last executing test programs:

40m17.18341073s ago: executing program 3 (id=1184):
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x9b74, 0x20, 0x1, 0x2ee}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53c1, 0x200, 0x3, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd49d, 0x1, 0x3, 0x2bd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc4d1, 0x80, 0x3, 0x1bd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf877, 0x40, 0x3, 0x97}}], 0x4, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r0, 0x100)
accept4(r0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f000001c000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f000001b000)=@vmx={0x1, 0x0, 0x2080, {0x1000, 0x2000, {}, 0x0, 0x5}, {"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", "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"}})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]})
socket(0x9, 0x3, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r7, 0xc00c5512, 0x0)
removexattr(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00')
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x34, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54109, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)

40m16.76507629s ago: executing program 3 (id=1185):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0xffffffff, 0x8014}, 0x40c0)

40m16.391466527s ago: executing program 3 (id=1187):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r0, &(0x7f00000001c0)="fb6d42b67a", 0x5, 0x4000000, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000700)=0xdfffffff, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffe0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0x2848}], 0x1, 0x0, 0x0, 0x0)

40m15.394701123s ago: executing program 3 (id=1194):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x201, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7e, 0x2, 0x7, 0x5, 0x2, 0x10000}, {0xfc, 0x1, 0x1000, 0x8000, 0x5, 0x8}, 0x0, 0x20004, 0x21db}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x4008080)

40m15.270912412s ago: executing program 3 (id=1196):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x10000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

40m14.743848412s ago: executing program 3 (id=1199):
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet(0x2, 0x3, 0x33)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
keyctl$reject(0x13, 0x0, 0x9, 0x200, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000440)=0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5b2a4f9810fc5c81195554c"], 0xc8)
dup3(r5, r4, 0x0)

39m59.57731516s ago: executing program 32 (id=1199):
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet(0x2, 0x3, 0x33)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
keyctl$reject(0x13, 0x0, 0x9, 0x200, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000440)=0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5b2a4f9810fc5c81195554c"], 0xc8)
dup3(r5, r4, 0x0)

29m31.668685568s ago: executing program 1 (id=4260):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xa100)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x4, 0x0, 0x2, 0x11})
read(r0, &(0x7f0000000100)=""/125, 0x7d)
preadv(r0, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000000180)=""/119, 0x77}], 0x2, 0x2, 0xd)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000060a010300000000000000000a0000010900010073797a300000000008000b4000000003140000001100010000000000000000000000000a82a68203db11b2d7ea32d52bd789bbca3401ceb7113cb4277753cd2c9eece1a892ba"], 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)

29m30.606816635s ago: executing program 1 (id=4267):
r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x26, 0x1, 0x80, "3a8e2ba74088c20500ca1000000000000400b2b679d2000000000000000500", 0x41564e57})

29m30.438583199s ago: executing program 1 (id=4268):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002dc0)={0x60, r2, 0x1, 0x2070bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x8001af85, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r3, &(0x7f00000027c0)=[{{&(0x7f0000001300)={0xa, 0x4e20, 0x100, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000002640)=[@dstopts={{0x14, 0x29, 0x37, {0x16}}}], 0x14}}], 0x1, 0x4008000)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r6, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd)
ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bind$rxrpc(r8, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r8, 0x8)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r7, 0x11, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4)
ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000300)={{0x4, 0x68}, {0x4, 0x1003ff}, 0xffffffff, 0x5})
fanotify_init(0x1, 0x1000)

29m28.933484507s ago: executing program 1 (id=4274):
creat(&(0x7f0000000100)='./file0\x00', 0x7a)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r1, 0x402, 0x1a)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa000000119078000000000010000000004e200008907800"/42], 0x0)
syz_emit_ethernet(0x1015, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1007, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xff3, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075d7985ad56808387a44610c2b0890de328bb3eeae9fbd6da1b50153ad6d1cf108b7eca8880293643bc836ee65f5c5b0515a61825e38a579129d67bee7e6330e87c8f63064fa1abb7b3af74c16b90b450e781e2243d8"}}}}}}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x40000, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0000, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x28)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
truncate(&(0x7f0000000000)='./file0\x00', 0x7fffffff)
close_range(r5, 0xffffffffffffffff, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)={<r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r8})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={<r9=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r9, 0x3, r4, 0x5})

29m27.915773689s ago: executing program 1 (id=4277):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=@newlink={0x58, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x58}}, 0x0)
ioctl$OCFS2_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x9, 0xe4d6})

29m27.710935113s ago: executing program 1 (id=4278):
r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f907, 0xfffffffc, '\x00', @value64=0x4}})
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x50000)
syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYBLOB="300100001700050526bd7000fedbdf25ac1414bb000000000000000000000000000004d3ff000000ac1414bb000000000000000000000000e000000200000000000000000005000000000001000000000000009fee3c361bfdffffff004e2100064e22000000000072234e4703a3461b29600751e163959ca2f005908fd77efe3db9eb3059ee5a3534c3b4675e4a0963ba70f5182ab1b6ffe09933f8cf030dc44cb17db71c1f91712c17479dd388dc0a31a1bff4ba8eea0cf1040d11", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000fe8000000000000000000000000000bb4e2300014e2200000a00802028000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000004000000000000000000000000000000020000000000000004a000000000000009000000000000000700000000000000c600000000000000060000000000000005000000000000000b0000000000000000000000000000000000000000000000010101030000000009000000008000002bbd70000c0008000800080000d10000"], 0x130}, 0x1, 0x0, 0x0, 0x4090}, 0x4004)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r4})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000700)={0x0, 0x14000, 0x8})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0xc, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$dsp(r8, &(0x7f00000012c0)="a5", 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0xb, 0x77, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x800001, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x41, 0x200008c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x7, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8006, 0x5, 0xfffffff3, 0x10, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x9, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0xfff, 0x4, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x1000009, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x0, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x2, 0x5, 0x7fff, 0x0, 0x2005, 0xf, 0x4, 0x6, 0x5, 0x4000005, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xff, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x1200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x1000006, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x200006, 0x0, 0x2, 0x21c, 0x7, 0x3, 0x0, 0x80aacd, 0x4, 0x2], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x0, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0x1000, 0x7f, 0x0, 0x5, 0xffffffff, 0x4f99e1f, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x0, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x80, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2440, 0xfff]}, 0x45c)
unshare(0x22020400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000008005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f080004400000003708000240007470726f7879000014000280080002400000000c080001400000000a0900020073797a3200000000140000001100010000000000000000000200000a2429f5b69d1cbb1bcae71d53f1ce6d7ab77a9deaf75d24225a9edcfc186521ce20ac7d0c859a097002cfc44318d5ca30c5f81d25b0747f41ab64afdb64c6e045971479450586cd40d737"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close(r7)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001300010029bd7000f800000010000000", @ANYRES32=r9, @ANYBLOB="062a01000904000008001f0088b0c4660a0001"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
r10 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r10, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x20008040, &(0x7f0000000240)={0x2, 0x0, @empty, 0xfffffffc}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

29m12.602986712s ago: executing program 33 (id=4278):
r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f907, 0xfffffffc, '\x00', @value64=0x4}})
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x50000)
syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYBLOB="300100001700050526bd7000fedbdf25ac1414bb000000000000000000000000000004d3ff000000ac1414bb000000000000000000000000e000000200000000000000000005000000000001000000000000009fee3c361bfdffffff004e2100064e22000000000072234e4703a3461b29600751e163959ca2f005908fd77efe3db9eb3059ee5a3534c3b4675e4a0963ba70f5182ab1b6ffe09933f8cf030dc44cb17db71c1f91712c17479dd388dc0a31a1bff4ba8eea0cf1040d11", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000fe8000000000000000000000000000bb4e2300014e2200000a00802028000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000004000000000000000000000000000000020000000000000004a000000000000009000000000000000700000000000000c600000000000000060000000000000005000000000000000b0000000000000000000000000000000000000000000000010101030000000009000000008000002bbd70000c0008000800080000d10000"], 0x130}, 0x1, 0x0, 0x0, 0x4090}, 0x4004)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r4})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000700)={0x0, 0x14000, 0x8})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0xc, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$dsp(r8, &(0x7f00000012c0)="a5", 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0xb, 0x77, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x800001, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x41, 0x200008c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x7, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8006, 0x5, 0xfffffff3, 0x10, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x9, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0xfff, 0x4, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x1000009, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x0, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x2, 0x5, 0x7fff, 0x0, 0x2005, 0xf, 0x4, 0x6, 0x5, 0x4000005, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xff, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x1200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x1000006, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x200006, 0x0, 0x2, 0x21c, 0x7, 0x3, 0x0, 0x80aacd, 0x4, 0x2], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x0, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0x1000, 0x7f, 0x0, 0x5, 0xffffffff, 0x4f99e1f, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x0, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x80, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2440, 0xfff]}, 0x45c)
unshare(0x22020400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000008005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f080004400000003708000240007470726f7879000014000280080002400000000c080001400000000a0900020073797a3200000000140000001100010000000000000000000200000a2429f5b69d1cbb1bcae71d53f1ce6d7ab77a9deaf75d24225a9edcfc186521ce20ac7d0c859a097002cfc44318d5ca30c5f81d25b0747f41ab64afdb64c6e045971479450586cd40d737"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close(r7)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001300010029bd7000f800000010000000", @ANYRES32=r9, @ANYBLOB="062a01000904000008001f0088b0c4660a0001"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
r10 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r10, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x20008040, &(0x7f0000000240)={0x2, 0x0, @empty, 0xfffffffc}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

25m36.995945057s ago: executing program 0 (id=5420):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018000080140001800f0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x80)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002a000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

25m36.672038024s ago: executing program 0 (id=5421):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000706000240000000020900010073797a31000000002c000000030a010100000000e7ffffff0a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x200048a0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
getcwd(&(0x7f0000000000)=""/204, 0xcc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x2400c010}, 0x850) (async)
close(0x3)

25m36.471087374s ago: executing program 0 (id=5422):
creat(&(0x7f0000000100)='./file0\x00', 0x7a)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r1, 0x402, 0x1a)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa000000119078000000000010000000004e200008907800"/42], 0x0)
syz_emit_ethernet(0x101c, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x100e, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xffa, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075d7985ad56808387a44610c2b0890de328bb3eeae9fbd6da1b50153ad6d1cf108b7eca8880293643bc836ee65f5c5b0515a61825e38a579129d67bee7e6330e87c8f63064fa1abb7b3af74c16b90b450e781e2243d84bd8191f589ecd"}}}}}}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x40000, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0000, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x28)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0])
truncate(&(0x7f0000000000)='./file0\x00', 0x7fffffff)
close_range(r5, 0xffffffffffffffff, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)={<r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r8})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={<r9=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r9, 0x3, r4, 0x5})

25m36.325732032s ago: executing program 0 (id=5424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x8, 0xffffffffffffffff, 0x1})
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000004100050101000000000000000101f300000000001c0001000600060086ddffff100007007f0000017f00e200910040001400020010000c00090005"], 0x48}, 0x1, 0x0, 0x0, 0x80030}, 0x2000c840)

25m36.196238762s ago: executing program 0 (id=5425):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x7)
pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00')
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0], 0x0)

25m35.530489812s ago: executing program 0 (id=5429):
r0 = socket$kcm(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffc}, 0x80, 0x0}, 0x20000001)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"76f3767468dfcd3288c02b1f0fb6e90d2e7d384907ef2c3898f8c82ad369174f07e1b3e6e91e091462b16bfab69681acdd4157ca8f0d9df329d0c003be4f52f419f9fa7a93641d83ed20696df06b489791136eeeeb6e8a1d13b5093a0b00f1b4671737654833dba9d3513cfe866d2761b34819ef0f6da6d8b0349656842967dffcd8384587c3611d0620c80c6c921a4da4325f7f2ccab7176eddfb5aaccb612d35860d1d4f3cebfd137f9dc9dc47742d24b306dee45912b8e3819bdfed0bdc6df2b6d17218783fc8ad7985364d70e649a0cddd0ad86f0d1241f848c701c71e4d2782e307e9f983b92ac44f358c2b0782efd1d9b74d5157853873023c039c965f4cf1baea199dd4991d1b0ab8b3ec9f18eb4c069b4a44b774b8703d141e3ecde814bba4eb3569ab2b6c3dd61ebdd9ff889714b5f8ba20c240b6c5481d3131b46dea7b769f4dd46ca700f704544f47830003d91a76a718f866c532c5a11fc71e8ed96324eb9ab48b256b59c8dc3ec803105564819ae6a77b07b79b8c443d42fa4dfa5e42aa35a910ae0991a18dee579ecf3d85b4427dcb3631a847b07e7c6f2c5ae928ebbc7542bbff7d96963a81c4fdc7b710988d7f3b7e902546261724af3cba7f2ee073fb924b89c3eb1e9dd97c9c2b738adadf8dcaa5f7422426265795182f00f1df85322a7e913ba26a8f2cc818f535c0f5f496d1da4b67b86f93e7ec1c8d7248bc9ae44591454d70b41fd76257d4af6d81e6de657be0b4c52ca06917ff85769bcc598f0834a10766e6ef8a6b59fbe3be07181311b0229e8ab92a88bf1c55afa924c6627cbed335a1549d891fc487d8a414e81ff4dc2423d70fe62ff19df9f4794e8256744b8127f052d55708d54c0b11ad2cdac7ec231d33849b4655170bf1084a6ab8efbbddb9239542dbbeeed78f5128d1b7d39c3a7fca9460dd404cb7c838ff47a79a4f235112b5a1eac506be6d5716d72bff5fcfb587d1a13b737964deef75e0c05ae552e26144ac844b11ef03981defe0a26afbbd5a41a2c7415b9803abd062a2eee8ab180b3193b972e3bd615f700b4fea42ec6f36fc175a8df54e7c42de443082ceeeca04824bda5c1a40417927a0f4f7fd75c7e94fa12ab3d0498a81df9a5f1e2d285a39fb7a114f61a05254a5a4c99d1a75994f2ee7b7a9b8807dc7c6f11296cadae6edbf465690420c2789607118ba01f64638de57391f7f1178928f2e86f38dfa402e90c2d2cf0a8845fa1599c60ee904f26504701324f1e908b0fde29586f25860f452417546deae1fa601058a7a2f72a30141c6748f2cd95305f076a6237a9d31841ee4a760404f91e3afa760a001145616b3d4690854e0229242b08bb624ca287d640f693e83cec860895c873b629ded6ea681ef7e990b4e45435398f150748d5fe82ff96511981db8ee4d2dd82091f2c98aae02e6cdcce54c1ce54d0ae9bf8305707edb5854ac5e15cf5d80af13f334f11ca6fb1716996e21ec23333f80c160e586291dc6de43d364606d650416704d816053102a7f619232d9d8cf482e551704de5aafcf9fed4073bb5cc3ede132935580a733721db455e32445b6aaff4f67fa57b5ba90f32f7efa796d9401d441bf6dcffad9d15480231254a4a1fbaff06bd8548fdb6c20d5a810c910f345a891e31a1edb00919b8d58436d6381484e6513f79fcae63816047d67ed0f6a83489e75406a4ed6445a34c8e065051bac212905a8ec0bdd3e545ff2cfbe1d7878da42feac19aa64814a74d712ca414c43191bc083b18140de56285c7617fa27352bd03f22bfc56f451cdad01d0096e87cfc71a3a76b747308a43a23fc2347e5add99f4654a7acf154bc339cd4f590b86501f555789ea0f20c071a328c10cdc59d3b3e1ca1874e6b795ee2efa4c7035b4db02e7b7e141ac6f4e8e1c1023d28c211349e8c141b39e8a51e1c2f1fb8ecdf92dbac3715a15b044db35f2d7c83183db41fc638b79c82698ad97eb05d95d98cc1292f7bbbe8e14a3b72a6d5c9b71e41bc71493f99c00c3994ec9e9c6e01dba7be1f8e7ea360756b429ec217b9b5861e833f949df24fd8ea664a8f970d967403f87d89cc05023c1de0cd9f2fde792c1304b0138e0918ff2fce285c10efb154a36bd13a3651ed8ef14330691bd81755bc7cb5bd1d014a25116db8a92e4dedbe1ea1d35d545d066626b094adbd7fc46036ea915288567cd47cc7e8c6cd66acaffe0978011daa6311eb7422849425317dcc1a02ef63fbfa8d1f8b18556075e0a9bf1612c99e05d181b37c117c9addf2f4dc7bdea3f8052c170093c0ce2edde88b32acd0b7a4fd92f7913d517c31ff7c389cf2860f9d53bc9d721be722801a9fb658be7680acbee0ba4848ceade211cafadea23276b1dc0ff80cc99c04d8aea186667011894d1ef46fdcd9812d1157cbc5c889f0b2e4ff4b93e789f7f3a53bff6c311ed2a68ff4a80969de95c88a117a2a75d73a3df69bffdc0d7161f1b284821b28c3f51bece399f46c50a4d06cdaffa5994bfcb455552cee208cd188ad893c999e0ae1c9b4bccc305e287236111c5d58416640489dbeacdcab80e55d8e2285e00d571396fa74625913d027da958c832527d84c77ae3655c89335e9f9975f667dc1e635c372147c3b6c75b475cc787007dfebe651ec5dca41c6d056e2999a73da71d8ed814a647aa01fa4cee4ca5124ce380c4b170c4ca9834b4d71ed51278f359e9de7db883bf4afaa7a3519ae91e7655494fd9222330c4c33a72abd52aa1526478ed1aef5c6f6d5ecf4aa5e0716d663979b0f9e9e6957dd14faf5b14cc944aa57a43527c8865a4fe19be8257029533c2050e50a5d2c761194435c46261fea07ec9e07b5f9de7d49187f1836ba69a2c4d7990c35b5acf0d38859ee403f6eb5a663b9da7b58b5ca9730be4fe842630f5a1cdd9f7ebb0394b796a8b70a43a8906050bfef0d4da0fac9bc7820153b074e99e5bd6ba2a0137491283b2d38ca47e02790f81382c89cc5460bc39f04d1afb422f976a352c5bd398ea8241fe2c2b9368ea9b2483aaff2c4f1f15b7d13625dfbaac5032b75d8c738f668086b9c4a770122d8b10d68c26f5d94f86ed2051382a55c50a08c4bd683c9143bc2cf958f8f3aa77b675e9b97f3b5c0c94524c59b449ff1a22631cab422ddf769adc3d83befa2090f6853b39b3060e81a667727b0c902e09dddb4d27b8523cd6ac8bd693f10e0acfa96d191c93ee7bf5a62f03f58f11ac9a91e15b89209d78913b483f0e45bef0835e9235953aa1bccac0a8700980b337e2f546cbf7aa349b22128b2f52341cf4079ef832f73630dfe952c70421bbed205388afde6a94d7d083b1d6ad299be23765cdad957863a07e0e2cc0c9912c9ec7a728cad68d8f48ae5d3dd4c4c8e0e48532ddb3f570f91ee97b61a5a31fe1f1178f5e9fae6f85bcf6f71d7b90b36e83e0802d89926ea3a204cc690e30028ce9c28fa2428bc9f1738f1c9e26769647aff66428664ff5f53bf368aef379b0eff961a9261b84af862347b901f28bd5f0f1e10ca90a77c2e2ec3fc9c38928e2a60bedb155b7f5f0044b4ac368b54c84e40ffa07e84b93d0e6f35cd479fe26bfa27753441f729f3c5d68a1b67852043e96d1861577bcd0b7e89dec47dbe138a07babf86a44487c1c3aa8730c6a2bbd4cadcb68b23657c3445d5f32b4d094d221f777df0915ef9e05cea75a141f172976106c5bfa44040f7c5269795885353243b3b83fa10690f8e03760d903ad00c4c08c87050334d08061ea38cbba423c58eb09d696430cc59fa5ba449853f6d249ed98e806138e4f64887f3258ce891ecf513848123c66d7b3a3a5ecc4888f3c9ad4808f52d210da7f058645e43b468e73918199df9dce5d929bd99e1675aa9d2f954448d3fccda9b683dbc5326d70e338a1b5bb9e314f506804367242b0507d4dc052b82968c22c341cf5dd8ad1a0891674af49d4f410bcf90c0d8837090173571fb35cef09c9f93c0e77a9753618b4abb87885eba878845812d5b80487241974e7aa9c3cfeff7f822f22393a2973dc96b9eccbd5369d738f7ba68a35df40a728d32ff24788762efc31f43aacf043231ca887bcf6fdebaf8d3009dafaa4a0b4338802a44b9e333c362391f42ba9ac1d0a4573b47a0a49f0c83aa6756ade35618e8cf80dee254b4fbcd5e69a2deb1b0af405cac93b9ec35cb9f9604fb60aa526485b436fbdefda0c50274413fae15948ddc77348268b9ce767fe4e249312001b57548616ccad41c3de8bbab309782b5dad01966bd8229c7c194c40c2cc5fe901a69735963bbbcad1cf0bb64b3ebbce808fcaba2547dbab4df6359074fa18f8272f5e24a5adfd6a50a2fe3800e0d60c7b24470914f615154e98b231cf627738948aacba699294a2f0473aff0581c8104cfc1ae3884d82a6f56f866a6cfc92deb0518ac9d6d3bd722144767ef36ebfdd6766db4a7346570b156b49aaa5f115424751a38a0dd26eaabc5775cdf612c685d964bf240b1e8fe6af5860dc050095d55959a810dc76a0520d451589d93a3b73178385f4d716f404d9457b8d30ae3d024471147216b37f92d2c90c52d9a83b4fd779fc138310b480d2fc87982d2797f22e195a4e885b6b6c1d49422709eee55e68f6512b1c59c962e17998c04307005a753b35e9ac7f567200f4887e9991557ea862deef57c2a2938e7564f88ac3bdf86965005a1cf758b61a437c7b74a030a76bb8b0f7f4437c5afcfc7c8c5e769b732c10788fed11b3cedbd27487743cd35a7146405858aad1e50b048dbd31c5d2455e1d5ed31cf10fbeeb125563e53ead2be53500c49edae46a6b3d51fea60c602334871a28398d00403713e2e31fec19d9fe0fca2975b65af2f2cf3d3dc27d36dffac11f4b60fa0dff78de7aaa062e74627c133673e6030423e178ebafcfb87ae2abeab3783c6f8d23011b49b62a20f1501eed08d169049f2f2002d2d75d8e58ff836f8ca06f1143f0b6f68e8bc3c6c3a50c638d1ec882955c2447ffc791e82446ece5fe6f193195092fc75022ee2e121b5e7af5ff253b42a33c0a54c824a4368bb703a64e9d47acaee3b5c988e37c2d06c620d85870a894401e1881a11e96b04bfeb04ec7b49185302978a73f95c6a1f9203db6d4581fae2fd818133753c415e4f1088bd6940475b3a416cac8ebfd9462c528c7842ae89c4da510a2ca5e0e26c45b4359b6729c35451d696552ef8c08eb477b803f1e5e925ee8e955a2458714ae649aca23bc0a595b4a3dbe32bf9a8d73dc15a4a788f3a1036f0f38e7a6a90d24c3f6ed1d479385356857f7ef1e7f85e259773526ce936a929e4ab5efb74f7348b1b26706a3d7af5b7695d0c8fa14142264329387befef7f35917d2838c59ac1d0eb484698578e4a2a149d1c8f1dd5b3bda62ead5761d367e5e9b4480d12b30569c72ed1cb2a4ce257c386d3e705fe41e05a327295f51c87f9b7b4de6a07b6e4b10206f50a3ec04b199504f9b8ff3e519425feb5b218e0476b9b248fa36a621173466175353ae91af245086bcc8b932ce47dff7d3a936a7f439190f459ca9e5fdc7d572e47b83aeb691219c277a9eb5928d0c4b5df9eee7323199e5b3d98b0f34fbc00b7d40d21d6e215d70c9df28e195f4a4e312ce8def645fc7eaf00891dfeb912af8b19898b29c15c4632e1643d4f259c4cb7bf83c0df062ba469deb8e92ca69739f7ea3cee391b6713dc5cbc11961488bebdccd0edaa21aa3c3933630f41ee3737df481ccee70c1c3c1d8b1f0bc183045287a7c999cc61b8cf991717ccff7168de", 0x1000}}, 0x1006)
r1 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x7)
sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x40446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x401}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x40008c0)
syz_open_dev$vim2m(&(0x7f0000000000), 0xae3, 0x2)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x48}}, 0x0)
syz_io_uring_setup(0x4ad8, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
syz_io_uring_setup(0x1229, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000))
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, 0x0, 0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r10=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=<r11=>0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r10, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)

