last executing test programs:

11.820746368s ago: executing program 2 (id=197):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x6, 0xe8}}}}}]}}]}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101001, 0x200)
write$tun(r2, &(0x7f0000000180)={@val={0x0, 0x886c}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, '\x00'}}}}}}, 0x1d)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe26}}, './file0\x00'})
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x18, 0x12, 0x105, 0x0, 0x25dfdbfe, "", [@proto={0x5, 0x19, 0xff}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c)
r4 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
getdents64(r5, &(0x7f0000001000)=""/164, 0xa4)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100002000100000001000000", @ANYRES32=r7], 0x10, 0xcc040}, 0x26048040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001b236512b345f093fc10cd23cadb9f6fc77df1fb96965fd72e644c47bbadb1fdc94717a64c2a409fa56e18ea5c37eab88d8f471e12f6624ac6e45e38bbf6195149f3eeb09e96eb7899c61afc38dd0c4424d1904787dced461b836ab5eab218864c81d79c3fac04554ea2164ac7af9a19c507b9c178c9dbea4a936d1ffc31f5b008058fba8f96fa65734910c036416a9612c887110a21febfdca59e2bfe58d124f9def31d7ead3f06e6e18f70183d6e4920837bba8d4646ea3993c928b3162fe2621a328f7ba8ae32778fc6949"], 0xfc}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

10.249215867s ago: executing program 0 (id=205):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x1, 0x12, 0x10001}]}, 0x8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c84"], 0xfdef) (fail_nth: 12)

9.612314703s ago: executing program 3 (id=207):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0)

9.59149326s ago: executing program 2 (id=208):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0)

9.362291279s ago: executing program 3 (id=209):
unshare(0x4000400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x9}, 0x50)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r1]}}], 0x10}, 0x0)
recvmmsg$unix(r1, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xf5, 0x4, 0x1, 0x0, r0}, 0x48)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000440)=0x8)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r5, &(0x7f0000000080)='./mnt\x00', r5, &(0x7f0000000100)='./mnt\x00')
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="1800000010000107000a0000"], 0x18}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0)
recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}, 0x7}, {{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0xe1}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f00000008c0)=""/35, 0x23}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/1, 0x1}], 0x9}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/32, 0x20}], 0x1, &(0x7f0000000780)=""/112, 0x70}}], 0x3, 0x40002102, 0x0)
r6 = socket$inet6(0xa, 0x80000, 0xc3)
sendto$inet6(r6, &(0x7f0000000900)="4e2b85cf21a0215e1502857ef16b82449fc22835b7b3f53af7e337508cb56196dcd85bdb46c138aa7f5ca889265f7190afd87b072dbe0f199919d82a5bbacf0e9165834f50ad07f64ac8862102923bbc5ff945c48c3782c9829a6ad28f24e57fd7c7eae999d048509704e1546ac2c4fbb06114fb47d120c421d90d6b57795bbdabd79a2b3029943b2236df958757e9807a09160538a249fc501798a3d7ff2e77b1fb6f3a9d1df5a1f01172143ad0778f39156d7b8267a5f873e0dab5fe47a85ec216d31cf2dd93777054eff15763b87f7c15cd595a7dfb1142b62bc79ea1785410a558f7fceade86b94f67c6193383509610ea2480ed92c9", 0xf8, 0x1, &(0x7f0000000a00)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c)

8.940182977s ago: executing program 0 (id=210):
r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0)
r1 = openat$full(0xffffff9c, &(0x7f00000002c0), 0x4000, 0x0)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000300)="4aa63e14c3320f187c60507d01ed12a6af05362fe3aa6a0052ab9456c971")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
fcntl$addseals(r0, 0x409, 0xc)

8.567281349s ago: executing program 2 (id=211):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x57}}}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

7.764122155s ago: executing program 4 (id=212):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x9)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r4, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
r7 = landlock_create_ruleset(&(0x7f0000000200)={0x2081, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0xffff, r8, &(0x7f0000000780)='!', 0x1}])

7.69540121s ago: executing program 3 (id=213):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00')
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xae}, 0x3}, 0x1c)
lseek(r0, 0x1000000, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001280)={&(0x7f0000001240)=[{0xb, 0x4000, 0x1000, &(0x7f00000001c0)="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"}, {0x9, 0x8001, 0x69, &(0x7f00000011c0)="8d575e4954950b66ac92d3392acb69f3a566228aad23ca3caebb2cc87b62d63ed80582c5f3dbb5f76c788025e429c29838c133b4bf4aed643071c5f4130d04c84c0d8d3e9629f9cd25e9740d700a7329cc3116e3943ccd4d8ae85164865430f65622e6bb13cc4b345e"}], 0x2})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x5db9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x4}, 0x20)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x101, 0x58c, 0x8, 0x6})

7.690020546s ago: executing program 0 (id=214):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe40102030109021200010000000009"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x29, 0x48c, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040b40464de0000000000010902240001000000080904000001030005000921ffff060122030009058103"], 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x41, 0x0}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc8, 0x0, 0x6})
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket(0x2b, 0x1, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xa43, 0x8000000000000001], 0x1, 0x0, 0x0, [{}]}, 0x88)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={<r6=>0x0, 0x79, "c1a5237e996844a6b4cf4c5c87507ef68f75fa550fe231a9d8eb43b99bd01fd94e31b3442c9c8d06385e9b07c452791dc61b68d3961523280d4e8feeab8e89d29ef91597e0f91a31bf1688c24abbdeb8a77b7116cee24851d7e6d7780ca803bd65c5721b3175b868641588c242cb27f3f3c0b4771ba23bec69"}, &(0x7f00000000c0)=0x81)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000100)={r6, 0x1, 0xff, 0x294, 0x1, 0x200}, 0x14)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="200a20b98843"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="b00020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.48817111s ago: executing program 2 (id=216):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x20048040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
rt_sigpending(0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000280)={{r0}, 0x5, 0x0, 0x7fff})
mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil)
r2 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffb, @private1, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2000, 0x5, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x412, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001340)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x401, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x6, 0x9, 0x20, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xffffffff, 0x400000, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0xe, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x40001c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x1000003, 0x0, 0x1, 0x1ff]}, 0x45c)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, r2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x3)
sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)
r4 = syz_open_dev$vim2m(0x0, 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000080), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0x6, 0x7})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf2529000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40)

6.294065262s ago: executing program 4 (id=217):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x1, 0x12, 0x10001}]}, 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20000000)
r4 = dup(r3)
ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x299, 0x0, 0x7fff}]})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/key-users\x00', 0x0, 0x0)
pread64(r6, &(0x7f0000000080)=""/142, 0x8e, 0x59f)
setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000040)=0x80, 0x4)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c84"], 0xfdef)

6.184208338s ago: executing program 3 (id=218):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x6, 0xe8}}}}}]}}]}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101001, 0x200)
write$tun(r2, &(0x7f0000000180)={@val={0x0, 0x886c}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, '\x00'}}}}}}, 0x1d)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe26}}, './file0\x00'})
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x18, 0x12, 0x105, 0x0, 0x25dfdbfe, "", [@proto={0x5, 0x19, 0xff}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c)
r4 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
getdents64(r5, &(0x7f0000001000)=""/164, 0xa4)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100002000100000001000000", @ANYRES32=r7], 0x10, 0xcc040}, 0x26048040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001b236512b345f093fc10cd23cadb9f6fc77df1fb96965fd72e644c47bbadb1fdc94717a64c2a409fa56e18ea5c37eab88d8f471e12f6624ac6e45e38bbf6195149f3eeb09e96eb7899c61afc38dd0c4424d1904787dced461b836ab5eab218864c81d79c3fac04554ea2164ac7af9a19c507b9c178c9dbea4a936d1ffc31f5b008058fba8f96fa65734910c036416a9612c887110a21febfdca59e2bfe58d124f9def31d7ead3f06e6e18f70183d6e4920837bba8d4646ea3993c928b3162fe2621a328f7ba8ae32778fc6949"], 0xfc}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

5.011171179s ago: executing program 4 (id=221):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x7d4165c9)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
fchdir(r3)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0)

4.899682834s ago: executing program 1 (id=222):
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, <r0=>0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
capget(&(0x7f00000024c0)={0x19980330, r1}, &(0x7f0000002500)={0x80000000, 0x10001, 0x200, 0x7, 0x5, 0x3})
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
write$FUSE_IOCTL(r2, &(0x7f0000000040)={0x20, 0x0, r0, {0x6, 0x0, 0x6, 0x1}}, 0x20)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x40110, 0xffffffffffffffff, 0xec776000)
move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000480), &(0x7f0000001680), 0x2)

