5a282eb7228c4227449ca7eb81ccbc2a4be08a294c2774a718c20e2fa4aaa9fdab0bf002fb09c8176c35ce5d626bbb6cc46115fc0e43344ae411aaf981e024ec15f87184996d063438308ae5e6f42d1f79a2f8314f0044794f88cd7d1a970aadc2d216f2ea851e1008ba309e0d4a5b20d14e8af306712cd3f6c9ea5c74aaa22e365344304356826413e81413309e36368109eeacf4426b8124b86fa1c2459f174a05c098689647e36cc6fb332aac19830abc24690a7db8cc4467eb605071157db2f583856f7e08b84fa046aeb223a2920e67878326b1e6cf9bb2207926e976dd904eba71dcb7c124887236bc6cd4b54bf94b0cb265e333baee9065fa2432cf791bf2fdd494ca9f08b91ddc3502b8447f81c23550b92efe1e52397e841a781fcf938fee0cbb7b7ac3628d10761c1864d59b5d8953403f4e9c2ea8c5b181037d56c290c4b4d8f8b583f6ee3f845e43bb5c732a4cd94b7325b22954733b374b69ed8afde22f1a42006df9e38d6ff4d9f87305d7a632f7de5cadfec9fad20ef8da44849e27ff5d1756c11cc689133e79ccbb76a7925063b490bca3f4610adbb4c5cc4e379c77ff8a985e1da66b21609f0462040070a5df403254287d910e694c7932ebca7116c6c930e071b6d88856ad24d3445bfa5d7cf02c97533a924d78cbae198897649400f0b74fbd03068a96ec1e4ad109c636c121c9ef1381def9375857e0927317bc0828b64d316bd0d8967f5b1b413cfdfc666e95b256630fc854dabf42ac2566bbbbc86d62d0bd2548ba86e8ba7b8ea8c292021534428543f6393b480a6f44b535a9c9486c7b874b9fab45f90638ff16afb0b55f0123f54b43f1505e0574a1e16f658d9a7a5ec14004f7e375b5ce05173e569ee929200803320aaec7a37f05daa14ccff5c8d3cd275d3dca65aeb5aa8a263291524ad2c7b00af35365e2a3f82c2bbd79e8c8fd2eea480ef8c44f7f3678db783403d7d6db2385c87b3cd7341b036b2aed503b1e590b9e58b47d5a7176bd7787f39d37aa5c034d3308cb5b36988c3da40f64407f675dd2ebaf022f23774468e67c81dbf82cb4c8d026035850a1922edd190526a61eb5099550db62acb6dc2229b0f4faa51cdc3159abed0e10c4b25d6a7f26d552ad01c1fc077ccdaa33b88d6d9287f91501265c32316478f935f0858a6326adb67941a0daee7731557bf72b18ed8426fce1816fd26abf14f936c3bb6a4fce082ef02a5dfc45dfdfc7b9f29a8e539bfcb3cd455a8d17a31935bc11d2b9c1525bb6407e1f4a7f8462f0f8592ad08b5c2461a97ea850bb11283f7a5f532ef8155929125c0e5ebebfe90ce0c1679ee33c122d706a119378e65f4d6165831d88920dbb544b285fc0ee42aeea5e0b49878b4f05092b1a872308f1e8a9661a8eeeb4b9fe336f31c6ffb441f2c8e8fff234bc0844d0722987b17b5066bfef33f37eda9f82635e1557e4880768d157716f0f6d2d94472d1e561e83c72d1dcda2eb5aa166a18da522de7e8f216a1b123f5d97067a1ff4fa8a8d9a20f5551ec7c98e14e2450c1b9bcd48407c4572bf6cb1a744424a2f9562890922cf19a46d280f43df2ab592cdca17ef3d85f051f7232a1a0ff2147b2ec88f28ab888c052e65ae52fbb67cb9d915ffe165c22e97de8ea3d4cf0594e0fa36b74a8279e3a7b62df2f428f7d7abbd3929ee59b15a27561a00187e09394e74565d5eacb4248afe4026f5396d8ad36d7551f5192ea45464afbc1206a1c215ce8655c727645d48898baacb3f406f1c2c5668e4fcd1be9c62dfa8abe1299771ae3e62952cd2683a2ef4a669eb0db9372f1871125c00ea86df8b5777f756a17ab5e9269094bbcc226c3c725ecf3a8b86afe575d2c379054dda95559688825bb2a4cad83ba9c9b5b9f648c63eb1d785e16dc7d6298fc9447ca987ae360ff0ea61b0d46be34ba8dcf714ee39cabc6af858d4af07d9d4857bc0808f41b038c9dfd26f0f13c3cc3b96c504548d9940d554c17ce0b496956932bfbdbbd340eaf4db8dd035483145decb54886409170b7ccc1e229b0195c1b3cf6faed146d0784ff4c93d1d1b84ad7eba80eb01844fd686283978c242933e8c8bde7d98de7a8136214818b7f279a82254607637598d7452580293ddd0c54b8a655591a46c362763a2088ac4a72406150128fbc5fe90b13a52a9cdbc8d114505ef590b96939995fd2b299130bbe9f8ab4e5bfc52a8e00a050205b5de48e77ed76aa6807775f9ea1e4f84b1ca7ca8dbc551beb3e514445b42708f21e691d7ffebcc8ea2e64b0afaca2c5653875f8794d02ff45bed7b2d10af834dcfd63c507b5301ae4e865d4937da0f3f75f2f5266daba2899e237aac619f7b5d7791dd9242fd95a1e733b214afcae549bbf77e5eb79ace51777749f8232ff0e729ad7d98bd9b517ac13a0b5d59459c5170ab943464db683c87ae15260b2de2c28344fc491aadc0b1b4052b8441faf156f1f7eafe2bba91ba442bebca310de00a5e18a9683bc6ba32ef1a1c2893093352494b28534f3f321b8394a8852dff1f5f41a4b300e5503c6742fbde7c99fa88c7001b1b39d57990dd99328bccf720d0889ef335c508ad0fa2fba874af81cc1ac09c1b95705bdc1fe4322b32b53a492a6beb1aaf697a9a61c48e5c81057df2b42ecd847bceaa5825eb7349503608a4014b7ed4a9bb888f670f8fb3557273c21a3936e666c10c37757ddac0e52c83b360af14fbc5c89f72f98d1ef3ca033ebd5220285fcd875c08b78bfaad7273fc25bc431182210e17fc0777d925bd59e91d91b1cb8590c9318a8276690b04b7b841ae60f0887578b9d0abe8cbd96e5defdaf041c1a718c884b162d50631ae7c69a6bc7e47a68e80676e6a4f76176cd6cf0c8bc03fa649ef46f71b3296f82117955f1755ed4ae0ea170e9ed0fcda7510d512c84c7c6d39607f9fd12768d74ba502c223f19952be49c651581e6677ad0cf31868e940916cede75d1d75da4525e901e9ceaeae6ce0e10ab121b1989e516a18ec51a530924ea58e8bc36d8a8cfd424fc09c81db4aa5c0d489a1217216d2f62323cd928c2abea256d6db635238935f7785c7d0178fdde5a866edf5e550bacf3ac33812698194919de121ad7233382545af3c8406ba27cd6328975a7245a87d3e188c0fda7119c5ee47f063554442cdf97c5b518807e60c1c4328c0fcb6443c91b7712453f5aee3246c6a4a1c3675cfed6b3877d39f395bc61a534a18b8564e375ee06875b605461b35bfe1c6b00f9006cff3a56dad3f077a9871ec7ca2458a6d21a09801818f45c57f3b267f01f0703eb7d54b8178a6440e3041852c946b9d90041925f98440e9f4581b9c3a5241ee1ad312c701ea09a8a491900c9ff66db8f2353c07e9c6c020203cdca55631137f69284ba359e39323f5bae3165958f9874cc897acace6847b3a65674a540dd3da16f3bc6c95c1efc75f6679c70bd6d8252b925663ebbd0029b1c85b10212805f518552f132d18fb0f3c0fa5b00a0338a617f9de0a188278d22599141a93d27bb1113f640ad4842ca24555478016bab6b68003b59247fec8e"}}, &(0x7f0000002980))
syz_io_uring_submit$UBLK(0x0, 0x0, r2, &(0x7f00000039c0)=@ublk_io_fetch_sqe={0x2e, 0x46, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7fff}, 0x0, 0x0, '\x00', {0x2, 0x3f8, 0x0, &(0x7f00000029c0)=@buf_1k="c5263e3a201faa6c42d4212ad99178409f8ad9871bf3afe6670820d1edae7716a0dcc1b92a11086fa49266167f70fdd5fe05b3ef9a6e29a412af5610557c6db00c5345c7250dc8804b8585ea781b3a73900ea9693526d5bd9409fcfd426f4c11e0318099b2952dab0e72ecf0dc98fdb51f8922164c810835402b3d6e25beda50e0c4970ca20ff6b204adc8273ddc2011ad6f28fed0d0df2afd7146cdc541c31bfea0efa40f4d0ccae1aeae379f3be72821ee17a0a5fa56bbe799aff6d303cf7457876b48ba954be435d6bd6ca962166d8aee4eed1e0259326837920b8a9b8ba1a3e4c57d3cd2215d46159318796644cb11d9b2804d027b4cb5c1f77cb6bac760b7f53b9c3921aff6e89be0bc828a3aff86a6afff37c83146ca275328602dd5a52037508fa09b7110a82b3bade1b913bbdfbc54d3ff6a6bf6a1eb580ab843d759d4d4b93a6cd362bf6074558bb1e002d19381424c4f816d1de1ffe18407e41b3473fc0de4c010fac5353e901ac40c94a4b8b34c8a1acaae210765669f58cdb704b80a0776cf640b6d75243056c0ef04942ae006296c3a540551492e82ebe3003ef25ba1556fef7179b4468b4697c4a89faa21f4b023abba0fcce47b798d034d1f1eb473d2d6443489fb4248e05c699368e92410e51389fd9397db2c3111e940530ffa2915b67a2155a75e9f2f7b48090ef35c092cbcf8a324f9629a451a8be6a41c972ca3b31e912b3f76bc527c56ed52c237931b3dc1493c18422c2166c0b1f5119a9cefad7f0afc6b1f7bcb2acbd9410e2072aab41f880035e1464ce5ffd74039dfe2be3501064edc03caef9e96a772a1a9cd6e47e6e5cb16a74fbb6a2a93c7f8d2bb636bf9edb0f10329ba157f25bbbe4d8329d86ff761cd550f7ec93c223581796c769b223952b46e7ce60f56a3b50a6cf9a1e5f8081e1ccc3485d32e9f10e76fa72b3735ba9f8ad734a69d2556914d9cc5d67c44ac0683b143cdb5e3d688d02bbba6465057c882b9d557118ab86ca840cabf53de7a74b439b06d9f36b9732d8030b3f4093b024060036a0e32faedc238f8fae696a41ec7ed2c64703f6307afe3001879c9c284d2a79a3a8002b408923437d29e0ada78c5ef6c90564bcb45d92d804db089a67e12d5aed5837d2d3be36087bbf206b27333fe2b0667b56c7c25d49eaf7dd57dcf15c8fac0b22acae81aeb6030c0b04dbc10d47f80aa65f75f68dc450690f7dcce67f664d245a429196ea7d1f32b9d40b8d7442c8ae8ea2545f20fdc24c4497f9f8c0902f037dcf702f1d64d6ce00719db3d0d79342ae7af788ac4a7667547b869937258e666d5ff33922abbf7ada4529c9e6b5b3b8ab959c98d5a8085e6760ae24414cc08d94a888e3b1cb5d570f4725f2de8582e25c88f7176b0b699245f4cef98e58f715da3cbe35333aa9ded490f8d4b6ee2ee4d0e70ec"}})
openat$tun(0xffffffffffffff9c, &(0x7f0000003a40), 0x100, 0x0)
rmdir(&(0x7f0000003a80)='./file0\x00')
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000003ac0)={<r5=>0x0, 0x2835}, &(0x7f0000003b00)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000003bc0)={r5, 0x74, &(0x7f0000003b40)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x0, @local, 0x5}, @in6={0xa, 0x4e24, 0x40, @private2, 0x7}, @in6={0xa, 0x4e22, 0x7, @loopback, 0xfffffff9}, @in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000003c00)=0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000003c40)={{0x1, 0x1, 0x18, <r6=>r0, {0x4}}, './file0/file0\x00'})
ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d10, &(0x7f0000003c80))
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000003cc0))
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, &(0x7f0000003d00)={0x1, 0x0, [{0x2, 0x518, 0x5, 0x0, 0x1, 0x101, 0x80000000}]})
getpeername$packet(r6, &(0x7f0000003d80)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003dc0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000003e80)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)=@getchain={0x34, 0x66, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xfff1}, {0xa}, {0xb, 0x1}}, [{0x8, 0xb, 0x28000000}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x30000080)
ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000003ec0)={r5, 0xbb, 0x0, 0x4}, &(0x7f0000003f00)=0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x5, &(0x7f0000003f40)=0x7, 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000003f80)={{0x1, 0x1, 0x18, <r9=>r3, {0xfff}}, './file0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000004000)={0x5, &(0x7f0000003fc0)=[{0x0, 0x3, 0x8, 0x2}, {0x5465, 0x3, 0xb5, 0x2}, {0xc, 0x8, 0x8, 0x9}, {0x1, 0x3, 0x2, 0x2}, {0x5662, 0x7, 0x9, 0x46f7}]})
clock_gettime(0x0, &(0x7f0000004040)={<r10=>0x0, <r11=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000004080)={{}, {r10, r11+10000000}}, &(0x7f00000040c0))
epoll_pwait2(r9, &(0x7f0000004100)=[{}], 0x1, &(0x7f0000004140)={0x0, 0x3938700}, &(0x7f0000004180)={[0x100000000]}, 0x8)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000041c0)={'wlan1\x00'})
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000004200)=<r13=>0x0)
ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000004280)={0x0, @rc={0x1f, @none, 0x7}, @nfc={0x27, r13, 0x1, 0x1}, @hci={0x1f, 0x4, 0x4}, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000004240)='gre0\x00', 0x7ff, 0x4, 0x7})
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000004300)={0xffffff15, 0x7ff, 0x10000, 0x0, 0x9, 0xfff3})

26.816741924s ago: executing program 9 (id=2620):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r1=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x40880)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c"], 0x48}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000780)={0x30, r6, 0x0, 0x0, 0x5, 0x0, 0xec7, 0x0})
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x50}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000300)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000180)=ANY=[@ANYBLOB="1800020002"])
capset(0x0, &(0x7f0000000080)={0x9, 0x8, 0x3, 0x2400082, 0xffffff7f, 0x7196})
r7 = syz_io_uring_setup(0x2a69, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0x1000b5}, &(0x7f00000000c0), &(0x7f0000ffe000), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000240)={0x7fffffff, 0x1}, 0x1)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r8, &(0x7f00000027c0)={0x2020}, 0x2020)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r9 = socket$inet6_sctp(0xa, 0x0, 0x84)
r10 = syz_open_procfs(0x0, &(0x7f0000000380)='net/raw\x00')
lseek(r10, 0x1000000, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r11, 0x5607, 0x2c)
r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
pread64(r12, 0x0, 0x0, 0x10000365)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, 0x0, 0x0)

26.014907676s ago: executing program 8 (id=2621):
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0x6, &(0x7f00000007c0)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000001480)=[0x0])

25.573802649s ago: executing program 8 (id=2622):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, r0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)

25.53921373s ago: executing program 9 (id=2623):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5608)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)

25.482682658s ago: executing program 4 (id=2624):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0xfffffffb)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async)
syz_emit_ethernet(0x87a2f, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x103100)
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000000c0)=""/114) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x38011, 0xffffffffffffffff, 0x0) (async)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) (async)
read(0xffffffffffffffff, &(0x7f00000000c0)=""/163, 0xd0140f23)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5) (async)
socket$key(0xf, 0x3, 0x2)
write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[], 0x48) (async)
splice(r3, 0x0, r5, 0x0, 0x7, 0x100000000000000d)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$pptp(0x18, 0x1, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)

20.080897632s ago: executing program 39 (id=2613):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000402000008"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000500000000000000800000001811"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCMGET(r3, 0x541e, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
syz_emit_ethernet(0x87a2f, 0x0, 0x0)
write(r4, &(0x7f0000000200)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
read$FUSE(r4, &(0x7f0000000680)={0x2020}, 0x2020)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x42000000)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f0009ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4)
r6 = socket$inet(0x2, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x0, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x0, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:crack_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:dmesg_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:devicekit_var_run_t:s0\x00'}, @NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:agp_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:hald_mac_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:vhost_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x0, 0x1, 'system_u:object_r:systemd_notify_exec_t:s0\x00'}]}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000)
setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r8 = socket$netlink(0x10, 0x3, 0x0)
close(0x3)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.022745236s ago: executing program 8 (id=2626):
r0 = syz_usb_connect_ath9k(0x3, 0xb3, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) (async, rerun: 32)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) (async, rerun: 32)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x5b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x59, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "d9"}, {0x5, 0x24, 0x0, 0xcf2d}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0x4, 0x2}, [@acm={0x4, 0x24, 0x2, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x1, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x1, 0x3, 0x0, 0x10, 0x1}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0xe5, &(0x7f0000000180)=@string={0xe5, 0x3, "36f64e8185bea57372443719dd40e3b2f5f82ba34353e9564c99eda82a63c134059a0ec51f71b5912e2bff39a4a7de6e8bcc1bef6aff70a3cf8d2c4b68afb0bfbb15eaf7131f2192de1f9f66919a731e0c81baa6c01abb5d30e69febe644ffa05ada8fae9b77db79cc6493c9c52cfce5086dbc92301efb04bd6496ecf6ebaaadb355ce31286e96c664882c8b62728498e3d3466bfe8d86019786bb5294c3c4d569cdc0a72b00995aee442ceae2196644e9fd7455081d3ea13a4570bcc6395b3c9f4c9b5ad5b1dd2a395cc37ccef43098e7e6d11cff072182889f9ea0c6443f570ac4d7"}}]}) (async)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
setrlimit(0x7, &(0x7f0000000400))
memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x21, 0xb7, {0xb7, 0x9, "08623b314330cc2300692f826f1da74a9cb18904801da62da5cb000a4664e1e0cafe7a4e837ae4ea1cd5f9b7d86268a12072dd54d125d0af6b94e870b375b00a75e9a1bda9b015537944f11d90d354f1fbb228f8c6e25d5c0b5995b2a27b4d8f8ace7851602ed9bf53197a98cdee9f235732c5b39202ae7c0127842cefbd3ec108cd80e7ab7cb27149ce96e0f8e5fc0e8d37c75a66334d4705a398d843ce4788f2d79c909bd9eaa4b6165678c0a46ebcc84f956f9a"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f00000003c0)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x7, 0x6, 0x3ff, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x10, 0xfb, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xe9, 0x4, 0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x5, 0x8, "fdd9f853", "50beafb9"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x4, 0x4, 0x0, 0xfe, 0x82e, 0x9}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x0, 0x16, 0x7d, "a2e21e471ad8a8869d7347026db5d3355a6d2ff15f13c47f3a5a7af9d995542a1e85c242180ab3335c880bb0c2fb07698aa255d292ace49085202edbffb4dcfca360a47a2db30414e6a31537cc076e0933cfb47e3a0e1434bdbdea2215e3ffc23bf5781ae45933700a7b422e319d86f1a19777cd0c201cc351f4020fcc"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0xf0b9b27a2ca29fd8, 0x4}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000740)={0x40, 0xb, 0x2, ' m'}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0xfff9}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, &(0x7f0000000840)={0x40, 0x19, 0x2, '=y'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xa}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0xf8}}) (async, rerun: 32)
msgsnd(0x0, &(0x7f0000000640)={0x2}, 0x8, 0x800) (async, rerun: 32)
syz_usb_connect(0x3, 0x24, &(0x7f00000002c0)=ANY=[], 0x0)

19.293766532s ago: executing program 4 (id=2627):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000500)={{0xeeee0000, 0x41000, 0x8, 0xd, 0x9, 0x3d, 0x40, 0x9, 0x0, 0x2e, 0x10}, {0x2000, 0x100000, 0xf, 0xc, 0x82, 0x4, 0x7d, 0x7, 0x58, 0xff, 0x3}, {0x50000, 0xeeee8000, 0x9, 0xfb, 0xc, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0xf000, 0x26000, 0x3, 0x5d, 0x4, 0x40, 0x9, 0x2, 0x26, 0x7, 0xf5, 0xfc}, {0x3000, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7b, 0x7, 0x83, 0xf2, 0x83}, {0x41000, 0x1000, 0x0, 0xa0, 0xb1, 0x8, 0xfd, 0xa0, 0x6, 0xd, 0x1, 0xff}, {0x40000, 0x1000, 0xc, 0x3, 0x7, 0x2, 0x5, 0x2, 0x1, 0x7f, 0xff}, {0xe000, 0xf000, 0xa, 0x5, 0xf, 0x3, 0x0, 0x18, 0x2, 0x23, 0x7, 0x9}, {0xeeef0000, 0x30}, {0xeeef0000, 0x86}, 0x80050037, 0x0, 0x8000000, 0x42004, 0xb, 0x800, 0x3000, [0xd, 0x1ff, 0x5e, 0x102]})
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2000010, &(0x7f00000001c0)=ANY=[@ANYRES64=r3])
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

18.398411115s ago: executing program 9 (id=2628):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000040)={<r1=>r0})
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x1, 0x0, 0xfe, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x0, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0xfffffffffffffedc}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x800)
ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000040)=@overlay={0x9, 0x2, 0x4, 0x8, 0x413, {}, {0x4, 0x0, 0x81, 0xf6, 0x28, 0x1, "7a89c908"}, 0x101, 0x3, {}, 0x2})
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES8=r1], 0xb4}}, 0x20008040)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000180)=@ethtool_flash={0x33, 0x401, './file0\x00'}})
ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000140)={'veth1_to_bridge\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}})
ptrace(0x10, r3)
prctl$PR_SET_SECCOMP(0x16, 0x6, 0x0)
ptrace(0x10, r3)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
r9 = gettid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084)
sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x800)
vmsplice(r7, &(0x7f0000e79000)=[{&(0x7f00003fb000)}], 0x1, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
ptrace$cont(0x20, r3, 0x200, 0x7)
ptrace(0x21, r3)

0s ago: executing program 40 (id=2626):
r0 = syz_usb_connect_ath9k(0x3, 0xb3, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) (async, rerun: 32)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) (async, rerun: 32)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x5b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x59, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "d9"}, {0x5, 0x24, 0x0, 0xcf2d}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0x4, 0x2}, [@acm={0x4, 0x24, 0x2, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x1, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x1, 0x3, 0x0, 0x10, 0x1}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0xe5, &(0x7f0000000180)=@string={0xe5, 0x3, "36f64e8185bea57372443719dd40e3b2f5f82ba34353e9564c99eda82a63c134059a0ec51f71b5912e2bff39a4a7de6e8bcc1bef6aff70a3cf8d2c4b68afb0bfbb15eaf7131f2192de1f9f66919a731e0c81baa6c01abb5d30e69febe644ffa05ada8fae9b77db79cc6493c9c52cfce5086dbc92301efb04bd6496ecf6ebaaadb355ce31286e96c664882c8b62728498e3d3466bfe8d86019786bb5294c3c4d569cdc0a72b00995aee442ceae2196644e9fd7455081d3ea13a4570bcc6395b3c9f4c9b5ad5b1dd2a395cc37ccef43098e7e6d11cff072182889f9ea0c6443f570ac4d7"}}]}) (async)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) (async)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
setrlimit(0x7, &(0x7f0000000400))
memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x21, 0xb7, {0xb7, 0x9, "08623b314330cc2300692f826f1da74a9cb18904801da62da5cb000a4664e1e0cafe7a4e837ae4ea1cd5f9b7d86268a12072dd54d125d0af6b94e870b375b00a75e9a1bda9b015537944f11d90d354f1fbb228f8c6e25d5c0b5995b2a27b4d8f8ace7851602ed9bf53197a98cdee9f235732c5b39202ae7c0127842cefbd3ec108cd80e7ab7cb27149ce96e0f8e5fc0e8d37c75a66334d4705a398d843ce4788f2d79c909bd9eaa4b6165678c0a46ebcc84f956f9a"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f00000003c0)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x7, 0x6, 0x3ff, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x10, 0xfb, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xe9, 0x4, 0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x5, 0x8, "fdd9f853", "50beafb9"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x4, 0x4, 0x0, 0xfe, 0x82e, 0x9}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x0, 0x16, 0x7d, "a2e21e471ad8a8869d7347026db5d3355a6d2ff15f13c47f3a5a7af9d995542a1e85c242180ab3335c880bb0c2fb07698aa255d292ace49085202edbffb4dcfca360a47a2db30414e6a31537cc076e0933cfb47e3a0e1434bdbdea2215e3ffc23bf5781ae45933700a7b422e319d86f1a19777cd0c201cc351f4020fcc"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0xf0b9b27a2ca29fd8, 0x4}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000740)={0x40, 0xb, 0x2, ' m'}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0xfff9}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, &(0x7f0000000840)={0x40, 0x19, 0x2, '=y'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xa}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0xf8}}) (async, rerun: 32)
msgsnd(0x0, &(0x7f0000000640)={0x2}, 0x8, 0x800) (async, rerun: 32)
syz_usb_connect(0x3, 0x24, &(0x7f00000002c0)=ANY=[], 0x0)

kernel console output (not intermixed with test programs):

) entered blocking state
[  824.483681][T15306] bridge0: port 1(bridge_slave_0) entered disabled state
[  824.484043][T15306] bridge_slave_0: entered allmulticast mode
[  824.503918][T15306] bridge_slave_0: entered promiscuous mode
[  824.511164][T15306] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.511429][T15306] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.511833][T15306] bridge_slave_1: entered allmulticast mode
[  824.541348][T15306] bridge_slave_1: entered promiscuous mode
[  824.542935][T15311] bridge0: port 1(bridge_slave_0) entered blocking state
[  824.543040][T15311] bridge0: port 1(bridge_slave_0) entered disabled state
[  824.543209][T15311] bridge_slave_0: entered allmulticast mode
[  824.545435][T15311] bridge_slave_0: entered promiscuous mode
[  824.591826][T15307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  824.695235][T15308] team0: Port device team_slave_0 added
[  824.761602][T13392] IPVS: stopping backup sync thread 9802 ...
[  824.778192][T15311] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.778329][T15311] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.778484][T15311] bridge_slave_1: entered allmulticast mode
[  824.785608][T15311] bridge_slave_1: entered promiscuous mode
[  824.856893][T15307] team0: Port device team_slave_0 added
[  824.865525][T15308] team0: Port device team_slave_1 added
[  824.943837][T15305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  824.996184][T15307] team0: Port device team_slave_1 added
[  825.025822][T15305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  825.047592][T15306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  825.155643][T15308] batman_adv: batadv0: Adding interface: batadv_slave_0
[  825.155691][T15308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  825.155721][T15308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  825.171693][T15306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  825.231486][T15311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  825.245858][T15311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  825.285072][T15305] team0: Port device team_slave_0 added
[  825.291043][T15308] batman_adv: batadv0: Adding interface: batadv_slave_1
[  825.291082][T15308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  825.291116][T15308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  825.424026][T15307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  825.424064][T15307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  825.424109][T15307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  825.472543][T15305] team0: Port device team_slave_1 added
[  825.509571][T15311] team0: Port device team_slave_0 added
[  825.538304][T13392] hsr_slave_0: left promiscuous mode
[  825.543840][T13392] hsr_slave_1: left promiscuous mode
[  825.551363][T13392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  825.551415][T13392] batman_adv: batadv0: Removing interface: batadv_slave_1
[  825.575748][T13392] veth1_macvtap: left promiscuous mode
[  825.575813][T13392] veth0_macvtap: left promiscuous mode
[  825.576233][T13392] veth1_vlan: left promiscuous mode
[  825.576409][T13392] veth0_vlan: left promiscuous mode
[  825.861800][T13392] team0 (unregistering): Port device team_slave_1 removed
[  825.876218][T13392] team0 (unregistering): Port device team_slave_0 removed
[  826.043914][T15307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  826.043949][T15307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.043996][T15307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  826.090232][T15305] batman_adv: batadv0: Adding interface: batadv_slave_0
[  826.097310][T15305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.097345][T15305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  826.121317][T15306] team0: Port device team_slave_0 added
[  826.143912][T15311] team0: Port device team_slave_1 added
[  826.168663][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9
[  826.186843][T15306] team0: Port device team_slave_1 added
[  826.192735][T15305] batman_adv: batadv0: Adding interface: batadv_slave_1
[  826.192751][T15305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.192782][T15305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  826.271563][T15311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  826.271616][T15311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.271663][T15311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  826.273848][T15311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  826.273871][T15311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.273905][T15311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  826.422030][T15308] hsr_slave_0: entered promiscuous mode
[  826.424135][T15308] hsr_slave_1: entered promiscuous mode
[  826.426426][T15308] debugfs: 'hsr0' already exists in 'hsr'
[  826.426481][T15308] Cannot create hsr debugfs directory
[  826.483080][T15305] hsr_slave_0: entered promiscuous mode
[  826.486606][T15305] hsr_slave_1: entered promiscuous mode
[  826.493126][T15305] debugfs: 'hsr0' already exists in 'hsr'
[  826.493188][T15305] Cannot create hsr debugfs directory
[  826.535156][T15307] hsr_slave_0: entered promiscuous mode
[  826.536166][T15307] hsr_slave_1: entered promiscuous mode
[  826.537361][T15307] debugfs: 'hsr0' already exists in 'hsr'
[  826.537386][T15307] Cannot create hsr debugfs directory
[  826.538580][T15306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  826.538810][T15306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.539577][T15306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  826.670521][T15306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  826.670564][T15306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.670594][T15306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  826.743629][T15311] hsr_slave_0: entered promiscuous mode
[  826.746714][T15311] hsr_slave_1: entered promiscuous mode
[  826.751092][T15311] debugfs: 'hsr0' already exists in 'hsr'
[  826.751154][T15311] Cannot create hsr debugfs directory
[  826.802009][T13392] IPVS: stop unused estimator thread 0...
[  826.971391][T15306] hsr_slave_0: entered promiscuous mode
[  826.978301][T15306] hsr_slave_1: entered promiscuous mode
[  826.984877][T15306] debugfs: 'hsr0' already exists in 'hsr'
[  826.991286][T15306] Cannot create hsr debugfs directory
[  827.246643][T13392] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  827.475927][T13392] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  827.542086][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10
[  827.662268][T13392] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  827.852276][T13392] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  828.220300][T13392] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  828.235741][T13392] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  828.345560][T13392] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  828.356269][T13392] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  828.442969][T13392] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  828.457019][T13392] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  828.556732][T13392] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  828.556805][T13392] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  828.701425][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11
[  828.795815][T13392] bridge_slave_1: left allmulticast mode
[  828.803186][T13392] bridge_slave_1: left promiscuous mode
[  828.809160][T13392] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.821864][T13392] bridge_slave_0: left allmulticast mode
[  828.828425][T13392] bridge_slave_0: left promiscuous mode
[  828.834351][T13392] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.854751][T13392] bridge_slave_1: left allmulticast mode
[  828.855272][T13392] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.873836][T13392] bridge_slave_0: left allmulticast mode
[  828.874344][T13392] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.894869][T13392] dvmrp0: left allmulticast mode
[  829.074052][T13392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  829.086195][T13392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  829.103175][T13392] bond0 (unregistering): Released all slaves
[  829.182451][T13392] bond1 (unregistering): (slave vti0): Releasing backup interface
[  829.182504][T13392] vti0 (unregistering): left promiscuous mode
[  829.256426][T13392] bond2 (unregistering): (slave geneve2): Releasing active interface
[  829.292597][T15142] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  829.323017][T13392] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  829.336272][T13392] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  829.350942][T13392] .` (unregistering): Released all slaves
[  829.363964][T13392] bond1 (unregistering): Released all slaves
[  829.380321][T13392] bond2 (unregistering): Released all slaves
[  829.395145][T13392] bond3 (unregistering): Released all slaves
[  829.410028][T13392] bond4 (unregistering): Released all slaves
[  829.426453][T13392] bond5 (unregistering): Released all slaves
[  829.667545][T13392] tipc: Left network mode
[  829.703152][T13392] IPVS: stopping backup sync thread 11075 ...
