last executing test programs:

31m49.843350421s ago: executing program 4 (id=27):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207baff8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x103, 0x48}, 0x94)

31m49.301208141s ago: executing program 4 (id=29):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20)
connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xe, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7, 0x2}, 0x20)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) (async)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500264382c10e91789b85cec0102030109021b00019f05c0050904c30501ff000003090501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})

31m47.495494939s ago: executing program 4 (id=36):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0xfffffffffffffe6b, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}], {0x14}}, 0xb0}}, 0x4000040)
r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_netdev_private(r2, 0x8943, &(0x7f00000000c0)="a93a")
r3 = syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0)
ioctl$RTC_PIE_ON(r3, 0x7005)
dup(r2)
r4 = socket(0x400000000010, 0x5, 0x800000)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0xfffffffffffffe86, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x800, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004a40)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae35}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfff7, 0x8, 0x4}, {0x35ae, 0x2, 0x6}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=@newtfilter={0x64, 0x2c, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x16, 0xa}, {0x10, 0x2}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff2, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0x4b, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_CHAIN={0x8, 0xb, 0x200000}, @TCA_CHAIN={0x8, 0xb, 0x6ae}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x4004)
r6 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000200)=0x1fffd, 0x4)
poll(&(0x7f0000000000)=[{r1, 0x285}, {r1, 0x40}], 0x2, 0x10000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000008c0)})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3})

