last executing test programs:

25m40.459695694s ago: executing program 2 (id=99):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x12000, 0x3, 0x40055}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x8080, 0x0)
ioctl$KDSIGACCEPT(r8, 0x5607, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000400001b18110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000feb7030000000000008500000008000000bf0900000000000055090100000000009500000000000000b7020000000000007baa00fe00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYBLOB="0000000000000000b7050000080000004602010076000000bf98000000000000be72f0ff0000000085000000bfffff"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xd08b012a, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "f1439fae"}, 0x0, 0x2, {0x0}, 0x20000})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000400)={0x5, 0x2})
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="1201500200000010820514014000010203010902650003010110020904000000010100000a240102005e80e53d096e5ba00206090401000001020101010102000009050109000407060707250104f70001b981378a33049df50102000009058209ff030301770725010c080800000000000000"], 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/bus/input/devices\x00', 0x1800, 0x0)
read$FUSE(r9, &(0x7f0000001080)={0x2020}, 0x2020)

25m37.712817908s ago: executing program 2 (id=113):
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x20000021)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x3256c1)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)

25m36.795793088s ago: executing program 2 (id=117):
socket(0x10, 0x3, 0x0)
socket(0x2b, 0x1, 0x1)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
madvise(&(0x7f00000d2000/0x1000)=nil, 0x1000, 0x19)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_audit(0x10, 0x3, 0x9)
socket(0x10, 0x803, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r0], 0x20)

25m36.432457158s ago: executing program 2 (id=119):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xffc9)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000380)="ade3933af8dcb268853e17e8dcc39d6e8cbe378927d51e9e3883ea01e493efc4ffa99a089c16cc9cac4cd3b99655362a99a50af55579d4141dbc08c6ed8aea0bc750b5093822fa8e", 0x0, 0x48)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x2, 0x4b4, &(0x7f0000000080)=0xfffffffffffffffd})
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x10)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r5, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})

25m36.128467254s ago: executing program 2 (id=122):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000ff250000000000000000000000008000000037edbfa5ee0ee77c4f3eb4fe91ea07e29eb07c3e47710cdf0cd04e3e3658e302004a5f2708ba89f6b0b686", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r5, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14)
r6 = socket$kcm(0xa, 0x5, 0x0)
r7 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7})
r8 = socket$kcm(0xa, 0x5, 0x0)
r9 = socket$igmp(0x2, 0x3, 0x2)
recvmmsg(r9, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x4002, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bacf314aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8})
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7})

25m35.86499119s ago: executing program 2 (id=124):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000014)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f000000b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f000000c000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x2c00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x0, 0x1a706}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000844)

25m35.312421691s ago: executing program 32 (id=124):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000014)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f000000b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f000000c000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x2c00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x0, 0x1a706}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000844)

13m1.034626635s ago: executing program 1 (id=2513):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x40000)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
link(&(0x7f0000000140)='.\x00', 0x0)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r8 = dup(r7)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000014000/0x2000)=nil, 0x2000, 0x3)
madvise(&(0x7f00005c3000/0x1000)=nil, 0x1000, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000b)
getdents(0xffffffffffffffff, &(0x7f0000000040)=""/97, 0x61)
socket$nl_netfilter(0x10, 0x3, 0xc)

12m59.931295668s ago: executing program 1 (id=2515):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
r1 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="20131a000000b00c4fc7db"], 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1d4) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1d4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)

12m56.200902417s ago: executing program 1 (id=2522):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
epoll_create1(0x80000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
read$FUSE(r2, &(0x7f0000002800)={0x2020}, 0x2020)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000100)={@private=0xa010100, @multicast2, 0x0, "125e43d51bec0a7ce21187a51fce2582334bf7b2cdea481fc30a363470b828a6", 0x1ff, 0x6, 0x1, 0xfffffff6}, 0x3c)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000002600)=0x2, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
socket$inet_udp(0x2, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex_waitv(&(0x7f0000004840)=[{0x1ff, &(0x7f0000000180)=0x5a6, 0x2}, {0x5, &(0x7f00000001c0)=0x6, 0x2}, {0x10, &(0x7f0000000240)=0x8000000000000000, 0x2}, {0x1000, &(0x7f0000000280)=0x6, 0x82}, {0x8000000000000001, &(0x7f00000002c0)=0x3, 0x82}, {0xfffffffffffffffa, &(0x7f0000000340)=0x5, 0x82}, {0x3ff, &(0x7f0000000380)=0x80, 0x82}, {0x1, &(0x7f00000003c0)=0x100, 0x2}, {0x4, &(0x7f0000000400)=0x80000000, 0x82}, {0xd, &(0x7f0000000440)=0x9, 0x2}, {0x7, &(0x7f0000000480)=0x9, 0x82}, {0x8, &(0x7f00000004c0)=0x8001, 0x2}, {0x8, &(0x7f0000000500)=0x4a, 0x2}, {0x0, &(0x7f0000000540)=0xfff, 0x106}, {0x1, &(0x7f0000000580)=0x9, 0x82}, {0x5, &(0x7f00000005c0)=0x2, 0x2}, {0x7, &(0x7f0000000600), 0x82}, {0x2, &(0x7f0000000640), 0x82}, {0x8000000000000000, &(0x7f0000000680)=0x4, 0x2}, {0x4, &(0x7f00000006c0)=0xffffffffffffffd4, 0x82}, {0xfffffffffffffffc, &(0x7f0000000700)=0x5, 0x82}, {0x4, &(0x7f0000000740)=0x9, 0x82}, {0x6213, &(0x7f0000000780)=0xc, 0x2}, {0xfffffffffffffff7, &(0x7f00000007c0), 0x82}, {0x558, &(0x7f0000000800)=0x100000001, 0x2}, {0x2, &(0x7f0000000840)=0x8, 0x82}, {0xfffffffffffffffa, &(0x7f0000000880)=0x9, 0x2}, {0x100, &(0x7f00000008c0)=0x711, 0x2}, {0x9, &(0x7f0000000900)=0xffffffffffffffb3, 0x2}, {0x6, &(0x7f0000000940)=0x1ff, 0x2}, {0x8000000000000001, &(0x7f0000000980)=0x67, 0x2}, {0x599, &(0x7f00000009c0)=0x6, 0x82}, {0x0, &(0x7f0000000a00)=0x3, 0x80}, {0x2, &(0x7f0000000a40), 0x82}, {0x9, &(0x7f0000000a80), 0x2}, {0x1, &(0x7f0000000ac0)=0x9, 0x82}, {0x4f, &(0x7f0000000b00)=0x3, 0x82}, {0xd9ec, &(0x7f0000000b40)=0x1, 0x2}, {0x4, &(0x7f0000000b80)=0x80, 0x2}, {0x2, &(0x7f0000000bc0)=0x4834, 0x82}, {0x7f, &(0x7f0000000c00)=0x1, 0x2}, {0x8a30000, &(0x7f0000000c40)=0x9, 0x82}, {0x5, &(0x7f0000000c80)=0x800, 0x2}, {0x801, &(0x7f0000000cc0)=0x8, 0x2}, {0x0, &(0x7f0000000d00), 0x2}, {0x7, &(0x7f0000000d40)=0x4, 0x2}, {0x800, &(0x7f0000000d80)=0x7, 0x2}, {0x7, &(0x7f0000000dc0)=0x9, 0x2}, {0x8e86, &(0x7f0000000e00)=0x5, 0x2}, {0xc00, &(0x7f0000000e40)=0x4, 0x2}, {0x5, &(0x7f0000000e80)=0x3, 0x82}, {0x0, &(0x7f0000000ec0)=0x202, 0x2}, {0xfffffffffffffff4, &(0x7f0000000f00)=0x6, 0x82}, {0x4bd, &(0x7f0000000f40)=0x4027, 0x82}, {0x4, &(0x7f0000000f80)=0x2, 0x2}, {0x3, &(0x7f0000000fc0), 0x2}, {0xfffffffffffffcda, &(0x7f0000001000)=0x6, 0x82}, {0x9, &(0x7f0000001040)=0x7fff, 0x82}, {0x9, &(0x7f0000001080)=0x2, 0xc71459fa05cac3f8}, {0x8, &(0x7f00000010c0)=0x8, 0x2}, {0x9, &(0x7f0000001100)=0x8001, 0x2}, {0xf, &(0x7f0000001140)=0x10000, 0x82}, {0x5, &(0x7f0000001180)=0x5, 0x82}, {0x3, &(0x7f0000001240)=0x7, 0x2}, {0x4, &(0x7f0000001280)=0xa4c, 0x82}, {0x2c08, &(0x7f00000012c0)=0x5, 0x82}, {0x80000001, &(0x7f0000001300)=0x8, 0x2}, {0x9, &(0x7f0000001340)=0x81, 0x2}, {0x6, &(0x7f0000001380)=0x7ff, 0x2}, {0x7, &(0x7f00000013c0), 0x4}, {0x1000, &(0x7f0000001400)=0x6c4bec93, 0x2}, {0xee, &(0x7f0000001440)=0x1, 0x2}, {0xbd7c, &(0x7f0000001480)=0xfffffffffffffe01, 0x82}, {0x1, &(0x7f00000014c0)=0xb59c, 0x80}, {0xffffffffffff8056, &(0x7f0000001500)=0xea, 0x82}, {0x1, &(0x7f0000001540)=0x9, 0x2}, {0xffffffffffff0000, &(0x7f0000001580)=0x6, 0x2}, {0x7, &(0x7f00000015c0), 0x82}, {0x9, &(0x7f0000001600)=0x1000, 0x82}, {0x0, &(0x7f0000001640)=0x3, 0x2}, {0xfffffffffffff800, &(0x7f0000001680)=0x84f, 0x2}, {0x15, &(0x7f00000016c0)=0x9, 0x2}, {0x0, &(0x7f0000001700)=0x5, 0x2}, {0x80, &(0x7f0000001740), 0x2}, {0xa48b, &(0x7f0000001780)=0x7fff, 0x2}, {0x3, &(0x7f00000017c0)=0xfffffffffffffffa, 0x2}, {0x0, &(0x7f0000001800)=0x10000, 0xa10b02fa6789d4a5}, {0x8, &(0x7f0000001840)=0x1, 0x2}, {0x1ff, &(0x7f0000001880), 0x2}, {0xffffffff7fffffff, &(0x7f00000018c0)=0x7, 0x82}, {0x7, &(0x7f0000001900)=0x1, 0x2}, {0x800000000, &(0x7f0000001940)=0x5, 0x82}, {0x4, &(0x7f0000001980)=0x6, 0x2}, {0x0, &(0x7f00000019c0)=0x4, 0x2}, {0x8000, &(0x7f0000001a00)=0x982e, 0x2}, {0xf7ff, &(0x7f0000001a40)=0x4, 0x2}, {0x9fc5, &(0x7f0000001a80)=0xff, 0x82}, {0x9, &(0x7f0000001ac0)=0x4, 0x82}, {0x8, &(0x7f0000001b00)=0x1, 0x2}, {0x28e1, &(0x7f0000001b40)=0x3, 0x82}, {0x3, &(0x7f0000001b80)=0xe242, 0x82}, {0x956, &(0x7f0000001bc0)=0x6}, {0x3, &(0x7f0000001c00), 0x82}, {0x8000, &(0x7f0000001c40)=0xf9, 0x82}, {0x4, &(0x7f0000001c80)=0x7f, 0x2}, {0x4, &(0x7f0000001cc0)=0x90ad}, {0x0, &(0x7f0000001d00)=0x1, 0x2}], 0x6b, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x2c05)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000001200)={0x1, 0x1, 0x0, 0x1, 0x4})
socket$packet(0x11, 0x2, 0x300)
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0)

12m54.630694313s ago: executing program 1 (id=2526):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002800), &(0x7f0000002840)='./file0\x00', 0x4002, &(0x7f0000002ac0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x1, 0x0, 0x0)

12m54.380975304s ago: executing program 1 (id=2528):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'})
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r3=>0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b74318860809050725018705ee7b09050a000002810bac090504"], 0x0)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) (async)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0)
io_submit(0x0, 0x0, &(0x7f0000001bc0))
r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0) (async)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac3(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000680)={0x713299606c0f4b5c, 0x15, 0x6, "ac30ce361166"}, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000680)={0x713299606c0f4b5c, 0x15, 0x6, "ac30ce361166"}, 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$tcp_mem(r6, &(0x7f0000000200)={0xa5, 0x20, 0x1ff, 0x20, 0x8}, 0x48) (async)
write$tcp_mem(r6, &(0x7f0000000200)={0xa5, 0x20, 0x1ff, 0x20, 0x8}, 0x48)

12m53.432232028s ago: executing program 1 (id=2532):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef56ba040cb000ee0fde460b0f0130670f01c2b9800000c00f3235010000000f30", 0x43}], 0x1, 0x15, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x81, 0x3, 0x2, '\x00', 0x2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, 0x0, 0x0, 0xffffffff00000000}, 0x20)
pread64(r0, &(0x7f0000000040)=""/136, 0x88, 0xfff)

12m52.061031223s ago: executing program 33 (id=2532):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef56ba040cb000ee0fde460b0f0130670f01c2b9800000c00f3235010000000f30", 0x43}], 0x1, 0x15, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x81, 0x3, 0x2, '\x00', 0x2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, 0x0, 0x0, 0xffffffff00000000}, 0x20)
pread64(r0, &(0x7f0000000040)=""/136, 0x88, 0xfff)

11m45.951070903s ago: executing program 4 (id=2778):
syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) (async)
r0 = syz_open_dev$audion(&(0x7f0000000140), 0x3, 0x0)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000540)="7e5e6c5c7ece8a4de61b0d7c76fde5b6f4fb995f8316d31745d1018ae2a2829b58c812690adc5dd314e4f3", 0x2b}], 0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socket(0xf, 0x803, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x106, 0x5}}, 0x20)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x38e4) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r1, r0}}, 0x18) (async)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) (async)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000041000000001400120011008f997fa6be8400a0286048c10b6b"], 0x30}}, 0x45)

11m42.224568031s ago: executing program 4 (id=2786):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x1f, 0x2a, 0x8a0, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xa, 0x11}, {0x6, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40c0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000001800)=""/166, 0xa6}, {&(0x7f00000018c0)=""/4091, 0xffb}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x100, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001540), &(0x7f0000001580)=[0x0], 0x0, 0xea, &(0x7f00000015c0), 0x0, 0x10, &(0x7f0000001600), &(0x7f0000001640), 0x8, 0x83, 0x8, 0x8, &(0x7f0000001680)}}, 0x10)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
read$snddsp(r1, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
syz_usb_connect$midi(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xff, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3b}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="050f1400"]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044804)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
fchdir(r2)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000880), 0xf504, r3}, 0x38)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x3, r3}, 0x38)

11m39.388044868s ago: executing program 4 (id=2791):
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db})
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
close(r4) (async)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xf}, {0x1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4c18, 0x4, 0xf, 0x5e658b64, 0xfffffffb, 0xf, 0xffff, 0x1, 0x7, 0x0, 0x80, 0x3, 0x4, 0x9, 0x200, 0xfff, 0x6e7, 0x7, 0x10, 0x2, 0x5, 0x5, 0x5, 0x2, 0x2, 0x1, 0x0, 0xffffffff, 0x469, 0x8, 0x5, 0x5, 0x40, 0x8, 0x6, 0xe, 0x1ff, 0x2, 0x0, 0x5, 0x5, 0x2, 0x7, 0x7, 0x4, 0x2, 0x7, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x8000, 0x511, 0x1, 0x7, 0x6, 0x3e0, 0x505, 0x3, 0x1cb, 0x10000, 0x80000000, 0x9, 0x1, 0x7, 0x3, 0x6, 0x7, 0xf5e, 0x5, 0x9, 0x65, 0x3, 0x10000, 0x9, 0x10002, 0x2, 0x6, 0x1, 0x8, 0xefb, 0xffffffc0, 0x4, 0x6, 0x4, 0x6, 0x7f, 0x4, 0x4, 0x80000001, 0x0, 0x3b53, 0xbcf, 0x1c, 0x81, 0x4, 0x6, 0x8001, 0x2, 0x4, 0xfffffe00, 0x0, 0x40, 0xfec6, 0x0, 0x3, 0x8001, 0x9, 0x5, 0x890, 0x7, 0xe181, 0x21, 0x1b2, 0x1, 0x10001, 0x86, 0x10, 0x19e, 0x7, 0x5, 0x4aa0, 0x3217, 0x1, 0x0, 0x4, 0x4, 0x8, 0xe, 0x6, 0x5, 0xb007, 0x10000, 0x8, 0x6, 0x7, 0x7, 0x10000, 0xfa, 0x9, 0x1, 0x1, 0x82, 0x8, 0x7, 0xc4e, 0x4, 0x9, 0x3ff, 0x7b82eae2, 0x200, 0x3ff, 0x7, 0xfffffbd5, 0x5, 0x400, 0xfffff360, 0x2, 0x4, 0xd6d, 0x1, 0x9, 0x3, 0x200009, 0x10, 0x3ff, 0x8, 0x5, 0xfffffff9, 0x4, 0x0, 0x0, 0x80000001, 0x3, 0x618, 0x5, 0xd0, 0x9, 0xa, 0xec, 0x3, 0x6, 0x5, 0x1, 0xffff8001, 0xefe, 0x9, 0x2, 0x400, 0x3, 0xfffffffd, 0x9, 0xfff, 0x6, 0x2, 0x3, 0x4, 0x7, 0x7, 0x3, 0x9c28, 0x2, 0x2, 0x8000, 0xdb4, 0x6, 0x6, 0x0, 0xdb6b, 0x0, 0xf76, 0x40000006, 0xa, 0x2, 0x1, 0x51c7, 0x40, 0x0, 0x0, 0xe1bb, 0x7, 0x3, 0x8, 0x6, 0xa4a, 0xaa, 0x9, 0x1ff, 0x2d0, 0x3, 0xce1, 0x1, 0x80000000, 0xffffffcc, 0x4, 0x6297, 0x1, 0xa9ef, 0x7, 0x100, 0x3, 0x2, 0x5, 0x8, 0x2a47, 0x5, 0xffffffff, 0xd4a, 0x7, 0x7, 0x2, 0xc, 0x6]}]}]}}]}, 0x43c}}, 0x800) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xf}, {0x1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4c18, 0x4, 0xf, 0x5e658b64, 0xfffffffb, 0xf, 0xffff, 0x1, 0x7, 0x0, 0x80, 0x3, 0x4, 0x9, 0x200, 0xfff, 0x6e7, 0x7, 0x10, 0x2, 0x5, 0x5, 0x5, 0x2, 0x2, 0x1, 0x0, 0xffffffff, 0x469, 0x8, 0x5, 0x5, 0x40, 0x8, 0x6, 0xe, 0x1ff, 0x2, 0x0, 0x5, 0x5, 0x2, 0x7, 0x7, 0x4, 0x2, 0x7, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x8000, 0x511, 0x1, 0x7, 0x6, 0x3e0, 0x505, 0x3, 0x1cb, 0x10000, 0x80000000, 0x9, 0x1, 0x7, 0x3, 0x6, 0x7, 0xf5e, 0x5, 0x9, 0x65, 0x3, 0x10000, 0x9, 0x10002, 0x2, 0x6, 0x1, 0x8, 0xefb, 0xffffffc0, 0x4, 0x6, 0x4, 0x6, 0x7f, 0x4, 0x4, 0x80000001, 0x0, 0x3b53, 0xbcf, 0x1c, 0x81, 0x4, 0x6, 0x8001, 0x2, 0x4, 0xfffffe00, 0x0, 0x40, 0xfec6, 0x0, 0x3, 0x8001, 0x9, 0x5, 0x890, 0x7, 0xe181, 0x21, 0x1b2, 0x1, 0x10001, 0x86, 0x10, 0x19e, 0x7, 0x5, 0x4aa0, 0x3217, 0x1, 0x0, 0x4, 0x4, 0x8, 0xe, 0x6, 0x5, 0xb007, 0x10000, 0x8, 0x6, 0x7, 0x7, 0x10000, 0xfa, 0x9, 0x1, 0x1, 0x82, 0x8, 0x7, 0xc4e, 0x4, 0x9, 0x3ff, 0x7b82eae2, 0x200, 0x3ff, 0x7, 0xfffffbd5, 0x5, 0x400, 0xfffff360, 0x2, 0x4, 0xd6d, 0x1, 0x9, 0x3, 0x200009, 0x10, 0x3ff, 0x8, 0x5, 0xfffffff9, 0x4, 0x0, 0x0, 0x80000001, 0x3, 0x618, 0x5, 0xd0, 0x9, 0xa, 0xec, 0x3, 0x6, 0x5, 0x1, 0xffff8001, 0xefe, 0x9, 0x2, 0x400, 0x3, 0xfffffffd, 0x9, 0xfff, 0x6, 0x2, 0x3, 0x4, 0x7, 0x7, 0x3, 0x9c28, 0x2, 0x2, 0x8000, 0xdb4, 0x6, 0x6, 0x0, 0xdb6b, 0x0, 0xf76, 0x40000006, 0xa, 0x2, 0x1, 0x51c7, 0x40, 0x0, 0x0, 0xe1bb, 0x7, 0x3, 0x8, 0x6, 0xa4a, 0xaa, 0x9, 0x1ff, 0x2d0, 0x3, 0xce1, 0x1, 0x80000000, 0xffffffcc, 0x4, 0x6297, 0x1, 0xa9ef, 0x7, 0x100, 0x3, 0x2, 0x5, 0x8, 0x2a47, 0x5, 0xffffffff, 0xd4a, 0x7, 0x7, 0x2, 0xc, 0x6]}]}]}}]}, 0x43c}}, 0x800)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r6 = open(&(0x7f0000000000)='./file1\x00', 0x10e80, 0x44)
openat(r6, &(0x7f00000000c0)='./file1\x00', 0x14100, 0x4)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x80000001)
accept4(r7, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)) (async)
pipe(&(0x7f0000000040))
io_setup(0x800, &(0x7f00000003c0))