[  830.052469][T15308] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  830.073051][T15308] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  830.081429][T15308] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  830.102876][T15308] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  830.131272][T15308] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  830.161021][T15308] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  830.176922][T15308] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  830.191977][T15308] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  830.340674][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12
[  830.510519][T15305] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  830.521342][T15305] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  830.545603][T15305] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  830.594008][T15305] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  830.633474][T15305] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  830.657175][T15305] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  830.696827][T15305] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  830.714125][T15305] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  830.776765][T15308] 8021q: adding VLAN 0 to HW filter on device bond0
[  830.982658][T15311] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  831.011962][T15311] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  831.023404][T15308] 8021q: adding VLAN 0 to HW filter on device team0
[  831.044742][T15311] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  831.079297][T15311] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  831.141539][T15311] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  831.154422][T15311] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  831.173827][T14481] bridge0: port 1(bridge_slave_0) entered blocking state
[  831.174127][T14481] bridge0: port 1(bridge_slave_0) entered forwarding state
[  831.183633][T15311] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  831.209998][T15311] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  831.315706][T13404] bridge0: port 2(bridge_slave_1) entered blocking state
[  831.315967][T13404] bridge0: port 2(bridge_slave_1) entered forwarding state
[  831.346028][T13392] hsr_slave_0: left promiscuous mode
[  831.352427][T13392] hsr_slave_1: left promiscuous mode
[  831.354963][T13392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  831.355026][T13392] batman_adv: batadv0: Removing interface: batadv_slave_0
[  831.364074][T13392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  831.364133][T13392] batman_adv: batadv0: Removing interface: batadv_slave_1
[  831.393840][T13392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  831.393887][T13392] batman_adv: batadv0: Removing interface: batadv_slave_0
[  831.403893][T13392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  831.403947][T13392] batman_adv: batadv0: Removing interface: batadv_slave_1
[  831.453295][T13392] veth1_macvtap: left promiscuous mode
[  831.453363][T13392] veth0_macvtap: left promiscuous mode
[  831.453777][T13392] veth1_vlan: left promiscuous mode
[  831.453968][T13392] veth0_vlan: left promiscuous mode
[  831.903019][T13392] team0 (unregistering): Port device team_slave_1 removed
[  831.924903][T13392] team0 (unregistering): Port device team_slave_0 removed
[  832.769484][T15307] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  832.802623][T15307] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  832.824955][T15307] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  832.853456][T15307] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  832.893142][T15307] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  832.930689][T15307] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  832.976209][T15305] 8021q: adding VLAN 0 to HW filter on device bond0
[  833.092842][T15307] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  833.108458][T15307] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  833.420118][T15305] 8021q: adding VLAN 0 to HW filter on device team0
[  833.441083][T15311] 8021q: adding VLAN 0 to HW filter on device bond0
[  833.590458][T13404] bridge0: port 1(bridge_slave_0) entered blocking state
[  833.590593][T13404] bridge0: port 1(bridge_slave_0) entered forwarding state
[  833.770392][T13404] bridge0: port 2(bridge_slave_1) entered blocking state
[  833.770910][T13404] bridge0: port 2(bridge_slave_1) entered forwarding state
[  833.811541][T15311] 8021q: adding VLAN 0 to HW filter on device team0
[  833.849587][T15308] 8021q: adding VLAN 0 to HW filter on device batadv0
[  833.869127][T13392] IPVS: stop unused estimator thread 0...
[  833.892729][T13404] bridge0: port 1(bridge_slave_0) entered blocking state
[  833.892985][T13404] bridge0: port 1(bridge_slave_0) entered forwarding state
[  833.960580][T13404] bridge0: port 2(bridge_slave_1) entered blocking state
[  833.960814][T13404] bridge0: port 2(bridge_slave_1) entered forwarding state
[  834.544113][T15308] veth0_vlan: entered promiscuous mode
[  834.581649][T15307] 8021q: adding VLAN 0 to HW filter on device bond0
[  834.671002][T15306] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  834.682054][T15306] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  834.706194][T15308] veth1_vlan: entered promiscuous mode
[  834.721610][T15306] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  834.739418][T15306] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  834.746627][T15306] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  834.762545][T15306] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  834.779913][T15307] 8021q: adding VLAN 0 to HW filter on device team0
[  834.793477][T15306] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  834.816250][T15306] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  834.835266][T15305] 8021q: adding VLAN 0 to HW filter on device batadv0
[  834.859872][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  834.860029][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  834.906453][T15311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  834.919090][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  834.919226][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  835.064127][T15308] veth0_macvtap: entered promiscuous mode
[  835.116021][T15308] veth1_macvtap: entered promiscuous mode
[  835.134926][T15305] veth0_vlan: entered promiscuous mode
[  835.242800][T15305] veth1_vlan: entered promiscuous mode
[  835.257098][T15311] veth0_vlan: entered promiscuous mode
[  835.266723][T15308] batman_adv: batadv0: Interface activated: batadv_slave_0
[  835.313029][T15308] batman_adv: batadv0: Interface activated: batadv_slave_1
[  835.354791][T15311] veth1_vlan: entered promiscuous mode
[  835.377957][T13404] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  835.379784][T13405] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  835.380001][T13389] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  835.380112][T13389] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  835.456091][T15307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  835.493291][T15305] veth0_macvtap: entered promiscuous mode
[  835.552386][T15305] veth1_macvtap: entered promiscuous mode
[  835.701086][T15306] 8021q: adding VLAN 0 to HW filter on device bond0
[  835.754307][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  835.754413][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  835.785008][T15305] batman_adv: batadv0: Interface activated: batadv_slave_0
[  835.793352][T15311] veth0_macvtap: entered promiscuous mode
[  835.853177][T15307] veth0_vlan: entered promiscuous mode
[  835.860905][T15305] batman_adv: batadv0: Interface activated: batadv_slave_1
[  835.866203][T15311] veth1_macvtap: entered promiscuous mode
[  835.940591][T15307] veth1_vlan: entered promiscuous mode
[  835.941058][T13404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  835.941104][T13404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  835.981495][T15306] 8021q: adding VLAN 0 to HW filter on device team0
[  836.028748][T13389] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  836.070589][T15311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  836.089539][T13405] bridge0: port 1(bridge_slave_0) entered blocking state
[  836.089796][T13405] bridge0: port 1(bridge_slave_0) entered forwarding state
[  836.138931][T13392] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  836.170110][T13405] bridge0: port 2(bridge_slave_1) entered blocking state
[  836.170330][T13405] bridge0: port 2(bridge_slave_1) entered forwarding state
[  836.182535][   T59] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  836.249269][T15311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  836.263331][T13404] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  836.378830][   T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  836.379242][T13389] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  836.379356][T13389] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  836.379467][T13389] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  836.550360][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  836.550412][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  836.607404][T15307] veth0_macvtap: entered promiscuous mode
[  836.711579][T15306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  836.741566][T15307] veth1_macvtap: entered promiscuous mode
[  836.829219][T13389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  836.829255][T13389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  836.892169][T15611] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  836.945080][T15307] batman_adv: batadv0: Interface activated: batadv_slave_0
[  836.996232][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  836.996271][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.022324][T15307] batman_adv: batadv0: Interface activated: batadv_slave_1
[  837.172613][T15306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  837.179691][   T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  837.179943][   T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  837.180054][   T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  837.180158][   T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  837.242357][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.242424][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.667346][T15306] veth0_vlan: entered promiscuous mode
[  837.672914][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.672935][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.820356][T14530] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  837.908229][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.922154][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.932562][T15306] veth1_vlan: entered promiscuous mode
[  837.968540][T14530] usb 10-1: Using ep0 maxpacket: 16
[  837.978474][T14530] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  837.996395][T14530] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  837.996501][T14530] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  837.996615][T14530] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  837.996719][T14530] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  837.996784][T14530] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  838.060931][T14530] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  838.060982][T14530] usb 10-1: Manufacturer: syz
[  838.100394][T14530] usb 10-1: config 0 descriptor??
[  838.246875][T15627] syzkaller1: entered promiscuous mode
[  838.246918][T15627] syzkaller1: entered allmulticast mode
[  838.516864][T15633] loop9: detected capacity change from 0 to 7
[  838.528082][T15633] Dev loop9: unable to read RDB block 7
[  838.533803][T15633]  loop9: unable to read partition table
[  838.540956][T15633] loop9: partition table beyond EOD, truncated
[  838.549606][T15633] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  838.575738][T15306] veth0_macvtap: entered promiscuous mode
[  838.606012][T15306] veth1_macvtap: entered promiscuous mode
[  838.617709][T14530] rc_core: IR keymap rc-hauppauge not found
[  838.617742][T14530] Registered IR keymap rc-empty
[  838.617940][T14530] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  838.637929][T14530] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  838.660113][T14530] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  838.664907][T14530] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input70
[  838.726812][T14530] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  838.759702][T14530] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  838.778199][T14530] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  838.789754][T15637] netlink: 4164 bytes leftover after parsing attributes in process `syz.7.2445'.
[  838.799604][T15637] openvswitch: netlink: Flow key attr not present in new flow.
[  838.809760][T14530] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  838.829626][T14530] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  838.847409][T14530] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  838.868614][T14530] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  838.891897][T14530] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  838.910721][T14530] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  838.931233][T14530] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  838.953384][T15306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  839.002248][T14530] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  839.002336][T14530] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  839.086036][T15306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  839.147167][T14922] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  839.208244][   T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  839.212604][   T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  839.269052][T13389] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  839.308515][T14922] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  839.319007][T14922] usb 8-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  839.319075][T14922] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  839.319126][T14922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.356941][T14922] usb 8-1: config 0 descriptor??
[  839.479720][T13409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  839.497368][T14922] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  839.662579][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2447'.
[  839.688516][T13405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  839.688557][T13405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  839.830547][T13392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  839.830593][T13392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  840.527563][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2
[  840.540238][ T5703] usb 10-1: USB disconnect, device number 2
[  840.646058][   T31] audit: type=1326 audit(1787975344.687:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15669 comm="syz.2.2450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca3b79e159 code=0x0
[  841.229956][T15684] syzkaller0: entered promiscuous mode
[  841.230000][T15684] syzkaller0: entered allmulticast mode
[  841.424481][T15692] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2455'.
[  841.507514][T15677] syz.8.2452 (15677): drop_caches: 2
[  841.780128][T15702] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2457'.
[  841.887521][T14922] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  842.009756][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3
[  842.051393][T15587] usb 8-1: USB disconnect, device number 2
[  842.057431][T14922] usb 5-1: Using ep0 maxpacket: 16
[  842.064332][T14922] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  842.110421][T14922] usb 5-1: config 0 has an invalid interface number: 107 but max is 0
[  842.110483][T14922] usb 5-1: config 0 has no interface number 0
[  842.110563][T14922] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9
[  842.110597][T14922] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024
[  842.176125][T14922] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  842.176173][T14922] usb 5-1: Product: syz
[  842.176209][T14922] usb 5-1: Manufacturer: syz
[  842.176232][T14922] usb 5-1: SerialNumber: syz
[  842.228893][T14922] usb 5-1: config 0 descriptor??
[  842.251130][T14922] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected
[  842.259414][T14922] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81
[  842.278068][T14922] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1
[  842.290959][T14922] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  842.304802][T14922] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2
[  842.322236][T14922] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  842.336534][T14922] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4
[  842.349741][T14922] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  842.369704][T14922] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6
[  842.383461][T14922] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  842.444914][T15713] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2459'.
[  843.117690][T15587] usb 5-1: USB disconnect, device number 11
[  843.178206][T15587] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  843.265043][T15587] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  843.321582][T15587] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  843.354054][T15587] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  843.377589][T15587] keyspan 5-1:0.107: device disconnected
[  843.605248][T15710] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  843.753613][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2463'.
[  843.753663][T15741] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2463'.
[  843.773065][T15741] netlink: 'syz.8.2463': attribute type 14 has an invalid length.
[  843.782042][T15741] netlink: 'syz.8.2463': attribute type 11 has an invalid length.
[  843.962841][T13384] IPVS: starting estimator thread 0...
[  844.068252][T15746] IPVS: using max 37 ests per chain, 88800 per kthread
[  844.440300][T15751] netlink: 'syz.9.2466': attribute type 21 has an invalid length.
[  844.458644][  T991] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  844.483795][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4
[  844.618076][  T991] usb 5-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00
[  844.629487][  T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  844.629541][  T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  844.629569][  T991] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  844.629617][  T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.679903][  T991] usb 5-1: config 0 descriptor??
[  844.809489][T15756] loop5: detected capacity change from 0 to 7
[  844.822938][T15756]  loop5: p1 < > p3 p4 < >
[  844.822992][T15756] loop5: partition table partially beyond EOD, truncated
[  844.951855][T15750] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  844.984127][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2468'.
[  845.031844][T15750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  845.042557][T15750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  845.092278][T15647] udevd[15647]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  845.101866][T15449] udevd[15449]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  845.113891][T15376] udevd[15376]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  845.273409][  T991] usbhid 5-1:0.0: can't add hid device: -71
[  845.281589][  T991] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  845.309774][  T991] usb 5-1: USB disconnect, device number 12
[  845.346242][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2469'.
[  845.755205][   T31] audit: type=1326 audit(1787975349.797:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.2.2472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3b79e159 code=0x7ffc0000
[  845.783953][   T31] audit: type=1326 audit(1787975349.827:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.2.2472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3b79e159 code=0x7ffc0000
[  845.810261][   T31] audit: type=1326 audit(1787975349.857:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.2.2472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3b79e159 code=0x7ffc0000
[  845.835064][   T31] audit: type=1326 audit(1787975349.877:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.2.2472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3b79e159 code=0x7ffc0000
[  845.865932][   T31] audit: type=1326 audit(1787975349.907:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.2.2472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca3b79e159 code=0x7ffc0000
[  845.901321][   T31] audit: type=1326 audit(1787975349.947:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.2.2472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3b79e159 code=0x7ffc0000
[  845.901397][   T31] audit: type=1326 audit(1787975349.947:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.2.2472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3b79e159 code=0x7ffc0000
[  845.902709][   T31] audit: type=1326 audit(1787975349.947:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.2.2472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3b79e159 code=0x7ffc0000
[  845.911248][   T31] audit: type=1326 audit(1787975349.957:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.2.2472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fca3b79e159 code=0x7ffc0000
[  845.911421][   T31] audit: type=1326 audit(1787975349.957:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.2.2472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3b79e159 code=0x7ffc0000
[  846.010827][T15204] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  846.187951][T15204] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  846.200584][T15204] usb 10-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  846.200651][T15204] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  846.200702][T15204] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.249003][T15204] usb 10-1: config 0 descriptor??
[  846.268153][T15204] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  846.537230][ T5279] 8021q: adding VLAN 0 to HW filter on device eth13
[  846.789223][T15204] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  846.837705][T15587] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0
[  846.855466][T15587] hid-generic 0000:0000:0000.003A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  846.958318][T15204] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[  846.977791][T15204] usb 5-1: config 6 has an invalid interface number: 14 but max is 0
[  846.977838][T15204] usb 5-1: config 6 has no interface number 0
[  846.977888][T15204] usb 5-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid wMaxPacketSize 0
[  846.977919][T15204] usb 5-1: config 6 interface 14 has no altsetting 0
[  847.012982][T15204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.013028][T15204] usb 5-1: Product: syz
[  847.013071][T15204] usb 5-1: Manufacturer: syz
[  847.013094][T15204] usb 5-1: SerialNumber: syz
[  847.275303][T15204] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  847.283409][T15204] command write [95] error -8
[  847.327964][T15204] usb 5-1: USB disconnect, device number 13
[  848.115379][T15825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2481'.