4.623140914s ago: executing program 4 (id=223):
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4)
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000003c0)={0x0, @win={{0x969f, 0x6, 0x8, 0x4}, 0x1, 0x1, 0x0, 0x800, 0x0, 0x6}})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000fc0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="525f3aaa5eb559704d35a8761ba631477dea2d35226bc80255b276f0e3f21b1dbb9acc8bc21e79c0caba82023150b297bdbe8431a51c1b2079f56b72e28b1c2cc57c94f08e117ee12ca57764e883783b34e2895c77f62c87954005c6d8f2bc2489ee6d6754566c91cce05f9086c39a052a853432ce49aab19d9e4c3eb56b7ddf9806f8c0f7e831bdcac1fc69c3dc1541602909c7efbcbecbe742255e939be36a9dfc068808032b42e8e4db227daa4b4a7c4cd3150956696e607a074053268cc076c933eedb08c4936857557f61d3c55254ef18f55c5643f4c013c890acb6768cb848242ab2f5114b1c0fb4cafa10d797bed8d304ba26a55624f239db3d170c521cdef0764b8ac210e5b24c02dbddee55a72f540cef85eaee7b23d332b8a2ee09146e8c3c9001ba47cff1cfdf7b076f63010584d1a9e8ae1fc35429ec13c25709acdc47948a8b0aea44a8a529125c7727ae495f4c5e597c574858ec5299e7641c231f3c6b4ed408e3105dd6bea5102973731dd482404a122300d33c1687e018adb74e0944b4bb6a5e95e841adee2d5dad01a6780f822bd2a1737a1767dc4c5b8398b4ad0d8fabf7cbb21ceb7f15755856b3aa1d70c173cba7f19cad28eb9b6e2b3f9ae6b25f9d59427ffe6d0c5f63427c8ef2a609375296c7f6e7c626b75e9f7132a3335d5e8425e2f403c04c410ee30d49cb44d4250995a793b952b9a59b94824e1fa94424bda8bb6a691b14a21131a3bfb84517e857f6a28767ad42109f871a78abae3c4d5e92b0ac3fca2424d08d37c9ce54158b115952c1a23207e561a5877075ca8c28aa41eaed10a45c3d744fb417ce05d05f4ba81f212b35d1ba34c5ca87e8f4be01b7c9ca8cf1ce07f8ca2ee20650545ed616d75e95874dbab1c02de50d3fa997a0ba0bdcde82d66d673a78d66c3c80ae60d0dce354005a24380a59222a95970720010dff47eadeffeb5588906621102503bb338c0cb7e2c371d199e145211171c72d049787502c34ec85a099b174cdb4fc0a4ff7e0cc3d2378dc43db8387b29df168106089f2508a03cda0009b3b6b231a1c500c25196253e72579800a4f534cd8514c7e8c6edbd063f1e610ce2134b39a8e2c093672a96e3b2ed1a76cf2a7201facea5ffadde70f16d6f1dc0a91a00b93905353c375cf76db9b5c4680eef9070a9d5d7661766d2d18bcf8635f447a85b2ce0165dc27ebe2744ac76c930844505b215c8dd26e2e10aea9896cf9dbf4e344eba645ee602487aae7d44351928ce560915ea64f6566c9c220242fea9211527f4fdace31086fe92fbf4324b2b3d00a396aba218cf92a6d80b032076c8ae1f5609d595557333c78e74f71abafa28d5efa0c9e43eae27588d49b440cff1aa352bcd951046ac367b415043357e7bab881706668e4df21792c50d5894481fc9635c9c40a83dba15a2dd65e5038b44848facf11e70229119877c8407c2d2b27c015c0a3f93d1a3a97c76bd11d25abb5d49350f4d0ab08a47e08d27dab609a13fcde73b674e147c1039f6eb647247f3deffe8fb873475684c11085bfa8a611c4c31e10a044f02fb42f13c8ac3e468209889f425b8a6ccff73c8ef3a5ed8725d81f2da751c4e4f57fb13fb036c40218a7184242d69b5284b8854958381f9d11a5a818f6b9e32049816c4b2a67a895a5b51e39fdc139c8dfd664ad5e7f735bf2b8843056e18adc4dc1cbe4a1467ab9f06048e2ad2a67e647263b3542163278fb04006475d26a34cb379d27490180524ca8b1440cc7b630874031ceee8ddb9f94686818514d4abce43a45b237aaf8b4da1803b736d6c4516eb9a045825eeeb75ac46e4cb6029ef3b90cd40a496221c14e3d988743c43b808d476e834d0b6bce99786ad09da0ebb17746c7f6e415582fe74db1ed478316fed4984b076c0eb6e360eb60091bdfc59861b9d7a936fe40b2f565119b705c1ed15f0a859204afbc0d68b7bc232e6f64c0de786677bdc44c5a7accf93fda92b1bec1dc8ec815a112ce94b8b3abd2952a5fc8532f61e4b57e9f8c0aacb2b5542f4596b6ae850823cb08d91f3bd008fe2615efcbb8d8f826eb07643708df52b26f5c4a7bd2798e2bb37494e5438cce536f56466baee61c1759830b88e960f5d478ba99310160476d306be45dfa3093e795e738f72a608d32b28e526572a2830c6ed6b60fa7c66269b1643ebb0e64548f2c1b85aa318895f30a9e59e7226959554688d62f94a8a68d6f20dbf18f556094c9a544f5fc83888063528851fadb370684cad2f17218cc6e59da2b7e827ab25107f19f2ec52165bd476a2ba9e52f1a03e2eeaafa31a0e9b22b6bdab57ad13e699a380bf7d1f06421d468c33c4b0d17fe1a6d645d8138f46924e76e76ab6df54e74f880c47bfc7e5dc5920b83b7426346dc80e38a64b4218d5b90644f29bd52fa455ff9c5c97731476a4e1162be7e2c926bf50d2b59ab7ee6ad11e08464b031169664dcfcba82b0522ecb1cac2786636aa6f40fccb4061e3cb46a29b3a0e019d8f4c23c067d2bc7f002d5210297f8f1cdaf75bd9ca588e0018ea546d695c9840de8bc9881f4490cdc22a1c4869ebb8ebc757442c0e0749ec86c05a3594b983bc48911c07456ddaa27dfbbc98c359c1c16c451e675c3ea11641ff8bbf16a4c2881c3690518a3a9c2c42333f32f35b95176a275ab407447805474a12e9af59b31b9f79cfb7e047a030b7379a8723cbd9679ea2880797b1efccff06ee02d0de9ad03b092b32c54664d4d980c341f64f2f10c4d4890cbcbe80b3540267d6b8cd32229df3e3abb339ab3614050f576ea991971cba56a7f58ce26ee54d305ce85eced9052496e74a31770cb4127dddac33e43e2d558406bc5cf24c220c284cf58fa1b8dc96f473e2e99bb9cdb4175d5655635491d8a79eb8c864f93f8dcf55dd39ff718e39f4076759daecb08f2dc4fb6e77bf36a33376afb8274bf50b78608136d0ffe13bcdff0a6fd8bf84b778e8db9406cb47f2342c1d49e4ada92c419c4bdc983b2fefd4811d5511dc3f2725d2d94ed5897587978acdf0512732961ef02938a487e922820ddc80a3b8bf3cd8851034ff17742cecc8f27aa08722c4e6b38c89d52601f2e1d7cfd039f602279c0da0945ef32ce8283254420d5a728c38ab79a1743f9feec7755ed31a5539f6ccf639ba7d6041889386c5c1d4ddfcd1a0670472903b3aad79c3b6fbdf0fb56180f51dc9deb08feb7a7f0ac978095b2af9e8847b98db7da551dbc68432dea552c463c11bb40f80eacf9acf34f26162c40909e92b8507aa917504363becdb9e10a3eb3db0031620ef0ca9a21f4845cdde9764100e7fe1258462ff2edacd4a28b6d64ae8e76d7b6f2228994f6c4394063742a2e6ed3196076bb2ac0ed9b8e4db0b4c7b0bcae963227bc9aed9ab653ab683949f3f618fb4053f0fb6cf5ece23515eee88ebe2247bef2d5e8005167d2a7919627d4ea3f137a880242226cd1d1e82ef5dba1d4e4b317b106a3e1670e68be58dd6a2a2631c6b29bd39b27cf06e5f8db1cf2bf70ec8de66ea92ceb9c6e861af4ce06c4ffcc61cda113073de75f29c059758d422edea3eddb2a50175a6c8ce06a37461d3a89a19b9ab1e3fb56fae518a1e7cf027b39c5daff6b21e9a473796d10d298d30f34e51f3649682d46a7b0666622b67b38ac291c1f1396a9118aac228de7d8c4a0c89184ac7d646db192bfc583bac33a7f44c9d46b99b1f4c1126ff5650f3cbca8aa04a0253960b72db1611581d84a9085a31d37ebf0a7b6473c2f8729a5119b4fb3c77ad16832108b48825c9e4589ffdb720c65738b5bf7ef6aac33ed9cf6fbfbcd205a7bd2c58ffddd5f1d1e1f24e11456f3929ecbc316c1b7ac64ac48b9986b5897b214fa18793284d25a31b50bff187fc91e2c14807b2ce17a0f5aca1e864ab96a200e8f87f5f5d7f979e87d1f0a14f044a39b6da22fe8efd2550fc4ae55e0813ec21bf8a64e1bfaccaf592a114f6229bc6f1e1ed7271c2ba20edb2b9e691abe32c4c777c00f1a4ac718d9df35337ae538fda86fb5c44b93867d806d92fea43b60d3f3bb4f06660186033a9c38b5628cd08f3b536d11053127717522430bf30cfba42a88551938eefdc421ab4b4e78e9a2124d1ee6540654c88d551276dd48d51dc64f3b330a7414f611916859ec9b8116d56b9c0254040fa55f4515868ae6da8564aba37d49a3c30d37a0514a8572d284127c0466bc54361dc292484e92b52eb76a4ec88cb0b250055d1974f87547028bbe6eaee8b22f86303b947aa9021714bf1c0f278176680f178ffd4359dca991785df5f790d85dc77f8a100f510949276acda5dd900f01bad7014aea66823a9498f0c9beda0e5d84b8258dc455388129dc5743ba45a62d02247d2bceeb0f56a8a5a16ef4625d7da164bce6e0a43400dcb2da10b0ac9c237454dff30eafc1dc48293bfe44d3aa72f3e1f03a81ba733e03286a411e4ec30ceb4ac8594425be44b9e7fb0f4c71fa8db15c0d97ba7f5a825d08d85bb54c2cfbb7ba2fb00b8eaf8972f23cdae6e54495213783f86a2cfab42c05c252d00ab4e6c3d42919084f06ceb0aef0fe5d983f5b12b97247dc0ef32f7672aa4cddbb946eb54c9f9adcd8d335d365a35af67fd3ede1d72e022b0f48290e7c5d27a1be74fbb1e2cf811e798474237932a86a1f70e11442042cf33f54aac9ebf32fbb868db6bce59da935f166603dba099969f451c6ad1e84490382d1dbd146adebe1380c922fdfeada98c36eb74a47096cc3367288a8117f48495535c8c1c8b430f5e95835771b4c3906ebb825457f4e47b3e0948bf6c964a4a16390421b0b4434a592efa43fa23b1a4cd01d9dfa72478918456befaefa26f4f7ae3f7d777eaf72d05b8c4454ca35edcceef940bb5ab148107a97c081343b9c430a33eae946e5f829ec4b461b257220311f8f8685bb4016bfe110e50d354a4b5d134313c955d9795477d02e58d6db1e932b86dcd189c0c83232c2e83643a1b211b921a9539ab5df8d00f4e8e3f269975c17abca3fe4e7fa29f5c283a01027e407a8605efa8825d625b3c233ee4ce2567679b1262fdc68f79677dac4d47f78e6f8c7a69418a708d1251aa6a2cb0a38f84279cad36790b55cd3936793c36b7364849bdb8277675630ed3a9e819f370ec2a126fec7411ebeabc0ce4620b4012b5c8b1034e08f12252cd8c2e14e63f7134f0a249d24db0cd4030eb3f0735d643000708551467952b501cfbf736d132c25f4e00704e72318eca3d52ed82da810b1169201eed5f3956b62f4ad9e0b156128494c04e67b1425442accd35f3e270b60f3dba45e92afeffc5e6583eefc2fd68e8e701c58fcfac56525ea4e04828a666e959dedade4e5aae476155f2d79a365f3ad41c043949b90749bc4d196161f67ebd3c456ccd7cf0237b705dedc8658c92a2f330d76100ceb86836e640fd4ed6093bf6569a82899d92946b32ae58f10741a54becbfd79fabb01fe51f9088779fa0d63088ba2d84fc4b7561a488f187593ec91dd080ffefcaa0fc1505d1bb3c3a4630201f6d1c8b3344e7a324e84030552ab614df271719a98ab8f202a898f6de74117d2db006f6a88f7b63b1b461f52473fc8c3de3d9b8e82bf793741471b7e93746f4a15d0c5b0d749e18d2d644f49f54ab8014a26345541dd1e42893994d47905c9acdc4702865859e9bdbc779fe16326adc3f8425904f67915a4d0739cf655cb863caf9acf7aa93735807792594dbf543b83972d683f96f2f5f0ac20afadde0136b774ab2cda81899d870f17b13b92871cf3"], 0x0)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0xfa, 0x4}, {0x2, 0x8000}}}}, 0x11)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0})
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000f80)={0x1c, &(0x7f0000000a80)={0x0, 0xe}, 0x0, 0x0})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
syz_usb_connect$uac1(0x4, 0xdb, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x8203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0xff, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2b, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x3, 0x6, "9109ffa6fbda"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x40, 0x5, 0x92, 0x3}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x200, 0x1, 0x8, "c6"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x3, 0x4, 0x9f, "9549dc11e46e830a"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0xb, 0x38, "c910ee4a0022"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x9, 0x4, 0x6, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x71, 0x10, 0x4, {0x7, 0x25, 0x1, 0xc, 0xf8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xb, 0x4, 0xd4, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0x8, 0x8, "81c6", 'R'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x7, 0x9, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x1ff, 0x9, 0x1a, 0xd7, {0x7, 0x25, 0x1, 0x8, 0x1, 0x7}}}}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x5d, 0x7, 0xd9, 0x20}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x8, [{0x72, &(0x7f0000000680)=@string={0x72, 0x3, "8bcf6d353f6aeec53c008bc6bb570edc2354e1b542000fc2178cc164dc559c9482fd18dc987e4e916925d36f77479794db82aaaa9d991f35fdeb88da83121fc70ddb0f2222f0b4595ae89f2d2bec9346eaba504c8a9e8d107c2cda5522f370d6f3cae1d7e3768131e0a8a101ac9ec829"}}, {0xe6, &(0x7f0000000700)=@string={0xe6, 0x3, "153235ea98c2dde008e5c0146b92c7327e247fdf471b169cd9892e87910b0a2968b7ab7117dac26c8c5bd0a3a1fe914fc4c069bac4b355abc04dec655290379a55b98a90d25c3a33ed584ac7063ec6d625b4b2f217e8064d0387496f5421de9d6febb6193cf8ad88e1fa63818a800c5c1aee3dd090a9604878b07679268e1f2aa5b0d27414a61643bd8a42067c7c5e99bf57a57a037a2c8b74ec2594375daeccfc5256124964e46bf6c10db20a91532363ffbabbfe2f501d136673bcd039b7cc58d06e3dbf96babeb705331a3e43fc8f29dab0a47b650fec77d368f89380ab963ef47e65"}}, {0xd4, &(0x7f0000000800)=@string={0xd4, 0x3, "bbada408cfe91db6c223e134e88044d87537375bb7334bf456097d4008385daef22ee038d1cc2989fa2623ae58eb410401388dc06d4216a6743225cee09ffd1b441c94e8d62fe6df43870d5126b25f9058f9a39a1024ffd00ada0b768f65a3f110f5f54e61c4ac988170018fe735f6578ad0a251d2b2633484c658f622b88fd58f3ed8c66188f12db41e9fcf952c85db4cf8391f52bab4226ae1475e7014138efd7f7614127cd99551b7e40c9989e3c6d9cd1d2ef1ec0f66fec2d9aa8d9760478e2ab02af7bbb61492849eec832d8d5a2676"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x413}}, {0x71, &(0x7f0000000ac0)=@string={0x71, 0x3, "fe7fd209952aa2caacc1979a0b0e88bda70045969810e824966b2c57b78425203ca4a1b024620914e6901ebd153ccb316166f8c23307ff202698d1e456c8201b5696951595bc69db157ae3d5dcc3b70bd7e893d8e075e8e633d8dff3b6d83d5429c86e0703a88208c380c50a6d3785"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x44d}}, {0xd3, &(0x7f0000000b80)=@string={0xd3, 0x3, "77bb7553d1c8c5a295487ace274865782d62eb54473e0637a6ce52179197d1f49b69ea211a079ea77ab7bde8f1897f2a8ae5d6ebf69afb2bd8451550d405f11b62aeaecb3f14a65fa9772faba5bbd933ee140ad9d63697ffa714b66a342fe7775d2cf29311d94f8aaa5cb072894f969b3561570de55770b133cbf8455403217171753e25010db3f2a60e58fd978a71e7fb7a40b12a276ac4e05bfac3dfc1697b56c320e75b80f7c652004aba7ac96cf5db416b4582a49650b61e8abab4c1f8f32aa7a1dc15984e8f58e5d29905c1f9d026"}}]})
read$FUSE(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r4 = epoll_create(0x7)
syz_open_dev$vcsu(&(0x7f00000003c0), 0x80, 0x80000)
r5 = epoll_create1(0x0)
epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000140)={0x60000000})
close(0x3)
syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000140)={0xc, &(0x7f0000000040)={0x0, 0xc146530050e9807f, 0xad, {0xad, 0x23, "25306b974e393f5935fdf3566cb37e2614b25ad6ab20fadad1ecf1615c2159ef7165adf1ee3193468aa1355ed04b213f2201039fd85081cacaf0d2549929e82c6d9de47e25d6a38667ca712933383d8c611314566b7ec478818671fdad6996e770c1619d10f3afc5acf75f3086d69923fcdd309fae421f4d5fc3af62ac0bbae0d63b01d42fcafe54d1b61e7ff2a4c03b23c736e8361e8749c1ca78767cb53aff0db9479818f1c512761583"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}}, &(0x7f0000000380)={0x18, &(0x7f00000001c0)={0x20, 0x12, 0x52, "5c75c298471d086b945f3558ef7eb677f4457a22b92565e1ed8a1d55af60317e6077600f30903d590dc51eca33c49cac926d7f9f5ac7da93eb75096de6a2fffa8421a0d044701a4c84cb8fc210fe3648df1f"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)=ANY=[@ANYBLOB="c005050d000006b2542597"], &(0x7f0000000340)})

4.39044854s ago: executing program 2 (id=224):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000440)='cmdline\x00')
preadv(r4, &(0x7f0000010540)=[{&(0x7f0000010680)=""/222, 0xde}], 0x1, 0x0, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
recvfrom$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r7 = socket(0x1, 0x803, 0x800003)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000000)={0x5, 0x1, 0x6, 0x0, <r10=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r9, 0xc01064d2, &(0x7f0000000040)={r10, 0x2000000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000080)={0x9, 0x1, 0x2})
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0xff00, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3ce1a4612924b2fafeffff7f0300000000000006", @ANYRES32=r13, @ANYBLOB="600000008008000008000300", @ANYRES32=r8, @ANYBLOB], 0x35}, 0x1, 0xd, 0x0, 0x480c5}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0)
openat$nullb(0xffffff9c, &(0x7f00000001c0), 0x62000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x30, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4b5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x0, 0x1, 0x4, 0x3, 0x3, 0x100, 0x10}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x20}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x89, 0x16, &(0x7f0000000a40)=""/22, 0x41000, 0x8, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0xf, 0x4, 0xfffffff7}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000b00)=[{0x2, 0x5, 0x3, 0xb}, {0x1, 0x4, 0xc}, {0x2, 0x5, 0x5, 0x9}], 0x10, 0x10}, 0x94)
r14 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r14, r0, &(0x7f0000002080)=0x64, 0x7ffff000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3e, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x3, 0x3, 0x80, 0x20000003, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0x5, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x1b, 0x400001, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2b8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x81, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x7ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0xb, 0x3, 0x3, 0x9, 0x5, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x7, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x0, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12c, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120003, 0xffff, 0x2006, 0x80a2ed, 0x8, 0x25], [0x9, 0xbb32, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r15 = socket$inet6_tcp(0xa, 0x1, 0x0)
ppoll(&(0x7f0000000140)=[{r14, 0x10}, {r15, 0x2}, {r0, 0x2002}], 0x20000238, 0x0, 0x0, 0xfffffffffffffe92)

4.390006442s ago: executing program 1 (id=225):
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000014c0)=ANY=[@ANYBLOB="3000000010000100fcfffffffcdbdf25080000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0d002b8008000300590c00001d000000"], 0x30}], 0x1}, 0x20000000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900010073797a300000000009000372e10000320000000014000000060a010400000000000000000100008d140000001100010000000000000000000200000a"], 0x88}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f00000002c0))
sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000003, 0x0, 0x6}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="8bb564bd2db4ac1dc71280d6bf996748539fbb3b79c3d646d8d4aec444ac63e45a76c19ce8055ada0856daebdb1a48ebe6299f13f348547d9f05", @ANYBLOB="0100fcfffffffcdbdf250700020008000300", @ANYRESOCT=r5, @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008000), 0x13, 0x2000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @x25={0x3, 0x3, 0x13, "969ecd1b7d4d2a8f4a46246b88407e9baac1aa47c32e619268c78455eeb3c95de86c2c4d76e9ffc559c64d9d5f91f554a745561b2c3e08b0b140c7e1d2477969745b65cffc16700e4cfba915c2c9e5e4bf9849b25f76fde74db2bd9bd1bdfdee3a31cd6020ca026af9"}}, 0x7a)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44044054)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)

3.745527376s ago: executing program 3 (id=226):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0xff000000, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0)