11m26.099734853s ago: executing program 4 (id=2808):
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
fchdir(r0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0)
landlock_restrict_self(r1, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0x17, 0x2, "25b9"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x10, 0x2, "8b61"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11m24.769150822s ago: executing program 4 (id=2812):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x240408f4}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f00000002c0)={0x0, 0x2})
setsockopt$inet_mreqsrc(r3, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="09032bbd7000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x110)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="d000000068ddd0332635d5143f7155edfba846dfda4463b39570efeee89246e66d5ae9198c0ac4f088344484a3a866c60dbfe763459639e53cec8c9e3c2738431590c799f85451734d4bea2379841c992f8f070b2876783146817b4768b2046d01e826dd6b5fdf9549d6e942bae1732c95118a6a03641c3d9c57f8bd8aafb2823b63bd4aa14d169a25d858fdb2e6f95ac08c8f7d9ab13b1a1165a9bd7858ce44ab83157ab0a37db6561adfccc7dbd382", @ANYRES16=r6, @ANYBLOB="280b2dbd7000ffdbdf2513000000180007800c000300010000000000000008000200280000000c00038008000100518d00002c000280040004002400038008000200010000000800010000000000080001000400000008000200ff0700000c00068008000100feffffff20000280080002000c00000014000380080002000100010008000200020000004000028034000380080001000700000008000200450000000800010001000000080002000d000000080002000010000008000200010000000400040004000400"], 0xd0}, 0x1, 0x0, 0x0, 0x4008004}, 0x2004008)
r7 = socket$inet_sctp(0x2, 0x422cddf70669fa72, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 'dh\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44)
r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/oss_mixer\x00', 0x80, 0x0)
read$proc_mixer(r8, &(0x7f0000000500)=""/253, 0xfd)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd29, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x7}}}}]}, 0x40}}, 0x0)

11m23.614805032s ago: executing program 4 (id=2816):
unshare(0x22020600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x3f, 0xd, 0xffffffffffffffff)
unshare(0x22020600)
r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
pwrite64(r2, 0x0, 0x0, 0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
r4 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, r5, 0x801, 0x400, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x8e)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0800)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000000f301ebff00200000000001006e76a2084b526eb7583d"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000001880)=""/4109, 0x100d}, {&(0x7f0000001780)=""/69, 0x45}], 0x5}, 0x20)
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
ioctl$RTC_UIE_ON(r11, 0x7003)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRES16=r9, @ANYRESHEX=r10, @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r12], 0x0, 0x0, 0x0)

11m8.280146869s ago: executing program 34 (id=2816):
unshare(0x22020600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x3f, 0xd, 0xffffffffffffffff)
unshare(0x22020600)
r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
pwrite64(r2, 0x0, 0x0, 0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
r4 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, r5, 0x801, 0x400, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x8e)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0800)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000000f301ebff00200000000001006e76a2084b526eb7583d"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000001880)=""/4109, 0x100d}, {&(0x7f0000001780)=""/69, 0x45}], 0x5}, 0x20)
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
ioctl$RTC_UIE_ON(r11, 0x7003)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRES16=r9, @ANYRESHEX=r10, @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r12], 0x0, 0x0, 0x0)

6m25.655740922s ago: executing program 7 (id=3773):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000340)="baf80c66b80f64de8066efbafc0cb0e4ee66b9800000c00f326635000100000f30660f38144d4f66b8040000000f23d80f21f86635c00000c00f23f866b8aea6aace0f23c80f21f86635080040000f23f866b9410300000f320f0766b9800000c00f326635004000000f302e660f3882750d66b9b50a000066b8f7ffffff66baffffffff0f30"}], 0x1, 0x0, 0x0, 0x1) (async)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) (async)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000740)={{0x0, 0xffff1000, 0x0, 0x8, 0xc, 0x8f, 0x5, 0xfd, 0x5, 0xfb, 0x6}, {0x41000, 0x100000, 0x8, 0x6, 0x68, 0xca, 0x3, 0x4, 0xe, 0x5, 0x8, 0x1}, {0x40000, 0xfec00000, 0xd, 0x6, 0x6b, 0x5, 0x3, 0x0, 0x21, 0x7, 0x0, 0x7}, {0x54000, 0xdddd1000, 0x9, 0x7, 0x4, 0x1, 0xff, 0x40, 0x7, 0x3, 0x2, 0x2}, {0xeeee8000, 0xfec00000, 0xc, 0x98, 0x4, 0x0, 0x2, 0xe, 0x2, 0x1, 0xda, 0x6}, {0x69000, 0xf000, 0x4, 0x8, 0x5, 0xfb, 0x9, 0x1c, 0x81, 0x7, 0x3, 0x2}, {0x70000, 0x25000, 0xf, 0x81, 0xf1, 0xf, 0x1, 0x8, 0x1, 0x17, 0x4, 0x7}, {0xd000, 0x80a0000, 0x8, 0x96, 0xf, 0x3, 0xec, 0x7, 0x0, 0x0, 0x8, 0x80}, {0x58000, 0x9}, {0x5000, 0x1}, 0x24, 0x0, 0xb000, 0xd4de9d9bd71d7e1f, 0x6, 0x9801, 0x109000, 0x1, [0x1, 0x3, 0xd, 0x8ac]})
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = syz_open_dev$mouse(&(0x7f0000000980), 0x5, 0xc4501)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000009c0)={0xffffffffffffffff, r5}) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r6, 0x7f, 0x6cc58be9}, 0xc) (async)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
syz_pidfd_open(0x0, 0x0) (async)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) (async)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x2)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) (async)
write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
syz_open_dev$dvb_dvr(0x0, 0x0, 0x80000) (async)
syz_clone(0x44000000, &(0x7f0000000280)="833f19c6e1", 0x5, &(0x7f0000000300), &(0x7f0000000880), &(0x7f00000008c0)="7ad3ecae3bcf92d98b1eb097482250449c997d865bd8ff6c2cf03db1d8b68cf6223dd113e2d8703eff7a589da7f3b2c3abfe4f1a7d2a5cc6ae8bdbabc50153276d9aff74fec4f5a8657fd4cad073edf63252ab") (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000a00))

6m24.528573622s ago: executing program 7 (id=3778):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2})
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x5)
syz_emit_ethernet(0x5e, &(0x7f0000002200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x28, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xfffd, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @fastopen={0x22, 0xf, "3f9c69cf89b05776153cfd8bad"}]}}}}}}}}, 0x0)
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="60000000001a6c40fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x42)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000080)="2e653e650fc79bae130000c7442400d2c771c2c74424023a84b260c7442406000000000f011c240f01730066b833010f00d866b818010f00d0c4c2858e8e00a00000363e66d030c7442400a0870000c7442402792d0000c7442406000000000f011c24660f38809836950000f2a5", 0x6e}], 0x1, 0x5, &(0x7f0000000240)=[@dstype3={0x7, 0x5}], 0x1)

6m23.90312058s ago: executing program 7 (id=3780):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xe5)
r4 = add_key$user(&(0x7f0000000400), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)="be132f6c0e", 0x5, r2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = request_key(&(0x7f0000000500)='syzkaller\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f00000005c0)='/dev/kvm\x00', r2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "9c979b32261fbabdae20b34f"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x800)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r9, &(0x7f0000000dc0), 0x0, 0x4800)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000700))
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000001400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}, 0x1, 0x0, 0x0, 0x4084}, 0x8000)
readv(r5, &(0x7f0000000080)=[{0x0, 0x600}, {&(0x7f0000003140)=""/4107, 0x100b}], 0x2)
add_key$user(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)="61a90ac20cb9cf088ace0baae6d17f8fd20e7caeea46e38e562570a2aba4630e381e360e68da966f5e20d19b7c", 0x2d, r7)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
keyctl$unlink(0x9, r4, r2)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x101)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})

6m23.131547351s ago: executing program 7 (id=3784):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x90, 0x2c, 0xf35, 0x70bd23, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xd, 0xa, 0xffff, 0x7ff}}, @TCA_DEF_DATA={0x6, 0x3, '\xff\xff'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xff}}]}, 0x90}, 0x1, 0x0, 0x0, 0x440}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x800000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0/file0\x00')
umount2(&(0x7f0000000440)='./file0/file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_ublk_setup_io_uring(0x77f8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x3ad}, &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000480)=<r9=>0x0, &(0x7f0000000340)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x78, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x162, 0x1, {0x3}})
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffff3e0}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xec}}, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x24060015)
r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000ff, 0x2)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r12, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000})
quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000202, 0x0, &(0x7f00000004c0)='./file0\x00')
syz_emit_ethernet(0x56, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x7}, {0x8100, 0x0, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @private2, @mcast2, {[@routing={0x0, 0x2, 0x1, 0xb, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}]}}}}}, 0x0)

6m21.895801798s ago: executing program 7 (id=3790):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e12080027877dec0401a8001600a40001", 0x37}], 0x1}, 0x4000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400", 0x24}], 0x1}, 0x200488c4)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

6m20.916099982s ago: executing program 7 (id=3796):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x40000)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
link(&(0x7f0000000140)='.\x00', 0x0)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383a3b340838e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r9 = dup(r8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000014000/0x2000)=nil, 0x2000, 0x3)
madvise(&(0x7f00005c3000/0x1000)=nil, 0x1000, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000b)
getdents(0xffffffffffffffff, &(0x7f0000000040)=""/97, 0x61)
socket$nl_netfilter(0x10, 0x3, 0xc)

6m20.824632711s ago: executing program 35 (id=3796):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x40000)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
link(&(0x7f0000000140)='.\x00', 0x0)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r9 = dup(r8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000014000/0x2000)=nil, 0x2000, 0x3)
madvise(&(0x7f00005c3000/0x1000)=nil, 0x1000, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000b)
getdents(0xffffffffffffffff, &(0x7f0000000040)=""/97, 0x61)
socket$nl_netfilter(0x10, 0x3, 0xc)

4m5.488104466s ago: executing program 3 (id=4474):
unshare(0x60000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = open(&(0x7f0000000240)='./file1\x00', 0x1407c1, 0x78e22799f4a46f46)
fcntl$setlease(r0, 0x400, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setlease(r0, 0x400, 0x2)
file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0xa, 0x1, 0x5a})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x8045}], 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00"/28, @ANYRES8=r4], 0x30}}, 0x0)
ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000004c0)={0xfa00000000000000, 0xeeee0000, 0x1008000009, 0x8, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a401400fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2, @ANYBLOB="06000816801c00010000180101000000010000000000eaff0000010000000100000000000000"], 0x60}}, 0x0)

4m4.295576564s ago: executing program 3 (id=4479):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8)
sendmmsg$sock(r1, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000000)="895c7ec7", 0x4}], 0x1, &(0x7f0000002240)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}], 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x539904, 0x46, 0x30}, 0x18)
fchmodat(r3, &(0x7f0000000480)='./file0\x00', 0x2)
sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x8000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x800)
userfaultfd(0x800)

4m4.060365302s ago: executing program 3 (id=4480):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0xc0015)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440008001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
open_by_handle_at(r3, 0x0, 0xfefffffd)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)

4m3.944048373s ago: executing program 3 (id=4481):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0x7f, 0x7, &(0x7f00000002c0)={0x10, "db6f15b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc900"}}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18)

4m3.307857732s ago: executing program 3 (id=4484):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "0000000400000700"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_open_dev$dvb_demux(0x0, 0x1, 0x202c01)
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000300000000000400000000000000100004000000000020"], 0x24, 0x3)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001}, 0x50)
syz_open_dev$sg(0x0, 0x0, 0x60000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0)
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0xfdef)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000880)={0x2, 0xa, 0x7f, 0x1ff, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x19)
prctl$PR_SET_MM_MAP(0x49, 0xe, 0x0, 0x7b)

4m3.164308669s ago: executing program 3 (id=4486):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25", 0x6}], 0x1}}], 0x1, 0x20008000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000ffff26bd7000efdbdf2500000000be85edab7a5cd2a974c68957e7faaaad3e9208689f7dc057cbf2449c43d0be5f7e430cdcc13ef6ee86d79bc1bd2706a6c6d8ca9338c25b3ecd6625c55aac8351bab578dd015548e20cd13a4b046bcca11384522743434feadd919e1ec0154507347135f28a14ac1cf8d4815da440c9c4145c72578961056b26525767a844c2b8dab48c", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000000000008000500", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
io_uring_enter(r3, 0x2219, 0x34d3, 0x16, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000140)=""/5, 0x5, 0x101c0, 0x0, 0x12)

4m2.90114747s ago: executing program 36 (id=4486):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25", 0x6}], 0x1}}], 0x1, 0x20008000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000ffff26bd7000efdbdf2500000000be85edab7a5cd2a974c68957e7faaaad3e9208689f7dc057cbf2449c43d0be5f7e430cdcc13ef6ee86d79bc1bd2706a6c6d8ca9338c25b3ecd6625c55aac8351bab578dd015548e20cd13a4b046bcca11384522743434feadd919e1ec0154507347135f28a14ac1cf8d4815da440c9c4145c72578961056b26525767a844c2b8dab48c", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000000000008000500", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
io_uring_enter(r3, 0x2219, 0x34d3, 0x16, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000140)=""/5, 0x5, 0x101c0, 0x0, 0x12)

7.560273911s ago: executing program 9 (id=5719):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xe, 0x1, 0x1, 0xffff, 0x7, 0x1040, 0x6, 0xffff, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0)
pwritev(r4, &(0x7f0000000200)=[{&(0x7f0000000040)="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", 0xfa}, {&(0x7f0000000140)="45a4c57dbf98", 0x6}], 0x2, 0xffffff01, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0, 0x0, 0x10})
connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2186, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x10}, 0x94)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6})
socket$kcm(0xa, 0x3, 0x87)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)

6.671125345s ago: executing program 0 (id=5725):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r1 = socket$unix(0x1, 0x1, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0x0)
io_setup(0x800, &(0x7f0000000440)=<r4=>0x0)
eventfd(0x0)
io_submit(r4, 0x0, &(0x7f0000000940))
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=r4], 0x4c}}, 0x0)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
io_destroy(r4)
sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000880)={'wlan0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x1e80, 0xffffffffffffff4f, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb)

6.403836149s ago: executing program 0 (id=5727):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100"], 0xf4}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
pwritev2(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0xfed}], 0x1, 0x0, 0x8, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="8400000000010104fff500000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000020000680"], 0x84}}, 0x0)

6.271976162s ago: executing program 0 (id=5728):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003638680134eaf8e9e9f4e3510f30c101087360102030109021200017f04500009047c0b00a4cad400"], &(0x7f00000001c0)={0x0, 0x0, 0x51, &(0x7f0000000200)={0x5, 0xf, 0x51, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7, 0x7, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x2, 0xf000, 0x1e, [0xc0c0, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "cf6f8371752284059050f1a7ed2a0d5f"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x14, 0x10, 0x1, "bc2e2d6b096e59ad3a15795925ea933c0d"}]}, 0x2, [{0xfe, &(0x7f0000000040)=@string={0xfe, 0x3, "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"}}, {0x7a, &(0x7f0000000140)=@string={0x7a, 0x3, "de82381e33f135c079b8742599df3b4f2b45e3f0bb4485e2ff0314ae0a760d104f500eed95812c8ea36c457d882c12f2166b3cfd04a20aa39d1fb56561677ab211e8638a70f621b64753edebc7b303036739b2e3775c99f67340ad954a364de40a49e9d5660ee38f3ce329d409f6b6ae815a596eba6d2ebd"}}]})
syz_usb_disconnect(r0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x10, 0xffffffffffffffff, 0x4cec2000)
unshare(0x26020480)
r2 = socket$packet(0x11, 0x2, 0x300)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)=""/137}, {&(0x7f0000000700)=""/119}, {&(0x7f0000000780)=""/103}, {&(0x7f0000000840)=""/145}], 0x64, 0x0, 0x11}, 0x20)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000e00)=ANY=[], 0x0)

5.827654271s ago: executing program 8 (id=5732):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
socket(0xa, 0x800, 0x1ff)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

5.731920614s ago: executing program 8 (id=5733):
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db})
io_uring_setup(0x2e72, &(0x7f0000000240)={0x0, 0x9a79, 0x4000, 0x3, 0x187})
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000010004b0400000000000000167a000002", @ANYRES32=0x0, @ANYBLOB="129c000044100000580012800b0001006272696467650000480002800a0014000180c200000000000600090000000000050024000000000005001800000000000500170000000000050025"], 0x78}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4c18, 0x4, 0xf, 0x5e658b64, 0xfffffffb, 0xf, 0xffff, 0x1, 0x7, 0x0, 0x80, 0x3, 0x4, 0x9, 0x200, 0xfff, 0x6e7, 0x7, 0x10, 0x2, 0x5, 0x5, 0x5, 0x2, 0x2, 0x1, 0x0, 0x9, 0x469, 0x8, 0x5, 0x5, 0x40, 0x8, 0x6, 0xe, 0x1ff, 0x2, 0x3, 0x5, 0x5, 0x2, 0x7, 0x7, 0x4, 0x2, 0x7, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x8000, 0x511, 0x1, 0x7, 0x6, 0x3e0, 0x505, 0x3, 0x1cb, 0x10000, 0x80000000, 0x9, 0x4, 0x7, 0x3, 0x6, 0x7, 0xf5e, 0x5, 0x9, 0x65, 0x3, 0x10000, 0x9, 0x10000, 0x2, 0x4, 0x1, 0x8, 0xefb, 0xffffffc0, 0x4, 0x6, 0x4, 0x6, 0x7f, 0x2, 0x4, 0x80000001, 0x0, 0x3b53, 0xbcf, 0x1c, 0x81, 0x4, 0x6, 0x8001, 0x2, 0x4, 0x3, 0x0, 0x40, 0xfec6, 0x0, 0x3, 0x8001, 0x9, 0x5, 0x890, 0x7, 0xe181, 0x21, 0x1b2, 0x1, 0x10001, 0x86, 0x10, 0x19e, 0x7, 0x5, 0x4aa0, 0x3217, 0x1, 0x0, 0x4, 0x4, 0x8, 0xe, 0x6, 0x5, 0xb005, 0x10000, 0x8, 0x6, 0x7, 0x7, 0x10000, 0xfa, 0x9, 0x1, 0x1, 0x82, 0x8, 0x7, 0xc4e, 0x4, 0x9, 0x3ff, 0x7b82eae2, 0x200, 0x3ff, 0x7, 0xfffffbd5, 0x5, 0x400, 0xfffff360, 0x2, 0x4, 0xd6d, 0x1, 0x9, 0x3, 0x9, 0x0, 0x3ff, 0x8, 0x5, 0xfffffff9, 0x4, 0x0, 0x0, 0x80000001, 0x3, 0x618, 0x5, 0xd0, 0x5, 0xa, 0xec, 0x3, 0x6, 0x1, 0x1, 0xffff8001, 0xf00, 0x9, 0x2, 0x400, 0x3, 0xfffffffd, 0x9, 0xfff, 0x6, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x9c28, 0x2, 0x2, 0x8000, 0xdb4, 0x6, 0x6, 0x0, 0xdb6b, 0x0, 0xf76, 0x40000005, 0xa, 0x2, 0x1, 0x51c7, 0x40, 0x0, 0x0, 0xe1bb, 0x7, 0x3, 0x8, 0x6, 0xa4a, 0xaa, 0x9, 0x1ff, 0x2d0, 0x3, 0x6, 0x1, 0x80000000, 0xffffffcc, 0x4, 0x4006297, 0x1, 0xa9ef, 0x7, 0x100, 0x5, 0x1, 0x5, 0x8, 0x2a47, 0x5, 0xffffffff, 0xd4a, 0x7, 0x7, 0x2, 0xc, 0x46]}]}]}}]}, 0x43c}}, 0x4008800)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x80000001)
accept4(r6, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040))
io_setup(0x800, &(0x7f00000003c0))