[  848.314130][T15833] input: syz1 as /devices/virtual/input/input71
[  848.331023][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.350935][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.357237][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.363251][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.369466][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.374814][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2482'.
[  848.387340][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.393340][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.399546][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.405587][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.412222][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.419750][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.425832][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.432886][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.439093][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.445132][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.463746][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.482678][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.494643][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.504781][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.517932][T15841] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2485'.
[  848.528788][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.535156][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.544074][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.550683][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.559105][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.565415][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.571541][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.577665][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.583707][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.590590][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.599597][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.609492][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.623830][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.633520][T15830] syz.2.2483 (15830): drop_caches: 2
[  848.677258][T15587] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  848.685044][ T5703] usb 10-1: USB disconnect, device number 3
[  848.752369][T15834] hsr0: entered allmulticast mode
[  848.752418][T15834] hsr_slave_0: entered allmulticast mode
[  848.752455][T15834] hsr_slave_1: entered allmulticast mode
[  848.777520][ T5688] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  848.785617][ T5279] 8021q: adding VLAN 0 to HW filter on device eth14
[  848.792589][T15836] hsr_slave_0: left promiscuous mode
[  848.801499][T15836] hsr_slave_1: left promiscuous mode
[  848.820400][T15587] usb 9-1: device descriptor read/64, error -71
[  848.835751][T15836] hsr0 (unregistering): left allmulticast mode
[  848.886008][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2482'.
[  848.934726][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2482'.
[  848.944643][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2482'.
[  848.945215][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2482'.
[  848.945822][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2482'.
[  848.960825][ T5688] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  848.994299][ T5688] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  848.994343][ T5688] usb 5-1: Product: syz
[  848.994361][ T5688] usb 5-1: Manufacturer: syz
[  848.994377][ T5688] usb 5-1: SerialNumber: syz
[  849.022977][ T5688] usb 5-1: config 0 descriptor??
[  849.026534][T15845] syzkaller0: entered promiscuous mode
[  849.026650][T15845] syzkaller0: entered allmulticast mode
[  849.059632][T15587] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  849.200201][T15587] usb 9-1: device descriptor read/64, error -71
[  849.261189][ T5688] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels)
[  849.307476][T15587] usb usb9-port1: attempt power cycle
[  849.448249][T15204] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  849.544020][T15841] fuse: Unknown parameter 'mounts'
[  849.596121][ T5688] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  849.596191][ T5688] peak_usb 5-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71)
[  849.616383][T15204] usb 8-1: Using ep0 maxpacket: 32
[  849.622418][T15204] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  849.632962][T15204] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  849.633035][T15204] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  849.633080][T15204] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  849.633114][T15204] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  849.652551][T15587] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  849.674601][T15587] usb 9-1: device descriptor read/8, error -71
[  849.700171][T15204] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.700218][T15204] usb 8-1: Product: syz
[  849.700254][T15204] usb 8-1: Manufacturer: syz
[  849.700275][T15204] usb 8-1: SerialNumber: syz
[  849.742160][    C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  849.797419][T14922] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  849.812723][T15204] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input72
[  849.861794][ T5688] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71
[  849.887540][ T5688] usb 5-1: USB disconnect, device number 14
[  849.920219][T15587] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  849.939749][T15587] usb 9-1: device descriptor read/8, error -71
[  849.967921][T14922] usb 10-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  849.980170][T15851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  849.989796][T14922] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  850.000604][T14922] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.005577][T15851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  850.048538][T15204] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  850.048578][T15204]  (id 0x00)
[  850.053889][T15587] usb usb9-port1: unable to enumerate USB device
[  850.061084][T14922] as10x_usb: device has been detected
[  850.061997][T14922] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  850.101460][T14922] usb 10-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  850.130247][T14922] as10x_usb: error during firmware upload part1
[  850.137843][T14922] Registered device Abilis Systems DVB-Titan
[  850.177349][T14530] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  850.235934][T15862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  850.253355][T15862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  850.277574][T15204] rc_core: IR keymap rc-imon-pad not found
[  850.286026][T15204] Registered IR keymap rc-empty
[  850.286145][T15204] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  850.286174][T15204] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  850.328645][T14530] usb 3-1: device descriptor read/64, error -71
[  850.345411][T15204] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0
[  850.358775][T15204] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input73
[  850.382344][T15204] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:3> initialized
[  850.572253][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15
[  850.573039][T14530] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  850.717667][T14530] usb 3-1: device descriptor read/64, error -71
[  850.827854][T14530] usb usb3-port1: attempt power cycle
[  850.987238][ T5688] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  851.137211][ T5688] usb 5-1: Using ep0 maxpacket: 8
[  851.145674][ T5688] usb 5-1: unable to get BOS descriptor or descriptor too short
[  851.145795][ T5688] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb
[  851.152960][ T5688] usb 5-1: config 8 has an invalid interface number: 42 but max is 0
[  851.153036][ T5688] usb 5-1: config 8 has no interface number 0
[  851.153115][ T5688] usb 5-1: config 8 interface 42 has no altsetting 0
[  851.168547][T14530] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  851.182022][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.182091][ T5688] usb 5-1: Product: syz
[  851.182135][ T5688] usb 5-1: Manufacturer: syz
[  851.182189][ T5688] usb 5-1: SerialNumber: syz
[  851.195020][T14530] usb 3-1: device descriptor read/8, error -71
[  851.427829][T14530] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  851.454243][T14530] usb 3-1: device descriptor read/8, error -71
[  851.491467][ T5688] empeg 5-1:8.42: empeg converter detected
[  851.491586][ T5688] usb 5-1: active config #8 != 1 ??
[  851.518324][ T5688] usb 5-1: USB disconnect, device number 15
[  851.559388][T14530] usb usb3-port1: unable to enumerate USB device
[  851.870832][T15921] __nla_validate_parse: 59 callbacks suppressed
[  851.877654][T15921] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2495'.
[  852.244337][T15204] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  852.408939][T15204] usb 9-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  852.419966][T15204] usb 9-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  852.420032][T15204] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  852.420107][T15204] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.457281][T15204] usb 9-1: config 0 descriptor??
[  852.476420][T15204] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  852.676834][ T5688] usb 10-1: USB disconnect, device number 4
[  852.772018][ T5688] Unregistered device Abilis Systems DVB-Titan
[  852.789328][ T5688] as10x_usb: device has been disconnected
[  853.026729][T15945] syzkaller1: entered promiscuous mode
[  853.026772][T15945] syzkaller1: entered allmulticast mode
[  853.116628][T15963] FAULT_INJECTION: forcing a failure.
[  853.116628][T15963] name failslab, interval 1, probability 0, space 0, times 0
[  853.132069][T15963] CPU: 1 UID: 0 PID: 15963 Comm: syz.9.2503 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  853.132103][T15963] Tainted: [L]=SOFTLOCKUP
[  853.132111][T15963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  853.132125][T15963] Call Trace:
[  853.132135][T15963]  <TASK>
[  853.132146][T15963]  dump_stack_lvl+0xe8/0x150
[  853.132202][T15963]  should_fail_ex+0x410/0x560
[  853.132242][T15963]  should_failslab+0xa8/0x100
[  853.132273][T15963]  __kmalloc_cache_node_noprof+0xaa/0x620
[  853.132310][T15963]  ? __css_rstat_updated+0x237/0x540
[  853.132366][T15963]  ? __get_vm_area_node+0x155/0x2f0
[  853.132394][T15963]  ? __get_vm_area_node+0x155/0x2f0
[  853.132431][T15963]  __get_vm_area_node+0x155/0x2f0
[  853.132468][T15963]  __vmalloc_node_range_noprof+0x343/0x1540
[  853.132501][T15963]  ? bpf_check+0x10ee/0x2e10
[  853.132532][T15963]  ? rcu_is_watching+0x16/0xb0
[  853.132567][T15963]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  853.132600][T15963]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  853.132638][T15963]  ? bpf_check+0x106b/0x2e10
[  853.132664][T15963]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  853.132705][T15963]  ? security_capable+0xb9/0x2c0
[  853.132744][T15963]  ? bpf_check+0x10ee/0x2e10
[  853.132766][T15963]  __vmalloc_noprof+0xd2/0x120
[  853.132798][T15963]  ? bpf_check+0x10ee/0x2e10
[  853.132825][T15963]  bpf_check+0x10ee/0x2e10
[  853.132862][T15963]  ? ktime_get_with_offset+0x93/0x2d0
[  853.132890][T15963]  ? __pfx_bpf_check+0x10/0x10
[  853.132917][T15963]  ? bpf_obj_name_cpy+0x194/0x1e0
[  853.132952][T15963]  bpf_prog_load+0x14d6/0x1c20
[  853.132991][T15963]  ? __pfx_bpf_prog_load+0x10/0x10
[  853.133034][T15963]  __sys_bpf+0xd0d/0xd90
[  853.133060][T15963]  ? __pfx___sys_bpf+0x10/0x10
[  853.133089][T15963]  ? __fget_files+0x2a/0x420
[  853.133127][T15963]  ? ksys_write+0x242/0x270
[  853.133154][T15963]  ? __pfx_ksys_write+0x10/0x10
[  853.133192][T15963]  __x64_sys_bpf+0xba/0xd0
[  853.133212][T15963]  do_syscall_64+0x166/0x520
[  853.133239][T15963]  ? trace_irq_disable+0x3b/0x140
[  853.133256][T15963]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.133276][T15963]  ? clear_bhb_loop+0x70/0xc0
[  853.133299][T15963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.133317][T15963] RIP: 0033:0x7ff734d9e159
[  853.133335][T15963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  853.133352][T15963] RSP: 002b:00007ff735c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  853.133372][T15963] RAX: ffffffffffffffda RBX: 00007ff735025fa0 RCX: 00007ff734d9e159
[  853.133387][T15963] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005
[  853.133399][T15963] RBP: 00007ff735c7a090 R08: 0000000000000000 R09: 0000000000000000
[  853.133411][T15963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  853.133422][T15963] R13: 00007ff735026038 R14: 00007ff735025fa0 R15: 00007ff73514fa48
[  853.133450][T15963]  </TASK>
[  853.213960][T15963] syz.9.2503: vmalloc error: size 3808, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0-1
[  853.214177][T15963] CPU: 0 UID: 0 PID: 15963 Comm: syz.9.2503 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  853.214262][T15963] Tainted: [L]=SOFTLOCKUP
[  853.214284][T15963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  853.214322][T15963] Call Trace:
[  853.214345][T15963]  <TASK>
[  853.214376][T15963]  dump_stack_lvl+0xe8/0x150
[  853.214473][T15963]  warn_alloc+0x24d/0x270
[  853.214561][T15963]  ? __kasan_kmalloc+0x22/0xb0
[  853.214638][T15963]  ? __pfx_warn_alloc+0x10/0x10
[  853.214731][T15963]  ? __css_rstat_updated+0x237/0x540
[  853.214796][T15963]  ? __get_vm_area_node+0x155/0x2f0
[  853.214903][T15963]  ? __get_vm_area_node+0x2a9/0x2f0
[  853.214987][T15963]  __vmalloc_node_range_noprof+0x36b/0x1540
[  853.215046][T15963]  ? rcu_is_watching+0x16/0xb0
[  853.215158][T15963]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  853.215246][T15963]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  853.215344][T15963]  ? bpf_check+0x106b/0x2e10
[  853.215410][T15963]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  853.215517][T15963]  ? security_capable+0xb9/0x2c0
[  853.215613][T15963]  ? bpf_check+0x10ee/0x2e10
[  853.215678][T15963]  __vmalloc_noprof+0xd2/0x120
[  853.215764][T15963]  ? bpf_check+0x10ee/0x2e10
[  853.215830][T15963]  bpf_check+0x10ee/0x2e10
[  853.215918][T15963]  ? ktime_get_with_offset+0x93/0x2d0
[  853.215994][T15963]  ? __pfx_bpf_check+0x10/0x10
[  853.216067][T15963]  ? bpf_obj_name_cpy+0x194/0x1e0
[  853.216178][T15963]  bpf_prog_load+0x14d6/0x1c20
[  853.216276][T15963]  ? __pfx_bpf_prog_load+0x10/0x10
[  853.216404][T15963]  __sys_bpf+0xd0d/0xd90
[  853.216505][T15963]  ? __pfx___sys_bpf+0x10/0x10
[  853.216615][T15963]  ? __fget_files+0x2a/0x420
[  853.216752][T15963]  ? ksys_write+0x242/0x270
[  853.216840][T15963]  ? __pfx_ksys_write+0x10/0x10
[  853.216944][T15963]  __x64_sys_bpf+0xba/0xd0
[  853.217018][T15963]  do_syscall_64+0x166/0x520
[  853.217088][T15963]  ? trace_irq_disable+0x3b/0x140
[  853.217142][T15963]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.217201][T15963]  ? clear_bhb_loop+0x70/0xc0
[  853.217275][T15963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.217332][T15963] RIP: 0033:0x7ff734d9e159
[  853.217386][T15963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  853.217440][T15963] RSP: 002b:00007ff735c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  853.217539][T15963] RAX: ffffffffffffffda RBX: 00007ff735025fa0 RCX: 00007ff734d9e159
[  853.217585][T15963] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005
[  853.217627][T15963] RBP: 00007ff735c7a090 R08: 0000000000000000 R09: 0000000000000000
[  853.217661][T15963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  853.217712][T15963] R13: 00007ff735026038 R14: 00007ff735025fa0 R15: 00007ff73514fa48
[  853.217801][T15963]  </TASK>
[  853.255156][T14530] usb 8-1: USB disconnect, device number 3
[  853.316376][T15963] Mem-Info:
[  853.316418][T15963] active_anon:6418 inactive_anon:6 isolated_anon:0
[  853.316418][T15963]  active_file:17 inactive_file:25223 isolated_file:0
[  853.316418][T15963]  unevictable:0 dirty:176 writeback:0
[  853.316418][T15963]  slab_reclaimable:7251 slab_unreclaimable:132293
[  853.316418][T15963]  mapped:32863 shmem:543 pagetables:1548
[  853.316418][T15963]  sec_pagetables:0 bounce:0
[  853.316418][T15963]  kernel_misc_reclaimable:0
[  853.316418][T15963]  free:1292903 free_pcp:11882 free_cma:0
[  853.316571][T15963] Node 0 active_anon:25672kB inactive_anon:24kB active_file:68kB inactive_file:100752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131444kB dirty:704kB writeback:0kB shmem:2172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15364kB pagetables:6080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  853.316737][T15963] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  853.316888][T15963] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  853.320320][T15963] lowmem_reserve[]: 0 2487 2487 2487 2487
[  853.320451][T15963] Node 0 DMA32 free:1207780kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25672kB inactive_anon:24kB active_file:68kB inactive_file:100752kB unevictable:0kB writepending:704kB zspages:0kB present:3129332kB managed:2546820kB mlocked:0kB bounce:0kB free_pcp:47592kB local_pcp:28288kB free_cma:0kB
[  853.320671][T15963] lowmem_reserve[]: 0 0 0 0 0
[  853.324077][T15963] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  853.324234][T15963] lowmem_reserve[]: 0 0 0 0 0
[  853.324341][T15963] Node 1 Normal free:3948476kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  853.324507][T15963] lowmem_reserve[]: 0 0 0 0 0
[  853.324607][T15963] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB
[  853.333508][T15963] Node 0 DMA32: 6507*4kB (UME) 3079*8kB (UME) 2672*16kB (UME) 947*32kB (ME) 992*64kB (UME) 674*128kB (UME) 323*256kB (UME) 99*512kB (UME) 48*1024kB (UME) 9*2048kB (UM) 179*4096kB (UM) = 1207620kB
[  853.342785][T15963] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  853.343138][T15963] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 9*16kB (UM) 8*32kB (UM) 10*64kB (UM) 7*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 3*2048kB (UM) 961*4096kB (UM) = 3948476kB
[  853.343617][T15963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  853.343677][T15963] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  853.343722][T15963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  853.343772][T15963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  853.343826][T15963] 25779 total pagecache pages
[  853.343849][T15963] 0 pages in swap cache
[  853.343871][T15963] Free swap  = 124996kB
[  853.343894][T15963] Total swap = 124996kB
[  853.343916][T15963] 2097051 pages RAM
[  853.343936][T15963] 0 pages HighMem/MovableOnly
[  853.343958][T15963] 428730 pages reserved
[  853.343982][T15963] 0 pages cma reserved
[  853.355127][T15587] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  853.628826][T15587] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  853.716508][T15587] usb 3-1: config index 0 descriptor too short (expected 62845, got 18)
[  853.716603][T15587] usb 3-1: config 147 has an invalid descriptor of length 239, skipping remainder of the config
[  853.716668][T15587] usb 3-1: config 147 has 0 interfaces, different from the descriptor's value: 18
[  853.814862][T15587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.814944][T15587] usb 3-1: Product: syz
[  853.814987][T15587] usb 3-1: Manufacturer: syz
[  853.815038][T15587] usb 3-1: SerialNumber: syz
[  854.763319][T15587] usb 3-1: USB disconnect, device number 57
[  854.894813][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2506'.
