last executing test programs:

13.108888091s ago: executing program 0 (id=3262):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000100000001c001280090001006970697027d6fc6015b652eea28f3b"], 0x3c}}, 0x20000000)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff0200000000000000003da52ddf0001"], 0xfdef)

12.45403827s ago: executing program 0 (id=3266):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
unshare(0x28000600)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getitimer(0x0, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random}, 0x14)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x5, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)

9.071976344s ago: executing program 0 (id=3275):
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12018b0130f56920ac05190272f0010203010902120001000010000904550700034902008693363e5064a45f05d74eecd66a8f66423b4691bbb0c960fbc985b31c"], 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, <r3=>0x0}}, {{}, {<r4=>0x80000000, <r5=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000001c0)={{r4, r3, 0x1, [0x0, 0xf7df]}, {r4, r5, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f00000004c0)={r4})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000240)="ad000000000037eb00800000f1cfb65c", 0x10)
mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000)
r7 = syz_pidfd_open(r0, 0x0)
r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1f, 0x4, 0x8, 0x8}, 0x50)
unshare(0x2040400)
r10 = openat$cgroup(r8, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
r11 = openat$cgroup_ro(r10, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r11, 0x0)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x54, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'gretap0\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x102}, 0x2400c005)
r12 = socket$packet(0x11, 0x3, 0x300)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x7}, 0x4)
setsockopt$packet_fanout_data(r12, 0x107, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
wait4(r0, 0x0, 0x8, 0x0)
ioctl$FS_IOC_GETVERSION(r7, 0xc040ff0b, &(0x7f0000000180))

8.300276284s ago: executing program 4 (id=3281):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x400c005}, 0x4008010)
r3 = syz_usb_connect(0x5, 0x3d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000092e59e208c106901b9750102030109022b0001000010000904db00020dfa00030915800000e600fc000705db224370bf09050b02"], 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x6c, {0xffc5}}}, 0x0)
syz_usb_control_io$cdc_ncm(r3, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x5c, {0x1a}}}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r1, 0x402000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d526c96ba24289737f0376072a964802447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}})
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
r6 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0)
socket(0x2, 0x2, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108)
r7 = inotify_init1(0x0)
inotify_add_watch(r7, &(0x7f0000000000)='./bus\x00', 0x80000103)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r8 = io_uring_setup(0x406, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0)
fcntl$notify(r6, 0x402, 0x80000018)
execveat(r6, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000100)='\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='&\x00']}, &(0x7f0000000380)={[&(0x7f0000000240)='/dev/nullb0\x00', &(0x7f0000000280)='/dev/kvm\x00', &(0x7f0000000340)='\x00']}, 0x1000)
write$UHID_INPUT(r5, &(0x7f0000002c40)={0x8, {"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", 0x1000}}, 0x1006)

6.560047261s ago: executing program 0 (id=3286):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
unshare(0x28000600)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getitimer(0x0, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random}, 0x14)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x5, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)

6.26978773s ago: executing program 1 (id=3290):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x130, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xe4, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x4200, 0x0)
ioctl$TCFLSH(r3, 0x540b, 0x1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc010000190001000000000001000000fe880000000000000000000000000101ac1414bb000000000000003c7309804c26195d3fde79a46cd2e1eb000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000044010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000ff010000000000000000000000000001000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000435000000000000000000000000000000000000ac141443000000000000000000000000000000003300000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c0000000a00000000000000000000000000000000000000000000000500"/436], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x7d4165c9)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r8, 0x7d4165c9)
listen(r7, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r9, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r10, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0xd)
r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$FUSE_LSEEK(r11, &(0x7f0000000280)={0x18, 0x0, 0x0, {0xfffffffffffff001}}, 0x18)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18)

6.156018953s ago: executing program 4 (id=3291):
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
socket(0x10, 0x6, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0) (async)
socket$inet6(0xa, 0x5, 0x2)
bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x20}, 0x60) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000007000000000000000005000000000000009500000000000000"], 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0) (async)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001300)={0xc, {"a2e3ad214fc752f9502547f70e06d038e7ff7fc6e5539b3471078b089b3b083848090890e0878f0e1ac6e7049b3372959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31360d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8a92fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18834dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b8dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00fd104d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff752613d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443eab40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738dd7b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a23dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c848a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333aed0418c0b44412d041259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b45030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475af3d3060eac38dcaea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f00009e4000/0x4000)=nil, 0x4000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) (async)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
symlinkat(0x0, 0xffffffffffffff9c, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xfffffffd, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)

5.855272514s ago: executing program 1 (id=3293):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000fc0)={0xffff, {{0xa, 0x4e22, 0x8, @mcast1}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff0}}]}, 0x110)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000))
r5 = syz_open_dev$vcsn(&(0x7f0000000f80), 0x8be, 0x400100)
ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000001300))
r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x9)
ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000140)={0x7, 0xfff7, 0x8, 0x3, 0x17, "a9b39ba517c50901"})
write(r6, &(0x7f0000000180)="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", 0xdda)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@delchain={0x2c, 0x65, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x2, 0xd}, {0x2, 0xfff3}, {0xffef, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x260}]}, 0x2c}}, 0x20040054)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={<r7=>0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}, 0xa9c2, 0x90f4, 0x6, 0x6, 0x4}, &(0x7f0000000000)=0x98)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r7, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x1432, 0x7, 0x8, 0x3, 0x80000000, 0xff}, 0x9c)
unshare(0x6a040000)

5.5152895s ago: executing program 3 (id=3295):
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000001)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000201000/0x3000)=nil, 0x3000, 0xb)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x10000)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x80, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "03004010", "0021ffff", ["2683be63f2af9b77e40000b6", "808e88e2e9ffffffffff7fff", "0edd42002000000000c20d00"]})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = io_uring_setup(0x1148, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
epoll_create1(0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041})
syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x853ca16f6c805005}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbf9, {0xb5f1f2ec82c8ade3, 0x0, 0x1, 0x0, 0x8, 0x1000, 0x809, 0x1, 0x0, 0xfffffff6, 0xfffffff5}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x54)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400)={0x6, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48)
r3 = syz_clone(0x80969300, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
setpgid(r3, r3)
timerfd_create(0x7, 0x80000)

5.088093318s ago: executing program 4 (id=3297):
dup(0xffffffffffffffff)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0xa7})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
socket$netlink(0x10, 0x3, 0xc)
mkdir(0x0, 0x0)

5.073553398s ago: executing program 2 (id=3298):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000200), 0x4)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x2, 0x71, 0x1}, {0x3, 0x9, 0x4, 0x7}]})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x24, 0x0, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x24}}, 0x40000)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x4001, 0x3, 0x398, 0x128, 0x0, 0x148, 0x128, 0x148, 0x300, 0x240, 0x240, 0x300, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x9e4b, 0x8000, 0x0, 0x0, 0xed, 0x7}, {0x4}}}, @common=@unspec=@connmark={{0x30}, {0xfffffffc, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x3, 0x8, 0x1}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'veth0_virt_wifi\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x14)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

4.994989202s ago: executing program 1 (id=3299):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffd, 0x1, {0x2, 0x18, 0x0, 0xc8, r3}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e23, 0xfac, 0x0, @opaque="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"}}}, 0xfce)

4.968227315s ago: executing program 3 (id=3300):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r3, 0x7ff)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)="7c220752098d1a03003fb4d50b17b9653538f559d8ca1a63df81a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c066f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18efb72fe8c4a89c41957338c2f6ad05fd3", 0x97}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x0)
recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x20000002)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0)

4.304488654s ago: executing program 1 (id=3301):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x400c005}, 0x4008010)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}})
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
write$UHID_INPUT(r5, &(0x7f0000002c40)={0x8, {"ec1db92bf22807790ab6b900247637041ac87cf1daa36dd2e6f86721d64e5860e567a74d26dd52a0785645fdd88a54ca23e7f25e15dcd50b0ce40aaeb80710ebdeb04bfeafa38ec38b6fc347aa868bd257167d1af45c9898747cccfedef0b0507d7ea90fcb09bc7f06ea8871cb553311452d008659e7e6ce89f910d5bca77f00879d91097f0d9b008657fd04d7e7a4e806fc6f97841acd61c1d63ca5cf25b5e16b24acb9db0df8ed1fc6647a11fbcc5f4d91e97778fb098c37ae527e3fd1fd28fd70b38056c50bd739828c19edba4fbee98cb31dcb50b84c041527dde1cfaf3c74837aa0db503a2601126b8f16e7492e6a0eafd63d4778cacfd6c0bf0be653e92de409808891cdda7648e474c59b4d8baec172c048fce82afe0e036510b98c1575dba69e933df776ca6d4cf95d8a27ba69975a2b1590b4bb8580be406f232c30d0d52e0dc7ed285a6a91980ce5e4f47bb77416e9b09460406ca5f4d835aa11275b60a1ee015b27a7ee34f89115da27b443b752858dbc49366aaccbd895dbd3da9223082a7bee284783bc9b1516fb250627f11a069fe027cf835033db5817c060f31465f419a55f46b3a71270e27bbce60409f2346664d47dd38d0dd5d4e57f04a4af957f131381c3dae1af4aae627e3121678029825e1d31afa8cc19785d19b2c76ef1ae4607c2978532d1bad42dff665adbe0a2fb4513f8f1c9333704ee87de180eb1a173a4af116a7461ac06779657429200824a21ace68a5a59bdb114d38ae1c8359b16584780c430fdf4b75ee5734289f0057a65b41f3390f34adbc10e5227fe8f77798f594b4711c30b304fd1bacced1a04df2f93955fe58c9b42d25fe199709f0811b70e6af725a6184f6dae2befd8517b916f2d0da05656cee06e3b0d1beb047862df5dc18cafaaa463eaa6f7c284821e0750fa342b8d6b541c27e703b772f0caaa2ea3b23e4698dd61e4ea1776712f5950b13ed4c280a5f16192cc3965ae18be3e23e4db675cffd92a08f6c431a435ee66f9e20abdebb76cf12d6205ceb271ff371d5ea389acada4011c451fae370676c91469846dc2d8a1e08a0e6a8b0694bcb0f43332bf56444533d04ed56f0186299d7c31e7bfbcf3a17d03a094c8f613574856f9e5681774467800d2bc1695e501ebcfa44c95eb0ddec4669a5af6bd2acb56b58cb6319e1f0a3224f07960d7d4cdbff259292107d0cff28439ff9fd66ea296ad090add445a51378f5e0ea20b30e804f9e20c79fb8bb6d2dc8224079676e5b989e5f87aec4fb3590828a5a575171a08179be2414aef1ac88f1a76cdf092490b30aa64c6c49a503811a39e77cd5ba05f0a6e0f58331fcd87730c4578185f31b477592c08ba12bbcc894710f1b734a57a87594e87323495b5fee289e739cfb0dd8e4065c75800cd68163489f7e9b910e05eede2f4bc8706bcc17c3833132b1f1c295a1d2c8032bb1d9c7013737e3afa20857106c0cd2c192bb2d4f2840580993d1f400cc86f07a103fc35c1fb481f95b56588a88e3531eca391b39a2b08432c09ae662a7f67a5e20bc3cdf535d760251169ae7e7f65d623f9ba030887127948716f03c39e83b3d64789dc7c91a059b8c44293936536020b650b1a3fd6d8a747404c79a63c76ef4215b84fc5aef79cf14a6da818886e372a75675a50a334ed91a96263e2f305562069994ae764e7f572799ec50a4a5260dc2398f23c0e17d66c586d756635ff4c6e3a369efc1dc993f1a0e285f9825e88f32a089762fcf5309785d749e5fd32d6987f5cf6a40e6957d701d7c36cf332ad1df44f1aebfce8b4633f83112b288c9ae9eaa6d9f3aa626d7cd15afd1c9dd271944ee9d6d5c28c3c791e0460d863c0a6572122770697b9f4e693202afdf77fdbf9cf660203746c4856b3140911543bda3209e8b161d1317e0d407232d4ec5808866c1a2e58fbca931119449b6dd5c4aa09f4478f72090e3c16c5a256c380912531dae71da472a4f7a10fbe28fcabd97d7b0c37c731d4bcda9217e5980e914a55b3a9af134682d8c2f2a6d723dab7a779694f65e0bb277802ac83038c85eac4d549a4a299e9bed28a8b1f82a9a34fa5a3986c82a695483fffdb663a79ef61c0b61e4bbd5ba59294ae4d7b86db00e5d111e2fb53ad3cd8130f39ae20b98b30ec4c9e279ad3c395a1b36207ab3c8a318d83e52e97ed92b95888136eae936a5f485a225cf6ec510b0a9422f32a8605d7b08e3d1d95fac78df632b6007752e80b97555c5604ab5e40666ad175d485f156f84d431003f0faed2d7d28b4a0f6fdcedc4196f48621e475fd519b369a905e551f132522dc2da2d636c4b3968b4b5c3a01ddd5bcc83913788aa77a3605ae1f328833282e0fa819ec913aad079766b631dcc6200cbfd2f33918e8e3407d0f1876372c617776a4491de3fdd35b5455a33f8ecb7223526d68cda1c1731b87c62a089e9a1cd2801e2b89178b4fcdb2160eda51b109a386c17d6def864027e0e0b6655102cbd69a83099c2e85f9ba239e636e1cfc864a56a35171c5a5b99b1203ad91860cb638728237ab8a132c01cdb686dd916aa77e20d4fbaa8fc5e180e414c869abb79559faf3091b9ffb34047823096460a3b846b5f8f6bdbd8db78d495c501be230d5b84ca9bac8983e6ba939407924031542922aefece2a191bdabc6cc1f8a68c52c3dcd79cc47e27922f533b72d31c7b3610ff9b2ef2e12afe3b8f663ae1ce158fef733cfd0cd6c713b9a6002a69f0d81038f30131c8634e8eec210a9bbf20b0ecf09be21a325b82528567352fc707ebd987ba5cfa013b1f41718f7c22a68e997bfbab3c577770ab78616724a47bc2dd07504f02491d081b99a0df6aec1e757cdbd416bb7963948819d25bfef7201bb04ab7ae9e106e15f212cd0defe560ae8864bec2b12cbc9737228bc2797ed7166cfb159d25c400a361532afab71052c8129d62925b51c3ba96a2b1bfad376881fc90253b4a0859ec9ec76badf7809db76429f0bf3f1d00acdf63cd847d48c3d678158708b103e5b7cfa4517e5c37107a8e943da80bda8456bb5006b3f302b67e48a2123291e85d6db046d4c7c398eddbf05d1f70ac03fe660c9b05a0bdf6f46723daf03a3920f37383de60f2052599eec5191067f2a014a045c9d8eb80e779733a202562ba297a076535cc3e6d2a81b83a4e075a947a6d7d8648aa26353fd2c45bf5487f3c73d011f84ee8bc5917dd0ef56fe84ad0911230a2fc03274ace09eae78d97c135ef1af212bc21b35d765aa2d1c7b221f33fee9df337c8126823de4d55aaa9e5994e06c8ae78eaf8352a08c0c83a23277fde6589686e3e5c6b94b57dd8acd5ceba2230bc2ea910cfcb139c78beaa09dd6be3db423c3a79a5943e725d7fd8cf6af446395af86914fdbf465134a1ebacaf2c3bcc96ea9fc13ce6ca00371506864ae7c67380a4c36e47f0799d61e79e31c16333925d21009e570859eee81774b86ef017dfc741856fab65bfa517647f6fcac5d5ba775a3e61f4f99775cb42ee3bcf66c0da3dbc108635bd799df5d5fdfd0cff7ea7a1a98498f7a13036fcfe5b4d9279976b986bb1d81061270de8544b78857c494a9725a1e4e8e6b308a51f3e52e98ca8f450bf8f1d1db309fecad7d81989eb683aad54a81356e3248e368c69821f2c046afdef74b744351ea277c95145d63d00bea2411fd00facb0ecd5c8187925608cd67113094da9387a1a2249acb381482dc6b8d5f1051fb6fb2f4cb37658a7edc9f9cd550948699b04ecfab23e9b7087b0ed708d843b9e6c965cce2fb778c2733cef3dfa058a784d398212d477a8d1acab711a3366830b7f690b9a021cc98bc9bd1031248cbe95e7960143120833e78bf0c4af2b1f09dcf439962d3ceb7820ceab8d7a2bbbbcce3c1a01f46f80864799eb27958db2c4893863f7d6a7e8308ef55cdc67e87e5c6c809f1c275a1ddbe9a677fd682371528607658e21c34475b1a66fccce759693ea1e70a1ddbe3fa6559991494a2a987aae052c7d28fb0d3ad3a3557f9fe310e6707164ecb88483b416998971e146999afc7407d2fe7d01c0824a1d22a6e139cc392779bfe245a05349b682cd897d26308877426501bfe17de960631fe974f7b46296019e011475985bd7dc67fd052d1bb08d794242a55c1434be8e899be9688c60c86557250852def8a0d8b6479c3851e61cf2b75acfaa465303ed679fb354264e2f1bd1ba441bea356fa50f5c7bae3242c469f3812bd163283dc55bcd18400cb923456e3808d99a946c9b426809fce893884c41170ae5cb7e0e1d7bcc58ec0ac4f2d5d5ef74e9b993c297b9fd7886d554c66f8723ac128ccc01763f4efd831cc845ac8cf2a1230f3b8760d7170ce79b9d71844be4cbfa0f0d2673cf055ab0de281793224326e80a3a425af719247c0897b0a861eb13c2262dbdf521ed932eaa0c2381f03749f5874cdb94b45848c612b2ec201edf10a899dfe2bad37d188a43e382660d3cd9c96b5941ab006481884ea78714481a6a9694c45032da4761cc6150cf2fe11b93fb3251457d20daabc9682921a54b1f3d71784f857759d950d9d19a60372500f7732b9e80caa64d90b863dd394e5895209cb3d7ff69725455b407dd47b164a5bfb751fad91b35e94143ee694f80139dff71ac0dd14bc93c7d947535dd0a6f258ea3c778297f27af32dbe78a2e0e6fe7fc3e758350d2d8de8a272cbcfad7b2993bdffa18ccc6256a5df76000f1dbc9b9de1953dde714eb02d2c9a5c7b78388bb754241a8f84e094cb81f3a069c1f79da3b5776ff972ec2ef9780e89926dcdfcbf8efbbcc95bb6d455ee5b4b161a1a3b37bbfa73dac985329eeeca031339e0ddd0eb6fe33713bf50e15832859100f9ef83a14ad1eaec14af3856808c01c63dcccae1ebd2e5dd21420d10cb8d558a22e6e1d648d7c6e6814020477f28f92d19780bf90cb3ec24300c70f816248dcc538d4e2755c9c01a0b41b45552b09eed74f7d1ac8f89bb4675677717174854699f40a01d3ec107952a71f41cdb4a6dea6a51be0de6a4ce687935564df8a822894652ecfd506cb55911eeaf3692a1695ffb8b3f3e663d528502f447ccc69f126ee58de7aaef827de28833daa5aa083566013d29378bdb069298ce4ffbb5d3e04089a83a130c04fb6640a6228b2e43cec61feeec3f4fb3987411c3b666ce5af08be007bde85bbcd42d4fa5ad86badfa6deea444e68afb3eae83bf60117a8a21b58f72c9d70db414a730315fbee3ab4ffc4252b5e0445eef6995ea6f7f9dffb9688e4ef09ec44c7b137fbfb74f8b08dc5758e96853a4a1590122b06cd8272aeebfb1b0b8395960bdf9a5b019515374f4beea0212ae5dceae37121545a393fca22e26e1ba13af8d58de8eaec833d2c243b527a588054435218daa3d42e8a9e6d65c19b5d29d692defc43060f43f3669eac95d956ca1eb638795fbdeaf9367466354fe94e940b7ce634e9ab485087499b1a28b941895cc99d1431401d48198c3f0037a0e13443f868f0c22660a8964e13a38732e292768b8e9cede034d3e104d123b5c49fb2d39784c1c501fa6529329d076cb473c5bd89e8883683f5842387cafd637a8826e3a58e25389868229c74231b53e3ae81c28a6ac52b07cf97ef8fa376f662c9e1d6733f60e3c8571f058272696484a47d05a80e22680c51e9cf43c7a8e0b0c55280ae24de1644caf5988586e7cbd9ebf6f278cd1e9feb3c59c89ac94f44dd24c374b6c7d7f72059abdac5419060af38fc8d0cdeb2ae2af8fc4fcb82ae5e395c2ec82b0a399a1b", 0x1000}}, 0x1006)

3.908977262s ago: executing program 3 (id=3302):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="0401000016000100000000000000000000000000000000000000000000000000fc020000e03a242cd2dae4793e00bbd71f0a000000000000004e200000000000000000000000000000e23a3bc3c640a670543b57f84cfaa0a06f43f3c45fccc0e67a0040a5bc2efedbf2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa00000000330000000000000000000000000000000000000005000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000300000000000000000000000000000000000000030000000000000001020000040000000a000000000000000000000005000000090000000c001c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x104}}, 0x4000080)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0xfff2}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000200)=0x1)
close(0xffffffffffffffff)
r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x20}}, 0x4000044)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, 0x0)

3.873521229s ago: executing program 2 (id=3303):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0)
r5 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000000))
ptrace$setregset(0x4205, r5, 0x1, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r6, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0d000000ba00000008bb2fe8000000000000000000", @ANYRES32=0x0, @ANYRES32=<r8=>0x0, @ANYBLOB='\x00'/24], 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b700000000000000950000000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000043090100000000009500000000000000b7020000000000007baaf8ff00002000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYBLOB="18080000000000000000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES16=r8, @ANYBLOB="f33b8dbb659e1977ffbc0f1fa6a70135266945755337a5a4355aa13e70a9b9dd459029e1eeda4b6a6265c3a7241a5544db6a21309075e1437d8621da938a008e610b34fa0092baafa5125236895fa82556107dff8b0202693c4dd15340710bb0b35b4b9fbbfc491d071c337f72f947b50c9cb8f40ce4260d79ba4b8c496cc3cfd7513fbf89bd8d720edaf52ec0033a69072785029dc76119313077352185a9faaf8789b144b56cafab5307cfc49a3ebbefbcfd53"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x40e2094757c92727}, 0x94)
syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[{}, {}, {}], 0x0, 0x0, 0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24004004)