3.53341128s ago: executing program 0 (id=227):
socket$inet6(0xa, 0x80003, 0xff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0))
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000000c0)={0x1, 0x102, 0x4, {0x81, 0xfffffffb, 0x7fffffff, 0x6}})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000a02807ed884106cac582ce36a2051349770a779b59ca9bc61316a131c44cbee8d2f06ff1900494b76a63b58ac6c3fde85bdaeef4a3a490ee68361595842f63bcbe3c2b47956fbd9455ba0c35278f04a696abf94823b6a677bf7d0519fddf8ff25cd4fefea30187cdcb7300e99a454ea726311ebd23fd9f0fdc4cc77fa4a5e9c0080c1f4c2544164a3167c8519aacced315fee031f750aca463eabc2fb6a54a0fea71872b514ccc3bb1170e3f99ada57539a8a548ab283e03f52d591185833a4fc3a7bf84e146c08d8122ec7462d34ab89c102a85", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000002000300", @ANYRES32=r3, @ANYBLOB], 0xd4}}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c030040", @ANYRES16, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x400c845}, 0x44080)
r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0), 0x0)
close(0x3)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$unix(0x1, 0x1, 0x0)
listen(r7, 0x0)
ppoll(&(0x7f0000000000)=[{r7, 0xa1b3a606282007e}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0)
shutdown(r6, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={<r9=>r8, @in6={{0xa, 0xfffc, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x3, 0x7fff0001}]})
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
faccessat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0/..\x00', 0x4, 0x300)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000740)={r9, 0x8a0, "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"}, &(0x7f0000000100)=0x8a8)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x804}, 0x40400c0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')

3.205170797s ago: executing program 1 (id=228):
madvise(&(0x7f0000478000/0x2000)=nil, 0x2000, 0x66)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, 0x7ffffff8, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2, 0x7, 0x18})

3.10647891s ago: executing program 3 (id=229):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=<r4=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000001140)=r4)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(&(0x7f0000001540)={0x300002c00, &(0x7f0000001340), 0x0, &(0x7f00000013c0), {0x6}, &(0x7f0000001400)=""/207, 0xcf, &(0x7f0000001600)=""/216, &(0x7f0000001500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff)
r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0)
write$apparmor_current(r6, &(0x7f0000001940)=@hat={'changehat ', 0x3, 0x5e, ['!*{\x00']}, 0x21)
r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x20})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000001980)=0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x34}}}}, [@NL80211_ATTR_IE={0x20, 0x2a, [@supported_rates={0x1, 0x3, [{0x3, 0x1}, {0x0, 0x1}, {0x16}]}, @rann={0x7e, 0x15, {{0x1, 0x34}, 0x19, 0x6, @device_a, 0x10001, 0x8, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x445}, @NL80211_ATTR_IE={0x27, 0x2a, [@mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x1}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0xe, 0x8, @broadcast, 0x0, 0x1, 0x10}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x24004000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904d9"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x14, 0x20, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050)

2.841967455s ago: executing program 1 (id=230):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
syz_usb_connect(0x5, 0x36, 0x0, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8918, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

1.86937891s ago: executing program 2 (id=231):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x6, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_012={0x2, 0x1, 0xa, '\vp'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x9, "f71db405"}, @local=@item_4={0x3, 0x2, 0x8, "ee4f7cd3"}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x1, "5d8c3dda"}]}}, 0x0}, 0x0)

1.477641386s ago: executing program 0 (id=232):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESDEC=r2, @ANYRES32, @ANYRESDEC], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
accept4(r0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))

1.134759775s ago: executing program 4 (id=233):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x7d4165c9)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
fchdir(r3)
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0)

883.466602ms ago: executing program 1 (id=234):
r0 = syz_open_dev$video(&(0x7f0000000100), 0x7, 0x0)
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000002c0)={0x3, "099fdbcd9b7f20bc91f5c2954d0b5cb4a000000000000000000300", 0x0, 0x0, 0x0, 0x0, 0x2000202, 0x8})

725.415998ms ago: executing program 0 (id=235):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = getpid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r5})
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f00000000c0)=[{0x8138}], 0x1, 0x9, 0x20, 0x0, 0x0, 0x3f})
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', <r8=>0x0, 0x4, 0x7, 0x8, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xf70456ea3b4fa405, 0x3, 0x40}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'tunl0\x00', r8, 0x7, 0x8, 0x6b6a6c6f, 0x6, {{0x7, 0x4, 0x3, 0x25, 0x1c, 0x67, 0x0, 0xf8, 0x4, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}})
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e)
r9 = syz_pidfd_open(r0, 0x0)
setns(r9, 0x24020000)
syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0)

438.162682ms ago: executing program 4 (id=236):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x5)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
shutdown(r4, 0x1)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYRES64, @ANYRESOCT=r2, @ANYBLOB="01402bbd40000000df25130000000e0001006e657464657673496d0000000f0002006e657464657673696d30880500030600110006000000"], 0x4c}}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
pread64(r6, &(0x7f0000000000)=""/253, 0xfd, 0x36)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24a08e8b8fb57200", @ANYRES16=0x0, @ANYBLOB="10002cbd7000ffdbdf254d0000000f00a8007365636f6e646e616d650000"], 0x24}, 0x1, 0x0, 0x0, 0x4045}, 0x40000)
r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0)
sendfile(r5, r7, 0x0, 0x201f00)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r8 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="200025bd7000fcdbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="7500ac009c5d6f9ed059ff4e6f768d24ef393ce928667136af359653bb278f3fe9bde83b8431f28ee9e318bfce45f727cbd839b70f908e9009bbad81e2c56653d53437d379387f15ffb42d6ace7505ba863d34bd23ca72b927c1b066fe0a96f8c8bbfc737b5f65a027fa583e38870da5b0b20758d60e000008001400", @ANYRES32=0x0, @ANYBLOB="7400ac000f93b320325ba920cdd8060072e71cad067839908bf35405483e6a77570b66108679cf05991610e44850393e2877701d36c96a73c6a57fbfdf26841fe64fe628218972c5542f5080875a70fc14a57477225419a01caf8d6725a689b8ea0d8e05bf7502844cb7a76f5f0404310f9e74fc0500e400000000000600b5004d01000005001900000000000500e4000000000006001a0103000000"], 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x20040055)
ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x2)
preadv(r8, &(0x7f0000000680)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1, 0x80000001, 0x3)