25m31.798058951s ago: executing program 4 (id=5444):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0006000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

25m31.408286243s ago: executing program 4 (id=5445):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40, 0x0, 0x1, 0xcb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xdfd0, <r1=>0xffffffffffffffff, 'id1\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000001580)="03a3", 0x2}], 0x1)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002640)={0x6, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000015c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000025c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=[r1, r0, r0, r1, r0, r0], 0x0, 0x10, 0x200}, 0x94)
r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f00000004c0)={0x0, {0x0, 0x0, @vsb}})
ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r5, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x31, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40009}}, @call={0x85, 0x0, 0x0, 0x1c}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)

25m31.30287283s ago: executing program 4 (id=5446):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x7ffffffe, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})

25m30.36651809s ago: executing program 4 (id=5449):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='vegas', 0x5)
r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050a00000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, &(0x7f0000000180)=[0x0, 0x0]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, 0x43, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@typed={0x4, 0xa6}, @nested={0x3c, 0x169, 0x0, 0x1, [@nested={0x38, 0x14c, 0x0, 0x1, [@nested={0x34, 0x9a, 0x0, 0x1, [@typed={0x7, 0x105, 0x0, 0x0, @binary="be739a"}, @nested={0x28, 0xe3, 0x0, 0x1, [@nested={0x22, 0x58, 0x0, 0x1, [@generic="f4cd6efcb4d8e711e094b551a14f4fc6c7df9cb9177d9b57ea54baa8fd43"]}]}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
r6 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0)
syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r7, &(0x7f0000000000)="93", 0xf5)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r9=>r0, {0x2}}, './file0\x00'})
ioctl$DRM_IOCTL_GET_STATS(r9, 0x807c6406, &(0x7f0000000280)=""/145)
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0)
sendfile(r10, r10, 0x0, 0x200000)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@any, 0x3}, 0x1, 0x0, 0x10})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1})

25m26.457209221s ago: executing program 4 (id=5459):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003540))
syz_open_dev$video(&(0x7f0000000140), 0x3, 0x804000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
memfd_secret(0x0)
openat$khugepaged_scan(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
gettid()
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x20040000)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe00003a4, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f00000003c0)={0x0, 0x6, 0x2, {0x1, @vbi={0x9, 0x7935, 0x1, 0x494e4f4b, [0xfffffeff, 0x3], [0x1, 0x3ff], 0x1}}, 0xaea3})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)

25m24.498801123s ago: executing program 4 (id=5464):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905", @ANYRES32], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) (async)
r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r4, &(0x7f0000000180)=r5, 0x12) (async)
write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7)

25m19.927284254s ago: executing program 34 (id=5429):
r0 = socket$kcm(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffc}, 0x80, 0x0}, 0x20000001)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"76f3767468dfcd3288c02b1f0fb6e90d2e7d384907ef2c3898f8c82ad369174f07e1b3e6e91e091462b16bfab69681acdd4157ca8f0d9df329d0c003be4f52f419f9fa7a93641d83ed20696df06b489791136eeeeb6e8a1d13b5093a0b00f1b4671737654833dba9d3513cfe866d2761b34819ef0f6da6d8b0349656842967dffcd8384587c3611d0620c80c6c921a4da4325f7f2ccab7176eddfb5aaccb612d35860d1d4f3cebfd137f9dc9dc47742d24b306dee45912b8e3819bdfed0bdc6df2b6d17218783fc8ad7985364d70e649a0cddd0ad86f0d1241f848c701c71e4d2782e307e9f983b92ac44f358c2b0782efd1d9b74d5157853873023c039c965f4cf1baea199dd4991d1b0ab8b3ec9f18eb4c069b4a44b774b8703d141e3ecde814bba4eb3569ab2b6c3dd61ebdd9ff889714b5f8ba20c240b6c5481d3131b46dea7b769f4dd46ca700f704544f47830003d91a76a718f866c532c5a11fc71e8ed96324eb9ab48b256b59c8dc3ec803105564819ae6a77b07b79b8c443d42fa4dfa5e42aa35a910ae0991a18dee579ecf3d85b4427dcb3631a847b07e7c6f2c5ae928ebbc7542bbff7d96963a81c4fdc7b710988d7f3b7e902546261724af3cba7f2ee073fb924b89c3eb1e9dd97c9c2b738adadf8dcaa5f7422426265795182f00f1df85322a7e913ba26a8f2cc818f535c0f5f496d1da4b67b86f93e7ec1c8d7248bc9ae44591454d70b41fd76257d4af6d81e6de657be0b4c52ca06917ff85769bcc598f0834a10766e6ef8a6b59fbe3be07181311b0229e8ab92a88bf1c55afa924c6627cbed335a1549d891fc487d8a414e81ff4dc2423d70fe62ff19df9f4794e8256744b8127f052d55708d54c0b11ad2cdac7ec231d33849b4655170bf1084a6ab8efbbddb9239542dbbeeed78f5128d1b7d39c3a7fca9460dd404cb7c838ff47a79a4f235112b5a1eac506be6d5716d72bff5fcfb587d1a13b737964deef75e0c05ae552e26144ac844b11ef03981defe0a26afbbd5a41a2c7415b9803abd062a2eee8ab180b3193b972e3bd615f700b4fea42ec6f36fc175a8df54e7c42de443082ceeeca04824bda5c1a40417927a0f4f7fd75c7e94fa12ab3d0498a81df9a5f1e2d285a39fb7a114f61a05254a5a4c99d1a75994f2ee7b7a9b8807dc7c6f11296cadae6edbf465690420c2789607118ba01f64638de57391f7f1178928f2e86f38dfa402e90c2d2cf0a8845fa1599c60ee904f26504701324f1e908b0fde29586f25860f452417546deae1fa601058a7a2f72a30141c6748f2cd95305f076a6237a9d31841ee4a760404f91e3afa760a001145616b3d4690854e0229242b08bb624ca287d640f693e83cec860895c873b629ded6ea681ef7e990b4e45435398f150748d5fe82ff96511981db8ee4d2dd82091f2c98aae02e6cdcce54c1ce54d0ae9bf8305707edb5854ac5e15cf5d80af13f334f11ca6fb1716996e21ec23333f80c160e586291dc6de43d364606d650416704d816053102a7f619232d9d8cf482e551704de5aafcf9fed4073bb5cc3ede132935580a733721db455e32445b6aaff4f67fa57b5ba90f32f7efa796d9401d441bf6dcffad9d15480231254a4a1fbaff06bd8548fdb6c20d5a810c910f345a891e31a1edb00919b8d58436d6381484e6513f79fcae63816047d67ed0f6a83489e75406a4ed6445a34c8e065051bac212905a8ec0bdd3e545ff2cfbe1d7878da42feac19aa64814a74d712ca414c43191bc083b18140de56285c7617fa27352bd03f22bfc56f451cdad01d0096e87cfc71a3a76b747308a43a23fc2347e5add99f4654a7acf154bc339cd4f590b86501f555789ea0f20c071a328c10cdc59d3b3e1ca1874e6b795ee2efa4c7035b4db02e7b7e141ac6f4e8e1c1023d28c211349e8c141b39e8a51e1c2f1fb8ecdf92dbac3715a15b044db35f2d7c83183db41fc638b79c82698ad97eb05d95d98cc1292f7bbbe8e14a3b72a6d5c9b71e41bc71493f99c00c3994ec9e9c6e01dba7be1f8e7ea360756b429ec217b9b5861e833f949df24fd8ea664a8f970d967403f87d89cc05023c1de0cd9f2fde792c1304b0138e0918ff2fce285c10efb154a36bd13a3651ed8ef14330691bd81755bc7cb5bd1d014a25116db8a92e4dedbe1ea1d35d545d066626b094adbd7fc46036ea915288567cd47cc7e8c6cd66acaffe0978011daa6311eb7422849425317dcc1a02ef63fbfa8d1f8b18556075e0a9bf1612c99e05d181b37c117c9addf2f4dc7bdea3f8052c170093c0ce2edde88b32acd0b7a4fd92f7913d517c31ff7c389cf2860f9d53bc9d721be722801a9fb658be7680acbee0ba4848ceade211cafadea23276b1dc0ff80cc99c04d8aea186667011894d1ef46fdcd9812d1157cbc5c889f0b2e4ff4b93e789f7f3a53bff6c311ed2a68ff4a80969de95c88a117a2a75d73a3df69bffdc0d7161f1b284821b28c3f51bece399f46c50a4d06cdaffa5994bfcb455552cee208cd188ad893c999e0ae1c9b4bccc305e287236111c5d58416640489dbeacdcab80e55d8e2285e00d571396fa74625913d027da958c832527d84c77ae3655c89335e9f9975f667dc1e635c372147c3b6c75b475cc787007dfebe651ec5dca41c6d056e2999a73da71d8ed814a647aa01fa4cee4ca5124ce380c4b170c4ca9834b4d71ed51278f359e9de7db883bf4afaa7a3519ae91e7655494fd9222330c4c33a72abd52aa1526478ed1aef5c6f6d5ecf4aa5e0716d663979b0f9e9e6957dd14faf5b14cc944aa57a43527c8865a4fe19be8257029533c2050e50a5d2c761194435c46261fea07ec9e07b5f9de7d49187f1836ba69a2c4d7990c35b5acf0d38859ee403f6eb5a663b9da7b58b5ca9730be4fe842630f5a1cdd9f7ebb0394b796a8b70a43a8906050bfef0d4da0fac9bc7820153b074e99e5bd6ba2a0137491283b2d38ca47e02790f81382c89cc5460bc39f04d1afb422f976a352c5bd398ea8241fe2c2b9368ea9b2483aaff2c4f1f15b7d13625dfbaac5032b75d8c738f668086b9c4a770122d8b10d68c26f5d94f86ed2051382a55c50a08c4bd683c9143bc2cf958f8f3aa77b675e9b97f3b5c0c94524c59b449ff1a22631cab422ddf769adc3d83befa2090f6853b39b3060e81a667727b0c902e09dddb4d27b8523cd6ac8bd693f10e0acfa96d191c93ee7bf5a62f03f58f11ac9a91e15b89209d78913b483f0e45bef0835e9235953aa1bccac0a8700980b337e2f546cbf7aa349b22128b2f52341cf4079ef832f73630dfe952c70421bbed205388afde6a94d7d083b1d6ad299be23765cdad957863a07e0e2cc0c9912c9ec7a728cad68d8f48ae5d3dd4c4c8e0e48532ddb3f570f91ee97b61a5a31fe1f1178f5e9fae6f85bcf6f71d7b90b36e83e0802d89926ea3a204cc690e30028ce9c28fa2428bc9f1738f1c9e26769647aff66428664ff5f53bf368aef379b0eff961a9261b84af862347b901f28bd5f0f1e10ca90a77c2e2ec3fc9c38928e2a60bedb155b7f5f0044b4ac368b54c84e40ffa07e84b93d0e6f35cd479fe26bfa27753441f729f3c5d68a1b67852043e96d1861577bcd0b7e89dec47dbe138a07babf86a44487c1c3aa8730c6a2bbd4cadcb68b23657c3445d5f32b4d094d221f777df0915ef9e05cea75a141f172976106c5bfa44040f7c5269795885353243b3b83fa10690f8e03760d903ad00c4c08c87050334d08061ea38cbba423c58eb09d696430cc59fa5ba449853f6d249ed98e806138e4f64887f3258ce891ecf513848123c66d7b3a3a5ecc4888f3c9ad4808f52d210da7f058645e43b468e73918199df9dce5d929bd99e1675aa9d2f954448d3fccda9b683dbc5326d70e338a1b5bb9e314f506804367242b0507d4dc052b82968c22c341cf5dd8ad1a0891674af49d4f410bcf90c0d8837090173571fb35cef09c9f93c0e77a9753618b4abb87885eba878845812d5b80487241974e7aa9c3cfeff7f822f22393a2973dc96b9eccbd5369d738f7ba68a35df40a728d32ff24788762efc31f43aacf043231ca887bcf6fdebaf8d3009dafaa4a0b4338802a44b9e333c362391f42ba9ac1d0a4573b47a0a49f0c83aa6756ade35618e8cf80dee254b4fbcd5e69a2deb1b0af405cac93b9ec35cb9f9604fb60aa526485b436fbdefda0c50274413fae15948ddc77348268b9ce767fe4e249312001b57548616ccad41c3de8bbab309782b5dad01966bd8229c7c194c40c2cc5fe901a69735963bbbcad1cf0bb64b3ebbce808fcaba2547dbab4df6359074fa18f8272f5e24a5adfd6a50a2fe3800e0d60c7b24470914f615154e98b231cf627738948aacba699294a2f0473aff0581c8104cfc1ae3884d82a6f56f866a6cfc92deb0518ac9d6d3bd722144767ef36ebfdd6766db4a7346570b156b49aaa5f115424751a38a0dd26eaabc5775cdf612c685d964bf240b1e8fe6af5860dc050095d55959a810dc76a0520d451589d93a3b73178385f4d716f404d9457b8d30ae3d024471147216b37f92d2c90c52d9a83b4fd779fc138310b480d2fc87982d2797f22e195a4e885b6b6c1d49422709eee55e68f6512b1c59c962e17998c04307005a753b35e9ac7f567200f4887e9991557ea862deef57c2a2938e7564f88ac3bdf86965005a1cf758b61a437c7b74a030a76bb8b0f7f4437c5afcfc7c8c5e769b732c10788fed11b3cedbd27487743cd35a7146405858aad1e50b048dbd31c5d2455e1d5ed31cf10fbeeb125563e53ead2be53500c49edae46a6b3d51fea60c602334871a28398d00403713e2e31fec19d9fe0fca2975b65af2f2cf3d3dc27d36dffac11f4b60fa0dff78de7aaa062e74627c133673e6030423e178ebafcfb87ae2abeab3783c6f8d23011b49b62a20f1501eed08d169049f2f2002d2d75d8e58ff836f8ca06f1143f0b6f68e8bc3c6c3a50c638d1ec882955c2447ffc791e82446ece5fe6f193195092fc75022ee2e121b5e7af5ff253b42a33c0a54c824a4368bb703a64e9d47acaee3b5c988e37c2d06c620d85870a894401e1881a11e96b04bfeb04ec7b49185302978a73f95c6a1f9203db6d4581fae2fd818133753c415e4f1088bd6940475b3a416cac8ebfd9462c528c7842ae89c4da510a2ca5e0e26c45b4359b6729c35451d696552ef8c08eb477b803f1e5e925ee8e955a2458714ae649aca23bc0a595b4a3dbe32bf9a8d73dc15a4a788f3a1036f0f38e7a6a90d24c3f6ed1d479385356857f7ef1e7f85e259773526ce936a929e4ab5efb74f7348b1b26706a3d7af5b7695d0c8fa14142264329387befef7f35917d2838c59ac1d0eb484698578e4a2a149d1c8f1dd5b3bda62ead5761d367e5e9b4480d12b30569c72ed1cb2a4ce257c386d3e705fe41e05a327295f51c87f9b7b4de6a07b6e4b10206f50a3ec04b199504f9b8ff3e519425feb5b218e0476b9b248fa36a621173466175353ae91af245086bcc8b932ce47dff7d3a936a7f439190f459ca9e5fdc7d572e47b83aeb691219c277a9eb5928d0c4b5df9eee7323199e5b3d98b0f34fbc00b7d40d21d6e215d70c9df28e195f4a4e312ce8def645fc7eaf00891dfeb912af8b19898b29c15c4632e1643d4f259c4cb7bf83c0df062ba469deb8e92ca69739f7ea3cee391b6713dc5cbc11961488bebdccd0edaa21aa3c3933630f41ee3737df481ccee70c1c3c1d8b1f0bc183045287a7c999cc61b8cf991717ccff7168de", 0x1000}}, 0x1006)
r1 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x7)
sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x40446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x401}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x40008c0)
syz_open_dev$vim2m(&(0x7f0000000000), 0xae3, 0x2)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x48}}, 0x0)
syz_io_uring_setup(0x4ad8, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
syz_io_uring_setup(0x1229, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000))
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, 0x0, 0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r10=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=<r11=>0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r10, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)

25m9.393248762s ago: executing program 35 (id=5464):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905", @ANYRES32], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) (async)
r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r4, &(0x7f0000000180)=r5, 0x12) (async)
write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7)

19.703561509s ago: executing program 2 (id=13647):
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000880)=[{r1, 0x8200}, {r0, 0x2080}], 0x2, 0x0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x41010019, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c47}}, 0x50)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYRES16], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe09, 0x3a}}}}, [@NL80211_ATTR_SSID={0x21, 0x34, @random="d5c06535aa03d49616e74f7d93cebf51779716c4d2620ac1e2938fea67"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x58}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, 0x0, 0x0)

14.377860507s ago: executing program 7 (id=13674):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000280)={'dummy0\x00', @broadcast})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x25}}, 0x4008040)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv6_newrule={0x38, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x14}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x8}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207}, {&(0x7f0000000540)=""/162}, {&(0x7f0000000600)=""/77}], 0x0, &(0x7f0000000680)=""/224}, 0x6}, {{&(0x7f0000000780)=@isdn, 0x0, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096}, {&(0x7f0000000240)=""/64}], 0x0, &(0x7f0000000ac0)=""/174}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)=""/224}, {&(0x7f0000000c00)=""/87}, {&(0x7f0000000dc0)=""/209}], 0x0, &(0x7f0000000ec0)=""/195}, 0x81}], 0x101f2043b8267e, 0x10120, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000d80), 0x36f, 0x20102, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd26, 0x25dfdbf9, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3500}}, 0x1c}}, 0x1c080)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}, {{&(0x7f0000001080)={0xa, 0x4e24, 0x100, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@flowinfo={{0x10, 0x29, 0xb, 0x4}}, @dontfrag={{0x10}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x1}}, @rthdrdstopts={{0x14, 0x29, 0x37, {0x33}}}, @dstopts={{0x14, 0x29, 0x37, {0x3b}}}, @hopopts={{0x14}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x3a, 0xd, '\x00', [@ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x4, [0x80000001, 0x8]}}, @jumbo={0xc2, 0x4, 0x7fffffff}, @jumbo, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0xb4, [0x9, 0x2]}}]}}}], 0xe8}}], 0x2, 0x20002040)

13.30832093s ago: executing program 7 (id=13676):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x71}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x2400}}, 0xcc}}, 0x0)

13.051175737s ago: executing program 7 (id=13677):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x1101)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x44b, 0x8000, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x54880}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x44}}, 0x4)