3.402605772s ago: executing program 0 (id=3304):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x9}, 0x2})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x87da4854b9abaabb, &(0x7f00000000c0)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)
sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x20000880)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
set_mempolicy(0xc005, 0x0, 0x5)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x20001, 0x3})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000a00)=""/202, 0xca}], 0x2)
io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d})
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x3})
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010140)=ANY=[@ANYBLOB="2000000076000700000000000000000003000000000000000800010004"], 0x20}}, 0x0)
r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92)

2.972342121s ago: executing program 4 (id=3305):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc1})
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f)
r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x10002, 0x9, 0x0, 0xdde8})
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x2080483)
pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9)

2.968434421s ago: executing program 2 (id=3306):
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x1404, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8084}, 0x40088c1)
r1 = socket(0x11, 0x5, 0xfffff000)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x80c02)
syz_usb_disconnect(r2)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0)

2.705523788s ago: executing program 1 (id=3307):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000006b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000e148b6929bd7000fbdbdf250800030009000000080005"], 0x48}, 0x1, 0x0, 0x0, 0xc080}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140), 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

2.309503574s ago: executing program 4 (id=3308):
syz_open_dev$vim2m(&(0x7f0000000080), 0x101, 0x2)
r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0xffffffff, 0x0, 0x0, 0x0)

2.309103788s ago: executing program 1 (id=3309):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0)
r2 = syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
modify_ldt$write(0x1, &(0x7f0000004180)={0x8, 0x20000000}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]})
syz_open_procfs$pagemap(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
futex(&(0x7f0000002200)=0x2, 0x5, 0x0, 0x0, &(0x7f0000002240)=0x3, 0xab02000d)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080000000", @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000f63c31e5fdf8c000000000000400000000000000000000000000000000000000000000000200000000000000080000000080000000000000000000000000000000000000040000000000"], 0xb8}}, 0x40)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x0)
mknodat$null(r2, &(0x7f0000000240)='./file0\x00', 0xc000, 0x103)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x94f031, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}}, 0x0)
close(r3)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002100)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlinkprop={0x44, 0x6c, 0xe40c30bb29912201, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8d0}, [@IFLA_MAP={0x24, 0xe, {0xa, 0xa, 0x5, 0x2, 0x7, 0x83}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)

2.247570686s ago: executing program 0 (id=3310):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x10, 0x10b}, {0x18, 0x110, 0xc, ')'}], 0x28}, 0x0)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$sndseq(r3, &(0x7f00000002c0)=[{0x3, 0x4, 0x6, 0x1, @tick=0x7, {0xf0, 0x9}, {0x7, 0x7}, @control={0x8, 0x9, 0x1}}, {0x5, 0x3, 0x76, 0x6, @time={0xfffffffd, 0x24a}, {0x5, 0x8}, {0xc0, 0x1}, @note={0x3, 0x6, 0x1, 0x3}}, {0x6, 0x3, 0x8, 0x7, @tick=0x2ff, {0x4, 0x7e}, {0x5, 0x7}, @result={0xfffffff8, 0x4}}, {0x10, 0x3, 0xa, 0xf, @time={0x2c4, 0x2}, {0x6, 0x6}, {0x5, 0x1}, @connect={{0x5, 0xfe}, {0x7}}}, {0x9, 0x6, 0x0, 0xc, @tick=0x8, {0x5, 0x5}, {0x4, 0x9}, @control={0x76, 0x5f, 0x2}}, {0x5, 0x7, 0x0, 0xf, @time={0x7, 0x7df89610}, {0x88, 0x80}, {0x2, 0xff}, @time=@tick=0x7}, {0x1, 0x4, 0x2, 0x4, @tick=0x728, {0x3}, {0x6, 0xf2}, @time=@time={0xbd6, 0x8}}, {0x10, 0x0, 0x0, 0x3, @time={0x0, 0x6d6}, {0x1, 0x4}, {0xf9, 0xf}, @result={0x8001, 0x5}}, {0xe, 0x10, 0x1, 0x9, @tick=0x7, {0xf, 0x7f}, {0x2}, @result={0x10001, 0x3}}], 0xfc)
write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000002100)=[{&(0x7f0000002080)='T0', 0x2}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3af", 0xb7)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x2f)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a000020000280"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000240)={0x5, 0x0, [{0x2, 0x0, 0x0, 0x8}, {0x0, 0x6, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x1008, 0x5, 0x110, 0x3}, {0x80000000, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0xffffffff}]})
unshare(0x40000000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000045c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

1.393069444s ago: executing program 3 (id=3311):
r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0)
mq_timedsend(r0, &(0x7f0000000600)="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", 0xbdd, 0x6, 0x0)

1.24031308s ago: executing program 4 (id=3312):
syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000002180)={0x115c, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb74}]}]}, @TIPC_NLA_NODE={0x1018, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "68e5fb2310e46acda12456dbb689599902f2e9ab4b30fa2d2115b6857e2183532c659b43baa590a3be0f13f476778ac8b69d5308f025ae44895a711fa734a9469d234e2d3594dcc81c3a13204a30b45e8c5345467d7f029d0003edcc75ac6a9c105c8ad52ccdf492d7552b4cd4b1f194ed17a3da77b7688cff5ff35642526741d4254685fcab515ad608082b344b50fc67e459c98eb7871f3cc1fecc9cbcd85f8f2c93e2a23ede66b52e0aa2c7798d7e2d262981e10c91e2878ca79204d6d9043500a285e9b00f47295d145e5f94c161c1e144d53a78fea01e585179d0f73e8a3a96339bd896ef9e104711bc547102e95b1c091c8bae1dcec21122c9e84ae632e9f4e7dc5d0c5e67d272593728f71320b0b2bac6257b73487fb6ad5bcd4461b734ec9be69132b9cc097652f882849264a4b31d64cc933dab26af77b97c36e17cfa064342894222c0aee74e017377bae36a4dfd18387196060525454b5626dd4297718f44aa225b9964c16df9ef939ed3d2e45e02b205b77cd772e524cf797b1cda304165e19604d907dbd85cc5e94171013183650f8bc2ad2ec0c531c33f6bedbe84c3769a74f64fc37bf9de6e6815271c264afd94eaea75c21a2b127dde8967a03f670ad4183255a04c2ebb1331246a177f2fed78fc5ad1a11137feedef0439eb9f52c4a0770f08db368c5293aa4bc0c49154b3bef54ef0fc7739f23f8d65e084cb50bdaa5ae915f4854ab605ab40751927feccb34939fef626bb64d1edd1384ec27215035554c78d778ddb9ab7df2a9392655d889e987348d47f72214aa6e7dc9295a1f140431fc94acd662bde712e5de97bd3be8bf9579acb3ed18353e423c966700efca33f372a5b01fbd5b0c0df34811cda75a44f7dae1a46eb1b72e6cb396d2719a743a8768beb665b9c5a4132b92d38318a8fdb8d3479fa7f916f30df944f5fb8faec54dee741e11061789ef84004ca40f69d12f653b1486e8ad8042684a7fb77ca887cc2caed6600c46e72777e4419dec23ca431b594a3710e7b72f88f5d042b98c95631d9aa3c6b493deb6c1d4468e07c27964cc9d903280e6c0adaed5773f6f19c5c031e0719016ccd0b9306ad4d31c93b3c70a19c174f8ddfaf7576bbade87dc291635c0a851af9924e931a9398ac8d01f67220def15ed3d9421ac1c72d3ef4773ca8ba5a91d3e424340204e5ae20500f0e0530eb13b5b111115b2345c5d8df1df2cbcaf30267c9977495d5832c968970ecbfeed8b6ce403767f5ccd067ae0d2f7159f30112c970add78b7e56d2f3ade5efce2503a4e3927ed63c38fd6fc273ad4f8975837a6ef74b539a2d9268982a90f259042d8d37373fba356ad0487562513776b7c0aa370229abd70ae3a9ae7c82055434b01236793f8a4da7c0a9fb74c616ab0d8df0695b4fec732a12c314b75b7784f19fdb00abb52aaaf1e0bb035472775ac8c2b7719024942700385508e1dc121e1e4a1997dff534acd26db8214afb91ddbdd0582b80b149c7f4a5a925e5d79332759309720afdcc39336c5839239d09d1a9ac3185081e9907ac167aec334267391ff44cd0604a04b8cd54a3597a3925038a7aa11861f1872a8222117921181ce9f28557d4549bcfc35847982fecde3879377bb451861f61fa87322eef4ca6a2ba2e727433131695b31d13f8c434f004b819f26acfc204ad3425b4d02e4d6d04ea54b355fdc2db6f1c009ea1653b69c81db5062962e7f71fefb786abbd1ab2cee590fdacc6aae8f5e44432fd51f125f991409b0bae90bb71447ae0f1348a50534a25070d82d88b2e81c389cbbd000c3a5fc6d2af3d7949ad6baebc21b1a16768cb0b10314249954a19cefcaf20915e9edc0c854add05526cb3f0ec4b7a5dee2d4672604166a7f2aad924f9d041ef3b086ddcb1ff53b0f56ae97e9c4cd461baead2abadd540f113f8875f200d6b898f46854039f6b89e6cdd0a661b866c95b7aac69fa2c92ef71167fde62f0b8f3bb37c78f477a05067a32ee956f0f32631e250585828d9872ac83a23c2b5702267894e5d14bf45585747189998cc3448d342f535a42ca81be1d35fd179eb8cb04c4039cfdd571b1e95377144a02d342ad52729b6f66cd569994eecebc01e35b9ec8b0bc1e7a2c61c748273733b1626aa37e0f41e94e57e9e2d67f7aa42eaa265e1dad9c9ce9f7604ce2c265b142b21f54ef3653e8c5309e77c337f183cf7318403d8dd1f8cb647336bf56c55fc77aa2ca396b2d38c1fbbc41d909f14739ae7c040749a3ad363ca9db59465d4ece70d889d66bffa0db8b2aa08dba05bca399fa146d814b295621f6664863af9bfb428ee479bae65cf5ad0d5aed218af771e3cd06826956897f8ce49e041d85ca28f55f066cfe5f10cfeeaab4e33dd6255ae2917c43ab3fa0589ade2a5c4cfe6393ca1a465cec36e516190a6a25b00e6ee3b25af82f8457faf4644090d69fee1f38b64aec868292b55352b6fb964fac98c395d20080da16032aabd5c89fb49731eee0e825f8f4539345bd6da330935918733db5a9a3b990d11ffb541a2da9b1c5e1218efd3e6c42e7d239d38e03d4827f9b5905d5f16111b45b6b5f1de9b23369ee8b54b36d1be6d1d387cf21c60dab187f9c99c529c28f36e98ce4c7f8fd519f465ce721094bfbf42e0e5a228e415295db7a50e94d7c685ccbdf52bf3b6474f17ebeb4008afa420c2c7a569fbaf9f09f56ed5ba4ce678bbea1938d6281a85099cc3999abf966c07c9d95e753c8a1afc5573d1442c6f3dc2a30b519ba1b91c5bfea2838bd2af0d5ea8dac99ff69e4b2f0646a82a34ac5403a8471a2e137f66660175a8ba672cbfe42279753c1a7566e511ff1a9f6144e11ea3f5869213e84e51ba805f8e025966f9890b31e824c31e0b288f10750caeec5af97ab42e214ba3ce5dbc7caf9c90703d39b91b971502ab1508ebc364300cb5a285984132705181e9542ddf658588cd07871a1f4e3fca87e355d4a1a2d74293a510e454f17490d415c8ada3007c46babdd9ed37fbb3773a170396cbaf4cea5e8d5eb9e5b3cf4f3f29547facf302fa1652d8d6a4725f72ce8446496fee19e6cf30d60afa115f68049b819f9b7851ffb904daa6de5567c72ef9a38383da0e59d1406a93761409a25e06e463fc6eabec694a7b55b559774114e7959d44ca63e761a3c1c7402e2630970ae32e34f0c5e311245e791dc8012c2fdd853e4611e0fc9556ddf0c2557ef2d1097466f0816f4736ed1c8ea1d5c5f04aa300e49724c9b6546b8237eed7acf4a95848ca337644cf1d3ebb8a2156892132910a826bfea8e11020847ec3280013e49fa06c9a8bcd59370ad8b008fb966b1b0e22b24ee87326e9ffb14576a84a883ea5d2635600311d7cc701e6be87faaa215c49a3073e3c1654ccbc8e2fdad54e94992a1c869e961118dbb0fbf2c6f0177639dee4dd0c0913165b098ec7820d82a96d6cfb95a6bfd754ec6853fd1772391a8b954a3bed1579f2289da8f25de53ce1235f72f5946ecd1813214f369ff81fcbbcbe89729146727136077080a910be902cd380de4c790807246a67303cddc53a8c79b8e981d63e9efb3e964f45e38735cba01ed805a84d035e303b65ffdf98ef277c46ab1cf1ac09d9f86d29428ee24b4846836f6ad3d615fc464cd6e475f723af9ff0f4682298d3c585d6b934d6ef883307b33dd22b67c63299f9bbde9e67f9f59ebb0cfbd0ae78db005f421be3e4bcd58e81415041da1f720be32d9b6c68946735e3d962af1e777641b514e0d39e787e19c552a4cfad548e85d72544dc80639c84ed81b6aa4bb49d73f22e62187201cb67be4a6295d71b9d7628dc074d9566fe410d9e6ce9527c64d0bd4472a7464fe239394ab834d036cb16d4a3a5d51f54e5b92b22427fcc5a77cd060205ee38491f3b6b7c748b5cc54a0dabe2df1cdf43d776436ff8334838dd2f657890a5e261bb2c14313a808f4279a11cecb70d1180d94f24f8e75e798d6df1a64f6fa13e9fd48a79b557085af6852eaec7a183a3c9e1e68a4dd351357ad6c3877bfd150d0207ded4e0ba4b33bc313ea39eba6006cd0d724dc41ecfc0bea3225c4e39d16f706d5c8f3d7b43079b9569a134070b2e88bcb926a60a079545a2a9f9bada9015c1dc3169591e31cc5c3300620c9e020530820185c3fb86e0cdd80d49002558c12004091e794e10e2568c4d7cedc4cd3380237db5a6be887ed6cde3edd127908b3b3962980ed08a651a7e4b8f453f1cc8a39886417887ce889cf35a45af79f469b87e0140c9b85397a80b73bfcdf31d6472280419778688a2b8ced9d52df062c54cafd30be92fcf8734a1302c7ceac9bf6ef605680246b372b8e022947ad1f4ee35e04b45b967b4778daebc2845488e6cfa5d5dfc0afbc97a91fdf5af57d75f14cf9d61c5d7c6db5859e43ef4c359c24f9a7bc0c755b6f8ea2ffbc88ee9824196d26d2b4b526c6cd21eefdf885b2ed2c196edb408ab2e274de0940293e3c3ea5776ce40289079e11c928cee80dd30d2b4c560cd25d17bb60592e209b997e38e8a3937353f57ee624d1267d1c8279e8c51b7bfc0151a4afd89bd56eb9097d1a98a090ea4bf06e898a8f0e2b110883d9024f2701c3cfabeee01db5b33606f18dd9447bc5dd9e54834231721cb7f898bfa58063d6c83f7740307351bfda121e5651e2fd9e64e7b0c5ea3402ef6b6dc7a85c9c48ebd7178d2824cec055e759e233118a1a73050203616ea3eceb5c6394ff148d3ef0b6d8738340fee5ab5bf2d3481d88c36c9da7196578ec59ea9d88f73b7a3eb46e0d1bd0a0f13368949b685693b240ac690f101d5463b64d017b445f694c26f21922432b0e6f93f10952ff7fc6d729521666960b4881dd20f42ca346766b3385d588efbe1ae5bf356136a7df23dd4bba334ade01dae7336d185a873f7e95c97ab84fa5d26ae21f035c31f02f90efdbf134efd905d51991e26f72098a3ff3247c2354bc90d7edd4a99db6cea1953510123d9755a2c8a4a34dcbe3fff711d0d17484120d46b2801fb246bcba5e14c1a5c0f5ce5d1085759948298eb65ef19e641ad8f8d0c048a3571231bc8dd6d06c1022626cc4102389cca3894a3b4bbecd4b128e8a8d7efbfb2dd9813643f2db9aac7d52fd526dbd0dc1a611983b24b98f300904f4061f938105c9e73d7c9f2390352bf51c9008c9144b567b5c5a04e28a91b0f2e9238b548fe1c8664918639e4c9a2bb664c8be72873a8fc38db78866967d0f31e70642a2f1a1bc8be99a2947b36509a222f54d63a083f314bd7c33f41d7507c6b8a64d908dd6fff5f6e2ab58ebbcac2f6d667c9f9cd10d0be1f4ed4baa5ea731cfa2bb8ab312d21badbe482fa760087ebc5c4ab29106a3919b89cbdcd19b2ce49abf011311c2c3e9655228efb57454d87990f36b83b68ccec936a323204d91d247730cf9115b080132fbc0f7922f5e66d9575a4ac7b172234a4066d92f8311f63218a2f0414f8fd9903bb925033910e01cef00b12d6d4a8189cf03986bfe8335827492ae205f818023b691869c8cde6dfcb4dbf9d783e535450524fbbfd920f31ca9c82d97e4913dc54e9d167ca514b5f4fc84e9f87ccd14d9ee07882b8b8ae29ee84bff716cd5ebc660ff95ef59e99cd8f07bcb9f4b8c4a04d0d5937677c316be03a64ea709189e7d040ff644b9ee06e6d60ab146cae86b4a564be77fedd5ce729874dc338dea6ffb61cbb474fc651dc7daeb3d67d4070ebee424a3633d35916e7a773071c667da397abda9189bde77c29c89f8568edb2e60a4d0cea9203c9"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32d5b717}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbf9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}]}, 0x115c}, 0x1, 0x0, 0x0, 0x400c015}, 0x2004e054)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4c08fd2e", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="25003300b03c0d0008021100000108021100000050505050505008000010000013001001c1000000080026006c090000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000800)
r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x20, 0x23, 0xcf, {0xcf, 0x21, "fa4112ca1524d7ca99f6209251660e4934aa3fc12fb2bed98a1e0a17846c29b5fb46aa897477f0e8f3d7c0afe23a9a4f4368e1e824e0a626108a1d08ea0b5503b4f04848548d16b1dcad2865b0006fd237d61811065ba8d6e40665f41e529c16e06811e4b6d6610246530450c492ceaa48cfa8d45029b9b2bbb5f54a45becd79697769f63e2e3d9e9674acdce83c6a5df8d539e86960409f98fb0405c63a9f0d1df71fe3d8f75d2ddd030dcbfe2ae9438cab7c4f8c787ce9763f58d32082d7e2d14007c308ddf47e55c1461098"}}, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b80)={0x1c, &(0x7f0000000ac0)={0x40, 0xd, 0x22, "1d11313281845526aa409a829f459e537a62d13b75416888bd185f5db9b621c0343b"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x2}})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$rtl8150(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})

1.100180409s ago: executing program 2 (id=3313):
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r3, 0x7ff)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)="7c220752098d1a03003fb4d50b17b9653538f559d8ca1a63df81a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c066f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18efb72fe8c4a89c41957338c2f6ad05fd3", 0x97}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x0)
recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x20000002)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0)