31m46.92059832s ago: executing program 4 (id=41):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0xa0881)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x20, 0x1, 0x0, 0x8, 0x1, 0xfffffff7, &(0x7f0000000000)='k'})
unshare(0xe020400)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r2, 0x200000000000000}, 0x38)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
unshare(0x20000400)
socket$unix(0x1, 0x1, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=@deltfilter={0x97c, 0x2d, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xe, 0xd}, {0x8, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xf9, 0xe}}, @TCA_RATE={0x6, 0x5, {0x1, 0xda}}, @TCA_CHAIN={0x8, 0xb, 0x1ff}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @filter_kind_options=@f_fw={{0x7}, {0x910, 0x2, [@TCA_FW_POLICE={0x4}, @TCA_FW_POLICE={0x8b0, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x885b6fb, 0x5, 0x2, 0x7, 0x7fff, {0x65, 0x2, 0x101, 0x3, 0xc, 0x800}, {0xf8, 0x1, 0x7, 0x9, 0x10, 0x2}, 0x8, 0x7, 0x1ff}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x3ff, 0x839, 0x6, 0x200, 0x5, 0x197, 0x4, 0x5, 0x3, 0x1000, 0x5, 0x6b, 0x6, 0x40, 0xa76, 0x4199, 0xd, 0x401, 0x7fffffff, 0x5, 0x6, 0x5, 0x8, 0x1, 0x7ae27784, 0x5, 0x7fffffff, 0x6, 0x2, 0x4, 0x0, 0x8, 0xac14, 0x2, 0x800, 0xb96, 0x5, 0x2, 0x2, 0x3, 0x4, 0x2, 0x1, 0x6, 0x7, 0x7, 0x4, 0x9, 0x800, 0x0, 0x6, 0x1, 0x1, 0x8000, 0x6, 0x401, 0x100, 0xc24e, 0x6, 0x3, 0x7, 0x0, 0x6, 0x2, 0x8, 0x80000000, 0x7d88, 0x6, 0x6, 0x3ff, 0x49a, 0x4, 0x400, 0x388137cd, 0x6, 0x1, 0x0, 0x6, 0x1781, 0x0, 0x7fff, 0x1, 0x8, 0xfb, 0x6, 0x5, 0x2, 0x8, 0xffffff30, 0x405, 0x5, 0x0, 0x0, 0x5, 0xfffffffe, 0x0, 0x1ff, 0x80, 0x10001, 0x3, 0x8f6, 0x6, 0x6d8, 0x4, 0xeba8, 0x3, 0x9, 0xa, 0x6, 0xfffffff9, 0x400, 0x5, 0xa287, 0x0, 0x5, 0x7fffffff, 0x0, 0x3f3, 0x4, 0x9, 0x0, 0x7, 0x7, 0xb67, 0x38, 0x4, 0x1000, 0x8, 0x6, 0x200, 0x6, 0x1, 0x8, 0x6005, 0x7, 0x101, 0x5, 0x10, 0x578402cd, 0xc, 0x1, 0x9359, 0x81, 0x2, 0x2, 0x2, 0x1ff, 0x4da, 0x98, 0x7, 0xffffffff, 0x8000, 0x10001, 0xd7c, 0x1, 0xd8, 0x10000, 0x2, 0x7, 0x0, 0x2, 0x3fef, 0x2, 0x80000000, 0x4, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0xcb4, 0xe, 0x6b8, 0xe, 0x3ae, 0xb, 0x7f, 0x9, 0x2, 0x1, 0x4, 0x8c6, 0xd, 0xdc66, 0x0, 0x8, 0xb, 0x0, 0x8001, 0x8, 0x80000000, 0xc, 0x8, 0x2, 0x9, 0x3, 0x54, 0x8, 0x3f, 0x401, 0x1, 0x7, 0x7, 0xd, 0x2, 0x9, 0x1, 0x5, 0x800, 0x4, 0x9, 0x8, 0x8, 0x8, 0x36a5, 0x3ff, 0x0, 0x2, 0x20000000, 0x5, 0x1, 0x1776044a, 0x6, 0x0, 0x81, 0x3, 0x1, 0x2, 0xd, 0x6, 0x4, 0x0, 0x4, 0x9, 0x40000400, 0x6, 0xfffffff9, 0x5, 0x0, 0x9, 0x4, 0xc0, 0xfffffff8, 0x4, 0xee30, 0x4, 0x9f, 0x0, 0xa8, 0x8000, 0xe75, 0x9, 0x7, 0xde994000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x1, 0x8, 0xe, 0x2, 0x9, 0x8000, 0x3, 0xfff, 0x100000, 0x10000, 0x2, 0x4, 0x3742bcc6, 0x1, 0x9a, 0x2, 0xb56, 0x3, 0x1, 0x6, 0xfff, 0xf00a, 0x4, 0x7a4c, 0x80000001, 0x2, 0x4, 0x6, 0xfff, 0x6, 0x8, 0xd, 0x5, 0x9, 0x6, 0x3, 0x8, 0x1, 0x0, 0x7, 0x1, 0x10, 0x80000000, 0x7, 0xfff, 0x543fdda5, 0x400, 0x69, 0x10, 0x0, 0x5, 0xfa, 0x5, 0x9, 0xfe, 0x1, 0x2, 0x5f, 0xc, 0x352, 0x3, 0x0, 0x1, 0x6, 0x9, 0x3ff, 0x8, 0x9, 0xd, 0xb, 0x4, 0xd7, 0x1, 0x800, 0xe9a3, 0x3, 0x101, 0x9, 0x6, 0x5, 0x3, 0x8, 0x3, 0x884, 0x6, 0x0, 0x98a, 0x0, 0x3, 0x7, 0x7, 0x0, 0x9, 0xfffffffb, 0x400, 0x9, 0x6, 0x80, 0x3, 0x0, 0x3, 0x7, 0x6, 0x8001, 0x0, 0xde8, 0x2, 0x7, 0x3, 0x7, 0x1, 0xfffffff7, 0x7, 0x5f6, 0x8, 0x4, 0x2, 0x1, 0x3, 0x1000, 0x7, 0x8, 0x2, 0x800, 0x80000001, 0x9, 0x6, 0x41a, 0x6, 0x2, 0x6, 0x4, 0x2, 0x5, 0x3, 0x9, 0x8, 0x4, 0xffffff7f, 0x2, 0xfff, 0x400, 0xf, 0xb, 0x7, 0x9, 0x5, 0x9, 0xda, 0x1, 0x101, 0x200, 0x5, 0x1, 0x2, 0x21, 0x0, 0x4b, 0xe648, 0xf469, 0x6, 0x0, 0x7, 0x5, 0x2, 0x0, 0xe, 0xa20f, 0x3, 0x40, 0x2, 0x2, 0x41, 0x8, 0x8, 0x4046efb0, 0x4, 0x1, 0x4, 0x5, 0x2, 0x9, 0x80000001, 0x4, 0x9, 0x3c, 0x3, 0x7, 0xfffffff2, 0xffffffff, 0x1, 0x1, 0x4, 0x3, 0x1, 0x2, 0x9, 0x2, 0x8, 0x4, 0xffffffff, 0x2, 0x80, 0x7, 0x72, 0x4, 0xca48, 0x3, 0x3, 0xfffffffd, 0x8001, 0x1, 0x8, 0x1, 0x0, 0x0, 0x0, 0x4, 0x800, 0x1, 0x8, 0x0, 0x0, 0xe, 0x40, 0x7f, 0x47d, 0x5, 0x6, 0x3f61, 0x80, 0x47e1aed5, 0x2, 0x1, 0x41, 0x1, 0x7, 0x5, 0x80, 0x80, 0x2, 0x8, 0x7, 0x4, 0xde5, 0x0, 0x7, 0xc65, 0x1, 0x81, 0x81d4, 0x7, 0x6, 0xc]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x9, 0x6, 0x4, {0x8, 0x1, 0x3, 0x9dd0, 0x7287, 0x8}, {0xff, 0x1, 0xd1bc, 0x7, 0x9, 0x7}, 0xfffffffc, 0x9, 0xf}}]}, @TCA_FW_INDEV={0x14, 0x3, 'macsec0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xd}}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0xa}}, @TCA_FW_INDEV={0x14, 0x3, 'tunl0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x3}}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xd}}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xb}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x8b}]}}]}, 0x97c}, 0x1, 0x0, 0x0, 0x40800}, 0x20)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, <r7=>0x0})
r8 = socket$inet(0x2, 0x1, 0x100)
setsockopt$sock_int(r8, 0x1, 0x48, 0x0, 0x0)
listen(r8, 0x7fff)
r9 = syz_open_procfs(r7, &(0x7f0000000180)='oom_score_adj\x00')
lseek(r9, 0x9, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xfffffffffffffe4e, 0xb, &(0x7f00000000c0)="166da95cc6902eeec8960eba1de26e49bcc925ce7f374096723b45c294e6b1bb9f362d74bef6f7f0ff5a198100", &(0x7f0000000080)=""/11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r10 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
setsockopt$inet_tcp_int(r11, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)