12.626839121s ago: executing program 7 (id=13679):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8101)
r1 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000002800)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0xc1086201, &(0x7f0000002840)={0x0, 0xc0000000, 0x40, 0x1, 0x100})
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r2)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x80001)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = syz_open_dev$loop(&(0x7f0000000000), 0x1c000, 0x440)
fsync(r8)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x4000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xc2ee}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r7}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4)
r9 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20040, 0x106)
move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r9, &(0x7f00000001c0)='./file0\x00', 0x40)

12.20775111s ago: executing program 7 (id=13681):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xc8, 0x1}}, 0x1c}}, 0x0)
r1 = socket(0xa, 0x80805, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r2)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000002680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf250c000000180005800c00028004000200be0d000008000100756470"], 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094)
timer_create(0x9, 0x0, &(0x7f0000bbdffc))
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x114, r3, 0x7b166a239d1d26f8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6ae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff69}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x26)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8})
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000140)="2665660f5bd52e0f38c9120f01c436660f3a40d56abaf80c66b89142a78a66efbafc0cecf326270f0966b9800000c00f326635010000000f300f20d86635200000000f22d8baf80c66b8c42cef8a66efbafc0c66b80000000066ef", 0x5b}], 0x1, 0x37, &(0x7f0000000400), 0x0)

11.81148713s ago: executing program 7 (id=13686):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}, {{&(0x7f0000001080)={0xa, 0x4e24, 0x100, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@flowinfo={{0x10, 0x29, 0xb, 0x4}}, @dontfrag={{0x10}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x1}}, @rthdrdstopts={{0x14, 0x29, 0x37, {0x33}}}, @dstopts={{0x14, 0x29, 0x37, {0x3b}}}, @hopopts={{0x14}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x3a, 0xd, '\x00', [@ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x4, [0x80000001, 0x8]}}, @jumbo={0xc2, 0x4, 0x7fffffff}, @jumbo, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0xb4, [0x9, 0x2]}}]}}}], 0xe8}}], 0x2, 0x20002040)

11.381855537s ago: executing program 36 (id=13686):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}, {{&(0x7f0000001080)={0xa, 0x4e24, 0x100, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@flowinfo={{0x10, 0x29, 0xb, 0x4}}, @dontfrag={{0x10}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x1}}, @rthdrdstopts={{0x14, 0x29, 0x37, {0x33}}}, @dstopts={{0x14, 0x29, 0x37, {0x3b}}}, @hopopts={{0x14}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x3a, 0xd, '\x00', [@ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x4, [0x80000001, 0x8]}}, @jumbo={0xc2, 0x4, 0x7fffffff}, @jumbo, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0xb4, [0x9, 0x2]}}]}}}], 0xe8}}], 0x2, 0x20002040)

11.292168069s ago: executing program 6 (id=13689):
r0 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=<r1=>0x0, &(0x7f0000001108)=<r2=>0x0, &(0x7f0000001110)=<r3=>0x0)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0x72, 0xd5, 0x9e, 0x10, 0x1508, 0x1001, 0x1c12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x60, 0x62, "", [{{0x9, 0x4, 0x4, 0x16, 0x1, 0x82, 0xa6, 0xa5, 0xe, [], [{{0x9, 0x5, 0x87, 0x0, 0x400, 0x8, 0x6, 0x1}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r5, 0x5b15, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000000), 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xfffffffffffffcce, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0)
syz_io_uring_submit(r1, r2, r3, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r6, 0x84, 0x84, 0x0, &(0x7f0000001200))
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)
r7 = openat$nvram(0xffffff9c, &(0x7f0000001080), 0x141000, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e)
sendmmsg(r9, &(0x7f0000002340), 0x0, 0x0)
ioctl$BLKGETZONESZ(r7, 0x80041284, &(0x7f00000010c0)=0x3d)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd2a, 0x25dfdbfc, {0xa, 0x80, 0x10, 0xc, 0x6}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000)

8.178778787s ago: executing program 8 (id=13692):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x21c21, 0x1103}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d040}, 0x20048000)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)

8.150572031s ago: executing program 6 (id=13694):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x2}, {0x7}, {}, @addr={0x2, 0xf}}, {0x0, 0x0, 0x2, 0x0, @time={0xfffe, 0x40}, {}, {0x5}, @connect={{0x5, 0x6}, {0x3}}}, {0x2, 0xfd, 0x0, 0x0, @time={0x5, 0x7fffffff}, {0x0, 0x8}, {}, @result={0x4, 0xcb}}, {0x0, 0x0, 0x1, 0x0, @time, {0x4, 0x7f}, {0x4, 0xf9}, @connect={{0xbe, 0xfc}, {0x0, 0x5}}}], 0x70)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7c1})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0)
mq_timedreceive(r3, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x8000002)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9500ffb6", @ANYRES16=r6, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000040)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7ff, r7, 0x700}, 0x38)
socket$inet6(0xa, 0x3, 0x9)

7.726160646s ago: executing program 8 (id=13696):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000209000/0x1000)=nil, 0x1000, 0x0)
io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1)
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x48, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2002, 0x1, {0x3}})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))

6.753816391s ago: executing program 8 (id=13697):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x80, &(0x7f0000000300)={@random="bb6233c1eb87", @random="35e855ae3f7e", @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "fcfb00", 0x4a, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "4fb15804a438"}, {0x0, 0x0, 0x1}, {0x1}, {0xdd86, 0x88be, 0x8000002, {{0xc, 0x1, 0x9, 0x0, 0x0, 0x2, 0x4, 0x9f}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0x6, 0x2, 0x8, 0x3, 0x0, 0x2, 0x2}, 0x2, {0x1, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x3f}, 0x38)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000880)=[{r3, 0x8200}, {r2, 0x2080}], 0x2, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06060077010000002a900683749e821dab8b923659b3e4"], 0x0}, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x41010019, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c47}}, 0x50)
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000040)={0x37, 0x0, [{0x1, 0xe323, 0x2, 0x475acdeb, 0xe38a}]})
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="0500000000000000000006000000", @ANYRES32, @ANYRES16], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe09, 0x3a}}}}, [@NL80211_ATTR_SSID={0x21, 0x34, @random="d5c06535aa03d49616e74f7d93cebf51779716c4d2620ac1e2938fea67"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x58}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}]}, 0x2c}}, 0x0)

6.63718312s ago: executing program 6 (id=13698):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0xffffffff}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120101020589694000047507a1d8010fbc5948e65645cf7a8104d87900200800bbaf99800000000000000000"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f00000000c0)="0dad59cd8480e9e6ba74bc5f772d22")

5.55040549s ago: executing program 5 (id=13701):
r0 = inotify_init()
ioctl$OCFS2_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x1, 0x1, 0x9, 0x9, 0x1, 0xfffffff8})
close(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
r2 = socket$xdp(0x2c, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14)
bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x4, r3, 0x6}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe4)
statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x800, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@ipv6_delrule={0xb0, 0x21, 0x200, 0x70bd2c, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x5, 0x6, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ff}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}}, @FRA_DST={0x14, 0x1, @local}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @FRA_DST={0x14, 0x1, @empty}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x2}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r6, r7}}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x14)
r8 = syz_open_dev$sndpcmc(&(0x7f0000000500), 0x3, 0x20000)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x4161, 0x0)
read$char_usb(r1, &(0x7f0000000540)=""/4096, 0x1000)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001540))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001680)={'syztnl2\x00', &(0x7f0000001600)={'gre0\x00', <r11=>r5, 0x8000, 0x40, 0xffffffff, 0x6, {{0x11, 0x4, 0x0, 0x1, 0x44, 0x65, 0x0, 0x97, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp={0x44, 0x18, 0x41, 0x0, 0x5, [0x96, 0xfff, 0x4, 0x80, 0x8]}, @noop, @timestamp={0x44, 0x10, 0x43, 0x0, 0x2, [0x8, 0x218, 0x3]}, @rr={0x7, 0x7, 0xe3, [@private=0xa010101]}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0x58, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000001980)={&(0x7f0000001580), 0xc, &(0x7f0000001940)={&(0x7f0000001780)={0x1ac, r10, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x68, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
close(r8)
r13 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r13, 0x8010500d, &(0x7f00000019c0))
r14 = syz_open_dev$dvb_demux(&(0x7f0000001a00), 0xf193, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r14, 0x40146f2c, &(0x7f0000001a40)={0x4, 0x0, 0x2, 0xb})
sendmsg$nl_route(r4, &(0x7f0000001d40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001ac0)=@bridge_setlink={0x240, 0x13, 0xd20, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0xfa356466c40f2c76, 0x11082}, [@IFLA_AF_SPEC={0x4}, @IFLA_PROP_LIST={0xb8, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ipvlan1\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'geneve0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'ipvlan1\x00'}, {0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'veth0_to_batadv\x00'}]}, @IFLA_IFALIASn={0x4}, @IFLA_AF_SPEC={0x64, 0x1a, 0x0, 0x1, [@AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5c}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'batadv0\x00'}, {0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'team_slave_0\x00'}]}, @IFLA_TXQLEN={0x8, 0xd, 0x83eb}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8000}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}, @IFLA_VF_PORTS={0xa4, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x16, 0x2, '/dev/snd/pcmC#D#c\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "0b16e92c9c1a22b13281e3dbf5bba9db"}, @IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "95726348f606d1374229c8c648d007af"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "df955b9d8f6d431c99dbc4e433f97a49"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0c33f5a0dfd1730e8adc89f725a3bd01"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7a651e9f7ea0d89492a6cae73ec440b5"}, @IFLA_PORT_PROFILE={0xb, 0x2, ':,!+.,\x00'}]}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x1}, 0x20004000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002180)={r13, 0x20, &(0x7f0000002140)={&(0x7f0000001f80)=""/131, 0x83, <r15=>0x0, &(0x7f0000002040)=""/231, 0xe7}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x6, 0x11, &(0x7f0000001d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e40)='syzkaller\x00', 0x5, 0x7f, &(0x7f0000001e80)=""/127, 0x41000, 0x10, '\x00', r5, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000001f00)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001f40)={0x5, 0x0, 0x12ff, 0x1}, 0x10, r15, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000021c0)=[{0x4, 0x5, 0x9}, {0xffffffff, 0x3, 0xf, 0x6}, {0x2, 0x5, 0x5, 0x7}, {0x0, 0x4, 0x4, 0x7}, {0x2, 0x5, 0x8, 0x8}, {0x0, 0x1, 0x0, 0x3}], 0x10, 0xffffd85f}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000002400)={0x0, 0xc8, &(0x7f0000002300)=[@in6={0xa, 0x4e23, 0x6c61, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xeb0}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x3ff, @mcast2, 0x7f}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0x579f, @dev={0xfe, 0x80, '\x00', 0x15}, 0x3}, @in6={0xa, 0x4e24, 0x18, @empty, 0x5}, @in6={0xa, 0x4e21, 0x0, @empty, 0x3}, @in6={0xa, 0x4e22, 0x400, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, &(0x7f0000002440)=0xc)
write$yama_ptrace_scope(r13, &(0x7f0000002480)='2\x00', 0x2)

5.166196968s ago: executing program 5 (id=13702):
r0 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=<r1=>0x0, &(0x7f0000001108)=<r2=>0x0, &(0x7f0000001110)=<r3=>0x0)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0x72, 0xd5, 0x9e, 0x10, 0x1508, 0x1001, 0x1c12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x60, 0x62, "", [{{0x9, 0x4, 0x4, 0x16, 0x1, 0x82, 0xa6, 0xa5, 0xe, [], [{{0x9, 0x5, 0x87, 0x0, 0x400, 0x8, 0x6, 0x1}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r5, 0x5b15, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000000), 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xfffffffffffffcce, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac8800000050a0102000000000000000007000004e2ff08800c00014000000000000000040c00014000000000000000060c00024000000000000000040c00014000000000000000000c00024000000000000000060c000240000000000000008a08000540fffffffc480004801400030076657468305f6d61637674617000000014000300677283300000000000000000000000001400030076657468315f746f5f68737200000000080002405c0ed2760c00024000000000000000030c00024000000000000000052c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000048000000060a010400000000000000000100000008000b4000fd00000900010073797a3000000000200004801c000180090001006d657461000000000c0002800800024000000021140000001100010000000000000000000000000aaffea4ef5ba05c8ec052d9c72318759558a2d890108147c6ec6327a7e3ff822bfebcc983bc26fa612fb910ffe85fee0a28473e7ac9c94b9d04c55ee035638a70804d8edcbfab30d9127c9bdf78ca83ab4b91be01c988ce3277fc262b514f4eef9293e46536d205ce2e1affccb320ff9749f19159df07ff7ffba641a0d4939b1b5ec5012189e6779b7ea20482c1c173f5227a2e22d15c3251db0c0b96661429bdbfb0ccaa5af0cef8c0c1c2e9342936610355c50d9f0e33080caf13f5"], 0x164}}, 0x0)
syz_io_uring_submit(r1, r2, r3, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r6, 0x84, 0x84, 0x0, &(0x7f0000001200))
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)
r7 = openat$nvram(0xffffff9c, &(0x7f0000001080), 0x141000, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e)
sendmmsg(r9, &(0x7f0000002340), 0x0, 0x0)
ioctl$BLKGETZONESZ(r7, 0x80041284, &(0x7f00000010c0)=0x3d)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd2a, 0x25dfdbfc, {0xa, 0x80, 0x10, 0xc, 0x6}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000)

4.113663279s ago: executing program 2 (id=13653):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (fail_nth: 13)

3.498269827s ago: executing program 2 (id=13703):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000680001000200f400fcffff7f00000000000000000c000200010000000500000004000b"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004090054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240b0001ff23000c2403"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
sendfile(r2, r0, &(0x7f00000000c0)=0x58, 0x5)

3.495357429s ago: executing program 6 (id=13704):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x3bfb, 0x0, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x808d7191dc52e0cd}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x88c0}, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00')
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x5}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x1c)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000280))
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0xfffffe14)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x1c00, 0xffffffffc24b0432, 0x5, 0x0, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8}}, 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f00000002c0)={0x1, 0x6}, 0x2)
syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f00000001c0)={0x2, 0xa3}, 0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffbffd}, 0x0)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
userfaultfd(0x80001)
ftruncate(0xffffffffffffffff, 0x8008976)

3.325729417s ago: executing program 8 (id=13705):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02)
syz_usb_disconnect(r0)
close(r1)

3.048843211s ago: executing program 5 (id=13706):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x2, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe02000100fc000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101000006000000"], 0x60}}, 0x0)

2.802520647s ago: executing program 5 (id=13707):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'geneve0\x00', 0x5}, 0x18)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x3a}, @timestamp_addr={0x44, 0x4, 0x54, 0x1, 0xf}]}}}], 0x18}, 0x4008804)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040), 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r3, 0x0, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @local}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x34, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xfff3}, {0x8}}, [{0x8, 0xb, 0x10000}, {0x8, 0xb, 0xbc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
syz_open_dev$char_usb(0xc, 0xb4, 0x5)

2.09201492s ago: executing program 9 (id=13687):
prctl$PR_GET_THP_DISABLE(0x2a)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000200)={0x1, @pix_mp={0x300, 0x800000, 0x36314752, 0x3, 0x0, [{}, {}, {0xfffffffc, 0x3}, {0x0, 0x201}, {}, {0x0, 0x6}, {0x7f}, {0x3}], 0x0, 0x0, 0x0, 0x0, 0x7}})
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x10)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)

1.891831035s ago: executing program 5 (id=13708):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x40d0}, 0x0)

1.878488186s ago: executing program 9 (id=13709):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.863041426s ago: executing program 2 (id=13710):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000900000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xf4}}, 0x10)

1.68281575s ago: executing program 2 (id=13711):
r0 = syz_usb_connect$uac1(0x2, 0xa3, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x80, 0x1, 0x1, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x8, 0x40, {0x7, 0x25, 0x1, 0x0, 0x91, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xff, 0xf, 0xf8, 0x7, 0xc4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x9f, 0x7f, 0x1, 0x4}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0xff, 0x7d, "2feeeaf0"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff, 0x2, 0x9, 0x47}]}, {{0x9, 0x5, 0x82, 0x9, 0x19f, 0x4, 0x0, 0x81, {0x7, 0x25, 0x1, 0x0, 0x5, 0x5}}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x25})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

1.681515771s ago: executing program 5 (id=13712):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x3bfb, 0x0, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x808d7191dc52e0cd}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x88c0}, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00')
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x5}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x1c)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000280))
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0xfffffe14)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x1c00, 0xffffffffc24b0432, 0x5, 0x0, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8}}, 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0), 0x2)
syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f00000001c0)={0x2, 0xa3}, 0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffbffd}, 0x0)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
userfaultfd(0x80001)
ftruncate(0xffffffffffffffff, 0x8008976)

1.672094962s ago: executing program 9 (id=13713):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8101)
r1 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000002800)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0xc1086201, &(0x7f0000002840)={0x0, 0xc0000000, 0x40, 0x1, 0x100})
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r2)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x80001)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = syz_open_dev$loop(&(0x7f0000000000), 0x1c000, 0x440)
fsync(r8)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x4000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xc2ee}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r7}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4)
r9 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20040, 0x106)
move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r9, &(0x7f00000001c0)='./file0\x00', 0x40)

1.408975261s ago: executing program 9 (id=13714):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x2}, {0x7}, {}, @addr={0x2, 0xf}}, {0x0, 0x0, 0x2, 0x0, @time={0xfffe, 0x40}, {}, {0x5}, @connect={{0x5, 0x6}, {0x3}}}, {0x2, 0xfd, 0x0, 0x0, @time={0x5, 0x7fffffff}, {0x0, 0x8}, {}, @result={0x4, 0xcb}}, {0x0, 0x0, 0x1, 0x0, @time, {0x4, 0x7f}, {0x4, 0xf9}, @connect={{0xbe, 0xfc}, {0x0, 0x5}}}], 0x70)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7c1})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0)
mq_timedreceive(r3, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x8000002)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9500ffb6", @ANYRES16=r6, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000040)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7ff, r7, 0x700}, 0x38)
socket$inet6(0xa, 0x3, 0x9)

1.406904863s ago: executing program 8 (id=13715):
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2)
unshare(0x44000080)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}, 0xc050000}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000000000000)
close(0x4)
syz_open_dev$tty1(0xc, 0x4, 0x4)
ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)

921.980039ms ago: executing program 9 (id=13716):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
connect$netlink(r0, &(0x7f00000004c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1b, 0xffeff038}, {0x3ff, 0x6, 0x6, 0x6}]}, 0x8)
r1 = socket$inet6(0xa, 0x6, 0x6)
setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="044f04ffe90504"], 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x3e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbe}, 0x1c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = dup(r4)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={<r6=>0x0, 0x1}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000880)={r6, 0xc5, "d7ec18d0097f7a273ee613af4d69d6182fccb309fa2eff5216131d1707a21a04601f9319115c8c8b8563fe67c10f3cf2a07601ba10122c0fd14f47e5749c0c661a3a32f0014f702a1773b2466ed86d9a379a76217d3dc5245201266cd4edfbc6d851ad37477b1d802fbad78cbd1c4a3b6d724e238afc322692359f63eda0c8fdd6510e5669b5838c4a0d6aa5cfdbd01e5205ca4b94f0d3b284395ae46714fe2f5a251b4b6669fcb0075390e2419f4d1b3b40b2d4daa962200114436519f1265614b77938b5"}, &(0x7f0000000980)=0xcd)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000340)={"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"})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x7ff, 0x140000000000001, 0x1, 0x3, 0x3, 0xfffffffffffffffe, 0x1, 0xffffffffffffe806, 0x7ff, 0x8364, 0x3, 0x10005, 0x100000000000d, 0x2, 0x7, 0xb]})
r8 = syz_usb_connect$printer(0x2, 0x36, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
readv(r9, &(0x7f00000004c0), 0x0)

218.265213ms ago: executing program 37 (id=13716):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
connect$netlink(r0, &(0x7f00000004c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1b, 0xffeff038}, {0x3ff, 0x6, 0x6, 0x6}]}, 0x8)
r1 = socket$inet6(0xa, 0x6, 0x6)
setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="044f04ffe90504"], 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x3e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbe}, 0x1c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = dup(r4)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={<r6=>0x0, 0x1}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000880)={r6, 0xc5, "d7ec18d0097f7a273ee613af4d69d6182fccb309fa2eff5216131d1707a21a04601f9319115c8c8b8563fe67c10f3cf2a07601ba10122c0fd14f47e5749c0c661a3a32f0014f702a1773b2466ed86d9a379a76217d3dc5245201266cd4edfbc6d851ad37477b1d802fbad78cbd1c4a3b6d724e238afc322692359f63eda0c8fdd6510e5669b5838c4a0d6aa5cfdbd01e5205ca4b94f0d3b284395ae46714fe2f5a251b4b6669fcb0075390e2419f4d1b3b40b2d4daa962200114436519f1265614b77938b5"}, &(0x7f0000000980)=0xcd)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000340)={"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"})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x7ff, 0x140000000000001, 0x1, 0x3, 0x3, 0xfffffffffffffffe, 0x1, 0xffffffffffffe806, 0x7ff, 0x8364, 0x3, 0x10005, 0x100000000000d, 0x2, 0x7, 0xb]})
r8 = syz_usb_connect$printer(0x2, 0x36, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
readv(r9, &(0x7f00000004c0), 0x0)

210.676135ms ago: executing program 6 (id=13718):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x60000, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