5.463846479s ago: executing program 9 (id=5735):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r0, &(0x7f0000000340), 0x8)

5.298785765s ago: executing program 9 (id=5736):
epoll_create1(0x80000) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x44}}, 0x0) (async)
symlink(&(0x7f0000000000), &(0x7f0000000100)='my_configfs\x00') (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x3c, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4)

5.228793655s ago: executing program 9 (id=5737):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x20, 0xb, 0x28, "bc9b005cea75a07265d245b8aeb5f6b2e8c5c4881a4414eedd2b066c897690a22b7de1c4e5ec91a0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x20, 0x17, 0x5, "b0738096df"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.758802194s ago: executing program 6 (id=5739):
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delrule={0x30, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x10008}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pimreg\x00'}]}, 0x30}}, 0x8810)
ioprio_set$pid(0x1, 0x0, 0x2004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x0, 0x569, 0x80000001, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0xf0, 0x8, 0xc, 0x8})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r7=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
syz_ublk_setup_queues(r10, r8, &(0x7f00000003c0)={0x0, 0x20000, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x1000, 0x2, 0xe3, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29e7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0xe0ffffff, {}, 0x1f, r7, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}})

4.208586738s ago: executing program 8 (id=5740):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], <r2=>0x0, 0xc5, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000400), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffb0b703000000000000850000008300000081000000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001100b7040000010000008500000082000000850000000e000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f0000000080)='4', 0x1)

3.270922142s ago: executing program 6 (id=5742):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xb, 0x8, 0xd21, 0xd, 0x18, "9179e6f489a240de1da951b56c4e180606a128"})
openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_make_request/probability\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r2, &(0x7f0000011040)=ANY=[@ANYBLOB='unlock me'], 0xb)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x6000000d})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000c40)={0x2000000a})

3.183696257s ago: executing program 9 (id=5743):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x3, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x3, 0x2, 0x10}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0xd, 0x8}}]}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x9, 0xf, 0xa, 0x8}, 0x11c, &(0x7f0000000280)={0x5, 0xf, 0x11c, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x31, 0xf, 0x0, [0x0, 0xc0, 0xc0ff, 0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x89, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x1, 0xf00, 0x7fff, [0x30, 0x3f00, 0x101c0c0, 0xf, 0x0]}, @generic={0xd1, 0x10, 0x2, "3fef4724652f81bbfc129a19b0504011295c93890a7c8be29152a2be949ebf5982dce5ca3899feb5efcae6631d92a022ce8b934910bbcbed5d9fd7eb50614d64a869d43cdb924544ab3b49b6d15db4c66a0a9f84b6c0ed7b912d0726e075645eb7d1e057fc4abf5156f7aad6fdf102ba75ed99f5fe9d0deccfdda5bd8bed90008d472b5e5cb5c5719e15cde962272b5af2d9e1284c86084bffcb0365957368861077fcdd1d5517003844fc4e13ef257d577976c24224c5bb28fa920b0e25198c669e5bb596a1f535da95e32c332d"}]}, 0x9, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x421}}, {0x6a, &(0x7f00000004c0)=@string={0x6a, 0x3, "6e357f3af2005f401be287def4f2e1458c22240b31d7c3d3390af6b4cf955e76c185840a6fc8f7eb57e08b8c7d984ab4a2d410f6183c036b4f9e5029aebae9c6579c9e530c49d361acdf916590fa28f57f4d9179ec2a0786682d7c3a68e0857d88aa5c99f1d9359b"}}, {0x16, &(0x7f0000000540)=@string={0x16, 0x3, "e388b55444b57939c03ae619c15feb4bcefee4b7"}}, {0xbe, &(0x7f0000000580)=@string={0xbe, 0x3, "6d582e3a17b4acf6e294a09d06d85aa55ac4acf914696c3060a1b8b15dd63c0259edadf4672b359f97b0b0eed7f3545184f5678e14c313d13cc38e07b50cd415d8318d502d03c5b268be82d39d8b6c756d9c0bd5b860358474c200fe171348fdd8ce6d486bdef44dc282e5f7bf8db188c9f37175e368d3169491b2a791e201ff767d35996e25718238d01adc45b9aebd300ed8b5d7b3b74ab5caddb37586c2eb8267a9a26568c08091fab85eb31ba20d6a98ca58012268035b7fe799"}}, {0x6, &(0x7f0000000640)=@string={0x6, 0x3, "9cc34a66"}}, {0xed, &(0x7f0000000680)=@string={0xed, 0x3, "edc4c29d6cbbc34ba671637a0aaef2e02eca54121a140932572cd02de033ad7d6e574a6bf680d3d53ff6d191fb7bfbe022ea27f965ebb6c9700f0f26090983507b50b9e1c97467f76ead6a5796ab3db7726d7731f0a997ef441a1e2ed6fa33a5ca5f56a87c433a5a94fa0f7b7ffa74455a639d0d8dafdea5b3d2590ff7e8ffef6381073a42fec3a5738cf8f85acc877b7256391301a5b14cead2fbc3a798b732cf341456f6c1ea46efda88e23605d4f2ebcf6eb5d4654b3d7659f3febc0fc72fcc590250bd5ecc6326a1d827734f4ebe08401b19a8491e43309994e92cd490d59fcdcb15f772d5d5dba8e5"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x439}}, {0xe3, &(0x7f00000007c0)=@string={0xe3, 0x3, "b032832530f65cd8fea450b4c12e03833a61fb483633a121e8aba30c30d3ecf5b64b06b27f5c928ce6d30f10e1353e1f3b091b000a38d6e77c12ccce0bf17b8a439e36e12871870779796c9ec9cd75e2ce05747a5ec45932320b6417117d68c87441420f17372810ceb29a62f67f812383194ba1865c53349c854fdcde52d9dc2b33ca951f219f1a57ce0fb8e2c307e89edf9aec1a6fe334ceed4839e1888a1c30fea2c710ac07c36a1013f33fec5b4a0c1196cb102c14c918d388e5722c32c344339cceef0e6ba56ba29bbe46a829b7d032dee808c1d0e003f35a61b85d9174a4"}}, {0x8f, &(0x7f00000008c0)=@string={0x8f, 0x3, "2a3801b77c8b14b9a414be8bdf3b6e4c49615805989fcbe2293f6fada448f050df1029ed858a4e766f0acef0a4a3f90999ca736c9056f845a42f03f9b79695b65ca42359b8c57f51ea81a926c424bb8a3214dc42b1b1c28668f82aa1a2b2bd6672f8567977cb2b81279388f5dc688ee34bda8a63f86005be1fd4a97f9250da9e2087181ff6ce0283cd41b36ee5"}}]})
syz_usb_control_io(r1, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x40, 0xe, 0xa1, {0xa1, 0x0, "ea7982b90ad0a3f4d0bbd35f26af1b22055c919a1d7f3c42f5091ecd79d059adeec0f523f334af1ea7290256f0828bde69fa5ebbeabe35d78744e3e8844b8f272fc5a10a5fb993772a3062b6668d583e42184dea82b1ffcf40a94bf587ce6ba28beddff0c1c04485fb94a4b72137e7318dac4cd2b2b4740db59f155e5661a95ddbff16e501932839acf5c1a314855f882c2b2756b30215bdf43f23dbba4744"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, &(0x7f0000000bc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x3, 0x4a, "d9bf590d", "e97c0f7c"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x3, 0x8, 0x7, 0xa0fc, 0x4}}}, &(0x7f0000001180)={0x84, &(0x7f0000000cc0)={0x40, 0x3, 0x7a, "d56fc3f7ff74982419ac5210dc4eaae8e3bb2ac3bc95b1f4b158a186e370c2dcad4eea694d52032dcd18a196f9a9e0bed793b048d6cd284d854f5625401435b9a76a1e64c3cdee813186cbb871d03a7ec3650b0764dac9b622f43efc3fe35309823b9392c122d46139ed04da7f0f88226c52dd25ad058ea65dc3"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x800, 0x80}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "1815"}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000f80)={0x40, 0x13, 0x6}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @random="3d5994a4152e"}, &(0x7f0000001040)={0x40, 0x19, 0x2, "c881"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0xfffb}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0x5}}) (async)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0xfffffffffffffda3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xa, 0x7, 0xf7, 0x7, 0x1, 0x3, 0x7, 0x47, 0x14, 0x9, 0x4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0})

3.150001766s ago: executing program 6 (id=5744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) (async, rerun: 64)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) (rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf500000007067d68460500000d0000000000000000000205000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) (async, rerun: 32)
recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f0000002180)=""/4089, 0xff9}, {&(0x7f00000003c0)=""/63, 0x3f}, {0x0}], 0x3}, 0x40000020) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r5, 0x5, 0x0, 0x21dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) (async)
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r8 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32)
sendmmsg$inet6(r8, &(0x7f0000002040)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr={{0x18, 0x29, 0x39, {0x99, 0x0, 0x1, 0x2}}}], 0x30}}], 0x1, 0x40000000) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010100000000000000000a0000021800018014000180fb0001006401010006000000000000000c00198008000100", @ANYRES64=r9], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000)

3.123326357s ago: executing program 0 (id=5745):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x5a, {0x2, 0x104, @broadcast}, 'veth0_virt_wifi\x00'})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001114010227bd700004400000060003"], 0x30}}, 0x8040)
process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/16, 0x10}], 0x1, &(0x7f0000000680)=[{&(0x7f0000000480)=""/163, 0xa3}], 0x1, 0x0)

2.958762212s ago: executing program 8 (id=5746):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x5, 0x5)

2.923084565s ago: executing program 5 (id=5747):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sync()
sync()
sync()
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4)
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x988a33062a8b4274)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_kvm_add_vcpu$x86(r3, &(0x7f00000001c0)={0x0, 0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r6, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
io_setup(0x8, &(0x7f0000000240))

2.554002274s ago: executing program 6 (id=5748):
r0 = dup(0xffffffffffffffff)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0xa440) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x4000) (async)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async)
io_uring_enter(0xffffffffffffffff, 0x5aa3, 0xd92, 0x9, 0x0, 0x0) (async)
write(r1, &(0x7f0000000080)='4', 0x1)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000000c0)) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) (async)
preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) (async)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0)
gettid() (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

2.411594877s ago: executing program 0 (id=5749):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}})
write$tun(r2, &(0x7f0000000240)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x41}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x18, 0x0, @wg=@cookie={0x3, 0x2, "f3a74d33b95518f01bbd7604731c892a0a13e19a51f64f9e", "78077bb13c9fc3304cf3c5cd542ab66fee275d6644654e5b0e7123e822a71d27"}}}}, 0x66)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.107483001s ago: executing program 8 (id=5750):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x88a00, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0xfdfffffe, 0xd6fe2, 0x1b3468})
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r2, 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40bd81, 0x2)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
rename(0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff)
keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
ioctl$TIOCSRS485(r3, 0x542f, &(0x7f00000010c0)={0x2, 0x401, 0x2})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r5, &(0x7f0000001100)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="e3202a2b2e20726d00"], 0x9)
sendfile(r5, r6, 0x0, 0x106f)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500001000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@alu={0x0, 0x0, 0x6, 0x8, 0x9, 0xffffffffffffff77, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0xc1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r7 = openat$vsock(0xffffffffffffff9c, 0x0, 0xd00, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304)

1.796717691s ago: executing program 0 (id=5751):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0xd1)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000029000000040000005e0000000000000018"], 0x30}, 0xc4)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x19)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000e80)=ANY=[@ANYBLOB="0004f900000072"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, &(0x7f0000001240)={0x14, 0x0, 0x0}, &(0x7f0000001540)={0x44, &(0x7f0000001280)=ANY=[@ANYBLOB="40170f001100534e08b786d11b6e504d5d9de31ee0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0xd1) (async)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000029000000040000005e0000000000000018"], 0x30}, 0xc4) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x19) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000e80)=ANY=[@ANYBLOB="0004f900000072"], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac2(r0, &(0x7f0000001240)={0x14, 0x0, 0x0}, &(0x7f0000001540)={0x44, &(0x7f0000001280)=ANY=[@ANYBLOB="40170f001100534e08b786d11b6e504d5d9de31ee0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

1.375273004s ago: executing program 6 (id=5752):
r0 = semget(0x1, 0x3, 0x20)
semop(r0, &(0x7f0000000000)=[{0x4, 0x8, 0x1000}, {0x4, 0x2, 0x800}, {0x2, 0x5, 0x1800}, {0x1, 0xa, 0x800}, {0x2, 0xaf, 0x800}, {0x0, 0x5, 0x800}, {0x1, 0x2, 0x1000}, {0x4, 0x8, 0x1800}], 0x8)
semtimedop(r0, &(0x7f0000000040)=[{0x2, 0x0, 0x1800}], 0x1, &(0x7f0000000080))
semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/50)
socket$nl_audit(0x10, 0x3, 0x9)
r1 = semget$private(0x0, 0x1, 0x10)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000100)=""/164)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = semget(0x2, 0x4, 0x4)
semctl$SEM_STAT(r3, 0x6, 0x12, &(0x7f00000001c0)=""/183)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', <r6=>0x0, 0x2f, 0x5, 0xd0, 0x3, 0x3b, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x10, 0x8000, 0xffffff81, 0x2}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'ip6_vti0\x00', <r8=>0x0, 0x4, 0xb7, 0x6, 0x1, 0x59, @mcast2, @private2, 0xbc47, 0x8, 0x0, 0x8}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000780)={0x638, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "0302cfea5633321746572e8e331a0bbe291e53f443c621d96b99a8a03fcb3433ba28ffc12f58e65e2e66dfaa0317ac106a08c312540e84644cf50afc06d4fa4f8fbcafeaf2581f590a4612be2a1163c7d6dd63fbd46653ce5de9787f850d6218d9f144127dc538246ebd9823970992a3913372c6951d32db76679d01b5c9a9cfc862460eb9d9051261b015966b1a1021afb6cfbce8f67b6ec6da4b769e04514346adf855ddaf3edcf857a9aec90190f1e93b8b6c0ca7ac207ec66fe039c4623afb76bbf7c310593bea4f07"}, @ETHTOOL_A_BITSET_BITS={0x160, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',{[/!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%*}.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$\xa8\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$,}&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\\&.{/,}]*\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3fffc00}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x97, 0x4, "1f0ce338d3cb4e2a3a4cff7c81f80a2b06740883be0c7affb70f67ade0d56d778ef0099dda3b856babd9facf7e03174555c169640a8d5c865da19f8a9db70be327e8a42f69e50b6c352e228310f85e90623a48e9ab4e4edc81a67a7d196a32d4fc2b08df76794f95c29aa5a01b4aea642e93156a6fd704380fbddf106c50d41f5a16931ed45892dfd4b6fe92cb6f9d5285adeb"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf56}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '--\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.&,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.&],$(,-[}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{:$}\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&-.+[^)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{\'{%#\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x93, 0x5, "05f7f88deeb20a2ccd058cd5f7952675b35ea16fc7b33bc59153a885c5bf1141ab216d8966daa45fbc24850bb1b72815f4b7396f6048f5c34f08ce243de6f238146ddc174df3ba230eca47e53cacc08cc136c263f106ae67616dd7ca9f517c7da1acf7dc9350cd16c500b279437f3de3599c5b54d1ea2213da434fee7978465a54433d5ef82d23e63a87c392c28f0a"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&\'(@-$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "170b92472b16b6e4e9922d60d438c662fe0175618ba01fd7fee3942d0badfb18d8807bc19cd37aa7d0e4340d744f275b5b8e6c173198f7aeb0af515af5abfe6ba621c6bb6c5346dc498e94fdb096bf35acbd6f37a8b763e7cf5f50525d5fc45baa457f29e88eea219308ab98a62edd7ded0f8a769b426a29ea142e60f3ab494bbdc4633844f3011b92ec346f47d686516a7274865770c54f5e8f9b6a09c7fe72c1c987a2c94ebf1f40d9a6a63dc73c3f8af82d15b23bb85b55855927861b91dfdddf6b31b522f45d56b6f7ae131e80f75de893"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x48, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x38, 0x5, "a7dc43a43c9bf802b0cd68d73dc436b7aa1901ffb80e65fde012406ecefa677fbc41d358242261bdc2898a81f54a6246d5f5c782"}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x638}, 0x1, 0x0, 0x0, 0x800}, 0x4840)
semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000000e40)=""/177)
sendfile(r4, r4, &(0x7f0000000f00)=0x16dc, 0x5)
read$FUSE(0xffffffffffffffff, &(0x7f0000000f80)={0x2020, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
chown(&(0x7f0000000f40)='./file0\x00', 0xee01, r9)
writev(r4, &(0x7f00000035c0)=[{&(0x7f0000002fc0)="a9e8502825335db41fc9127c582c6700b5", 0x11}, {&(0x7f0000003000)="97a3548d0e423876c264b32b6e6b3a1f2da2492a6270e10422a66d0715d6d87650f3c3ec625822064fab0647278ff207ab54e01395c6cf29cddd6d6c89039d5fe62a2d79808a901a37e316df128768b667d91c8b9175ad3cbc8f2bd52726d478d9f0daea61b7f42a02ac52fc7a0f132e36b7f456e6f096fa7651736ee51d0b8a0237d8630f1df53921a12da41cd3a68c600139f6c9de3d0c6ddd5de48ca468325a1b35acbbd898f40595b06f33056fd465ad43a521cf9b1b309312382f74614761a161908af131b255", 0xc9}, {&(0x7f0000003100)="77bfe763a9d396251e7261acb74c04e54d9790951fbfe9f55426e0d70678f64c03", 0x21}, {&(0x7f0000003140)="f8698e9692ea8474799b42c61954f4c61b12fab59260d87d6d80db3955d677b0296d95fea8", 0x25}, {&(0x7f0000003180)="18d2a66a3aabc68ecb02aecbe2283e31ad2988b776fed2f48d603de99032e8ee50f11d46e0eccd56050f204cc64dc3504a4e697ed9687aadabc7a0c98318cf07bdd8dbe6d7c78a20ec64db9ac24d4c96e5616cbcba9b5b345090e3ec35e0b535bed54d8a7ebd6b097eaee1b15e114ab29e5a39adbd85e3f5ddd510242bed144e56d39f02d11bde2922926b288874bbef58d7d3cf95101f02574dced98366e2e75e6e", 0xa2}, {&(0x7f0000003240)="6b17404a136206435e9b8d18e39bf964951272bd738149dde7cf2ea35edabb1735b7115fdb66bdb811de3f518d74ab6d6db13dfdd11342d107571d63534a3ffa4f9d2b725228175bb85395ab65e76d11c21fd73cf194ee191d9d00c0df244da77d729d356e76941c12f651684a4eff53e2dfce922628144246ee772777f7266e372eaa5a320485bfccc2ad675802c72f3014f38963c43f15d8ca1b7cb14f1f77d5311150ff54af0cbb8e926b71034a5211e6b8c3358f3d0aa3516e3c526981939312ab28147c454558e605e0c41c751a71c416", 0xd3}, {&(0x7f0000003340)="77782d3a17900bc6c2b15be4ca1f0a4f90afbc074c326db3b2893ad246023f1efd9e36b1787e83acfbf66988f8f331372f917791e493b06ac1ece7994ef73f6948f6d95911df8b5281166f1f14a995d69066d320f1d0d103f68ebec1171398d1309cf61e4c1daf710150d59f0b59327ecf1a69fc5db314c37d446a2403d9b6f84ae6f6d38428be9d16e2730a81799d811ee04ad0f2b6ab019c0c8fe11c70cc9494077ebeae9e6c2f9c97e378ff8d7c1c7c3a231df5ef1ec3fbe96e5d2614e8c8976f", 0xc2}, {&(0x7f0000003440)="49a91f1c1c24f72f05831856a0ee55389c58eba4f6ef865b7fe6fdfc1ea85ea76411db3ef518a0b1ba7100726649d5fe98c50adf8065879f0c65fd", 0x3b}, {&(0x7f0000003480)="4637f6fe0bfc62e8c7ca257eac88c53b7e8466fa8aa02b2b099091c0d4d2a97ec3c5250d538a79145bbeaaddd9", 0x2d}, {&(0x7f00000034c0)="cc96d9eb406697529ed889d61e6d1047ac4fb9e13ae97e58f118fdd9f1c859418cf76c18391006fa65fceababa027d7b2176c56fd3d5126de7e4aa7fc159a458e57723f17e07116fd8f658270c0135fc505bccf9f197e95caa6e163bbc3ba98284ec68c3b702abf4e5c7f4fae65f05b0797351906619d2c3a040f7d68a4da6e6bd103b12189d09492175d1a1beed8492418149395dbd4a8799d0793dff2450c3d8eca1301731df3cfb33209a7232743dee1617c1a69322688cbbc9f57a1a0f15fac6f2b3112f21d4e733d8e28543b854c0fc758fec7917af0fe1d211eabdd93adbae8ff9c63b2d76db51", 0xea}], 0xa)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003680)=[0x8001, 0x6, 0x8, 0x5])
r10 = syz_open_dev$audion(&(0x7f00000036c0), 0xb6, 0x400480)
setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000003700)={0x0, 0x1000}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
semctl$SEM_INFO(r1, 0x4, 0x13, &(0x7f0000003740)=""/40)
write$6lowpan_enable(r10, &(0x7f0000003780)='1', 0x1)
ioctl$DRM_IOCTL_RM_MAP(r10, 0x4028641b, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000003800)=""/189)