1.098653662s ago: executing program 3 (id=3314):
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={0x0, 0xa001}, 0x8) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async, rerun: 32)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x200, 0x2200) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x1401, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x10}}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async, rerun: 64)
r6 = socket(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0) (async, rerun: 32)
r7 = socket(0x1, 0x803, 0x0) (rerun: 32)
unshare(0x200) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) (async)
r9 = fsmount(r0, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58)
io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x1000, 0x2, 0x26a, 0x0, r9})
socket$nl_netfilter(0x10, 0x3, 0xc)
lsm_set_self_attr(0x67, &(0x7f0000000180)={0x64, 0x421, 0x1001, 0xfe1, "515879515f233d2f98b973d6fdb51b0984445aa4bc3ee02780ea5aa4b15faac80087d242d394672324abd21bef3bc27cda9c54c4fd7f12cfc4989d08afce5fbcd483602edff4eb46e2842a91594f78e7700c1afef1de8d1cc2acac42e7a6c293fa492c6f0bb2385d5ebd47e1adb444008ad5edce56a890b55def67cd3a10d76669f1d6a7ee6972aaaa032bb1a6933ea9d3c3f04a3787b4297a8f3f030b6a5766a810144e2ee8051137bcbe5d8826ef9ef82f857062eb3838ccc17d0a5ae2be0f92b5379eb5281f1c61ee1b57aee17eebe67a78f4709fece8b0065549ff2b0378e8aa28df3d18f40ed00c11117922221554e3ffcbee750f878466ae847528b40b4cbb43273aa3479df41c16e6f7a7a699f2edef096079f1b105f3b8311a06d778e3b1edb2ed5086cc6f5e483e12c1536b1809f9d54bb491dca9fcb374e8c2d1041d3d58269ac20137e2b8ac1676185401c3c2ed2bb6e00598e9ea8cf521f784f514effc54df1a05162ff88141c821ed150c3ff150c74c643c489b5ed85461d8f1eb061e420c444ff62a28471026eeff7335c1607b00d83ea750f69c445badc0b5e5d7dedfdd104c132b1b4020c529c24da082ecc4822b283fd41759075b4fe558d7513cfbef5ea182a8870afa75f81a23cc92d92680f645624c46bbbf9a13f36b6f83c7ed804976314007f4d09cb8ef07e905578b1a111f853bc9ee99502d88cd57bc262fad2ad8cbcb63ddc9a0948134c2c7cc4945f17efd45f250422ffca69530098e6b59f808ea4ad85c7418ab0111fee00cf66129026c35f6d578cf33319c95b33a3c4b3f489516d4fcc75c7dee684fdce985fe583938f29216ad0392c1a55a3c144c4ff40f9e515dc089ab3d00083a6f94b992c0418601899d33a172eaed9cdf81c4e42e6f89e81ab64d1317deb38e40cb1bc11f13148ec831f7df86abd3f796f04070ec1e212c7b87f693d49531c100d6cfbe6b2c0fbfd85d27c787bdbd97ccf1f777bb8887fc1cf807bc9f50702dc52092a48013fe720f55450a4d5e8415a23ac890f2a1ef6577f76253d8bcc62f60cdfe743572f1c07f0a003bf31e9718fd5386741f235641fa2776c03fcb80fcdc2c881be662a48c486e38ab5ea314eaf9668171640ee0ec604aff24aee78d10a8fdfe0a45e0b8f09f225ba01b24e9bc27c04a0f5537d27846074f9af249857f947f29b25bc7cdfcc45972f011883b239203232945f62e5408790d54a92cb3934a4574c640a51591098fdb9082b5e4b92721820a198cb1e549c8aff4f4dd03f695b4cd79750b18859b8f9f10e51bfbf0e66766dec356f6cc3bdfa71033876e96e5c1a6207584080bb970a9ee17c9aa21be55b5e9c4825c07401a2549b49cc9fc891cb844dcf7d1225af44d6894913b764b072dd6f3763e27ba207b330ac19445761e3aa0ce9af2e502bb530f148ea29e0d3fab0fc1489e0c019fcf2afe41be1a04c2d5b19c5ef76d9a0282c6a597a3d238d81ce7bc680b2b9743e430c68270a6c320e678b7c75a26a720e413171a5710d7957d47817621c0e56fbf138f220dee13b2db5b2eda739c67e0577c23bfa041a5c42d538a269231da8ef90672454b03efdc4815a8433b20a54ba909fa3e5dbc22b59f6cce2af0eeed7ea7869193b4c4c61e82ab0c85c1a7bac198e3259073b731d2000cc20b22ec8263eb1dfe4d6ad8da6c66bf18fb4889e3e9e23ad1d9e2aaaa32119b2f13d666cc431be6ee200319b678e8752b4a83e6a473bb9734a139a97e4e01e7b365dfecd9a8086446471f7c4267c94cea07050658b1ff01dfdeb82a35b68e27bef0c76d6df94f28a4464fa274dcfe173cd0077669296757e7bbd98b0bfc3a903a235b1366a1be211616c468f3ca7c9cfabbdb1b80dc4e318f4a9713e08bb0d919a72cd21e0973bdcfde4ab7ded60ab2ba7237a0cbe5abb332273b0b429926fa7e851c6dc3dda09748a3bb7d6e2edf13b62eb3db9f133a57aa862f4569714dad2388309b6ba56f58f1874e06b920c0e44d871b8f10491ec2aa7a4fdc85102dd8e2dffe08af0a5c8a2cab1008365a845bd38f08e745f453fda53a71fddbfd95acb546505103f03d8c66846d2cf01ff8524045a5e0f5a7d39d9cd2d92b3b38820101dd30cdaf5468af753798cf5e4bc777f3ccea7b7b78b8ed7f423805e3a8458ca2e0d441e600c233894d749eecdcd704acc7fb81de17e767f14f670ef729c6c29998d848908f721bf4b1b762a8c44016880c46b508b40953b2528d107020a1701338e2953cfc1058f2248f0d311b2b7f740b8c2f8d7219884b727c57f68ae5ccfb597f39409b0fa9f4f14140ce184bc35976f3b66f45a4462eeb76f4568a159b7cc15a4a1f834400d91a2df36550e905747eafd8bb4fb887724898269c3768415b6e4800ffcf5cade5b869638f606c5cb2567b65e807867f49ccedb5cc64ae0e8266c0e3753ffbc542f13d61d924133deff067f69dacfa38cbc3408fe1908bc77c3133925e9c2e653150979f49bde38e86c385eb8e47378e40e9efc9a15e58898316b96ddf6796b73bea1a127249685e88eb69b72ac83a930d6bf81fd0fe770718822dc8c5f9fdd688f5681d87df9ef20d1c7f7dbb4c27a7bd2d5a36b0a9acf47b68f81f5e1018509bd2cecf77396c8b78183f3b473cfeef36ab4fc4c4bf43ea6f3c78fa28dd9abece9b15f134f5a1219c02d0e862a7f2f764cd7c4d3c08a886e6b48a59572e66ba5cf35469bfd327105657dcdb266db4d34a712d0d7e162a02aca150cee12f0c8865bdff76fca6e923b4930f13e5aa828fd521c4acfcb55bebe1cec33e43899ece23054a5be4ab77643d35425ff6af96a64c7236a6d227d236c6208cd29b0c05ebc01acafaafa174d94e97c043db7c5ed8e0802c1db07795c66e85cb35f5ebd2633950f1262426ba2c198bfdff6232643bf2ade7f61007f51da4d93d6ca86755a1187a98e93ec850b84cbd62226f999799a96121a35609e0a0cf3dea2ed124fb9cdf55fcb8827821a0c166e3749817fe9892d3d7b278bdc50e6c4c5a253c096f883cab4a3ba19cc4efb26bbd561110458c0d35a90c1afbb73aba744a6178d5c3e7a81c3025127d1e31922c6a930e6181190cea04c58960433a4939ed18d737c6a7f7d97f5f29aa959e0e39d1de40fbb757fae214f601e273e47d33cc4faef5547780176192c44879b462d4853383e7d0cdba9af9a0e6fa47f426987f61e33ab070c179659cf7bb2c46b575f84822539478335840663118e3d0479698c013382a44914ae3bb7e1cd3481de9eab43c7b6a1c302606bd8ad3353c92d96f733e5df8a72d2f0ec01b2345e50e0ccfda19a2a02065590a7979ca8fcde97f50c0be9dfec9ea40016a613a9867635528797609b23c85ce1f9e16da02a4b67ad3c2db2ecf3a82ace64afce01b4efad50484ee769d7df435cb1a3a19a3dc71df3382500fe6cd82765330ecb9edc4573af206ad9f7c80150252e1cfbf7299998b4cc8a426b11cebdbb97cfef6ecbc5388753454d626fd53469e431e6c9505db8733fabcdbb985f30fd349eba2040fe74d1c2ff7a0ecb845fd649e9a6dcf5f68ed2edd61eaa22dc10e04b8730e0b9e4c0273a6cf970efae1ef87e4b221bed8e80544da782fdbf93532cf3d0d1b3c986356a97d6b96c7ff6556f6e071d908b417e0272e3ddb4a8e217b82ea6902377271d5396623d404451a63d6e0e8ed5a0b069adf6ae71e8d603a2f53ba1beea3de65aac32b3d1d76de49175eb1e1f70106ec2e8a1e64486deb8c77f544c4d0061b30b47936f5406ac1e76aa3f651f2fec0273742acec4317b5f78c1e0ae38bd2f099d402a31be8a98f2fa319a93acd59bc024168c32aa93c5cd612bad559f05f33007cffe4e0a2bf44f0c38d3239c4045808aeadb13ec45e63a99d8240e0e35b477198de450a0168c7bb9c1ced44a3ddbe8432af9404bb8894d57622771bb89e628bd2803c3ee303ae17c5d38e19b74954d7391b4add963f06d4604eb08e48c0cc11b9e485d52f86d6db4929d01f8000b9cc30a65873bf0e4816c7e8bb29ea8d6a899c14ab160da904281b1c69e5b0f75d0bf1371ca1d345c5be80ffcd9b14340f81fee301be7b96c1b97b9584d2ffbeea75fd6bd764676208282dd3dcceb43f1eefd7e2c79acf659d1292347f17fa0d99f59f27b793eee897f0f52abe1996d80ccdf6125b4f8d647d0e020697d47358bc70e994c0401ab194d0300d7be4d235bc112bbadecddce5c22af5b0d1af5b9415add33fdb13afdd41f1d60d89135512ff2d0d339c28dc41529874b8bd5983bfcd26a51b2e55f0cfea3d0fcd09a7316834f876385c34813b9d972857f1368d5238edd79b2462f0ffef89d141d28405739ddc4d6e70200393934d72a46d1d244e9b5345b3a0608fb579e6af921473238fe707e95f9ef95f7754457b658228f84af557b7797695b83a6a132cd49077f04e43607e9707b4afce26b44665b2ef59ed1c15c5d95b309a74cbf488b8a29f0e9722411f7bd66e2c67c75e1f0e45b5d66956fe170620a2e45d8619957d9d824e6d7e6f2e064b8c983303fac6d612ab73a2dea7ac61f97added9eac62bc21857851be663315d2deb6f9fbab2ee2ef72e5d922eb9c491f273ac871391f3975a2b676c4c92709341c7d70c4ac94cc5f7c11163a3770ba20e0409139deb67e9b482b7359a128483717ff7fff8d57b908d600ee6a76613a630570dd12b051fdb0e195c052b4ecbc7bc72235efb217037b97895d7c4b8afead357f673d31cfb38450796bbf34318bbda2c9567116029dd6b750e21419b67e645981f44cca67f3803bc75ad6c8d7f3b8599967522fe7baed47c044267c7cc8759df4b5a28602f7f4fab026fed5f94bae8bb77050151d59d7239fc86453e777ef957c747e8e46da382f4341f2f313c21c2d4be985a235fe624e79ac7870a64ba71fd15df284fa947227e08323dd8aae1f74109ea61a41e78e214462c7bcd10b793940bf22297e0bb0a4b103c9face63e3ee8cd8db046e9f506faf506b64f1df9d23051560bad653e6f6541ee43149cc09ad44bda03be44e530ea0e7e34336e98852c8934f309bd29ddb0cbd0095313f0740eb3308076123ad0c76ab6e26f3c8cf2aa46426c5c0a117d0aa888b8a7e26268976d1ffb1e98d0c070f4692645060e0ad71b39481e40b44081f85db8b5212b2e6941f8b752158290e8dff48ae63fc56a95988f12370ba3ef3ba5d2073ebece979318703152a6f1418484b79448899ac3e41315600a831cdfab387cf4db385704e0dd0b9f9f4c903307a3998a96d8958d568b5fdb277c575529dbd0df608ad0057edf81139e9ac84cc14fc98e9b6e6dfbae9dc932fd2e4869db967a4e638a779a5a0081d4137c3c1870e0802e000ee05c84b13f170810c229fdd2ebf9a6a3d6c355708102791e9ff599832c591924246e79ae36903f706d3cb605f4e175808c73f4bc43e7d128b4482b42ea99cde506741085d6c2841d6c563833a75952f28e44d9b6910bb921f1d28e7e4bffc449e06671bb0b0b53085d5377b68e7bbad8777e02c7141eb3bece245f68afc3cc5b51823c4a7cfdd72d23abfcfe0b4356adfc378de483a0827eb51c75137a8ab72982168e06eb9d2c8afbf8d830880aacf463b7595b348599d7fe91edcc7a185cb18dff2435a9a21ec7405cb8b5001709d25e2f13cbae5e56c650c3596c43a8abf7d4af40d8f7f1430dea734f213d191346571972a3af1b089a908"}, 0x1001, 0x0)

629.485659ms ago: executing program 3 (id=3315):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404)
exit(0xfe)
sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xffffbffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000840)="11b1bfad6dc9e86215472a62a9773cd45edddf1fe28799b805943daeac8c4c3a22b571b37c290e338dd4b545648fb3ee6693b661eb024606", 0x38}, {&(0x7f00000024c0)="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", 0x623}, {&(0x7f00000000c0)="dd09685c6d6d24005d353911c37357e50a5571ce326b2b217c121fbfca79449cba01ca0f7b09761850e4547adf5db2a96f05140747314cc74a111b84e2eabee943e2e7", 0x43}, {&(0x7f00000034c0)}, {&(0x7f00000005c0)="83cbe436385c95176e0d5116a952bf72e725fa04a7d41d34f1ea46e9d11c9530cb4164a03dfc290c6d128c5c5a52959801743061e702d7abc9e59c5bb515f4ce18f4a8235a1c53d7cde19c8c2751287a223088d4d133cf65a50a6570a2b86cc6df8f86dc84cb2256b850c953ef229668c2e6f9355a554b4d2ec7f9a17c0bec13", 0x80}, {0x0}, {&(0x7f0000000c00)}], 0x7}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000000e80)="73359c7aef6c8c46c16b02df643c244001ccb84a8f1ca6395a76f2bece75531a08f89ec1474622da43892ee1a02c355c5634564dd9cf67a6cb36b72e51d985bb023808ded7b261784e71ce39f6857c71887c085a520dccdd658561f7a4a5fa76d43fa855a716e315d7cd9771c5044fc0a5eeee5fca2a2e84f6f6f5c397f812d38c7343ed5118ead79d58903a07573b73377b750938eb61d2ae8bf98b33c92fd6360590382cf64b65ab54688714c146da89312abb727fe5febd996fe20892b60cc9af7fba8f1a0161489a84d03c0a", 0xce}, {0x0}, {0x0}, {0x0}, {&(0x7f00000044c0)}], 0x5, &(0x7f00000048c0)=ANY=[@ANYBLOB="40000000000000002900000037000000ff0400000000000007180000000304ff0080040000017f000000000000000000000000010005020c5f040100280000000000000029000000040000000001000000000000000100050200ff04"], 0x80}}, {{&(0x7f0000004680)={0xa, 0x4e22, 0x3, @private1, 0x7}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000640)="cd64847b43dfce84d7ca2eeb3225fcf0f819e1b89a1b16b34d43f9d0ad4cb55e7ff962dd672e5eb25fa2d9bf06fc1580c27b48e18261ac4a20943f7e5cc405f723a0bd62ef2bee8ad7092531ce8ba810a20a2027dfc69aeb6558960300b71713c1e5df6af41b2ddd133faa4e915ef9ae3a6818ef02be796c295e54bd6742cedb0dcea6496abc83147735", 0x8a}, {&(0x7f0000000700)="3d16b323724ad04a3b932fdfa121c1b9f47e0887a4a2f5e7bb5a4a1f47ff1681701398e066a962f4003efb5720cbdff648a2dbbf467c74bbd217df22faf2f53259be5e61e090379616127fc8a36a6667d75707c863f56ef83d25a07c642f4def9923ae09f57101baf56dadd04978a9b673aef0afe4a93f8c4f23499d9c9318e308b988273ce1d178076b19547248f0d25cfa3a9caf9110097c339a3d3f3e1e6cc077b3df38d0bdbc8d6bd6", 0xfffffefe}, {&(0x7f0000000880)="b07814e51dc7f3c8102c947c302d0a53fc6220fc5aa688d6134c330ed59c84bbf354608d1ca7e72587fc9d29507dd7df7f2e7fb2d13693e588e66726469e960b8f85c9bb8fc5a9756905ab1038de10834fc10e16ec10ffb8ec323cd91944437742f1e8393fc09085d795ae536f71cdc27e1b0c891609fbd404dcea93051404e35acb9765e1b0d50eccbc035316c839bc580648711dfef0ce5145efa17d852d606397eac5843df1666dbb62396938186c39515c2b472a5ecbb854f1737ff6c7b15e14e83a9fb9f60906d4b1a0626ebff86c77e280cf58bb1add9b4dcb60", 0xdd}], 0x3}}], 0x4, 0xc8c0)

484.701779ms ago: executing program 2 (id=3316):
r0 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0xaee3, 0x400, 0x1803, 0xf4}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
unshare(0x2000100)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(blowfish-asm)\x00'}, 0x58)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, 0x30001, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x4094)
syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183880, 0x23456})
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/meminfo\x00', 0x0, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000140), 0x10)
clock_gettime(0x0, &(0x7f0000000100))
sendmsg$can_bcm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYBLOB="05000000c30400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000400100000004000040000100cdd9497d77c114a26d5a80da47816348ac52fd1442deafa2471044f1d682fe0fe3f04a212f1e3f7415f346f123ea136d9fc013708d6f3ede5cf9399c39c0d39c885c6ffe514881e1b9679fb2ce3f7c088d54f377b0dc413ad10240cfc9c360482715120052f313ad1b5999b0a06d26a1309a3f6bb4368341c00dbfd454e8fe57d90aef929ed9428051d9cdfcbac4cd5aa07674459b31193d6ac193"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x400d0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
preadv2(r10, &(0x7f0000000400)=[{&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/61, 0x3d}, {&(0x7f0000000a00)=""/230, 0xe6}, {&(0x7f00000007c0)=""/228, 0xe4}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000340)=""/66, 0x42}, {&(0x7f00000005c0)=""/186, 0xba}], 0x8, 0x2, 0x4, 0x2)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r6], 0xfc}}, 0x40001)
r11 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x35, 0xffffffffffffffff)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r12, 0x0)
keyctl$describe(0x6, r11, &(0x7f00000020c0)=""/4093, 0xffd)
ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000980)={0x3, 0x0, [{0x8000000, 0x1b, &(0x7f0000000080)=""/27}, {0x10000, 0xe4, &(0x7f00000006c0)=""/228}, {0x4, 0x80000, 0x0}]})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)

0s ago: executing program 2 (id=3317):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x14, 0x3c, 0x107, 0x70bd2a, 0x25dfdbfe, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000040)={0xffffffffffff8001, r0, 'id1\x00'})
syz_open_dev$video(&(0x7f0000000280), 0x8, 0x100)
r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x8aa83, 0x175)
open(&(0x7f0000000000)='./file0\x00', 0x80540, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="f5"], &(0x7f0000000180), 0x600)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x1e, 0xc, "faf98317e5149989fc8dbe43ea4acc96e3a2503dc3bd3fe37d58128bbad0099cebdc2598c8b534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
read$hidraw(0xffffffffffffffff, 0x0, 0x0)
preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/154, 0x9a}], 0x1, 0x0, 0x4)
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000480)={0xa, @sliced={0xb, [0x5, 0x0, 0x8, 0x9, 0xffff, 0x9, 0x3ff, 0xd, 0x0, 0x81, 0x3, 0x8, 0x200, 0x5, 0xfff7, 0x6, 0x101, 0x6, 0x1ff, 0xffad, 0x493, 0x8, 0x7, 0x1000, 0x8, 0x0, 0xf5cd, 0x0, 0x8, 0x7, 0xafc3, 0x3, 0x5, 0x3, 0x0, 0x1, 0xe, 0x2, 0x2, 0x2ffc, 0x4, 0x77, 0x1, 0x0, 0x1, 0x4, 0xf2c1, 0x6], 0x2}})
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r10, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000004d40)="bfb210", 0x3}], 0x1, &(0x7f0000004e40)=ANY=[@ANYBLOB="30000000000000008400000001000000050006000002000004000000b40a00000300000000000100ffff0000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000200000001000000008000000"], 0x48}, 0x20000000)
r11 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3)
preadv(r11, &(0x7f00000004c0)=[{0x0}, {0x0, 0x3b}], 0x1000000000000077, 0x0, 0xd)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)

kernel console output (not intermixed with test programs):