189.027205ms ago: executing program 8 (id=13719):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r2, 0x13, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x6}})
epoll_create1(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0xb4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0", 0xd, 0x12, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
shutdown(r3, 0x0)
pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000100)=0xfffffff7, 0x4)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2, 0x18, 0x3, 0x9, 0x13, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x3, 0x12, 0x6c, 0x80, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x6, 0x0, 0x10, 0x0, @in={0x2, 0x1, @broadcast}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e31, 0x75f, @empty, 0x1}, @in6={0xa, 0x4e22, 0x5, @loopback, 0xc86}}]}, 0x98}}, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04070620"], 0x7)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018)
ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000180))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}})
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x0, 0x1}}, 0x10)
write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x17, 0x0, @opaque="0123456789abcdef0123456789abcd"}}}, 0x35)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240))

44.103261ms ago: executing program 6 (id=13720):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9, 0x3})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40305829, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x8001})

0s ago: executing program 2 (id=13721):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x4c2200, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460904028d0400000000000000020006000400000019000000380000005e020000080400000400200001000503000000020000000051e57464"], 0x58)
close(r1)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4)
r2 = openat$ppp(0xffffff9c, &(0x7f0000000100), 0x200202, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$rds(0x15, 0x5, 0x0)
r3 = socket(0x15, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r3, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r4 = syz_usb_connect(0x6, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="0dac7808aa3b47652b3c321b5b0342420aa4805ccf730cc1f21cef6a37eb8639900d4000992c779acc6ab6cae721a4dfe5d26892d16992d76c589e68387f2558bb2214f6583f0746401c50859ef522d4001b930537da41e2fd6af975bfb9964fcf463d05d4cce96bb8d6ee29bb179b8617a99c4cc9ba066176e2dd2d99f9ca84120313"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0})
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000040)=0x6)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000500)=0xffff0080)

kernel console output (not intermixed with test programs):