0s ago: executing program 1 (id=237):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x6, 0xe8}}}}}]}}]}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101001, 0x200)
write$tun(r2, &(0x7f0000000180)={@val={0x0, 0x886c}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, '\x00'}}}}}}, 0x1d)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe26}}, './file0\x00'})
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x18, 0x12, 0x105, 0x0, 0x25dfdbfe, "", [@proto={0x5, 0x19, 0xff}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c)
r4 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
getdents64(r5, &(0x7f0000001000)=""/164, 0xa4)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100002000100000001000000", @ANYRES32=r7], 0x10, 0xcc040}, 0x26048040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001b236512b345f093fc10cd23cadb9f6fc77df1fb96965fd72e644c47bbadb1fdc94717a64c2a409fa56e18ea5c37eab88d8f471e12f6624ac6e45e38bbf6195149f3eeb09e96eb7899c61afc38dd0c4424d1904787dced461b836ab5eab218864c81d79c3fac04554ea2164ac7af9a19c507b9c178c9dbea4a936d1ffc31f5b008058fba8f96fa65734910c036416a9612c887110a21febfdca59e2bfe58d124f9def31d7ead3f06e6e18f70183d6e4920837bba8d4646ea3993c928b3162fe2621a328f7ba8ae32778fc6949"], 0xfc}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts.
[   61.809484][ T5613] cgroup: Unknown subsys name 'net'
[   61.960152][ T5613] cgroup: Unknown subsys name 'cpuset'
[   61.969016][ T5613] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   63.390848][ T5613] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.881546][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.905556][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.914747][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.922955][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   66.931792][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.931887][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.941063][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   66.947398][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.954716][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   66.961464][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.977875][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.985396][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.986097][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.993425][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   67.002878][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.010100][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   67.016882][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   67.028664][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.036530][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.044465][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   67.047256][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.052558][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.060857][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   67.074528][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.087198][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   68.092601][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.099839][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.107102][ T5646] bridge_slave_0: entered allmulticast mode
[   68.114121][ T5646] bridge_slave_0: entered promiscuous mode
[   68.122816][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.130231][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.137455][ T5643] bridge_slave_0: entered allmulticast mode
[   68.144360][ T5643] bridge_slave_0: entered promiscuous mode
[   68.152049][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.160100][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.168098][ T5644] bridge_slave_0: entered allmulticast mode
[   68.175160][ T5644] bridge_slave_0: entered promiscuous mode
[   68.207769][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.214881][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.222185][ T5646] bridge_slave_1: entered allmulticast mode
[   68.229160][ T5646] bridge_slave_1: entered promiscuous mode
[   68.236170][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.243313][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.250522][ T5643] bridge_slave_1: entered allmulticast mode
[   68.257733][ T5643] bridge_slave_1: entered promiscuous mode
[   68.264492][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.271714][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.279536][ T5644] bridge_slave_1: entered allmulticast mode
[   68.286980][ T5644] bridge_slave_1: entered promiscuous mode
[   68.392544][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.404344][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.416032][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.434362][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.441883][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.449152][ T5647] bridge_slave_0: entered allmulticast mode
[   68.456222][ T5647] bridge_slave_0: entered promiscuous mode
[   68.465395][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.485672][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.496544][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.505861][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.514171][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.521358][ T5645] bridge_slave_0: entered allmulticast mode
[   68.528390][ T5645] bridge_slave_0: entered promiscuous mode
[   68.537307][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.544748][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.552243][ T5647] bridge_slave_1: entered allmulticast mode
[   68.559368][ T5647] bridge_slave_1: entered promiscuous mode
[   68.591535][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.598786][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.605908][ T5645] bridge_slave_1: entered allmulticast mode
[   68.613150][ T5645] bridge_slave_1: entered promiscuous mode
[   68.630772][ T5646] team0: Port device team_slave_0 added
[   68.674495][ T5646] team0: Port device team_slave_1 added
[   68.681844][ T5643] team0: Port device team_slave_0 added
[   68.689355][ T5644] team0: Port device team_slave_0 added
[   68.705995][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.725020][ T5643] team0: Port device team_slave_1 added
[   68.732423][ T5644] team0: Port device team_slave_1 added
[   68.740597][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.752533][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.792190][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.810806][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.817891][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.844056][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.892199][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.899249][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.925216][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.937939][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.944887][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.971161][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.982872][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.989847][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.015756][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.039382][ T5647] team0: Port device team_slave_0 added
[   69.052834][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.060011][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.086190][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.097268][ T5640] Bluetooth: hci4: command tx timeout
[   69.105792][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.112914][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.139228][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.151976][ T5645] team0: Port device team_slave_0 added
[   69.159772][ T5647] team0: Port device team_slave_1 added
[   69.177694][ T5626] Bluetooth: hci1: command tx timeout
[   69.177707][ T5633] Bluetooth: hci0: command tx timeout
[   69.177936][ T5633] Bluetooth: hci2: command tx timeout
[   69.183784][ T5640] Bluetooth: hci3: command tx timeout
[   69.198568][ T5645] team0: Port device team_slave_1 added
[   69.224208][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.231242][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.257267][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.306341][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.313398][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.339557][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.364269][ T5646] hsr_slave_0: entered promiscuous mode
[   69.370668][ T5646] hsr_slave_1: entered promiscuous mode
[   69.401352][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.408334][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.434278][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.447039][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.453991][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.479902][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.496389][ T5644] hsr_slave_0: entered promiscuous mode
[   69.502656][ T5644] hsr_slave_1: entered promiscuous mode
[   69.509178][ T5644] debugfs: 'hsr0' already exists in 'hsr'
[   69.514958][ T5644] Cannot create hsr debugfs directory
[   69.525355][ T5643] hsr_slave_0: entered promiscuous mode
[   69.531589][ T5643] hsr_slave_1: entered promiscuous mode
[   69.537855][ T5643] debugfs: 'hsr0' already exists in 'hsr'
[   69.544042][ T5643] Cannot create hsr debugfs directory
[   69.707187][ T5647] hsr_slave_0: entered promiscuous mode
[   69.713422][ T5647] hsr_slave_1: entered promiscuous mode
[   69.719582][ T5647] debugfs: 'hsr0' already exists in 'hsr'
[   69.725326][ T5647] Cannot create hsr debugfs directory
[   69.742423][ T5645] hsr_slave_0: entered promiscuous mode
[   69.748718][ T5645] hsr_slave_1: entered promiscuous mode
[   69.754669][ T5645] debugfs: 'hsr0' already exists in 'hsr'
[   69.760447][ T5645] Cannot create hsr debugfs directory
[   70.168864][ T5646] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.180995][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.194512][ T5646] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.204951][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.213088][ T5646] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.224428][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.232397][ T5646] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.241783][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.310338][ T5643] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   70.323492][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.333016][ T5643] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   70.343026][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.351308][ T5643] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   70.362033][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.374587][ T5643] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   70.384150][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.460029][ T5644] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.471585][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.480399][ T5644] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.489928][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.498831][ T5644] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.508947][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.517140][ T5644] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.527069][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.634911][ T5645] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   70.645006][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.653867][ T5645] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   70.664357][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.672185][ T5645] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   70.681680][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.689640][ T5645] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   70.700222][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.716191][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.799803][ T5647] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.810436][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.819336][ T5647] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.829376][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.849313][ T5646] 8021q: adding VLAN 0 to HW filter on device team0
[   70.858528][ T5647] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.867999][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.882108][ T5647] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.892659][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.914288][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.921754][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.954796][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.976546][ T3355] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.983685][ T3355] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.039074][ T5643] 8021q: adding VLAN 0 to HW filter on device team0
[   71.070696][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.080590][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.087783][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.124489][  T675] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.131619][  T675] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.178788][ T5640] Bluetooth: hci4: command tx timeout
[   71.193729][ T5644] 8021q: adding VLAN 0 to HW filter on device team0
[   71.230029][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.239780][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.246951][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.257200][ T5640] Bluetooth: hci2: command tx timeout
[   71.257282][ T5626] Bluetooth: hci0: command tx timeout
[   71.262630][ T5633] Bluetooth: hci3: command tx timeout
[   71.262653][ T5633] Bluetooth: hci1: command tx timeout
[   71.279353][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.311875][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.319000][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.342893][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[   71.343309][ T5647] 8021q: adding VLAN 0 to HW filter on device team0
[   71.352516][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[   71.374856][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.381977][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.391076][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.398178][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.422570][ T5645] 8021q: adding VLAN 0 to HW filter on device team0
[   71.461452][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.468566][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.503608][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.510808][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.539584][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.552353][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.671250][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.697479][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.731140][ T5646] veth0_vlan: entered promiscuous mode
[   71.753102][ T5643] veth0_vlan: entered promiscuous mode
[   71.792935][ T5646] veth1_vlan: entered promiscuous mode
[   71.807801][ T5643] veth1_vlan: entered promiscuous mode
[   71.828668][ T5647] veth0_vlan: entered promiscuous mode
[   71.853401][ T5644] veth0_vlan: entered promiscuous mode
[   71.862909][ T5647] veth1_vlan: entered promiscuous mode
[   71.877178][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.903643][ T5644] veth1_vlan: entered promiscuous mode
[   71.941098][ T5646] veth0_macvtap: entered promiscuous mode
[   71.951990][ T5646] veth1_macvtap: entered promiscuous mode
[   71.960123][ T5643] veth0_macvtap: entered promiscuous mode
[   71.991586][ T5643] veth1_macvtap: entered promiscuous mode
[   72.015869][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.031015][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.045405][ T5647] veth0_macvtap: entered promiscuous mode
[   72.074508][ T5647] veth1_macvtap: entered promiscuous mode
[   72.088756][ T5644] veth0_macvtap: entered promiscuous mode
[   72.100609][  T675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.110870][  T675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.123183][ T5645] veth0_vlan: entered promiscuous mode
[   72.131889][  T675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.141403][  T675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.155853][ T5644] veth1_macvtap: entered promiscuous mode
[   72.164710][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.194245][ T5645] veth1_vlan: entered promiscuous mode
[   72.204852][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.244033][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.267892][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.281553][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.294235][ T1158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.321326][ T1158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.330390][ T1158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.351755][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.363085][ T1158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.373087][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.391021][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.399290][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.414321][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.423854][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.452371][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.462021][   T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.488336][   T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.497482][   T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.532320][   T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.534046][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.549507][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.607178][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.607480][ T5645] veth0_macvtap: entered promiscuous mode
[   72.622101][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.670026][ T5646] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   72.680096][ T5645] veth1_macvtap: entered promiscuous mode
[   72.741138][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.757756][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.840630][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.854406][ T1609] IPVS: starting estimator thread 0...
[   72.863009][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.870430][ T5722] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   72.889045][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.908020][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.938001][   T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.966296][   T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.976265][   T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.985161][ T5723] IPVS: using max 37 ests per chain, 88800 per kthread
[   73.011931][ T3355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.021388][ T3355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.030907][   T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.134540][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.162327][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.257999][ T5626] Bluetooth: hci4: command tx timeout
[   73.309765][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.337143][ T5626] Bluetooth: hci2: command tx timeout
[   73.338396][ T4947] Bluetooth: hci3: command tx timeout
[   73.346850][ T5626] Bluetooth: hci0: command tx timeout
[   73.351167][ T5640] Bluetooth: hci1: command tx timeout
[   73.361332][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.529920][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.556420][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.683897][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.710707][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.854636][ T5739] loop5: detected capacity change from 0 to 7
[   73.908522][ T5739] Dev loop5: unable to read RDB block 7
[   73.915411][ T5739]  loop5: AHDI p1 p2
[   73.936436][ T5739] loop5: partition table partially beyond EOD, truncated
[   73.971411][ T5739] loop5: p1 size 150995456 extends beyond EOD, truncated
[   74.178632][ T5637] udevd[5637]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   74.507008][ T5720] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   74.589147][ T5763] x_tables: duplicate underflow at hook 3
[   74.606870][ T5704] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   74.674196][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   74.687223][ T5720] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   74.700531][ T5765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'.
[   74.712385][ T5720] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   74.721722][ T5720] usb 3-1: Manufacturer: syz
[   74.731467][ T5765] bridge_slave_1: default FDB implementation only supports local addresses
[   74.739014][ T5720] usb 3-1: config 0 descriptor??
[   74.768642][ T5704] usb 5-1: Using ep0 maxpacket: 32