[  855.061572][ T5688] usb 9-1: USB disconnect, device number 6
[  855.718910][T16005] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  855.756277][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  856.427663][T15587] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  856.468682][T14922] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  856.581663][T15587] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  856.613463][T15587] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.613520][T15587] usb 8-1: Product: syz
[  856.613538][T15587] usb 8-1: Manufacturer: syz
[  856.613554][T15587] usb 8-1: SerialNumber: syz
[  856.638178][T14922] usb 10-1: Using ep0 maxpacket: 32
[  856.646220][T14922] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  856.658427][T14922] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[  856.671160][T14922] usb 10-1: config 0 has no interface number 0
[  856.684780][T14922] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.684824][T14922] usb 10-1: Product: syz
[  856.684856][T14922] usb 10-1: Manufacturer: syz
[  856.684875][T14922] usb 10-1: SerialNumber: syz
[  856.685023][T15587] usb 8-1: config 0 descriptor??
[  856.756771][T14922] usb 10-1: config 0 descriptor??
[  856.773339][T15587] gspca_main: sq905c-2.14.0 probing 2770:9052
[  856.907021][T15587] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  856.907143][T15587] sq905c 8-1:0.0: Get version command failed
[  856.907560][T15587] sq905c 8-1:0.0: probe with driver sq905c failed with error -71
[  856.934778][T15587] usb 8-1: USB disconnect, device number 4
[  857.069681][T14530] usb 3-1: new low-speed USB device number 58 using dummy_hcd
[  857.195109][T14922] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  857.197391][T14922] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  857.214525][T14530] usb 3-1: device descriptor read/64, error -71
[  857.237847][T16035] vivid-000: =================  START STATUS  =================
[  857.248135][T16035] vivid-000: Generate PTS: true
[  857.254185][T16035] vivid-000: Generate SCR: true
[  857.262012][T16035] tpg source WxH: 1280x720 (R'G'B)
[  857.267472][T16035] tpg field: 1
[  857.270975][T16035] tpg crop: (0,0)/1280x720
[  857.275736][T16035] tpg compose: (0,0)/1023x720
[  857.280636][T16035] tpg colorspace: 3
[  857.284564][T16035] tpg transfer function: 0/1
[  857.292827][T16035] tpg quantization: 0/1
[  857.297614][T16035] tpg RGB range: 0/1
[  857.301882][T16035] vivid-000: ==================  END STATUS  ==================
[  857.393226][T16036] netlink: 'syz.8.2516': attribute type 1 has an invalid length.
[  857.447264][T14530] usb 3-1: new low-speed USB device number 59 using dummy_hcd
[  857.580723][T14530] usb 3-1: device descriptor read/64, error -71
[  857.684393][ T5279] 8021q: adding VLAN 0 to HW filter on device eth16
[  857.691644][T14530] usb usb3-port1: attempt power cycle
[  857.797891][T16043] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2517'.
[  858.027242][T14530] usb 3-1: new low-speed USB device number 60 using dummy_hcd
[  858.050737][T14530] usb 3-1: device descriptor read/8, error -71
[  858.068344][   T25] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  858.207315][T15204] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  858.231394][T16056] bridge0: port 2(bridge_slave_1) entered disabled state
[  858.231890][T16056] bridge0: port 1(bridge_slave_0) entered disabled state
[  858.248891][   T25] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  858.259936][   T25] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  858.260032][   T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  858.260100][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.290294][T14530] usb 3-1: new low-speed USB device number 61 using dummy_hcd
[  858.304667][   T25] usb 5-1: config 0 descriptor??
[  858.316131][T14530] usb 3-1: device descriptor read/8, error -71
[  858.339457][   T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  858.357780][T15204] usb 8-1: device descriptor read/64, error -71
[  858.424781][T14530] usb usb3-port1: unable to enumerate USB device
[  858.496244][T14922] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  858.496533][T14922] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -32
[  858.559753][T14922] usb 10-1: USB disconnect, device number 5
[  858.599926][T15204] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  858.747335][T15204] usb 8-1: device descriptor read/64, error -71
[  858.858244][T15204] usb usb8-port1: attempt power cycle
[  859.021591][T16056] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  859.154027][T16056] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  859.227424][T15204] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  859.269103][T15204] usb 8-1: device descriptor read/8, error -71
[  859.532073][T15204] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  859.559929][T15204] usb 8-1: device descriptor read/8, error -71
[  859.667583][T15204] usb usb8-port1: unable to enumerate USB device
[  859.800011][T16073] netdevsim netdevsim9 netdevsim0: entered allmulticast mode
[  859.827374][T13416] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.842666][T13416] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.843123][T13416] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.845013][T13416] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.919241][T16083] FAULT_INJECTION: forcing a failure.
[  859.919241][T16083] name failslab, interval 1, probability 0, space 0, times 0
[  859.932199][T16083] CPU: 1 UID: 0 PID: 16083 Comm: syz.9.2522 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  859.932234][T16083] Tainted: [L]=SOFTLOCKUP
[  859.932243][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  859.932257][T16083] Call Trace:
[  859.932266][T16083]  <TASK>
[  859.932277][T16083]  dump_stack_lvl+0xe8/0x150
[  859.932316][T16083]  should_fail_ex+0x410/0x560
[  859.932354][T16083]  should_failslab+0xa8/0x100
[  859.932381][T16083]  ? skb_clone+0x212/0x3a0
[  859.932407][T16083]  kmem_cache_alloc_noprof+0xa1/0x600
[  859.932444][T16083]  ? skb_clone+0x212/0x3a0
[  859.932475][T16083]  skb_clone+0x212/0x3a0
[  859.932502][T16083]  __netlink_deliver_tap+0x413/0x860
[  859.932552][T16083]  ? netlink_deliver_tap+0x2e/0x1b0
[  859.932580][T16083]  netlink_deliver_tap+0x19c/0x1b0
[  859.932608][T16083]  netlink_unicast+0x781/0x940
[  859.932642][T16083]  netlink_sendmsg+0x813/0xb40
[  859.932678][T16083]  ? __pfx_netlink_sendmsg+0x10/0x10
[  859.932713][T16083]  ? apparmor_socket_sendmsg+0x98/0x360
[  859.932750][T16083]  ? __pfx_netlink_sendmsg+0x10/0x10
[  859.932775][T16083]  sock_sendmsg_nosec+0x13a/0x180
[  859.932808][T16083]  ____sys_sendmsg+0x54e/0x850
[  859.932836][T16083]  ? __pfx_____sys_sendmsg+0x10/0x10
[  859.932869][T16083]  ? import_iovec+0x73/0xa0
[  859.932909][T16083]  ___sys_sendmsg+0x2a5/0x360
[  859.932931][T16083]  ? __lock_acquire+0x6df/0x2e50
[  859.932960][T16083]  ? __pfx____sys_sendmsg+0x10/0x10
[  859.933020][T16083]  ? __fget_files+0x2a/0x420
[  859.933050][T16083]  ? __fget_files+0x3a2/0x420
[  859.933088][T16083]  __x64_sys_sendmsg+0x1b1/0x290
[  859.933115][T16083]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  859.933159][T16083]  do_syscall_64+0x166/0x520
[  859.933191][T16083]  ? trace_irq_disable+0x3b/0x140
[  859.933214][T16083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.933239][T16083]  ? clear_bhb_loop+0x70/0xc0
[  859.933267][T16083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.933291][T16083] RIP: 0033:0x7ff734d9e159
[  859.933312][T16083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  859.933333][T16083] RSP: 002b:00007ff735c7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  859.933357][T16083] RAX: ffffffffffffffda RBX: 00007ff735025fa0 RCX: 00007ff734d9e159
[  859.933375][T16083] RDX: 0000000000048080 RSI: 0000200000000280 RDI: 0000000000000003
[  859.933391][T16083] RBP: 00007ff735c7a090 R08: 0000000000000000 R09: 0000000000000000
[  859.933406][T16083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  859.933420][T16083] R13: 00007ff735026038 R14: 00007ff735025fa0 R15: 00007ff73514fa48
[  859.933460][T16083]  </TASK>
[  860.695161][T16107] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  860.903490][ T5688] usb 5-1: USB disconnect, device number 16
[  861.198671][T16119] UHID_CREATE from different security context by process 51 (syz.4.2528), this is not allowed.
[  861.373934][T16129] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2530'.
[  861.457186][ T5701] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  861.548531][T15587] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  861.617707][ T5701] usb 5-1: Using ep0 maxpacket: 16
[  861.630493][ T5701] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  861.643400][ T5701] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  861.651870][ T5701] usb 5-1: config 1 has no interface number 0
[  861.651935][ T5701] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  861.651965][ T5701] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  861.651992][ T5701] usb 5-1: config 1 interface 105 has no altsetting 0
[  861.695471][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  861.695518][ T5701] usb 5-1: Product: syz
[  861.695579][ T5701] usb 5-1: Manufacturer: syz
[  861.695603][ T5701] usb 5-1: SerialNumber: syz
[  861.708467][T15587] usb 10-1: Using ep0 maxpacket: 16
[  861.715986][T15587] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  861.738188][T16119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  861.746492][T16119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  861.769202][T15587] usb 10-1: config 0 has an invalid interface number: 34 but max is 0
[  861.769971][T15587] usb 10-1: config 0 has no interface number 0
[  861.770131][T15587] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  861.770213][T15587] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  861.827892][T15587] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.827973][T15587] usb 10-1: Product: syz
[  861.828010][T15587] usb 10-1: Manufacturer: syz
[  861.828079][T15587] usb 10-1: SerialNumber: syz
[  861.885926][T15587] usb 10-1: config 0 descriptor??
[  861.893342][T16122] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  861.899850][T16122] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  862.117478][T15587] asix 10-1:0.34: probe with driver asix failed with error -71
[  862.152173][T15587] usb 10-1: USB disconnect, device number 6
[  862.182012][T16119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  862.182201][T16119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  862.297299][T14530] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  862.381394][T16143] FAULT_INJECTION: forcing a failure.
[  862.381394][T16143] name failslab, interval 1, probability 0, space 0, times 0
[  862.381462][T16143] CPU: 0 UID: 0 PID: 16143 Comm: syz.7.2534 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  862.381493][T16143] Tainted: [L]=SOFTLOCKUP
[  862.381549][T16143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  862.381594][T16143] Call Trace:
[  862.381624][T16143]  <TASK>
[  862.381654][T16143]  dump_stack_lvl+0xe8/0x150
[  862.381772][T16143]  should_fail_ex+0x410/0x560
[  862.381877][T16143]  ? __alloc_skb+0x1db/0x7a0
[  862.381963][T16143]  should_failslab+0xa8/0x100
[  862.382040][T16143]  ? __alloc_skb+0x1db/0x7a0
[  862.382116][T16143]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  862.382216][T16143]  ? __alloc_skb+0x18d/0x7a0
[  862.382299][T16143]  ? __alloc_skb+0x1db/0x7a0
[  862.382385][T16143]  __alloc_skb+0x1db/0x7a0
[  862.382472][T16143]  netlink_ack+0x136/0xb30
[  862.382538][T16143]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  862.382696][T16143]  ? ref_tracker_free+0x689/0x830
[  862.382808][T16143]  ? __pfx_ref_tracker_free+0x10/0x10
[  862.382919][T16143]  netlink_rcv_skb+0x2a4/0x4a0
[  862.382994][T16143]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  862.383095][T16143]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  862.383205][T16143]  ? netlink_deliver_tap+0x2e/0x1b0
[  862.383269][T16143]  ? netlink_deliver_tap+0x2e/0x1b0
[  862.383341][T16143]  netlink_unicast+0x7bd/0x940
[  862.383428][T16143]  netlink_sendmsg+0x813/0xb40
[  862.383514][T16143]  ? __pfx_netlink_sendmsg+0x10/0x10
[  862.383599][T16143]  ? apparmor_socket_sendmsg+0x98/0x360
[  862.383694][T16143]  ? __pfx_netlink_sendmsg+0x10/0x10
[  862.383751][T16143]  sock_sendmsg_nosec+0x13a/0x180
[  862.383845][T16143]  ____sys_sendmsg+0x54e/0x850
[  862.383920][T16143]  ? __pfx_____sys_sendmsg+0x10/0x10
[  862.383999][T16143]  ? import_iovec+0x73/0xa0
[  862.384105][T16143]  ___sys_sendmsg+0x2a5/0x360
[  862.384153][T16143]  ? __lock_acquire+0x6df/0x2e50
[  862.384229][T16143]  ? __pfx____sys_sendmsg+0x10/0x10
[  862.384367][T16143]  ? __fget_files+0x2a/0x420
[  862.384451][T16143]  ? __fget_files+0x3a2/0x420
[  862.384567][T16143]  __x64_sys_sendmsg+0x1b1/0x290
[  862.384634][T16143]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  862.384745][T16143]  do_syscall_64+0x166/0x520
[  862.384832][T16143]  ? trace_irq_disable+0x3b/0x140
[  862.384888][T16143]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.384952][T16143]  ? clear_bhb_loop+0x70/0xc0
[  862.385020][T16143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.385079][T16143] RIP: 0033:0x7f740f59e159
[  862.385136][T16143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  862.385189][T16143] RSP: 002b:00007f7410523028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  862.385256][T16143] RAX: ffffffffffffffda RBX: 00007f740f825fa0 RCX: 00007f740f59e159
[  862.385300][T16143] RDX: 0000000000048080 RSI: 0000200000000280 RDI: 0000000000000003
[  862.385329][T16143] RBP: 00007f7410523090 R08: 0000000000000000 R09: 0000000000000000
[  862.385364][T16143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  862.385399][T16143] R13: 00007f740f826038 R14: 00007f740f825fa0 R15: 00007f740f94fa48
[  862.385486][T16143]  </TASK>
[  862.396513][ T5701] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  862.396779][ T5701] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71
[  862.451451][T14530] usb 3-1: Using ep0 maxpacket: 32
[  862.457944][T14530] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  862.475312][T14530] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  862.475379][T14530] usb 3-1: config 0 has no interface number 0
[  862.516094][T14530] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.516178][T14530] usb 3-1: Product: syz
[  862.516221][T14530] usb 3-1: Manufacturer: syz
[  862.516265][T14530] usb 3-1: SerialNumber: syz
[  862.610128][T14530] usb 3-1: config 0 descriptor??
[  862.704659][ T5701] usb 5-1: USB disconnect, device number 17
[  862.735552][T14530] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  862.918460][T14530] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  862.968028][T14530] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  863.175178][T16154] loop5: detected capacity change from 0 to 7
[  863.185230][T16154]  loop5: p1 < > p3 p4 < >
[  863.191445][T16154] loop5: partition table partially beyond EOD, truncated
[  863.452268][T15647] udevd[15647]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  863.464258][T15449] udevd[15449]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  863.492121][T15376] udevd[15376]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  863.517356][  T991] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  863.527259][ T5701] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  863.556951][T16164] FAULT_INJECTION: forcing a failure.