T from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x4f
[ 2721.981793][T17860] dlm: no locking on control device
[ 2722.377909][T17869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13331'.
[ 2722.970836][T27291] usb 3-1: USB disconnect, device number 54
[ 2723.205605][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13343'.
[ 2723.398124][T17906] SET target dimension over the limit!
[ 2723.426065][T27291] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 2723.585385][T27291] usb 3-1: Using ep0 maxpacket: 32
[ 2723.595284][T27291] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 2723.609639][T27291] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2723.622380][T27291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2723.631811][T27291] usb 3-1: Product: syz
[ 2723.637440][T27291] usb 3-1: Manufacturer: syz
[ 2723.642160][T27291] usb 3-1: SerialNumber: syz
[ 2723.663520][T27291] usb 3-1: config 0 descriptor??
[ 2723.683542][T27291] cdc_ether 3-1:0.0: missing cdc header descriptor
[ 2723.695250][T27291] usb 3-1: unsupported MDLM descriptors
[ 2723.720047][ T8100] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[ 2723.882816][T27291] usb 3-1: USB disconnect, device number 55
[ 2723.890321][ T8100] usb 9-1: Using ep0 maxpacket: 32
[ 2723.906075][ T8100] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 2723.925652][ T8100] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 2723.948810][ T8100] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 2723.969381][ T8100] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2723.982060][ T8100] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 2724.000257][ T8100] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2724.010539][ T8100] usb 9-1: Product: syz
[ 2724.015553][ T8100] usb 9-1: Manufacturer: syz
[ 2724.020260][ T8100] usb 9-1: SerialNumber: syz
[ 2724.042680][    C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 2724.052559][ T8100] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input414
[ 2724.254670][ T8100] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 2724.263015][ T8100]  (id 0x00)
[ 2724.317499][ T8100] rc_core: IR keymap rc-imon-pad not found
[ 2724.323375][ T8100] Registered IR keymap rc-empty
[ 2724.328812][ T8100] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 2724.339429][ T8100] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 2724.449425][T17930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13355'.
[ 2724.466295][ T8100] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0
[ 2724.485766][ T8100] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input415
[ 2724.510808][ T8100] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:65> initialized
[ 2724.793490][T18513] Bluetooth: hci1: ACL packet for unknown connection handle 201
[ 2724.810011][T17940] hsr0: entered promiscuous mode
[ 2724.817437][T17940] hsr0: left promiscuous mode
[ 2724.934655][T27283] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 2724.976472][T17944] netlink: 52 bytes leftover after parsing attributes in process `syz.6.13361'.
[ 2724.987287][T17944] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2724.994775][T17944] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2725.074991][T27291] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 2725.097617][T27283] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 2725.126104][T27283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2725.141869][T27283] usb 6-1: config 0 descriptor??
[ 2725.165772][T27283] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 2725.235545][T27291] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2725.252259][T27291] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2725.270423][T27291] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2725.288044][T27291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2725.313347][T27291] usb 3-1: SerialNumber: syz
[ 2725.346456][T17945] imon:send_packet: task interrupted
[ 2725.365537][T17945] imon:send_packet: packet tx failed (-512)
[ 2725.385068][T17945] imon:vfd_write: send packet #2 failed
[ 2725.424587][T27296] usb 9-1: USB disconnect, device number 65
[ 2725.560490][T27291] usb 3-1: 0:2 : does not exist
[ 2725.612759][T27291] usb 3-1: USB disconnect, device number 56
[ 2725.663015][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2726.072914][T17956] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13364'.
[ 2726.116227][T17958] dlm: no locking on control device
[ 2726.212674][T17962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13367'.
[ 2726.309342][T17964] batadv0: entered promiscuous mode
[ 2726.316904][T17964] batadv0: entered allmulticast mode
[ 2726.324303][T17964] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2726.398329][T17966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13369'.
[ 2726.413524][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13369'.
[ 2726.415165][ T8100] usb 9-1: new full-speed USB device number 66 using dummy_hcd
[ 2726.428382][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13369'.
[ 2726.595829][ T8100] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2726.607467][ T8100] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2726.619725][ T8100] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2726.632742][ T8100] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 2726.642878][ T8100] usb 9-1: Product: syz
[ 2726.647567][ T8100] usb 9-1: Manufacturer: syz
[ 2726.666037][ T8100] hub 9-1:4.0: USB hub found
[ 2726.921519][ T8100] hub 9-1:4.0: config failed, can't read hub descriptor (err -22)
[ 2726.981864][ T8100] usb 9-1: USB disconnect, device number 66
[ 2727.211453][T17988] syz.7.13375 (17988): drop_caches: 2
[ 2727.297014][T17990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13376'.
[ 2727.391258][T27283] usb 6-1: USB disconnect, device number 66
[ 2727.636929][T18005] dlm: no locking on control device
[ 2727.864642][T27291] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 2727.960950][T18010] netlink: 'syz.8.13384': attribute type 1 has an invalid length.
[ 2728.024638][T27291] usb 6-1: Using ep0 maxpacket: 16
[ 2728.041306][T27291] usb 6-1: New USB device found, idVendor=0499, idProduct=8202, bcdDevice=f4.55
[ 2728.076503][T27291] usb 6-1: config 0 has an invalid interface number: 148 but max is 0
[ 2728.099958][T27291] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2728.114428][T27291] usb 6-1: config 0 has no interface number 0
[ 2728.136949][T27291] usb 6-1: config 0 interface 148 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2728.156192][T27291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2728.170011][T27291] usb 6-1: config 0 descriptor??
[ 2728.419687][T27291] usb 6-1: USB disconnect, device number 67
[ 2728.953304][T18035] FAULT_INJECTION: forcing a failure.
[ 2728.953304][T18035] name failslab, interval 1, probability 0, space 0, times 0
[ 2728.980357][T18035] CPU: 0 UID: 0 PID: 18035 Comm: syz.8.13391 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2728.980388][T18035] Tainted: [L]=SOFTLOCKUP
[ 2728.980396][T18035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2728.980408][T18035] Call Trace:
[ 2728.980416][T18035]  <TASK>
[ 2728.980424][T18035]  dump_stack_lvl+0xe8/0x150
[ 2728.980460][T18035]  should_fail_ex+0x410/0x560
[ 2728.980490][T18035]  should_failslab+0xa8/0x100
[ 2728.980521][T18035]  __kmalloc_cache_noprof+0xa8/0x660
[ 2728.980548][T18035]  ? __hw_addr_create+0x62/0x240
[ 2728.980649][T18035]  ? __hw_addr_create+0x62/0x240
[ 2728.980681][T18035]  __hw_addr_create+0x62/0x240
[ 2728.980712][T18035]  __hw_addr_add_ex+0x1ce/0x520
[ 2728.980748][T18035]  dev_addr_init+0x15a/0x240
[ 2728.980792][T18035]  ? __pfx_dev_addr_init+0x10/0x10
[ 2728.980836][T18035]  ? __kvmalloc_node_noprof+0x35e/0x870
[ 2728.980869][T18035]  alloc_netdev_mqs+0x2b4/0x12a0
[ 2728.980898][T18035]  ? __pfx_snprintf+0x10/0x10
[ 2728.980925][T18035]  ? __pfx_geneve_setup+0x10/0x10
[ 2728.980998][T18035]  rtnl_create_link+0x321/0xd70
[ 2728.981025][T18035]  rtnl_newlink_create+0x258/0x7b0
[ 2728.981058][T18035]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 2728.981089][T18035]  ? __pfx___mutex_lock+0x10/0x10
[ 2728.981120][T18035]  ? ns_capable+0x89/0xe0
[ 2728.981148][T18035]  rtnl_newlink+0x166d/0x1c30
[ 2728.981186][T18035]  ? __pfx_rtnl_newlink+0x10/0x10
[ 2728.981211][T18035]  ? __lock_acquire+0x683/0x2cf0
[ 2728.981246][T18035]  ? __lock_acquire+0x683/0x2cf0
[ 2728.981287][T18035]  ? unwind_next_frame+0x8f/0x2550
[ 2728.981315][T18035]  ? is_bpf_text_address+0x26/0x2b0
[ 2728.981345][T18035]  ? is_bpf_text_address+0x26/0x2b0
[ 2728.981369][T18035]  ? __lock_acquire+0x683/0x2cf0
[ 2728.981398][T18035]  ? kernel_text_address+0xa5/0xe0
[ 2728.981418][T18035]  ? __kernel_text_address+0xd/0x30
[ 2728.981436][T18035]  ? unwind_get_return_address+0x4d/0x90
[ 2728.981455][T18035]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 2728.981481][T18035]  ? arch_stack_walk+0xfb/0x150
[ 2728.981510][T18035]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 2728.981548][T18035]  ? __pfx_rtnl_newlink+0x10/0x10
[ 2728.981572][T18035]  rtnetlink_rcv_msg+0x802/0xc00
[ 2728.981595][T18035]  ? netlink_sendmsg+0x5d4/0xb40
[ 2728.981628][T18035]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 2728.981652][T18035]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2728.981677][T18035]  ? __lock_acquire+0x683/0x2cf0
[ 2728.981717][T18035]  netlink_rcv_skb+0x226/0x4a0
[ 2728.981746][T18035]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2728.981772][T18035]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2728.981813][T18035]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2728.981841][T18035]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2728.981874][T18035]  netlink_unicast+0x7bd/0x940
[ 2728.981910][T18035]  netlink_sendmsg+0x813/0xb40
[ 2728.981948][T18035]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2728.981981][T18035]  ? aa_sock_msg_perm+0xf6/0x1c0
[ 2728.982022][T18035]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2728.982050][T18035]  sock_sendmsg_nosec+0x13a/0x180
[ 2728.982073][T18035]  ____sys_sendmsg+0x54e/0x850
[ 2728.982105][T18035]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2728.982147][T18035]  ___sys_sendmsg+0x2a5/0x360
[ 2728.982173][T18035]  ? __lock_acquire+0x683/0x2cf0
[ 2728.982204][T18035]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2728.982231][T18035]  ? get_pid_task+0x20/0x1f0
[ 2728.982258][T18035]  ? get_pid_task+0x20/0x1f0
[ 2728.982283][T18035]  ? get_pid_task+0x20/0x1f0
[ 2728.982338][T18035]  ? __fget_files+0x2a/0x420
[ 2728.982364][T18035]  ? __fget_files+0x3a2/0x420
[ 2728.982400][T18035]  __sys_sendmsg+0x177/0x240
[ 2728.982429][T18035]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2728.982474][T18035]  __do_fast_syscall_32+0x27a/0x6a0
[ 2728.982496][T18035]  ? do_fast_syscall_32+0x33/0x70
[ 2728.982517][T18035]  ? asm_int80_emulation+0x1a/0x20
[ 2728.982536][T18035]  ? do_int80_emulation+0x299/0x500
[ 2728.982556][T18035]  ? trace_irq_disable+0x3b/0x140
[ 2728.982587][T18035]  do_fast_syscall_32+0x33/0x70
[ 2728.982608][T18035]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2728.982631][T18035] RIP: 0023:0xf709f0ec
[ 2728.982649][T18035] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2728.982665][T18035] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2728.982685][T18035] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[ 2728.982699][T18035] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2728.982711][T18035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2728.982723][T18035] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2728.982735][T18035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2728.982762][T18035]  </TASK>
[ 2729.864716][ T8853] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 2730.024619][ T8853] usb 6-1: Using ep0 maxpacket: 16
[ 2730.068884][ T8853] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 2730.091704][ T8853] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2730.119564][ T8853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2730.143944][ T8853] usb 6-1: config 0 descriptor??
[ 2730.156316][T27291] usb 9-1: new high-speed USB device number 67 using dummy_hcd
[ 2730.201360][T18051] dlm: no locking on control device
[ 2730.328217][T27291] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 2730.336379][T27291] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[ 2730.355974][T27291] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2730.367537][T27291] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 2730.385302][T27291] usb 9-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[ 2730.419046][T27291] usb 9-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[ 2730.448507][T27291] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2730.482331][T27291] usb 9-1: config 1 interface 1 has no altsetting 0
[ 2730.501229][T27291] usb 9-1: string descriptor 0 read error: -22
[ 2730.512243][T27291] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2730.526077][T18053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13398'.
[ 2730.573517][T18053] ip6gre1: entered promiscuous mode
[ 2730.590877][T18053] ip6gre1: entered allmulticast mode
[ 2730.602887][T18054] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13398'.
[ 2730.919934][T18061] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x4f
[ 2731.205030][T27283] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 2731.369765][T27283] usb 3-1: Using ep0 maxpacket: 16
[ 2731.377797][T27283] usb 3-1: New USB device found, idVendor=0499, idProduct=8202, bcdDevice=f4.55
[ 2731.406665][T27283] usb 3-1: config 0 has an invalid interface number: 148 but max is 0
[ 2731.421443][T27283] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2731.444267][T27283] usb 3-1: config 0 has no interface number 0
[ 2731.466592][T27283] usb 3-1: config 0 interface 148 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2731.497444][T27283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2731.530280][T27283] usb 3-1: config 0 descriptor??
[ 2731.850094][T18083] hsr0: entered promiscuous mode
[ 2732.043199][T27283] usb 3-1: USB disconnect, device number 57
[ 2732.582453][ T8853] usbhid 6-1:0.0: can't add hid device: -71
[ 2732.591837][ T8853] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 2732.609558][ T8853] usb 6-1: USB disconnect, device number 68
[ 2732.955048][T27291] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 2732.965018][ T8853] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 2733.104874][T27291] usb 3-1: Using ep0 maxpacket: 8
[ 2733.114631][ T8853] usb 6-1: Using ep0 maxpacket: 32
[ 2733.120281][T27291] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2733.132113][ T8853] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 2733.139899][T27291] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 2733.153210][ T8853] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 2733.158530][T27291] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2733.166452][ T8853] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 2733.185928][ T8853] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2733.190309][T27291] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2733.202488][ T8853] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 2733.221833][T27291] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2733.221860][T27291] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2733.222125][T27291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2733.249542][ T8853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2733.264940][ T8853] usb 6-1: Product: syz
[ 2733.273676][ T8853] usb 6-1: Manufacturer: syz
[ 2733.278914][ T8853] usb 6-1: SerialNumber: syz
[ 2733.308770][    C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 2733.319041][ T8853] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input417
[ 2733.386711][T27296] usb 9-1: USB disconnect, device number 67
[ 2733.515929][T18092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2733.536420][T18092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2733.544996][ T8853] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 2733.556521][T27291] usb 3-1: usb_control_msg returned -32
[ 2733.558569][ T8853]  (id 0x00)
[ 2733.567638][T27291] usbtmc 3-1:16.0: can't read capabilities
[ 2733.573946][T18095] syz.8.13410 (18095): drop_caches: 2
[ 2733.675064][ T8853] rc_core: IR keymap rc-imon-pad not found
[ 2733.682864][ T8853] Registered IR keymap rc-empty
[ 2733.691051][ T8853] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 2733.715081][ T8853] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 2733.741827][T27291] usb 3-1: USB disconnect, device number 58
[ 2733.748507][ T8853] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0
[ 2733.755634][ T8853] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input418
[ 2733.782838][ T8853] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:69> initialized
[ 2734.326611][T18106] netlink: 'syz.6.13413': attribute type 1 has an invalid length.
[ 2734.722552][   T29] audit: type=1326 audit(1787328921.772:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.6.13415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2734.748952][   T29] audit: type=1326 audit(1787328921.772:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.6.13415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2734.792680][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13415'.
[ 2734.803566][   T29] audit: type=1326 audit(1787328921.802:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.6.13415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2734.851733][   T29] audit: type=1326 audit(1787328921.802:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.6.13415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2734.905699][ T8853] usb 6-1: USB disconnect, device number 69
[ 2734.965201][   T29] audit: type=1326 audit(1787328921.812:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.6.13415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2735.011883][   T29] audit: type=1326 audit(1787328921.832:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.6.13415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2735.047824][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13415'.
[ 2735.056252][   T29] audit: type=1326 audit(1787328921.832:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.6.13415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2735.155268][   T29] audit: type=1326 audit(1787328921.832:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.6.13415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2735.193844][   T29] audit: type=1326 audit(1787328921.832:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.6.13415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2735.221554][   T29] audit: type=1326 audit(1787328921.832:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.6.13415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2735.398567][T17601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2735.412247][T17601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2735.426222][T18135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2735.440840][T18136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2736.083180][T12354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2736.108207][T12354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2736.119560][T12354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2736.132670][T12354] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2736.140553][T12354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2736.776268][T27291] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[ 2736.890128][T18168] loop5: detected capacity change from 0 to 4095
[ 2736.947025][T27291] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[ 2736.966633][T27291] usb 3-1: config 0 has an invalid interface number: 205 but max is 0
[ 2736.984900][T27291] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2737.011675][T27291] usb 3-1: config 0 has no interface number 0
[ 2737.023662][T27291] usb 3-1: config 0 interface 205 has no altsetting 0
[ 2737.056851][T27291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2737.071045][T27291] usb 3-1: Product: syz
[ 2737.078472][T27291] usb 3-1: Manufacturer: syz
[ 2737.083673][T27291] usb 3-1: SerialNumber: syz
[ 2737.099694][T27291] usb 3-1: config 0 descriptor??
[ 2737.109233][T27291] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[ 2737.139415][T17601] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2737.150374][T27291] dvb-usb: bulk message failed: -22 (3/0)
[ 2737.159296][T17601] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2737.217077][T18148] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2737.226994][T27291] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2737.237192][T18148] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2737.246595][T27291] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[ 2737.259069][T18148] bridge_slave_0: entered allmulticast mode
[ 2737.273849][T18148] bridge_slave_0: entered promiscuous mode
[ 2737.280697][T27291] usb 3-1: media controller created
[ 2737.290200][T18168] buffer_io_error: 696 callbacks suppressed
[ 2737.290216][T18168] Buffer I/O error on dev loop5, logical block 511, async page read
[ 2737.306960][ T5772] Buffer I/O error on dev loop5, logical block 511, async page read
[ 2737.318438][T27291] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2737.328091][T18148] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2737.337989][T18148] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2737.356821][T18157] netlink: 'syz.2.13426': attribute type 1 has an invalid length.
[ 2737.369927][T18148] bridge_slave_1: entered allmulticast mode
[ 2737.377614][T27291] dvb-usb: bulk message failed: -22 (6/0)
[ 2737.386718][T27291] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[ 2737.400252][T18148] bridge_slave_1: entered promiscuous mode
[ 2737.427980][T27291] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input420
[ 2737.450085][T27291] dvb-usb: schedule remote query interval to 150 msecs.
[ 2737.471378][T27291] dvb-usb: bulk message failed: -22 (3/0)
[ 2737.515708][T27291] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[ 2737.530179][T18157] bond3: option mode: invalid value (7)
[ 2737.546414][T18157] bond3 (unregistering): Released all slaves
[ 2737.624625][T27291] dvb-usb: bulk message failed: -22 (1/0)
[ 2737.631530][T27291] dvb-usb: error while querying for an remote control event.
[ 2737.757127][T18148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2737.816111][T27291] dvb-usb: bulk message failed: -22 (1/0)
[ 2737.826014][T27291] dvb-usb: error while querying for an remote control event.
[ 2737.902680][T17601] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2737.933454][T17601] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2737.957463][T18148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2738.004644][T27291] dvb-usb: bulk message failed: -22 (1/0)
[ 2738.011132][T27291] dvb-usb: error while querying for an remote control event.
[ 2738.052286][T18148] team0: Port device team_slave_0 added
[ 2738.123376][T17601] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2738.144328][T17601] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2738.192170][T18148] team0: Port device team_slave_1 added
[ 2738.198870][T27291] dvb-usb: bulk message failed: -22 (1/0)
[ 2738.207788][T27291] dvb-usb: error while querying for an remote control event.
[ 2738.237838][T12354] Bluetooth: hci2: command tx timeout
[ 2738.287462][T27296] usb 3-1: USB disconnect, device number 59
[ 2738.368818][T17601] bridge0: port 3(netdevsim0) entered disabled state
[ 2738.381690][T27296] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[ 2738.438602][T17601] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode
[ 2738.450352][T17601] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode
[ 2738.464577][T17601] bridge0: port 3(netdevsim0) entered disabled state
[ 2738.487768][T17601] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2738.499398][T17601] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2738.547897][T18148] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2738.556476][T18148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2738.583955][T18148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2738.604391][T18148] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2738.611724][T18148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2738.645033][T18148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2738.761018][T18190] netlink: 340 bytes leftover after parsing attributes in process `syz.8.13435'.
[ 2738.805796][T18148] hsr_slave_0: entered promiscuous mode
[ 2738.812492][T18148] hsr_slave_1: entered promiscuous mode
[ 2738.819574][T18148] debugfs: 'hsr0' already exists in 'hsr'
[ 2738.826549][T18148] Cannot create hsr debugfs directory
[ 2738.860682][T18190] wireguard0: entered promiscuous mode
[ 2738.869615][T18190] wireguard0: entered allmulticast mode
[ 2739.148270][T17601] bridge_slave_1: left allmulticast mode
[ 2739.158342][T18199] netlink: 52 bytes leftover after parsing attributes in process `syz.8.13436'.
[ 2739.167698][T17601] bridge_slave_1: left promiscuous mode
[ 2739.176527][T17601] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2739.204169][T17601] bridge_slave_0: left allmulticast mode
[ 2739.222542][T17601] bridge_slave_0: left promiscuous mode
[ 2739.232681][T17601] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2739.246765][T18198] syz.2.13437 (18198): drop_caches: 2
[ 2739.597023][T18209] fuse: Unknown parameter '0x0000000000000003'
[ 2739.890216][T17601] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 2740.031953][T17601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2740.051026][T17601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2740.072149][T17601] bond0 (unregistering): Released all slaves
[ 2740.271866][T17601] tipc: Disabling bearer <eth:syzkaller0>
[ 2740.280611][T17601] tipc: Disabling bearer <udp:syz2>
[ 2740.286515][T17601] tipc: Left network mode
[ 2740.309234][T12354] Bluetooth: hci2: command tx timeout
[ 2740.925425][T27296] usb 9-1: new high-speed USB device number 68 using dummy_hcd
[ 2741.084759][T27296] usb 9-1: Using ep0 maxpacket: 16
[ 2741.103712][T27296] usb 9-1: New USB device found, idVendor=0499, idProduct=8202, bcdDevice=f4.55
[ 2741.127788][T27296] usb 9-1: config 0 has an invalid interface number: 148 but max is 0
[ 2741.147705][T27296] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2741.178159][T27296] usb 9-1: config 0 has no interface number 0
[ 2741.201390][T27296] usb 9-1: config 0 interface 148 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2741.271701][T27296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2741.324417][T27296] usb 9-1: config 0 descriptor??
[ 2741.587347][T27296] usb 9-1: USB disconnect, device number 68
[ 2741.647927][T17601] hsr_slave_0: left promiscuous mode
[ 2741.662070][T17601] hsr_slave_1: left promiscuous mode
[ 2741.670495][T17601] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2741.679546][T17601] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2741.708995][T17601] veth1_macvtap: left promiscuous mode
[ 2741.719351][T17601] veth0_macvtap: left promiscuous mode
[ 2741.725429][T17601] veth1_vlan: left promiscuous mode
[ 2741.731020][T17601] veth0_vlan: left promiscuous mode
[ 2742.213065][T18243] fuse: Unknown parameter 'group_5d'
[ 2742.226905][T17601] team0 (unregistering): Port device team_slave_1 removed
[ 2742.290299][T17601] team0 (unregistering): Port device team_slave_0 removed
[ 2742.309403][T18248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2742.328041][T18248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2742.343264][T18250] loop2: detected capacity change from 0 to 7
[ 2742.371324][T18250] Dev loop2: unable to read RDB block 7
[ 2742.388270][T12354] Bluetooth: hci2: command tx timeout
[ 2742.415199][T18250]  loop2: unable to read partition table
[ 2742.417496][T27296] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 2742.435301][T18250] loop2: partition table beyond EOD, truncated
[ 2742.455759][T18250] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2742.619945][T27296] usb 3-1: Using ep0 maxpacket: 8
[ 2742.627363][T27296] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2742.643245][T27296] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 2742.656885][T27296] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2742.688561][T27296] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2742.714649][T27296] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2742.754237][T27296] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2742.789184][T27296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2742.801469][T18258] netlink: 140 bytes leftover after parsing attributes in process `syz.8.13451'.
[ 2742.841681][T18258] netlink: 56 bytes leftover after parsing attributes in process `syz.8.13451'.
[ 2742.971781][T18258] netlink: 52 bytes leftover after parsing attributes in process `syz.8.13451'.
[ 2743.042239][T18241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2743.069817][T18241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2743.095388][T27296] usb 3-1: usb_control_msg returned -32
[ 2743.131698][T27296] usbtmc 3-1:16.0: can't read capabilities
[ 2743.706575][ T6118] usb 3-1: USB disconnect, device number 60
[ 2743.881467][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13454'.
[ 2743.948057][T18148] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2743.949821][T17601] IPVS: stop unused estimator thread 0...
[ 2744.019920][T18148] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2744.056956][T18148] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2744.098803][T18280] program syz.6.13455 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2744.112877][T18148] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2744.135875][T18148] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2744.195902][T18148] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2744.236854][T18148] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2744.265863][T18283] FAULT_INJECTION: forcing a failure.