1.322002244s ago: executing program 6 (id=5753):
r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r1, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mq_timedreceive(r1, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000280)={0x0, 0x1000}) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="607b01000000b600dad4902cfe466f4b7457be0bf71a2ff0aab746592a09845c5f23c152dff4e324d0168d94cbbafcfafbc28eaff2b1befd71395caa361dbbf6aa1bb23d462e344bc68d71e529629e2baf44"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="fd24a7000000a7212877137912a07822f5cb38348097ce903e45487a956a09a32062a1965e5453b48ae60b4b750f84a594a1a321a973d9583531a55abd7817bf7875581446bdf492b90d5f31810ea5628e688e566489a0435c540102015810fdb0719201e2258d26beb8d43b7975dbe4b6b3c35e2e312969971dc4f761b64b1036f863c4ae688fb4029b0e73aba3470387d155630e605eb08cb8b8d77c955be5131e7194108386ece25156cbc3"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000700)={0x20, 0x17, 0x100, "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"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x48}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x8001, 0x1, 0x9, 0x1ff, 0x1, 0x476, 0x5, 0x7, 0x0, 0xf, 0xf0eb}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x4705}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) (async)
syz_usb_disconnect(r0)
unshare(0x22020600) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000140)=0xfffffff9, 0x4)
syz_usb_control_io$uac2(r0, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000600)={0x14, &(0x7f00000004c0)={0x40, 0x20, 0x7b, {0x7b, 0x80a03f096b3564a5, "c14d31232545a3ea3d24b678e479f9a73981656ee323690541fb5fe5d23f735c5a5fbed22def7a4dcdb796954d480e5b4da86c9c51cbd4da83b1517c4d5ea19ffca5804e4aa495b6c0115daee3e2bd3cd28a7770f0de86809100ef9df8874e26399061c0bf787d3c0be4e9afec3b856f17a6798b53592a241f"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000940)={0x40, 0x14, 0xf8, "1cec495f67579c6122f702a03051c936bed8428f6b301491230314836a1c28e17d2b3d183d9ad2f108ca31328dd259e14e50d2837159fbf6064298bc7314a73153dd56c36401f7939dc352038ca1bed22967a540302c584ff8cf3546bed3ec501c7e5c7b1f71a76da1e5587f3463fdffe7917043c620cdca9ea9e2cc0a0c133ea9c477c05af0d60784c16ffa1e60ba02213b6d32f2b7bb969c0a2e90f74dcf247ba11f21d63b4528568f007b798becf9880c2e70416b52edbd72dd95f489100faa58118d73703d0d395d65241152e2b837f60bbb1b548b3e832a5bb344688f16fef4f1191b2551c24a05b3bf1fd84def3da81837aa365f2c"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000ac0)={0x20, 0x81, 0x2, 'lc'}, &(0x7f0000000b00)={0x20, 0x82, 0x3, "73ff16"}, &(0x7f0000000b40)={0x20, 0x83, 0x2, "d982"}, &(0x7f0000000b80)={0x20, 0x84, 0x3, "c89ef7"}, &(0x7f0000000bc0)={0x20, 0x85, 0x3, "902d70"}})
munmap$KVM_VCPU(0x0, 0xffffffffffffffff) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.153637542s ago: executing program 5 (id=5754):
openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_make_request/probability\x00', 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x6000000d})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000c40)={0x2000000a})

1.123189626s ago: executing program 8 (id=5755):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x8, 0xffff}, {0x13}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$unix(0x1, 0x1, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885)

1.031943457s ago: executing program 5 (id=5756):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r0, 0xffffffffffffffff, 0x4, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x1e)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x128}}, 0x50)

867.529763ms ago: executing program 5 (id=5757):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500100001a00010028bd700000010000ff020000000000000000000000000001ac14140c0000000000000000000000004e20071c4e2100060200002002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x844)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) (async)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async)
socket(0x46, 0xa, 0x2feb)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async)
r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') (async)
io_submit(0x0, 0xfffffffffffffead, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000092829a0000000010000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)

799.957983ms ago: executing program 9 (id=5758):
pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000040)="f8", 0x1, 0xfffffffffffffffe)
execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x800)
r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x0, 0x0, 0x207f, 0x6ae0})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x20000006, 0x8, 0x2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
ioctl$VT_RELDISP(r3, 0x5605)
socket$inet(0x2, 0x2, 0xc)
r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x80802, 0xf7)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}})
sendfile(r4, r4, 0x0, 0x2000000000409)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000050000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a010100000000000004000900030873797a300000000054000000060a010400000000000000000500000008000b42000000002c0004802800018008000100667764001c0002800800024000000017080003400000000a08000140000000090900010073797a3000000000140000001100010000000000000000000000000a000000000000000000"], 0xc8}}, 0x4040010)
mmap$panthor(&(0x7f00000ef000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r3, 0x7)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40140, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x79)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r8, &(0x7f0000000000)="340000001a0001000100000000000000022000000000000000000000080003000100000008e002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0)
r9 = socket(0x1e, 0x1, 0x0)
shutdown(r9, 0x0)
pwritev(r9, &(0x7f0000000740)=[{&(0x7f0000000280)="d28d1b58a543863285929efe940d299708cc7e4d92e7d17da0903214bd36bc2caec75d70ad452daef284b03b79d6a9d3621c1591f3ba3011dedb4b0bc2f14887f9bf6017bdf01e8b4226750432a0c83f874c99c7d32f4387111a8fead62a44dcc2f4a39793e2f114056365d2310e4765a225e64ed1019c04b877d2d72c6cc5b082fb9608bcf39216c15cd61323f25f2ac7b198eedeef1c035922c857bd01186e584b75c5260175dc1b3b29dbe413532c3988271cab", 0xb5}, {&(0x7f0000000340)="130ef91aad447bfb279ea8047314ee50796478a3d16ba26e380e4f759af6eb18df1a96f9caa2d3b5c0f8cef738977e3f4da6459af58173d60b0e548f088263779b630ceedc85a9665e82fc29a73d7887fa5cbb7d5d5592d785d822d8e585899890638c6c82466b1eb94e07ca2436cab6f27c49abb5ca27f4de1eecec8488976a4861e71dd939d7686e99b6ac37f054012c6d511707fc45f9ebdeb76511904abc9bc9c6", 0xa3}, {&(0x7f0000000400)="eba7b4dfbb7d21ff8272a5d34cb09ee0940fc52e95d81001942090d2dbb5a4df602b4dce5951ab71f072183a48f370d4fe90c3917ab6190a8fa48686b987163c748353f1a061dfdc0fd561365a2b212572f1a22674bb054be2acafe94417d0057c731de6116615ac22c468f30f5f521edb2a87316b4b5ac9a2a7f23e0ab3fb", 0x7f}, {&(0x7f0000000480)="60ee8c539b112e02e08b812a06c604c7801a18039af4e1ba5f8d90bf27035e42d36b7f367f43762eac1b7d4d1a602ce3da840e0dad4b04254d6872d553ba", 0x3e}, {&(0x7f00000004c0)="61301bc955c24756fc3f95e90b698b0917d78b883ddf62ad7e86ec473029db4df097093ab3db011ef1fc1ffc39c2be2f6e6b6551d59cc75e0568dc1b39b1178606375ca898c2cf4e3ac75b9cbd16f373322c", 0x52}, {&(0x7f0000000540)="7c2303d8e809e65b0d42d7229f421d3daf87a5410e548b4db3c24863604c0cdc82cf4e63450be5b85cf75024a838a73796d2cbfc8aeb27de7cfcd0ecb87390236320f0f1203155660134e546bd089df660e71015bc7625186b1f990334e368b1b0db3b3aca3ccc18cf5d251d3a283feddf6303c9522da65a7183eff8dc6a42b8148725a8e33e2c1e355d13f6df3f040fd1fdf6896975d27a3097cbfb882b03cfe78a3da6352a91965b5482838881229b9c7d8ac60b4441f628c6fda2d7ca12b56ea161ecf60a37bdc02984d80e1022077c2d08f2197c6eba0635e9a1809f8b9e2b77642be0d9a5a5a021412b9813a3c95d9623", 0xf3}, {&(0x7f0000000640)="32ae1137f0a9de1ce132305333dba649a107dbd0427bfd51852faa6f9f4c839dd40d50ec61c30f23cbb5a8f8e88c5fe88e63b6215bff10973c60ddaf3d9f7b4d072ab247d60789b9c8f1f3319b918b1e6b138630db8c6ad973139609f43ca2bf12ea75c7637b1ecd0a3217f1baecca60568643b9edf255e0555824c916842d3a10caa992efa0d45332ce9266e9bc50696a1bdec575905abc47518e76bd80d304649e0fd78388b1e58be7bc81e63aa0397b4fed4d7edd619dd725944f7d4c0688496cc0e385ee", 0xc6}], 0x7, 0x10001, 0x5)
r10 = syz_open_dev$usbmon(&(0x7f0000000200), 0xa7b, 0x2aa4c1)
ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f00000000c0))
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff)

687.9814ms ago: executing program 5 (id=5759):
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000029000000040000005e0000000000000018"], 0x30}, 0xc4)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x19)
shutdown(r1, 0x1)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x8100, 0x4001}, 0x10)
lgetxattr(0x0, 0x0, 0x0, 0x0)

0s ago: executing program 5 (id=5760):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00')
r6 = openat(r5, &(0x7f0000000900)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000a00)='nfsd 127.0.0.1 2000000000 localhost\n', 0x24)
close(r6)
openat(r5, &(0x7f0000000d00)='nfsd.fh/channel\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)="6c6f63616c686f7374303120343030303030313030300000000000000000000020006e62dfb04277c7f00000", 0x2c)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x2)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000480)={{0x10, 0x8, 0x0, 0x40}, 'syz0\x00', 0x26})
ioctl$UI_DEV_CREATE(r7, 0x5501)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40)
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaa049aaaaaaaaaaaaaaaaaaaa1b0800452400a8006800c83743348fecf89bafa44b6c0000069078ac148a07bb8b6f11aaf21f95", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5404000290780000"], 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