[  863.556951][T16164] name failslab, interval 1, probability 0, space 0, times 0
[  863.573905][T16164] CPU: 1 UID: 0 PID: 16164 Comm: syz.9.2540 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  863.573942][T16164] Tainted: [L]=SOFTLOCKUP
[  863.573952][T16164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  863.573967][T16164] Call Trace:
[  863.573977][T16164]  <TASK>
[  863.573987][T16164]  dump_stack_lvl+0xe8/0x150
[  863.574026][T16164]  should_fail_ex+0x410/0x560
[  863.574066][T16164]  should_failslab+0xa8/0x100
[  863.574096][T16164]  __kmalloc_node_noprof+0x100/0x720
[  863.574131][T16164]  ? __get_vm_area_node+0x200/0x2f0
[  863.574162][T16164]  ? __get_vm_area_node+0x283/0x2f0
[  863.574190][T16164]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  863.574221][T16164]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  863.574263][T16164]  __vmalloc_node_range_noprof+0x5b4/0x1540
[  863.574318][T16164]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  863.574363][T16164]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  863.574405][T16164]  ? security_capable+0xb9/0x2c0
[  863.574447][T16164]  ? bpf_check+0x10ee/0x2e10
[  863.574470][T16164]  __vmalloc_noprof+0xd2/0x120
[  863.574503][T16164]  ? bpf_check+0x10ee/0x2e10
[  863.574530][T16164]  bpf_check+0x10ee/0x2e10
[  863.574566][T16164]  ? ktime_get_with_offset+0x93/0x2d0
[  863.574595][T16164]  ? __pfx_bpf_check+0x10/0x10
[  863.574624][T16164]  ? bpf_obj_name_cpy+0x194/0x1e0
[  863.574661][T16164]  bpf_prog_load+0x14d6/0x1c20
[  863.574700][T16164]  ? __pfx_bpf_prog_load+0x10/0x10
[  863.574761][T16164]  __sys_bpf+0xd0d/0xd90
[  863.574796][T16164]  ? __pfx___sys_bpf+0x10/0x10
[  863.574834][T16164]  ? __fget_files+0x2a/0x420
[  863.574888][T16164]  ? ksys_write+0x242/0x270
[  863.574923][T16164]  ? __pfx_ksys_write+0x10/0x10
[  863.574962][T16164]  __x64_sys_bpf+0xba/0xd0
[  863.574988][T16164]  do_syscall_64+0x166/0x520
[  863.575020][T16164]  ? trace_irq_disable+0x3b/0x140
[  863.575043][T16164]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.575068][T16164]  ? clear_bhb_loop+0x70/0xc0
[  863.575097][T16164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.575121][T16164] RIP: 0033:0x7ff734d9e159
[  863.575143][T16164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  863.575185][T16164] RSP: 002b:00007ff735c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  863.575211][T16164] RAX: ffffffffffffffda RBX: 00007ff735025fa0 RCX: 00007ff734d9e159
[  863.575228][T16164] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005
[  863.575244][T16164] RBP: 00007ff735c7a090 R08: 0000000000000000 R09: 0000000000000000
[  863.575259][T16164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  863.575274][T16164] R13: 00007ff735026038 R14: 00007ff735025fa0 R15: 00007ff73514fa48
[  863.575310][T16164]  </TASK>
[  863.591618][T16164] syz.9.2540: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0-1
[  863.591695][T16164] CPU: 1 UID: 0 PID: 16164 Comm: syz.9.2540 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  863.591734][T16164] Tainted: [L]=SOFTLOCKUP
[  863.591743][T16164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  863.591757][T16164] Call Trace:
[  863.591766][T16164]  <TASK>
[  863.591776][T16164]  dump_stack_lvl+0xe8/0x150
[  863.591814][T16164]  warn_alloc+0x24d/0x270
[  863.591857][T16164]  ? __pfx_warn_alloc+0x10/0x10
[  863.591896][T16164]  ? __kmalloc_node_noprof+0x4d7/0x720
[  863.591928][T16164]  ? __get_vm_area_node+0x200/0x2f0
[  863.591957][T16164]  ? __get_vm_area_node+0x283/0x2f0
[  863.591986][T16164]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  863.592017][T16164]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  863.592057][T16164]  __vmalloc_node_range_noprof+0x969/0x1540
[  863.592106][T16164]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  863.592151][T16164]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  863.592191][T16164]  ? security_capable+0xb9/0x2c0
[  863.592227][T16164]  ? bpf_check+0x10ee/0x2e10
[  863.592249][T16164]  __vmalloc_noprof+0xd2/0x120
[  863.592281][T16164]  ? bpf_check+0x10ee/0x2e10
[  863.592308][T16164]  bpf_check+0x10ee/0x2e10
[  863.592345][T16164]  ? ktime_get_with_offset+0x93/0x2d0
[  863.592374][T16164]  ? __pfx_bpf_check+0x10/0x10
[  863.592401][T16164]  ? bpf_obj_name_cpy+0x194/0x1e0
[  863.592437][T16164]  bpf_prog_load+0x14d6/0x1c20
[  863.592475][T16164]  ? __pfx_bpf_prog_load+0x10/0x10
[  863.592526][T16164]  __sys_bpf+0xd0d/0xd90
[  863.592561][T16164]  ? __pfx___sys_bpf+0x10/0x10
[  863.592597][T16164]  ? __fget_files+0x2a/0x420
[  863.592647][T16164]  ? ksys_write+0x242/0x270
[  863.592681][T16164]  ? __pfx_ksys_write+0x10/0x10
[  863.592748][T16164]  __x64_sys_bpf+0xba/0xd0
[  863.592774][T16164]  do_syscall_64+0x166/0x520
[  863.592804][T16164]  ? trace_irq_disable+0x3b/0x140
[  863.592826][T16164]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.592850][T16164]  ? clear_bhb_loop+0x70/0xc0
[  863.592878][T16164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.592902][T16164] RIP: 0033:0x7ff734d9e159
[  863.592923][T16164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  863.592942][T16164] RSP: 002b:00007ff735c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  863.592966][T16164] RAX: ffffffffffffffda RBX: 00007ff735025fa0 RCX: 00007ff734d9e159
[  863.592984][T16164] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005
[  863.592999][T16164] RBP: 00007ff735c7a090 R08: 0000000000000000 R09: 0000000000000000
[  863.593013][T16164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  863.593027][T16164] R13: 00007ff735026038 R14: 00007ff735025fa0 R15: 00007ff73514fa48
[  863.593062][T16164]  </TASK>
[  863.661023][T16164] Mem-Info:
[  863.661066][T16164] active_anon:6251 inactive_anon:6 isolated_anon:0
[  863.661066][T16164]  active_file:17 inactive_file:25227 isolated_file:0
[  863.661066][T16164]  unevictable:0 dirty:235 writeback:0
[  863.661066][T16164]  slab_reclaimable:7173 slab_unreclaimable:132369
[  863.661066][T16164]  mapped:30908 shmem:535 pagetables:1443
[  863.661066][T16164]  sec_pagetables:0 bounce:0
[  863.661066][T16164]  kernel_misc_reclaimable:0
[  863.661066][T16164]  free:1294046 free_pcp:10860 free_cma:0
[  863.661317][T16164] Node 0 active_anon:25004kB inactive_anon:24kB active_file:68kB inactive_file:100768kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123632kB dirty:940kB writeback:0kB shmem:2140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15040kB pagetables:5660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  863.661531][T16164] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  863.661734][T16164] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  863.663284][T16164] lowmem_reserve[]: 0 2487 2487 2487 2487
[  863.663472][T16164] Node 0 DMA32 free:1212404kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25004kB inactive_anon:24kB active_file:68kB inactive_file:100768kB unevictable:0kB writepending:940kB zspages:0kB present:3129332kB managed:2546820kB mlocked:0kB bounce:0kB free_pcp:43436kB local_pcp:22224kB free_cma:0kB
[  863.663768][T16164] lowmem_reserve[]: 0 0 0 0 0
[  863.663936][T16164] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  863.701585][T16164] lowmem_reserve[]: 0 0 0 0 0
[  863.701768][T16164] Node 1 Normal free:3948424kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  863.702002][T16164] lowmem_reserve[]: 0 0 0 0 0
[  863.702109][T16164] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB
[  863.702883][T16164] Node 0 DMA32: 6563*4kB (UM) 3420*8kB (UME) 2731*16kB (UME) 988*32kB (UME) 936*64kB (UME) 680*128kB (UME) 325*256kB (UME) 100*512kB (UME) 49*1024kB (UME) 9*2048kB (UM) 179*4096kB (UM) 
[  863.735396][  T991] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  863.745738][ T5701] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  863.770727][T16164] = 1212060kB
[  863.770834][T16164] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  863.771264][T16164] Node 1 Normal: 2*4kB (UM) 4*8kB (U) 9*16kB (UM) 8*32kB (UM) 10*64kB (UM) 7*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 3*2048kB (UM) 961*4096kB (UM) = 3948472kB
[  863.771971][T16164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  863.772076][T16164] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  863.772126][T16164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  863.772172][T16164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  863.772280][T16164] 25775 total pagecache pages
[  863.772310][T16164] 0 pages in swap cache
[  863.772333][T16164] Free swap  = 124996kB
[  863.772355][T16164] Total swap = 124996kB
[  863.772379][T16164] 2097051 pages RAM
[  863.772463][T16164] 0 pages HighMem/MovableOnly
[  863.772485][T16164] 428730 pages reserved
[  863.772508][T16164] 0 pages cma reserved
[  863.773190][  T991] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  863.773241][  T991] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  863.773318][  T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.844831][ T5701] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  863.844868][ T5701] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  863.844918][ T5701] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.403005][ T5701] usb 9-1: usb_control_msg returned -32
[  864.403156][ T5701] usbtmc 9-1:16.0: can't read capabilities
[  864.448925][  T991] usb 5-1: config 0 descriptor??
[  864.645670][  T991] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  864.837574][T16171] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2541'.
[  864.861302][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  864.869644][ T5688] usb 3-1: USB disconnect, device number 62
[  864.884686][ T5688] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  864.909445][ T5688] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  864.921844][ T5688] quatech2 3-1:0.51: device disconnected
[  865.087935][T14530] usb 9-1: USB disconnect, device number 7
[  865.805359][T16197] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  866.142449][T16213] loop5: detected capacity change from 0 to 7
[  866.150337][T16213]  loop5: p1 < > p3 p4 < >
[  866.150384][T16213] loop5: partition table partially beyond EOD, truncated
[  866.239201][ T5701] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  866.403698][ T5701] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  866.416767][T15449] udevd[15449]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  866.436310][T15647] udevd[15647]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  866.453546][T15376] udevd[15376]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  866.459392][ T5701] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.459479][ T5701] usb 8-1: Product: syz
[  866.459522][ T5701] usb 8-1: Manufacturer: syz
[  866.459564][ T5701] usb 8-1: SerialNumber: syz
[  866.510794][ T5701] usb 8-1: config 0 descriptor??
[  866.535007][ T5701] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  866.600020][T16224] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2553'.
[  866.691649][  T991] usb 5-1: USB disconnect, device number 18
[  867.595042][T16203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  867.615627][T16203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  867.798347][T16251] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  867.798402][T16251] FAULT_INJECTION: forcing a failure.
[  867.798402][T16251] name failslab, interval 1, probability 0, space 0, times 0
[  867.798455][T16251] CPU: 0 UID: 0 PID: 16251 Comm: syz.2.2559 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  867.798487][T16251] Tainted: [L]=SOFTLOCKUP
[  867.798496][T16251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  867.798511][T16251] Call Trace:
[  867.798521][T16251]  <TASK>
[  867.798531][T16251]  dump_stack_lvl+0xe8/0x150
[  867.798572][T16251]  should_fail_ex+0x410/0x560
[  867.798605][T16251]  ? __alloc_skb+0x1db/0x7a0
[  867.798637][T16251]  should_failslab+0xa8/0x100
[  867.798666][T16251]  ? __alloc_skb+0x1db/0x7a0
[  867.798697][T16251]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  867.798731][T16251]  ? __alloc_skb+0x18d/0x7a0
[  867.798765][T16251]  ? __alloc_skb+0x1db/0x7a0
[  867.798804][T16251]  __alloc_skb+0x1db/0x7a0
[  867.798843][T16251]  rtmsg_ifinfo_build_skb+0x7f/0x260
[  867.798881][T16251]  rtmsg_ifinfo+0x8c/0x1a0
[  867.798918][T16251]  __dev_notify_flags+0x257/0x510
[  867.798952][T16251]  ? netif_set_allmulti+0x373/0x4d0
[  867.798993][T16251]  ? __pfx___dev_notify_flags+0x10/0x10
[  867.799025][T16251]  ? __dev_change_flags+0x64b/0x820
[  867.799067][T16251]  ? __pfx___dev_change_flags+0x10/0x10
[  867.799115][T16251]  netif_change_flags+0xde/0x1b0
[  867.799155][T16251]  do_setlink+0xdd6/0x4670
[  867.799177][T16251]  ? unwind_get_return_address+0x4d/0x90
[  867.799224][T16251]  ? __pfx_do_setlink+0x10/0x10
[  867.799247][T16251]  ? __lock_acquire+0x6df/0x2e50
[  867.799274][T16251]  ? stack_depot_save_flags+0x33/0x7f0
[  867.799315][T16251]  ? kasan_save_track+0x4f/0x80
[  867.799345][T16251]  ? kasan_save_track+0x3e/0x80
[  867.799365][T16251]  ? __kasan_kmalloc+0x93/0xb0
[  867.799388][T16251]  ? __kmalloc_cache_noprof+0x321/0x600
[  867.799432][T16251]  ? __mutex_trylock_common+0x15f/0x270
[  867.799463][T16251]  ? __pfx___mutex_trylock_common+0x10/0x10
[  867.799494][T16251]  ? rcu_is_watching+0x16/0xb0
[  867.799521][T16251]  ? trace_contention_end+0x3d/0x140
[  867.799552][T16251]  ? __mutex_lock+0x30b/0x1550
[  867.799596][T16251]  ? rtnl_newlink+0xc10/0x1c30
[  867.799632][T16251]  ? __pfx___mutex_lock+0x10/0x10
[  867.799674][T16251]  ? full_name_hash+0x92/0xe0
[  867.799716][T16251]  rtnl_newlink+0x15a3/0x1c30
[  867.799764][T16251]  ? __pfx_rtnl_newlink+0x10/0x10
[  867.799794][T16251]  ? do_syscall_64+0x166/0x520
[  867.799864][T16251]  ? kasan_quarantine_put+0xbb/0x1f0
[  867.799898][T16251]  ? lockdep_hardirqs_on+0x7b/0x110
[  867.799930][T16251]  ? nlmon_xmit+0xb0/0x100
[  867.800069][T16251]  ? kmem_cache_free+0x182/0x650
[  867.800104][T16251]  ? __lock_acquire+0x6df/0x2e50
[  867.800131][T16251]  ? __dev_queue_xmit+0x29b/0x3820
[  867.800158][T16251]  ? __local_bh_enable_ip+0xd6/0x140
[  867.800189][T16251]  ? lockdep_hardirqs_on+0x7b/0x110
[  867.800218][T16251]  ? __dev_queue_xmit+0x29b/0x3820
[  867.800240][T16251]  ? __local_bh_enable_ip+0xd6/0x140
[  867.800267][T16251]  ? __dev_queue_xmit+0x29b/0x3820
[  867.800300][T16251]  ? lock_acquire+0x115/0x350
[  867.800331][T16251]  ? __pfx_rtnl_newlink+0x10/0x10
[  867.800377][T16251]  ? __pfx_rtnl_newlink+0x10/0x10
[  867.800409][T16251]  rtnetlink_rcv_msg+0x802/0xc00
[  867.800446][T16251]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  867.800479][T16251]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  867.800510][T16251]  ? ref_tracker_free+0x689/0x830
[  867.800546][T16251]  ? __pfx_ref_tracker_free+0x10/0x10
[  867.800593][T16251]  netlink_rcv_skb+0x226/0x4a0
[  867.800621][T16251]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  867.800655][T16251]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  867.800694][T16251]  ? netlink_deliver_tap+0x2e/0x1b0
[  867.800718][T16251]  ? netlink_deliver_tap+0x2e/0x1b0
[  867.800750][T16251]  netlink_unicast+0x7bd/0x940
[  867.800784][T16251]  netlink_sendmsg+0x813/0xb40
[  867.800820][T16251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  867.800855][T16251]  ? apparmor_socket_sendmsg+0x98/0x360
[  867.800892][T16251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  867.800916][T16251]  sock_sendmsg_nosec+0x13a/0x180
[  867.800948][T16251]  ____sys_sendmsg+0x54e/0x850
[  867.800977][T16251]  ? __pfx_____sys_sendmsg+0x10/0x10
[  867.801010][T16251]  ? import_iovec+0x73/0xa0
[  867.801050][T16251]  ___sys_sendmsg+0x2a5/0x360
[  867.801072][T16251]  ? __lock_acquire+0x6df/0x2e50
[  867.801099][T16251]  ? __pfx____sys_sendmsg+0x10/0x10
[  867.801162][T16251]  ? __fget_files+0x2a/0x420
[  867.801191][T16251]  ? __fget_files+0x3a2/0x420
[  867.801231][T16251]  __x64_sys_sendmsg+0x1b1/0x290
[  867.801257][T16251]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  867.801304][T16251]  do_syscall_64+0x166/0x520
[  867.801343][T16251]  ? trace_irq_disable+0x3b/0x140
[  867.801366][T16251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.801391][T16251]  ? clear_bhb_loop+0x70/0xc0
[  867.801419][T16251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.801443][T16251] RIP: 0033:0x7fca3b79e159
[  867.801465][T16251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.801486][T16251] RSP: 002b:00007fca3c705028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  867.801511][T16251] RAX: ffffffffffffffda RBX: 00007fca3ba25fa0 RCX: 00007fca3b79e159
[  867.801529][T16251] RDX: 0000000000048080 RSI: 0000200000000280 RDI: 0000000000000003
[  867.801545][T16251] RBP: 00007fca3c705090 R08: 0000000000000000 R09: 0000000000000000
[  867.801561][T16251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  867.801576][T16251] R13: 00007fca3ba26038 R14: 00007fca3ba25fa0 R15: 00007fca3bb4fa48
[  867.801612][T16251]  </TASK>
[  868.361067][ T5701] gspca_stk1135: reg_w 0xf err -110
[  868.362306][ T5701] gspca_stk1135: serial bus timeout: status=0x00
[  868.362333][ T5701] gspca_stk1135: Sensor write failed
[  868.362429][ T5701] gspca_stk1135: serial bus timeout: status=0x00
[  868.362460][ T5701] gspca_stk1135: Sensor write failed
[  868.362595][ T5701] gspca_stk1135: serial bus timeout: status=0x00
[  868.362627][ T5701] gspca_stk1135: Sensor read failed
[  868.362712][ T5701] gspca_stk1135: serial bus timeout: status=0x00
[  868.394512][ T5701] gspca_stk1135: Sensor read failed
[  868.394526][ T5701] gspca_stk1135: Detected sensor type unknown (0x0)
[  868.394568][ T5701] gspca_stk1135: serial bus timeout: status=0x00
[  868.394614][ T5701] gspca_stk1135: Sensor read failed
[  868.394748][ T5701] gspca_stk1135: serial bus timeout: status=0x00
[  868.394787][ T5701] gspca_stk1135: Sensor read failed
[  868.394885][ T5701] gspca_stk1135: serial bus timeout: status=0x00
[  868.394909][ T5701] gspca_stk1135: Sensor write failed
[  868.394995][ T5701] gspca_stk1135: serial bus timeout: status=0x00
[  868.395025][ T5701] gspca_stk1135: Sensor write failed
[  868.395244][ T5701] stk1135 8-1:0.0: probe with driver stk1135 failed with error -110
[  868.638755][ T5688] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  868.797582][ T5688] usb 5-1: Using ep0 maxpacket: 16
[  868.804544][ T5688] usb 5-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d
[  868.816658][ T5688] usb 5-1: config 3 has an invalid interface number: 231 but max is 0
[  868.826464][ T5688] usb 5-1: config 3 has no interface number 0
[  868.826530][ T5688] usb 5-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  868.826561][ T5688] usb 5-1: config 3 interface 231 has no altsetting 0
[  868.859224][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.867560][ T5688] usb 5-1: Product: syz
[  868.867581][ T5688] usb 5-1: Manufacturer: syz
[  868.867600][ T5688] usb 5-1: SerialNumber: syz
[  869.147574][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2557'.