[   74.784342][ T5704] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[   74.801722][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.830749][ T5704] usb 5-1: config 0 descriptor??
[   74.853089][ T5704] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[   75.117778][   T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   75.289621][   T24] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[   75.316894][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.331039][   T24] usb 1-1: config 0 descriptor??
[   75.337409][ T5640] Bluetooth: hci4: command tx timeout
[   75.372676][   T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[   75.388764][ T5704] gspca_vc032x: reg_r err -110
[   75.404386][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.417136][ T5640] Bluetooth: hci1: command tx timeout
[   75.418705][ T5626] Bluetooth: hci3: command tx timeout
[   75.422635][ T4947] Bluetooth: hci0: command tx timeout
[   75.428275][ T5626] Bluetooth: hci2: command tx timeout
[   75.454594][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.473766][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.494102][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.507444][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.519947][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.528777][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.534693][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.540863][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.546248][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.553598][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.568980][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.569031][   T24] gp8psk: usb in 128 operation failed.
[   75.580487][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.580509][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.580519][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.580528][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.580537][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.580546][ T5704] gspca_vc032x: I2c Bus Busy Wait 00
[   75.580556][ T5704] gspca_vc032x: Unknown sensor...
[   75.580634][ T5704] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[   75.644918][   T24] gp8psk: usb in 146 operation failed.
[   75.657835][   T24] gp8psk: failed to get FW version
[   75.669679][   T24] gp8psk: usb in 149 operation failed.
[   75.682793][   T24] gp8psk: failed to get FPGA version
[   75.697966][   T24] gp8psk: usb in 138 operation failed.
[   75.708526][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   75.722258][   T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[   75.975390][ T5786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'.
[   76.066093][   T24] usb 1-1: USB disconnect, device number 2
[   77.019410][ T5809] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   77.026194][ T5809] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   77.042104][ T5809] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   77.051882][ T5809] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   77.058624][ T5809] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   77.065700][ T5809] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   77.073765][ T5809] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   77.079836][ T5809] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   77.087386][ T5809] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   77.095220][ T5809] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   77.101306][ T5809] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   77.109318][ T5809] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   77.120001][ T5809] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   77.126858][ T5809] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   77.136372][ T5809] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   77.428674][   T10] usb 3-1: USB disconnect, device number 2
[   77.471683][ T5684] usb 5-1: USB disconnect, device number 2
[   77.626958][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'.
[   77.779568][ T5852] binder: 5850:5852 ioctl c0306201 80000280 returned -14
[   77.863040][ T5863] FAULT_INJECTION: forcing a failure.
[   77.863040][ T5863] name failslab, interval 1, probability 0, space 0, times 1
[   77.876747][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: syz.3.30 Not tainted syzkaller #0 PREEMPT(full) 
[   77.876772][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   77.876791][ T5863] Call Trace:
[   77.876800][ T5863]  <TASK>
[   77.876807][ T5863]  dump_stack_lvl+0xe8/0x150
[   77.876836][ T5863]  should_fail_ex+0x412/0x560
[   77.876863][ T5863]  should_failslab+0xa8/0x100
[   77.876891][ T5863]  __kmalloc_cache_noprof+0x88/0x660
[   77.876914][ T5863]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[   77.876932][ T5863]  ? sctp_add_bind_addr+0x8c/0x370
[   77.876952][ T5863]  sctp_add_bind_addr+0x8c/0x370
[   77.876977][ T5863]  sctp_copy_local_addr_list+0x314/0x4f0
[   77.877009][ T5863]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[   77.877036][ T5863]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[   77.877068][ T5863]  ? sctp_v4_is_any+0x35/0x60
[   77.877086][ T5863]  ? sctp_copy_one_addr+0x93/0x360
[   77.877126][ T5863]  sctp_bind_addr_copy+0xb3/0x3c0
[   77.877155][ T5863]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[   77.877184][ T5863]  sctp_connect_new_asoc+0x2ff/0x6b0
[   77.877210][ T5863]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[   77.877233][ T5863]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[   77.877254][ T5863]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[   77.877272][ T5863]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[   77.877296][ T5863]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[   77.877322][ T5863]  ? security_sctp_bind_connect+0x7e/0x2c0
[   77.877345][ T5863]  sctp_sendmsg+0x1576/0x2c50
[   77.877381][ T5863]  ? __pfx_sctp_sendmsg+0x10/0x10
[   77.877406][ T5863]  ? aa_sk_perm+0x6d5/0x900
[   77.877428][ T5863]  ? __might_fault+0xaf/0x130
[   77.877457][ T5863]  ? __pfx_aa_sk_perm+0x10/0x10
[   77.877483][ T5863]  ? sock_rps_record_flow+0x19/0x350
[   77.877501][ T5863]  ? __pfx_inet_sendmsg+0x10/0x10
[   77.877520][ T5863]  ? inet_sendmsg+0x2f4/0x370
[   77.877538][ T5863]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   77.877559][ T5863]  ? __pfx_inet_sendmsg+0x10/0x10
[   77.877578][ T5863]  __sys_sendto+0x5de/0x710
[   77.877603][ T5863]  ? __pfx___sys_sendto+0x10/0x10
[   77.877638][ T5863]  ? fput+0xa0/0xd0
[   77.877654][ T5863]  ? ksys_write+0x242/0x270
[   77.877677][ T5863]  __ia32_sys_sendto+0xdd/0x100
[   77.877698][ T5863]  __do_fast_syscall_32+0x229/0x6e0
[   77.877713][ T5863]  ? do_fast_syscall_32+0x33/0x70
[   77.877726][ T5863]  ? lockdep_hardirqs_on+0x7a/0x110
[   77.877738][ T5863]  ? asm_int80_emulation+0x1a/0x20
[   77.877751][ T5863]  ? do_int80_emulation+0x286/0x530
[   77.877764][ T5863]  ? trace_irq_disable+0x3b/0x140
[   77.877787][ T5863]  do_fast_syscall_32+0x33/0x70
[   77.877801][ T5863]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   77.877817][ T5863] RIP: 0023:0xf707f01c
[   77.877840][ T5863] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[   77.877851][ T5863] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[   77.877867][ T5863] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0
[   77.877877][ T5863] RDX: 0000000000000001 RSI: 00000000040408a1 RDI: 0000000080000240
[   77.877886][ T5863] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000
[   77.877894][ T5863] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   77.877903][ T5863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   77.877926][ T5863]  </TASK>
[   78.217691][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   78.301613][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout
[   78.401225][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   78.410454][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.433720][   T10] usb 3-1: config 0 descriptor??
[   78.473739][   T10] gspca_main: STV06xx-2.14.0 probing 046d:0870
[   78.622881][ T5876] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[   78.633529][ T5875] --map-set only usable from mangle table
[   78.660475][ T5849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.692172][ T5849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.764275][ T5878] vcan0: tx address claim with dest, not broadcast
[   79.097894][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout
[   79.104315][ T4947] Bluetooth: hci1: command 0x0c1a tx timeout
[   79.110716][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout
[   79.180346][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[   79.249066][   T10] usb 3-1: USB disconnect, device number 3
[   79.457512][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'.
[   79.470052][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'.
[   79.490149][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'.
[   79.566472][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'.
[   79.587327][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'.
[   79.811028][ T5894] block device autoloading is deprecated and will be removed.
[   79.817545][ T5720] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   79.996724][ T5720] usb 3-1: Using ep0 maxpacket: 32
[   80.005710][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.033786][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.045533][ T5901] netlink: 'syz.3.38': attribute type 4 has an invalid length.
[   80.074261][ T5720] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   80.104271][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.129976][ T5901] netlink: 'syz.3.38': attribute type 4 has an invalid length.
[   80.177673][ T5720] usb 3-1: config 0 descriptor??
[   80.197619][ T5720] hub 3-1:0.0: USB hub found
[   80.249017][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'.
[   80.387789][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout
[   80.405227][ T5720] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   80.858426][ T5720] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0
[   80.959145][ T5720] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0
[   81.072266][ T5720] usb 3-1: USB disconnect, device number 4
[   81.176689][ T4947] Bluetooth: hci1: command 0x0c1a tx timeout
[   81.183172][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout
[   81.189329][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout
[   81.217390][ T5933] fido_id[5933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   81.258826][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[   81.390682][ T5942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.50'.
[   81.423454][ T5942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.431981][ T5942] IPv6: NLM_F_CREATE should be set when creating new route
[   81.617779][ T5720] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   81.632126][   T46] cfg80211: failed to load regulatory.db
[   81.797418][ T5720] usb 3-1: Using ep0 maxpacket: 32
[   81.823258][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.864736][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.906096][ T5720] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   81.958011][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.005745][ T5720] usb 3-1: config 0 descriptor??
[   82.032920][ T5720] hub 3-1:0.0: USB hub found
[   82.078956][ T5955] FAULT_INJECTION: forcing a failure.
[   82.078956][ T5955] name failslab, interval 1, probability 0, space 0, times 0
[   82.174002][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.3.51 Not tainted syzkaller #0 PREEMPT(full) 
[   82.174025][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   82.174031][ T5955] Call Trace:
[   82.174036][ T5955]  <TASK>
[   82.174041][ T5955]  dump_stack_lvl+0xe8/0x150
[   82.174064][ T5955]  should_fail_ex+0x412/0x560
[   82.174081][ T5955]  should_failslab+0xa8/0x100
[   82.174099][ T5955]  __kmalloc_noprof+0xe8/0x760
[   82.174114][ T5955]  ? tomoyo_encode+0x28b/0x550
[   82.174131][ T5955]  tomoyo_encode+0x28b/0x550
[   82.174148][ T5955]  tomoyo_realpath_from_path+0x58d/0x5d0
[   82.174181][ T5955]  ? tomoyo_path_number_perm+0x219/0x630
[   82.174203][ T5955]  tomoyo_path_number_perm+0x246/0x630
[   82.174227][ T5955]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   82.174247][ T5955]  ? __lock_acquire+0x6b5/0x2cf0
[   82.174276][ T5955]  ? __fget_files+0x2a/0x420
[   82.174291][ T5955]  ? __fget_files+0x3a0/0x420
[   82.174302][ T5955]  ? __fget_files+0x2a/0x420
[   82.174316][ T5955]  security_file_ioctl_compat+0xc3/0x2a0
[   82.174329][ T5955]  __ia32_compat_sys_ioctl+0x139/0x950
[   82.174353][ T5955]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[   82.174383][ T5955]  ? __fget_files+0x3a0/0x420
[   82.174409][ T5955]  ? fput+0xa0/0xd0
[   82.174431][ T5955]  ? ksys_write+0x242/0x270
[   82.174448][ T5955]  ? __irq_exit_rcu+0xca/0x220
[   82.174465][ T5955]  __do_fast_syscall_32+0x229/0x6e0
[   82.174476][ T5955]  ? do_fast_syscall_32+0x33/0x70
[   82.174486][ T5955]  ? lockdep_hardirqs_on+0x7a/0x110
[   82.174494][ T5955]  ? asm_int80_emulation+0x1a/0x20
[   82.174504][ T5955]  ? do_int80_emulation+0x286/0x530
[   82.174516][ T5955]  do_fast_syscall_32+0x33/0x70
[   82.174526][ T5955]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   82.174538][ T5955] RIP: 0023:0xf707f01c
[   82.174549][ T5955] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[   82.174557][ T5955] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[   82.174568][ T5955] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007ab
[   82.174575][ T5955] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000
[   82.174580][ T5955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   82.174586][ T5955] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   82.174591][ T5955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   82.174605][ T5955]  </TASK>
[   82.566149][ T5955] ERROR: Out of memory at tomoyo_realpath_from_path.
[   82.588590][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout
[   82.645328][ T5720] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[   82.698328][ T5720] usbhid 3-1:0.0: can't add hid device: -71
[   82.704363][ T5720] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   82.738394][ T5720] usb 3-1: USB disconnect, device number 5
[   82.745240][ T5958] netlink: 'syz.1.52': attribute type 4 has an invalid length.
[   82.777972][ T5958] netlink: 'syz.1.52': attribute type 4 has an invalid length.
[   83.222646][ T5973] FAULT_INJECTION: forcing a failure.
[   83.222646][ T5973] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   83.249686][ T5973] CPU: 1 UID: 0 PID: 5973 Comm: syz.1.55 Not tainted syzkaller #0 PREEMPT(full) 
[   83.249711][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   83.249722][ T5973] Call Trace:
[   83.249729][ T5973]  <TASK>
[   83.249737][ T5973]  dump_stack_lvl+0xe8/0x150
[   83.249764][ T5973]  should_fail_ex+0x412/0x560
[   83.249794][ T5973]  _copy_from_user+0x2d/0xb0
[   83.249822][ T5973]  input_event_from_user+0x100/0x290
[   83.249844][ T5973]  ? __pfx_input_event_from_user+0x10/0x10
[   83.249876][ T5973]  evdev_write+0x2c7/0x4c0
[   83.249895][ T5973]  ? __lock_acquire+0x6b5/0x2cf0
[   83.249919][ T5973]  ? __pfx_evdev_write+0x10/0x10
[   83.249940][ T5973]  ? bpf_lsm_file_permission+0x9/0x20
[   83.249966][ T5973]  ? security_file_permission+0x75/0x260
[   83.249988][ T5973]  ? rw_verify_area+0x255/0x4d0
[   83.250014][ T5973]  ? __pfx_evdev_write+0x10/0x10
[   83.250033][ T5973]  vfs_write+0x29a/0xb90
[   83.250066][ T5973]  ? __pfx_vfs_write+0x10/0x10
[   83.250100][ T5973]  ? __fget_files+0x2a/0x420
[   83.250125][ T5973]  ? __fget_files+0x2a/0x420
[   83.250145][ T5973]  ? __fget_files+0x3a0/0x420
[   83.250166][ T5973]  ? __fget_files+0x2a/0x420
[   83.250196][ T5973]  ksys_write+0x150/0x270
[   83.250225][ T5973]  ? __pfx_ksys_write+0x10/0x10
[   83.250258][ T5973]  __do_fast_syscall_32+0x229/0x6e0
[   83.250278][ T5973]  ? do_fast_syscall_32+0x33/0x70
[   83.250296][ T5973]  ? lockdep_hardirqs_on+0x7a/0x110
[   83.250312][ T5973]  ? asm_int80_emulation+0x1a/0x20
[   83.250330][ T5973]  ? do_int80_emulation+0x286/0x530
[   83.250347][ T5973]  ? trace_irq_disable+0x3b/0x140
[   83.250377][ T5973]  do_fast_syscall_32+0x33/0x70
[   83.250397][ T5973]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   83.250419][ T5973] RIP: 0023:0xf705f01c
[   83.250435][ T5973] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[   83.250450][ T5973] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[   83.250468][ T5973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[   83.250480][ T5973] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000
[   83.250490][ T5973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   83.250499][ T5973] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   83.250510][ T5973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   83.250536][ T5973]  </TASK>
[   83.559165][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout
[   83.565232][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout
[   83.571314][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout
[   83.577446][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[   83.647417][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   83.682678][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.60'.
[   83.774482][ T5984] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20000
[   83.807085][    T9] usb 5-1: Using ep0 maxpacket: 16
[   83.814016][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   83.839080][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   83.848479][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.860881][    T9] usb 5-1: Product: syz
[   83.869062][    T9] usb 5-1: Manufacturer: syz
[   83.877102][    T9] usb 5-1: SerialNumber: syz
[   83.894466][    T9] usb 5-1: config 0 descriptor??
[   83.928177][ T5986] syzkaller0: entered promiscuous mode
[   83.947922][ T5986] syzkaller0: entered allmulticast mode
[   83.993830][ T5986] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) !
[   84.083928][ T5991] netlink: 'syz.2.63': attribute type 17 has an invalid length.
[   84.145147][    T9] usb 5-1: USB disconnect, device number 3
[   84.276215][ T5998] syzkaller0: entered promiscuous mode
[   84.895047][ T6013] syz.4.69 uses obsolete (PF_INET,SOCK_PACKET)
[   85.095912][ T6016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'.
[   85.106744][   T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.238876][   T29] audit: type=1326 audit(1779639184.167:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.71" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa601c code=0x7ffc0000
[   85.246924][ T6016] sctp: [Deprecated]: syz.2.71 (pid 6016) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.246924][ T6016] Use struct sctp_sack_info instead
[   85.264677][   T29] audit: type=1326 audit(1779639184.177:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.71" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa601c code=0x7ffc0000
[   85.308790][   T46] usb 4-1: Using ep0 maxpacket: 8
[   85.324108][   T46] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[   85.332758][   T46] usb 4-1: config 0 has no interface number 0
[   85.339208][   T46] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   85.351624][   T46] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   85.353158][   T29] audit: type=1326 audit(1779639184.177:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.71" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa601c code=0x7ffc0000
[   85.363721][   T46] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 120, changing to 10
[   85.387458][   T29] audit: type=1326 audit(1779639184.177:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.71" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa601c code=0x7ffc0000
[   85.400855][   T46] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 8312, setting to 1024
[   85.423420][   T29] audit: type=1326 audit(1779639184.177:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.71" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa601c code=0x7ffc0000
[   85.439669][   T46] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   85.479173][   T29] audit: type=1326 audit(1779639184.177:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.71" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa601c code=0x7ffc0000
[   85.482145][   T46] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   85.542115][   T29] audit: type=1326 audit(1779639184.177:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.71" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa601c code=0x7ffc0000
[   85.553392][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.605810][   T29] audit: type=1326 audit(1779639184.177:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.71" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa601c code=0x7ffc0000
[   85.610177][   T46] usb 4-1: config 0 descriptor??
[   85.630701][   T29] audit: type=1326 audit(1779639184.177:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.71" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa601c code=0x7ffc0000
[   85.660202][   T29] audit: type=1326 audit(1779639184.177:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.71" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa601c code=0x7ffc0000