26075]
[ 1535.609111][T26082] bridge1: the hash_elasticity option has been deprecated and is always 16
[ 1535.653357][T20173] usb 10-1: device descriptor read/64, error -71
[ 1535.764446][T20173] usb usb10-port1: attempt power cycle
[ 1535.815671][T26087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1535.817832][T26087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1536.103251][T20173] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[ 1536.124524][T20173] usb 10-1: device descriptor read/8, error -71
[ 1536.363471][T20173] usb 10-1: new high-speed USB device number 58 using dummy_hcd
[ 1536.396699][T20173] usb 10-1: device descriptor read/8, error -71
[ 1536.507670][T20173] usb usb10-port1: unable to enumerate USB device
[ 1537.984507][T26105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1537.984956][T26105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1539.573881][    T9] usb 10-1: new full-speed USB device number 59 using dummy_hcd
[ 1539.629832][T26137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1539.632292][T26137] syzkaller0: entered promiscuous mode
[ 1539.632310][T26137] syzkaller0: entered allmulticast mode
[ 1539.769048][    T9] usb 10-1: not running at top speed; connect to a high speed hub
[ 1539.769101][    T9] usb 10-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00
[ 1539.788203][    T9] usb 10-1: config index 0 descriptor too short (expected 43, got 25)
[ 1539.788246][    T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1539.812789][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1539.812830][    T9] usb 10-1: Product: syz
[ 1539.812863][    T9] usb 10-1: Manufacturer: syz
[ 1539.859076][T26142] tipc: Resetting bearer <eth:syzkaller0>
[ 1539.956557][T26135] tipc: Resetting bearer <eth:syzkaller0>
[ 1539.997040][    T9] msi2500 10-1:1.0: Registered as swradio24
[ 1540.004480][    T9] msi2500 10-1:1.0: SDR API is still slightly experimental and functionality changes may follow
[ 1540.138479][T26135] tipc: Disabling bearer <eth:syzkaller0>
[ 1540.166507][T20171] usb 10-1: USB disconnect, device number 59
[ 1540.478119][T26152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1540.488732][T26152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1540.686957][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1540.756765][  T986] kworker/0:2 (986) used greatest stack depth: 16200 bytes left
[ 1540.968222][T26161] syzkaller0: entered promiscuous mode
[ 1540.968269][T26161] syzkaller0: entered allmulticast mode
[ 1541.158288][T26177] ALSA: mixer_oss: invalid OSS volume '#!'
[ 1541.158317][T26177] ALSA: mixer_oss: invalid OSS volume ''
[ 1541.158674][T26177] ALSA: mixer_oss: invalid OSS volume '��ؗi}�:_;#��aaM��~�'
[ 1541.158707][T26177] ALSA: mixer_oss: invalid OSS volume '��PZ1'
[ 1541.158788][T26177] ALSA: mixer_oss: invalid OSS volume 'hՙ���{�W�L�.'�5��&D�}'
[ 1541.158971][T26177] ALSA: mixer_oss: invalid OSS volume '�*o�D�dC�N�)װ���Y��裓['
[ 1541.158991][T26177] ALSA: mixer_oss: invalid OSS volume ''
[ 1541.159004][T26177] ALSA: mixer_oss: invalid OSS volume '��ˡ���
��N�%l'
[ 1541.159021][T26177] ALSA: mixer_oss: invalid OSS volume 'Λ�ҍ'
[ 1541.159046][T26177] ALSA: mixer_oss: invalid OSS volume '��'
[ 1541.159109][T26177] ALSA: mixer_oss: invalid OSS volume '�D�~1+;�'
[ 1541.159123][T26177] ALSA: mixer_oss: invalid OSS volume 'hd��O&�g`���c�?��96M(�m�K5�'
[ 1541.159135][T26177] ALSA: mixer_oss: invalid OSS volume 'o��:'
[ 1541.159181][T26177] ALSA: mixer_oss: invalid OSS volume 'X�m6�,���z*"��'
[ 1541.159199][T26177] ALSA: mixer_oss: invalid OSS volume '���Z$���ؤ4��V�'
[ 1541.159491][T26177] ALSA: mixer_oss: invalid OSS volume '@ʀ�����B�(��-���5AZE^U�x<��'
[ 1541.881661][T26182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1541.891303][T26182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1541.904111][T26182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1541.912577][T26183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1541.913060][T26183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1541.914553][T26183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1541.915015][T26183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1541.927345][T26182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1541.930891][    T9] usb 10-1: new high-speed USB device number 60 using dummy_hcd
[ 1542.037105][T26189] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5224'.
[ 1542.037135][T26189] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5224'.
[ 1542.048194][T26189] binder: 26188:26189 ioctl c0306201 200000000040 returned -22
[ 1542.113779][    T9] usb 10-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[ 1542.114953][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 1542.114980][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1542.117258][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1542.117278][    T9] usb 10-1: Product: syz
[ 1542.117291][    T9] usb 10-1: Manufacturer: syz
[ 1542.117329][    T9] usb 10-1: SerialNumber: syz
[ 1542.120664][    T9] usb 10-1: config 0 descriptor??
[ 1542.128912][    T9] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected
[ 1542.130093][    T9] usb 10-1: Detected SIO
[ 1542.130108][    T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4
[ 1542.130121][    T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7
[ 1542.132415][    T9] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1542.327032][T20171] usb 10-1: USB disconnect, device number 60
[ 1542.337282][T20171] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1542.347119][T20171] ftdi_sio 10-1:0.0: device disconnected
[ 1542.756559][T26195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1542.773819][T26195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1542.781881][T26194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1543.121055][T15755] usb 10-1: new high-speed USB device number 61 using dummy_hcd
[ 1543.273294][T15755] usb 10-1: Using ep0 maxpacket: 8
[ 1543.273977][T15755] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1543.275040][T15755] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1543.275066][T15755] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1543.275088][T15755] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1543.275110][T15755] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1543.275147][T15755] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1543.434864][T26208] fuse: Unknown parameter 'r'
[ 1543.479335][T26205] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1543.494386][T26205] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1543.527115][T26197] program syz.9.5227 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1543.588819][T15755] usb 10-1: GET_CAPABILITIES returned 0
[ 1543.588885][T15755] usbtmc 10-1:16.0: can't read capabilities
[ 1543.956336][    T9] usb 10-1: USB disconnect, device number 61
[ 1544.080583][T26211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1544.091236][T26211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1544.105719][T26211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1544.106126][T26211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1544.322993][T26220] team0: entered allmulticast mode
[ 1544.323022][T26220] team_slave_0: entered allmulticast mode
[ 1544.323051][T26220] team_slave_1: entered allmulticast mode
[ 1544.323533][T26220] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1545.047178][T26233] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5238'.
[ 1545.211376][T26236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1545.211788][T26236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1545.333401][T15755] usb 10-1: new high-speed USB device number 62 using dummy_hcd
[ 1545.493881][T15755] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 1545.495094][T15755] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[ 1545.495134][T15755] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7
[ 1545.497401][T15755] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1545.497423][T15755] usb 10-1: Product: syz
[ 1545.497436][T15755] usb 10-1: Manufacturer: syz
[ 1545.497450][T15755] usb 10-1: SerialNumber: syz
[ 1545.639691][T26246] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[ 1545.802992][T15755] usb 10-1: USB disconnect, device number 62
[ 1545.810969][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.811023][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 1545.929193][T13951] udevd[13951]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1546.064486][T26258] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1546.070370][T26258] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1546.071008][T26258] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[ 1546.071103][T26258] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1546.071143][T26258] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[ 1546.071391][T26258] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1546.072011][T26258] kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[ 1546.072102][T26258] kvm: requested 100571 ns i8254 timer period limited to 200000 ns
[ 1546.077687][T26258] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1546.077762][T26258] kvm: requested 170133 ns i8254 timer period limited to 200000 ns
[ 1546.787845][T26279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1546.788256][T26279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1546.931935][T26283] netlink: 'syz.8.5255': attribute type 11 has an invalid length.
[ 1547.133235][T15755] usb 10-1: new high-speed USB device number 63 using dummy_hcd
[ 1547.263331][T15755] usb 10-1: device descriptor read/64, error -71
[ 1547.503877][T15755] usb 10-1: new high-speed USB device number 64 using dummy_hcd
[ 1547.522248][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5257'.
[ 1547.532912][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5257'.
[ 1547.629837][T26292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1547.640768][T26292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1547.649543][T15755] usb 10-1: device descriptor read/64, error -71
[ 1547.662389][T26294] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5259'.
[ 1547.754077][T15755] usb usb10-port1: attempt power cycle
[ 1548.093263][T15755] usb 10-1: new high-speed USB device number 65 using dummy_hcd
[ 1548.113947][T15755] usb 10-1: device descriptor read/8, error -71
[ 1548.353422][T15755] usb 10-1: new high-speed USB device number 66 using dummy_hcd
[ 1548.374016][T15755] usb 10-1: device descriptor read/8, error -71
[ 1548.484993][T15755] usb usb10-port1: unable to enumerate USB device
[ 1548.598570][T26312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1548.609422][T26312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1549.149882][T26319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5266'.
[ 1549.289044][T26324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1549.289552][T26324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1549.320946][T26324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1549.321381][T26324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1549.943908][T26329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1549.944347][T26329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1550.221740][T26341] nvme_fabrics: n��o��f��]b��ED����E����=Ԙ��ب]O��0!WS��ל�޷��}����F����'5�m�[�ޕwh}�1�n@�	��7��EaoV�MY��m���0;�yl:&1������<���7�-h:S�X��l7Z��S`.�7��P�h\��fP���G�4���`5���_*��v�搡]��\�y��u$���[&s��_�M��������� needs to be < 223 bytes
[ 1550.247220][T26341] tipc: Started in network mode
[ 1550.247246][T26341] tipc: Node identity 32bccb9fc7f6, cluster identity 4711
[ 1550.247392][T26341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1550.253027][T26341] tipc: Resetting bearer <eth:syzkaller0>
[ 1550.399759][T26337] tipc: Disabling bearer <eth:syzkaller0>
[ 1550.568580][T26349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1550.569001][T26349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1551.135533][T26374] netlink: 'syz.5.5280': attribute type 10 has an invalid length.
[ 1551.135559][T26374] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5280'.
[ 1551.141696][T26374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1551.142106][T26374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1551.336542][T26376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1551.337025][T26376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1551.940191][T26383] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '����>���N9�
5�x��hˉ�p����n
[ 1552.555879][T26416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1552.556286][T26416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1552.577781][T26416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1552.579976][T26416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1552.642261][T26412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1552.642896][T26412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1552.699014][T26412] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1552.699272][T26412] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1552.699550][T26412] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1552.709120][T26412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5288'.
[ 1553.202046][T26420] PKCS7: Unsupported SignedData version
[ 1553.235402][T26420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1553.235833][T26420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1553.552899][T26422] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5292'.
[ 1553.729730][T26427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1553.742051][T26427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1553.754386][T26427] xt_hashlimit: size too large, truncated to 1048576
[ 1553.754699][T26427] xt_hashlimit: invalid interval
[ 1553.872097][T26431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1553.882442][T26431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1554.010516][   T31] audit: type=1326 audit(1788525980.030:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26434 comm="syz.6.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0748d9e159 code=0x7ffc0000
[ 1554.036722][   T31] audit: type=1326 audit(1788525980.030:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26434 comm="syz.6.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0748d9e159 code=0x7ffc0000
[ 1554.061490][T15755] usb 10-1: new high-speed USB device number 67 using dummy_hcd
[ 1554.063066][   T31] audit: type=1326 audit(1788525980.060:7893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26434 comm="syz.6.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0748d9e159 code=0x7ffc0000
[ 1554.095894][   T31] audit: type=1326 audit(1788525980.120:7895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26437 comm="syz.6.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0748d5e98e code=0x7ffc0000
[ 1554.096141][   T31] audit: type=1326 audit(1788525980.120:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26434 comm="syz.6.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0748d9e159 code=0x7ffc0000
[ 1554.096334][   T31] audit: type=1326 audit(1788525980.120:7896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26434 comm="syz.6.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0748d9e159 code=0x7ffc0000
[ 1554.223317][T15755] usb 10-1: Using ep0 maxpacket: 32
[ 1554.224941][T15755] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1554.226094][T15755] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11
[ 1554.226129][T15755] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41434, setting to 1024
[ 1554.228416][T15755] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=8
[ 1554.228438][T15755] usb 10-1: Product: syz
[ 1554.228451][T15755] usb 10-1: Manufacturer: syz
[ 1554.228465][T15755] usb 10-1: SerialNumber: syz
[ 1554.234655][T15755] hub 10-1:4.0: USB hub found
[ 1554.251093][   T31] audit: type=1326 audit(1788525980.270:7897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26437 comm="syz.6.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0748d9e159 code=0x7ffc0000
[ 1554.447686][T15755] hub 10-1:4.0: 2 ports detected
[ 1554.629818][T26440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1554.636950][T26440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1554.766727][ T4932] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1554.766802][ T4932] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1554.772944][T25310] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1554.840279][T26440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1554.842620][T26440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1555.091666][T15755] hub 10-1:4.0: set hub depth failed
[ 1555.103444][T15755] usb 10-1: USB disconnect, device number 67
[ 1555.588386][T26452] netlink: 'syz.0.5301': attribute type 2 has an invalid length.
[ 1555.710424][T26458] tc_dump_action: action bad kind
[ 1556.423047][T26463] syz.0.5305 (26463): drop_caches: 2
[ 1556.549779][T26477] vlan2: entered promiscuous mode
[ 1556.549826][T26477] batadv0: entered promiscuous mode
[ 1557.115142][T26473] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5307'.
[ 1557.115188][T26473] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5307'.
[ 1557.178631][T26485] tunl0: Caught tx_queue_len zero misconfig
[ 1557.178682][T26485] netlink: 552 bytes leftover after parsing attributes in process `syz.8.5307'.
[ 1557.738627][T26503] dlm: plock device version mismatch: kernel (1.2.0), user (1717991472.1717986918.1717986918)
[ 1557.796775][T26503] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1558.039292][T26505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1558.059667][T26505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1559.142537][T26526] fuse: Bad value for 'fd'
[ 1559.312626][T26528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1559.331240][T26528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1559.533271][T26539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1559.540600][T26539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1559.624859][T26541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5325'.
[ 1559.708072][T26544] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5323'.
[ 1559.729019][T26542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5323'.
[ 1559.849568][T26546] netlink: 51100 bytes leftover after parsing attributes in process `syz.0.5326'.
[ 1560.130954][T26555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5331'.
[ 1560.236932][T26563] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5333'.
[ 1560.239138][T26559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5331'.
[ 1560.525277][T26580] syzkaller0: entered promiscuous mode
[ 1560.525309][T26580] syzkaller0: entered allmulticast mode
[ 1560.836841][T26593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1560.847333][T26593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1560.888072][T26593] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1560.897618][T26593] 8021q: adding VLAN 0 to HW filter on device team0
[ 1560.940104][T20197] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[ 1560.940448][T20197] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[ 1560.949412][T20197] bond0: (slave bridge0): link status definitely down, disabling slave
[ 1560.983862][T20197] bond0: now running without any active interface!
[ 1561.075055][T26595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1561.085777][T26595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1561.930004][T26620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5347'.
[ 1561.930044][T26620] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5347'.
[ 1561.943848][T26619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5347'.
[ 1562.199337][T26628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1562.448434][T26636] syzkaller1: entered promiscuous mode
[ 1562.448462][T26636] syzkaller1: entered allmulticast mode
[ 1562.492963][T26637] lo: entered allmulticast mode
[ 1562.958935][T26651] pim6reg: entered allmulticast mode
[ 1562.965446][T26651] pim6reg: left allmulticast mode
[ 1563.058407][T26653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1563.058849][T26653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1563.167715][T26655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1563.170025][T26655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1563.263512][T26633] lo: left allmulticast mode
[ 1563.525272][T26665] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1563.538278][T26665] bond3 (unregistering): Released all slaves
[ 1563.953346][T26679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1563.993113][T20173] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0
[ 1564.016134][T20173] hid-generic 0000:0000:0000.004D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1564.049163][T26682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1564.058045][T26682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1564.807396][T26697] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1565.297446][T26711] kvm: MONITOR instruction emulated as NOP!
[ 1565.475188][T26716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1565.475996][T26716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1565.478529][T26716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1565.478989][T26716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1565.482802][T26716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1565.484631][T26716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1566.035164][T15755] usb 10-1: new high-speed USB device number 68 using dummy_hcd
[ 1566.075680][T26725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1566.088224][T26725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1566.193358][T15755] usb 10-1: Using ep0 maxpacket: 16
[ 1566.201267][T15755] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1566.214655][T15755] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1566.227289][T15755] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1566.227337][T15755] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1566.227373][T15755] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1566.255067][T15755] usb 10-1: config 0 descriptor??
[ 1566.676605][T15755] usbhid 10-1:0.0: can't add hid device: -71
[ 1566.682927][T15755] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1566.712662][T15755] usb 10-1: USB disconnect, device number 68
[ 1566.970115][T26741] kvm: pic: non byte write
[ 1567.642391][T26768] tipc: Cannot configure node identity twice
[ 1567.648991][T26766] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[ 1567.656979][T26765] tipc: Resetting bearer <eth:syzkaller0>
[ 1567.717205][T26765] tipc: Disabling bearer <eth:syzkaller0>
[ 1567.880273][T20197] IPVS: starting estimator thread 0...
[ 1567.971536][T26781] sctp: [Deprecated]: syz.5.5391 (pid 26781) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1567.971536][T26781] Use struct sctp_sack_info instead
[ 1567.993645][T26778] IPVS: using max 54 ests per chain, 129600 per kthread
[ 1568.004154][T26781] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1568.238092][T26786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1568.241128][T26786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1568.499060][T26791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1568.503331][T26791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1568.514662][T26791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1568.515096][T26791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1568.898501][T26796] xt_TCPMSS: Only works on TCP SYN packets
[ 1568.898692][T26796] xt_TCPMSS: Only works on TCP SYN packets
[ 1568.898834][T26796] xt_TCPMSS: Only works on TCP SYN packets
[ 1568.898971][T26796] xt_TCPMSS: Only works on TCP SYN packets
[ 1568.899107][T26796] xt_TCPMSS: Only works on TCP SYN packets
[ 1568.899247][T26796] xt_TCPMSS: Only works on TCP SYN packets
[ 1568.902289][T26796] xt_TCPMSS: Only works on TCP SYN packets
[ 1568.902454][T26796] xt_TCPMSS: Only works on TCP SYN packets
[ 1568.902596][T26796] xt_TCPMSS: Only works on TCP SYN packets
[ 1568.902738][T26796] xt_TCPMSS: Only works on TCP SYN packets
[ 1569.042970][T26806] input: syz1 as /devices/virtual/input/input255
[ 1569.234501][T20173] usb 10-1: new full-speed USB device number 69 using dummy_hcd
[ 1569.383955][T20173] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1569.384967][T20173] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1569.385009][T20173] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1569.385033][T20173] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1569.385056][T20173] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1569.385074][T20173] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1569.387150][T20173] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1569.387172][T20173] usb 10-1: Product: syz
[ 1569.387185][T20173] usb 10-1: Manufacturer: syz
[ 1569.387199][T20173] usb 10-1: SerialNumber: syz
[ 1569.419948][T20173] usb 10-1: config 0 descriptor??
[ 1569.650324][T20173] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1569.650361][T20173] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1569.888359][T20173] radio-si470x 10-1:0.0: software version 0, hardware version 0
[ 1569.888392][T20173] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[ 1569.888427][T20173] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[ 1569.959164][T26824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1569.966865][T26824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1569.982198][T26824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1569.986252][T26824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1570.091081][T20173] radio-si470x 10-1:0.0: submitting int urb failed (-90)
[ 1570.512355][T20173] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1570.513915][T20173] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22
[ 1570.593095][T20173] usb 10-1: USB disconnect, device number 69
[ 1570.938223][T26841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1570.949025][T26841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1570.959194][T26841] __nla_validate_parse: 4 callbacks suppressed
[ 1570.959246][T26841] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5405'.
[ 1571.039493][T20945] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[ 1571.052121][T26839] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[ 1571.052289][T26841] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2)
[ 1571.078410][T26843] ip6gre1: entered allmulticast mode
[ 1572.227094][T26875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1572.239832][T26875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1572.969655][T26895] fuse: Bad value for 'rootmode'
[ 1573.266713][T26906] input: syz1 as /devices/virtual/input/input256
[ 1573.530437][T26908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1573.538798][T26908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1574.753358][T20176] usb 10-1: new high-speed USB device number 70 using dummy_hcd
[ 1574.915886][T20176] usb 10-1: Using ep0 maxpacket: 32
[ 1574.918847][T20176] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[ 1574.919939][T20176] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[ 1574.919965][T20176] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 56360, setting to 64
[ 1574.923845][T20176] usb 10-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[ 1574.923867][T20176] usb 10-1: Product: syz
[ 1574.923881][T20176] usb 10-1: Manufacturer: syz
[ 1574.923894][T20176] usb 10-1: SerialNumber: syz
[ 1574.928598][T20176] usb 10-1: config 0 descriptor??
[ 1574.984465][T20176] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1575.127092][T26942] program syz.5.5430 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1575.143983][ T6059] usb 10-1: Failed to submit usb control message: -71
[ 1575.148962][T20176] usb 10-1: USB disconnect, device number 70
[ 1575.167485][ T6059] usb 10-1: unable to send the bmi data to the device: -71
[ 1575.174847][ T6059] usb 10-1: unable to get target info from device
[ 1575.181355][ T6059] usb 10-1: could not get target info (-71)
[ 1575.187659][ T6059] usb 10-1: could not probe fw (-71)
[ 1575.648572][T26951] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5432'.
[ 1575.660438][T26951] veth1_to_hsr: Caught tx_queue_len zero misconfig
[ 1575.660480][T26951] netlink: 1 bytes leftover after parsing attributes in process `syz.8.5432'.
[ 1576.103477][T20171] usb 10-1: new high-speed USB device number 71 using dummy_hcd
[ 1576.263924][T20171] usb 10-1: Using ep0 maxpacket: 16
[ 1576.270007][T20171] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1576.282130][T20171] usb 10-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[ 1576.282156][T20171] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1576.308066][T20171] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1576.308103][T20171] usb 10-1: Product: syz
[ 1576.308140][T20171] usb 10-1: Manufacturer: syz
[ 1576.308154][T20171] usb 10-1: SerialNumber: syz
[ 1576.320973][T20171] usb 10-1: 0:2 : does not exist
[ 1576.532721][T20171] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 1576.602631][T20171] usb 10-1: USB disconnect, device number 71
[ 1576.702120][T13919] udevd[13919]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1576.856246][T27000] sch_tbf: burst 19872 is lower than device lo mtu (32783) !
[ 1576.940071][T27002] loop3: detected capacity change from 0 to 7
[ 1576.945479][T27002] Dev loop3: unable to read RDB block 7
[ 1576.945518][T27002]  loop3: unable to read partition table
[ 1576.945713][T27002] loop3: partition table beyond EOD, truncated