[  869.147938][T16245] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  869.176933][T15587] usb 8-1: USB disconnect, device number 9
[  869.321819][T16245] batman_adv: batadv0: Removing interface: batadv_slave_1
[  869.510239][ T5688] kvaser_usb 5-1:3.231: error -ENODEV: Cannot get usb endpoint(s)
[  869.539135][ T5688] usb 5-1: USB disconnect, device number 19
[  870.036023][T16279] loop5: detected capacity change from 0 to 7
[  870.045809][T16279]  loop5: p1 < > p3 p4 < >
[  870.045856][T16279] loop5: partition table partially beyond EOD, truncated
[  870.241111][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  870.241172][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  870.382812][T15312] udevd[15312]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  870.400531][T15725] udevd[15725]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  870.411398][T15647] udevd[15647]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  870.599158][ T5756] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  870.693958][T16300] FAULT_INJECTION: forcing a failure.
[  870.693958][T16300] name failslab, interval 1, probability 0, space 0, times 0
[  870.694025][T16300] CPU: 1 UID: 0 PID: 16300 Comm: syz.2.2570 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  870.694055][T16300] Tainted: [L]=SOFTLOCKUP
[  870.694121][T16300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  870.694153][T16300] Call Trace:
[  870.694176][T16300]  <TASK>
[  870.694208][T16300]  dump_stack_lvl+0xe8/0x150
[  870.694404][T16300]  should_fail_ex+0x410/0x560
[  870.694512][T16300]  should_failslab+0xa8/0x100
[  870.694612][T16300]  ? skb_clone+0x212/0x3a0
[  870.694719][T16300]  kmem_cache_alloc_noprof+0xa1/0x600
[  870.694818][T16300]  ? skb_clone+0x212/0x3a0
[  870.694895][T16300]  skb_clone+0x212/0x3a0
[  870.694970][T16300]  __netlink_deliver_tap+0x413/0x860
[  870.695070][T16300]  ? netlink_deliver_tap+0x2e/0x1b0
[  870.695137][T16300]  netlink_deliver_tap+0x19c/0x1b0
[  870.695206][T16300]  netlink_sendskb+0x68/0x140
[  870.695303][T16300]  netlink_rcv_skb+0x2a4/0x4a0
[  870.695376][T16300]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  870.695473][T16300]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  870.695571][T16300]  ? netlink_deliver_tap+0x2e/0x1b0
[  870.695652][T16300]  ? netlink_deliver_tap+0x2e/0x1b0
[  870.695745][T16300]  netlink_unicast+0x7bd/0x940
[  870.695832][T16300]  netlink_sendmsg+0x813/0xb40
[  870.695928][T16300]  ? __pfx_netlink_sendmsg+0x10/0x10
[  870.696015][T16300]  ? apparmor_socket_sendmsg+0x98/0x360
[  870.696105][T16300]  ? __pfx_netlink_sendmsg+0x10/0x10
[  870.696165][T16300]  sock_sendmsg_nosec+0x13a/0x180
[  870.696252][T16300]  ____sys_sendmsg+0x54e/0x850
[  870.696326][T16300]  ? __pfx_____sys_sendmsg+0x10/0x10
[  870.696403][T16300]  ? import_iovec+0x73/0xa0
[  870.696510][T16300]  ___sys_sendmsg+0x2a5/0x360
[  870.696565][T16300]  ? __lock_acquire+0x6df/0x2e50
[  870.696642][T16300]  ? __pfx____sys_sendmsg+0x10/0x10
[  870.696802][T16300]  ? __fget_files+0x2a/0x420
[  870.696876][T16300]  ? __fget_files+0x3a2/0x420
[  870.696985][T16300]  __x64_sys_sendmsg+0x1b1/0x290
[  870.697065][T16300]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  870.697175][T16300]  do_syscall_64+0x166/0x520
[  870.697259][T16300]  ? trace_irq_disable+0x3b/0x140
[  870.697315][T16300]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.697381][T16300]  ? clear_bhb_loop+0x70/0xc0
[  870.697448][T16300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.697513][T16300] RIP: 0033:0x7fca3b79e159
[  870.697567][T16300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  870.697621][T16300] RSP: 002b:00007fca3c705028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  870.697685][T16300] RAX: ffffffffffffffda RBX: 00007fca3ba25fa0 RCX: 00007fca3b79e159
[  870.697735][T16300] RDX: 0000000000048080 RSI: 0000200000000280 RDI: 0000000000000003
[  870.697778][T16300] RBP: 00007fca3c705090 R08: 0000000000000000 R09: 0000000000000000
[  870.697813][T16300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  870.697853][T16300] R13: 00007fca3ba26038 R14: 00007fca3ba25fa0 R15: 00007fca3bb4fa48
[  870.697939][T16300]  </TASK>
[  870.718809][ T5688] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  870.790599][T15587] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  870.921521][ T5756] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  870.990185][ T5756] usb 8-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  870.990241][ T5756] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  870.990287][ T5756] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.022768][ T5688] usb 9-1: Using ep0 maxpacket: 16
[  871.051895][ T5688] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  871.094671][T15587] usb 10-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  871.121403][ T5756] usb 8-1: config 0 descriptor??
[  871.127007][T15587] usb 10-1: config 2 has an invalid interface number: 43 but max is 0
[  871.127191][T15587] usb 10-1: config 2 has no interface number 0
[  871.127241][T15587] usb 10-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[  871.127275][T15587] usb 10-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8
[  871.127390][T15587] usb 10-1: config 2 interface 43 has no altsetting 0
[  871.164522][ T5688] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.164554][ T5688] usb 9-1: Product: syz
[  871.164571][ T5688] usb 9-1: Manufacturer: syz
[  871.164588][ T5688] usb 9-1: SerialNumber: syz
[  871.202403][T15587] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.202447][T15587] usb 10-1: Product: syz
[  871.202480][T15587] usb 10-1: Manufacturer: syz
[  871.202501][T15587] usb 10-1: SerialNumber: syz
[  871.228008][T16293] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  871.228286][T16293] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  871.243475][ T5688] usb 9-1: config 0 descriptor??
[  871.251363][ T5756] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  871.271165][ T5688] visor 9-1:0.0: Sony Clie 3.5 converter detected
[  871.557437][T15587] ums-usbat 10-1:2.43: USB Mass Storage device detected
[  871.586000][T15587] ums-usbat 10-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  871.657756][T15587] ums-usbat 10-1:2.43: probe with driver ums-usbat failed with error -5
[  871.676866][T15587] usb 10-1: USB disconnect, device number 7
[  871.692190][ T5688] usb 9-1: clie_3_5_startup: get interface number failed: -71
[  871.701781][ T5688] visor 9-1:0.0: probe with driver visor failed with error -71
[  871.733901][ T5688] usb 9-1: USB disconnect, device number 8
[  873.449698][T15204] usb 8-1: USB disconnect, device number 10
[  873.927141][T15204] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  874.047184][ T5688] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[  874.087419][T15204] usb 8-1: Using ep0 maxpacket: 32
[  874.093158][T15204] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  874.105105][T15204] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  874.105162][T15204] usb 8-1: config 0 has no interface number 0
[  874.125027][T15204] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.125074][T15204] usb 8-1: Product: syz
[  874.125109][T15204] usb 8-1: Manufacturer: syz
[  874.125153][T15204] usb 8-1: SerialNumber: syz
[  874.163914][T15204] usb 8-1: config 0 descriptor??
[  874.207963][ T5688] usb 10-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  874.223124][ T5688] usb 10-1: config 5 has an invalid interface number: 123 but max is 0
[  874.231610][ T5688] usb 10-1: config 5 has no interface number 0
[  874.231688][ T5688] usb 10-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  874.231725][ T5688] usb 10-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  874.231769][ T5688] usb 10-1: config 5 interface 123 has no altsetting 0
[  874.284854][ T5688] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.284900][ T5688] usb 10-1: Product: syz
[  874.284946][ T5688] usb 10-1: Manufacturer: syz
[  874.284968][ T5688] usb 10-1: SerialNumber: syz
[  874.314552][T16387] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  874.340215][T16393] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2587'.
[  874.445212][T16383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  874.457539][T16383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  874.608230][ T5688] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  874.621723][ T5688] usb 10-1: USB disconnect, device number 8
[  874.698327][T15204] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  874.698386][T15204] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  874.904938][T15204] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  874.905694][T15204] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -61
[  875.057885][T15204] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  875.119971][ T5701] usb 8-1: USB disconnect, device number 11
[  875.207210][T15204] usb 9-1: Using ep0 maxpacket: 16
[  875.213763][T15204] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  875.224801][T15204] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  875.224876][T15204] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  875.224988][T15204] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.269661][T15204] usb 9-1: config 0 descriptor??
[  875.734139][T15204] hid-picolcd 0003:04D8:C002.003B: unknown main item tag 0x4
[  875.734917][T15204] hid-picolcd 0003:04D8:C002.003B: reserved main item tag 0xd
[  875.875402][T15204] hid-picolcd 0003:04D8:C002.003B: No report with id 0x11 found
[  875.916052][T16418] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  875.961029][T15204] usb 9-1: USB disconnect, device number 9
[  876.427467][ T5688] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  876.598333][ T5688] usb 8-1: Using ep0 maxpacket: 16
[  876.605535][ T5688] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  876.618002][ T5688] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  876.629462][ T5688] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  876.629520][ T5688] usb 8-1: config 0 has no interface number 0
[  876.660724][ T5688] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.660771][ T5688] usb 8-1: Product: syz
[  876.660807][ T5688] usb 8-1: Manufacturer: syz
[  876.660829][ T5688] usb 8-1: SerialNumber: syz
[  876.692140][ T5688] usb 8-1: config 0 descriptor??
[  876.721434][ T5688] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  876.729358][ T5688] uvcvideo 8-1:0.105: No valid video chain found.
[  876.913598][T16421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  876.925996][T16421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  876.944155][T16421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  876.945105][T16421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  876.964648][T16421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  876.979486][T16421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  877.025873][T16421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  877.043841][T16421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  877.063171][T16421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  877.074205][T16421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  877.109314][ T5734] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  877.195819][T15204] usb 8-1: USB disconnect, device number 12
[  877.284320][ T5734] usb 9-1: Using ep0 maxpacket: 16
[  877.294857][ T5734] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 4.02
[  877.308680][ T5734] usb 9-1: config 255 has too many interfaces: 236, using maximum allowed: 32
[  877.308753][ T5734] usb 9-1: config 255 has 1 interface, different from the descriptor's value: 236
[  877.336396][ T5734] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  877.336484][ T5734] usb 9-1: SerialNumber: syz
[  877.370563][ T5734] ftdi_sio 9-1:255.0: FTDI USB Serial Device converter detected
[  877.401442][ T5734] ftdi_sio ttyUSB0: unknown device type: 0x402
[  877.706821][T15204] usb 9-1: USB disconnect, device number 10
[  877.722739][T15204] ftdi_sio 9-1:255.0: device disconnected
[  877.767004][T16453] loop5: detected capacity change from 0 to 7
[  877.789505][T16453]  loop5: p1 < > p3 p4 < >
[  877.789573][T16453] loop5: partition table partially beyond EOD, truncated
[  878.056064][T15647] udevd[15647]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  878.069832][T15376] udevd[15376]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  878.092644][T15449] udevd[15449]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  878.257384][T15204] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  878.409129][T15204] usb 5-1: Using ep0 maxpacket: 8
[  878.416577][T15204] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  878.436159][T15204] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  878.436206][T15204] usb 5-1: config 179 has no interface number 0
[  878.436270][T15204] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  878.436305][T15204] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  878.436352][T15204] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  878.436430][T15204] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  878.436464][T15204] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  878.436516][T15204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.497710][T14530] usb 3-1: new full-speed USB device number 64 using dummy_hcd
[  878.547726][T16458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  878.679917][T14530] usb 3-1: not running at top speed; connect to a high speed hub
[  878.679987][T14530] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=cb.45
[  878.688879][T14530] usb 3-1: config 9 has an invalid interface number: 230 but max is 0
[  878.688963][T14530] usb 3-1: config 9 has no interface number 0
[  878.689056][T14530] usb 3-1: config 9 interface 230 has no altsetting 0
[  878.724828][T16471] loop9: detected capacity change from 0 to 7
[  878.739340][T14530] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.739382][T14530] usb 3-1: Product: syz
[  878.739417][T14530] usb 3-1: Manufacturer: syz
[  878.739486][T14530] usb 3-1: SerialNumber: syz
[  878.765717][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  878.765855][    C0] buffer_io_error: 55 callbacks suppressed
[  878.765909][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  878.769597][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  878.769821][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  878.816433][T16458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  878.828840][T16458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  878.872090][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  878.872221][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  878.880592][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  878.880842][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  878.904457][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  878.904721][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  878.935268][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  878.935383][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  878.935656][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  878.935745][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  878.935804][T16471] ldm_validate_partition_table(): Disk read failed.