[ 2744.265863][T18283] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2744.304462][T18148] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2744.374398][T18283] CPU: 0 UID: 0 PID: 18283 Comm: syz.7.13456 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2744.374434][T18283] Tainted: [L]=SOFTLOCKUP
[ 2744.374443][T18283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2744.374456][T18283] Call Trace:
[ 2744.374465][T18283]  <TASK>
[ 2744.374479][T18283]  dump_stack_lvl+0xe8/0x150
[ 2744.374518][T18283]  should_fail_ex+0x410/0x560
[ 2744.374552][T18283]  _copy_to_user+0x31/0xb0
[ 2744.374586][T18283]  __copy_siginfo_to_user32+0xd3/0x150
[ 2744.374622][T18283]  ? __pfx___copy_siginfo_to_user32+0x10/0x10
[ 2744.374675][T18283]  ia32_setup_rt_frame+0x6be/0xae0
[ 2744.374729][T18283]  ? __pfx_ia32_setup_rt_frame+0x10/0x10
[ 2744.374774][T18283]  arch_do_signal_or_restart+0x48e/0x860
[ 2744.374807][T18283]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 2744.374844][T18283]  ? ksys_write+0x1fc/0x270
[ 2744.374888][T18283]  exit_to_user_mode_loop+0x10e/0x770
[ 2744.374920][T18283]  ? rcu_is_watching+0x16/0xb0
[ 2744.374942][T18283]  ? asm_int80_emulation+0x1a/0x20
[ 2744.374974][T18283]  ? asm_int80_emulation+0x1a/0x20
[ 2744.374997][T18283]  do_int80_emulation+0x314/0x500
[ 2744.375025][T18283]  ? asm_int80_emulation+0x1a/0x20
[ 2744.375046][T18283]  ? clear_bhb_loop+0x70/0xc0
[ 2744.375070][T18283]  ? clear_bhb_loop+0x70/0xc0
[ 2744.375097][T18283]  asm_int80_emulation+0x1a/0x20
[ 2744.375120][T18283] RIP: 0023:0xf71474eb
[ 2744.375140][T18283] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 2744.375160][T18283] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[ 2744.375184][T18283] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 00000000f53fd5c0
[ 2744.375198][T18283] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 2744.375210][T18283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2744.375224][T18283] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2744.375238][T18283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2744.375269][T18283]  </TASK>
[ 2744.744889][T12354] Bluetooth: hci2: command tx timeout
[ 2744.763399][T18148] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2744.783601][T18148] 8021q: adding VLAN 0 to HW filter on device team0
[ 2744.816455][T17598] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2744.823586][T17598] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2744.854225][T17598] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2744.861437][T17598] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2745.049060][T18301] syz.2.13457 (18301): drop_caches: 2
[ 2745.132584][T18148] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2745.180657][T18305] netlink: 'syz.7.13459': attribute type 1 has an invalid length.
[ 2745.252887][T18305] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2745.290150][T18309] bond1: (slave gretap1): making interface the new active one
[ 2745.300153][T18309] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 2745.332647][T18148] veth0_vlan: entered promiscuous mode
[ 2745.354097][T18148] veth1_vlan: entered promiscuous mode
[ 2745.390948][T18305] bond1: (slave dummy0): Enslaving as an active interface with an up link
[ 2745.422617][T18305] netlink: 'syz.7.13459': attribute type 10 has an invalid length.
[ 2745.446509][T18305] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13459'.
[ 2745.479838][T18148] veth0_macvtap: entered promiscuous mode
[ 2745.491773][T18305] bond1: (slave dummy0): Releasing active interface
[ 2745.517775][T18148] veth1_macvtap: entered promiscuous mode
[ 2745.580329][T18148] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2745.602006][T18148] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2745.635347][T17604] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2745.768231][T17601] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2745.835807][T17601] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2745.914184][T17603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2745.924421][T17603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2745.980424][T17598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2745.991386][T17598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2746.000762][T17604] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2746.116658][T18320] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x4f
[ 2746.177842][T18322] hsr0: entered promiscuous mode
[ 2746.184223][T18321] hsr0: left promiscuous mode
[ 2746.364621][T27296] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 2746.514991][T27296] usb 6-1: Using ep0 maxpacket: 16
[ 2746.521011][T27296] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2746.531879][T27296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2746.543593][T27291] usb 9-1: new low-speed USB device number 69 using dummy_hcd
[ 2746.551897][T27296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2746.567409][T27296] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2746.586079][T27296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2746.598179][T27296] usb 6-1: config 0 descriptor??
[ 2746.714663][T27291] usb 9-1: device descriptor read/64, error -71
[ 2746.975265][T27291] usb 9-1: new low-speed USB device number 70 using dummy_hcd
[ 2747.029782][T27296] microsoft 0003:045E:07DA.00BC: unknown main item tag 0x0
[ 2747.043231][T27296] microsoft 0003:045E:07DA.00BC: unknown main item tag 0x0
[ 2747.053067][T27296] microsoft 0003:045E:07DA.00BC: unknown main item tag 0x0
[ 2747.061082][T27296] microsoft 0003:045E:07DA.00BC: unknown main item tag 0x0
[ 2747.068892][T27296] microsoft 0003:045E:07DA.00BC: unknown main item tag 0x0
[ 2747.103607][T27296] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.00BC/input/input423
[ 2747.120176][T27291] usb 9-1: device descriptor read/64, error -71
[ 2747.147903][T27296] microsoft 0003:045E:07DA.00BC: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[ 2747.236757][T27291] usb usb9-port1: attempt power cycle
[ 2747.392037][T18337] dlm: no locking on control device
[ 2747.595066][T27291] usb 9-1: new low-speed USB device number 71 using dummy_hcd
[ 2747.637003][T27291] usb 9-1: device descriptor read/8, error -71
[ 2747.841209][T27296] usb 6-1: USB disconnect, device number 70
[ 2747.897184][T27291] usb 9-1: new low-speed USB device number 72 using dummy_hcd
[ 2747.928940][T27291] usb 9-1: device descriptor read/8, error -71
[ 2748.055087][T27291] usb usb9-port1: unable to enumerate USB device
[ 2748.078740][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13469'.
[ 2748.379858][T18345] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13471'.
[ 2748.393986][T18345] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13471'.
[ 2748.406024][T27296] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 2748.527431][T18347] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2748.565070][T27296] usb 3-1: Using ep0 maxpacket: 32
[ 2748.571211][T27296] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 2748.586901][T27296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2748.596311][T27296] usb 3-1: Product: syz
[ 2748.600890][T27296] usb 3-1: Manufacturer: syz
[ 2748.606040][T27296] usb 3-1: SerialNumber: syz
[ 2748.616177][T27296] usb 3-1: config 0 descriptor??
[ 2748.644016][T27296] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 2748.711317][T18352] hsr0: entered promiscuous mode
[ 2749.573530][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13480'.
[ 2749.769479][T18371] dlm: no locking on control device
[ 2749.824457][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13479'.
[ 2749.874305][T18370] netlink: 'syz.5.13479': attribute type 10 has an invalid length.
[ 2749.928571][T18370] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2749.959004][T18372] netlink: 'syz.5.13479': attribute type 10 has an invalid length.
[ 2749.973488][T18370] team0: Port device netdevsim1 added
[ 2750.082423][T18372] team0: Port device netdevsim1 removed
[ 2750.112271][T18372] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2750.156423][T18372] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[ 2750.285011][ T6118] usb 9-1: new high-speed USB device number 73 using dummy_hcd
[ 2750.466184][ T6118] usb 9-1: Using ep0 maxpacket: 16
[ 2750.482321][ T6118] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2750.523449][ T6118] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2750.575125][ T6118] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2750.595438][T27296] gspca_ov534_9: reg_w failed -110
[ 2750.614920][ T6118] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2750.655213][ T6118] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2750.692132][ T6118] usb 9-1: config 0 descriptor??
[ 2750.896208][T27296] gspca_ov534_9: Unknown sensor 0000
[ 2750.896311][T27296] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[ 2750.956458][T27296] usb 3-1: USB disconnect, device number 61
[ 2751.048593][T12354] Bluetooth: Unexpected start frame (len 12)
[ 2751.158654][ T6118] microsoft 0003:045E:07DA.00BD: unknown main item tag 0x0
[ 2751.190802][ T6118] microsoft 0003:045E:07DA.00BD: unknown main item tag 0x0
[ 2751.223139][ T6118] microsoft 0003:045E:07DA.00BD: unknown main item tag 0x0
[ 2751.248356][ T6118] microsoft 0003:045E:07DA.00BD: unknown main item tag 0x0
[ 2751.271949][ T6118] microsoft 0003:045E:07DA.00BD: unknown main item tag 0x0
[ 2751.283101][T18382] PKCS7: Unknown OID: [83] 2.16.840.17.101.3.4.2.1
[ 2751.289898][T18382] Unsupported digest algo: 106
[ 2751.357563][ T6118] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.00BD/input/input424
[ 2751.406947][ T6118] microsoft 0003:045E:07DA.00BD: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[ 2751.849598][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13488'.
[ 2751.896136][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13488'.
[ 2752.175297][T18396] tipc: Started in network mode
[ 2752.189493][T18396] tipc: Node identity 2d2000000000000008, cluster identity 4711
[ 2752.244688][ T8853] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 2752.425714][ T8853] usb 6-1: Using ep0 maxpacket: 8
[ 2752.449666][ T8853] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2752.486113][ T8853] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 2752.515900][ T8853] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2752.535212][T27292] usb 9-1: USB disconnect, device number 73
[ 2752.556329][ T8853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2752.588457][ T8853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2752.628486][ T8853] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2752.682306][ T8853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2752.945802][T18393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2752.968372][T18393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2752.998147][ T8853] usb 6-1: usb_control_msg returned -32
[ 2753.012807][ T8853] usbtmc 6-1:16.0: can't read capabilities
[ 2753.118917][T12354] Bluetooth: hci1: ACL packet for unknown connection handle 201
[ 2753.138387][T18410] hsr0: entered promiscuous mode
[ 2753.156807][T18410] hsr0: left promiscuous mode
[ 2753.310531][ T6118] usb 6-1: USB disconnect, device number 71
[ 2753.586930][T18421] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2753.664129][T18427] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2753.854656][ T6118] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 2753.952006][T18433] dlm: no locking on control device
[ 2754.026739][ T6118] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2754.048602][ T6118] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2754.077926][ T6118] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2754.098434][ T6118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2754.112733][ T6118] usb 3-1: SerialNumber: syz
[ 2754.478455][ T6118] usb 3-1: 0:2 : does not exist
[ 2754.590691][T18443] fuse: Bad value for 'fd'
[ 2754.613901][ T6118] usb 3-1: USB disconnect, device number 62
[ 2754.640496][T18441] syz.6.13506 (18441): drop_caches: 2
[ 2754.696398][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2755.275095][T27292] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 2755.435805][T27292] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2755.447009][T27292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2755.460330][T27292] usb 6-1: config 0 descriptor??
[ 2755.472188][T27292] cp210x 6-1:0.0: cp210x converter detected
[ 2755.475569][T27283] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 2755.645398][T27283] usb 3-1: Using ep0 maxpacket: 16
[ 2755.652621][T27283] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2755.682796][T27283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2755.731491][T27283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2755.765905][T27283] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2755.789614][T18457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2755.798281][T27283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2755.837160][T27283] usb 3-1: config 0 descriptor??
[ 2755.885354][T21507] usb 9-1: new high-speed USB device number 74 using dummy_hcd
[ 2755.920239][T18457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2756.021763][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13512'.
[ 2756.067408][T21507] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2756.083838][T21507] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2756.097575][T21507] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2756.111835][T21507] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 2756.124803][T21507] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2756.142327][T21507] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2756.198942][T21507] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 2756.222412][T21507] usb 9-1: invalid MIDI out EP 0
[ 2756.303742][T27283] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0
[ 2756.341388][T27283] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0
[ 2756.361115][T27283] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0
[ 2756.383942][T27283] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0
[ 2756.411595][T27283] microsoft 0003:045E:07DA.00BE: unknown main item tag 0x0
[ 2756.565942][T27283] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00BE/input/input426
[ 2756.595937][T27292] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71
[ 2756.650208][T27292] cp210x 6-1:0.0: querying part number failed
[ 2756.653684][T27283] microsoft 0003:045E:07DA.00BE: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 2756.703977][T18455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2756.764053][T27292] usb 6-1: cp210x converter now attached to ttyUSB0
[ 2756.822834][T18455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2756.868560][T27292] usb 6-1: USB disconnect, device number 72
[ 2756.887657][T21507] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2756.924320][T27292] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2756.972740][T27292] cp210x 6-1:0.0: device disconnected
[ 2757.237645][T18467] FAULT_INJECTION: forcing a failure.
[ 2757.237645][T18467] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2757.294453][T18467] CPU: 0 UID: 0 PID: 18467 Comm: syz.5.13514 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2757.294493][T18467] Tainted: [L]=SOFTLOCKUP
[ 2757.294503][T18467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2757.294517][T18467] Call Trace:
[ 2757.294577][T18467]  <TASK>
[ 2757.294631][T18467]  dump_stack_lvl+0xe8/0x150
[ 2757.294713][T18467]  should_fail_ex+0x410/0x560
[ 2757.294796][T18467]  _copy_to_user+0x31/0xb0
[ 2757.294879][T18467]  simple_read_from_buffer+0xe1/0x170
[ 2757.294917][T18467]  proc_fail_nth_read+0x1bb/0x230
[ 2757.294943][T18467]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2757.294993][T18467]  ? rw_verify_area+0x24a/0x4c0
[ 2757.295043][T18467]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2757.295075][T18467]  vfs_read+0x213/0xa80
[ 2757.295111][T18467]  ? __pfx_vfs_read+0x10/0x10
[ 2757.295145][T18467]  ? do_compat_pselect+0x284/0x2e0
[ 2757.295178][T18467]  ? __pfx_do_compat_pselect+0x10/0x10
[ 2757.295211][T18467]  ksys_read+0x150/0x270
[ 2757.295252][T18467]  ? __pfx_ksys_read+0x10/0x10
[ 2757.295284][T18467]  ? asm_int80_emulation+0x1a/0x20
[ 2757.295321][T18467]  do_int80_emulation+0x198/0x500
[ 2757.295369][T18467]  ? asm_int80_emulation+0x1a/0x20
[ 2757.295388][T18467]  ? clear_bhb_loop+0x70/0xc0
[ 2757.295409][T18467]  ? clear_bhb_loop+0x70/0xc0
[ 2757.295433][T18467]  asm_int80_emulation+0x1a/0x20
[ 2757.295463][T18467] RIP: 0023:0xf71674eb
[ 2757.295500][T18467] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 2757.295517][T18467] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2757.295557][T18467] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f541d5d0
[ 2757.295570][T18467] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 2757.295581][T18467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2757.295592][T18467] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2757.295604][T18467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2757.295647][T18467]  </TASK>
[ 2757.786437][T27292] usb 3-1: USB disconnect, device number 63
[ 2757.929055][T18477] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13517'.
[ 2757.939779][T18477] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2757.947283][T18477] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2757.978222][T18477] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13517'.
[ 2758.151875][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13518'.
[ 2758.196300][T18479] bridge0: port 3(macvlan2) entered blocking state
[ 2758.211759][T18479] bridge0: port 3(macvlan2) entered disabled state
[ 2758.228200][T18479] macvlan2: entered allmulticast mode
[ 2758.238993][T18479] bridge0: entered allmulticast mode
[ 2758.252092][T18479] macvlan2: left allmulticast mode
[ 2758.262521][T18479] bridge0: left allmulticast mode
[ 2758.373269][T18481] program syz.6.13519 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2758.774690][T27292] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 2758.945230][T27292] usb 6-1: Using ep0 maxpacket: 8
[ 2758.953279][T27292] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2758.971863][T27292] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 2758.983239][T27292] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2758.994286][T27292] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2759.013095][T27292] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2759.033079][T27292] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2759.057884][T27292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2759.163027][T18492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13522'.
[ 2759.219084][T18492] netlink: 'syz.2.13522': attribute type 10 has an invalid length.
[ 2759.244891][T18492] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2759.268725][T18492] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[ 2759.284129][T18485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2759.319662][T18493] netlink: 'syz.2.13522': attribute type 10 has an invalid length.
[ 2759.320869][T18492] team0: Port device netdevsim1 added
[ 2759.350534][T18485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2759.377424][T27292] usb 6-1: usb_control_msg returned -32
[ 2759.394055][T27292] usbtmc 6-1:16.0: can't read capabilities
[ 2759.408853][T18493] netdevsim netdevsim2 netdevsim1: left promiscuous mode
[ 2759.520836][T18493] team0: Port device netdevsim1 removed
[ 2759.590608][T18497] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13523'.
[ 2759.608348][T18493] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2759.652616][T18493] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[ 2759.669632][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13523'.
[ 2759.680837][T18493] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[ 2759.767402][T21507] usb 6-1: USB disconnect, device number 73
[ 2759.921368][ T8853] usb 9-1: USB disconnect, device number 74
[ 2760.321948][T18507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2760.549395][T12354] Bluetooth: Unexpected start frame (len 12)
[ 2761.262383][T18540] netlink: 'syz.5.13535': attribute type 1 has an invalid length.
[ 2761.365714][T18544] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13537'.
[ 2761.574595][ T6118] usb 9-1: new high-speed USB device number 75 using dummy_hcd
[ 2761.745135][ T6118] usb 9-1: Using ep0 maxpacket: 32
[ 2761.751055][ T6118] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 2761.765309][ T6118] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2761.773961][ T6118] usb 9-1: Product: syz
[ 2761.779090][ T6118] usb 9-1: Manufacturer: syz
[ 2761.783853][ T6118] usb 9-1: SerialNumber: syz
[ 2761.792692][ T6118] usb 9-1: config 0 descriptor??
[ 2761.801358][ T6118] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 2762.087562][T18555] input: syz0 as /devices/virtual/input/input427
[ 2762.455644][T27292] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 2762.617081][T27292] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 2762.625603][T27292] usb 6-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40
[ 2762.637850][T27292] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2762.649632][T27292] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 121, changing to 7
[ 2762.665003][T27292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2762.673157][T27292] usb 6-1: Product: syz
[ 2762.677807][T27292] usb 6-1: Manufacturer: syz
[ 2762.682427][T27292] usb 6-1: SerialNumber: syz
[ 2762.900406][T27292] usb 6-1: 1:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[ 2762.911640][T27292] usb 6-1: found format II with max.bitrate = 3, frame size=2353
[ 2762.920553][T27292] usb 6-1: 1:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[ 2762.929217][T27292] usb 6-1: found format II with max.bitrate = 3, frame size=2353
[ 2762.940121][T27292] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 2762.997264][T27292] usb 6-1: USB disconnect, device number 74
[ 2763.089755][T11130] udevd[11130]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2763.314616][ T8853] usb 3-1: new full-speed USB device number 64 using dummy_hcd
[ 2763.468002][ T8853] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2763.514713][ T8853] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2763.584963][ T8853] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2763.596519][ T8853] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2763.611485][ T8853] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2763.657681][ T8853] usb 3-1: Product: syz
[ 2763.685544][ T8853] usb 3-1: Manufacturer: syz
[ 2763.702816][ T8853] usb 3-1: SerialNumber: syz
[ 2763.772524][ T8853] usb 3-1: config 0 descriptor??
[ 2763.805361][ T6118] gspca_ov534_9: reg_w failed -110
[ 2763.816657][ T8853] usb 3-1: selecting invalid altsetting 0
[ 2764.057670][T18567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2764.078543][T18567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2764.094865][T27286] usb 6-1: new full-speed USB device number 75 using dummy_hcd
[ 2764.108423][ T6118] gspca_ov534_9: Unknown sensor 0000
[ 2764.108587][ T6118] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22
[ 2764.153354][ T8853] usb 3-1: USB disconnect, device number 64
[ 2764.236545][ T6118] usb 9-1: USB disconnect, device number 75
[ 2764.265760][T27286] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2764.292302][T27286] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2764.349930][T27286] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2764.394003][T27286] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2764.422242][T27286] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2764.447568][T27286] usb 6-1: Product: syz
[ 2764.458035][T27286] usb 6-1: Manufacturer: syz
[ 2764.471086][T27286] usb 6-1: SerialNumber: syz
[ 2764.511959][T27286] usb 6-1: config 0 descriptor??
[ 2764.577073][T27286] usb 6-1: selecting invalid altsetting 0
[ 2764.747972][T18576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2764.780758][T18576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2764.848151][T27286] usb 6-1: USB disconnect, device number 75
[ 2764.915497][ T8853] usb 9-1: new full-speed USB device number 76 using dummy_hcd
[ 2764.951446][T18587] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 2765.020045][T18588] syzkaller0: entered promiscuous mode
[ 2765.029661][T18588] syzkaller0: entered allmulticast mode
[ 2765.081413][ T8876] udevd[8876]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2765.113646][ T8853] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 2765.178870][ T8853] usb 9-1: not running at top speed; connect to a high speed hub
[ 2765.197079][ T8853] usb 9-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice=85.08
[ 2765.208596][ T8853] usb 9-1: config 14 has too many interfaces: 65, using maximum allowed: 32
[ 2765.285814][ T8853] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[ 2765.296279][ T8853] usb 9-1: config 14 has 1 interface, different from the descriptor's value: 65
[ 2765.313230][ T8853] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2765.321591][ T8853] usb 9-1: Product: syz
[ 2765.326062][ T8853] usb 9-1: Manufacturer: syz
[ 2765.330722][ T8853] usb 9-1: SerialNumber: syz
[ 2765.582937][T18585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2765.607438][T18585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2765.630025][ T8853] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0617
[ 2765.673662][ T8853] gspca_sn9c20x: Write register 1000 failed -71
[ 2765.708295][ T8853] gspca_sn9c20x: Device initialization failed
[ 2765.729164][ T8853] gspca_sn9c20x 9-1:14.0: probe with driver gspca_sn9c20x failed with error -71
[ 2765.766776][ T8853] usb 9-1: USB disconnect, device number 76
[ 2765.776569][T18601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13556'.
[ 2766.068919][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13559'.
[ 2766.390363][T18615] dlm: no locking on control device
[ 2766.862627][T18629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13563'.
[ 2767.334603][T27299] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 2767.414565][T27286] usb 9-1: new high-speed USB device number 77 using dummy_hcd
[ 2767.496288][T27299] usb 3-1: Using ep0 maxpacket: 16
[ 2767.515303][T18640] FAULT_INJECTION: forcing a failure.
[ 2767.515303][T18640] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2767.517429][T27299] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2767.529167][T18640] CPU: 0 UID: 0 PID: 18640 Comm: syz.5.13570 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2767.529196][T18640] Tainted: [L]=SOFTLOCKUP
[ 2767.529204][T18640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2767.529216][T18640] Call Trace:
[ 2767.529224][T18640]  <TASK>
[ 2767.529233][T18640]  dump_stack_lvl+0xe8/0x150
[ 2767.529266][T18640]  should_fail_ex+0x410/0x560
[ 2767.529376][T18640]  _copy_from_user+0x2d/0xb0
[ 2767.529461][T18640]  get_compat_msghdr+0xb3/0x4c0
[ 2767.529635][T18640]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 2767.529724][T18640]  ___sys_sendmsg+0x201/0x360
[ 2767.529816][T18640]  ? __lock_acquire+0x683/0x2cf0
[ 2767.529903][T18640]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2767.529967][T18640]  ? get_pid_task+0x20/0x1f0
[ 2767.530039][T18640]  ? get_pid_task+0x20/0x1f0
[ 2767.530107][T18640]  ? get_pid_task+0x20/0x1f0
[ 2767.530231][T18640]  ? __fget_files+0x2a/0x420
[ 2767.530294][T18640]  ? __fget_files+0x3a2/0x420
[ 2767.530382][T18640]  __sys_sendmsg+0x177/0x240
[ 2767.530451][T18640]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2767.530547][T18640]  __do_fast_syscall_32+0x27a/0x6a0
[ 2767.530589][T18640]  ? do_fast_syscall_32+0x33/0x70
[ 2767.530643][T18640]  ? asm_int80_emulation+0x1a/0x20
[ 2767.530693][T18640]  ? do_int80_emulation+0x299/0x500
[ 2767.530755][T18640]  ? trace_irq_disable+0x3b/0x140
[ 2767.530843][T18640]  do_fast_syscall_32+0x33/0x70
[ 2767.530896][T18640]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2767.530957][T18640] RIP: 0023:0xf702f0ec
[ 2767.531001][T18640] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2767.531045][T18640] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2767.531100][T18640] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[ 2767.531135][T18640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2767.531163][T18640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2767.531190][T18640] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2767.531224][T18640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2767.531288][T18640]  </TASK>
[ 2767.586832][T27286] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2767.635931][T27299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2767.710999][T27286] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2767.821453][T27286] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2767.835332][T27286] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2767.844133][T27299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2767.864340][T18637] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22
[ 2767.869478][T27299] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2767.889655][T27286] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 2767.904567][T27299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2767.929976][T27299] usb 3-1: config 0 descriptor??
[ 2768.109231][T18650] syz.7.13573 (18650): drop_caches: 2
[ 2768.123085][T27286] usb 9-1: USB disconnect, device number 77