ith address 0x14, changing to 0x4
[  874.166848][ T5947] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110
[  874.220518][ T5877] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  874.236956][ T5947] pac7311 4-1:0.150: probe with driver pac7311 failed with error -110
[  874.307374][ T5877] usb 3-1: config 0 interface 113 has no altsetting 0
[  874.834869][ T5877] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  874.928500][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.970285][ T5877] usb 3-1: Product: syz
[  874.993002][ T5877] usb 3-1: Manufacturer: syz
[  875.031055][ T5877] usb 3-1: SerialNumber: syz
[  875.063653][ T5877] usb 3-1: config 0 descriptor??
[  875.086737][    C0] usb 3-1: NFC: Urb failure (status -71)
[  875.103187][ T5877] usb 3-1: NFC: Unable to get FW version
[  875.117361][ T5877] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90
[  875.488841][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  875.495314][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  876.774288][T17251] fuse: Unknown parameter '0xffffffffffffffff'
[  876.815980][T17248] FAULT_INJECTION: forcing a failure.
[  876.815980][T17248] name failslab, interval 1, probability 0, space 0, times 0
[  876.865877][T17248] CPU: 0 UID: 0 PID: 17248 Comm: syz.0.3003 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  876.865905][T17248] Tainted: [L]=SOFTLOCKUP
[  876.865911][T17248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  876.865922][T17248] Call Trace:
[  876.865930][T17248]  <TASK>
[  876.865938][T17248]  dump_stack_lvl+0x189/0x250
[  876.865965][T17248]  ? __pfx____ratelimit+0x10/0x10
[  876.866000][T17248]  ? __pfx_dump_stack_lvl+0x10/0x10
[  876.866035][T17248]  ? __pfx__printk+0x10/0x10
[  876.866099][T17248]  should_fail_ex+0x414/0x560
[  876.866133][T17248]  should_failslab+0xa8/0x100
[  876.866158][T17248]  kmem_cache_alloc_noprof+0x88/0x710
[  876.866189][T17248]  ? skb_clone+0x212/0x3a0
[  876.866218][T17248]  skb_clone+0x212/0x3a0
[  876.866247][T17248]  __netlink_deliver_tap+0x404/0x850
[  876.866284][T17248]  ? netlink_deliver_tap+0x2e/0x1b0
[  876.866310][T17248]  netlink_deliver_tap+0x19c/0x1b0
[  876.866336][T17248]  netlink_sendskb+0x68/0x140
[  876.866361][T17248]  netlink_unicast+0x397/0x9e0
[  876.866381][T17248]  ? __asan_memcpy+0x40/0x70
[  876.866406][T17248]  ? __pfx_netlink_unicast+0x10/0x10
[  876.866438][T17248]  netlink_rcv_skb+0x28c/0x470
[  876.866463][T17248]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  876.866486][T17248]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  876.866522][T17248]  ? netlink_deliver_tap+0x2e/0x1b0
[  876.866555][T17248]  netlink_unicast+0x82f/0x9e0
[  876.866585][T17248]  ? __pfx_netlink_unicast+0x10/0x10
[  876.866606][T17248]  ? netlink_sendmsg+0x642/0xb30
[  876.866648][T17248]  ? skb_put+0x11b/0x210
[  876.866674][T17248]  netlink_sendmsg+0x805/0xb30
[  876.866711][T17248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  876.866746][T17248]  ? aa_sock_msg_perm+0xf1/0x1b0
[  876.866775][T17248]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  876.866794][T17248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  876.866823][T17248]  __sock_sendmsg+0x21c/0x270
[  876.866857][T17248]  ____sys_sendmsg+0x505/0x820
[  876.866888][T17248]  ? __pfx_____sys_sendmsg+0x10/0x10
[  876.866922][T17248]  ? import_iovec+0x74/0xa0
[  876.866951][T17248]  ___sys_sendmsg+0x21f/0x2a0
[  876.866978][T17248]  ? __pfx____sys_sendmsg+0x10/0x10
[  876.867012][T17248]  ? rcu_read_lock_any_held+0xb3/0x120
[  876.867065][T17248]  ? __fget_files+0x2a/0x420
[  876.867099][T17248]  ? __fget_files+0x3a0/0x420
[  876.867125][T17248]  __x64_sys_sendmsg+0x19b/0x260
[  876.867145][T17248]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  876.867169][T17248]  ? __pfx_ksys_write+0x10/0x10
[  876.867187][T17248]  ? do_syscall_64+0xbe/0xf80
[  876.867204][T17248]  do_syscall_64+0xfa/0xf80
[  876.867220][T17248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.867234][T17248]  ? clear_bhb_loop+0x60/0xb0
[  876.867263][T17248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.867276][T17248] RIP: 0033:0x7f412898f749
[  876.867289][T17248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  876.867300][T17248] RSP: 002b:00007f4129817038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  876.867315][T17248] RAX: ffffffffffffffda RBX: 00007f4128be5fa0 RCX: 00007f412898f749
[  876.867326][T17248] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003
[  876.867335][T17248] RBP: 00007f4129817090 R08: 0000000000000000 R09: 0000000000000000
[  876.867344][T17248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  876.867352][T17248] R13: 00007f4128be6038 R14: 00007f4128be5fa0 R15: 00007f4128d0fa28
[  876.867374][T17248]  </TASK>
[  877.602132][ T5960] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  877.703323][ T5967] usb 3-1: USB disconnect, device number 27
[  877.797863][ T5960] usb 2-1: Using ep0 maxpacket: 16
[  877.804976][ T5960] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  877.864504][T16886] usb 4-1: USB disconnect, device number 10
[  877.976639][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  878.062763][ T5960] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  878.096930][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.126362][ T5960] usb 2-1: Product: syz
[  878.144000][ T5960] usb 2-1: Manufacturer: syz
[  878.160720][ T5960] usb 2-1: SerialNumber: syz
[  878.177190][ T5960] usb 2-1: config 0 descriptor??
[  878.242768][ T5960] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  878.483044][ T5960] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  878.721873][ T5877] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  878.912095][ T5960] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  878.929798][ T5877] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  878.950500][ T5877] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  879.016312][ T5960] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  879.034051][ T5877] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  879.048308][ T5960] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  879.055294][ T5960] em28xx 2-1:0.0: No AC97 audio processor
[  879.081295][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.184262][T17257] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  879.298370][ T5960] usb 2-1: USB disconnect, device number 32
[  879.319293][ T5960] em28xx 2-1:0.0: Disconnecting em28xx
[  879.583687][ T5960] em28xx 2-1:0.0: Freeing device
[  879.608637][ T5877] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  879.796179][ T5877] usb 3-1: USB disconnect, device number 28
[  880.687310][T17287] fuse: Bad value for 'fd'
[  880.758323][ T5877] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  880.928704][ T5877] usb 1-1: Using ep0 maxpacket: 32
[  880.938458][ T5877] usb 1-1: config 4 has an invalid interface number: 71 but max is 0
[  880.948594][ T5877] usb 1-1: config 4 has no interface number 0
[  880.954734][ T5877] usb 1-1: config 4 interface 71 altsetting 10 endpoint 0x9 has invalid wMaxPacketSize 0
[  880.972478][ T5877] usb 1-1: config 4 interface 71 has no altsetting 0
[  881.006961][T17297] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3015'.
[  881.043806][ T5877] usb 1-1: New USB device found, idVendor=595a, idProduct=0001, bcdDevice=42.2c
[  881.063708][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.142108][T17299] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  881.150313][T17299] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  881.163746][ T5877] usb 1-1: Product: syz
[  881.168540][   T30] audit: type=1326 audit(1766171641.047:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17295 comm="syz.4.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142658f749 code=0x7ffc0000
[  881.192519][ T5877] usb 1-1: Manufacturer: syz
[  881.200164][ T5877] usb 1-1: SerialNumber: syz
[  881.214312][   T30] audit: type=1326 audit(1766171641.057:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17295 comm="syz.4.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142658f749 code=0x7ffc0000
[  881.240522][T17299] tipc: Enabled bearer <udp:syz2>, priority 9
[  881.255028][ T5947] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  881.320819][   T30] audit: type=1326 audit(1766171641.057:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17295 comm="syz.4.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f142658f749 code=0x7ffc0000
[  881.437240][   T30] audit: type=1326 audit(1766171641.057:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17295 comm="syz.4.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142658f749 code=0x7ffc0000
[  881.462879][ T5947] usb 2-1: Using ep0 maxpacket: 32
[  881.492166][ T5877] usb 1-1: USB disconnect, device number 57
[  881.509528][ T5947] usb 2-1: config 0 has an invalid interface number: 150 but max is 0
[  881.522747][ T5947] usb 2-1: config 0 has no interface number 0
[  881.584948][T17299] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  881.746425][   T30] audit: type=1326 audit(1766171641.057:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17295 comm="syz.4.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f142658f749 code=0x7ffc0000
[  881.780008][ T5947] usb 2-1: config 0 interface 150 has no altsetting 0
[  881.790819][ T5947] usb 2-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01
[  881.801425][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.810009][ T5947] usb 2-1: Product: syz
[  881.814206][ T5947] usb 2-1: Manufacturer: syz
[  881.821906][ T5947] usb 2-1: SerialNumber: syz
[  881.847131][ T5947] usb 2-1: config 0 descriptor??
[  881.861922][ T5947] gspca_main: pac7311-2.14.0 probing 093a:2603
[  881.871156][   T30] audit: type=1326 audit(1766171641.057:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17295 comm="syz.4.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142658f749 code=0x7ffc0000
[  881.945458][   T30] audit: type=1326 audit(1766171641.057:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17295 comm="syz.4.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1426591667 code=0x7ffc0000
[  882.058669][   T30] audit: type=1326 audit(1766171641.057:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17295 comm="syz.4.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f14265915dc code=0x7ffc0000
[  882.275591][   T30] audit: type=1326 audit(1766171641.057:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17295 comm="syz.4.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1426591514 code=0x7ffc0000
[  882.333629][   T30] audit: type=1326 audit(1766171641.067:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17295 comm="syz.4.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1426591514 code=0x7ffc0000
[  882.438583][ T5947] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110
[  882.446677][ T5947] pac7311 2-1:0.150: probe with driver pac7311 failed with error -110
[  882.947913][ T5960] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  883.107946][ T5960] usb 1-1: Using ep0 maxpacket: 16
[  883.124371][ T5960] usb 1-1: config 0 has no interfaces?
[  883.131865][ T5960] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  883.142983][ T5960] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  883.174439][ T5960] usb 1-1: Manufacturer: syz
[  883.196947][ T5960] usb 1-1: config 0 descriptor??
[  883.658156][T16886] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  883.938088][T16886] usb 4-1: Using ep0 maxpacket: 16
[  883.952863][T16886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  883.984287][T16886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  884.014639][T16886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  884.039010][T16886] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00
[  884.073019][T16886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.311565][T16886] usb 4-1: config 0 descriptor??
[  884.893216][ T5967] usb 2-1: USB disconnect, device number 33
[  885.611717][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  885.631942][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  885.646737][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  885.655541][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  885.669697][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  885.956736][ T5960] usb 1-1: USB disconnect, device number 58
[  886.563781][T17330] chnl_net:caif_netlink_parms(): no params data found
[  886.618825][T17338] xt_CT: You must specify a L4 protocol and not use inversions on it
[  886.934264][T17343] xt_hashlimit: size too large, truncated to 1048576
[  887.111137][T16886] usbhid 4-1:0.0: can't add hid device: -71
[  887.117175][T16886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  887.172887][T16886] usb 4-1: USB disconnect, device number 11
[  887.195063][T17330] bridge0: port 1(bridge_slave_0) entered blocking state
[  887.225582][T17330] bridge0: port 1(bridge_slave_0) entered disabled state
[  887.244585][T17330] bridge_slave_0: entered allmulticast mode
[  887.262765][T17330] bridge_slave_0: entered promiscuous mode
[  887.280905][T17330] bridge0: port 2(bridge_slave_1) entered blocking state
[  887.288593][T17330] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.361924][T17330] bridge_slave_1: entered allmulticast mode
[  887.376541][T17330] bridge_slave_1: entered promiscuous mode
[  887.465465][T17330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  887.478611][ T5960] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  887.516350][T17330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  887.637882][ T5960] usb 5-1: device descriptor read/64, error -71
[  887.701155][T17330] team0: Port device team_slave_0 added
[  887.719410][T17330] team0: Port device team_slave_1 added
[  887.772233][T17330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  887.779993][ T5830] Bluetooth: hci4: command tx timeout
[  887.787562][T17330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  887.815214][T17330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  887.830435][T17330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  887.837375][T17330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  887.864655][T17330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  887.887922][ T5960] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  887.918071][ T5947] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  887.974198][T17330] hsr_slave_0: entered promiscuous mode
[  887.981653][T17330] hsr_slave_1: entered promiscuous mode
[  887.988533][T17330] debugfs: 'hsr0' already exists in 'hsr'
[  887.994274][T17330] Cannot create hsr debugfs directory
[  888.031053][ T5960] usb 5-1: device descriptor read/64, error -71
[  888.078649][ T5947] usb 2-1: Using ep0 maxpacket: 32
[  888.085546][ T5947] usb 2-1: config 0 has an invalid interface number: 150 but max is 0
[  888.104587][ T5947] usb 2-1: config 0 has no interface number 0
[  888.122022][ T5947] usb 2-1: config 0 interface 150 has no altsetting 0
[  888.138852][ T5960] usb usb5-port1: attempt power cycle
[  888.147340][ T5947] usb 2-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01
[  888.178386][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.213966][ T5947] usb 2-1: Product: syz
[  888.222145][ T5947] usb 2-1: Manufacturer: syz
[  888.227880][ T5947] usb 2-1: SerialNumber: syz
[  888.244993][ T5947] usb 2-1: config 0 descriptor??
[  888.261687][ T5947] gspca_main: pac7311-2.14.0 probing 093a:2603
[  888.478960][ T5960] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  888.500383][T17330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  888.513054][T17330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.548720][ T5960] usb 5-1: device descriptor read/8, error -71
[  888.643966][T17330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  888.668776][T17330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.775541][T17330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  888.788580][ T5960] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  888.793315][ T5947] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110
[  888.810387][T17330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.822874][ T5947] pac7311 2-1:0.150: probe with driver pac7311 failed with error -110
[  888.831940][ T5960] usb 5-1: device descriptor read/8, error -71
[  888.905977][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3034'.
[  888.921338][T17330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  888.948185][ T5960] usb usb5-port1: unable to enumerate USB device
[  888.960631][T17330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.133806][T17330] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  889.150808][T17330] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  889.161834][ T5960] usb 2-1: USB disconnect, device number 34
[  889.166495][T17330] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  889.184704][T17330] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  889.272836][T17330] 8021q: adding VLAN 0 to HW filter on device bond0
[  889.296361][T17330] 8021q: adding VLAN 0 to HW filter on device team0
[  889.313555][T16069] bridge0: port 1(bridge_slave_0) entered blocking state
[  889.320750][T16069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  889.334410][T16069] bridge0: port 2(bridge_slave_1) entered blocking state
[  889.341538][T16069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  889.386349][T17330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  889.403565][T17330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  889.443536][T17330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  889.491296][T17330] veth0_vlan: entered promiscuous mode
[  889.502728][T17330] veth1_vlan: entered promiscuous mode
[  889.535212][T17330] veth0_macvtap: entered promiscuous mode
[  889.550698][T17330] veth1_macvtap: entered promiscuous mode
[  889.569704][T17330] batman_adv: batadv0: Interface activated: batadv_slave_0
[  889.585704][T17330] batman_adv: batadv0: Interface activated: batadv_slave_1
[  889.600299][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  889.611202][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  889.622967][ T1145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  889.634634][ T1145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  889.854151][ T3866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  889.863703][ T5830] Bluetooth: hci4: command tx timeout
[  889.874701][ T3866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  890.045303][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  890.065096][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  890.079850][ T5947] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  890.207696][T17392] tipc: Started in network mode
[  890.213045][T17392] tipc: Node identity 2e5ba662ab61, cluster identity 4711
[  890.241888][T17392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  890.249194][ T5947] usb 2-1: Using ep0 maxpacket: 16
[  890.280265][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  890.301492][T17394] syzkaller0: entered promiscuous mode
[  890.317241][ T5947] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  890.368659][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.392841][T17397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3039'.
[  890.405187][ T5947] usb 2-1: config 0 descriptor??
[  890.413013][T17394] syzkaller0: entered allmulticast mode
[  890.637912][T17394] tipc: Resetting bearer <eth:syzkaller0>
[  890.685353][T17391] tipc: Resetting bearer <eth:syzkaller0>
[  890.698331][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  890.756409][T17391] tipc: Disabling bearer <eth:syzkaller0>
[  890.868597][    T9] usb 5-1: Using ep0 maxpacket: 16
[  890.879048][    T9] usb 5-1: no configurations
[  890.891557][ T5947] mcp2221 0003:04D8:00DD.0029: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  890.913424][    T9] usb 5-1: can't read configurations, error -22
[  891.218853][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  891.283072][T17401] xt_hashlimit: size too large, truncated to 1048576
[  891.373697][T17385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  891.398529][    T9] usb 5-1: Using ep0 maxpacket: 16
[  891.405324][    T9] usb 5-1: no configurations
[  891.414018][T17385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  891.427515][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  891.440631][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  891.455178][    T9] usb 5-1: can't read configurations, error -22
[  891.473371][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  891.481546][    T9] usb usb5-port1: attempt power cycle
[  891.488698][T17385] openvswitch: netlink: Duplicate or invalid key (type 0).
[  891.508537][T17385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  891.553287][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  891.562258][T16886] usb 2-1: USB disconnect, device number 35
[  891.562258][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  891.849211][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  891.883626][    T9] usb 5-1: Using ep0 maxpacket: 16
[  891.892313][    T9] usb 5-1: no configurations
[  891.905501][    T9] usb 5-1: can't read configurations, error -22
[  891.938610][ T5836] Bluetooth: hci4: command tx timeout
[  892.076497][    T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  892.190696][    T9] usb 5-1: Using ep0 maxpacket: 16
[  892.199313][    T9] usb 5-1: no configurations
[  892.205126][    T9] usb 5-1: can't read configurations, error -22
[  892.229145][    T9] usb usb5-port1: unable to enumerate USB device
[  892.561201][ T6274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.727748][ T6274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.777325][T17405] chnl_net:caif_netlink_parms(): no params data found
[  892.854572][ T6274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.921814][ T6274] batman_adv: batadv0: Interface deactivated: netdevsim0
[  892.961033][ T6274] batman_adv: batadv0: Removing interface: netdevsim0
[  892.970156][ T6274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.021881][T17405] bridge0: port 1(bridge_slave_0) entered blocking state
[  893.033605][T17405] bridge0: port 1(bridge_slave_0) entered disabled state
[  893.041739][T17405] bridge_slave_0: entered allmulticast mode
[  893.050604][T17405] bridge_slave_0: entered promiscuous mode
[  893.065590][T17405] bridge0: port 2(bridge_slave_1) entered blocking state
[  893.074322][T17405] bridge0: port 2(bridge_slave_1) entered disabled state
[  893.082211][T17405] bridge_slave_1: entered allmulticast mode
[  893.091151][T17405] bridge_slave_1: entered promiscuous mode
[  893.136033][T17405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  893.178109][ T5967] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  893.201593][T17405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  893.368026][ T5967] usb 4-1: Using ep0 maxpacket: 32
[  893.391593][ T5967] usb 4-1: config 0 has an invalid interface number: 150 but max is 0
[  893.420977][ T5967] usb 4-1: config 0 has no interface number 0
[  893.429094][ T5967] usb 4-1: config 0 interface 150 has no altsetting 0
[  893.446463][ T5967] usb 4-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01
[  893.482789][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.507371][ T5967] usb 4-1: Product: syz
[  893.519668][ T5967] usb 4-1: Manufacturer: syz
[  893.528989][ T5967] usb 4-1: SerialNumber: syz
[  893.540209][T17405] team0: Port device team_slave_0 added
[  893.551992][ T5967] usb 4-1: config 0 descriptor??
[  893.560240][T17405] team0: Port device team_slave_1 added
[  893.582163][ T5967] gspca_main: pac7311-2.14.0 probing 093a:2603
[  893.618534][ T5836] Bluetooth: hci1: command tx timeout
[  893.725164][ T6274] team0: left allmulticast mode
[  893.736965][ T6274] team_slave_0: left allmulticast mode
[  893.762809][ T6274] team_slave_1: left allmulticast mode
[  893.770521][ T6274] batadv1: left allmulticast mode
[  893.777329][ T6274] batadv2: left allmulticast mode
[  893.935014][ T6274] team0: left promiscuous mode
[  894.021577][ T5830] Bluetooth: hci4: command tx timeout
[  894.057927][ T6274] team_slave_0: left promiscuous mode
[  894.071330][ T6274] team_slave_1: left promiscuous mode
[  894.094828][ T6274] batadv1: left promiscuous mode
[  894.112594][ T6274] batadv2: left promiscuous mode
[  894.148176][ T5967] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110
[  894.197927][ T5967] pac7311 4-1:0.150: probe with driver pac7311 failed with error -110
[  894.209119][ T6274] bridge0: port 3(team0) entered disabled state
[  894.262508][ T6274] bridge_slave_1: left allmulticast mode
[  894.272936][ T6274] bridge_slave_1: left promiscuous mode
[  894.279290][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state