[ 1576.945729][T27002] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[ 1577.230593][   T31] audit: type=1326 audit(1788526003.250:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.0.5445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1577.260929][   T31] audit: type=1326 audit(1788526003.280:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.0.5445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1577.260996][   T31] audit: type=1326 audit(1788526003.280:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.0.5445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1577.261030][   T31] audit: type=1326 audit(1788526003.280:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.0.5445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1577.261066][   T31] audit: type=1326 audit(1788526003.280:7902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.0.5445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1577.296609][   T31] audit: type=1326 audit(1788526003.310:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.0.5445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1577.296662][   T31] audit: type=1326 audit(1788526003.310:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.0.5445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1577.296700][   T31] audit: type=1326 audit(1788526003.310:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.0.5445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1577.302425][   T31] audit: type=1326 audit(1788526003.310:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.0.5445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1577.346448][   T31] audit: type=1326 audit(1788526003.370:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.0.5445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1577.530341][T27025] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1577.657944][T27029] netlink: 'syz.8.5446': attribute type 1 has an invalid length.
[ 1577.732744][T27029] bond12: entered promiscuous mode
[ 1577.732795][T27029] bond12: entered allmulticast mode
[ 1577.733436][T27029] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1577.774638][T27031] erspan1: entered allmulticast mode
[ 1577.787593][T27031] bond12: (slave erspan1): making interface the new active one
[ 1577.787631][T27031] erspan1: entered promiscuous mode
[ 1577.806043][T27031] bond12: (slave erspan1): Enslaving as an active interface with an up link
[ 1577.865278][T20173] usb 10-1: new high-speed USB device number 72 using dummy_hcd
[ 1577.907297][T27035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5450'.
[ 1578.026142][T20173] usb 10-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 1578.037182][T20173] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1578.037226][T20173] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1578.037280][T20173] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1578.291389][T27048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1578.302798][T27048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1578.316920][T27051] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5453'.
[ 1578.326191][T27049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1578.335151][T27049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1578.452685][T27055] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1578.480967][T27058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1578.481394][T27058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1578.499161][T20173] usbhid 10-1:1.0: can't add hid device: -71
[ 1578.499276][T20173] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[ 1578.524426][T20173] usb 10-1: USB disconnect, device number 72
[ 1578.709988][T27060] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5456'.
[ 1579.072976][T27069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1580.111620][T27091] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1580.283052][T27097] tipc: Enabled bearer <eth:team0>, priority 10
[ 1580.713492][T20180] usb 10-1: new high-speed USB device number 73 using dummy_hcd
[ 1580.863287][T20180] usb 10-1: Using ep0 maxpacket: 8
[ 1580.864043][T20180] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 1580.865251][T20180] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1580.865272][T20180] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1580.869716][T20180] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1580.869738][T20180] usb 10-1: Product: syz
[ 1580.869752][T20180] usb 10-1: Manufacturer: syz
[ 1580.869766][T20180] usb 10-1: SerialNumber: syz
[ 1581.347631][T27126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5473'.
[ 1581.393324][    T9] tipc: Node number set to 4115319711
[ 1581.700179][T27133] input: syz1 as /devices/virtual/input/input257
[ 1581.726468][T27133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1581.737665][T27133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1582.336362][T27135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1582.336894][T27135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1582.947450][T20184] hid-generic 0000:0000:0000.004E: collection stack underflow
[ 1582.947503][T20184] hid-generic 0000:0000:0000.004E: item 0 0 0 12 parsing failed
[ 1582.948707][T20184] hid-generic 0000:0000:0000.004E: probe with driver hid-generic failed with error -22
[ 1583.009909][T27138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1583.011641][T27138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1583.239139][T27140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1583.241348][T27140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1583.627764][T20180] usb 10-1: USB disconnect, device number 73
[ 1583.724512][T13988] udevd[13988]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1584.070719][T27152] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5481'.
[ 1584.113536][T27152] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1584.213307][T20180] usb 10-1: new high-speed USB device number 74 using dummy_hcd
[ 1584.364964][T20180] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1584.376110][T20180] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1584.376141][T20180] usb 10-1: Product: syz
[ 1584.376168][T20180] usb 10-1: Manufacturer: syz
[ 1584.376182][T20180] usb 10-1: SerialNumber: syz
[ 1584.706212][T27155] hub 1-0:1.0: USB hub found
[ 1584.724103][T27155] hub 1-0:1.0: 1 port detected
[ 1584.748465][T27156] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1584.817873][T20180] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1584.817928][T20180] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1585.128393][T27157] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.5482'.
[ 1585.600169][T20180] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[ 1585.600254][T20180] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1585.625337][T20180] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1585.644354][T20180] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[ 1585.706786][T20180] usb 10-1: USB disconnect, device number 74
[ 1585.867687][T27171] netlink: 'syz.6.5484': attribute type 16 has an invalid length.
[ 1585.898795][   T31] audit: type=1326 audit(1788526011.920:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27167 comm="syz.8.5487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa26a79e159 code=0x0
[ 1585.952091][T27174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1585.963733][T27174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1586.015466][T27179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1586.015866][T27179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1586.523447][T20173] usb 10-1: new high-speed USB device number 75 using dummy_hcd
[ 1586.673249][T20173] usb 10-1: Using ep0 maxpacket: 32
[ 1586.674080][T20173] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1586.675730][T20173] usb 10-1: config index 0 descriptor too short (expected 19, got 18)
[ 1586.678181][T20173] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1586.678204][T20173] usb 10-1: Product: syz
[ 1586.678217][T20173] usb 10-1: Manufacturer: syz
[ 1586.678230][T20173] usb 10-1: SerialNumber: syz
[ 1586.719667][T27190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1586.719711][T20173] usb 10-1: config 0 descriptor??
[ 1586.729056][T20173] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1586.729100][T20173] dvb-usb: bulk message failed: -22 (2/0)
[ 1586.742139][T27190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1586.743324][T20173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1586.744176][T20173] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1586.744230][T20173] usb 10-1: media controller created
[ 1586.771031][T20173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1586.814059][T20173] usb 10-1: selecting invalid altsetting 7
[ 1586.814104][T20173] cxusb: set interface failed
[ 1586.814131][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1586.868378][T20173] DVB: Unable to find symbol lgdt330x_attach()
[ 1586.868400][T20173] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1586.925540][T20173] rc_core: IR keymap rc-dvico-portable not found
[ 1586.925577][T20173] Registered IR keymap rc-empty
[ 1586.926732][T20173] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0
[ 1586.929096][T27188] cxusb: i2c rd: len=113 is too big!
[ 1586.929096][T27188] 
[ 1586.931467][T20173] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input258
[ 1586.949290][T20173] dvb-usb: schedule remote query interval to 100 msecs.
[ 1586.949308][T20173] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1587.063668][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1587.174119][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1587.283287][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1587.393302][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1587.503261][T20171] dvb-usb: bulk message failed: -22 (1/0)
[ 1587.617458][T27209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5495'.
[ 1587.623263][T20171] dvb-usb: bulk message failed: -22 (1/0)
[ 1587.626797][T27209] openvswitch: netlink: Missing key (keys=c0, expected=100)
[ 1587.678582][   T31] audit: type=1326 audit(1788526013.700:7909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.5.5495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff623d9e159 code=0x0
[ 1587.723720][T20171] dvb-usb: bulk message failed: -22 (1/0)
[ 1587.835098][T20171] dvb-usb: bulk message failed: -22 (1/0)
[ 1587.955583][T20171] dvb-usb: bulk message failed: -22 (1/0)
[ 1588.066347][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1588.173718][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1588.283637][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1588.403326][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1588.524472][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1588.643811][T20171] dvb-usb: bulk message failed: -22 (1/0)
[ 1588.699611][T27218] syzkaller0: entered promiscuous mode
[ 1588.705761][T27218] syzkaller0: entered allmulticast mode
[ 1588.745029][T20171] dvb-usb: bulk message failed: -22 (1/0)
[ 1588.853489][T20171] dvb-usb: bulk message failed: -22 (1/0)
[ 1588.865651][T27224] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5499'.
[ 1588.963464][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1589.075135][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1589.183416][T20173] dvb-usb: bulk message failed: -22 (1/0)
[ 1589.256555][T20184] usb 10-1: USB disconnect, device number 75
[ 1589.363774][T20184] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1590.138005][T27276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1590.138480][T27276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1590.393121][T27279] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5512'.
[ 1590.727017][T27295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1590.727727][T27295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1591.033311][    T9] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 1591.183330][    T9] usb 1-1: Using ep0 maxpacket: 16
[ 1591.187484][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1591.187527][    T9] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5
[ 1591.188549][    T9] usb 1-1: config 8 has an invalid interface number: 254 but max is 0
[ 1591.188571][    T9] usb 1-1: config 8 has no interface number 0
[ 1591.188597][    T9] usb 1-1: config 8 interface 254 has no altsetting 0
[ 1591.189080][    T9] usb 1-1: language id specifier not provided by device, defaulting to English
[ 1591.191279][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1591.191300][    T9] usb 1-1: Product: syz
[ 1591.191313][    T9] usb 1-1: Manufacturer: 㵿巭텶茪뵆䶖▐ᕝ窀ᷘ뢰䤋閝邢寡ꉡ푁곩脷᧵ǣ摭쳁ᛜ䙻经鸼෿詽s
[ 1591.191332][    T9] usb 1-1: SerialNumber: syz
[ 1591.522646][T27318] nvme_fabrics: unknown parameter or missing value '#!  	����1���R��?��&n��%������~���[6=
p͊yz\U�j@5N�f�W�rs�)�q��' in ctrl creation request
[ 1591.709334][    T9] peak_usb 1-1:8.254 can0: unable to request usb[type=0 value=1] err=-71
[ 1591.709371][    T9] peak_usb 1-1:8.254: unable to read PCAN-Chip USB firmware info (err -71)
[ 1591.945868][    T9] peak_usb 1-1:8.254: probe with driver peak_usb failed with error -71
[ 1591.954817][    T9] usb 1-1: USB disconnect, device number 107
[ 1592.266581][T27318] nvme nvme0: failed to connect socket: -512
[ 1592.935647][T20171] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 1593.093218][T20171] usb 1-1: Using ep0 maxpacket: 8
[ 1593.103963][T20171] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1593.116609][T20171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1593.116655][T20171] usb 1-1: Product: syz
[ 1593.116672][T20171] usb 1-1: Manufacturer: syz
[ 1593.116690][T20171] usb 1-1: SerialNumber: syz
[ 1593.147944][T20171] usb 1-1: config 0 descriptor??
[ 1593.156287][T20171] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1593.180243][   T31] audit: type=1326 audit(1788526019.200:7910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27330 comm="syz.9.5526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769959e159 code=0x7ffc0000
[ 1593.204945][   T31] audit: type=1326 audit(1788526019.200:7911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27330 comm="syz.9.5526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769959e159 code=0x7ffc0000
[ 1593.233782][   T31] audit: type=1326 audit(1788526019.200:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27330 comm="syz.9.5526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769959e159 code=0x7ffc0000
[ 1593.233879][   T31] audit: type=1326 audit(1788526019.200:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27330 comm="syz.9.5526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769959e159 code=0x7ffc0000
[ 1593.233922][   T31] audit: type=1326 audit(1788526019.200:7914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27330 comm="syz.9.5526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f769959e159 code=0x7ffc0000
[ 1593.233967][   T31] audit: type=1326 audit(1788526019.200:7915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27330 comm="syz.9.5526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769959e159 code=0x7ffc0000
[ 1593.234029][   T31] audit: type=1326 audit(1788526019.200:7916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27330 comm="syz.9.5526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769959e159 code=0x7ffc0000
[ 1593.234072][   T31] audit: type=1326 audit(1788526019.200:7917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27330 comm="syz.9.5526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769959e159 code=0x7ffc0000
[ 1593.234113][   T31] audit: type=1326 audit(1788526019.210:7918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27330 comm="syz.9.5526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f769959e159 code=0x7ffc0000
[ 1593.234184][   T31] audit: type=1326 audit(1788526019.210:7919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27330 comm="syz.9.5526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769959e159 code=0x7ffc0000
[ 1593.694864][T27345] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1593.868486][T27347] pimreg: entered allmulticast mode
[ 1593.935254][T27357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5525'.
[ 1593.935386][T27357] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1594.009661][T27357] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1594.110768][T27366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1594.122574][T27366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1594.153297][T20171] gspca_sq930x: reg_w 0305 fd00 failed -110
[ 1594.153404][T20171] sq930x 1-1:0.0: probe with driver sq930x failed with error -110
[ 1594.545430][T27374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1594.556194][T27374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1594.581166][T27374] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1594.635744][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.636182][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.636269][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.636276][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.636356][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.636363][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.636440][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.636448][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.636528][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.636535][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.636613][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.636621][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.636698][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.636706][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.636784][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.636792][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.636871][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.636879][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.636956][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.636964][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.637041][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.637055][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.638732][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.638742][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.638835][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.638842][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.638922][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.638930][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.640584][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.640595][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.640681][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.640689][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.640767][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.640774][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.640854][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.640862][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.640940][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.640948][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.641025][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.641033][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.641118][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.641126][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.641205][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.641213][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.641290][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.641297][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.641374][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.641382][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.641459][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.641466][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.641545][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.641553][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.641630][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.641637][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.641714][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.641722][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.641797][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.641805][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.641884][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.641892][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.641970][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.641979][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.653696][T27376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.653707][T27376] binder: 27375:27376 ioctl 4018620d 200000000100 returned -16
[ 1594.671876][T27378] binder_alloc: binder_alloc_mmap_handler: 27375 200000ffe000-200001000000 already mapped failed -16
[ 1594.672138][T27378] binder_alloc: binder_alloc_mmap_handler: 27375 200000ffe000-200001000000 already mapped failed -16
[ 1594.672284][T27378] binder_alloc: binder_alloc_mmap_handler: 27375 200000ffe000-200001000000 already mapped failed -16
[ 1594.672427][T27378] binder_alloc: binder_alloc_mmap_handler: 27375 200000ffe000-200001000000 already mapped failed -16
[ 1594.672590][T27378] binder_alloc: binder_alloc_mmap_handler: 27375 200000ffe000-200001000000 already mapped failed -16
[ 1594.672736][T27378] binder_alloc: binder_alloc_mmap_handler: 27375 200000ffe000-200001000000 already mapped failed -16
[ 1594.672879][T27378] binder_alloc: binder_alloc_mmap_handler: 27375 200000ffe000-200001000000 already mapped failed -16
[ 1594.673105][T27377] binder_alloc: 27375: binder_alloc_buf, no vma
[ 1594.680841][T27378] binder_alloc: binder_alloc_mmap_handler: 27375 200000ffe000-200001000000 already mapped failed -16
[ 1594.681001][T27378] binder_alloc: binder_alloc_mmap_handler: 27375 200000ffe000-200001000000 already mapped failed -16
[ 1594.681158][T27378] binder_alloc: binder_alloc_mmap_handler: 27375 200000ffe000-200001000000 already mapped failed -16
[ 1595.364610][T27389] usb usb9: usbfs: process 27389 (syz.5.5540) did not claim interface 23 before use
[ 1595.678094][T20176] usb 1-1: USB disconnect, device number 108
[ 1595.690621][T27398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1595.691047][T27398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1596.136346][T20176] usb 1-1: new full-speed USB device number 109 using dummy_hcd
[ 1596.289170][T27417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5548'.
[ 1596.298579][T27417] syz_tun: left allmulticast mode
[ 1596.315354][T27417] syz_tun: left promiscuous mode
[ 1596.320605][T20176] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1596.330156][T27417] bridge0: port 3(syz_tun) entered disabled state
[ 1596.337870][T20176] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1596.337912][T20176] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1596.337963][T20176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1596.350021][T27418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1596.359476][T27418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1596.366926][T27418] binder: 27416:27418 ioctl 80044dff 200000000040 returned -22
[ 1596.394224][T20176] usb 1-1: config 0 descriptor??
[ 1596.406000][T20176] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1596.412778][T20176] dvb-usb: bulk message failed: -22 (3/0)
[ 1596.422644][T27417] bridge_slave_1: left allmulticast mode
[ 1596.422686][T27417] bridge_slave_1: left promiscuous mode
[ 1596.422896][T27417] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1596.429182][T20176] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1596.453271][T20176] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1596.463209][T20176] usb 1-1: media controller created
[ 1596.469997][T20176] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1596.481236][T27417] �x9�: left allmulticast mode
[ 1596.481266][T27417] �x9�: left promiscuous mode
[ 1596.482469][T27417] bridge0: port 1(
1�x9�) entered disabled state
[ 1596.522894][T20176] dvb-usb: bulk message failed: -22 (6/0)
[ 1596.522988][T20176] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1596.541094][T27417] bond0: (slave bridge0): Releasing backup interface
[ 1596.560179][T20176] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input260
[ 1596.579393][T20176] dvb-usb: schedule remote query interval to 150 msecs.
[ 1596.587151][T20176] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1596.615034][T20176] usb 1-1: USB disconnect, device number 109
[ 1596.619971][T27423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1596.620362][T27423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1596.672973][T20176] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1597.225238][T27433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1597.227980][T27433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1597.249194][T27432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1597.264056][T27432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1597.278303][T27433] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5552'.
[ 1597.317917][T27437] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1597.369835][T27445] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5554'.
[ 1597.374527][T27441] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5554'.
[ 1598.223221][T27457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1598.232371][T27457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1598.323411][T20173] usb 10-1: new high-speed USB device number 76 using dummy_hcd
[ 1598.493565][T20173] usb 10-1: Using ep0 maxpacket: 32
[ 1598.499375][T20173] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1598.510783][T20173] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1598.520241][T20173] usb 10-1: config 0 descriptor??
[ 1598.523958][T20173] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1598.686979][T20176] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 1598.853467][T20176] usb 1-1: Using ep0 maxpacket: 16
[ 1598.854333][T20176] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1598.855867][T20176] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1598.855915][T20176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1598.855941][T20176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1598.855960][T20176] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1598.856003][T20176] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1598.857387][T20176] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1598.857409][T20176] usb 1-1: Manufacturer: syz
[ 1598.869054][T20176] usb 1-1: config 0 descriptor??
[ 1599.133228][T20176] rc_core: IR keymap rc-hauppauge not found
[ 1599.133260][T20176] Registered IR keymap rc-empty
[ 1599.133912][T20176] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1599.154462][T20176] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1599.175363][T20176] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1599.178068][T20176] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input261
[ 1599.189143][T20176] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1599.213518][T20176] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1599.235198][T20176] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1599.266094][T20176] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1599.283312][T20176] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1599.303268][T20176] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1599.325252][T20176] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1599.343283][T20176] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1599.376968][T20176] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1599.393325][T20176] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1599.415452][T20176] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1599.415496][T20176] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1599.591372][T20173] gspca_sunplus: reg_w_riv err -71
[ 1599.591489][T20173] sunplus 10-1:0.0: probe with driver sunplus failed with error -71
[ 1599.594368][T20173] usb 10-1: USB disconnect, device number 76
[ 1599.860624][T27472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1599.861209][T27472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1600.503909][ T1647] usb 10-1: new high-speed USB device number 77 using dummy_hcd
[ 1600.564584][T27487] netlink: 'syz.8.5561': attribute type 1 has an invalid length.
[ 1600.663404][ T1647] usb 10-1: Using ep0 maxpacket: 32
[ 1600.665740][ T1647] usb 10-1: New USB device found, idVendor=0a47, idProduct=9601, bcdDevice=14.4a
[ 1600.666925][ T1647] usb 10-1: config 245 has an invalid interface number: 226 but max is 0
[ 1600.666948][ T1647] usb 10-1: config 245 has no interface number 0
[ 1600.666983][ T1647] usb 10-1: config 245 interface 226 has no altsetting 0
[ 1600.670454][ T1647] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1600.670477][ T1647] usb 10-1: Product: syz
[ 1600.670491][ T1647] usb 10-1: Manufacturer: syz
[ 1600.670529][ T1647] usb 10-1: SerialNumber: syz
[ 1600.689064][ T1647] dm9601 10-1:245.226: probe with driver dm9601 failed with error -22
[ 1601.456906][T20184] usb 1-1: USB disconnect, device number 110
[ 1602.078591][T27508] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad)
[ 1602.087584][T27508] PKCS7: Only support pkcs7_signedData type
[ 1602.353359][T20171] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 1602.483229][T20171] usb 1-1: device descriptor read/64, error -71
[ 1602.724916][T20171] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 1602.791989][T27512] netlink: 'syz.5.5568': attribute type 1 has an invalid length.
[ 1602.860072][T27515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1602.869861][T27515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1602.873510][T20171] usb 1-1: device descriptor read/64, error -71
[ 1602.889209][T27515] CIFS: iocharset name too long
[ 1602.917219][T27512] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1602.973710][T20171] usb usb1-port1: attempt power cycle
[ 1603.185090][T20184] usb 10-1: USB disconnect, device number 77
[ 1603.291312][T27525] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5570'.
[ 1603.303421][T27525] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5570'.
[ 1603.315466][T20171] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 1603.337423][T20171] usb 1-1: device descriptor read/8, error -71
[ 1603.474529][T27535] binder: 27534:27535 ioctl c0306201 2000000003c0 returned -14
[ 1603.575002][T20171] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 1603.594238][T20171] usb 1-1: device descriptor read/8, error -71
[ 1603.713899][T20171] usb usb1-port1: unable to enumerate USB device