[   85.673454][   T46] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   85.912357][ T6021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.72'.
[   86.771629][ T6031] bond0: (slave bond_slave_1): Releasing backup interface
[   86.795270][ T6037] FAULT_INJECTION: forcing a failure.
[   86.795270][ T6037] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   86.855978][ T6037] CPU: 0 UID: 0 PID: 6037 Comm: syz.1.77 Not tainted syzkaller #0 PREEMPT(full) 
[   86.856004][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   86.856014][ T6037] Call Trace:
[   86.856021][ T6037]  <TASK>
[   86.856029][ T6037]  dump_stack_lvl+0xe8/0x150
[   86.856055][ T6037]  should_fail_ex+0x412/0x560
[   86.856083][ T6037]  strncpy_from_user+0x36/0x2b0
[   86.856108][ T6037]  do_getname+0x77/0x250
[   86.856131][ T6037]  path_setxattrat+0x32d/0x440
[   86.856166][ T6037]  ? __pfx_path_setxattrat+0x10/0x10
[   86.856214][ T6037]  ? fput+0xa0/0xd0
[   86.856234][ T6037]  ? ksys_write+0x242/0x270
[   86.856265][ T6037]  __ia32_sys_setxattr+0xbc/0xe0
[   86.856292][ T6037]  __do_fast_syscall_32+0x229/0x6e0
[   86.856312][ T6037]  ? do_fast_syscall_32+0x33/0x70
[   86.856329][ T6037]  ? lockdep_hardirqs_on+0x7a/0x110
[   86.856346][ T6037]  ? asm_int80_emulation+0x1a/0x20
[   86.856362][ T6037]  ? do_int80_emulation+0x286/0x530
[   86.856380][ T6037]  ? trace_irq_disable+0x3b/0x140
[   86.856410][ T6037]  do_fast_syscall_32+0x33/0x70
[   86.856429][ T6037]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   86.856451][ T6037] RIP: 0023:0xf705f01c
[   86.856468][ T6037] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[   86.856482][ T6037] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000e2
[   86.856501][ T6037] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000080000000
[   86.856513][ T6037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[   86.856524][ T6037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   86.856534][ T6037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   86.856544][ T6037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   86.856573][ T6037]  </TASK>
[   87.146274][ T6041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.156210][ T6041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.389118][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[   87.406931][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   87.436989][ T6050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.82'.
[   87.461440][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'.
[   87.577647][   T10] usb 5-1: Using ep0 maxpacket: 32
[   87.594502][   T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[   87.614429][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.638653][   T10] usb 5-1: Product: syz
[   87.642931][   T10] usb 5-1: Manufacturer: syz
[   87.647642][   T10] usb 5-1: SerialNumber: syz
[   87.674478][   T10] usb 5-1: config 0 descriptor??
[   87.692403][ T6053] FAULT_INJECTION: forcing a failure.
[   87.692403][ T6053] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   87.734076][ T6053] CPU: 1 UID: 0 PID: 6053 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(full) 
[   87.734102][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   87.734113][ T6053] Call Trace:
[   87.734120][ T6053]  <TASK>
[   87.734128][ T6053]  dump_stack_lvl+0xe8/0x150
[   87.734157][ T6053]  should_fail_ex+0x412/0x560
[   87.734187][ T6053]  _copy_to_user+0x31/0xb0
[   87.734217][ T6053]  simple_read_from_buffer+0xe1/0x170
[   87.734245][ T6053]  proc_fail_nth_read+0x1bb/0x230
[   87.734271][ T6053]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   87.734298][ T6053]  ? rw_verify_area+0x2a6/0x4d0
[   87.734322][ T6053]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   87.734347][ T6053]  vfs_read+0x20c/0xa70
[   87.734376][ T6053]  ? __pfx___mutex_lock+0x10/0x10
[   87.734397][ T6053]  ? __pfx_vfs_read+0x10/0x10
[   87.734423][ T6053]  ? __fget_files+0x2a/0x420
[   87.734448][ T6053]  ? __fget_files+0x3a0/0x420
[   87.734468][ T6053]  ? __fget_files+0x2a/0x420
[   87.734497][ T6053]  ksys_read+0x150/0x270
[   87.734524][ T6053]  ? __pfx_ksys_read+0x10/0x10
[   87.734554][ T6053]  ? asm_int80_emulation+0x1a/0x20
[   87.734574][ T6053]  do_int80_emulation+0x181/0x530
[   87.734591][ T6053]  ? trace_irq_disable+0x3b/0x140
[   87.734616][ T6053]  ? asm_int80_emulation+0x1a/0x20
[   87.734632][ T6053]  ? clear_bhb_loop+0x40/0x90
[   87.734648][ T6053]  ? clear_bhb_loop+0x40/0x90
[   87.734667][ T6053]  asm_int80_emulation+0x1a/0x20
[   87.734684][ T6053] RIP: 0023:0xf71a61ab
[   87.734701][ T6053] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[   87.734715][ T6053] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[   87.734733][ T6053] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f54665d0
[   87.734744][ T6053] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[   87.734752][ T6053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   87.734762][ T6053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   87.734779][ T6053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   87.734806][ T6053]  </TASK>
[   88.083180][ T5720] usb 4-1: USB disconnect, device number 2
[   88.101676][ T5720] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[   88.214246][   T10] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[   88.272860][ T6064] FAULT_INJECTION: forcing a failure.
[   88.272860][ T6064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   88.288501][   T10] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[   88.341166][ T6064] CPU: 1 UID: 0 PID: 6064 Comm: syz.3.86 Not tainted syzkaller #0 PREEMPT(full) 
[   88.341190][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   88.341199][ T6064] Call Trace:
[   88.341206][ T6064]  <TASK>
[   88.341213][ T6064]  dump_stack_lvl+0xe8/0x150
[   88.341237][ T6064]  should_fail_ex+0x412/0x560
[   88.341264][ T6064]  _copy_from_user+0x2d/0xb0
[   88.341290][ T6064]  move_addr_to_kernel+0x7e/0x160
[   88.341314][ T6064]  get_compat_msghdr+0x3d8/0x4c0
[   88.341338][ T6064]  ? __pfx_get_compat_msghdr+0x10/0x10
[   88.341360][ T6064]  ? kfree+0x4d/0x640
[   88.341387][ T6064]  ___sys_sendmsg+0x201/0x360
[   88.341415][ T6064]  ? __lock_acquire+0x6b5/0x2cf0
[   88.341439][ T6064]  ? __pfx____sys_sendmsg+0x10/0x10
[   88.341471][ T6064]  ? kstrtoull+0x12f/0x1d0
[   88.341529][ T6064]  __sys_sendmmsg+0x2e7/0x4e0
[   88.341552][ T6064]  ? __pfx___sys_sendmmsg+0x10/0x10
[   88.341595][ T6064]  ? fput+0xa0/0xd0
[   88.341617][ T6064]  ? ksys_write+0x242/0x270
[   88.341650][ T6064]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[   88.341671][ T6064]  __do_fast_syscall_32+0x229/0x6e0
[   88.341692][ T6064]  ? do_fast_syscall_32+0x33/0x70
[   88.341709][ T6064]  ? lockdep_hardirqs_on+0x7a/0x110
[   88.341725][ T6064]  ? asm_int80_emulation+0x1a/0x20
[   88.341750][ T6064]  ? do_int80_emulation+0x286/0x530
[   88.341766][ T6064]  ? trace_irq_disable+0x3b/0x140
[   88.341796][ T6064]  do_fast_syscall_32+0x33/0x70
[   88.341815][ T6064]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   88.341837][ T6064] RIP: 0023:0xf707f01c
[   88.341854][ T6064] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[   88.341868][ T6064] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[   88.341887][ T6064] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[   88.341900][ T6064] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000
[   88.341910][ T6064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   88.341920][ T6064] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   88.341930][ T6064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   88.341956][ T6064]  </TASK>
[   88.827894][   T10] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71
[   88.873608][   T10] usb 5-1: USB disconnect, device number 4
[   89.078143][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   89.120705][ T6086] Invalid logical block size (134217728)
[   89.246796][    T9] usb 2-1: Using ep0 maxpacket: 32
[   89.266473][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   89.313691][    T9] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.40
[   89.327587][ T6084] netlink: 188 bytes leftover after parsing attributes in process `syz.4.87'.
[   89.327780][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.374952][    T9] usb 2-1: Product: Ꚓ芿įង崱茴鴱ﾥȥ꘿큗ܴꨢ淣㫶擎僮㽅聾잼ꤙ㙏詓҈㎝ﺊ뗉쮪끕嬪鐑哋薲ꂐ旨ᰜ쬩햍⸷垷⣣踱볜ɨ鞲≝袯б㌯ꊎ㝞㑸氓蓓၄籭趂壤䏌崩Ἃ衋䝙涜憎痃꜎夑ࣻ轓켼
[   89.491502][    T9] usb 2-1: Manufacturer: ﳿ
[   89.503435][    T9] usb 2-1: SerialNumber: ࠝ
[   89.510331][ T6091] netlink: 'syz.0.93': attribute type 6 has an invalid length.
[   89.546680][ T5720] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   89.716710][ T5720] usb 3-1: Using ep0 maxpacket: 16
[   89.742304][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.794286][ T5720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   89.831114][ T5720] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[   89.862693][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.873211][    T9] usbhid 2-1:1.0: can't add hid device: -71
[   89.903394][    T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[   89.906981][   T46] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   89.927577][ T5720] usb 3-1: config 0 descriptor??
[   89.964233][    T9] usb 2-1: USB disconnect, device number 2
[   90.097271][   T46] usb 1-1: Using ep0 maxpacket: 16
[   90.124421][   T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.154988][   T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 4
[   90.183697][   T46] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   90.219214][   T46] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[   90.255998][   T46] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[   90.273765][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.310108][   T46] usb 1-1: Product: syz
[   90.350119][   T46] usb 1-1: Manufacturer: syz
[   90.372873][   T46] usb 1-1: SerialNumber: syz
[   90.397416][ T5720] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[   90.407902][   T46] usb 1-1: config 0 descriptor??
[   90.424007][ T5720] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[   90.441498][   T46] usb 1-1: selecting invalid altsetting 1
[   90.456046][ T5720] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[   90.468394][   T46] usb 1-1: Can not set alternate setting to 1, error: -22
[   90.478692][ T5720] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[   90.486245][   T46] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -22
[   90.498399][ T5720] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[   90.527878][ T5720] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[   90.550723][ T5720] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[   90.589842][ T5720] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[   90.609791][   T46] IPVS: starting estimator thread 0...
[   90.620368][ T5720] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[   90.645833][ T5720] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[   90.670571][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.687634][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.705995][ T5720] zeroplus 0003:0C12:0030.0002: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.2-1/input0
[   90.724809][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.736092][ T5720] zeroplus 0003:0C12:0030.0002: no inputs found
[   90.742624][ T6105] IPVS: using max 33 ests per chain, 79200 per kthread
[   90.760226][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.782815][ T6107] netlink: 'syz.4.98': attribute type 4 has an invalid length.
[   90.830030][ T5720] usb 1-1: USB disconnect, device number 3
[   90.943285][ T6107] netlink: 'syz.4.98': attribute type 4 has an invalid length.
[   91.200449][    T9] usb 3-1: USB disconnect, device number 6
[   91.434781][ T6118] syz.4.101 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   91.476209][ T6118] Zero length message leads to an empty skb
[   91.551256][ T6120] usb usb8: usbfs: process 6120 (syz.0.102) did not claim interface 0 before use
[   91.713529][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'.
[   91.736682][ T5720] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   91.785666][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'.
[   92.187147][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   92.360471][    T9] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[   92.384397][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.418137][    T9] usb 1-1: Product: syz
[   92.430798][    T9] usb 1-1: Manufacturer: syz
[   92.449888][    T9] usb 1-1: SerialNumber: syz
[   92.463277][ T6140] fuse: Bad value for 'fd'
[   92.478202][    T9] usb 1-1: config 0 descriptor??
[   92.495903][    T9] gspca_main: sq905c-2.14.0 probing 2770:9052
[   92.916291][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'.
[   92.937294][ T6147] process 'syz.1.111' launched '/dev/fd/4' with NULL argv: empty string added
[   92.979080][ T6147] netlink: 72 bytes leftover after parsing attributes in process `syz.1.111'.
[   93.015614][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'.
[   93.146787][ T5720] usb 5-1: device descriptor read/64, error -71
[   93.200290][   T29] kauditd_printk_skb: 47 callbacks suppressed
[   93.200307][   T29] audit: type=1326 audit(1779639192.127:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.0.105" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f9601c code=0x0
[   93.327979][ T5684] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   93.387345][ T5720] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   93.470295][    T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[   93.478278][    T9] sq905c 1-1:0.0: probe with driver sq905c failed with error -110
[   93.496711][ T5684] usb 3-1: Using ep0 maxpacket: 16
[   93.504549][ T5684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.518459][ T5684] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   93.545461][ T5684] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[   93.557451][ T5720] usb 5-1: Using ep0 maxpacket: 16
[   93.564890][ T5684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.567783][ T5720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.596786][ T5684] usb 3-1: config 0 descriptor??
[   93.620167][ T5720] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   93.647058][ T5720] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[   93.662765][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.706254][ T5720] usb 5-1: config 0 descriptor??
[   94.050267][ T5684] zeroplus 0003:0C12:0030.0003: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.2-1/input0
[   94.074353][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'.
[   94.077167][ T5684] zeroplus 0003:0C12:0030.0003: no inputs found
[   94.108638][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'.
[   94.155996][ T5720] zeroplus 0003:0C12:0030.0004: hidraw1: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0
[   94.198398][ T5720] zeroplus 0003:0C12:0030.0004: no inputs found
[   94.348258][ T5720] IPVS: starting estimator thread 0...
[   94.457791][ T6164] IPVS: using max 33 ests per chain, 79200 per kthread
[   94.541439][ T6166] xt_TCPMSS: Only works on TCP SYN packets
[   94.821073][ T5684] usb 1-1: USB disconnect, device number 4
[   94.844922][ T5691] usb 3-1: USB disconnect, device number 7
[   94.896694][ T5714] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   94.947091][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.957796][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.998701][ T5683] usb 5-1: USB disconnect, device number 6
[   95.093414][ T5714] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   95.134366][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.167858][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.191224][ T6183] usb usb8: usbfs: process 6183 (syz.4.122) did not claim interface 0 before use
[   95.214674][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   95.249612][ T5714] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   95.278627][ T5714] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   95.296984][ T5714] usb 4-1: Manufacturer: syz
[   95.319388][ T5714] usb 4-1: config 0 descriptor??
[   95.426335][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.127'.
[   95.440586][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.127'.
[   95.456704][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   95.577417][ T6200] syzkaller0: tun_chr_ioctl cmd 1074025677
[   95.585731][ T6200] syzkaller0: linktype set to 773
[   95.616694][   T10] usb 1-1: Using ep0 maxpacket: 8
[   95.628008][   T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   95.647743][   T10] usb 1-1: config 179 has no interface number 0
[   95.658563][   T10] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   95.674574][   T10] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   95.710959][   T10] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   95.732672][   T10] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[   95.747623][ T6168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.118'.
[   95.753918][   T10] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   95.790435][   T10] usb 1-1: config 179 interface 65 has no altsetting 0
[   95.792630][ T5714] hid_parser_main: 104 callbacks suppressed
[   95.792648][ T5714] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[   95.805529][   T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   95.822836][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.840109][ T5714] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[   95.894242][   T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5
[   96.039195][ T5691] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   96.196713][ T5691] usb 5-1: Using ep0 maxpacket: 8
[   96.208821][ T5691] usb 5-1: config 8 has an invalid interface number: 188 but max is 0
[   96.230347][ T5691] usb 5-1: config 8 has no interface number 0
[   96.249318][ T6211] mmap: syz.2.131 (6211) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   96.252028][ T5691] usb 5-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[   96.325421][ T5691] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.338548][ T5691] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[   96.357331][ T5691] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[   96.369332][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.378651][ T5691] usb 5-1: Product: syz
[   96.412022][ T5691] usb 5-1: Manufacturer: syz
[   96.419286][ T5691] usb 5-1: SerialNumber: syz
[   96.525915][ T5714] usb 4-1: USB disconnect, device number 3
[   97.444801][ T5691] vmk80xx 5-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[   97.446928][ T5714] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   97.544439][ T5691] vmk80xx 5-1:8.188: probe with driver vmk80xx failed with error -22
[   97.613154][ T5691] usb 5-1: USB disconnect, device number 7
[   97.667320][ T5714] usb 4-1: Using ep0 maxpacket: 16
[   97.693596][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.723407][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   97.752172][ T5714] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[   97.766462][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.810247][ T5714] usb 4-1: config 0 descriptor??
[   98.251664][ T5720] usb 1-1: USB disconnect, device number 5
[   98.266448][ T5714] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0
[   98.295768][ T5714] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0
[   98.316310][ T5714] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0
[   98.342168][ T5714] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0
[   98.354646][ T5714] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0
[   98.385190][ T5714] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0
[   98.415101][ T5714] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0
[   98.437984][ T6253] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[   98.446322][ T5714] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0
[   98.464337][ T5683] IPVS: starting estimator thread 0...
[   98.473528][ T5714] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0
[   98.484483][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'.
[   98.495303][ T5714] zeroplus 0003:0C12:0030.0006: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0
[   98.506214][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'.
[   98.508818][ T5714] zeroplus 0003:0C12:0030.0006: no inputs found
[   98.576964][ T6258] IPVS: using max 34 ests per chain, 81600 per kthread
[   98.775240][ T6271] sctp: [Deprecated]: syz.0.142 (pid 6271) Use of int in max_burst socket option.
[   98.775240][ T6271] Use struct sctp_assoc_value instead
[   99.031263][ T5714] usb 4-1: USB disconnect, device number 4
[   99.606253][ T6293] syzkaller1: entered promiscuous mode
[   99.622127][ T6293] syzkaller1: entered allmulticast mode
[   99.716660][ T5714] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   99.822923][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'.
[   99.875593][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'.
[   99.895960][ T5714] usb 4-1: Using ep0 maxpacket: 16