[ 2768.363166][T27299] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0
[ 2768.388481][T27299] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0
[ 2768.403608][T27299] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0
[ 2768.412630][T27299] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0
[ 2768.421788][T27299] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0
[ 2768.449249][T27299] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00BF/input/input430
[ 2768.482147][T27299] microsoft 0003:045E:07DA.00BF: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 2769.021556][T27292] usb 3-1: USB disconnect, device number 65
[ 2769.054592][ T8853] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 2769.214584][ T8853] usb 6-1: Using ep0 maxpacket: 8
[ 2769.220778][ T8853] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 2769.232920][ T8853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2769.242975][ T8853] usb 6-1: Product: syz
[ 2769.247783][ T8853] usb 6-1: Manufacturer: syz
[ 2769.252578][ T8853] usb 6-1: SerialNumber: syz
[ 2769.259724][ T8853] usb 6-1: config 0 descriptor??
[ 2769.269377][ T8853] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 2769.699992][T18684] ip6gre1: entered allmulticast mode
[ 2769.720756][T10232] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2770.810233][T18714] dlm: no locking on control device
[ 2771.102692][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13598'.
[ 2771.110569][T18718] [U] ŠIG"Ü[\¾EêÑTŸÈ�«¥ÑƈoG3¥­Å,&÷
[ 2771.117434][T18718] [U] xÂ/D¦+:}YÝÛuûû¢)ÉGõ°ÑX¨Ëš¢³§Ä«G.†^
[ 2771.123446][T18718] [U] IÜ3:4—a©ï¹{³.ðâ›I¨ðq!'hø²Àั—F1k̇3M\äEe7z6NýÀGX0í­šû5S~Jábj‡…¶Ý4ã•,¼^‚·¶ï¼±aå˜d=?K\À¬¾LïÄàZ6%I•%!8�î.„îMÀ{t*g©}#jd#¢ÀB>B7Ûø†,šRÐà5ÒƒCfáíõàlüñÊ¿ð²Nâ�(f©qzwŸ%´2OÕNU¡tÁ‘Ý‚¥7}â‘DóV—¸Þ=¿™Ï\­ZSαçëÊbÚBuUÅEþ2æ(9�T÷N­ÂúŸMÁ=²é`ZWJî)ÿ|hªi
«ëñ$ê-5SÃ
[ 2771.149683][T18718] [U] D¬V‡8›[ïB:©;š3½æ�d_)
[ 2771.154380][T18718] [U] ‡qøËJÙKÅh¬åùáiÀWôH¥ÜF,ºØ4ŒE&KÊX¸^^ùœ§ôVÃûÇ7GcÎÍ(ç£
[ 2771.162137][T18718] [U] M8áÆÀx]bYÆé_vâ-æ;á|O¢)¦º¸ôÒqKŒVtíà®
[ 2771.168138][T18718] [U] _vÊé$ì—pÕÇ|^&ßß=‚ò]ã,•Mà¸/©!av+;‰2³hÇX…-âü>Þ
[ 2771.175534][T18718] [U] 2G¹\ý}Þ-ŽFïØ	ÿž×�3ÚŽC?¹“<9™gÚ±gyqТc~“Êî,�Ž¡vym`—9Oœ^S0žvŽ·¾TÙ`ÄcÔ8˜7{¹ØbÔI<ʸ^õ2¥lÕ� Pì)Ê%îÈ$ ‚Ù
[ 2771.187355][T18718] [U] %P
[ 2771.190238][T18718] [U] 
ñÝ>h–mÅØbd�ZýE%ò?Nj–”?lêßvçS!H¹ÍUiCÇè%Áîhâ�¡#ŠŽ^göûyåc÷D�-ö9˜Y
[ 2771.199184][T18718] [U] Ý ¿e—�«RRï}@}�hÑ'0&ü÷S¬–-r©»©cN? dC:),˜d9—Ü‚÷~/®¯ôfÃíÑæ|š›£©é(LŽÅ®H۬ѡOÊHýƒÌ°­-¸-EºÜQÝÖŠ$}9¶AÉ�Vuй?'“´QèèØÏ2°rÞäµ<ÎsÉÉ+CÚ|ì�„¼zÚÍ
[ 2771.228818][T18717] [U] ëÈYd�Ï	ÅojäE�£‹¯9cŸMƒ�GíŒ-bìAv<BUܶ”G„¹ß�âc~T6Ã8,sØIî2ÝT“í\‹¢Ã ÂÉñ—«æ÷5!„¥+ÖņÍâ¾
[ 2771.305169][T18723] FAULT_INJECTION: forcing a failure.
[ 2771.305169][T18723] name failslab, interval 1, probability 0, space 0, times 0
[ 2771.318372][T18723] CPU: 1 UID: 0 PID: 18723 Comm: syz.2.13600 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2771.318405][T18723] Tainted: [L]=SOFTLOCKUP
[ 2771.318414][T18723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2771.318427][T18723] Call Trace:
[ 2771.318436][T18723]  <TASK>
[ 2771.318445][T18723]  dump_stack_lvl+0xe8/0x150
[ 2771.318483][T18723]  should_fail_ex+0x410/0x560
[ 2771.318517][T18723]  should_failslab+0xa8/0x100
[ 2771.318550][T18723]  kmem_cache_alloc_node_noprof+0xb3/0x620
[ 2771.318576][T18723]  ? local_lock_release+0x9c/0x160
[ 2771.318683][T18723]  ? __alloc_skb+0x1db/0x7a0
[ 2771.318706][T18723]  ? __alloc_skb+0x1db/0x7a0
[ 2771.318737][T18723]  __alloc_skb+0x1db/0x7a0
[ 2771.318782][T18723]  netlink_ack+0x136/0xb30
[ 2771.318860][T18723]  netlink_rcv_skb+0x2a4/0x4a0
[ 2771.318894][T18723]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 2771.318975][T18723]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2771.319018][T18723]  ? bpf_lsm_capable+0x9/0x20
[ 2771.319046][T18723]  ? security_capable+0x7e/0x2c0
[ 2771.319116][T18723]  nfnetlink_rcv+0x2b9/0x28c0
[ 2771.319148][T18723]  ? kernel_text_address+0xa5/0xe0
[ 2771.319171][T18723]  ? __kernel_text_address+0xd/0x30
[ 2771.319192][T18723]  ? unwind_get_return_address+0x4d/0x90
[ 2771.319214][T18723]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 2771.319244][T18723]  ? arch_stack_walk+0xfb/0x150
[ 2771.319277][T18723]  ? stack_trace_save+0xa9/0x100
[ 2771.319308][T18723]  ? __lock_acquire+0x683/0x2cf0
[ 2771.319344][T18723]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 2771.319377][T18723]  ? kasan_save_track+0x4f/0x80
[ 2771.319403][T18723]  ? kasan_save_track+0x3e/0x80
[ 2771.319428][T18723]  ? __kasan_slab_alloc+0x6c/0x80
[ 2771.319465][T18723]  ? kmem_cache_alloc_node_noprof+0x359/0x620
[ 2771.319488][T18723]  ? __alloc_skb+0x27a/0x7a0
[ 2771.319510][T18723]  ? netlink_sendmsg+0x5d4/0xb40
[ 2771.319560][T18723]  ? sock_sendmsg_nosec+0x13a/0x180
[ 2771.319580][T18723]  ? ____sys_sendmsg+0x54e/0x850
[ 2771.319615][T18723]  ? __lock_acquire+0x683/0x2cf0
[ 2771.319655][T18723]  ? __netlink_lookup+0xc6/0x8b0
[ 2771.319682][T18723]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2771.319713][T18723]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2771.319748][T18723]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2771.319778][T18723]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2771.319814][T18723]  netlink_unicast+0x7bd/0x940
[ 2771.319851][T18723]  netlink_sendmsg+0x813/0xb40
[ 2771.319898][T18723]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2771.319929][T18723]  ? aa_sock_msg_perm+0xf6/0x1c0
[ 2771.320011][T18723]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2771.320039][T18723]  sock_sendmsg_nosec+0x13a/0x180
[ 2771.320062][T18723]  ____sys_sendmsg+0x54e/0x850
[ 2771.320099][T18723]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2771.320139][T18723]  ___sys_sendmsg+0x2a5/0x360
[ 2771.320164][T18723]  ? __lock_acquire+0x683/0x2cf0
[ 2771.320196][T18723]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2771.320222][T18723]  ? get_pid_task+0x20/0x1f0
[ 2771.320250][T18723]  ? get_pid_task+0x20/0x1f0
[ 2771.320275][T18723]  ? get_pid_task+0x20/0x1f0
[ 2771.320328][T18723]  ? __fget_files+0x2a/0x420
[ 2771.320353][T18723]  ? __fget_files+0x3a2/0x420
[ 2771.320389][T18723]  __sys_sendmsg+0x177/0x240
[ 2771.320418][T18723]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2771.320461][T18723]  __do_fast_syscall_32+0x27a/0x6a0
[ 2771.320485][T18723]  ? do_fast_syscall_32+0x33/0x70
[ 2771.320506][T18723]  ? asm_int80_emulation+0x1a/0x20
[ 2771.320525][T18723]  ? do_int80_emulation+0x299/0x500
[ 2771.320546][T18723]  ? trace_irq_disable+0x3b/0x140
[ 2771.320576][T18723]  do_fast_syscall_32+0x33/0x70
[ 2771.320599][T18723]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2771.320623][T18723] RIP: 0023:0xf702f0ec
[ 2771.320640][T18723] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2771.320658][T18723] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2771.320679][T18723] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[ 2771.320692][T18723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2771.320704][T18723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2771.320716][T18723] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2771.320728][T18723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2771.320755][T18723]  </TASK>
[ 2771.869464][T27299] usb 6-1: USB disconnect, device number 76
[ 2772.033095][T18737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2772.100202][ T8853] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[ 2772.111772][ T8853] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2772.128389][T17598] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 2772.138339][T17598] wlan1: authenticated
[ 2772.142673][T18737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2772.195897][T17598] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2772.202813][T17598] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
[ 2772.210453][T17598] wlan1: associate with 08:02:11:00:00:00 (try 3/3)
[ 2772.217720][T17598] wlan1: association with 08:02:11:00:00:00 timed out
[ 2772.243809][T18737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2772.287779][T18745] dlm: no locking on control device
[ 2772.471917][T18747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13609'.
[ 2772.481470][T18747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13609'.
[ 2772.690647][T18755] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13611'.
[ 2772.793155][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13612'.
[ 2773.029126][T18765] fuse: Unknown parameter ''
[ 2773.125740][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13615'.
[ 2773.282256][T18770] misc userio: The device must be registered before sending interrupts
[ 2773.371196][T18770] syz.5.13616 (18770): drop_caches: 2
[ 2773.441414][T18781] team0: Device ipvlan2 failed to register rx_handler
[ 2773.563427][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13622'.
[ 2773.595273][ T8853] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 2773.630121][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13623'.
[ 2773.681550][T18790] FAULT_INJECTION: forcing a failure.
[ 2773.681550][T18790] name failslab, interval 1, probability 0, space 0, times 0
[ 2773.695861][T18790] CPU: 1 UID: 0 PID: 18790 Comm: syz.6.13624 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2773.695885][T18790] Tainted: [L]=SOFTLOCKUP
[ 2773.695891][T18790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2773.695901][T18790] Call Trace:
[ 2773.695908][T18790]  <TASK>
[ 2773.695915][T18790]  dump_stack_lvl+0xe8/0x150
[ 2773.695942][T18790]  should_fail_ex+0x410/0x560
[ 2773.695967][T18790]  should_failslab+0xa8/0x100
[ 2773.695994][T18790]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[ 2773.696016][T18790]  ? alloc_inode+0x6a/0x1b0
[ 2773.696035][T18790]  ? alloc_inode+0x6a/0x1b0
[ 2773.696059][T18790]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 2773.696190][T18790]  alloc_inode+0x6a/0x1b0
[ 2773.696221][T18790]  new_inode+0x1f/0x170
[ 2773.696246][T18790]  __debugfs_create_file+0xb8/0x400
[ 2773.696267][T18790]  debugfs_create_file_full+0x3f/0x60
[ 2773.696288][T18790]  ref_tracker_dir_debugfs+0x197/0x360
[ 2773.696338][T18790]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[ 2773.696379][T18790]  ? __kvmalloc_node_noprof+0x55e/0x870
[ 2773.696403][T18790]  ? __kvmalloc_node_noprof+0x35e/0x870
[ 2773.696427][T18790]  ? __raw_spin_lock_init+0x45/0x100
[ 2773.696449][T18790]  alloc_netdev_mqs+0x275/0x12a0
[ 2773.696503][T18790]  ? __pfx_snprintf+0x10/0x10
[ 2773.696525][T18790]  ? __pfx_vlan_setup+0x10/0x10
[ 2773.696584][T18790]  rtnl_create_link+0x321/0xd70
[ 2773.696614][T18790]  rtnl_newlink_create+0x258/0x7b0
[ 2773.696657][T18790]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 2773.696682][T18790]  ? __pfx___mutex_lock+0x10/0x10
[ 2773.696726][T18790]  ? ns_capable+0x89/0xe0
[ 2773.696748][T18790]  rtnl_newlink+0x166d/0x1c30
[ 2773.696780][T18790]  ? __pfx_rtnl_newlink+0x10/0x10
[ 2773.696798][T18790]  ? __do_fast_syscall_32+0x27a/0x6a0
[ 2773.696815][T18790]  ? do_fast_syscall_32+0x33/0x70
[ 2773.696832][T18790]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2773.696877][T18790]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2773.696897][T18790]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2773.696949][T18790]  ? nlmon_xmit+0xb0/0x100
[ 2773.696968][T18790]  ? kmem_cache_free+0x182/0x650
[ 2773.696998][T18790]  ? __lock_acquire+0x683/0x2cf0
[ 2773.697024][T18790]  ? __dev_queue_xmit+0x29b/0x3820
[ 2773.697050][T18790]  ? __local_bh_enable_ip+0xd6/0x140
[ 2773.697080][T18790]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2773.697094][T18790]  ? __dev_queue_xmit+0x29b/0x3820
[ 2773.697114][T18790]  ? __local_bh_enable_ip+0xd6/0x140
[ 2773.697129][T18790]  ? __dev_queue_xmit+0x29b/0x3820
[ 2773.697155][T18790]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 2773.697183][T18790]  ? __pfx_rtnl_newlink+0x10/0x10
[ 2773.697201][T18790]  rtnetlink_rcv_msg+0x802/0xc00
[ 2773.697242][T18790]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 2773.697267][T18790]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2773.697295][T18790]  ? ref_tracker_free+0x689/0x830
[ 2773.697317][T18790]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2773.697343][T18790]  netlink_rcv_skb+0x226/0x4a0
[ 2773.697366][T18790]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2773.697386][T18790]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2773.697415][T18790]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2773.697436][T18790]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2773.697461][T18790]  netlink_unicast+0x7bd/0x940
[ 2773.697493][T18790]  netlink_sendmsg+0x813/0xb40
[ 2773.697522][T18790]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2773.697546][T18790]  ? aa_sock_msg_perm+0xf6/0x1c0
[ 2773.697570][T18790]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2773.697590][T18790]  sock_sendmsg_nosec+0x13a/0x180
[ 2773.697608][T18790]  ____sys_sendmsg+0x54e/0x850
[ 2773.697632][T18790]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2773.697677][T18790]  ___sys_sendmsg+0x2a5/0x360
[ 2773.697706][T18790]  ? __lock_acquire+0x683/0x2cf0
[ 2773.697744][T18790]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2773.697763][T18790]  ? get_pid_task+0x20/0x1f0
[ 2773.697784][T18790]  ? get_pid_task+0x20/0x1f0
[ 2773.697803][T18790]  ? get_pid_task+0x20/0x1f0
[ 2773.697843][T18790]  ? __fget_files+0x2a/0x420
[ 2773.697863][T18790]  ? __fget_files+0x3a2/0x420
[ 2773.697890][T18790]  __sys_sendmsg+0x177/0x240
[ 2773.697911][T18790]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2773.697944][T18790]  __do_fast_syscall_32+0x27a/0x6a0
[ 2773.697961][T18790]  ? do_fast_syscall_32+0x33/0x70
[ 2773.697977][T18790]  ? asm_int80_emulation+0x1a/0x20
[ 2773.697992][T18790]  ? do_int80_emulation+0x299/0x500
[ 2773.698008][T18790]  ? trace_irq_disable+0x3b/0x140
[ 2773.698030][T18790]  do_fast_syscall_32+0x33/0x70
[ 2773.698047][T18790]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2773.698064][T18790] RIP: 0023:0xf702f0ec
[ 2773.698077][T18790] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2773.698090][T18790] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2773.698117][T18790] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[ 2773.698126][T18790] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2773.698134][T18790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2773.698142][T18790] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2773.698150][T18790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2773.698169][T18790]  </TASK>
[ 2773.698219][T18790] debugfs: out of free dentries, can not create file 'netdev@ffff88807f638700'
[ 2773.744775][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2773.765438][ T8853] usb 3-1: Using ep0 maxpacket: 16
[ 2774.280940][ T8853] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[ 2774.291625][ T8853] usb 3-1: config 0 has an invalid interface number: 68 but max is 0
[ 2774.300293][ T8853] usb 3-1: config 0 has no interface number 0
[ 2774.306756][ T8853] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 254, setting to 64
[ 2774.323290][ T8853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2774.331592][ T8853] usb 3-1: Product: syz
[ 2774.336922][ T8853] usb 3-1: Manufacturer: syz
[ 2774.341652][ T8853] usb 3-1: SerialNumber: syz
[ 2774.353103][ T8853] usb 3-1: config 0 descriptor??
[ 2774.395581][ T8853] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2774.558062][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 2774.566334][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 2774.577049][T17599] usb 3-1: Failed to submit usb control message: -71
[ 2774.585744][T17599] usb 3-1: unable to send the bmi data to the device: -71
[ 2774.592357][ T6118] usb 3-1: USB disconnect, device number 66
[ 2774.596854][T17599] usb 3-1: unable to get target info from device
[ 2774.605825][T17599] usb 3-1: could not get target info (-71)
[ 2774.611820][T17599] usb 3-1: could not probe fw (-71)
[ 2775.585131][T12354] Bluetooth: hci3: command 0x0406 tx timeout
[ 2775.592615][T18782] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[ 2776.043233][T18811] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x4f
[ 2776.369209][T18782] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2776.381537][T18782] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2776.388695][T18782] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2776.395361][T18782] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 2776.408304][T18782] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2776.414384][T18782] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 2776.428111][T18782] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2776.434256][T18782] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 2776.448361][T18782] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 2776.557288][T18820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2776.672345][T18824] FAULT_INJECTION: forcing a failure.
[ 2776.672345][T18824] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2776.725771][T18824] CPU: 1 UID: 0 PID: 18824 Comm: syz.8.13635 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2776.725803][T18824] Tainted: [L]=SOFTLOCKUP
[ 2776.725811][T18824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2776.725822][T18824] Call Trace:
[ 2776.725830][T18824]  <TASK>
[ 2776.725839][T18824]  dump_stack_lvl+0xe8/0x150
[ 2776.725872][T18824]  should_fail_ex+0x410/0x560
[ 2776.725902][T18824]  prepare_alloc_pages+0x230/0x650
[ 2776.725935][T18824]  __alloc_frozen_pages_noprof+0x12f/0x380
[ 2776.725966][T18824]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 2776.725997][T18824]  ? __pfx_policy_nodemask+0x10/0x10
[ 2776.726034][T18824]  alloc_pages_mpol+0x212/0x390
[ 2776.726067][T18824]  folio_alloc_mpol_noprof+0x39/0x160
[ 2776.726097][T18824]  vma_alloc_folio_noprof+0xe1/0x1e0
[ 2776.726129][T18824]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 2776.726160][T18824]  ? _raw_spin_unlock+0x28/0x50
[ 2776.726188][T18824]  ? __pte_alloc+0x15e/0x1a0
[ 2776.726216][T18824]  do_pte_missing+0x173a/0x34b0
[ 2776.726257][T18824]  handle_mm_fault+0x1b36/0x3080
[ 2776.726289][T18824]  ? handle_mm_fault+0xec/0x3080
[ 2776.726317][T18824]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2776.726341][T18824]  ? follow_page_pte+0xbd0/0xe70
[ 2776.726382][T18824]  __get_user_pages+0x1678/0x2720
[ 2776.726440][T18824]  populate_vma_page_range+0x2be/0x3c0
[ 2776.726476][T18824]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 2776.726509][T18824]  ? down_read+0x2be/0x330
[ 2776.726543][T18824]  __mm_populate+0x25f/0x390
[ 2776.726575][T18824]  ? __pfx___mm_populate+0x10/0x10
[ 2776.726612][T18824]  do_mlock+0x615/0x720
[ 2776.726640][T18824]  ? __fget_files+0x2a/0x420
[ 2776.726674][T18824]  ? __pfx_do_mlock+0x10/0x10
[ 2776.726705][T18824]  ? fput+0xa0/0xd0
[ 2776.726729][T18824]  ? ksys_write+0x242/0x270
[ 2776.726777][T18824]  __ia32_sys_mlock+0x5f/0x70
[ 2776.726823][T18824]  __do_fast_syscall_32+0x27a/0x6a0
[ 2776.726867][T18824]  ? do_fast_syscall_32+0x33/0x70
[ 2776.726893][T18824]  ? asm_int80_emulation+0x1a/0x20
[ 2776.726916][T18824]  ? do_int80_emulation+0x299/0x500
[ 2776.726940][T18824]  ? trace_irq_disable+0x3b/0x140
[ 2776.726976][T18824]  do_fast_syscall_32+0x33/0x70
[ 2776.727003][T18824]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2776.727031][T18824] RIP: 0023:0xf709f0ec
[ 2776.727052][T18824] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2776.727072][T18824] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000096
[ 2776.727096][T18824] RAX: ffffffffffffffda RBX: 0000000080bff000 RCX: 0000000000400000
[ 2776.727113][T18824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2776.727128][T18824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2776.727142][T18824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2776.727156][T18824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2776.727189][T18824]  </TASK>
[ 2777.394624][T27296] usb 9-1: new high-speed USB device number 78 using dummy_hcd
[ 2777.554880][T27296] usb 9-1: Using ep0 maxpacket: 16
[ 2777.560756][T27296] usb 9-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[ 2777.570831][T27296] usb 9-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11
[ 2777.584451][T27296] usb 9-1: config 0 interface 0 has no altsetting 0
[ 2777.591180][T27296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2777.601829][T27296] usb 9-1: config 0 descriptor??
[ 2777.665702][T12354] Bluetooth: hci0: command 0x0406 tx timeout
[ 2777.858286][T27296] usbhid 9-1:0.0: can't add hid device: -71
[ 2777.870943][T27296] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 2777.890876][T27296] usb 9-1: USB disconnect, device number 78
[ 2777.950428][T18837] fuse: Bad value for 'fd'
[ 2778.275161][ T8853] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 2778.306108][T18849] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13644'.
[ 2778.386376][T12354] Bluetooth: hci1: command 0x0406 tx timeout
[ 2778.411015][T18851] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13645'.
[ 2778.435297][ T8853] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2778.451869][ T8853] usb 6-1: config index 0 descriptor too short (expected 65183, got 72)
[ 2778.465696][T12354] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2778.471764][T18513] Bluetooth: hci6: command 0x0406 tx timeout
[ 2778.480611][T12354] Bluetooth: hci5: command 0x0406 tx timeout
[ 2778.501629][ T8853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2778.515311][ T8853] usb 6-1: Product: syz
[ 2778.523010][ T8853] usb 6-1: Manufacturer: syz
[ 2778.532395][ T8853] usb 6-1: SerialNumber: syz
[ 2778.578639][T27283] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2778.795266][T18840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2778.850467][T18840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2778.884008][T18840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2778.916103][T18840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2778.954947][T18840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2778.990431][T18840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2779.029785][ T8100] usb 6-1: USB disconnect, device number 77
[ 2779.665885][T27283] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 2779.673804][T27283] ath9k_htc: Failed to initialize the device
[ 2779.681355][ T8100] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2779.987570][ T8100] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 2780.047872][T18867] netlink: 14 bytes leftover after parsing attributes in process `syz.8.13651'.
[ 2780.103781][T18867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2780.121471][T18867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2780.165996][ T8100] usb 6-1: Using ep0 maxpacket: 32
[ 2780.178450][ T8100] usb 6-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da
[ 2780.178867][T18867] bond0 (unregistering): Released all slaves
[ 2780.202993][ T8100] usb 6-1: config index 0 descriptor too short (expected 241, got 72)
[ 2780.218791][ T8100] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[ 2780.239986][T18146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2780.266599][T18146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2780.277061][T18146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2780.287145][T18146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2780.299869][T18146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2780.328237][ T8100] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2780.345604][ T8100] usb 6-1: config 0 descriptor??
[ 2780.359626][ T8100] mos7840 6-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected
[ 2780.545140][T18852] Bluetooth: hci5: command 0x0406 tx timeout
[ 2780.550057][T18146] Bluetooth: hci6: command 0x0406 tx timeout
[ 2780.551911][T12354] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2780.680291][T18879] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x4f
[ 2780.971159][T18840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13641'.
[ 2780.975146][   T29] kauditd_printk_skb: 36 callbacks suppressed
[ 2780.975193][   T29] audit: type=1326 audit(1787328968.022:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.13641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2780.992962][ T8100] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[ 2781.035881][   T29] audit: type=1326 audit(1787328968.022:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.13641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2781.061350][ T8100] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71
[ 2781.099712][ T8100] usb 6-1: USB disconnect, device number 78
[ 2781.139529][   T29] audit: type=1326 audit(1787328968.022:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.13641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2781.139653][ T8100] mos7840 6-1:0.0: device disconnected
[ 2781.190895][   T29] audit: type=1326 audit(1787328968.022:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.13641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2781.234622][   T29] audit: type=1326 audit(1787328968.022:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.13641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2781.271071][   T29] audit: type=1326 audit(1787328968.022:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.13641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=110 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2781.302391][   T29] audit: type=1326 audit(1787328968.022:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.13641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2781.339792][   T29] audit: type=1326 audit(1787328968.022:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.13641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2781.365892][   T29] audit: type=1326 audit(1787328968.022:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.13641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2781.398663][   T29] audit: type=1326 audit(1787328968.042:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.13641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000
[ 2781.475169][T10232] bond0: (slave netdevsim1): Releasing backup interface
[ 2781.497149][T10232] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode
[ 2781.711224][T10232] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode
[ 2781.720452][T10232] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode
[ 2781.732391][T10232] bridge0: port 3(netdevsim0) entered disabled state
[ 2781.795847][T18875] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2781.810001][T18875] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2781.828602][T18875] bridge_slave_0: entered allmulticast mode
[ 2781.846563][T18875] bridge_slave_0: entered promiscuous mode
[ 2781.862931][T18875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2781.879139][T18875] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2781.893655][T18875] bridge_slave_1: entered allmulticast mode
[ 2781.903269][T18875] bridge_slave_1: entered promiscuous mode
[ 2781.961382][T18875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2781.978049][T18875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2782.057776][T18899] netlink: 'syz.8.13661': attribute type 1 has an invalid length.
[ 2782.060805][T18875] team0: Port device team_slave_0 added
[ 2782.074141][T18875] team0: Port device team_slave_1 added
[ 2782.164409][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13661'.
[ 2782.175277][T18901] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 2782.222384][T18875] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2782.229799][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2782.260484][T18875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2782.304402][T18875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2782.320958][T18875] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2782.333279][T18875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2782.377418][T18905] netlink: 'syz.7.13662': attribute type 33 has an invalid length.
[ 2782.395862][T18875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2782.420450][T18905] netlink: 160 bytes leftover after parsing attributes in process `syz.7.13662'.
[ 2782.458456][T10232] bridge_slave_1: left allmulticast mode
[ 2782.470497][T12354] Bluetooth: hci4: command tx timeout
[ 2782.486687][T10232] bridge_slave_1: left promiscuous mode
[ 2782.502868][T10232] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2782.531691][T10232] bridge_slave_0: left allmulticast mode
[ 2782.541008][T10232] bridge_slave_0: left promiscuous mode
[ 2782.553677][T10232] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2782.583255][T18912] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13664'.
[ 2782.608237][T10232] tipc: Disabling bearer <eth:ip6gre0>
[ 2782.609973][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13664'.
[ 2782.627371][T12354] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2782.648166][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13664'.
[ 2782.877303][T10232] gretap0 (unregistering): left promiscuous mode
[ 2782.911993][T10232] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 2782.952489][T10232] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 2782.972092][T10232] bridge0 (unregistering): left promiscuous mode
[ 2783.017182][T10232] bond0 (unregistering): left promiscuous mode
[ 2783.023438][T10232] bond_slave_0: left promiscuous mode
[ 2783.038417][T10232] bond_slave_1: left promiscuous mode
[ 2783.046052][T10232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2783.056842][T10232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2783.067536][T10232] bond0 (unregistering): Released all slaves
[ 2783.082980][T10232] bond1 (unregistering): Released all slaves
[ 2783.104379][T10232] bond2 (unregistering): Released all slaves
[ 2783.132789][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9