[  894.301512][ T6274] bridge_slave_0: left allmulticast mode
[  894.307388][ T6274] bridge_slave_0: left promiscuous mode
[  894.314706][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state
[  894.384101][ T5960] usb 4-1: USB disconnect, device number 12
[  894.445149][ T6274] bond_slave_0: left promiscuous mode
[  894.452125][ T6274] bond_slave_1: left promiscuous mode
[  894.609531][ T5967] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  894.788475][ T5967] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  894.808724][ T5967] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  894.821805][ T5967] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  894.831738][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.856847][T17441] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  894.877255][ T5967] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  895.074256][ T5967] usb 2-1: USB disconnect, device number 36
[  895.142801][T17448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3052'.
[  895.256780][ T6274] bond7 (unregistering): (slave erspan1): Releasing active interface
[  895.265615][ T5877] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  895.274627][ T6274] erspan1 (unregistering): left promiscuous mode
[  895.440824][ T5877] usb 3-1: Using ep0 maxpacket: 16
[  895.447738][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  895.460930][ T5877] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  895.471044][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  895.483247][ T5877] usb 3-1: config 0 descriptor??
[  895.634310][ T6274] team0: Port device bridge2 removed
[  895.698293][ T5830] Bluetooth: hci1: command tx timeout
[  895.792333][ T6274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  895.803823][ T6274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  895.820867][ T6274] bond0 (unregistering): Released all slaves
[  895.917347][ T5877] mcp2221 0003:04D8:00DD.002A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  895.984815][ T6274] bond1 (unregistering): Released all slaves
[  896.035320][ T6274] bond2 (unregistering): Released all slaves
[  896.203395][ T6274] bond3 (unregistering): Released all slaves
[  896.359121][T17445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  896.376927][T17445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  896.386829][T17445] openvswitch: netlink: Duplicate or invalid key (type 0).
[  896.401239][T17445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  896.427351][ T5877] usb 3-1: USB disconnect, device number 29
[  896.474401][ T6274] bond4 (unregistering): Released all slaves
[  896.596492][ T6274] bond5 (unregistering): Released all slaves
[  896.770188][ T6274] bond6 (unregistering): Released all slaves
[  896.899950][ T6274] bond7 (unregistering): Released all slaves
[  897.179430][T17460] xt_hashlimit: size too large, truncated to 1048576
[  897.208553][ T6274] bond8 (unregistering): Released all slaves
[  897.437511][ T6274] bond9 (unregistering): Released all slaves
[  897.514748][T17405] batman_adv: batadv0: Adding interface: batadv_slave_0
[  897.524506][T17405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  897.552311][T17405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  897.618042][T17405] batman_adv: batadv0: Adding interface: batadv_slave_1
[  897.625451][T17405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  897.708151][T17405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  897.732408][ T6274] tipc: Disabling bearer <udp:syz0>
[  897.753742][ T6274] tipc: Left network mode
[  897.780810][ T5830] Bluetooth: hci1: command tx timeout
[  898.217376][T17405] hsr_slave_0: entered promiscuous mode
[  898.240999][T17405] hsr_slave_1: entered promiscuous mode
[  898.284950][T17405] debugfs: 'hsr0' already exists in 'hsr'
[  898.301763][T17405] Cannot create hsr debugfs directory
[  898.388674][ T5877] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  898.558434][ T5877] usb 3-1: Using ep0 maxpacket: 32
[  898.565389][ T5877] usb 3-1: config 0 has an invalid interface number: 150 but max is 0
[  898.574058][ T5877] usb 3-1: config 0 has no interface number 0
[  898.588377][ T5877] usb 3-1: config 0 interface 150 has no altsetting 0
[  898.601371][ T5877] usb 3-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01
[  898.618410][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.635873][ T5877] usb 3-1: Product: syz
[  898.654667][ T5877] usb 3-1: Manufacturer: syz
[  898.666828][ T5877] usb 3-1: SerialNumber: syz
[  898.724204][ T5877] usb 3-1: config 0 descriptor??
[  898.780581][ T5877] gspca_main: pac7311-2.14.0 probing 093a:2603
[  899.305122][ T5877] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110
[  899.354544][ T5877] pac7311 3-1:0.150: probe with driver pac7311 failed with error -110
[  899.860958][ T5830] Bluetooth: hci1: command tx timeout
[  900.052016][ T6274] hsr_slave_0: left promiscuous mode
[  900.109340][ T6274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  900.135908][ T6274] batman_adv: batadv0: Removing interface: batadv_slave_0
[  900.144755][ T6274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  900.164045][ T6274] batman_adv: batadv0: Removing interface: batadv_slave_1
[  900.239909][ T6274] veth1_macvtap: left promiscuous mode
[  900.255509][ T6274] veth0_macvtap: left promiscuous mode
[  900.261494][ T6274] veth1_vlan: left promiscuous mode
[  900.266922][ T6274] veth0_vlan: left promiscuous mode
[  900.298033][ T5960] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  900.428060][ T5960] usb 5-1: device descriptor read/64, error -71
[  900.497683][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  900.497701][   T30] audit: type=1326 audit(1766171660.417:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17508 comm="syz.1.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2cd8f749 code=0x7ffc0000
[  900.589759][ T5877] usb 3-1: USB disconnect, device number 30
[  900.617933][   T30] audit: type=1326 audit(1766171660.417:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17508 comm="syz.1.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fdc2cd8f749 code=0x7ffc0000
[  900.672399][   T30] audit: type=1326 audit(1766171660.417:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17508 comm="syz.1.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2cd8f749 code=0x7ffc0000
[  900.902696][ T5960] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  900.915433][   T30] audit: type=1326 audit(1766171660.417:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17508 comm="syz.1.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc2cd8f749 code=0x7ffc0000
[  900.939954][   T30] audit: type=1326 audit(1766171660.817:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17508 comm="syz.1.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2cd8f749 code=0x7ffc0000
[  900.965578][   T30] audit: type=1326 audit(1766171660.817:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17508 comm="syz.1.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2cd8f749 code=0x7ffc0000
[  901.047980][ T5960] usb 5-1: device descriptor read/64, error -71
[  901.112066][ T6274] team0 (unregistering): Port device batadv2 removed
[  901.140039][ T6274] team0 (unregistering): Port device batadv1 removed
[  901.167310][ T6274] pim6reg (unregistering): left allmulticast mode
[  901.169353][ T5960] usb usb5-port1: attempt power cycle
[  901.666542][ T5960] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  901.704089][ T5960] usb 5-1: device descriptor read/8, error -71
[  902.097957][ T5960] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  902.128410][ T5960] usb 5-1: device descriptor read/8, error -71
[  902.275397][ T5960] usb usb5-port1: unable to enumerate USB device
[  902.858888][ T6274] team0 (unregistering): Port device team_slave_1 removed
[  902.903098][ T6274] team0 (unregistering): Port device team_slave_0 removed
[  903.088549][T17528] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3070'.
[  903.993808][T17544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3076'.
[  904.084387][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3076'.
[  904.118701][T17544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  904.287956][T17544] batman_adv: batadv0: Removing interface: batadv_slave_0
[  904.318614][ T5877] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  904.499237][ T5877] usb 2-1: Using ep0 maxpacket: 32
[  904.506472][ T5877] usb 2-1: config 0 has an invalid interface number: 150 but max is 0
[  904.569178][ T5877] usb 2-1: config 0 has no interface number 0
[  904.575403][ T5877] usb 2-1: config 0 interface 150 has no altsetting 0
[  904.649265][ T5877] usb 2-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01
[  904.710402][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.745446][T17405] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  904.755341][T17561] input: syz1 as /devices/virtual/input/input44
[  904.775350][ T5877] usb 2-1: Product: syz
[  904.782797][ T5877] usb 2-1: Manufacturer: syz
[  904.789798][ T5877] usb 2-1: SerialNumber: syz
[  904.817369][ T5877] usb 2-1: config 0 descriptor??
[  904.834705][T17405] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  904.847460][ T5877] gspca_main: pac7311-2.14.0 probing 093a:2603
[  904.932476][T17405] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  904.968649][T17405] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  905.046859][ T6274] IPVS: stop unused estimator thread 0...
[  905.087919][   T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  905.233919][T17405] 8021q: adding VLAN 0 to HW filter on device bond0
[  905.278247][   T24] usb 3-1: Using ep0 maxpacket: 32
[  905.292098][   T24] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  905.325501][T17405] 8021q: adding VLAN 0 to HW filter on device team0
[  905.332118][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  905.332180][   T24] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[  905.332205][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.344691][   T24] usb 3-1: config 0 descriptor??
[  905.420828][ T5877] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110
[  905.441722][ T5877] pac7311 2-1:0.150: probe with driver pac7311 failed with error -110
[  905.456083][ T3866] bridge0: port 1(bridge_slave_0) entered blocking state
[  905.463214][ T3866] bridge0: port 1(bridge_slave_0) entered forwarding state
[  905.669360][ T3866] bridge0: port 2(bridge_slave_1) entered blocking state
[  905.676610][ T3866] bridge0: port 2(bridge_slave_1) entered forwarding state
[  905.864348][T17405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  905.887353][   T30] audit: type=1326 audit(1766171665.767:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8b58f749 code=0x7ffc0000
[  906.093968][T17405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  906.188534][   T30] audit: type=1326 audit(1766171665.817:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda8b58f749 code=0x7ffc0000
[  906.227072][   T30] audit: type=1326 audit(1766171665.817:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8b58f749 code=0x7ffc0000
[  906.268019][   T30] audit: type=1326 audit(1766171665.817:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda8b58f749 code=0x7ffc0000
[  906.299014][T17599] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  906.517346][   T30] audit: type=1326 audit(1766171665.817:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8b58f749 code=0x7ffc0000
[  906.693816][   T30] audit: type=1326 audit(1766171665.827:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda8b591667 code=0x7ffc0000
[  906.727072][   T30] audit: type=1326 audit(1766171665.827:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fda8b5915dc code=0x7ffc0000
[  906.985350][   T30] audit: type=1326 audit(1766171665.827:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fda8b591514 code=0x7ffc0000
[  907.081968][   T30] audit: type=1326 audit(1766171665.827:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fda8b591514 code=0x7ffc0000
[  907.316874][   T30] audit: type=1326 audit(1766171665.827:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fda8b58e3aa code=0x7ffc0000
[  907.813494][ T5960] usb 2-1: USB disconnect, device number 37
[  908.064538][T17405] 8021q: adding VLAN 0 to HW filter on device batadv0
[  908.345004][T17405] veth0_vlan: entered promiscuous mode
[  908.517953][T17405] veth1_vlan: entered promiscuous mode
[  908.762487][T17405] veth0_macvtap: entered promiscuous mode
[  908.823076][T17405] veth1_macvtap: entered promiscuous mode
[  908.952828][T17405] batman_adv: batadv0: Interface activated: batadv_slave_0
[  909.049483][T17405] batman_adv: batadv0: Interface activated: batadv_slave_1
[  909.141146][T17632] pim6reg: entered allmulticast mode
[  909.245680][ T6274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  909.378796][ T6274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  909.442434][ T6274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  909.484604][   T24] usbhid 3-1:0.0: can't add hid device: -71
[  909.510881][ T6274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  909.538986][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  909.613721][   T24] usb 3-1: USB disconnect, device number 31
[  909.677889][T16886] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  909.725145][T17638] FAULT_INJECTION: forcing a failure.
[  909.725145][T17638] name failslab, interval 1, probability 0, space 0, times 0
[  909.802939][T17638] CPU: 0 UID: 0 PID: 17638 Comm: syz.2.3092 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  909.802972][T17638] Tainted: [L]=SOFTLOCKUP
[  909.802979][T17638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  909.802991][T17638] Call Trace:
[  909.802999][T17638]  <TASK>
[  909.803009][T17638]  dump_stack_lvl+0x189/0x250
[  909.803038][T17638]  ? __pfx____ratelimit+0x10/0x10
[  909.803058][T17638]  ? __pfx_dump_stack_lvl+0x10/0x10
[  909.803082][T17638]  ? __pfx__printk+0x10/0x10
[  909.803112][T17638]  ? __pfx___might_resched+0x10/0x10
[  909.803134][T17638]  ? fs_reclaim_acquire+0x7d/0x100
[  909.803161][T17638]  should_fail_ex+0x414/0x560
[  909.803194][T17638]  should_failslab+0xa8/0x100
[  909.803220][T17638]  kmem_cache_alloc_lru_noprof+0x8d/0x6e0
[  909.803250][T17638]  ? simple_start_creating+0xc4/0x100
[  909.803275][T17638]  ? alloc_inode+0x6a/0x1b0
[  909.803300][T17638]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  909.803321][T17638]  alloc_inode+0x6a/0x1b0
[  909.803345][T17638]  new_inode+0x22/0x170
[  909.803373][T17638]  __debugfs_create_file+0xb8/0x400
[  909.803398][T17638]  debugfs_create_file_full+0x3f/0x60
[  909.803422][T17638]  ref_tracker_dir_debugfs+0x14e/0x2d0
[  909.803443][T17638]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  909.803491][T17638]  ? trace_kmalloc+0x1f/0xb0
[  909.803507][T17638]  ? __kvmalloc_node_noprof+0x5f5/0x920
[  909.803533][T17638]  ? __raw_spin_lock_init+0x45/0x100
[  909.803562][T17638]  alloc_netdev_mqs+0x272/0x11b0
[  909.803589][T17638]  ? __pfx_geneve_setup+0x10/0x10
[  909.803622][T17638]  rtnl_create_link+0x31f/0xcf0
[  909.803657][T17638]  rtnl_newlink_create+0x25c/0xb00
[  909.803686][T17638]  ? __mutex_lock+0x5bb/0x1350
[  909.803713][T17638]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  909.803740][T17638]  ? __pfx___mutex_lock+0x10/0x10
[  909.803772][T17638]  ? ns_capable+0x8a/0xf0
[  909.803796][T17638]  rtnl_newlink+0x16e7/0x1c90
[  909.803834][T17638]  ? __pfx_rtnl_newlink+0x10/0x10
[  909.803852][T17638]  ? do_syscall_64+0xfa/0xf80
[  909.803870][T17638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.803936][T17638]  ? kasan_quarantine_put+0xdd/0x220
[  909.803956][T17638]  ? lockdep_hardirqs_on+0x98/0x140
[  909.803983][T17638]  ? kmem_cache_free+0x197/0x620
[  909.804001][T17638]  ? nlmon_xmit+0xb0/0x100
[  909.804036][T17638]  ? __lock_acquire+0x6b6/0x2cf0
[  909.804060][T17638]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  909.804085][T17638]  ? __dev_queue_xmit+0x289/0x3140
[  909.804111][T17638]  ? __dev_queue_xmit+0x289/0x3140
[  909.804134][T17638]  ? __dev_queue_xmit+0x289/0x3140
[  909.804188][T17638]  ? __pfx_rtnl_newlink+0x10/0x10
[  909.804208][T17638]  rtnetlink_rcv_msg+0x7cf/0xb70
[  909.804233][T17638]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  909.804264][T17638]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  909.804280][T17638]  ? ref_tracker_free+0x63a/0x7d0
[  909.804299][T17638]  ? __asan_memcpy+0x40/0x70
[  909.804314][T17638]  ? __pfx_ref_tracker_free+0x10/0x10
[  909.804331][T17638]  ? __skb_clone+0x63/0x7a0
[  909.804362][T17638]  netlink_rcv_skb+0x208/0x470
[  909.804387][T17638]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  909.804409][T17638]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  909.804443][T17638]  ? netlink_deliver_tap+0x2e/0x1b0
[  909.804474][T17638]  netlink_unicast+0x82f/0x9e0
[  909.804503][T17638]  ? __pfx_netlink_unicast+0x10/0x10
[  909.804525][T17638]  ? netlink_sendmsg+0x642/0xb30
[  909.804547][T17638]  ? skb_put+0x11b/0x210
[  909.804570][T17638]  netlink_sendmsg+0x805/0xb30
[  909.804603][T17638]  ? __pfx_netlink_sendmsg+0x10/0x10
[  909.804629][T17638]  ? aa_sock_msg_perm+0xf1/0x1b0
[  909.804655][T17638]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  909.804673][T17638]  ? __pfx_netlink_sendmsg+0x10/0x10
[  909.804697][T17638]  __sock_sendmsg+0x21c/0x270
[  909.804727][T17638]  ____sys_sendmsg+0x505/0x820
[  909.804773][T17638]  ? __pfx_____sys_sendmsg+0x10/0x10
[  909.804806][T17638]  ? import_iovec+0x74/0xa0
[  909.804833][T17638]  ___sys_sendmsg+0x21f/0x2a0
[  909.804858][T17638]  ? __pfx____sys_sendmsg+0x10/0x10
[  909.804894][T17638]  ? rcu_read_lock_any_held+0xb3/0x120
[  909.804947][T17638]  ? __fget_files+0x2a/0x420
[  909.804971][T17638]  ? __fget_files+0x3a0/0x420
[  909.805005][T17638]  __x64_sys_sendmsg+0x19b/0x260
[  909.805032][T17638]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  909.805066][T17638]  ? __pfx_ksys_write+0x10/0x10
[  909.805089][T17638]  ? do_syscall_64+0xbe/0xf80
[  909.805113][T17638]  do_syscall_64+0xfa/0xf80
[  909.805134][T17638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.805153][T17638]  ? clear_bhb_loop+0x60/0xb0
[  909.805176][T17638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.805194][T17638] RIP: 0033:0x7fda8b58f749
[  909.805212][T17638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  909.805228][T17638] RSP: 002b:00007fda8c3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  909.805249][T17638] RAX: ffffffffffffffda RBX: 00007fda8b7e5fa0 RCX: 00007fda8b58f749
[  909.805264][T17638] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  909.805276][T17638] RBP: 00007fda8c3d7090 R08: 0000000000000000 R09: 0000000000000000
[  909.805288][T17638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  909.805300][T17638] R13: 00007fda8b7e6038 R14: 00007fda8b7e5fa0 R15: 00007fda8b90fa28
[  909.805332][T17638]  </TASK>
[  910.378063][T17638] debugfs: out of free dentries, can not create file 'netdev@ffff888079182618'
[  910.408577][T16886] usb 4-1: Using ep0 maxpacket: 16
[  910.415890][T16886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  910.428024][T16886] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  910.464109][ T6275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  910.483635][ T6275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  910.510036][T16886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.548637][T16886] usb 4-1: config 0 descriptor??
[  910.578423][  T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  910.641311][  T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  910.687179][T17648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3093'.
[  910.852009][T17661] loop6: detected capacity change from 0 to 2640
[  910.874815][T17661] buffer_io_error: 10 callbacks suppressed
[  910.874833][T17661] Buffer I/O error on dev loop6, logical block 0, async page read
[  910.910068][T17661] Buffer I/O error on dev loop6, logical block 0, async page read
[  910.960151][T17661] Buffer I/O error on dev loop6, logical block 0, async page read
[  910.960778][T17664] loop6: detected capacity change from 2640 to 524288000
[  910.988553][T17661] Buffer I/O error on dev loop6, logical block 0, async page read
[  911.008478][ T5921] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  911.022845][T16886] mcp2221 0003:04D8:00DD.002B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  911.037311][T17661] Buffer I/O error on dev loop6, logical block 0, async page read
[  911.070109][T17661] Buffer I/O error on dev loop6, logical block 0, async page read
[  911.099346][T17661] Buffer I/O error on dev loop6, logical block 0, async page read
[  911.120348][T17661] Buffer I/O error on dev loop6, logical block 0, async page read
[  911.133337][T17661] ldm_validate_partition_table(): Disk read failed.
[  911.154707][T17661] Buffer I/O error on dev loop6, logical block 0, async page read
[  911.163681][ T5921] usb 5-1: Using ep0 maxpacket: 32
[  911.171541][T17661] Buffer I/O error on dev loop6, logical block 0, async page read
[  911.181966][ T5921] usb 5-1: config 0 has an invalid interface number: 150 but max is 0
[  911.190851][T17661] Dev loop6: unable to read RDB block 0
[  911.196885][ T5921] usb 5-1: config 0 has no interface number 0
[  911.203775][T17661]  loop6: unable to read partition table
[  911.210837][ T5921] usb 5-1: config 0 interface 150 has no altsetting 0
[  911.220872][T17661] loop_reread_partitions: partition scan of loop6 (ir�c����VU�X��G�����ZtM<I�i8NL���	��W�@��Q6��%�������) failed (rc=-5)
[  911.253278][ T5921] usb 5-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01
[  911.286603][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  911.302461][ T5201] ldm_validate_partition_table(): Disk read failed.
[  911.313953][ T5201] Dev loop6: unable to read RDB block 0
[  911.321371][ T5921] usb 5-1: Product: syz
[  911.325662][ T5921] usb 5-1: Manufacturer: syz
[  911.331853][ T5201]  loop6: unable to read partition table
[  911.349151][ T5921] usb 5-1: SerialNumber: syz
[  911.361831][ T5921] usb 5-1: config 0 descriptor??
[  911.386335][ T5921] gspca_main: pac7311-2.14.0 probing 093a:2603
[  911.423429][T17635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  911.432380][T17635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  911.445498][T17635] openvswitch: netlink: Duplicate or invalid key (type 0).
[  911.473230][T17635] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  911.486179][   T24] usb 4-1: USB disconnect, device number 13
[  911.668992][T17672] Cannot find del_set index 0 as target
[  911.948124][   T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  911.953063][ T5921] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110
[  911.964364][ T5921] pac7311 5-1:0.150: probe with driver pac7311 failed with error -110
[  912.152003][T17679] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  912.159410][T17679] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  912.202972][T17679] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  912.209791][T17679] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  912.215947][T17679] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  912.218163][   T24] usb 3-1: Using ep0 maxpacket: 16
[  912.237026][T17679] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  912.285946][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  912.298335][   T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  912.307519][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.324938][   T24] usb 3-1: config 0 descriptor??
[  912.346329][T17679] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  912.353286][T17679] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  912.371172][T17679] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  912.677268][   T24] usbhid 3-1:0.0: can't add hid device: -71
[  912.694450][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  912.740775][   T24] usb 3-1: USB disconnect, device number 32
[  912.902617][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  912.919875][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  912.929336][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  912.938901][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  912.946833][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  913.405903][T17698] xt_hashlimit: size too large, truncated to 1048576
[  913.739441][T17493] syz_tun (unregistering): left allmulticast mode
[  913.779690][T17493] syz_tun (unregistering): left promiscuous mode
[  913.809807][T17493] bridge0: port 4(syz_tun) entered disabled state
[  914.035156][T17705] FAULT_INJECTION: forcing a failure.
[  914.035156][T17705] name failslab, interval 1, probability 0, space 0, times 0
[  914.070720][   T24] usb 5-1: USB disconnect, device number 27