[   99.909392][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.933625][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.953774][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   99.987029][ T5714] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  100.000519][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.054776][ T5714] usb 4-1: config 0 descriptor??
[  100.171660][ T4947] Bluetooth: hci3: unexpected event for opcode 0x304e
[  100.480272][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'.
[  100.516350][ T5714] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input6
[  100.534907][ T5683] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  100.536849][ T5691] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  100.627146][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  100.664528][ T5714] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  100.722742][ T5683] usb 1-1: unable to get BOS descriptor or descriptor too short
[  100.729985][ T5691] usb 2-1: unable to get BOS descriptor or descriptor too short
[  100.739580][ T5714] usb 4-1: USB disconnect, device number 5
[  100.756890][ T5683] usb 1-1: not running at top speed; connect to a high speed hub
[  100.767098][ T5691] usb 2-1: not running at top speed; connect to a high speed hub
[  100.796728][    T9] usb 5-1: Using ep0 maxpacket: 16
[  100.797026][ T5683] usb 1-1: config 1 has an invalid descriptor of length 31, skipping remainder of the config
[  100.822751][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.847353][ T5691] usb 2-1: config 1 has an invalid descriptor of length 31, skipping remainder of the config
[  100.849846][ T5683] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  100.876340][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  100.877517][ T6322] fido_id[6322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  100.896498][ T5691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  100.917174][ T5683] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  100.953953][    T9] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  100.972222][ T5691] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  100.972706][ T5683] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  100.989443][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.039248][    T9] usb 5-1: config 0 descriptor??
[  101.048104][ T5691] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  101.074551][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.077724][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.121201][ T5683] usb 1-1: Product: syz
[  101.126150][ T5691] usb 2-1: Product: syz
[  101.137977][ T5691] usb 2-1: Manufacturer: syz
[  101.138116][ T5683] usb 1-1: Manufacturer: syz
[  101.158083][ T5683] usb 1-1: SerialNumber: syz
[  101.158290][ T5691] usb 2-1: SerialNumber: syz
[  101.349491][ T6324] can: request_module (can-proto-5) failed.
[  101.489989][    T9] hid_parser_main: 29 callbacks suppressed
[  101.490036][    T9] zeroplus 0003:0C12:0030.0008: unknown main item tag 0x0
[  101.536557][    T9] zeroplus 0003:0C12:0030.0008: unknown main item tag 0x0
[  101.556245][    T9] zeroplus 0003:0C12:0030.0008: unknown main item tag 0x0
[  101.574320][    T9] zeroplus 0003:0C12:0030.0008: unknown main item tag 0x0
[  101.610314][    T9] zeroplus 0003:0C12:0030.0008: unknown main item tag 0x0
[  101.638143][    T9] zeroplus 0003:0C12:0030.0008: unknown main item tag 0x0
[  101.665696][    T9] zeroplus 0003:0C12:0030.0008: unknown main item tag 0x0
[  101.693770][    T9] zeroplus 0003:0C12:0030.0008: unknown main item tag 0x0
[  101.710898][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'.
[  101.724225][    T9] zeroplus 0003:0C12:0030.0008: unknown main item tag 0x0
[  101.735603][    T9] zeroplus 0003:0C12:0030.0008: unknown main item tag 0x0
[  101.762603][    T9] zeroplus 0003:0C12:0030.0008: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0
[  101.795681][    T9] zeroplus 0003:0C12:0030.0008: no inputs found
[  101.840709][ T6334] veth0_to_bridge: entered promiscuous mode
[  101.851971][ T6334] macvtap1: entered allmulticast mode
[  101.861101][ T6334] veth0_to_bridge: entered allmulticast mode
[  101.878082][ T6334] veth0_to_bridge: left allmulticast mode
[  101.884418][ T6334] veth0_to_bridge: left promiscuous mode
[  102.210296][ T5684] usb 5-1: USB disconnect, device number 8
[  102.471200][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'.
[  102.540401][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'.
[  102.911094][ T6349] xt_connbytes: Forcing CT accounting to be enabled
[  102.936537][ T6349] Cannot find del_set index 0 as target
[  103.387083][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  103.394797][   T29] audit: type=1800 audit(1779639202.317:60): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.168" name="memory.events" dev="tmpfs" ino=185 res=0 errno=0
[  103.563307][ T5691] usb 2-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  103.573552][   T10] usb 4-1: Using ep0 maxpacket: 16
[  103.596045][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  103.612369][ T5691] usb 2-1: found format II with max.bitrate = 512, frame size=4095
[  103.627062][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  103.642602][ T5691] usb 2-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  103.660922][ T5691] usb 2-1: found format II with max.bitrate = 512, frame size=4095
[  103.675111][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  103.689407][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.708950][ T6357] vivid-000: =================  START STATUS  =================
[  103.718171][   T10] usb 4-1: Product: syz
[  103.731296][ T6357] vivid-000: Test Pattern: 75% Colorbar
[  103.737628][   T10] usb 4-1: Manufacturer: syz
[  103.747332][   T10] usb 4-1: SerialNumber: syz
[  103.757482][ T6357] vivid-000: Fill Percentage of Frame: 100
[  103.777083][   T10] usb 4-1: config 0 descriptor??
[  103.788190][ T6357] vivid-000: Horizontal Movement: No Movement
[  103.814325][   T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  103.832618][ T6357] vivid-000: Vertical Movement: No Movement
[  103.853248][   T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  103.861086][ T6357] vivid-000: OSD Text Mode: All
[  103.873920][ T6357] vivid-000: Show Border: false
[  103.897054][ T6357] vivid-000: Show Square: false
[  103.914436][ T6357] vivid-000: Sensor Flipped Horizontally: false
[  103.936875][ T6357] vivid-000: Sensor Flipped Vertically: false
[  103.959562][ T6357] vivid-000: Insert SAV Code in Image: false
[  103.988388][ T6357] vivid-000: Insert EAV Code in Image: false
[  103.994829][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'.
[  104.011350][ T6357] vivid-000: Insert Video Guard Band: false
[  104.017990][ T5691] usb 2-1: USB disconnect, device number 3
[  104.025026][ T6357] vivid-000: Reduced Framerate: false
[  104.038990][ T6357] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  104.050272][ T6351] program syz.3.167 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  104.112494][ T6357] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  104.179970][ T6357] vivid-000: Enable Capture Cropping: true
[  104.217862][ T6360] bond1: entered promiscuous mode
[  104.218348][ T6365] udevd[6365]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.242313][ T6357] vivid-000: Enable Capture Composing: true
[  104.256682][ T6360] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.276117][ T6357] vivid-000: Enable Capture Scaler: true
[  104.290697][ T5683] usb 1-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  104.305241][ T6357] vivid-000: Timestamp Source: End of Frame
[  104.311456][ T5683] usb 1-1: found format II with max.bitrate = 512, frame size=4095
[  104.324020][ T5683] usb 1-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  104.335218][ T6357] vivid-000: Colorspace: sRGB
[  104.341132][ T5683] usb 1-1: found format II with max.bitrate = 512, frame size=4095
[  104.350452][ T6357] vivid-000: Transfer Function: Default
[  104.358305][ T6357] vivid-000: Y'CbCr Encoding: Default
[  104.364576][ T6357] vivid-000: HSV Encoding: Hue 0-179
[  104.388022][ T6357] vivid-000: Quantization: Default
[  104.405964][ T6357] vivid-000: Apply Alpha To Red Only: false
[  104.431758][ T6357] vivid-000: Standard Aspect Ratio: 4x3
[  104.442995][ T5683] usb 1-1: USB disconnect, device number 6
[  104.447944][ T6357] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  104.481091][ T6362] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.489996][ T6357] vivid-000: DV Timings: 640x480p59 inactive
[  104.503002][ T6357] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  104.528678][ T6357] vivid-000: Maximum EDID Blocks: 2
[  104.534312][ T6357] vivid-000: Limited RGB Range (16-235): false
[  104.534451][ T6362] bond2: entered promiscuous mode
[  104.543253][ T6357] vivid-000: Rx RGB Quantization Range: Automatic
[  104.553532][   T10] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  104.558435][ T6362] bond1: (slave bond2): Enslaving as an active interface with an up link
[  104.563239][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.591836][ T6357] vivid-000: Power Present: 0x00000001
[  104.604207][ T6357] tpg source WxH: 320x180 (R'G'B)
[  104.609586][   T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  104.617306][ T6357] tpg field: 1
[  104.638373][ T6357] tpg crop: (0,0)/320x180
[  104.648230][ T6357] tpg compose: (0,0)/320x180
[  104.653893][ T6357] tpg colorspace: 8
[  104.658240][ T6357] tpg transfer function: 0/0
[  104.663547][ T6357] tpg quantization: 0/0
[  104.681070][ T6363] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  104.705643][ T6357] tpg RGB range: 0/2
[  104.720287][ T6357] vivid-000: ==================  END STATUS  ==================
[  104.728354][ T6363] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  104.757995][ T6363] bond1: (slave ipvlan2): Error -95 calling set_mac_address
[  104.830845][   T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  104.837866][   T24] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  104.856904][   T10] em28xx 4-1:0.0: No AC97 audio processor
[  104.991057][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  105.009174][   T24] usb 3-1: not running at top speed; connect to a high speed hub
[  105.031725][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.045630][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.068507][   T24] usb 3-1: string descriptor 0 read error: -22
[  105.075195][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  105.084639][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.123884][   T24] usb 3-1: 0:2 : does not exist
[  105.184617][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.218021][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.246687][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  105.321014][ T6387] netlink: 'syz.4.179': attribute type 1 has an invalid length.
[  105.346950][ T6387] 8021q: adding VLAN 0 to HW filter on device bond3
[  105.373710][ T6387] macvlan2: entered promiscuous mode
[  105.379253][ T6387] macvlan2: entered allmulticast mode
[  105.385138][ T6387] bond3: entered allmulticast mode
[  105.391809][ T6387] bond3: entered promiscuous mode
[  105.397741][ T6387] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  105.407228][   T10] usb 2-1: Using ep0 maxpacket: 16
[  105.413735][ T6387] team0: Port device macvlan2 added
[  105.421111][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.432799][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  105.445765][   T10] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  105.454895][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.466331][   T10] usb 2-1: config 0 descriptor??
[  105.496212][ T6387] bond3: (slave ip6gretap1): making interface the new active one
[  105.504377][ T6387] ip6gretap1: entered promiscuous mode
[  105.510151][ T6387] ip6gretap1: entered allmulticast mode
[  105.520144][ T6387] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  105.683359][ T6394] FAULT_INJECTION: forcing a failure.
[  105.683359][ T6394] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.696604][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.4.180 Not tainted syzkaller #0 PREEMPT(full) 
[  105.696628][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  105.696641][ T6394] Call Trace:
[  105.696648][ T6394]  <TASK>
[  105.696655][ T6394]  dump_stack_lvl+0xe8/0x150
[  105.696681][ T6394]  should_fail_ex+0x412/0x560
[  105.696711][ T6394]  _copy_from_user+0x2d/0xb0
[  105.696738][ T6394]  get_compat_msghdr+0xb3/0x4c0
[  105.696762][ T6394]  ? __pfx_get_compat_msghdr+0x10/0x10
[  105.696782][ T6394]  ? kfree+0x4d/0x640
[  105.696809][ T6394]  ___sys_recvmsg+0x1dd/0x590
[  105.696827][ T6394]  ? __lock_acquire+0x6b5/0x2cf0
[  105.696851][ T6394]  ? __pfx____sys_recvmsg+0x10/0x10
[  105.696873][ T6394]  ? __fget_files+0x2a/0x420
[  105.696923][ T6394]  do_recvmmsg+0x3a5/0x800
[  105.696948][ T6394]  ? __pfx_do_recvmmsg+0x10/0x10
[  105.696964][ T6394]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  105.696978][ T6394]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  105.696992][ T6394]  __sys_recvmmsg+0x1a5/0x290
[  105.697003][ T6394]  ? __pfx___sys_recvmmsg+0x10/0x10
[  105.697019][ T6394]  ? ksys_write+0x242/0x270
[  105.697051][ T6394]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  105.697074][ T6394]  __do_fast_syscall_32+0x229/0x6e0
[  105.697094][ T6394]  ? do_fast_syscall_32+0x33/0x70
[  105.697106][ T6394]  ? lockdep_hardirqs_on+0x7a/0x110
[  105.697114][ T6394]  ? asm_int80_emulation+0x1a/0x20
[  105.697124][ T6394]  ? do_int80_emulation+0x286/0x530
[  105.697133][ T6394]  ? trace_irq_disable+0x3b/0x140
[  105.697150][ T6394]  do_fast_syscall_32+0x33/0x70
[  105.697162][ T6394]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  105.697183][ T6394] RIP: 0023:0xf7f0301c
[  105.697200][ T6394] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  105.697215][ T6394] RSP: 002b:00000000f53a550c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  105.697233][ T6394] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800066c0
[  105.697246][ T6394] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000
[  105.697253][ T6394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  105.697258][ T6394] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  105.697264][ T6394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  105.697277][ T6394]  </TASK>
[  105.952671][   T10] zeroplus 0003:0C12:0030.0009: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.1-1/input0
[  105.964442][   T10] zeroplus 0003:0C12:0030.0009: no inputs found
[  106.154398][   T10] IPVS: starting estimator thread 0...
[  106.163755][ T6397] =======================================================
[  106.163755][ T6397] WARNING: The mand mount option has been deprecated and
[  106.163755][ T6397]          and is ignored by this kernel. Remove the mand
[  106.163755][ T6397]          option from the mount to silence this warning.
[  106.163755][ T6397] =======================================================
[  106.246871][ T6398] IPVS: using max 27 ests per chain, 64800 per kthread
[  106.611936][   T29] audit: type=1326 audit(1779639205.537:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.4.184" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f0301c code=0x0
[  106.692033][   T10] usb 4-1: USB disconnect, device number 6
[  106.725385][ T5684] usb 2-1: USB disconnect, device number 4
[  106.749686][   T10] em28xx 4-1:0.0: Disconnecting em28xx
[  106.881482][   T10] em28xx 4-1:0.0: Freeing device
[  106.978568][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'.
[  106.991896][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'.
[  108.129072][   T24] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  108.190977][   T24] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  108.290657][ T6453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.195'.
[  108.400421][   T24] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  108.548452][   T24] usb 3-1: USB disconnect, device number 8
[  109.001922][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'.
[  109.024532][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'.
[  109.087816][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  109.238253][ T6453] netlink: 76 bytes leftover after parsing attributes in process `syz.1.195'.
[  109.277123][   T24] usb 3-1: Using ep0 maxpacket: 16
[  109.293545][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.312120][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  109.328336][   T24] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  109.337937][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.362934][ T6474] sctp: [Deprecated]: syz.0.200 (pid 6474) Use of int in max_burst socket option.
[  109.362934][ T6474] Use struct sctp_assoc_value instead
[  109.385728][   T24] usb 3-1: config 0 descriptor??
[  109.809645][   T24] hid_parser_main: 66 callbacks suppressed
[  109.809667][   T24] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0
[  109.857457][   T24] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0
[  109.872208][   T24] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0
[  109.880509][   T24] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0
[  109.889309][   T24] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0
[  109.897079][   T24] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0
[  109.905466][   T24] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0
[  109.914288][   T24] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0
[  109.943652][   T24] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0
[  109.987245][   T24] zeroplus 0003:0C12:0030.000A: unknown main item tag 0x0
[  110.036332][   T24] zeroplus 0003:0C12:0030.000A: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.2-1/input0
[  110.090088][   T24] zeroplus 0003:0C12:0030.000A: no inputs found
[  110.369487][ T6484] syzkaller1: entered promiscuous mode
[  110.386942][ T6484] syzkaller1: entered allmulticast mode
[  110.400150][ T6484] FAULT_INJECTION: forcing a failure.
[  110.400150][ T6484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  110.413636][ T6484] CPU: 1 UID: 0 PID: 6484 Comm: syz.0.205 Not tainted syzkaller #0 PREEMPT(full) 
[  110.413660][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  110.413670][ T6484] Call Trace:
[  110.413678][ T6484]  <TASK>
[  110.413685][ T6484]  dump_stack_lvl+0xe8/0x150
[  110.413710][ T6484]  should_fail_ex+0x412/0x560
[  110.413736][ T6484]  _copy_from_iter+0x1d3/0x1670
[  110.413765][ T6484]  ? __pfx__copy_from_iter+0x10/0x10
[  110.413784][ T6484]  ? sock_alloc_send_pskb+0x896/0x990
[  110.413806][ T6484]  ? __pfx__copy_from_iter+0x10/0x10
[  110.413833][ T6484]  copy_page_from_iter+0x220/0x2d0
[  110.413860][ T6484]  skb_copy_datagram_from_iter+0x306/0x710
[  110.413887][ T6484]  tun_get_user+0xc5e/0x43e0
[  110.413924][ T6484]  ? aa_file_perm+0x192/0x15e0
[  110.413952][ T6484]  ? aa_file_perm+0x50e/0x15e0
[  110.413972][ T6484]  ? __pfx_tun_get_user+0x10/0x10
[  110.414079][ T6484]  ? __lock_acquire+0x6b5/0x2cf0
[  110.414105][ T6484]  ? kstrtoull+0x12f/0x1d0
[  110.414128][ T6484]  ? ref_tracker_alloc+0x35c/0x4c0
[  110.414153][ T6484]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  110.414179][ T6484]  ? tun_get+0x1c/0x2f0
[  110.414201][ T6484]  ? tun_get+0x1c/0x2f0
[  110.414332][ T6484]  ? tun_get+0x1c/0x2f0
[  110.414402][ T6484]  ? tun_get+0x1c/0x2f0
[  110.414433][ T6484]  tun_chr_write_iter+0x113/0x200
[  110.414459][ T6484]  vfs_write+0x61d/0xb90
[  110.414490][ T6484]  ? __pfx_vfs_write+0x10/0x10
[  110.414522][ T6484]  ? __fget_files+0x2a/0x420
[  110.414548][ T6484]  ksys_write+0x150/0x270
[  110.414573][ T6484]  ? __pfx_ksys_write+0x10/0x10
[  110.414603][ T6484]  __do_fast_syscall_32+0x229/0x6e0
[  110.414624][ T6484]  ? do_fast_syscall_32+0x33/0x70
[  110.414641][ T6484]  ? lockdep_hardirqs_on+0x7a/0x110
[  110.414657][ T6484]  ? asm_int80_emulation+0x1a/0x20
[  110.414674][ T6484]  ? do_int80_emulation+0x286/0x530
[  110.414694][ T6484]  ? trace_irq_disable+0x3b/0x140
[  110.414716][ T6484]  do_fast_syscall_32+0x33/0x70
[  110.414731][ T6484]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  110.414747][ T6484] RIP: 0023:0xf7f9601c
[  110.414760][ T6484] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  110.414771][ T6484] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  110.414785][ T6484] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240
[  110.414794][ T6484] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000
[  110.414802][ T6484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  110.414809][ T6484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  110.414816][ T6484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  110.414836][ T6484]  </TASK>
[  110.736856][ T1609] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  110.800816][ T5714] usb 3-1: USB disconnect, device number 9
[  110.942209][ T1609] usb 2-1: Using ep0 maxpacket: 8
[  111.020640][ T6490] fuse: Bad value for 'fd'
[  111.270553][ T1609] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  111.286990][ T1609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.294982][ T1609] usb 2-1: Product: syz
[  111.328268][ T1609] usb 2-1: Manufacturer: syz
[  111.346825][ T1609] usb 2-1: SerialNumber: syz
[  111.541253][ T1609] usb 2-1: config 0 descriptor??
[  111.684223][ T1609] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  111.711320][ T6499] fuse: Bad value for 'fd'
[  111.719718][ T1609] pctv452e: pctv452e_power_ctrl: 1
[  111.719718][ T1609] 