[ 2783.257376][T18875] hsr_slave_0: entered promiscuous mode
[ 2783.279234][T18875] hsr_slave_1: entered promiscuous mode
[ 2783.294156][T18875] debugfs: 'hsr0' already exists in 'hsr'
[ 2783.304135][T18875] Cannot create hsr debugfs directory
[ 2783.312701][T10232] tipc: Disabling bearer <udp:syz2>
[ 2783.334344][T10232] tipc: Disabling bearer <eth:syzkaller0>
[ 2783.358810][T10232] tipc: Left network mode
[ 2783.442308][T18927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2783.523305][T18929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2783.598924][T18927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2783.755837][ T8100] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 2783.915724][ T8100] usb 6-1: Using ep0 maxpacket: 16
[ 2783.932769][ T8100] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 2783.968672][ T8100] usb 6-1: config 0 has no interfaces?
[ 2783.995039][ T8100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2784.010159][ T8100] usb 6-1: Product: syz
[ 2784.022023][ T8100] usb 6-1: Manufacturer: syz
[ 2784.032170][ T8100] usb 6-1: SerialNumber: syz
[ 2784.048381][ T8100] usb 6-1: config 0 descriptor??
[ 2784.330557][T10232] team0: left promiscuous mode
[ 2784.341834][T10232] team_slave_0: left promiscuous mode
[ 2784.366986][T10232] team_slave_1: left promiscuous mode
[ 2784.418816][T10232] hsr_slave_0: left promiscuous mode
[ 2784.437346][T10232] hsr_slave_1: left promiscuous mode
[ 2784.443726][T10232] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2784.461226][T10232] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2784.478019][ T8100] usb 6-1: USB disconnect, device number 79
[ 2784.567068][T12354] Bluetooth: hci4: command tx timeout
[ 2784.576134][T27292] usb 9-1: new high-speed USB device number 79 using dummy_hcd
[ 2784.598370][T18959] dlm: no locking on control device
[ 2784.737005][T27292] usb 9-1: Using ep0 maxpacket: 8
[ 2784.752551][T27292] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2784.778968][T27292] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 2784.798391][T27292] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2784.823045][T18963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13674'.
[ 2784.829138][T27292] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2784.852088][T27292] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2784.872307][T27292] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2784.900802][T27292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2785.094076][T10232] team0 (unregistering): Port device team_slave_1 removed
[ 2785.129326][T10232] team0 (unregistering): Port device team_slave_0 removed
[ 2785.153963][T18953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2785.166431][T18953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2785.185689][T27292] usb 9-1: usb_control_msg returned -32
[ 2785.197816][T27292] usbtmc 9-1:16.0: can't read capabilities
[ 2785.539559][T18962] dummy0: mtu less than device minimum
[ 2785.549578][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10
[ 2785.592043][T27292] usb 9-1: USB disconnect, device number 79
[ 2786.159312][T18975] netlink: 'syz.7.13677': attribute type 8 has an invalid length.
[ 2786.644776][T12354] Bluetooth: hci4: command tx timeout
[ 2787.021724][T18996] netlink: Failed to add batadv0 helper -22
[ 2787.036482][T18996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2787.664910][T27292] usb 9-1: new high-speed USB device number 80 using dummy_hcd
[ 2787.818538][T19023] misc userio: The device must be registered before sending interrupts
[ 2787.854805][T27292] usb 9-1: Using ep0 maxpacket: 8
[ 2787.875440][T27292] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 2787.886024][T18875] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2787.897971][T27292] usb 9-1: config 0 has an invalid interface number: 186 but max is 0
[ 2787.921100][T18875] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2787.928521][T27292] usb 9-1: config 0 has no interface number 0
[ 2787.939931][T27292] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2787.958616][T18875] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2787.986881][T27292] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2788.000220][T18852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2788.026845][T18875] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2788.042312][T19023] syz.5.13688 (19023): drop_caches: 2
[ 2788.051496][T18852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2788.069639][T18852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2788.072392][T18875] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2788.091080][T18852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2788.100992][T18852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2788.138924][T27292] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 2788.186360][T27292] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 2788.197881][T27292] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2788.209945][T18875] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2788.216341][T27292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2788.226484][T27292] usb 9-1: Product: syz
[ 2788.230703][T27292] usb 9-1: Manufacturer: syz
[ 2788.235381][T27292] usb 9-1: SerialNumber: syz
[ 2788.248494][T27292] usb 9-1: config 0 descriptor??
[ 2788.262746][T18875] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2788.311263][T18875] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2788.436694][T10227] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2788.490835][T27292] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[ 2788.666126][T10227] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2788.706770][T18852] Bluetooth: hci4: command tx timeout
[ 2788.755424][T19012] netlink: 312 bytes leftover after parsing attributes in process `syz.8.13684'.
[ 2788.804032][T19012] netlink: 'syz.8.13684': attribute type 1 has an invalid length.
[ 2788.862360][T10227] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2789.040250][T10227] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2789.189884][T18875] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2789.234061][T18875] 8021q: adding VLAN 0 to HW filter on device team0
[ 2789.256737][T17598] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2789.263979][T17598] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2789.421677][T17601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2789.428935][T17601] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2789.652548][T10227] bridge_slave_1: left allmulticast mode
[ 2789.658655][T10227] bridge_slave_1: left promiscuous mode
[ 2789.665975][T10227] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2789.678321][T10227] bridge_slave_0: left allmulticast mode
[ 2789.684046][T10227] bridge_slave_0: left promiscuous mode
[ 2789.690154][T10227] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2790.047057][T10227] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 2790.158700][T10227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2790.183176][T10227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2790.213435][T10227] bond0 (unregistering): Released all slaves
[ 2790.224801][T18852] Bluetooth: hci1: command tx timeout
[ 2790.252917][T10227] bond1 (unregistering): Released all slaves
[ 2790.322853][T19028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2790.354883][T19028] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2790.377101][T19028] bridge_slave_0: entered allmulticast mode
[ 2790.398042][T19028] bridge_slave_0: entered promiscuous mode
[ 2790.399833][T27296] usb 9-1: USB disconnect, device number 80
[ 2790.418591][T19028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2790.475074][T19028] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2790.489761][T19028] bridge_slave_1: entered allmulticast mode
[ 2790.531654][T19028] bridge_slave_1: entered promiscuous mode
[ 2790.591689][T10227] tipc: Left network mode
[ 2790.719059][   T29] kauditd_printk_skb: 1 callbacks suppressed
[ 2790.719086][   T29] audit: type=1326 audit(1787328977.772:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.8.13691" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000
[ 2790.769904][T19028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2790.780029][   T29] audit: type=1326 audit(1787328977.772:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.8.13691" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000
[ 2790.887870][   T29] audit: type=1326 audit(1787328977.772:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.8.13691" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000
[ 2790.917336][   T29] audit: type=1326 audit(1787328977.812:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.8.13691" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000
[ 2790.966207][T19057] dlm: no locking on control device
[ 2790.976962][   T29] audit: type=1326 audit(1787328977.812:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.8.13691" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf709f0ec code=0x7ffc0000
[ 2791.038829][   T29] audit: type=1326 audit(1787328977.812:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.8.13691" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000
[ 2791.074952][   T29] audit: type=1326 audit(1787328977.812:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.8.13691" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000
[ 2791.111299][T19028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2791.122869][   T29] audit: type=1326 audit(1787328977.812:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.8.13691" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf709f0ec code=0x7ffc0000
[ 2791.181890][   T29] audit: type=1326 audit(1787328977.812:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.8.13691" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf709f0ec code=0x7ffc0000
[ 2791.252424][T19060] syzkaller0: entered promiscuous mode
[ 2791.275296][T19060] syzkaller0: entered allmulticast mode
[ 2791.294126][T19028] team0: Port device team_slave_0 added
[ 2791.309228][T19028] team0: Port device team_slave_1 added
[ 2791.569945][T19028] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2791.612370][T19028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2791.662868][T19028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2791.690388][T10227] hsr_slave_0: left promiscuous mode
[ 2791.711925][T10227] hsr_slave_1: left promiscuous mode
[ 2791.732417][T10227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2791.761947][T10227] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2791.794384][T10227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2791.819340][T10227] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2791.848187][T10227] veth1_macvtap: left promiscuous mode
[ 2791.864690][T10227] veth0_macvtap: left promiscuous mode
[ 2791.871000][T10227] veth1_vlan: left promiscuous mode
[ 2791.882601][T10227] veth0_vlan: left promiscuous mode
[ 2792.304698][T18852] Bluetooth: hci1: command tx timeout
[ 2792.498853][T10227] team0 (unregistering): Port device team_slave_1 removed
[ 2792.516969][T10227] team0 (unregistering): Port device team_slave_0 removed
[ 2792.605173][ T8100] usb 9-1: new high-speed USB device number 81 using dummy_hcd
[ 2792.641455][T19028] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2792.651807][T19028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2792.680309][T19028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2792.706215][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9
[ 2792.780312][ T8100] usb 9-1: Using ep0 maxpacket: 16
[ 2792.802880][T19028] hsr_slave_0: entered promiscuous mode
[ 2792.812464][ T8100] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2792.822837][T19028] hsr_slave_1: entered promiscuous mode
[ 2792.837467][T19028] debugfs: 'hsr0' already exists in 'hsr'
[ 2792.850760][T19028] Cannot create hsr debugfs directory
[ 2792.852039][ T8100] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2792.882286][ T8100] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2792.912027][ T8100] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2792.925862][ T8100] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2792.943788][T18875] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2792.976365][ T8100] usb 9-1: config 0 descriptor??
[ 2793.348601][T18875] veth0_vlan: entered promiscuous mode
[ 2793.387885][T18875] veth1_vlan: entered promiscuous mode
[ 2793.429645][ T8100] microsoft 0003:045E:07DA.00C0: unknown main item tag 0x0
[ 2793.464695][ T8100] microsoft 0003:045E:07DA.00C0: unknown main item tag 0x0
[ 2793.484187][ T8100] microsoft 0003:045E:07DA.00C0: unknown main item tag 0x0
[ 2793.506177][ T8100] microsoft 0003:045E:07DA.00C0: unknown main item tag 0x0
[ 2793.533759][ T8100] microsoft 0003:045E:07DA.00C0: unknown main item tag 0x0
[ 2793.607611][ T8100] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.00C0/input/input431
[ 2793.669362][ T8100] microsoft 0003:045E:07DA.00C0: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[ 2793.823579][T18875] veth0_macvtap: entered promiscuous mode
[ 2793.926580][T18875] veth1_macvtap: entered promiscuous mode
[ 2793.971098][T19028] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2793.999169][T19028] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2794.031800][T19028] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2794.048349][T19028] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2794.066084][T19028] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2794.091288][T19028] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2794.105849][T19028] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2794.129896][T19028] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2794.163809][T18875] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2794.186457][T18875] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2794.255167][T27299] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 2794.266789][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10
[ 2794.327855][T10227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2794.383944][T10227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2794.393479][T18852] Bluetooth: hci1: command tx timeout
[ 2794.427005][T27299] usb 6-1: Using ep0 maxpacket: 8
[ 2794.435511][T17604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2794.447893][T27299] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2794.471056][T27299] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 2794.489021][T27299] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2794.514594][T27299] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2794.531028][T17604] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2794.567027][T27299] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2794.601989][T27299] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2794.622339][T27299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2794.677024][T10232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2794.701123][T10232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2794.749147][T17601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2794.768147][T27291] usb 9-1: USB disconnect, device number 81
[ 2794.779247][T17601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2794.828261][T19028] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2794.841216][T19109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2794.870727][T19109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2794.908381][T19028] 8021q: adding VLAN 0 to HW filter on device team0
[ 2794.923237][T27299] usb 6-1: usb_control_msg returned -32
[ 2794.942845][T27299] usbtmc 6-1:16.0: can't read capabilities
[ 2794.952910][T17599] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2794.960194][T17599] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2795.011695][T17599] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2795.018952][T17599] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2795.181941][T19109] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2795.201113][T19109] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2795.409285][T27296] usb 6-1: USB disconnect, device number 80
[ 2795.414985][T10227] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2795.445583][T17600] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2795.486831][T17600] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2795.667693][T10227] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2795.692415][T19028] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2795.742983][T19142] misc userio: The device must be registered before sending interrupts
[ 2795.752427][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11
[ 2795.808010][T19028] veth0_vlan: entered promiscuous mode
[ 2795.821725][T19142] syz.6.13704 (19142): drop_caches: 2
[ 2795.853713][T19028] veth1_vlan: entered promiscuous mode
[ 2795.865108][T18316] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 2795.913648][T19028] veth0_macvtap: entered promiscuous mode
[ 2795.931143][T19028] veth1_macvtap: entered promiscuous mode
[ 2795.986578][ T8853] usb 9-1: new high-speed USB device number 82 using dummy_hcd
[ 2795.998302][T19028] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2796.028115][T18316] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2796.036722][T18316] usb 3-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40
[ 2796.050433][T18316] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2796.063637][T19028] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2796.081143][T18316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2796.108976][T18316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2796.123604][T18316] usb 3-1: Product: syz
[ 2796.148229][T18316] usb 3-1: Manufacturer: syz
[ 2796.158799][ T8853] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2796.195738][T18316] usb 3-1: SerialNumber: syz
[ 2796.214739][T17604] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2796.241603][ T8853] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2796.254897][T10232] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2796.310256][T10232] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2796.341226][ T8853] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2796.363558][ T8853] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2796.438429][T19144] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 2796.459977][ T8853] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 2796.475084][T18852] Bluetooth: hci1: command tx timeout
[ 2796.501168][T17601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2796.512808][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13707'.
[ 2796.518140][T10232] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2796.531333][T17601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2796.626551][T19152] hsr_slave_0: left promiscuous mode
[ 2796.641744][T19152] hsr_slave_1: left promiscuous mode
[ 2796.716806][T18316] usb 3-1: unit 115 not found!
[ 2796.736150][T18316] usb 3-1: unit 255 not found!
[ 2796.741758][ T8853] usb 9-1: USB disconnect, device number 82
[ 2796.757588][T17599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2796.770068][T17599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2796.880799][T18316] usb 3-1: USB disconnect, device number 67
[ 2797.082194][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2797.248128][ T6118] hsr0: entered promiscuous mode
[ 2797.288783][T19170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13710'.
[ 2797.303099][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13710'.
[ 2797.547334][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12
[ 2797.597101][T19177] misc userio: No port type given on /dev/userio
[ 2797.675777][T18318] usb 3-1: new full-speed USB device number 68 using dummy_hcd
[ 2797.684343][T19177] misc userio: The device must be registered before sending interrupts
[ 2797.788854][T19177] syz.5.13712 (19177): drop_caches: 2
[ 2797.855989][T18318] usb 3-1: not running at top speed; connect to a high speed hub
[ 2797.865123][T18318] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[ 2797.884808][T18318] usb 3-1: string descriptor 0 read error: -22
[ 2797.891409][T18318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2798.209383][T17599] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2798.371428][T18318] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 2798.380459][T18318] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 2798.492534][T18318] usb 3-1: USB disconnect, device number 68
[ 2798.628671][T17599] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2798.890178][T17599] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2798.949537][T19198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2799.093083][T12354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2799.116252][T12354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2799.129651][T12354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2799.131290][T17599] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2799.156697][T12354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2799.174337][T12354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2799.203587][T19206] Invalid argument reading file caps for ./file0
[ 2799.230588][T12354] Bluetooth: hci5: unexpected event for opcode 0x2006
[ 2799.257024][T19207] ==================================================================
[ 2799.265114][T19207] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1220/0x22b0
[ 2799.273785][T19207] Write of size 2560 at addr ffffc90000115a00 by task vivid-000-vid-c/19207
[ 2799.282497][T19207] 
[ 2799.284847][T19207] CPU: 0 UID: 0 PID: 19207 Comm: vivid-000-vid-c Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2799.284875][T19207] Tainted: [L]=SOFTLOCKUP
[ 2799.284882][T19207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2799.284893][T19207] Call Trace:
[ 2799.284901][T19207]  <TASK>
[ 2799.284908][T19207]  dump_stack_lvl+0xe8/0x150
[ 2799.284938][T19207]  print_address_description+0x55/0x1e0
[ 2799.284963][T19207]  ? tpg_fill_plane_buffer+0x1220/0x22b0
[ 2799.284991][T19207]  print_report+0x58/0x70
[ 2799.285012][T19207]  kasan_report+0x117/0x150
[ 2799.285036][T19207]  ? tpg_fill_plane_extras+0x528/0x2580
[ 2799.285064][T19207]  ? tpg_fill_plane_buffer+0x1220/0x22b0
[ 2799.285095][T19207]  kasan_check_range+0x264/0x2c0
[ 2799.285121][T19207]  ? tpg_fill_plane_buffer+0x1220/0x22b0
[ 2799.285151][T19207]  __asan_memcpy+0x40/0x70
[ 2799.285172][T19207]  tpg_fill_plane_buffer+0x1220/0x22b0
[ 2799.285212][T19207]  vivid_thread_vid_cap_tick+0x115c/0x6340
[ 2799.285305][T19207]  ? __lock_acquire+0x683/0x2cf0
[ 2799.285337][T19207]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2799.285371][T19207]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[ 2799.285397][T19207]  ? vivid_thread_vid_cap+0x491/0x11e0
[ 2799.285426][T19207]  ? cgroup1_freezing+0x29a/0x350
[ 2799.285452][T19207]  vivid_thread_vid_cap+0x927/0x11e0
[ 2799.285476][T19207]  ? __lock_acquire+0x683/0x2cf0
[ 2799.285515][T19207]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 2799.285537][T19207]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2799.285565][T19207]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2799.285606][T19207]  ? __kthread_parkme+0x71/0x1f0
[ 2799.285632][T19207]  ? __kthread_parkme+0x199/0x1f0
[ 2799.285658][T19207]  kthread+0x38b/0x480
[ 2799.285683][T19207]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 2799.285706][T19207]  ? __pfx_kthread+0x10/0x10
[ 2799.285732][T19207]  ret_from_fork+0x514/0xb70
[ 2799.285771][T19207]  ? __pfx_ret_from_fork+0x10/0x10
[ 2799.285795][T19207]  ? __switch_to+0xc89/0x1420
[ 2799.285816][T19207]  ? __pfx_kthread+0x10/0x10
[ 2799.285843][T19207]  ret_from_fork_asm+0x1a/0x30
[ 2799.285879][T19207]  </TASK>
[ 2799.285887][T19207] 
[ 2799.487782][T19207] The buggy address belongs to a 6-page vmalloc region starting at 0xffffc90000110000 allocated at vb2_vmalloc_alloc+0xef/0x360
[ 2799.501101][T19207] The buggy address belongs to the physical page:
[ 2799.507606][T19207] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x2b659
[ 2799.517692][T19207] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 2799.524850][T19207] raw: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 2799.533450][T19207] raw: ffffffffffffffff 0000000000000000 00000001ffffffff 0000000000000000
[ 2799.542039][T19207] page dumped because: kasan: bad access detected
[ 2799.548485][T19207] page_owner tracks the page as allocated
[ 2799.554218][T19207] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 19205, tgid 19196 (syz.8.13719), ts 2799173576831, free_ts 2798761937484
[ 2799.574310][T19207]  post_alloc_hook+0x1f9/0x250
[ 2799.579113][T19207]  get_page_from_freelist+0x21fe/0x2270
[ 2799.584686][T19207]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 2799.590519][T19207]  alloc_pages_mpol+0x212/0x390
[ 2799.595378][T19207]  alloc_pages_noprof+0xb1/0x2b0
[ 2799.600337][T19207]  __vmalloc_node_range_noprof+0x795/0x1730
[ 2799.606260][T19207]  vmalloc_user_noprof+0xad/0xe0
[ 2799.611215][T19207]  vb2_vmalloc_alloc+0xef/0x360
[ 2799.616099][T19207]  __vb2_queue_alloc+0xa0b/0x1660
[ 2799.621135][T19207]  vb2_core_reqbufs+0xc3f/0x1470
[ 2799.626084][T19207]  __vb2_init_fileio+0x310/0x1040
[ 2799.631118][T19207]  vb2_core_poll+0x4b0/0x830
[ 2799.635724][T19207]  vb2_fop_poll+0x196/0x310
[ 2799.640257][T19207]  v4l2_poll+0x147/0x2c0
[ 2799.644523][T19207]  do_select+0x1067/0x17f0
[ 2799.648962][T19207]  compat_core_sys_select+0x6db/0x9e0
[ 2799.654358][T19207] page last free pid 19172 tgid 19172 stack trace:
[ 2799.660878][T19207]  __free_frozen_pages+0xc22/0xd20
[ 2799.666023][T19207]  __slab_free+0x274/0x2c0
[ 2799.670467][T19207]  qlist_free_all+0x99/0x100
[ 2799.675099][T19207]  kasan_quarantine_reduce+0x148/0x160
[ 2799.680573][T19207]  __kasan_slab_alloc+0x22/0x80
[ 2799.685451][T19207]  kmem_cache_alloc_noprof+0x2a4/0x5f0
[ 2799.690935][T19207]  jbd2__journal_start+0x145/0x5d0
[ 2799.696068][T19207]  __ext4_journal_start_sb+0x205/0x780
[ 2799.701592][T19207]  ext4_dirty_inode+0x93/0x110
[ 2799.706389][T19207]  __mark_inode_dirty+0x3a8/0x13b0
[ 2799.711527][T19207]  file_update_time_flags+0x399/0x440
[ 2799.716914][T19207]  ext4_page_mkwrite+0x224/0x1140
[ 2799.721976][T19207]  do_page_mkwrite+0x147/0x310
[ 2799.726758][T19207]  do_pte_missing+0x757/0x34b0
[ 2799.731556][T19207]  handle_mm_fault+0x1b36/0x3080
[ 2799.736512][T19207]  do_user_addr_fault+0xa4f/0x1340
[ 2799.742387][T19207] 
[ 2799.744731][T19207] Memory state around the buggy address:
[ 2799.750379][T19207]  ffffc90000115f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2799.758460][T19207]  ffffc90000115f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2799.766595][T19207] >ffffc90000116000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2799.774689][T19207]                    ^
[ 2799.778775][T19207]  ffffc90000116080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2799.786850][T19207]  ffffc90000116100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2799.794925][T19207] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2799.808210][T19207] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2799.815449][T19207] CPU: 0 UID: 0 PID: 19207 Comm: vivid-000-vid-c Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2799.826836][T19207] Tainted: [L]=SOFTLOCKUP
[ 2799.831170][T19207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2799.841245][T19207] Call Trace:
[ 2799.844551][T19207]  <TASK>
[ 2799.847512][T19207]  vpanic+0x56d/0xa60
[ 2799.851545][T19207]  ? __pfx_vpanic+0x10/0x10
[ 2799.856084][T19207]  panic+0xc5/0xd0
[ 2799.859838][T19207]  ? __pfx_panic+0x10/0x10
[ 2799.864285][T19207]  ? preempt_schedule_thunk+0x16/0x40
[ 2799.869705][T19207]  ? tpg_fill_plane_buffer+0x1220/0x22b0
[ 2799.875372][T19207]  ? preempt_schedule_thunk+0x16/0x40
[ 2799.880783][T19207]  ? tpg_fill_plane_buffer+0x1220/0x22b0
[ 2799.886459][T19207]  check_panic_on_warn+0x89/0xb0
[ 2799.891471][T19207]  ? tpg_fill_plane_buffer+0x1220/0x22b0
[ 2799.897143][T19207]  end_report+0x73/0x170
[ 2799.901435][T19207]  ? tpg_fill_plane_buffer+0x1220/0x22b0
[ 2799.907101][T19207]  kasan_report+0x128/0x150
[ 2799.911648][T19207]  ? tpg_fill_plane_extras+0x528/0x2580
[ 2799.917228][T19207]  ? tpg_fill_plane_buffer+0x1220/0x22b0
[ 2799.922907][T19207]  kasan_check_range+0x264/0x2c0
[ 2799.927876][T19207]  ? tpg_fill_plane_buffer+0x1220/0x22b0
[ 2799.933544][T19207]  __asan_memcpy+0x40/0x70
[ 2799.937976][T19207]  tpg_fill_plane_buffer+0x1220/0x22b0
[ 2799.943460][T19207]  vivid_thread_vid_cap_tick+0x115c/0x6340
[ 2799.949311][T19207]  ? __lock_acquire+0x683/0x2cf0
[ 2799.954270][T19207]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2799.960114][T19207]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[ 2799.966336][T19207]  ? vivid_thread_vid_cap+0x491/0x11e0
[ 2799.971833][T19207]  ? cgroup1_freezing+0x29a/0x350
[ 2799.976898][T19207]  vivid_thread_vid_cap+0x927/0x11e0
[ 2799.982204][T19207]  ? __lock_acquire+0x683/0x2cf0
[ 2799.987170][T19207]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 2799.992915][T19207]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2799.997951][T19207]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2800.003769][T19207]  ? __kthread_parkme+0x71/0x1f0
[ 2800.008726][T19207]  ? __kthread_parkme+0x199/0x1f0
[ 2800.013787][T19207]  kthread+0x38b/0x480
[ 2800.017895][T19207]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 2800.023628][T19207]  ? __pfx_kthread+0x10/0x10
[ 2800.028238][T19207]  ret_from_fork+0x514/0xb70
[ 2800.032852][T19207]  ? __pfx_ret_from_fork+0x10/0x10
[ 2800.037979][T19207]  ? __switch_to+0xc89/0x1420
[ 2800.042681][T19207]  ? __pfx_kthread+0x10/0x10
[ 2800.047302][T19207]  ret_from_fork_asm+0x1a/0x30
[ 2800.052104][T19207]  </TASK>
[ 2800.055906][T19207] Kernel Offset: disabled
[ 2800.060250][T19207] Rebooting in 86400 seconds..