[  914.091047][T17705] CPU: 1 UID: 0 PID: 17705 Comm: syz.2.3105 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  914.091079][T17705] Tainted: [L]=SOFTLOCKUP
[  914.091087][T17705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  914.091101][T17705] Call Trace:
[  914.091109][T17705]  <TASK>
[  914.091119][T17705]  dump_stack_lvl+0x189/0x250
[  914.091159][T17705]  ? __pfx____ratelimit+0x10/0x10
[  914.091178][T17705]  ? __pfx_dump_stack_lvl+0x10/0x10
[  914.091201][T17705]  ? __pfx__printk+0x10/0x10
[  914.091235][T17705]  ? __pfx___might_resched+0x10/0x10
[  914.091255][T17705]  ? fs_reclaim_acquire+0x7d/0x100
[  914.091281][T17705]  should_fail_ex+0x414/0x560
[  914.091315][T17705]  should_failslab+0xa8/0x100
[  914.091349][T17705]  kmem_cache_alloc_noprof+0x88/0x710
[  914.091378][T17705]  ? security_inode_alloc+0x39/0x330
[  914.091408][T17705]  security_inode_alloc+0x39/0x330
[  914.091438][T17705]  inode_init_always_gfp+0x9ed/0xdc0
[  914.091468][T17705]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  914.091489][T17705]  alloc_inode+0x82/0x1b0
[  914.091512][T17705]  new_inode+0x22/0x170
[  914.091540][T17705]  __debugfs_create_file+0xb8/0x400
[  914.091564][T17705]  debugfs_create_file_full+0x3f/0x60
[  914.091588][T17705]  ref_tracker_dir_debugfs+0x14e/0x2d0
[  914.091609][T17705]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  914.091655][T17705]  ? trace_kmalloc+0x1f/0xb0
[  914.091670][T17705]  ? __kvmalloc_node_noprof+0x5f5/0x920
[  914.091695][T17705]  ? __raw_spin_lock_init+0x45/0x100
[  914.091725][T17705]  alloc_netdev_mqs+0x272/0x11b0
[  914.091751][T17705]  ? __pfx_geneve_setup+0x10/0x10
[  914.091783][T17705]  rtnl_create_link+0x31f/0xcf0
[  914.091818][T17705]  rtnl_newlink_create+0x25c/0xb00
[  914.091847][T17705]  ? __mutex_lock+0x5bb/0x1350
[  914.091873][T17705]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  914.091901][T17705]  ? __pfx___mutex_lock+0x10/0x10
[  914.091931][T17705]  ? ns_capable+0x8a/0xf0
[  914.091954][T17705]  rtnl_newlink+0x16e7/0x1c90
[  914.091989][T17705]  ? __pfx_rtnl_newlink+0x10/0x10
[  914.092008][T17705]  ? do_syscall_64+0xfa/0xf80
[  914.092026][T17705]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.092079][T17705]  ? kasan_quarantine_put+0xdd/0x220
[  914.092099][T17705]  ? lockdep_hardirqs_on+0x98/0x140
[  914.092126][T17705]  ? kmem_cache_free+0x197/0x620
[  914.092144][T17705]  ? nlmon_xmit+0xb0/0x100
[  914.092177][T17705]  ? __lock_acquire+0x6b6/0x2cf0
[  914.092200][T17705]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  914.092226][T17705]  ? __dev_queue_xmit+0x289/0x3140
[  914.092252][T17705]  ? __dev_queue_xmit+0x289/0x3140
[  914.092276][T17705]  ? __dev_queue_xmit+0x289/0x3140
[  914.092336][T17705]  ? __pfx_rtnl_newlink+0x10/0x10
[  914.092357][T17705]  rtnetlink_rcv_msg+0x7cf/0xb70
[  914.092383][T17705]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  914.092402][T17705]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  914.092420][T17705]  ? ref_tracker_free+0x63a/0x7d0
[  914.092441][T17705]  ? __asan_memcpy+0x40/0x70
[  914.092457][T17705]  ? __pfx_ref_tracker_free+0x10/0x10
[  914.092474][T17705]  ? __skb_clone+0x63/0x7a0
[  914.092508][T17705]  netlink_rcv_skb+0x208/0x470
[  914.092534][T17705]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  914.092557][T17705]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  914.092594][T17705]  ? netlink_deliver_tap+0x2e/0x1b0
[  914.092627][T17705]  netlink_unicast+0x82f/0x9e0
[  914.092658][T17705]  ? __pfx_netlink_unicast+0x10/0x10
[  914.092682][T17705]  ? netlink_sendmsg+0x642/0xb30
[  914.092705][T17705]  ? skb_put+0x11b/0x210
[  914.092729][T17705]  netlink_sendmsg+0x805/0xb30
[  914.092764][T17705]  ? __pfx_netlink_sendmsg+0x10/0x10
[  914.092794][T17705]  ? aa_sock_msg_perm+0xf1/0x1b0
[  914.092820][T17705]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  914.092838][T17705]  ? __pfx_netlink_sendmsg+0x10/0x10
[  914.092882][T17705]  __sock_sendmsg+0x21c/0x270
[  914.092916][T17705]  ____sys_sendmsg+0x505/0x820
[  914.092947][T17705]  ? __pfx_____sys_sendmsg+0x10/0x10
[  914.092981][T17705]  ? import_iovec+0x74/0xa0
[  914.093009][T17705]  ___sys_sendmsg+0x21f/0x2a0
[  914.093035][T17705]  ? __pfx____sys_sendmsg+0x10/0x10
[  914.093068][T17705]  ? rcu_read_lock_any_held+0xb3/0x120
[  914.093123][T17705]  ? __fget_files+0x2a/0x420
[  914.093148][T17705]  ? __fget_files+0x3a0/0x420
[  914.093185][T17705]  __x64_sys_sendmsg+0x19b/0x260
[  914.093214][T17705]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  914.093250][T17705]  ? __pfx_ksys_write+0x10/0x10
[  914.093275][T17705]  ? do_syscall_64+0xbe/0xf80
[  914.093302][T17705]  do_syscall_64+0xfa/0xf80
[  914.093325][T17705]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.093353][T17705]  ? clear_bhb_loop+0x60/0xb0
[  914.093379][T17705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.093398][T17705] RIP: 0033:0x7fda8b58f749
[  914.093417][T17705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  914.093434][T17705] RSP: 002b:00007fda8c3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  914.093457][T17705] RAX: ffffffffffffffda RBX: 00007fda8b7e5fa0 RCX: 00007fda8b58f749
[  914.093472][T17705] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  914.093485][T17705] RBP: 00007fda8c3d7090 R08: 0000000000000000 R09: 0000000000000000
[  914.093499][T17705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  914.093511][T17705] R13: 00007fda8b7e6038 R14: 00007fda8b7e5fa0 R15: 00007fda8b90fa28
[  914.093546][T17705]  </TASK>
[  914.096857][T17705] debugfs: out of free dentries, can not create file 'netdev@ffff88807b9bc618'
[  914.249481][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout
[  914.455208][T12563] Bluetooth: hci1: command 0x0c1a tx timeout
[  914.461929][ T5838] Bluetooth: hci5: command 0x040f tx timeout
[  914.465949][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  914.996929][ T5830] Bluetooth: hci2: command tx timeout
[  915.268152][T17722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3109'.
[  915.711755][T17695] chnl_net:caif_netlink_parms(): no params data found
[  915.877183][T17733] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3111'.
[  916.084347][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3111'.
[  916.618916][T17724] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  916.630811][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[  916.719372][T17724] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  916.748491][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  916.869779][T17724] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  916.899691][T17724] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  916.906518][T17724] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  916.912933][T17724] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  916.945526][T17724] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  918.114901][T17695] bridge0: port 1(bridge_slave_0) entered blocking state
[  918.129901][T17695] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.137116][T17695] bridge_slave_0: entered allmulticast mode
[  918.156255][T17695] bridge_slave_0: entered promiscuous mode
[  918.171987][T17695] bridge0: port 2(bridge_slave_1) entered blocking state
[  918.195326][T17695] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.221455][T17695] bridge_slave_1: entered allmulticast mode
[  918.229758][T17695] bridge_slave_1: entered promiscuous mode
[  918.288316][ T5877] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  918.298228][   T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  918.340921][T17695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  918.386123][T17695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  918.448394][ T5877] usb 2-1: Using ep0 maxpacket: 32
[  918.455201][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  918.469480][   T24] usb 5-1: Using ep0 maxpacket: 32
[  918.494665][   T24] usb 5-1: config 0 has an invalid interface number: 150 but max is 0
[  918.506153][   T24] usb 5-1: config 0 has no interface number 0
[  918.512953][   T24] usb 5-1: config 0 interface 150 has no altsetting 0
[  918.519356][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  918.526654][   T24] usb 5-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01
[  918.539139][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.547148][   T24] usb 5-1: Product: syz
[  918.552809][   T24] usb 5-1: Manufacturer: syz
[  918.557467][   T24] usb 5-1: SerialNumber: syz
[  918.562305][ T5877] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  918.562334][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.595239][T17695] team0: Port device team_slave_0 added
[  918.615959][ T5877] usb 2-1: config 0 descriptor??
[  918.622833][   T24] usb 5-1: config 0 descriptor??
[  918.639345][T17695] team0: Port device team_slave_1 added
[  918.660068][T12563] Bluetooth: hci3: command 0x0c1a tx timeout
[  918.691591][   T24] gspca_main: pac7311-2.14.0 probing 093a:2603
[  918.738561][T12563] Bluetooth: hci5: command 0x040f tx timeout
[  918.811465][T16071] veth0_to_bridge: left allmulticast mode
[  918.817264][T16071] veth0_to_bridge: left promiscuous mode
[  918.824687][T16071] bridge0: port 3(veth0_to_bridge) entered disabled state
[  918.835718][T16071] bridge_slave_1: left allmulticast mode
[  918.841633][T16071] bridge_slave_1: left promiscuous mode
[  918.847516][T16071] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.898429][T12563] Bluetooth: hci4: command 0x0c1a tx timeout
[  918.933894][T17757] Cannot find add_set index 2 as target
[  918.944367][T16071] 
: left allmulticast mode
[  918.957923][T16071] 
: left promiscuous mode
[  918.964318][T17758] xt_hashlimit: size too large, truncated to 1048576
[  918.971498][T16071] bridge0: port 1(
) entered disabled state
[  918.980111][T12563] Bluetooth: hci1: command 0x0c1a tx timeout
[  918.980161][ T5830] Bluetooth: hci2: command 0x040f tx timeout
[  919.100120][ T5877] ft260 0003:0403:6030.002C: unknown main item tag 0x7
[  919.239163][   T24] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110
[  919.269625][ T5877] ft260 0003:0403:6030.002C: chip code: 6524 8100
[  919.281975][   T24] pac7311 5-1:0.150: probe with driver pac7311 failed with error -110
[  919.470297][ T5877] ft260 0003:0403:6030.002C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[  919.556236][T16071] bond2 (unregistering): (slave erspan1): Releasing active interface
[  919.566090][T16071] erspan1 (unregistering): left promiscuous mode
[  919.670987][ T5877] ft260 0003:0403:6030.002C: failed to retrieve status: -32, no wakeup
[  919.691567][T16071] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  919.833477][T16071] bond0 (unregistering): (slave 
7
0
): Releasing backup interface
[  919.843098][T16071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  919.853656][T16071] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  919.863665][T16071] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface
[  919.874488][T16071] bond0 (unregistering): Released all slaves
[  919.909278][ T5877] usb 2-1: USB disconnect, device number 38
[  920.002559][T16071] bond1 (unregistering): Released all slaves
[  920.112214][T16071] bond2 (unregistering): Released all slaves
[  920.212280][T16071] bond3 (unregistering): Released all slaves
[  920.317546][T16071] bond4 (unregistering): Released all slaves
[  920.418445][T16071] bond5 (unregistering): Released all slaves
[  920.544979][T16071] bond6 (unregistering): Released all slaves
[  920.657697][T16071] bond7 (unregistering): Released all slaves
[  920.683094][T17695] batman_adv: batadv0: Adding interface: batadv_slave_0
[  920.690422][T17695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  920.718983][ T5877] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  920.721247][T17695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  920.775527][T17695] batman_adv: batadv0: Adding interface: batadv_slave_1
[  920.791008][T17695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  920.853030][T17695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  920.893651][T16071] @�;: left promiscuous mode
[  920.901417][ T5877] usb 2-1: Using ep0 maxpacket: 16
[  920.910870][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  920.953029][ T5877] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  920.963002][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.979100][ T5877] usb 2-1: config 0 descriptor??
[  921.058441][ T5830] Bluetooth: hci2: command 0x040f tx timeout
[  921.113924][T16071] tipc: Disabling bearer <udp:syz2>
[  921.138157][T16071] tipc: Left network mode
[  921.466772][T17774] netlink: 'syz.0.3120': attribute type 1 has an invalid length.
[  921.541283][T13601] usb 5-1: USB disconnect, device number 28
[  921.643070][T17776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3120'.
[  921.685937][ T5877] mcp2221 0003:04D8:00DD.002D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  921.844111][T17695] hsr_slave_0: entered promiscuous mode
[  921.920212][T17695] hsr_slave_1: entered promiscuous mode
[  922.003773][T17695] debugfs: 'hsr0' already exists in 'hsr'
[  922.042526][T17695] Cannot create hsr debugfs directory
[  922.130763][T17768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  922.177497][T17768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  922.191999][T17768] openvswitch: netlink: Duplicate or invalid key (type 0).
[  922.199804][T17768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  922.213927][ T5877] usb 2-1: USB disconnect, device number 39
[  923.145291][ T5830] Bluetooth: hci2: command 0x040f tx timeout
[  924.087458][T17807] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  924.095082][T17807] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  924.103265][T17807] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  924.110146][T17807] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  924.192548][T17807] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  925.057738][T17828] xt_hashlimit: size too large, truncated to 1048576
[  925.174860][T17695] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  925.212553][T17695] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  925.279244][T17695] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  925.389922][T17695] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  925.624782][T16071] hsr_slave_0: left promiscuous mode
[  925.655906][T16071] hsr_slave_1: left promiscuous mode
[  925.664399][T16071] batman_adv: batadv0: Removing interface: 
2
6��
[  925.688309][T13601] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  925.778329][T12563] Bluetooth: hci3: command 0x0c1a tx timeout
[  925.838290][T13601] usb 2-1: Using ep0 maxpacket: 32
[  925.845236][T13601] usb 2-1: config 0 has an invalid interface number: 150 but max is 0
[  925.856867][T13601] usb 2-1: config 0 has no interface number 0
[  925.873320][T13601] usb 2-1: config 0 interface 150 has no altsetting 0
[  925.899803][T13601] usb 2-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01
[  925.915273][T13601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.940672][T13601] usb 2-1: Product: syz
[  925.947124][T13601] usb 2-1: Manufacturer: syz
[  925.960563][T13601] usb 2-1: SerialNumber: syz
[  925.995135][T13601] usb 2-1: config 0 descriptor??
[  926.026331][T13601] gspca_main: pac7311-2.14.0 probing 093a:2603
[  926.195506][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  926.207444][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  926.214185][T12563] Bluetooth: hci2: command 0x040f tx timeout
[  926.218113][ T5836] Bluetooth: hci5: command 0x040f tx timeout
[  926.560521][T13601] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110
[  926.630659][T13601] pac7311 2-1:0.150: probe with driver pac7311 failed with error -110
[  927.360350][T16071] team0 (unregistering): Port device team_slave_1 removed
[  927.442174][T16071] team0 (unregistering): Port device team_slave_0 removed
[  927.618397][T13601] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  927.790521][T13601] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  927.821892][T13601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  927.838305][T13601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  927.881537][T13601] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  928.088412][T13601] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  928.102671][T13601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.126295][T13601] usb 1-1: config 0 descriptor??
[  928.258779][T12563] Bluetooth: hci2: command 0x040f tx timeout
[  928.541643][ T5960] usb 2-1: USB disconnect, device number 40
[  928.553226][T13601] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0
[  928.632579][T13601] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  929.013962][T17695] 8021q: adding VLAN 0 to HW filter on device bond0
[  929.058169][ T5960] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  929.085673][T16071] IPVS: stop unused estimator thread 0...
[  929.105271][T17695] 8021q: adding VLAN 0 to HW filter on device team0
[  929.118491][ T5947] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  929.141311][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.148556][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  929.173818][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.181034][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  929.228346][ T5960] usb 2-1: Using ep0 maxpacket: 8
[  929.256719][ T5960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  929.281057][ T5960] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  929.298817][ T5947] usb 3-1: Using ep0 maxpacket: 16
[  929.308373][ T5960] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  929.319278][ T5947] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  929.334566][ T5960] usb 2-1: Product: syz
[  929.346111][ T5960] usb 2-1: Manufacturer: syz
[  929.351159][ T5947] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  929.353066][ T5960] usb 2-1: SerialNumber: syz
[  929.370985][ T5947] usb 3-1: config 0 has no interface number 0
[  929.402442][ T5947] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  929.434239][ T5947] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  929.453570][T17695] 8021q: adding VLAN 0 to HW filter on device batadv0
[  929.461750][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  929.479994][ T5921] usb 1-1: USB disconnect, device number 59
[  929.500232][ T5947] usb 3-1: Product: syz
[  929.524107][ T5947] usb 3-1: SerialNumber: syz
[  929.558901][ T5947] usb 3-1: config 0 descriptor??
[  929.577243][ T5947] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[  929.597730][ T5960] usb 2-1: Handspring Visor / Palm OS: port 0, is for Console use
[  929.612863][ T5960] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  929.634434][T17695] veth0_vlan: entered promiscuous mode
[  929.646412][ T5960] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[  929.671954][T17695] veth1_vlan: entered promiscuous mode
[  929.686662][T17873] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3135'.
[  929.729696][T17695] veth0_macvtap: entered promiscuous mode
[  929.742884][T17695] veth1_macvtap: entered promiscuous mode
[  929.775578][ T5947] usb 3-1: USB disconnect, device number 33
[  929.797289][ T5960] usb 2-1: palm_os_3_probe - error -71 getting bytes available request
[  929.807302][T17695] batman_adv: batadv0: Interface activated: batadv_slave_0
[  929.816146][ T5960] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  929.836388][ T5960] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  929.882095][T17695] batman_adv: batadv0: Interface activated: batadv_slave_1
[  929.904306][ T3550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  929.913570][ T5960] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  929.924020][ T3550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  929.939855][ T3550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  929.956778][ T5960] usb 2-1: USB disconnect, device number 41
[  929.970083][ T5960] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  929.983267][ T3550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  929.994713][ T5960] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  930.005454][ T5960] visor 2-1:1.0: device disconnected
[  930.140427][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.157550][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.215168][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.225298][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  931.365650][T17898] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  931.426878][T17898] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  931.434970][ T5960] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  931.444391][T17898] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  931.454898][T17898] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  931.474085][T17898] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  931.599955][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  931.609878][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10
[  931.646392][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 255, setting to 64
[  931.667255][ T5960] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  931.689092][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.718939][ T5960] usb 5-1: config 0 descriptor??
[  931.725626][T17905] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  932.035316][ T5960] ath6kl: Failed to submit usb control message: -71
[  932.108465][ T5960] ath6kl: unable to send the bmi data to the device: -71
[  932.115604][ T5960] ath6kl: Unable to send get target info: -71
[  932.125852][ T5960] ath6kl: Failed to init ath6kl core: -71
[  932.140783][ T5960] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  932.164739][ T5960] usb 5-1: USB disconnect, device number 29
[  932.781469][T17935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  932.854673][T17935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  932.939916][T17929] pim6reg: entered allmulticast mode
[  933.153293][   T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  933.318596][   T24] usb 5-1: Using ep0 maxpacket: 32
[  933.329984][   T24] usb 5-1: config 0 has an invalid interface number: 230 but max is 0
[  933.357153][   T24] usb 5-1: config 0 has no interface number 0
[  933.476052][ T5836] Bluetooth: hci5: command 0x040f tx timeout
[  933.482450][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout
[  933.483091][T12563] Bluetooth: hci4: command 0x0c1a tx timeout
[  933.494703][   T24] usb 5-1: config 0 interface 230 has no altsetting 0
[  933.548693][T12563] Bluetooth: hci1: command 0x0c1a tx timeout
[  933.555004][ T5836] Bluetooth: hci2: command 0x040f tx timeout
[  933.568767][   T24] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  933.577900][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.585909][   T24] usb 5-1: Product: syz
[  933.590474][   T24] usb 5-1: Manufacturer: syz
[  933.595151][   T24] usb 5-1: SerialNumber: syz
[  933.633655][   T24] usb 5-1: config 0 descriptor??
[  933.645896][   T24] ums-usbat 5-1:0.230: USB Mass Storage device detected
[  933.745116][   T24] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  933.898524][   T24] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5
[  933.960994][   T24] usb 5-1: USB disconnect, device number 30
[  934.303035][T17943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3151'.
[  934.750905][ T5921] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  934.790469][T17954] fuse: Bad value for 'fd'
[  934.919922][ T5921] usb 3-1: config index 0 descriptor too short (expected 65183, got 72)
[  934.954648][ T5921] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  934.972200][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.023161][ T5921] usb 3-1: Product: syz
[  935.048836][ T5921] usb 3-1: Manufacturer: syz
[  935.107471][ T5921] usb 3-1: SerialNumber: syz
[  935.343909][ T5921] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  935.372534][T13601] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  935.680011][ T5921] usb 3-1: USB disconnect, device number 34
[  936.082089][   T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  936.249742][   T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  936.262672][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.290713][   T24] usb 5-1: config 0 descriptor??
[  936.329070][   T24] gspca_main: spca508-2.14.0 probing 8086:0110
[  936.418916][T13601] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  936.447329][T13601] ath9k_htc: Failed to initialize the device
[  936.466031][ T5921] usb 3-1: ath9k_htc: USB layer deinitialized
[  936.535896][   T24] gspca_spca508: reg_read err -32
[  936.559782][   T24] gspca_spca508: reg_read err -32
[  936.616752][   T24] gspca_spca508: reg_read err -32
[  936.686054][   T24] gspca_spca508: reg_read err -32