[  111.794587][ T1609] usb 2-1: selecting invalid altsetting 3
[  111.847354][ T1609] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  111.847354][ T1609] 
[  111.897559][ T1609] dvb-usb: bulk message failed: -22 (5/0)
[  112.204313][ T1609] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  112.395647][ T1609] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  112.411508][ T1609] usb 2-1: media controller created
[  112.612626][ T1609] dvb-usb: bulk message failed: -22 (8/0)
[  112.641218][ T1609] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  112.684850][ T1609] dvb-usb: MAC address reading failed.
[  112.962273][ T1609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  113.142180][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'.
[  113.166705][   T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  113.395912][   T24] usb 1-1: Using ep0 maxpacket: 32
[  113.453187][   T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  113.457154][   T24] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  113.457182][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.457201][   T24] usb 1-1: Product: syz
[  113.457216][   T24] usb 1-1: Manufacturer: syz
[  113.457230][   T24] usb 1-1: SerialNumber: syz
[  113.466358][   T24] usb 1-1: config 0 descriptor??
[  114.091260][ T1609] DVB: Unable to find symbol stb0899_attach()
[  114.091278][ T1609] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  114.482545][ T1609] rc_core: IR keymap rc-tt-1500 not found
[  114.578511][ T1609] Registered IR keymap rc-empty
[  114.783853][ T1609] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  114.849638][ T6526] syzkaller1: entered promiscuous mode
[  114.854146][ T1609] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7
[  114.870250][ T6526] syzkaller1: entered allmulticast mode
[  114.975706][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'.
[  115.026756][   T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  115.127740][ T6533] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  115.138579][ T1158] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  115.159695][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  115.174941][ T1158] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  115.184853][ T1609] dvb-usb: schedule remote query interval to 100 msecs.
[  115.195997][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.220'.
[  115.219132][   T24] usb 4-1: Using ep0 maxpacket: 16
[  115.220826][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.222948][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.222977][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  115.223016][   T24] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  115.223045][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.228640][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.302416][   T24] usb 4-1: config 0 descriptor??
[  115.311479][ T1609] pctv452e: pctv452e_power_ctrl: 0
[  115.311479][ T1609] 
[  115.313339][ T6533] 8021q: adding VLAN 0 to HW filter on device bond2
[  115.330745][ T1609] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  115.384659][ T1158] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  115.432399][ T5691] dvb-usb: bulk message failed: -22 (4/0)
[  115.448671][ T5691] dvb-usb: error -22 while querying for an remote control event.
[  115.532393][ T6538] fuse: Bad value for 'fd'
[  115.572126][ T1609] usb 2-1: USB disconnect, device number 5
[  115.773583][ T6540] capability: warning: `syz.1.222' uses 32-bit capabilities (legacy support in use)
[  115.813538][   T24] hid_parser_main: 28 callbacks suppressed
[  115.813577][   T24] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0
[  115.920683][   T24] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0
[  115.963733][   T24] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0
[  116.032747][   T24] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0
[  116.061188][ T4947] Bluetooth: hci4: SCO packet for unknown connection handle 201
[  116.076053][   T24] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0
[  116.135970][   T24] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0
[  116.172720][   T24] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0
[  116.195616][   T24] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0
[  116.219155][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'.
[  116.234066][ T1609] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  116.240853][   T24] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0
[  116.255130][   T24] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0
[  116.313301][   T24] zeroplus 0003:0C12:0030.000B: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0
[  116.328092][ T5714] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  116.386375][   T24] zeroplus 0003:0C12:0030.000B: no inputs found
[  116.496798][ T5714] usb 5-1: device descriptor read/64, error -71
[  116.541233][   T24] usb 4-1: USB disconnect, device number 7
[  116.747128][ T5714] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  116.919619][ T5720] usb 1-1: USB disconnect, device number 7
[  116.936803][ T5714] usb 5-1: device descriptor read/64, error -71
[  117.077101][ T5714] usb usb5-port1: attempt power cycle
[  117.287790][   T29] audit: type=1326 audit(1779639216.207:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6554 comm="syz.0.227" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f9601c code=0x0
[  117.456713][ T5714] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  117.518228][ T5714] usb 5-1: device descriptor read/8, error -71
[  117.770235][ T5714] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  117.948617][ T5714] usb 5-1: device descriptor read/8, error -71
[  118.197282][ T5714] usb usb5-port1: unable to enumerate USB device
[  118.273225][ T6546] syz.2.224 (6546): drop_caches: 2
[  119.127407][ T5720] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  119.261541][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[  119.367627][ T5720] usb 3-1: Using ep0 maxpacket: 16
[  119.402644][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.441054][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[  119.465281][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.491164][ T5720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  119.504662][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[  119.541924][ T6578] fuse: Bad value for 'fd'
[  119.567775][ T5720] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  119.607845][ T5683] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  119.622341][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.678809][ T5720] usb 3-1: config 0 descriptor??
[  119.809735][ T5683] usb 4-1: Using ep0 maxpacket: 32
[  120.065460][    T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!!
[  120.250050][ T5720] usbhid 3-1:0.0: can't add hid device: -71
[  120.284271][ T5720] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  120.314267][ T5683] usb 4-1: config 0 has an invalid interface number: 217 but max is 0
[  120.375185][ T5683] usb 4-1: config 0 has no interface number 0
[  120.388018][ T5720] usb 3-1: USB disconnect, device number 10
[  120.738178][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  120.825109][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  121.230884][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  123.074895][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  123.555492][    T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!!
[  124.185658][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  124.895834][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  124.965256][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  125.005165][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  125.583275][    C0] sched: DL replenish lagged too much
[  133.701789][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  135.034547][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  194.342144][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  238.186602][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  238.193585][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6592/1:b..l
[  238.201857][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=20461, q=1812 ncpus=2)
[  238.209680][    C1] task:syz.0.235       state:R  running task     stack:27848 pid:6592  tgid:6583  ppid:5646   task_flags:0x40054c flags:0x08080000
[  238.224079][    C1] Call Trace:
[  238.227374][    C1]  <TASK>
[  238.230310][    C1]  __schedule+0x1821/0x5740
[  238.234848][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  238.239784][    C1]  ? __pfx___schedule+0x10/0x10
[  238.244665][    C1]  preempt_schedule_irq+0x4d/0xa0
[  238.249705][    C1]  irqentry_exit+0x14f/0x760
[  238.254304][    C1]  ? trace_irq_disable+0x3b/0x140
[  238.259353][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  238.265338][    C1] RIP: 0010:lock_acquire+0x221/0x350
[  238.270616][    C1] Code: ff ff ff e8 f1 bd 07 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db e8 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 40 b1 0a 0a cc 48 8d 3d 88 91 92
[  238.290229][    C1] RSP: 0000:ffffc900025b7538 EFLAGS: 00000282
[  238.296305][    C1] RAX: 99d1ea2d5f024200 RBX: 0000000000000000 RCX: 0000000000000046
[  238.304267][    C1] RDX: 000000005a44979c RSI: ffffffff8e220b28 RDI: ffffffff8c28b7e0
[  238.312243][    C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cca0
[  238.320217][    C1] R10: ffffc900025b7698 R11: ffffffff81b0e040 R12: 0000000000000002
[  238.328190][    C1] R13: ffffffff8e95cca0 R14: 0000000000000000 R15: 0000000000000246
[  238.336169][    C1]  ? unwind_next_frame+0xa6/0x2550
[  238.341292][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  238.347462][    C1]  ? unwind_next_frame+0xa6/0x2550
[  238.352592][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  238.357631][    C1]  ? unwind_next_frame+0xa6/0x2550
[  238.362753][    C1]  unwind_next_frame+0xc3/0x2550
[  238.367702][    C1]  ? unwind_next_frame+0xa6/0x2550
[  238.372830][    C1]  ? unwind_next_frame+0xa6/0x2550
[  238.377956][    C1]  ? kasan_save_track+0x3e/0x80
[  238.382815][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  238.387854][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  238.394029][    C1]  arch_stack_walk+0x11b/0x150
[  238.398814][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  238.403847][    C1]  ? taskstats_exit+0x14a/0xa70
[  238.408688][    C1]  stack_trace_save+0xa9/0x100
[  238.413469][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  238.418865][    C1]  kasan_save_track+0x3e/0x80
[  238.423560][    C1]  ? kasan_save_track+0x3e/0x80
[  238.428418][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  238.433493][    C1]  __kasan_slab_alloc+0x6c/0x80
[  238.438335][    C1]  kmem_cache_alloc_noprof+0x2bc/0x650
[  238.443801][    C1]  ? taskstats_exit+0x14a/0xa70
[  238.448661][    C1]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  238.454306][    C1]  taskstats_exit+0x14a/0xa70
[  238.458995][    C1]  ? seccomp_filter_release+0x18a/0x2d0
[  238.464547][    C1]  do_exit+0x682/0x22c0
[  238.468698][    C1]  ? try_to_wake_up+0x828/0x1380
[  238.473644][    C1]  ? __pfx_do_exit+0x10/0x10
[  238.478245][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  238.483278][    C1]  do_group_exit+0x21b/0x2d0
[  238.487859][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.493072][    C1]  get_signal+0x1284/0x1330
[  238.497598][    C1]  arch_do_signal_or_restart+0xbc/0x840
[  238.503159][    C1]  ? do_sys_openat2+0x14c/0x200
[  238.508017][    C1]  ? kmem_cache_free+0x182/0x650
[  238.512969][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  238.519163][    C1]  exit_to_user_mode_loop+0x8c/0x4d0
[  238.524453][    C1]  ? rcu_is_watching+0x15/0xb0
[  238.529225][    C1]  ? do_fast_syscall_32+0x33/0x70
[  238.534256][    C1]  __do_fast_syscall_32+0x446/0x6e0
[  238.539459][    C1]  ? do_fast_syscall_32+0x33/0x70
[  238.544482][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  238.549664][    C1]  ? asm_int80_emulation+0x1a/0x20
[  238.554773][    C1]  ? do_int80_emulation+0x286/0x530
[  238.559973][    C1]  ? trace_irq_disable+0x3b/0x140
[  238.565006][    C1]  do_fast_syscall_32+0x33/0x70
[  238.569848][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  238.576186][    C1] RIP: 0023:0xf7f9601c
[  238.580253][    C1] RSP: 002b:00000000f4ff15bc EFLAGS: 00000206 ORIG_RAX: 00000000000000f0
[  238.588688][    C1] RAX: fffffffffffffe00 RBX: 00000000f7455150 RCX: 0000000000000080
[  238.596663][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7455154
[  238.604639][    C1] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000
[  238.612610][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  238.620589][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  238.628582][    C1]  </TASK>
[  238.631616][    C1] rcu: rcu_preempt kthread starved for 7107 jiffies! g20461 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  238.642731][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  238.652698][    C1] rcu: RCU grace-period kthread stack dump:
[  238.658585][    C1] task:rcu_preempt     state:R  running task     stack:27536 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  238.672177][    C1] Call Trace:
[  238.675453][    C1]  <TASK>
[  238.678377][    C1]  __schedule+0x1821/0x5740
[  238.682898][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  238.687869][    C1]  ? __pfx___schedule+0x10/0x10
[  238.692741][    C1]  ? schedule+0x90/0x360
[  238.697006][    C1]  schedule+0x164/0x360
[  238.701177][    C1]  schedule_timeout+0x158/0x2c0
[  238.706032][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  238.711397][    C1]  ? __pfx_process_timeout+0x10/0x10
[  238.716699][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  238.722518][    C1]  ? prepare_to_swait_event+0x340/0x370
[  238.728085][    C1]  rcu_gp_fqs_loop+0x312/0x11d0
[  238.732947][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  238.738154][    C1]  ? rcu_gp_init+0x1315/0x15b0
[  238.742936][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  238.749096][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  238.754380][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  238.759578][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  238.765403][    C1]  rcu_gp_kthread+0x9e/0x2b0
[  238.769990][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  238.775190][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  238.781012][    C1]  ? __kthread_parkme+0x7a/0x1f0
[  238.785950][    C1]  ? __kthread_parkme+0x19c/0x1f0
[  238.790970][    C1]  kthread+0x389/0x470
[  238.795052][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  238.800254][    C1]  ? __pfx_kthread+0x10/0x10
[  238.804861][    C1]  ret_from_fork+0x514/0xb70
[  238.809441][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  238.814555][    C1]  ? __switch_to+0xc79/0x1410
[  238.819268][    C1]  ? __pfx_kthread+0x10/0x10
[  238.823876][    C1]  ret_from_fork_asm+0x1a/0x30
[  238.828660][    C1]  </TASK>
[  238.831677][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  238.838006][    C1] Sending NMI from CPU 1 to CPUs 0:
[  238.843220][    C0] NMI backtrace for cpu 0
[  238.843240][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  238.843257][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  238.843267][    C0] RIP: 0010:__lock_acquire+0x3c4/0x2cf0
[  238.843289][    C0] Code: 8c 92 0e 48 c7 c6 66 9b 0c 8e 67 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f 00 00 48 0f a3 05 2c b7 9f 12 <73> 17 48 69 c0 c8 00 00 00 48 8d 88 70 63 e2 93 84 db 75 3f e9 10
[  238.843302][    C0] RSP: 0018:ffffc90000006ff0 EFLAGS: 00000003
[  238.843322][    C0] RAX: 000000000000002c RBX: 0000000000000003 RCX: 000000000000002c
[  238.843332][    C0] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000000000000
[  238.843341][    C0] RBP: 0000000000000002 R08: ffffffff82255c7e R09: ffff8880b8643510
[  238.843352][    C0] R10: ffff88817affd1c0 R11: ffffed102f5ffa41 R12: 000000000000002c
[  238.843363][    C0] R13: ffffffff8e693aa0 R14: ffffffff8e692ec0 R15: ffffffff8e693a50
[  238.843375][    C0] FS:  0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000
[  238.843387][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  238.843398][    C0] CR2: 000000008013e018 CR3: 000000005c62e000 CR4: 00000000003526f0
[  238.843412][    C0] Call Trace:
[  238.843418][    C0]  <IRQ>
[  238.843425][    C0]  ? default_idle_call+0x72/0xb0
[  238.843445][    C0]  ? do_idle+0x36a/0x5f0
[  238.843462][    C0]  ? cpu_startup_entry+0x43/0x60
[  238.843479][    C0]  ? rest_init+0x2de/0x300
[  238.843497][    C0]  ? start_kernel+0x38a/0x3e0
[  238.843520][    C0]  ? x86_64_start_reservations+0x24/0x30
[  238.843538][    C0]  ? x86_64_start_kernel+0x143/0x1c0
[  238.843556][    C0]  ? common_startup_64+0x13e/0x147
[  238.843582][    C0]  ? kmem_cache_alloc_node_noprof+0x23e/0x690
[  238.843604][    C0]  lock_acquire+0x106/0x350
[  238.843620][    C0]  ? kmem_cache_alloc_node_noprof+0x23e/0x690
[  238.843644][    C0]  ? kmem_cache_alloc_node_noprof+0x23e/0x690
[  238.843665][    C0]  kmem_cache_alloc_node_noprof+0x25a/0x690
[  238.843686][    C0]  ? kmem_cache_alloc_node_noprof+0x23e/0x690
[  238.843707][    C0]  ? __alloc_skb+0x27d/0x7d0
[  238.843730][    C0]  __alloc_skb+0x27d/0x7d0
[  238.843753][    C0]  synproxy_send_client_synack+0x172/0xe30
[  238.843775][    C0]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  238.843792][    C0]  ? nft_osf_eval+0x40/0x870
[  238.843807][    C0]  ? synproxy_pernet+0x45/0x270
[  238.843826][    C0]  nft_synproxy_eval_v4+0x34a/0x4e0
[  238.843845][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  238.843864][    C0]  ? nf_ip_checksum+0x13c/0x510
[  238.843885][    C0]  nft_synproxy_do_eval+0x305/0x580
[  238.843902][    C0]  ? __ip_vs_conn_in_get+0xa6/0x10f0
[  238.843921][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  238.843940][    C0]  ? __pfx___ip_vs_conn_in_get+0x10/0x10
[  238.843960][    C0]  nft_do_chain+0x48d/0x1ae0
[  238.843980][    C0]  ? ip_vs_service_find+0x152/0x3c0
[  238.844005][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  238.844031][    C0]  ? nf_nat_inet_fn+0x95b/0xbf0
[  238.844056][    C0]  nft_do_chain_inet+0x360/0x4b0
[  238.844075][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  238.844095][    C0]  ? nf_nat_ipv4_local_in+0x223/0x720
[  238.844120][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  238.844138][    C0]  nf_hook_slow+0xc5/0x220
[  238.844155][    C0]  NF_HOOK+0x21f/0x3c0
[  238.844177][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  238.844200][    C0]  ? NF_HOOK+0x9e/0x3c0
[  238.844220][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  238.844240][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[  238.844264][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  238.844288][    C0]  ? ip_local_deliver+0x12a/0x1b0
[  238.844316][    C0]  NF_HOOK+0x336/0x3c0
[  238.844336][    C0]  ? wakeup_preempt_fair+0xc7/0xb10
[  238.844358][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  238.844380][    C0]  ? NF_HOOK+0x9e/0x3c0
[  238.844400][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  238.844422][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  238.844446][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  238.844467][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  238.844487][    C0]  ? process_backlog+0x3eb/0x1950
[  238.844508][    C0]  process_backlog+0xaa3/0x1950
[  238.844535][    C0]  __napi_poll+0xae/0x340
[  238.844553][    C0]  ? skb_defer_free_flush+0x233/0x260
[  238.844574][    C0]  net_rx_action+0x627/0xf70
[  238.844599][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  238.844630][    C0]  handle_softirqs+0x22a/0x840
[  238.844647][    C0]  ? __irq_exit_rcu+0xca/0x220
[  238.844665][    C0]  __irq_exit_rcu+0xca/0x220
[  238.844680][    C0]  irq_exit_rcu+0x9/0x30
[  238.844695][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  238.844718][    C0]  </IRQ>
[  238.844724][    C0]  <TASK>
[  238.844729][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  238.844746][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  238.844770][    C0] Code: 6b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 01 20 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  238.844783][    C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246
[  238.844796][    C0] RAX: 00000000015c7a05 RBX: ffffffff819a858a RCX: 0000000080000001
[  238.844807][    C0] RDX: 0000000000000001 RSI: ffffffff8dfad387 RDI: ffffffff8c28b7e0
[  238.844817][    C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b
[  238.844829][    C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000
[  238.844840][    C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8
[  238.844852][    C0]  ? do_idle+0x36a/0x5f0
[  238.844873][    C0]  default_idle+0x9/0x20
[  238.844889][    C0]  default_idle_call+0x72/0xb0
[  238.844906][    C0]  do_idle+0x36a/0x5f0
[  238.844925][    C0]  ? __pfx_do_idle+0x10/0x10
[  238.844945][    C0]  cpu_startup_entry+0x43/0x60
[  238.844963][    C0]  rest_init+0x2de/0x300
[  238.844982][    C0]  start_kernel+0x38a/0x3e0
[  238.845005][    C0]  x86_64_start_reservations+0x24/0x30
[  238.845023][    C0]  x86_64_start_kernel+0x143/0x1c0
[  238.845042][    C0]  common_startup_64+0x13e/0x147
[  238.845068][    C0]  </TASK>
[  240.383477][ T1315] ieee802154 phy1 wpan1: encryption failed: -22