[  878.935982][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  878.936066][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  878.936399][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  878.936484][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  878.938066][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  878.938387][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  878.949882][T16471] Dev loop9: unable to read RDB block 0
[  878.988757][T16471]  loop9: unable to read partition table
[  878.989657][T16471] loop9: partition table beyond EOD, truncated
[  878.989815][T16471] loop_reread_partitions: partition scan of loop9 (��) failed (rc=-5)
[  879.108732][T16470] program syz.8.2599 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  879.125612][T16470] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  879.137288][T14530] usb 3-1: USB disconnect, device number 64
[  880.132281][T16501] netlink: 'syz.7.2605': attribute type 4 has an invalid length.
[  880.188126][T16501] netlink: 'syz.7.2605': attribute type 4 has an invalid length.
[  880.209743][T16505] nvme_fabrics: unknown parameter or missing value '#!  	����1���R��?��&n��%������~���[6=
p͊yz\U�j@5N�f�W�rs�)�q��' in ctrl creation request
[  880.281584][T16505] futex_wake_op: syz.2.2604 tries to shift op by -1; fix this program
[  880.389400][T16502] pimreg3: entered allmulticast mode
[  880.597400][T14530] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  880.750307][T14530] usb 8-1: device descriptor read/64, error -71
[  880.990239][T14530] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  881.127383][T14530] usb 8-1: device descriptor read/64, error -71
[  881.265895][T14530] usb usb8-port1: attempt power cycle
[  881.368344][T15587] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  881.394049][T16530] loop5: detected capacity change from 0 to 7
[  881.417508][T16530]  loop5: p1 < > p3 p4 < >
[  881.417556][T16530] loop5: partition table partially beyond EOD, truncated
[  881.497246][T15587] usb 9-1: device descriptor read/64, error -71
[  881.510170][ T5703] usb 5-1: USB disconnect, device number 20
[  881.516242][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  881.516291][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  881.627576][T14530] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  881.641336][T15449] udevd[15449]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  881.652416][T15647] udevd[15647]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  881.663761][T14530] usb 8-1: device descriptor read/8, error -71
[  881.694101][T15729] udevd[15729]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  881.778925][T15587] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  881.851069][T16533] syz_tun: entered promiscuous mode
[  881.860589][T16533] syz_tun: left promiscuous mode
[  881.924220][T14530] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  881.938858][T15587] usb 9-1: device descriptor read/64, error -71
[  881.983751][T14530] usb 8-1: device descriptor read/8, error -71
[  882.050172][T15587] usb usb9-port1: attempt power cycle
[  882.092476][T14530] usb usb8-port1: unable to enumerate USB device
[  882.267529][ T5703] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  882.388737][T15587] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  882.411441][T15587] usb 9-1: device descriptor read/8, error -71
[  882.428492][ T5703] usb 5-1: Using ep0 maxpacket: 8
[  882.432255][ T5703] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  882.446817][ T5703] usb 5-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config
[  882.460139][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.460200][ T5703] usb 5-1: Product: syz
[  882.460217][ T5703] usb 5-1: Manufacturer: syz
[  882.460248][ T5703] usb 5-1: SerialNumber: syz
[  882.493373][ T5703] usb 5-1: config 0 descriptor??
[  882.650231][T15587] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  882.670906][T15587] usb 9-1: device descriptor read/8, error -71
[  882.779410][T15587] usb usb9-port1: unable to enumerate USB device
[  882.945048][ T5703] usb 5-1: USB disconnect, device number 21
[  884.321817][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2613'.
[  884.404116][T16556] netlink: 'syz.7.2613': attribute type 4 has an invalid length.
[  884.458867][T16556] netlink: 'syz.7.2613': attribute type 39 has an invalid length.
[  884.607497][ T5688] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  884.720756][T16565] netlink: 'syz.7.2613': attribute type 21 has an invalid length.
[  884.807944][ T5688] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  884.820417][ T5688] usb 5-1: unable to read config index 0 descriptor/start: -61
[  884.820473][ T5688] usb 5-1: can't read configurations, error -61
[  884.967189][ T5688] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  885.148444][T16566] vivid-000: disconnect
[  885.185013][ T5688] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  885.198821][ T5688] usb 5-1: unable to read config index 0 descriptor/start: -61
[  885.198884][ T5688] usb 5-1: can't read configurations, error -61
[  885.215120][ T5688] usb usb5-port1: attempt power cycle
[  885.266357][T16567] vivid-000: reconnect
[  885.557225][T14529] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[  885.677741][ T5688] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  885.698313][ T5688] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  885.709598][ T5688] usb 5-1: unable to read config index 0 descriptor/start: -61
[  885.717372][T14529] usb 9-1: device descriptor read/64, error -71
[  885.723938][ T5688] usb 5-1: can't read configurations, error -61
[  887.143034][ T5688] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  887.199482][T14529] usb 9-1: new full-speed USB device number 16 using dummy_hcd
[  891.385514][T14529] usb 9-1: device descriptor read/64, error -71
[  891.935753][T14529] usb usb9-port1: attempt power cycle
[  892.945101][ T5688] usb 5-1: device descriptor read/8, error -71
[  894.864424][ T5688] usb usb5-port1: unable to enumerate USB device
[  895.161184][T14529] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[  895.201849][T14529] usb 9-1: device descriptor read/8, error -71
[  895.853784][T16592] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2620'.
[  896.044196][T16597] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  903.148285][T16625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  903.148830][T16625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  903.239953][T16625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  903.266882][T16628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  903.276591][T16628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  903.293213][T16625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  903.319415][T16624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  903.319903][T16624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  903.338715][T14529] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  903.497270][T14529] usb 9-1: Using ep0 maxpacket: 32
[  903.514879][T14529] usb 9-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da
[  903.546984][T14529] usb 9-1: config index 0 descriptor too short (expected 241, got 161)
[  903.547139][T14529] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  903.547202][T14529] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  903.547258][T14529] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.609689][T14529] usb 9-1: config 0 descriptor??
[  903.646055][T14529] mos7840 9-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected
[  903.704825][T14529] mos7840 9-1:0.0: probe with driver mos7840 failed with error -32
[  903.949726][T15304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  904.001263][T15304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  904.016103][T15304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  904.040163][T15304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  904.051410][T15304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  906.315245][T15304] Bluetooth: hci0: command tx timeout
[  908.415524][T15304] Bluetooth: hci0: command tx timeout
[  910.754546][T15304] Bluetooth: hci0: command tx timeout
[  912.849643][T15304] Bluetooth: hci0: command tx timeout
[  931.888990][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  931.904090][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  941.885574][T15294] Bluetooth: hci9: command 0x0406 tx timeout
[  941.902064][T15294] Bluetooth: hci7: command 0x0406 tx timeout
[  941.919737][T15294] Bluetooth: hci1: command 0x0406 tx timeout
[  941.936595][T15294] Bluetooth: hci6: command 0x0406 tx timeout
[  941.957592][T15294] Bluetooth: hci8: command 0x0406 tx timeout
[  949.328161][ T5734] usb 9-1: USB disconnect, device number 19
[  994.082996][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  994.098078][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1035.496698][T15294] Bluetooth: hci0: command 0x0406 tx timeout
[ 1047.946992][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1047.954016][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P16623/1:b..l
[ 1047.962086][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=144389, q=814747 ncpus=2)
[ 1047.970195][    C1] task:syz.8.2626      state:R  running task     stack:26920 pid:16623 tgid:16621 ppid:15307  task_flags:0x40044c flags:0x00080003
[ 1047.983750][    C1] Call Trace:
[ 1047.987058][    C1]  <TASK>
[ 1047.990024][    C1]  __schedule+0x17d4/0x5820
[ 1047.994586][    C1]  ? __lock_acquire+0x6df/0x2e50
[ 1047.999576][    C1]  ? __lock_acquire+0x6df/0x2e50
[ 1048.004561][    C1]  ? __pfx___schedule+0x10/0x10
[ 1048.009460][    C1]  ? __lock_acquire+0x6df/0x2e50
[ 1048.014483][    C1]  preempt_schedule_irq+0x4b/0x90
[ 1048.019556][    C1]  irqentry_exit+0x14f/0x910
[ 1048.024189][    C1]  ? trace_irq_disable+0x3b/0x140
[ 1048.029262][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1048.035319][    C1] RIP: 0010:lock_acquire+0xb7/0x350
[ 1048.040563][    C1] Code: b7 2d f1 11 85 c0 0f 85 d5 00 00 00 65 48 8b 2d f7 e8 f0 11 83 bd a4 0b 00 00 00 0f 85 c0 00 00 00 48 89 5c 24 08 4c 89 fb 9c <41> 5f fa 48 c7 c7 65 da 48 8e e8 8a fb 3f 0a 65 ff 05 7b 2d f1 11
[ 1048.060206][    C1] RSP: 0018:ffffc9000ddbf200 EFLAGS: 00000246
[ 1048.066327][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 8000000000000001
[ 1048.074338][    C1] RDX: 0000000000000000 RSI: ffffffff8177f12c RDI: 1ffffffff1dab8dc
[ 1048.082351][    C1] RBP: ffff888012838000 R08: 0000000000000000 R09: 0000000000000000
[ 1048.090362][    C1] R10: ffffc9000ddbf398 R11: ffffffff81b272d0 R12: ffffffff8ed5c6e0
[ 1048.098465][    C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000
[ 1048.106481][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1048.112700][    C1]  ? unwind_next_frame+0xac/0x2550
[ 1048.117872][    C1]  ? unwind_next_frame+0x8f/0x2550
[ 1048.123038][    C1]  ? bus_remove_driver+0x226/0x320
[ 1048.128289][    C1]  ? unwind_next_frame+0x8f/0x2550
[ 1048.133465][    C1]  unwind_next_frame+0xac/0x2550
[ 1048.138446][    C1]  ? unwind_next_frame+0x8f/0x2550
[ 1048.143620][    C1]  ? driver_detach+0x1f3/0x2d0
[ 1048.148486][    C1]  ? unwind_next_frame+0x8f/0x2550
[ 1048.153645][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1048.159870][    C1]  arch_stack_walk+0x11b/0x150
[ 1048.164707][    C1]  ? bus_remove_driver+0x226/0x320
[ 1048.169869][    C1]  stack_trace_save+0xa9/0x100
[ 1048.174687][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1048.180116][    C1]  ? __lock_acquire+0x6df/0x2e50
[ 1048.185097][    C1]  ? stack_depot_save_flags+0x33/0x7f0
[ 1048.190615][    C1]  save_stack+0x122/0x230
[ 1048.194990][    C1]  ? __pfx_save_stack+0x10/0x10
[ 1048.199882][    C1]  ? __free_frozen_pages+0xc93/0xd90
[ 1048.205251][    C1]  ? __slab_free+0x274/0x2c0
[ 1048.209877][    C1]  ? qlist_free_all+0x99/0x100
[ 1048.214787][    C1]  ? kasan_quarantine_reduce+0x148/0x160
[ 1048.220469][    C1]  ? __kasan_slab_alloc+0x22/0x80
[ 1048.225539][    C1]  ? __kmalloc_cache_noprof+0x29f/0x600
[ 1048.231141][    C1]  ? kobject_uevent_env+0x289/0x9e0
[ 1048.236455][    C1]  ? device_release_driver_internal+0x782/0x880
[ 1048.242755][    C1]  ? driver_detach+0x1f3/0x2d0
[ 1048.247655][    C1]  ? bus_remove_driver+0x226/0x320
[ 1048.252851][    C1]  ? page_ext_put+0x97/0xc0
[ 1048.257406][    C1]  __reset_page_owner+0x71/0x1f0
[ 1048.262393][    C1]  __free_frozen_pages+0xc93/0xd90
[ 1048.267596][    C1]  __slab_free+0x274/0x2c0
[ 1048.272049][    C1]  ? lock_acquire+0x115/0x350
[ 1048.276769][    C1]  ? qlist_free_all+0x8e/0x100
[ 1048.281586][    C1]  qlist_free_all+0x99/0x100
[ 1048.286265][    C1]  kasan_quarantine_reduce+0x148/0x160
[ 1048.291781][    C1]  __kasan_slab_alloc+0x22/0x80
[ 1048.296685][    C1]  __kmalloc_cache_noprof+0x29f/0x600
[ 1048.302115][    C1]  ? __kmalloc_cache_noprof+0x14d/0x600
[ 1048.307713][    C1]  ? kobject_uevent_env+0x289/0x9e0
[ 1048.312956][    C1]  ? kobject_uevent_env+0x289/0x9e0
[ 1048.318204][    C1]  ? __pfx_dev_uevent_name+0x10/0x10
[ 1048.323533][    C1]  kobject_uevent_env+0x289/0x9e0
[ 1048.328594][    C1]  ? kobject_put+0x50f/0x550
[ 1048.333307][    C1]  device_release_driver_internal+0x782/0x880
[ 1048.339436][    C1]  driver_detach+0x1f3/0x2d0
[ 1048.344086][    C1]  bus_remove_driver+0x226/0x320
[ 1048.349076][    C1]  usb_gadget_unregister_driver+0x4e/0x70
[ 1048.354947][    C1]  raw_release+0xd7/0x260
[ 1048.359377][    C1]  ? __pfx_raw_release+0x10/0x10
[ 1048.364398][    C1]  __fput+0x418/0xa50
[ 1048.368434][    C1]  task_work_run+0x1d9/0x270
[ 1048.373068][    C1]  ? __pfx_task_work_run+0x10/0x10
[ 1048.378218][    C1]  ? do_raw_spin_unlock+0xf5/0x200
[ 1048.383390][    C1]  do_exit+0x73a/0x2360
[ 1048.387621][    C1]  ? lock_acquire+0x115/0x350
[ 1048.392352][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1048.396984][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1048.402062][    C1]  do_group_exit+0x22d/0x2f0
[ 1048.406699][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1048.411950][    C1]  get_signal+0x121b/0x12c0
[ 1048.416522][    C1]  arch_do_signal_or_restart+0xbb/0x860
[ 1048.422123][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1048.428336][    C1]  ? __fget_files+0x2a/0x420
[ 1048.432979][    C1]  exit_to_user_mode_loop+0x10e/0x770
[ 1048.438389][    C1]  ? rcu_is_watching+0x16/0xb0
[ 1048.443199][    C1]  do_syscall_64+0x328/0x520
[ 1048.447836][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1048.453944][    C1]  ? clear_bhb_loop+0x70/0xc0
[ 1048.458667][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1048.464786][    C1] RIP: 0033:0x7f53d819ddeb
[ 1048.469266][    C1] RSP: 002b:00007f53d8fd9f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1048.477724][    C1] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f53d819ddeb
[ 1048.485732][    C1] RDX: 00007f53d8fdafd0 RSI: 0000000080085502 RDI: 0000000000000003
[ 1048.493740][    C1] RBP: 00007f53d8fdafd0 R08: 00007f53d8065d07 R09: 000000000000003e
[ 1048.501755][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
[ 1048.509847][    C1] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f53d82538e2
[ 1048.517885][    C1]  </TASK>