[  936.902530][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  936.917237][   T24] gspca_spca508: reg write: error -71
[  936.923880][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  936.930364][   T24] spca508 5-1:0.0: probe with driver spca508 failed with error -71
[  936.943248][   T24] usb 5-1: USB disconnect, device number 31
[  936.988678][T13601] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  937.196094][T13601] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  937.205891][T13601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.253156][T13601] usb 3-1: Product: syz
[  937.262190][T13601] usb 3-1: Manufacturer: syz
[  937.275532][T13601] usb 3-1: SerialNumber: syz
[  937.283924][T13601] usb 3-1: config 0 descriptor??
[  937.295216][T17978] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  937.308594][T17978] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  937.357371][T17978] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  937.373455][T17978] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  937.448599][T17978] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  938.389066][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3166'.
[  938.444565][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3166'.
[  938.716843][T13601] usb 3-1: f81604_read: reg: 200f failed: -EPROTO
[  938.770347][T13601] usb 3-1: USB disconnect, device number 35
[  938.869940][T13601] usb 3-1: f81604_read: reg: 100f failed: -ENODEV
[  939.051625][ T5496] usb 3-1: f81604_read: reg: 200f failed: -ENODEV
[  939.125138][T13601] usb 3-1: f81604_read: reg: 200f failed: -ENODEV
[  939.138545][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout
[  939.378350][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  939.378378][T12563] Bluetooth: hci4: command 0x0c1a tx timeout
[  939.392919][ T5830] Bluetooth: hci5: command 0x040f tx timeout
[  939.459817][ T5836] Bluetooth: hci2: command 0x040f tx timeout
[  939.525937][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'.
[  940.673198][T18003] netlink: 'syz.1.3169': attribute type 6 has an invalid length.
[  940.681148][T18033] xt_CT: You must specify a L4 protocol and not use inversions on it
[  940.702011][T18037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3173'.
[  940.990443][ T5921] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  941.191010][ T5921] usb 1-1: too many configurations: 17, using maximum allowed: 8
[  941.233477][ T5921] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  941.243686][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  941.252453][ T5921] usb 1-1: Product: syz
[  941.258426][ T5921] usb 1-1: Manufacturer: syz
[  941.272301][ T5921] usb 1-1: SerialNumber: syz
[  941.298189][ T5959] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  941.332429][ T5921] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  941.355662][T13601] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  941.469060][ T5959] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  941.516475][ T5959] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  941.553636][ T5959] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  941.671196][ T5959] usb 3-1: config 0 interface 0 has no altsetting 0
[  941.683730][ T5959] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  941.696756][ T5959] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  941.754049][ T5959] usb 3-1: config 0 interface 0 has no altsetting 0
[  941.762265][ T5959] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  941.775442][ T5959] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  941.789867][ T5959] usb 3-1: config 0 interface 0 has no altsetting 0
[  941.831117][ T5959] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  941.901996][ T5959] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  941.950957][ T5959] usb 3-1: config 0 interface 0 has no altsetting 0
[  941.991947][ T5959] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  942.052647][ T5959] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  942.082415][ T5959] usb 3-1: config 0 interface 0 has no altsetting 0
[  942.171852][ T5959] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  942.191110][ T5959] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  942.204123][ T5921] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  942.252026][ T5959] usb 3-1: config 0 interface 0 has no altsetting 0
[  942.276290][ T5959] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  942.297172][ T5959] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  942.346278][ T5959] usb 3-1: config 0 interface 0 has no altsetting 0
[  942.368683][ T5921] usb 5-1: Using ep0 maxpacket: 32
[  942.379924][ T5921] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  942.392611][ T5921] usb 5-1: config 0 has no interface number 0
[  942.404009][ T5959] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  942.423641][T13601] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  942.434643][ T5921] usb 5-1: config 0 interface 184 has no altsetting 0
[  942.463294][T13601] ath9k_htc: Failed to initialize the device
[  942.485718][ T5959] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  942.500584][ T5921] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  942.564499][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.567741][ T5959] usb 3-1: config 0 interface 0 has no altsetting 0
[  942.590933][T13601] usb 1-1: ath9k_htc: USB layer deinitialized
[  942.620157][ T5959] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  942.639937][ T5921] usb 5-1: Product: syz
[  942.655362][ T5921] usb 5-1: Manufacturer: syz
[  942.674562][ T5959] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  942.685521][ T5921] usb 5-1: SerialNumber: syz
[  942.721999][ T5959] usb 3-1: Product: syz
[  942.750496][ T5921] usb 5-1: config 0 descriptor??
[  942.766025][ T5959] usb 3-1: Manufacturer: syz
[  942.793300][ T5959] usb 3-1: SerialNumber: syz
[  942.798798][ T5921] smsc75xx v1.0.0
[  942.844585][ T5959] usb 3-1: config 0 descriptor??
[  942.880375][ T5959] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  943.119515][    C1] usb 3-1: yurex_control_callback - control failed: -71
[  943.138413][ T5959] usb 3-1: USB disconnect, device number 36
[  943.176038][ T5959] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  943.184484][T18059] netlink: 'syz.4.3178': attribute type 2 has an invalid length.
[  943.487209][ T5921] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  943.545288][ T5921] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  944.225170][ T5959] usb 1-1: USB disconnect, device number 60
[  944.465341][T18085] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  944.472229][T18085] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  944.479074][T18085] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  944.485357][T18085] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  944.493288][T18085] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  945.006382][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3186'.
[  946.258484][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout
[  946.585018][ T5830] Bluetooth: hci2: command 0x040f tx timeout
[  946.585051][ T5838] Bluetooth: hci5: command 0x040f tx timeout
[  946.597296][T12563] Bluetooth: hci4: command 0x0c1a tx timeout
[  946.608484][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  946.664873][T18119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3189'.
[  946.691489][T18119] 
: renamed from bridge_slave_0 (while UP)
[  947.019969][ T5921] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71
[  947.031164][ T5921] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71
[  947.267596][ T5921] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  947.303243][ T5921] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  947.386195][ T5921] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  947.468672][ T5921] usb 5-1: USB disconnect, device number 32
[  947.698745][ T5917] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  947.884346][ T5917] usb 4-1: not running at top speed; connect to a high speed hub
[  947.923228][ T5917] usb 4-1: config 95 has an invalid interface number: 1 but max is 0
[  947.954558][ T5917] usb 4-1: config 95 has no interface number 0
[  947.974388][ T5917] usb 4-1: config 95 interface 1 has no altsetting 0
[  947.995857][ T5917] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[  948.018861][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.043609][ T5917] usb 4-1: Product: syz
[  948.056139][ T5917] usb 4-1: Manufacturer: syz
[  948.070974][ T5917] usb 4-1: SerialNumber: syz
[  948.245357][T18149] FAULT_INJECTION: forcing a failure.
[  948.245357][T18149] name failslab, interval 1, probability 0, space 0, times 0
[  948.344608][T18149] CPU: 1 UID: 0 PID: 18149 Comm: syz.1.3199 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  948.344638][T18149] Tainted: [L]=SOFTLOCKUP
[  948.344645][T18149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  948.344656][T18149] Call Trace:
[  948.344664][T18149]  <TASK>
[  948.344672][T18149]  dump_stack_lvl+0x189/0x250
[  948.344698][T18149]  ? __pfx____ratelimit+0x10/0x10
[  948.344717][T18149]  ? __pfx_dump_stack_lvl+0x10/0x10
[  948.344739][T18149]  ? __pfx__printk+0x10/0x10
[  948.344768][T18149]  ? __pfx___might_resched+0x10/0x10
[  948.344788][T18149]  ? fs_reclaim_acquire+0x7d/0x100
[  948.344812][T18149]  should_fail_ex+0x414/0x560
[  948.344844][T18149]  should_failslab+0xa8/0x100
[  948.344868][T18149]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  948.344897][T18149]  ? __alloc_skb+0x255/0x430
[  948.344915][T18149]  ? napi_skb_cache_get+0x4a5/0x780
[  948.344933][T18149]  ? napi_skb_cache_get+0x151/0x780
[  948.344956][T18149]  __alloc_skb+0x255/0x430
[  948.344977][T18149]  ? __pfx___alloc_skb+0x10/0x10
[  948.345019][T18149]  ? netlink_ack_tlv_len+0x6c/0x210
[  948.345065][T18149]  netlink_ack+0x146/0xa50
[  948.345086][T18149]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  948.345105][T18149]  ? ref_tracker_free+0x63a/0x7d0
[  948.345123][T18149]  ? __asan_memcpy+0x40/0x70
[  948.345139][T18149]  ? __pfx_ref_tracker_free+0x10/0x10
[  948.345155][T18149]  ? __skb_clone+0x63/0x7a0
[  948.345186][T18149]  netlink_rcv_skb+0x28c/0x470
[  948.345210][T18149]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  948.345231][T18149]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  948.345265][T18149]  ? netlink_deliver_tap+0x2e/0x1b0
[  948.345295][T18149]  netlink_unicast+0x82f/0x9e0
[  948.345324][T18149]  ? __pfx_netlink_unicast+0x10/0x10
[  948.345346][T18149]  ? netlink_sendmsg+0x642/0xb30
[  948.345368][T18149]  ? skb_put+0x11b/0x210
[  948.345391][T18149]  netlink_sendmsg+0x805/0xb30
[  948.345423][T18149]  ? __pfx_netlink_sendmsg+0x10/0x10
[  948.345450][T18149]  ? aa_sock_msg_perm+0xf1/0x1b0
[  948.345476][T18149]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  948.345493][T18149]  ? __pfx_netlink_sendmsg+0x10/0x10
[  948.345518][T18149]  __sock_sendmsg+0x21c/0x270
[  948.345547][T18149]  ____sys_sendmsg+0x505/0x820
[  948.345574][T18149]  ? __pfx_____sys_sendmsg+0x10/0x10
[  948.345605][T18149]  ? import_iovec+0x74/0xa0
[  948.345629][T18149]  ___sys_sendmsg+0x21f/0x2a0
[  948.345653][T18149]  ? __pfx____sys_sendmsg+0x10/0x10
[  948.345681][T18149]  ? rcu_read_lock_any_held+0xb3/0x120
[  948.345728][T18149]  ? __fget_files+0x2a/0x420
[  948.345750][T18149]  ? __fget_files+0x3a0/0x420
[  948.345782][T18149]  __x64_sys_sendmsg+0x19b/0x260
[  948.345807][T18149]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  948.345838][T18149]  ? __pfx_ksys_write+0x10/0x10
[  948.345859][T18149]  ? do_syscall_64+0xbe/0xf80
[  948.345882][T18149]  do_syscall_64+0xfa/0xf80
[  948.345902][T18149]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.345920][T18149]  ? clear_bhb_loop+0x60/0xb0
[  948.345942][T18149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.345959][T18149] RIP: 0033:0x7fdc2cd8f749
[  948.345975][T18149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  948.345991][T18149] RSP: 002b:00007fdc2aff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  948.346010][T18149] RAX: ffffffffffffffda RBX: 00007fdc2cfe5fa0 RCX: 00007fdc2cd8f749
[  948.346024][T18149] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  948.346036][T18149] RBP: 00007fdc2aff6090 R08: 0000000000000000 R09: 0000000000000000
[  948.346052][T18149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  948.346064][T18149] R13: 00007fdc2cfe6038 R14: 00007fdc2cfe5fa0 R15: 00007fdc2d10fa28
[  948.346093][T18149]  </TASK>
[  948.369313][ T5921] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  949.017267][ T5917] usb 4-1: USB disconnect, device number 14
[  949.017303][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'.
[  949.128349][ T5921] usb 1-1: Using ep0 maxpacket: 16
[  949.182252][T16280] udevd[16280]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  949.420823][ T5921] usb 1-1: config 0 has an invalid interface number: 28 but max is 0
[  949.464355][ T5921] usb 1-1: config 0 has no interface number 0
[  949.505268][ T5921] usb 1-1: config 0 interface 28 altsetting 8 endpoint 0xD has invalid maxpacket 512, setting to 64
[  949.580479][ T5921] usb 1-1: config 0 interface 28 has no altsetting 0
[  949.676374][ T5921] usb 1-1: Dual-Role OTG device on HNP port
[  949.733395][ T5921] usb 1-1: New USB device found, idVendor=12d1, idProduct=937e, bcdDevice=af.67
[  949.743072][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.756406][ T5921] usb 1-1: Product: syz
[  949.934641][T18161] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  950.008683][T18161] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  950.017278][T18161] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  950.026207][T18161] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  950.033015][T18161] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  950.075134][ T5921] usb 1-1: Manufacturer: syz
[  950.095798][ T5921] usb 1-1: SerialNumber: syz
[  950.163746][ T5921] usb 1-1: config 0 descriptor??
[  950.356382][ T5921] hub 1-1:0.28: bad descriptor, ignoring hub
[  950.364847][ T5921] hub 1-1:0.28: probe with driver hub failed with error -5
[  950.374064][ T5921] option 1-1:0.28: GSM modem (1-port) converter detected
[  950.448212][ T5917] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  950.627945][ T5917] usb 3-1: Using ep0 maxpacket: 32
[  950.643362][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0
[  950.655758][ T5917] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[  950.665132][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.724338][ T5917] usb 3-1: config 0 descriptor??
[  951.111973][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  951.111989][   T30] audit: type=1326 audit(1766171711.037:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8b58f749 code=0x7ffc0000
[  951.149200][T18183] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  951.176401][T18183] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  951.220265][T18183] tipc: Enabled bearer <udp:syz0>, priority 10
[  951.249351][   T30] audit: type=1326 audit(1766171711.037:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda8b58f749 code=0x7ffc0000
[  951.273794][   T30] audit: type=1326 audit(1766171711.037:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8b58f749 code=0x7ffc0000
[  951.642673][   T30] audit: type=1326 audit(1766171711.037:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda8b58f749 code=0x7ffc0000
[  951.750452][ T5921] usb 1-1: USB disconnect, device number 61
[  951.764233][ T5921] option 1-1:0.28: device disconnected
[  951.838738][   T30] audit: type=1326 audit(1766171711.037:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8b58f749 code=0x7ffc0000
[  951.935190][   T30] audit: type=1326 audit(1766171711.037:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda8b591667 code=0x7ffc0000
[  951.958191][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout
[  952.028933][ T5838] Bluetooth: hci5: command 0x040f tx timeout
[  952.042161][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout
[  952.072677][   T30] audit: type=1326 audit(1766171711.067:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fda8b5915dc code=0x7ffc0000
[  952.098188][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  952.106194][ T5836] Bluetooth: hci2: command 0x040f tx timeout
[  952.138672][   T30] audit: type=1326 audit(1766171711.067:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fda8b591514 code=0x7ffc0000
[  952.201065][   T30] audit: type=1326 audit(1766171711.067:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fda8b591514 code=0x7ffc0000
[  952.285085][   T30] audit: type=1326 audit(1766171711.067:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fda8b58e3aa code=0x7ffc0000
[  952.308571][T18049] tipc: Node number set to 2235213410
[  952.315102][ T5921] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  952.473925][ T5921] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  952.485406][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.501822][ T5921] usb 1-1: Product: syz
[  952.519973][ T5921] usb 1-1: Manufacturer: syz
[  952.540676][ T5921] usb 1-1: SerialNumber: syz
[  952.603652][ T5921] usb 1-1: config 0 descriptor??
[  952.834526][T18193] trusted_key: encrypted_key: keylen parameter is missing
[  952.850454][ T5921] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  953.068724][T18049] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  953.232406][T18049] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  953.268403][T18049] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  953.282823][ T5921] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  953.340554][T18049] usb 4-1: config 220 has no interface number 2
[  953.357078][ T5921] usb 1-1: USB disconnect, device number 62
[  953.384189][T18049] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  953.469396][T18049] usb 4-1: config 220 interface 0 has no altsetting 0
[  953.515657][T18049] usb 4-1: config 220 interface 76 has no altsetting 0
[  953.540335][T18049] usb 4-1: config 220 interface 1 has no altsetting 0
[  953.573882][T18049] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  953.594345][T18049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.615353][T18049] usb 4-1: Product: syz
[  953.626616][T18049] usb 4-1: Manufacturer: syz
[  953.632180][T18049] usb 4-1: SerialNumber: syz
[  953.767679][ T5917] usbhid 3-1:0.0: can't add hid device: -71
[  953.796891][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  953.821732][T16886] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  953.859034][ T5917] usb 3-1: USB disconnect, device number 37
[  953.908676][T18049] usb 4-1: selecting invalid altsetting 0
[  953.943123][T18049] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  953.963669][T18049] uvcvideo 4-1:220.0: No valid video chain found.
[  953.989442][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3211'.
[  954.022316][T16886] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  954.032722][T16886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.036530][T18210] FAULT_INJECTION: forcing a failure.
[  954.036530][T18210] name failslab, interval 1, probability 0, space 0, times 0
[  954.063209][T18049] usb 4-1: selecting invalid altsetting 0
[  954.075408][T18049] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  954.091855][T16886] usb 2-1: Product: syz
[  954.099847][T18210] CPU: 0 UID: 0 PID: 18210 Comm: syz.2.3214 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  954.099877][T18210] Tainted: [L]=SOFTLOCKUP
[  954.099885][T18210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  954.099898][T18210] Call Trace:
[  954.099907][T18210]  <TASK>
[  954.099916][T18210]  dump_stack_lvl+0x189/0x250
[  954.099945][T18210]  ? __pfx____ratelimit+0x10/0x10
[  954.099965][T18210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  954.099991][T18210]  ? __pfx__printk+0x10/0x10
[  954.100021][T18210]  ? __lock_acquire+0x6b6/0x2cf0
[  954.100052][T18210]  should_fail_ex+0x414/0x560
[  954.100088][T18210]  should_failslab+0xa8/0x100
[  954.100115][T18210]  kmem_cache_alloc_noprof+0x88/0x710
[  954.100145][T18210]  ? __netlink_lookup+0xbd/0x8a0
[  954.100173][T18210]  ? skb_clone+0x212/0x3a0
[  954.100204][T18210]  skb_clone+0x212/0x3a0
[  954.100233][T18210]  __netlink_deliver_tap+0x404/0x850
[  954.100272][T18210]  ? netlink_deliver_tap+0x2e/0x1b0
[  954.100300][T18210]  netlink_deliver_tap+0x19c/0x1b0
[  954.100327][T18210]  netlink_unicast+0x7fa/0x9e0
[  954.100359][T18210]  ? __pfx_netlink_unicast+0x10/0x10
[  954.100385][T18210]  ? netlink_sendmsg+0x642/0xb30
[  954.100409][T18210]  ? skb_put+0x11b/0x210
[  954.100435][T18210]  netlink_sendmsg+0x805/0xb30
[  954.100471][T18210]  ? __pfx_netlink_sendmsg+0x10/0x10
[  954.100502][T18210]  ? aa_sock_msg_perm+0xf1/0x1b0
[  954.100531][T18210]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  954.100550][T18210]  ? __pfx_netlink_sendmsg+0x10/0x10
[  954.100579][T18210]  __sock_sendmsg+0x21c/0x270
[  954.100612][T18210]  ____sys_sendmsg+0x505/0x820
[  954.100643][T18210]  ? __pfx_____sys_sendmsg+0x10/0x10
[  954.100691][T18210]  ? import_iovec+0x74/0xa0
[  954.100721][T18210]  ___sys_sendmsg+0x21f/0x2a0
[  954.100748][T18210]  ? __pfx____sys_sendmsg+0x10/0x10
[  954.100781][T18210]  ? rcu_read_lock_any_held+0xb3/0x120
[  954.100836][T18210]  ? __fget_files+0x2a/0x420
[  954.100861][T18210]  ? __fget_files+0x3a0/0x420
[  954.100903][T18210]  __x64_sys_sendmsg+0x19b/0x260
[  954.100931][T18210]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  954.100966][T18210]  ? __pfx_ksys_write+0x10/0x10
[  954.100991][T18210]  ? do_syscall_64+0xbe/0xf80
[  954.101017][T18210]  do_syscall_64+0xfa/0xf80
[  954.101039][T18210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  954.101060][T18210]  ? clear_bhb_loop+0x60/0xb0
[  954.101085][T18210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  954.101105][T18210] RIP: 0033:0x7fda8b58f749
[  954.101123][T18210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  954.101141][T18210] RSP: 002b:00007fda8c3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  954.101162][T18210] RAX: ffffffffffffffda RBX: 00007fda8b7e5fa0 RCX: 00007fda8b58f749
[  954.101177][T18210] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  954.101190][T18210] RBP: 00007fda8c3d7090 R08: 0000000000000000 R09: 0000000000000000
[  954.101203][T18210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  954.101215][T18210] R13: 00007fda8b7e6038 R14: 00007fda8b7e5fa0 R15: 00007fda8b90fa28
[  954.101249][T18210]  </TASK>
[  954.102470][T16886] usb 2-1: Manufacturer: syz
[  954.426697][T16886] usb 2-1: SerialNumber: syz
[  954.444148][T16886] r8152-cfgselector 2-1: Unknown version 0x0000
[  954.450837][T16886] r8152-cfgselector 2-1: config 0 descriptor??
[  954.461823][T18049] usb 4-1: USB disconnect, device number 15
[  954.945240][T16886] r8152-cfgselector 2-1: Unknown version 0x0000
[  954.952054][T16886] r8152-cfgselector 2-1: bad CDC descriptors
[  954.968552][T18049] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  954.983091][T16886] r8152-cfgselector 2-1: USB disconnect, device number 42
[  955.128400][T18049] usb 3-1: Using ep0 maxpacket: 32
[  955.136915][T18049] usb 3-1: config 0 has an invalid interface number: 150 but max is 0
[  955.146882][T18049] usb 3-1: config 0 has no interface number 0
[  955.154397][T18049] usb 3-1: config 0 interface 150 has no altsetting 0
[  955.173666][T18049] usb 3-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01
[  955.184450][T18049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.193855][T18049] usb 3-1: Product: syz
[  955.199525][T18049] usb 3-1: Manufacturer: syz
[  955.204272][T18049] usb 3-1: SerialNumber: syz
[  955.216291][T18049] usb 3-1: config 0 descriptor??
[  955.230145][T18049] gspca_main: pac7311-2.14.0 probing 093a:2603
[  955.739918][T18049] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110
[  955.768604][T18049] pac7311 3-1:0.150: probe with driver pac7311 failed with error -110
[  955.965116][T18250] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  955.972742][T18250] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  955.982604][T18250] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  955.990198][T18250] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  955.996978][T18250] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  956.258887][ T5959] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  956.418218][ T5959] usb 5-1: Using ep0 maxpacket: 16
[  956.427519][ T5959] usb 5-1: config 0 has an invalid interface number: 147 but max is 0
[  956.439530][ T5959] usb 5-1: config 0 has no interface number 0
[  956.445773][ T5959] usb 5-1: config 0 interface 147 has no altsetting 0
[  956.472942][ T5959] usb 5-1: New USB device found, idVendor=0a4e, idProduct=4040, bcdDevice=99.ea