[ 1603.971890][T27530] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1603.973351][T27553] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1604.353373][T15755] usb 10-1: new high-speed USB device number 78 using dummy_hcd
[ 1604.514578][T15755] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1604.525195][T15755] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1604.525254][T15755] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1604.555492][T15755] usb 10-1: config 0 descriptor??
[ 1604.618660][T27558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1604.628003][T27558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1604.640290][T27558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1604.650903][T27558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1604.771377][T15755] usbhid 10-1:0.0: can't add hid device: -71
[ 1604.777686][T15755] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1604.792884][T15755] usb 10-1: USB disconnect, device number 78
[ 1605.233306][T20180] usb 10-1: new high-speed USB device number 79 using dummy_hcd
[ 1605.332146][T27572] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5582'.
[ 1605.383920][T20180] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 1605.394373][T20180] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1605.394431][T20180] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1605.421607][T20180] usb 10-1: config 0 descriptor??
[ 1605.590046][T27568] bond3: Removing last ns target with arp_interval on
[ 1605.982821][T27586] fuse: Bad value for 'fd'
[ 1605.988074][T27587] fuse: Bad value for 'fd'
[ 1606.092036][T27592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5588'.
[ 1606.327259][T20180] aiptek 10-1:0.0: Aiptek using 400 ms programming speed
[ 1606.329674][T27555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1606.330067][T27555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1606.331930][T20180] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input262
[ 1606.337805][T27555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1606.341224][T27555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1606.656909][T27603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1606.659808][T27603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1606.680264][T20171] usb 10-1: USB disconnect, device number 79
[ 1606.680352][    C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1606.806719][T27609] ������: renamed from vlan0 (while UP)
[ 1606.969809][T27617] netlink: 'syz.8.5593': attribute type 23 has an invalid length.
[ 1606.978596][T27617] netlink: 184 bytes leftover after parsing attributes in process `syz.8.5593'.
[ 1607.248021][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.248096][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.330560][   T31] kauditd_printk_skb: 212 callbacks suppressed
[ 1607.330614][   T31] audit: type=1326 audit(1788526033.350:8132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27622 comm="syz.9.5595" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f769959e159 code=0x0
[ 1607.377001][T27626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1607.387107][T27626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1607.401170][T27627] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5595'.
[ 1607.413284][T15755] usb 1-1: new full-speed USB device number 115 using dummy_hcd
[ 1607.564020][T15755] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= a.40
[ 1607.565302][T15755] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1607.565343][T15755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1607.565375][T15755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64
[ 1607.565398][T15755] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1607.566351][T15755] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1607.566379][T15755] usb 1-1: Manufacturer: syz
[ 1607.587427][T15755] usb 1-1: config 0 descriptor??
[ 1607.594289][T27621] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 1607.599225][T27626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1607.599616][T27626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1607.669603][T27626] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1608.261527][T27634] netlink: 'syz.9.5597': attribute type 61 has an invalid length.
[ 1608.261651][T15755] usbhid 1-1:0.0: can't add hid device: -71
[ 1608.261748][T15755] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1608.273484][T15755] usb 1-1: USB disconnect, device number 115
[ 1608.462174][T27640] ALSA: mixer_oss: invalid OSS volume ''
[ 1608.462201][T27640] ALSA: mixer_oss: invalid OSS volume 'qO'
[ 1608.462524][T27640] ALSA: mixer_oss: invalid OSS volume '��G�օ|&+��g��^���e�����'
[ 1608.485179][T27640] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5599'.
[ 1608.492006][T27640] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5599'.
[ 1608.822062][T27638] netlink: 476 bytes leftover after parsing attributes in process `syz.8.5598'.
[ 1608.822308][T27638] netlink: 476 bytes leftover after parsing attributes in process `syz.8.5598'.
[ 1608.822514][T27638] netlink: 476 bytes leftover after parsing attributes in process `syz.8.5598'.
[ 1608.822700][T27638] netlink: 476 bytes leftover after parsing attributes in process `syz.8.5598'.
[ 1608.822898][T27638] netlink: 476 bytes leftover after parsing attributes in process `syz.8.5598'.
[ 1608.823083][T27638] netlink: 476 bytes leftover after parsing attributes in process `syz.8.5598'.
[ 1608.829704][T27638] netlink: 476 bytes leftover after parsing attributes in process `syz.8.5598'.
[ 1608.829898][T27638] netlink: 476 bytes leftover after parsing attributes in process `syz.8.5598'.
[ 1609.209339][T27653] bond2: option arp_interval: invalid value (18446744073709551614)
[ 1609.209379][T27653] bond2: option arp_interval: allowed values 0 - 2147483647
[ 1609.235490][T27653] bond2 (unregistering): Released all slaves
[ 1609.263393][    T9] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 1609.413393][    T9] usb 1-1: Using ep0 maxpacket: 16
[ 1609.414511][    T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1609.415776][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1609.415802][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1609.421868][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1609.421891][    T9] usb 1-1: Product: syz
[ 1609.421904][    T9] usb 1-1: Manufacturer: syz
[ 1609.421918][    T9] usb 1-1: SerialNumber: syz
[ 1609.457756][    T9] usb 1-1: config 0 descriptor??
[ 1609.471459][    T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1609.471488][    T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 1610.068542][    T9] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1610.071003][    T9] em28xx 1-1:0.0: Config register raw data: 0x3d
[ 1610.071039][    T9] em28xx 1-1:0.0: I2S Audio (3 sample rate(s))
[ 1610.071058][    T9] em28xx 1-1:0.0: No AC97 audio processor
[ 1610.091494][T27686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1610.091938][T27686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1610.203411][T20171] usb 10-1: new high-speed USB device number 80 using dummy_hcd
[ 1610.364206][T20171] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1610.374937][T20171] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1610.386270][T20171] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1610.389176][T27689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1610.389638][T27689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1610.413500][T20171] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1610.413525][T20171] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1610.413567][T20171] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1610.903687][T20171] gud 10-1:1.0: No supported pixel formats found
[ 1610.910505][T20171] gud 10-1:1.0: probe with driver gud failed with error -22
[ 1611.254818][   T31] audit: type=1326 audit(1788526037.270:8133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27661 comm="syz.0.5603" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1611.255753][   T31] audit: type=1326 audit(1788526037.280:8135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27661 comm="syz.0.5603" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1611.256024][   T31] audit: type=1326 audit(1788526037.280:8134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27661 comm="syz.0.5603" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1611.256245][   T31] audit: type=1326 audit(1788526037.280:8136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27661 comm="syz.0.5603" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1611.256542][   T31] audit: type=1326 audit(1788526037.280:8137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27661 comm="syz.0.5603" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1611.257143][   T31] audit: type=1326 audit(1788526037.280:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27661 comm="syz.0.5603" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1611.257324][   T31] audit: type=1326 audit(1788526037.280:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27661 comm="syz.0.5603" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1611.258108][   T31] audit: type=1326 audit(1788526037.280:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27661 comm="syz.0.5603" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1611.258515][   T31] audit: type=1326 audit(1788526037.280:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27661 comm="syz.0.5603" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb3f499e159 code=0x7ffc0000
[ 1611.772625][T27699] mac80211_hwsim hwsim39 wlan1: left promiscuous mode
[ 1611.837767][T27703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1611.838179][T27703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1612.302732][    T9] usb 1-1: USB disconnect, device number 116
[ 1612.412656][T27707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1612.413492][T27707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1612.968984][T20171] usb 10-1: USB disconnect, device number 80
[ 1613.410516][T27717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1613.421301][T27717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1613.421356][T27717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1613.422085][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1613.462875][T27719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1613.463000][T27719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1613.463208][T27719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1613.464002][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1613.701763][T27713] CUSE: unknown device info "n��|�zQC*�"
[ 1613.701795][T27713] CUSE: unknown device info ">2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0QV�,��${\�d�
+"
[ 1613.701822][T27713] CUSE: unknown device info "����"
[ 1613.701834][T27713] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�(o9�{u���[�赨���"
[ 1613.701847][T27713] CUSE: DEVNAME unspecified
[ 1613.749332][T27729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1613.749741][T27729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1614.179146][T27742] __nla_validate_parse: 57 callbacks suppressed
[ 1614.179181][T27742] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5620'.
[ 1614.379228][T27749] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5622'.
[ 1614.410583][T27750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5621'.
[ 1614.442161][T27750] bridge0: port 3(vlan0) entered blocking state
[ 1614.448854][T27750] bridge0: port 3(vlan0) entered disabled state
[ 1614.456039][T27750] vlan0: entered allmulticast mode
[ 1614.461329][T27750] geneve0: entered allmulticast mode
[ 1614.476276][T27750] vlan0: entered promiscuous mode
[ 1614.484891][T27750] geneve0: entered promiscuous mode
[ 1614.974142][T27758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1614.983887][T27758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1615.423050][T27765] fuse: Unknown parameter 'rotmode'
[ 1615.703475][T20184] usb 10-1: new high-speed USB device number 81 using dummy_hcd
[ 1615.853739][T20184] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1615.855078][T20184] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1615.855105][T20184] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 59136, setting to 1024
[ 1615.855129][T20184] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1615.855153][T20184] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1615.855181][T20184] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1615.857784][T20184] usb 10-1: config 0 descriptor??
[ 1615.858529][T27767] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1616.261920][T27767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1616.262559][T27767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1616.270156][T20184] hid-multitouch 0003:0EEF:72C4.004F: item 0 1 0 9 parsing failed
[ 1616.272786][T20184] hid-multitouch 0003:0EEF:72C4.004F: probe with driver hid-multitouch failed with error -22
[ 1616.458094][T27783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1616.468215][T27783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1616.545673][T27789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1616.560171][T27789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1617.015186][    T9] usb 10-1: USB disconnect, device number 81
[ 1617.076427][T27792] fuse: Bad value for 'fd'
[ 1617.077690][T27794] fuse: Bad value for 'fd'
[ 1617.082399][T27792] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.5634'.
[ 1617.112058][T27792] tipc: Resetting bearer <eth:team0>
[ 1617.135026][T27792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1617.246571][T27799] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5636'.
[ 1617.469002][T27809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1617.469414][T27809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1617.495507][T20173] usb 10-1: new high-speed USB device number 82 using dummy_hcd
[ 1617.517102][   T31] kauditd_printk_skb: 664 callbacks suppressed
[ 1617.517151][   T31] audit: type=1326 audit(1788526043.540:8806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27810 comm="syz.5.5641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1617.517709][   T31] audit: type=1326 audit(1788526043.540:8807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27810 comm="syz.5.5641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1617.518027][   T31] audit: type=1326 audit(1788526043.540:8808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27810 comm="syz.5.5641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1617.518270][   T31] audit: type=1326 audit(1788526043.540:8809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27810 comm="syz.5.5641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1617.518490][   T31] audit: type=1326 audit(1788526043.540:8810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27810 comm="syz.5.5641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1617.521157][   T31] audit: type=1326 audit(1788526043.540:8811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27810 comm="syz.5.5641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1617.521201][   T31] audit: type=1326 audit(1788526043.540:8812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27810 comm="syz.5.5641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1617.523705][   T31] audit: type=1326 audit(1788526043.550:8813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27810 comm="syz.5.5641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff623d9dec2 code=0x7ffc0000
[ 1617.523893][   T31] audit: type=1326 audit(1788526043.550:8814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27810 comm="syz.5.5641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff623d9dec2 code=0x7ffc0000
[ 1617.526713][   T31] audit: type=1326 audit(1788526043.550:8815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27810 comm="syz.5.5641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1617.674660][T20173] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1617.675635][T20173] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1617.699190][T20173] usb 10-1: config 0 descriptor??
[ 1617.906065][T20173] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1617.916309][T27825] fuse: Bad value for 'fd'
[ 1618.108178][T20173] [drm:udl_init] *ERROR* Selecting channel failed
[ 1618.153966][T20173] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1
[ 1618.153997][T20173] [drm] Initialized udl on minor 1
[ 1618.205004][T20173] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1618.280976][T20173] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[ 1618.302746][T20173] usb 10-1: USB disconnect, device number 82
[ 1618.310894][T20171] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[ 1619.002541][T27858] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[ 1619.015011][T27858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1619.024231][T27858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1619.188809][T27865] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5654'.
[ 1619.189064][T27865] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5654'.
[ 1619.189278][T27865] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5654'.
[ 1619.189486][T27865] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5654'.
[ 1619.189751][T27865] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5654'.
[ 1619.189973][T27865] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5654'.
[ 1619.192355][T27865] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5654'.
[ 1619.192577][T27865] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5654'.
[ 1619.192792][T27865] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5654'.
[ 1619.193011][T27865] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5654'.
[ 1619.594207][T27872] sctp: [Deprecated]: syz.9.5656 (pid 27872) Use of int in max_burst socket option.
[ 1619.594207][T27872] Use struct sctp_assoc_value instead
[ 1619.612238][T27871] input: syz0 as /devices/virtual/input/input267
[ 1619.630363][T27875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1619.630765][T27875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1620.222487][T27883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1620.234013][T27883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1620.285211][T27885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1620.297262][T27885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1620.298110][T27886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1620.298507][T27886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1620.573346][    T9] usb 1-1: new full-speed USB device number 117 using dummy_hcd
[ 1620.724638][    T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1620.727462][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1620.727488][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1620.727508][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1620.727544][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1620.737887][    T9] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[ 1620.919913][T27898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1620.920310][T27898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1620.949772][T27888] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1620.960403][T27906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1620.969250][T27906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1620.982422][T27908] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1620.992917][T20171] usb 1-1: USB disconnect, device number 117
[ 1621.073396][ T1647] usb 10-1: new high-speed USB device number 83 using dummy_hcd
[ 1621.247168][ T1647] usb 10-1: Using ep0 maxpacket: 32
[ 1621.255287][ T1647] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1621.265637][ T1647] usb 10-1: config 0 has an invalid interface number: 188 but max is 0
[ 1621.265678][ T1647] usb 10-1: config 0 has no interface number 0
[ 1621.265723][ T1647] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1621.306474][ T1647] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1621.306512][ T1647] usb 10-1: Product: syz
[ 1621.306530][ T1647] usb 10-1: Manufacturer: syz
[ 1621.306546][ T1647] usb 10-1: SerialNumber: syz
[ 1621.341274][ T1647] usb 10-1: config 0 descriptor??
[ 1621.348899][T27896] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22
[ 1621.572605][T27896] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22
[ 1621.690610][T27922] fuse: Bad value for 'group_id'
[ 1621.690656][T27922] fuse: Bad value for 'group_id'
[ 1622.741518][T27940] loop5: detected capacity change from 0 to 7
[ 1622.751152][T27940]  loop5:
[ 1622.754429][T27940] loop5: partition table partially beyond EOD, truncated
[ 1623.025512][ T4982]  loop5:
[ 1623.025553][ T4982] loop5: partition table partially beyond EOD, truncated
[ 1623.165303][T27943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1623.176166][T27943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1623.843316][T20171] usb 1-1: new low-speed USB device number 118 using dummy_hcd
[ 1624.004752][T27953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1624.014844][T27953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1624.036066][T27953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1624.036577][T27953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1624.040153][T27954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1624.040542][T27954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1624.048784][T20171] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1624.050083][T20171] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1624.050109][T20171] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1624.050133][T20171] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x82 is Bulk; changing to Interrupt
[ 1624.050153][T20171] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x3 is Bulk; changing to Interrupt
[ 1624.050172][T20171] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1624.052023][T20171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1624.052043][T20171] usb 1-1: Product: 汱䫐䑦⤭岙
[ 1624.052058][T20171] usb 1-1: Manufacturer: ࠖ
[ 1624.052071][T20171] usb 1-1: SerialNumber: о
[ 1624.089938][T27949] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 1624.090065][T27949] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 1624.090187][T27949] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 1624.414373][T20171] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[ 1624.440119][T20171] usb 1-1: USB disconnect, device number 118
[ 1624.702021][T27969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1624.712449][T27969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1624.733161][T27968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1624.735436][T27968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1624.776510][ T1647] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1624.776548][ T1647] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[ 1624.776769][ T1647] asix 10-1:0.188: probe with driver asix failed with error -71
[ 1624.781518][ T1647] usb 10-1: USB disconnect, device number 83
[ 1625.215722][T27981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1625.261604][T27984] vlan2: entered promiscuous mode
[ 1625.261651][T27984] bond_slave_1: entered promiscuous mode
[ 1625.668532][T28002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1625.668938][T28002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1625.715284][T27989] batman_adv: batadv0: Adding interface: gretap1
[ 1625.721727][T27989] batman_adv: batadv0: The MTU of interface gretap1 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1625.748153][T27989] batman_adv: batadv0: Interface activated: gretap1
[ 1626.563369][ T1647] usb 10-1: new high-speed USB device number 84 using dummy_hcd
[ 1626.631825][T28045] netlink: 'syz.5.5699': attribute type 13 has an invalid length.
[ 1626.703348][ T1647] usb 10-1: device descriptor read/64, error -71
[ 1626.943264][ T1647] usb 10-1: new high-speed USB device number 85 using dummy_hcd
[ 1627.011196][T28058] fuse: blksize only supported for fuseblk
[ 1627.094241][ T1647] usb 10-1: device descriptor read/64, error -71
[ 1627.158789][T28055] xt_hashlimit: size too large, truncated to 1048576
[ 1627.203478][ T1647] usb usb10-port1: attempt power cycle
[ 1627.232086][T28054] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1627.258622][T28054] bridge_slave_0 (unregistering): left allmulticast mode
[ 1627.260055][T28054] bridge_slave_0 (unregistering): left promiscuous mode
[ 1627.260126][T28054] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1627.576668][ T1647] usb 10-1: new high-speed USB device number 86 using dummy_hcd
[ 1627.596916][ T1647] usb 10-1: device descriptor read/8, error -71
[ 1627.862610][ T1647] usb 10-1: new high-speed USB device number 87 using dummy_hcd
[ 1627.887204][ T1647] usb 10-1: device descriptor read/8, error -71
[ 1628.003472][ T1647] usb usb10-port1: unable to enumerate USB device
[ 1628.016687][T28068] __nla_validate_parse: 58 callbacks suppressed
[ 1628.024249][T28068] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5702'.
[ 1628.084621][T28068] loop5: detected capacity change from 0 to 2640
[ 1628.091475][T28068] buffer_io_error: 11 callbacks suppressed
[ 1628.098098][T28068] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1628.106170][T28068] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1628.114471][T28068] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1628.114503][T28068] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1628.114530][T28068] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1628.114576][T28068] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1628.114616][T28068] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1628.114643][T28068] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1628.114656][T28068] ldm_validate_partition_table(): Disk read failed.
[ 1628.114681][T28068] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1628.114708][T28068] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1628.114749][T28068] Dev loop5: unable to read RDB block 0
[ 1628.114901][T28068]  loop5: unable to read partition table
[ 1628.115094][T28068] loop_reread_partitions: partition scan of loop5 (3�����) failed (rc=-5)
[ 1628.522510][T28085] geneve1: mtu less than device minimum
[ 1628.545362][T28082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5705'.
[ 1628.587694][T28084] netlink: 'syz.8.5704': attribute type 16 has an invalid length.
[ 1628.587724][T28084] netlink: 180 bytes leftover after parsing attributes in process `syz.8.5704'.
[ 1629.918910][T20184] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 1630.073310][T20184] usb 1-1: Using ep0 maxpacket: 16
[ 1630.084310][T20184] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1630.085056][T28115] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1630.103016][T20184] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f
[ 1630.124128][T20184] usb 1-1: config 0 has an invalid interface number: 228 but max is 2
[ 1630.124165][T20184] usb 1-1: config 0 has an invalid interface number: 172 but max is 2
[ 1630.124199][T20184] usb 1-1: config 0 has an invalid interface number: 181 but max is 2
[ 1630.124221][T20184] usb 1-1: config 0 has no interface number 0
[ 1630.124240][T20184] usb 1-1: config 0 has no interface number 1
[ 1630.124259][T20184] usb 1-1: config 0 has no interface number 2
[ 1630.124309][T20184] usb 1-1: config 0 interface 228 has no altsetting 0
[ 1630.124330][T20184] usb 1-1: config 0 interface 172 has no altsetting 0
[ 1630.124351][T20184] usb 1-1: config 0 interface 181 has no altsetting 0
[ 1630.195759][T20184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1630.195797][T20184] usb 1-1: Product: syz
[ 1630.195829][T20184] usb 1-1: Manufacturer: ࢉ诸ᨓಢ५熀鑖绎ᦵ谮螝好▩ᢦ៞肦逯菶됧ᦀἿ倩李ځᵆ䂥ꑓ꒸ᾆ팷坑넧ᝊᖇ옙ꔥ뾖鼛잪⬒뙱龏̈粍닳呗툓䏚餈ꏟ䴤큡贰嬱㽄觑堠繀撋ᯖ㭰肌ẓ誼
[ 1630.195857][T20184] usb 1-1: SerialNumber: syz
[ 1630.241193][T20184] usb 1-1: config 0 descriptor??
[ 1630.406841][T28117] Invalid logical block size (211)
[ 1630.460772][T20184] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[ 1630.470099][T20184] usb 1-1: selecting invalid altsetting 0
[ 1630.479226][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.498550][T20184] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[ 1630.498887][T20184] usb 1-1: selecting invalid altsetting 0
[ 1630.519822][T20184] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[ 1630.528230][T20184] usb 1-1: selecting invalid altsetting 0
[ 1630.540218][T20184] usb 1-1: USB disconnect, device number 119