[  956.484408][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.486769][T18274] netlink: 'syz.1.3228': attribute type 2 has an invalid length.
[  956.505806][ T5959] usb 5-1: Product: syz
[  956.510951][ T5959] usb 5-1: Manufacturer: syz
[  956.515772][ T5959] usb 5-1: SerialNumber: syz
[  956.531323][ T5959] usb 5-1: config 0 descriptor??
[  956.845771][ T5959] usb 5-1: USB disconnect, device number 33
[  957.325868][T18283] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3230'.
[  957.335914][T18283] xt_time: unknown flags 0xf4
[  957.963664][T18049] usb 3-1: USB disconnect, device number 38
[  958.019410][ T5836] Bluetooth: hci2: command 0x040f tx timeout
[  958.019478][T12563] Bluetooth: hci4: command 0x0c1a tx timeout
[  958.025579][ T5830] Bluetooth: hci5: command 0x040f tx timeout
[  958.031619][T15212] Bluetooth: hci3: command 0x0c1a tx timeout
[  958.031668][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  958.793574][T18303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3234'.
[  959.059442][ T5959] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  959.232379][ T5959] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  959.301268][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.381549][ T5959] usb 4-1: config 0 descriptor??
[  959.787220][T18322] syzkaller0: entered promiscuous mode
[  959.810619][T18322] syzkaller0: entered allmulticast mode
[  960.112795][T18331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  961.831693][ T5959] pegasus 4-1:0.0: setup Pegasus II specific registers
[  961.938513][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout
[  961.944677][T18323] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  962.680568][T18306] batadv0: entered promiscuous mode
[  962.695554][ T5959] pegasus 4-1:0.0: can't locate MII phy, using default
[  962.735161][ T5959] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, a6:2a:e2:6e:4c:50
[  962.747617][ T5959] usb 4-1: USB disconnect, device number 16
[  962.802293][T18323] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  962.820215][T18323] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  962.826509][T18323] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  962.833269][T18323] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  963.191713][T18364] ip6gretap0: entered promiscuous mode
[  963.198785][T18364] macsec1: entered promiscuous mode
[  963.207076][T18364] ip6gretap0: left promiscuous mode
[  963.255307][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'.
[  963.277309][T18366] netlink: 'syz.2.3251': attribute type 18 has an invalid length.
[  963.295492][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3251'.
[  964.020150][ T5830] Bluetooth: hci5: command 0x040f tx timeout
[  964.735648][T18402] xt_hashlimit: size too large, truncated to 1048576
[  964.817883][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  964.898440][ T5830] Bluetooth: hci2: command 0x040f tx timeout
[  964.899156][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  965.061138][T18409] fuse: Bad value for 'fd'
[  965.447907][T13922] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  965.713281][T13922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  965.728325][T13922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  965.746676][T13922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  965.771031][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  965.771050][   T30] audit: type=1804 audit(1766171725.697:2929): pid=18423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3267" name="bus" dev="ramfs" ino=83676 res=1 errno=0
[  965.832565][T13922] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  965.847232][T13922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.866186][T13922] usb 2-1: config 0 descriptor??
[  965.901155][T18411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  966.087877][T18049] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  966.273586][T18049] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  966.283298][T18049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.293102][T18049] usb 3-1: Product: syz
[  966.305281][T18049] usb 3-1: Manufacturer: syz
[  966.328351][T18049] usb 3-1: SerialNumber: syz
[  966.364255][T18049] usb 3-1: config 0 descriptor??
[  966.388630][T18049] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 039
[  966.520381][T13922] plantronics 0003:047F:FFFF.002F: reserved main item tag 0xd
[  966.572584][T13922] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  966.867025][T13922] usb 2-1: USB disconnect, device number 43
[  966.897437][T18427] fido_id[18427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  968.429095][T18049]  (null): failure setting delay to 10us
[  968.438431][T18049] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  968.746558][T18448] xt_hashlimit: size too large, truncated to 1048576
[  968.873117][ T5915] usb 3-1: USB disconnect, device number 39
[  968.948099][ T5959] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  969.158111][ T5959] usb 1-1: Using ep0 maxpacket: 32
[  969.170972][ T5959] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  969.179531][ T5959] usb 1-1: config 0 has no interface number 0
[  969.185624][ T5959] usb 1-1: config 0 interface 85 has no altsetting 0
[  969.203323][ T5959] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  969.227947][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.235963][ T5959] usb 1-1: Product: syz
[  969.250422][ T5959] usb 1-1: Manufacturer: syz
[  969.255055][ T5959] usb 1-1: SerialNumber: syz
[  969.271216][ T5959] usb 1-1: config 0 descriptor??
[  969.293749][ T5959] appletouch 1-1:0.85: Could not find int-in endpoint
[  969.300575][ T5915] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  969.312419][ T5959] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  969.321861][ T5959] usbhid 1-1:0.85: couldn't find an input interrupt endpoint
[  969.448321][ T5915] usb 3-1: Using ep0 maxpacket: 16
[  969.455860][ T5915] usb 3-1: config 0 has an invalid interface number: 176 but max is 0
[  969.464964][ T5915] usb 3-1: config 0 has no interface number 0
[  969.473885][ T5915] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3
[  969.484354][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.493092][ T5915] usb 3-1: Product: syz
[  969.497432][ T5915] usb 3-1: Manufacturer: syz
[  969.503006][ T5915] usb 3-1: SerialNumber: syz
[  969.511268][ T5915] usb 3-1: config 0 descriptor??
[  969.521736][ T5915] usb 3-1: bad CDC descriptors
[  969.571545][ T5959] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  969.658396][ T5921] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  969.745186][ T5959] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[  969.757521][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.760774][T18471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  969.777985][T18471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  969.811743][ T5959] usb 2-1: config 0 descriptor??
[  969.833697][ T5959] pwc: Philips SPC 900NC USB webcam detected.
[  969.839570][ T5921] usb 5-1: Using ep0 maxpacket: 32
[  969.849820][ T5921] usb 5-1: config 0 has an invalid interface number: 219 but max is 0
[  969.873150][ T5921] usb 5-1: config 0 has no interface number 0
[  969.931237][ T5921] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  969.956078][ T5921] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  969.984805][ T5921] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  970.014630][ T5921] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  970.044019][ T5921] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  970.071126][ T5921] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  970.081359][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.105151][ T5921] usb 5-1: Product: syz
[  970.121097][ T5921] usb 5-1: Manufacturer: syz
[  970.136111][ T5921] usb 5-1: SerialNumber: syz
[  970.152633][T13922] usb 3-1: USB disconnect, device number 40
[  970.182547][ T5921] usb 5-1: config 0 descriptor??
[  970.202713][T18463] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  970.414406][ T5921] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz)
[  970.444370][T18459] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  970.450935][T18459] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  970.461223][T18459] vhci_hcd vhci_hcd.0: Device attached
[  970.473477][T18479] vhci_hcd: connection closed
[  970.473686][T15671] vhci_hcd vhci_hcd.1: stop threads
[  970.484526][ T5959] pwc: recv_control_msg error -71 req 02 val 2b00
[  970.491300][T15671] vhci_hcd vhci_hcd.1: release socket
[  970.496708][T15671] vhci_hcd vhci_hcd.1: disconnect device
[  970.508651][ T5959] pwc: recv_control_msg error -71 req 02 val 2700
[  970.516175][ T5959] pwc: recv_control_msg error -71 req 04 val 1600
[  970.523630][ T5959] pwc: recv_control_msg error -71 req 02 val 2c00
[  970.530787][ T5959] pwc: recv_control_msg error -71 req 04 val 1000
[  970.537604][ T5959] pwc: recv_control_msg error -71 req 04 val 1300
[  970.545702][ T5959] pwc: recv_control_msg error -71 req 04 val 1400
[  970.554230][ T5959] pwc: recv_control_msg error -71 req 02 val 2000
[  970.561298][ T5959] pwc: recv_control_msg error -71 req 02 val 2100
[  970.571308][ T5959] pwc: recv_control_msg error -71 req 06 val 0600
[  970.578978][ T5959] pwc: recv_control_msg error -71 req 04 val 1500
[  970.585835][ T5959] pwc: recv_control_msg error -71 req 02 val 2500
[  970.593451][ T5959] pwc: recv_control_msg error -71 req 02 val 2400
[  970.600479][ T5959] pwc: recv_control_msg error -71 req 02 val 2600
[  970.609182][ T5959] pwc: recv_control_msg error -71 req 02 val 2900
[  970.616044][ T5959] pwc: recv_control_msg error -71 req 02 val 2800
[  970.616925][ T5921] etas_es58x 5-1:0.219: could not parse product info: '424242424242'
[  970.624033][ T5959] pwc: recv_control_msg error -71 req 04 val 1100
[  970.633228][ T5915] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  970.638899][ T5959] pwc: recv_control_msg error -71 req 04 val 1200
[  970.661580][ T5959] pwc: Registered as video103.
[  970.684356][ T5959] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input47
[  970.741097][ T5959] usb 2-1: USB disconnect, device number 44
[  970.773630][ T5921] usb 1-1: USB disconnect, device number 63
[  970.802262][ T5915] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  970.862546][ T5915] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  970.902565][ T5915] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  970.924479][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.933568][ T5917] usb 5-1: USB disconnect, device number 34
[  970.950986][ T5915] usb 4-1: Product: ᅜ⌌ာ釺鈸⸚͒г篧Ꚛᦔ⓻秊덉
[  970.962002][ T5917] etas_es58x 5-1:0.219: Disconnecting syz syz
[  970.982770][ T5915] usb 4-1: Manufacturer: 海ぉ䡛拎㩻喅捹脼滙펅蹌㓔땄䉁严೦砧싋伒⧃䇳櫨磯䙰ﭞ㧆ꡡ⅂䤽힃땔惑쳏藉㤗쒿歄⽳ᦿ수גּ柜쐶攩哕줽蹅徵곊׎荲쩼⇱褉飸乽떂횆꜄훪戮댽嚭㲀䴐拏ꭻὦ篲Ꝙ챪잮췝︇뉵썛䴂克
[  971.060614][ T5915] usb 4-1: SerialNumber: Ⰹ
[  971.107299][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3285'.
[  971.119160][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3285'.
[  971.255224][T18499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  971.266633][T18499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  971.293519][ T5915] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  971.323260][ T5915] cdc_ncm 4-1:1.0: bind() failure
[  971.359254][ T5915] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  971.377496][ T5915] cdc_ncm 4-1:1.1: bind() failure
[  971.488839][ T5921] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  971.507021][ T5915] usb 4-1: USB disconnect, device number 17
[  971.712366][T18511] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3290'.
[  971.956606][T18523] syzkaller0: entered promiscuous mode
[  971.984418][T18523] syzkaller0: entered allmulticast mode
[  972.286059][T18536] vivid-007: disconnect
[  972.355195][T18536] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3295'.
[  972.625386][T18535] vivid-007: reconnect
[  972.911219][T18560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3300'.
[  972.932464][T18559] syzkaller1: entered promiscuous mode
[  972.951906][T18559] syzkaller1: entered allmulticast mode
[  972.979695][T18565] netlink: 'syz.3.3300': attribute type 1 has an invalid length.
[  973.083877][T18565] bond1: entered promiscuous mode
[  973.153825][T18565] bond1: entered allmulticast mode
[  973.173404][T18568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3300'.
[  973.271340][T18565] 8021q: adding VLAN 0 to HW filter on device bond1
[  973.504230][T18560] erspan1: entered allmulticast mode
[  973.583163][T18560] bond1: (slave erspan1): making interface the new active one
[  973.602178][T18560] erspan1: entered promiscuous mode
[  973.654827][T18560] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  974.807245][T18574] loop4: detected capacity change from 0 to 2560
[  975.028481][ T5915] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  975.193644][T18597] netlink: 'syz.1.3307': attribute type 4 has an invalid length.
[  975.216453][ T5915] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  975.228261][ T5915] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  975.278664][ T5915] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  975.304767][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.385350][T18591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  975.401663][ T5915] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  975.615654][ T5915] usb 3-1: USB disconnect, device number 41
[  975.830620][T18607] netlink: 'syz.0.3310': attribute type 2 has an invalid length.
[  975.867382][T18607] : entered promiscuous mode
[  976.040500][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3310'.
[  976.711350][T18619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3313'.
[  976.726145][T18619] netlink: 'syz.2.3313': attribute type 1 has an invalid length.
[  976.837511][T18619] bond1: entered promiscuous mode
[  976.870506][T18629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'.
[  976.887910][ T5917] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  976.943443][T18619] bond1: entered allmulticast mode
[  976.983752][T18615] futex_wake_op: syz.1.3309 tries to shift op by 32; fix this program
[  977.004656][T18619] 8021q: adding VLAN 0 to HW filter on device bond1
[  977.051511][T18624] erspan1: entered allmulticast mode
[  977.124176][ T5917] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  977.164278][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.212457][ T5917] usb 5-1: Product: syz
[  977.225738][ T5917] usb 5-1: Manufacturer: syz
[  977.240921][ T5917] usb 5-1: SerialNumber: syz
[  977.264978][ T5917] usb 5-1: config 0 descriptor??
[  977.294220][T18634] netlink: 'syz.2.3316': attribute type 10 has an invalid length.
[  977.312862][T18634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  977.336798][T18634] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  977.366203][T18634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  977.390954][T18634] batman_adv: batadv0: Removing interface: batadv_slave_1
[  977.474527][T18634] bond0: (slave batadv0): Releasing backup interface
[  977.487004][ T5917] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  977.948957][T18642] 
[  977.951426][T18642] ======================================================
[  977.958456][T18642] WARNING: possible circular locking dependency detected
[  977.965495][T18642] syzkaller #0 Tainted: G             L     
[  977.971505][T18642] ------------------------------------------------------
[  977.978546][T18642] syz.2.3317/18642 is trying to acquire lock:
[  977.984622][T18642] ffff88801bef0220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450
[  977.994932][T18642] 
[  977.994932][T18642] but task is already holding lock:
[  978.002316][T18642] ffff888024915fb0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50
[  978.012105][T18642] 
[  978.012105][T18642] which lock already depends on the new lock.
[  978.012105][T18642] 
[  978.022529][T18642] 
[  978.022529][T18642] the existing dependency chain (in reverse order) is:
[  978.031556][T18642] 
[  978.031556][T18642] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}:
[  978.040205][T18642]        blk_alloc_queue+0x52f/0x610
[  978.045518][T18642]        __blk_mq_alloc_disk+0x15c/0x340
[  978.051180][T18642]        loop_add+0x411/0xad0
[  978.055878][T18642]        loop_init+0xd9/0x170
[  978.060597][T18642]        do_one_initcall+0x1fb/0x820
[  978.065915][T18642]        do_initcall_level+0x104/0x190
[  978.071395][T18642]        do_initcalls+0x59/0xa0
[  978.076267][T18642]        kernel_init_freeable+0x334/0x4b0
[  978.082003][T18642]        kernel_init+0x1d/0x1d0
[  978.086877][T18642]        ret_from_fork+0x599/0xb30
[  978.092000][T18642]        ret_from_fork_asm+0x1a/0x30
[  978.097319][T18642] 
[  978.097319][T18642] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  978.104549][T18642]        fs_reclaim_acquire+0x72/0x100
[  978.110024][T18642]        kmem_cache_alloc_noprof+0x45/0x710
[  978.115937][T18642]        __kernfs_iattrs+0xd9/0x320
[  978.121155][T18642]        kernfs_iop_setattr+0xea/0x3f0
[  978.126627][T18642]        notify_change+0xc1a/0xf40
[  978.131749][T18642]        do_truncate+0x1a4/0x220
[  978.136692][T18642]        path_openat+0x359d/0x3dd0
[  978.141818][T18642]        do_filp_open+0x1fa/0x410
[  978.146847][T18642]        do_sys_openat2+0x121/0x200
[  978.152076][T18642]        __x64_sys_openat+0x138/0x170
[  978.157456][T18642]        do_syscall_64+0xfa/0xf80
[  978.162487][T18642]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  978.168941][T18642] 
[  978.168941][T18642] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  978.177467][T18642]        __lock_acquire+0x15a6/0x2cf0
[  978.182857][T18642]        lock_acquire+0x117/0x340
[  978.187909][T18642]        down_read+0x47/0x2e0
[  978.192604][T18642]        kernfs_iop_getattr+0x9e/0x450
[  978.198081][T18642]        vfs_getattr_nosec+0x2e1/0x430
[  978.203563][T18642]        loop_assign_backing_file+0x222/0x400
[  978.209655][T18642]        lo_ioctl+0x167f/0x1c50
[  978.214525][T18642]        blkdev_ioctl+0x60e/0x710
[  978.219575][T18642]        __se_sys_ioctl+0xfc/0x170
[  978.224704][T18642]        do_syscall_64+0xfa/0xf80
[  978.229740][T18642]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  978.236172][T18642] 
[  978.236172][T18642] other info that might help us debug this:
[  978.236172][T18642] 
[  978.246406][T18642] Chain exists of:
[  978.246406][T18642]   &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24
[  978.246406][T18642] 
[  978.260863][T18642]  Possible unsafe locking scenario:
[  978.260863][T18642] 
[  978.268329][T18642]        CPU0                    CPU1
[  978.273711][T18642]        ----                    ----
[  978.279092][T18642]   lock(&q->q_usage_counter(io)#24);
[  978.284504][T18642]                                lock(fs_reclaim);
[  978.291020][T18642]                                lock(&q->q_usage_counter(io)#24);
[  978.298934][T18642]   rlock(&root->kernfs_iattr_rwsem);
[  978.304318][T18642] 
[  978.304318][T18642]  *** DEADLOCK ***
[  978.304318][T18642] 
[  978.312467][T18642] 3 locks held by syz.2.3317/18642:
[  978.317671][T18642]  #0: ffff888141fdc448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x11e4/0x1c50
[  978.326745][T18642]  #1: ffff888024915fb0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50
[  978.336948][T18642]  #2: ffff888024915fe8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1604/0x1c50
[  978.347324][T18642] 
[  978.347324][T18642] stack backtrace:
[  978.353228][T18642] CPU: 0 UID: 0 PID: 18642 Comm: syz.2.3317 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  978.353250][T18642] Tainted: [L]=SOFTLOCKUP
[  978.353258][T18642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  978.353268][T18642] Call Trace:
[  978.353275][T18642]  <TASK>
[  978.353283][T18642]  dump_stack_lvl+0x189/0x250
[  978.353304][T18642]  ? __pfx_dump_stack_lvl+0x10/0x10
[  978.353321][T18642]  ? __pfx__printk+0x10/0x10
[  978.353343][T18642]  ? print_lock_name+0xde/0x100
[  978.353365][T18642]  print_circular_bug+0x2e2/0x300
[  978.353387][T18642]  check_noncircular+0x12e/0x150
[  978.353408][T18642]  __lock_acquire+0x15a6/0x2cf0
[  978.353430][T18642]  ? kernfs_iop_getattr+0x9e/0x450
[  978.353444][T18642]  lock_acquire+0x117/0x340
[  978.353457][T18642]  ? kernfs_iop_getattr+0x9e/0x450
[  978.353475][T18642]  down_read+0x47/0x2e0
[  978.353493][T18642]  ? kernfs_iop_getattr+0x9e/0x450
[  978.353508][T18642]  kernfs_iop_getattr+0x9e/0x450
[  978.353528][T18642]  vfs_getattr_nosec+0x2e1/0x430
[  978.353547][T18642]  loop_assign_backing_file+0x222/0x400
[  978.353568][T18642]  ? __pfx_loop_assign_backing_file+0x10/0x10
[  978.353585][T18642]  ? schedule+0x91/0x360
[  978.353608][T18642]  lo_ioctl+0x167f/0x1c50
[  978.353627][T18642]  ? __pfx_lo_ioctl+0x10/0x10
[  978.353644][T18642]  ? __lock_acquire+0x6b6/0x2cf0
[  978.353663][T18642]  ? __lock_acquire+0x6b6/0x2cf0
[  978.353678][T18642]  ? __lock_acquire+0x6b6/0x2cf0
[  978.353692][T18642]  ? __lock_acquire+0x6b6/0x2cf0
[  978.353708][T18642]  ? __lock_acquire+0x6b6/0x2cf0
[  978.353723][T18642]  ? __lock_acquire+0x6b6/0x2cf0
[  978.353738][T18642]  ? __lock_acquire+0x6b6/0x2cf0
[  978.353753][T18642]  ? __lock_acquire+0x6b6/0x2cf0
[  978.353767][T18642]  ? __lock_acquire+0x6b6/0x2cf0
[  978.353796][T18642]  ? is_bpf_text_address+0x26/0x2b0
[  978.353821][T18642]  ? is_bpf_text_address+0x292/0x2b0
[  978.353842][T18642]  ? is_bpf_text_address+0x26/0x2b0
[  978.353864][T18642]  ? kernel_text_address+0xa5/0xe0
[  978.353890][T18642]  ? __kernel_text_address+0xd/0x40
[  978.353910][T18642]  ? unwind_get_return_address+0x4d/0x90
[  978.353931][T18642]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  978.353954][T18642]  ? arch_stack_walk+0xfc/0x150
[  978.353974][T18642]  ? stack_trace_save+0x9c/0xe0
[  978.353996][T18642]  ? stack_depot_save_flags+0x40/0x850
[  978.354018][T18642]  ? __pfx_format_decode+0x10/0x10
[  978.354038][T18642]  ? kasan_save_track+0x4f/0x80
[  978.354052][T18642]  ? kasan_save_track+0x3e/0x80
[  978.354069][T18642]  ? kasan_save_free_info+0x46/0x50
[  978.354089][T18642]  ? __kasan_slab_free+0x5c/0x80
[  978.354103][T18642]  ? kfree+0x1c0/0x660
[  978.354122][T18642]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  978.354137][T18642]  ? security_file_ioctl+0xcb/0x2d0
[  978.354150][T18642]  ? __se_sys_ioctl+0x47/0x170
[  978.354162][T18642]  ? do_syscall_64+0xfa/0xf80
[  978.354176][T18642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  978.354197][T18642]  ? __asan_memset+0x22/0x50
[  978.354210][T18642]  ? blk_get_meta_cap+0x18c/0x750
[  978.354231][T18642]  ? __pfx_blk_get_meta_cap+0x10/0x10
[  978.354252][T18642]  ? blkdev_common_ioctl+0x11d9/0x2c40
[  978.354274][T18642]  ? kasan_quarantine_put+0xdd/0x220
[  978.354288][T18642]  ? lockdep_hardirqs_on+0x98/0x140
[  978.354302][T18642]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  978.354325][T18642]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  978.354345][T18642]  ? do_vfs_ioctl+0xbe8/0x1430
[  978.354357][T18642]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  978.354372][T18642]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  978.354387][T18642]  ? __pfx_vfs_readv+0x10/0x10
[  978.354406][T18642]  ? do_futex+0x395/0x420
[  978.354425][T18642]  ? __pfx_lo_ioctl+0x10/0x10
[  978.354442][T18642]  blkdev_ioctl+0x60e/0x710
[  978.354482][T18642]  ? __pfx_blkdev_ioctl+0x10/0x10
[  978.354504][T18642]  ? __fget_files+0x3a0/0x420
[  978.354523][T18642]  ? __fget_files+0x2a/0x420
[  978.354543][T18642]  ? bpf_lsm_file_ioctl+0x9/0x20
[  978.354559][T18642]  ? __pfx_blkdev_ioctl+0x10/0x10
[  978.354580][T18642]  __se_sys_ioctl+0xfc/0x170
[  978.354594][T18642]  do_syscall_64+0xfa/0xf80
[  978.354610][T18642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  978.354627][T18642]  ? clear_bhb_loop+0x60/0xb0
[  978.354645][T18642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  978.354660][T18642] RIP: 0033:0x7fda8b58f749
[  978.354676][T18642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  978.354690][T18642] RSP: 002b:00007fda8c3d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  978.354706][T18642] RAX: ffffffffffffffda RBX: 00007fda8b7e5fa0 RCX: 00007fda8b58f749
[  978.354718][T18642] RDX: 000000000000000a RSI: 0000000000004c06 RDI: 0000000000000009
[  978.354729][T18642] RBP: 00007fda8b613f91 R08: 0000000000000000 R09: 0000000000000000
[  978.354740][T18642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  978.354752][T18642] R13: 00007fda8b7e6038 R14: 00007fda8b7e5fa0 R15: 00007fda8b90fa28
[  978.354772][T18642]  </TASK>
[  978.968287][ T5917] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  980.940992][T17876] usb 5-1: USB disconnect, device number 35