[ 1630.568929][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.568962][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576098][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576115][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576128][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576141][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576152][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576164][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576177][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576189][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576201][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576214][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576226][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576238][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576251][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576263][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576275][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576286][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576297][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576309][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576322][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576333][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576346][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576358][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576370][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576382][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576393][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576405][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576417][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576429][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576441][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.576453][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.659343][ T2348] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[ 1630.715203][ T2348] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[ 1630.715261][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.715276][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.715288][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721082][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721098][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721110][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721122][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721580][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721594][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721606][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721618][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721631][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721643][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721655][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721668][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721679][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721691][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721703][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721716][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721728][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.721740][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.735278][ T2348] pvrusb2: Attached sub-driver cs53l32a
[ 1630.794979][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.795013][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.795029][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.795043][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.795052][ T2348] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[ 1630.795268][ T2348] pvrusb2: Device being rendered inoperable
[ 1630.795294][ T2348] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[ 1630.795368][ T2348] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[ 1630.795403][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.896713][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.896733][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897346][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897364][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897376][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897389][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897401][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897414][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897426][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897437][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897449][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897462][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897474][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897486][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897499][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897511][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897523][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897535][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897613][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897625][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897638][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897650][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897662][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897674][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897686][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897758][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897771][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897783][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897796][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897808][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897820][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.897832][ T2348] pvrusb2: Invalid write control endpoint
[ 1630.901697][ T2348] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[ 1631.012199][ T2348] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b)
[ 1631.012259][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012275][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012288][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012309][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012322][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012335][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012348][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012513][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012526][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012539][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012552][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012565][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012578][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012590][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012603][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012615][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012628][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012641][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012654][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012667][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.012680][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.018775][ T2348] pvrusb2: Attached sub-driver cs53l32a
[ 1631.138850][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.138874][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.138889][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.138904][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.138912][ T2348] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[ 1631.138929][ T2348] pvrusb2: Device being rendered inoperable
[ 1631.138951][ T2348] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[ 1631.139197][ T2348] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[ 1631.139334][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.577278][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588413][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588462][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588480][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588496][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588512][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588529][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588545][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588560][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588576][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588592][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588607][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588623][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588638][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588654][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588669][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588685][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588701][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588716][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588791][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588814][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588932][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588944][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588953][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588962][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588972][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588981][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588990][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.588999][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.589008][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.589017][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.589025][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.694311][ T2348] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[ 1631.872195][ T2348] cs53l32a 3-0011: chip found @ 0x22 (pvrusb2_c)
[ 1631.872261][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872275][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872287][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872297][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872307][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872318][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872330][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872482][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872495][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872506][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872518][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872530][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872542][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872554][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872566][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872578][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872590][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872601][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872613][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872625][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872637][ T2348] pvrusb2: Invalid write control endpoint
[ 1631.872892][ T2348] pvrusb2: Attached sub-driver cs53l32a
[ 1632.032115][ T2348] pvrusb2: Invalid write control endpoint
[ 1632.032152][ T2348] pvrusb2: Invalid write control endpoint
[ 1632.032186][ T2348] pvrusb2: Invalid write control endpoint
[ 1632.032204][ T2348] pvrusb2: Invalid write control endpoint
[ 1632.032217][ T2348] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[ 1632.032237][ T2348] pvrusb2: Device being rendered inoperable
[ 1632.032259][ T2348] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[ 1632.063267][ T2348] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[ 1632.174594][T20180] usb 10-1: new full-speed USB device number 88 using dummy_hcd
[ 1632.227726][T28152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1632.237871][T28152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1632.330858][T20180] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1632.337808][T20180] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1632.337832][T20180] usb 10-1: config 1 has no interface number 0
[ 1632.337870][T20180] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1632.337893][T20180] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1632.337917][T20180] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1632.337944][T20180] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1632.337967][T20180] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1632.351923][T20180] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1632.351945][T20180] usb 10-1: Product: syz
[ 1632.351958][T20180] usb 10-1: Manufacturer: syz
[ 1632.351972][T20180] usb 10-1: SerialNumber: syz
[ 1632.402458][T28145] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22
[ 1632.615771][T28145] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22
[ 1632.827700][T28145] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22
[ 1632.923021][T28167] netlink: 'syz.8.5724': attribute type 1 has an invalid length.
[ 1632.947365][T28175] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5727'.
[ 1632.965858][T28167] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1632.979798][T28175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5727'.
[ 1633.029206][T20180] cdc_ncm 10-1:1.1: failed GET_NTB_PARAMETERS
[ 1633.029268][T20180] cdc_ncm 10-1:1.1: bind() failure
[ 1633.217646][T20184] usb 10-1: USB disconnect, device number 88
[ 1633.248467][T28183] xfrm0: Caught tx_queue_len zero misconfig
[ 1633.386651][T20180] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 1633.524086][T20180] usb 1-1: device descriptor read/64, error -71
[ 1633.675966][T28198] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5733'.
[ 1633.763210][T20180] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 1633.893253][T20180] usb 1-1: device descriptor read/64, error -71
[ 1633.922994][T28200] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5734'.
[ 1634.005240][T20180] usb usb1-port1: attempt power cycle
[ 1634.039151][T28209] netlink: ct family unspecified
[ 1634.039215][T28209] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1634.316174][T28213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1634.326992][T28213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1634.343429][T20180] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 1634.364393][T20180] usb 1-1: device descriptor read/8, error -71
[ 1634.393272][    T9] usb 10-1: new high-speed USB device number 89 using dummy_hcd
[ 1634.544969][    T9] usb 10-1: Using ep0 maxpacket: 32
[ 1634.551293][    T9] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1634.562750][    T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1634.562788][    T9] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1634.562821][    T9] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1634.593999][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1634.594036][    T9] usb 10-1: Product: syz
[ 1634.594064][    T9] usb 10-1: Manufacturer: syz
[ 1634.594079][    T9] usb 10-1: SerialNumber: syz
[ 1634.618268][T20180] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 1634.634184][    T9] usb 10-1: config 0 descriptor??
[ 1634.645417][T20180] usb 1-1: device descriptor read/8, error -71
[ 1634.753475][T20180] usb usb1-port1: unable to enumerate USB device
[ 1635.013619][T28214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1635.038204][T28214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1635.049321][T28211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1635.060858][T28211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1635.069750][    T9] gs_usb 10-1:0.0: Configuring for 93 interfaces
[ 1635.269934][    T9] gs_usb 10-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO)
[ 1635.279044][    T9] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -121
[ 1635.472603][ T1647] usb 10-1: USB disconnect, device number 89
[ 1636.149083][T28230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5741'.
[ 1636.395677][T28237] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5744'.
[ 1636.431268][T28243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1636.434872][T28243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1636.484760][ T1647] usb 10-1: new high-speed USB device number 90 using dummy_hcd
[ 1636.634136][ T1647] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1636.635131][ T1647] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1636.635174][ T1647] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1636.635194][ T1647] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1636.635215][ T1647] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1636.635251][ T1647] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1636.708947][T28233] netlink: 'syz.0.5745': attribute type 3 has an invalid length.
[ 1636.931904][T28251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5747'.
[ 1637.709204][ T1647] gud 10-1:1.0: USB-1: Failed to add properties (ret=-5)
[ 1637.709282][ T1647] gud 10-1:1.0: Failed to get connectors (error=-5)
[ 1637.709324][ T1647] gud 10-1:1.0: probe with driver gud failed with error -5
[ 1637.923670][   T30] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 1637.940096][ T1647] usb 10-1: USB disconnect, device number 90
[ 1638.094202][   T30] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1638.097291][   T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1638.100130][   T30] usb 1-1: config 0 descriptor??
[ 1638.106063][   T30] cp210x 1-1:0.0: cp210x converter detected
[ 1638.207106][T28276] xt_l2tp: invalid flags combination: 8
[ 1638.267356][T28278] xt_hashlimit: size too large, truncated to 1048576
[ 1638.308396][   T30] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121
[ 1638.308444][   T30] cp210x 1-1:0.0: querying part number failed
[ 1638.319946][   T30] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1638.461056][T28280] syzkaller0: entered promiscuous mode
[ 1638.461099][T28280] syzkaller0: entered allmulticast mode
[ 1638.639134][T28291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1638.650459][T28291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1638.660583][   T31] kauditd_printk_skb: 24 callbacks suppressed
[ 1638.660622][   T31] audit: type=1326 audit(1788526064.690:8840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28290 comm="syz.5.5759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1638.661697][   T31] audit: type=1326 audit(1788526064.690:8841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28290 comm="syz.5.5759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1638.664578][   T31] audit: type=1326 audit(1788526064.690:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28290 comm="syz.5.5759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1638.664947][   T31] audit: type=1326 audit(1788526064.690:8843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28290 comm="syz.5.5759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1638.667304][   T31] audit: type=1326 audit(1788526064.690:8844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28290 comm="syz.5.5759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1638.669985][   T31] audit: type=1326 audit(1788526064.690:8845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28290 comm="syz.5.5759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1638.703936][T28293] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5758'.
[ 1638.724966][T28293] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5758'.
[ 1638.732888][   T31] audit: type=1326 audit(1788526064.740:8846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28290 comm="syz.5.5759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1638.736769][   T31] audit: type=1326 audit(1788526064.740:8847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28290 comm="syz.5.5759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff623d9e159 code=0x7ffc0000
[ 1639.355610][T28299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1639.356034][T28299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1639.383309][T28299] input: syz0 as /devices/virtual/input/input269
[ 1639.400149][T28299] ==================================================================
[ 1639.400164][T28299] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0
[ 1639.400285][T28299] Read of size 1 at addr ffff888025809220 by task syz.5.5760/28299
[ 1639.400301][T28299] 
[ 1639.400314][T28299] CPU: 0 UID: 0 PID: 28299 Comm: syz.5.5760 Tainted: G     
** replaying previous printk message **
[ 1639.400314][T28299] CPU: 0 UID: 0 PID: 28299 Comm: syz.5.5760 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1639.400340][T28299] Tainted: [L]=SOFTLOCKUP
[ 1639.400348][T28299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1639.400360][T28299] Call Trace:
[ 1639.400368][T28299]  <TASK>
[ 1639.400377][T28299]  dump_stack_lvl+0xe8/0x150
[ 1639.400407][T28299]  print_address_description+0x55/0x1e0
[ 1639.400434][T28299]  ? string+0x216/0x2d0
[ 1639.400452][T28299]  print_report+0x58/0x70
[ 1639.400472][T28299]  kasan_report+0x117/0x150
[ 1639.400498][T28299]  ? string+0x216/0x2d0
[ 1639.400520][T28299]  string+0x216/0x2d0
[ 1639.400544][T28299]  vsnprintf+0x74a/0xef0
[ 1639.400570][T28299]  seq_printf+0x188/0x290
[ 1639.400592][T28299]  ? __kmalloc_noprof+0x38c/0x720
[ 1639.400620][T28299]  ? __pfx_seq_printf+0x10/0x10
[ 1639.400649][T28299]  ? __asan_memcpy+0x40/0x70
[ 1639.400680][T28299]  input_devices_seq_show+0x145/0x640
[ 1639.400787][T28299]  seq_read_iter+0x8d5/0xca0
[ 1639.400813][T28299]  seq_read+0x367/0x480
[ 1639.400836][T28299]  ? __pfx_seq_read+0x10/0x10
[ 1639.400854][T28299]  ? __mutex_trylock_common+0x15f/0x270
[ 1639.400883][T28299]  ? common_file_perm+0x20e/0x2b0
[ 1639.400909][T28299]  ? __pfx_seq_read+0x10/0x10
[ 1639.400927][T28299]  proc_reg_read+0x1e9/0x2e0
[ 1639.400948][T28299]  ? __pfx_proc_reg_read+0x10/0x10
[ 1639.400967][T28299]  vfs_read+0x213/0xa80
[ 1639.400994][T28299]  ? __pfx___mutex_lock+0x10/0x10
[ 1639.401022][T28299]  ? __pfx_vfs_read+0x10/0x10
[ 1639.401047][T28299]  ? __fget_files+0x2a/0x420
[ 1639.401073][T28299]  ? __fget_files+0x3a2/0x420
[ 1639.401096][T28299]  ? __fget_files+0x2a/0x420
[ 1639.401123][T28299]  ksys_read+0x150/0x270
[ 1639.401148][T28299]  ? __pfx_ksys_read+0x10/0x10
[ 1639.401177][T28299]  do_syscall_64+0x166/0x520
[ 1639.401204][T28299]  ? trace_irq_disable+0x3b/0x140
[ 1639.401223][T28299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1639.401243][T28299]  ? clear_bhb_loop+0x70/0xc0
[ 1639.401264][T28299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1639.401283][T28299] RIP: 0033:0x7ff623d9e159
[ 1639.401301][T28299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1639.401319][T28299] RSP: 002b:00007ff624cc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1639.401340][T28299] RAX: ffffffffffffffda RBX: 00007ff624025fa0 RCX: 00007ff623d9e159
[ 1639.401356][T28299] RDX: 0000000000002020 RSI: 0000200000000300 RDI: 000000000000000b
[ 1639.401372][T28299] RBP: 00007ff623e35024 R08: 0000000000000000 R09: 0000000000000000
[ 1639.401385][T28299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1639.401397][T28299] R13: 00007ff624026038 R14: 00007ff624025fa0 R15: 00007ff62414fa48
[ 1639.401420][T28299]  </TASK>
[ 1639.401427][T28299] 
[ 1639.401433][T28299] Allocated by task 27901:
[ 1639.401443][T28299]  kasan_save_track+0x3e/0x80
[ 1639.401460][T28299]  __kasan_kmalloc+0x93/0xb0
[ 1639.401478][T28299]  __kvmalloc_node_noprof+0x50f/0x820
[ 1639.401495][T28299]  __rhashtable_init_noprof+0x545/0xaf0
[ 1639.401524][T28299]  ioam6_net_init+0xeb/0x150
[ 1639.401593][T28299]  ops_init+0x35d/0x5d0
[ 1639.401658][T28299]  setup_net+0x118/0x350
[ 1639.401680][T28299]  copy_net_ns+0x53b/0x780
[ 1639.401702][T28299]  create_new_namespaces+0x3f0/0x6b0
[ 1639.401723][T28299]  unshare_nsproxy_namespaces+0x149/0x190
[ 1639.401744][T28299]  ksys_unshare+0x5a7/0x950
[ 1639.401767][T28299]  __x64_sys_unshare+0x38/0x50
[ 1639.401789][T28299]  do_syscall_64+0x166/0x520
[ 1639.401815][T28299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1639.401832][T28299] 
[ 1639.401837][T28299] Freed by task 27901:
[ 1639.401846][T28299]  kasan_save_track+0x3e/0x80
[ 1639.401862][T28299]  kasan_save_free_info+0x40/0x50
[ 1639.401884][T28299]  __kasan_slab_free+0x5c/0x80
[ 1639.401901][T28299]  kfree+0x1c5/0x650
[ 1639.401923][T28299]  rhashtable_free_and_destroy+0x3b3/0x410
[ 1639.401940][T28299]  ioam6_net_exit+0x60/0x70
[ 1639.401961][T28299]  ops_undo_list+0x43d/0x8d0
[ 1639.401985][T28299]  setup_net+0x2f6/0x350
[ 1639.402008][T28299]  copy_net_ns+0x53b/0x780
[ 1639.402030][T28299]  create_new_namespaces+0x3f0/0x6b0
[ 1639.402051][T28299]  unshare_nsproxy_namespaces+0x149/0x190
[ 1639.402072][T28299]  ksys_unshare+0x5a7/0x950
[ 1639.402096][T28299]  __x64_sys_unshare+0x38/0x50
[ 1639.402120][T28299]  do_syscall_64+0x166/0x520
[ 1639.402142][T28299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1639.402159][T28299] 
[ 1639.402164][T28299] The buggy address belongs to the object at ffff888025809000
[ 1639.402164][T28299]  which belongs to the cache kmalloc-1k of size 1024
[ 1639.402180][T28299] The buggy address is located 544 bytes inside of
[ 1639.402180][T28299]  freed 1024-byte region [ffff888025809000, ffff888025809400)
[ 1639.402199][T28299] 
[ 1639.402204][T28299] The buggy address belongs to the physical page:
[ 1639.402259][T28299] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802580f000 pfn:0x25808
[ 1639.402279][T28299] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1639.402294][T28299] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1639.402312][T28299] page_type: f5(slab)
[ 1639.402329][T28299] raw: 00fff00000000240 ffff88801b041dc0 ffffea00015c0a10 ffffea0000ad6010
[ 1639.402346][T28299] raw: ffff88802580f000 0000000000100006 00000000f5000000 0000000000000000
[ 1639.402364][T28299] head: 00fff00000000240 ffff88801b041dc0 ffffea00015c0a10 ffffea0000ad6010
[ 1639.402381][T28299] head: ffff88802580f000 0000000000100006 00000000f5000000 0000000000000000
[ 1639.402398][T28299] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1639.402414][T28299] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1639.402424][T28299] page dumped because: kasan: bad access detected
[ 1639.402437][T28299] page_owner tracks the page as allocated
[ 1639.402444][T28299] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 59, tgid 59 (kworker/u8:4), ts 76562907317
[ 1639.402473][T28299]  post_alloc_hook+0x1f9/0x250
[ 1639.402498][T28299]  get_page_from_freelist+0x2209/0x2280
[ 1639.402515][T28299]  __alloc_frozen_pages_noprof+0x217/0x5a0
[ 1639.402532][T28299]  allocate_slab+0x7d/0x620
[ 1639.402551][T28299]  refill_objects+0x2d5/0x350
[ 1639.402572][T28299]  __pcs_replace_empty_main+0x2c8/0x6c0
[ 1639.402592][T28299]  __kmalloc_noprof+0x47b/0x720
[ 1639.402616][T28299]  ___neigh_create+0x6d2/0x22b0
[ 1639.402687][T28299]  ip6_finish_output2+0xe0f/0x1460
[ 1639.402705][T28299]  ip6_output+0x337/0x540
[ 1639.402757][T28299]  ndisc_send_skb+0xcb2/0x1650
[ 1639.402827][T28299]  ndisc_send_ns+0xd7/0x160
[ 1639.402847][T28299]  addrconf_dad_work+0xa8d/0x15c0
[ 1639.402870][T28299]  process_scheduled_works+0xc3d/0x1630
[ 1639.402892][T28299]  worker_thread+0xa47/0xfb0
[ 1639.402913][T28299]  kthread+0x38b/0x480
[ 1639.402928][T28299] page last free pid 5746 tgid 5742 ts 76550606652 stack trace:
[ 1639.402942][T28299]  __free_frozen_pages+0xc93/0xd90
[ 1639.402966][T28299]  usb_hcd_submit_urb+0x774/0x1b60
[ 1639.403017][T28299]  proc_do_submiturb+0x265c/0x3430
[ 1639.403093][T28299]  proc_submiturb+0x134/0x1a0
[ 1639.403114][T28299]  usbdev_ioctl+0x10fc/0x2120
[ 1639.403131][T28299]  __se_sys_ioctl+0xfc/0x170
[ 1639.403147][T28299]  do_syscall_64+0x166/0x520
[ 1639.403173][T28299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1639.403191][T28299] 
[ 1639.403196][T28299] Memory state around the buggy address:
[ 1639.403236][T28299]  ffff888025809100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1639.403248][T28299]  ffff888025809180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1639.403262][T28299] >ffff888025809200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1639.403272][T28299]                                ^
[ 1639.403282][T28299]  ffff888025809280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1639.403294][T28299]  ffff888025809300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1639.403304][T28299] ==================================================================
[ 1639.438484][T28299] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1640.208354][T28299] CPU: 1 UID: 0 PID: 28299 Comm: syz.5.5760 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1640.219282][T28299] Tainted: [L]=SOFTLOCKUP
[ 1640.223596][T28299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1640.233638][T28299] Call Trace:
[ 1640.236907][T28299]  <TASK>
[ 1640.239828][T28299]  vpanic+0x56d/0xa60
[ 1640.243811][T28299]  ? __pfx_vpanic+0x10/0x10
[ 1640.248311][T28299]  ? __pfx___schedule+0x10/0x10
[ 1640.253165][T28299]  panic+0xc5/0xd0
[ 1640.256892][T28299]  ? __pfx_panic+0x10/0x10
[ 1640.261302][T28299]  ? preempt_schedule_thunk+0x16/0x40
[ 1640.266664][T28299]  ? string+0x216/0x2d0
[ 1640.270816][T28299]  check_panic_on_warn+0x89/0xb0
[ 1640.275753][T28299]  ? string+0x216/0x2d0
[ 1640.279902][T28299]  end_report+0x73/0x170
[ 1640.284144][T28299]  ? string+0x216/0x2d0
[ 1640.288304][T28299]  kasan_report+0x128/0x150
[ 1640.292806][T28299]  ? string+0x216/0x2d0
[ 1640.296960][T28299]  string+0x216/0x2d0
[ 1640.300953][T28299]  vsnprintf+0x74a/0xef0
[ 1640.305189][T28299]  seq_printf+0x188/0x290
[ 1640.309512][T28299]  ? __kmalloc_noprof+0x38c/0x720
[ 1640.314536][T28299]  ? __pfx_seq_printf+0x10/0x10
[ 1640.319381][T28299]  ? __asan_memcpy+0x40/0x70
[ 1640.323969][T28299]  input_devices_seq_show+0x145/0x640
[ 1640.329344][T28299]  seq_read_iter+0x8d5/0xca0
[ 1640.333928][T28299]  seq_read+0x367/0x480
[ 1640.338076][T28299]  ? __pfx_seq_read+0x10/0x10
[ 1640.342741][T28299]  ? __mutex_trylock_common+0x15f/0x270
[ 1640.348282][T28299]  ? common_file_perm+0x20e/0x2b0
[ 1640.353300][T28299]  ? __pfx_seq_read+0x10/0x10
[ 1640.357965][T28299]  proc_reg_read+0x1e9/0x2e0
[ 1640.362548][T28299]  ? __pfx_proc_reg_read+0x10/0x10
[ 1640.367648][T28299]  vfs_read+0x213/0xa80
[ 1640.371808][T28299]  ? __pfx___mutex_lock+0x10/0x10
[ 1640.376828][T28299]  ? __pfx_vfs_read+0x10/0x10
[ 1640.381503][T28299]  ? __fget_files+0x2a/0x420
[ 1640.386088][T28299]  ? __fget_files+0x3a2/0x420
[ 1640.390760][T28299]  ? __fget_files+0x2a/0x420
[ 1640.395352][T28299]  ksys_read+0x150/0x270
[ 1640.399594][T28299]  ? __pfx_ksys_read+0x10/0x10
[ 1640.404356][T28299]  do_syscall_64+0x166/0x520
[ 1640.408947][T28299]  ? trace_irq_disable+0x3b/0x140
[ 1640.413966][T28299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1640.420026][T28299]  ? clear_bhb_loop+0x70/0xc0
[ 1640.424696][T28299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1640.430578][T28299] RIP: 0033:0x7ff623d9e159
[ 1640.434984][T28299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1640.454584][T28299] RSP: 002b:00007ff624cc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1640.462987][T28299] RAX: ffffffffffffffda RBX: 00007ff624025fa0 RCX: 00007ff623d9e159
[ 1640.470962][T28299] RDX: 0000000000002020 RSI: 0000200000000300 RDI: 000000000000000b
[ 1640.478928][T28299] RBP: 00007ff623e35024 R08: 0000000000000000 R09: 0000000000000000
[ 1640.486904][T28299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1640.494870][T28299] R13: 00007ff624026038 R14: 00007ff624025fa0 R15: 00007ff62414fa48
[ 1640.502838][T28299]  </TASK>
[ 1640.506106][T28299] Kernel Offset: disabled
[ 1640.510424][T28299] Rebooting in 86400 seconds..