31m46.394995391s ago: executing program 4 (id=43):
r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
close(r0)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@iter={&(0x7f0000000040)=@map_fd=0x1, 0x10}}, 0x20)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8)

31m46.189342387s ago: executing program 4 (id=44):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x2c020400)
msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x8, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r5, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r5, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x8f})
msgctl$IPC_RMID(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000001800)=""/210, 0xd2}], 0x1})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)

31m30.250058567s ago: executing program 32 (id=44):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x2c020400)
msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x8, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r5, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r5, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x8f})
msgctl$IPC_RMID(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000001800)=""/210, 0xd2}], 0x1})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)

31m18.577709302s ago: executing program 3 (id=85):
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001040)={'wlan1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0xa, 0x3, 0x87)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002300), 0x24, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x80000001})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5})
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r6 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c})
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10)

31m9.994274013s ago: executing program 3 (id=88):
lgetxattr(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='sessionid\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/193, 0xc1}], 0x2, 0x6, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00002000f0000000004000000004000000000064b137081c6c870d4cceb5eb04c7198e3035e5dfbb2f9fb8e08c5ab390f33585f03b74b4245b3b53041df7050000372cda", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000ffffffff00"/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x4}, 0x38)
io_submit(0x0, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2161, 0xfffffffc], [], [0x400000000000001, 0x2000000000]})
r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001980))
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008009}, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x312, &(0x7f00000002c0)={@broadcast, @random="e8d64921dc3d", @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "c32722", 0x2dc, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x3b, 0x6, 0x2, 0xf7, 0x0, [@local, @mcast2, @remote]}, @hopopts={0x6, 0x0, '\x00', [@pad1]}, @srh={0x0, 0xa, 0x4, 0x5, 0x0, 0x48, 0x8, [@remote, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private1]}, @hopopts={0x8, 0x24, '\x00', [@generic={0x22, 0xc1, "1dede7b30354a783bd126be1a6f853ea6cd67df1287b34d453fc4657f07a8c482d05081aee8153c064a9132832863a6a4d88032d1bc9013e357110f5162f8097795a4d6299af429f7c59068d429466bbd24a07e1c60ec6a73949a06d5a1ffcf98f151b9f9bb704ce7d03c6ebcb210372b08c444b3e3c5fd1cab9e34f036174de5c3571ebd077612910a961b1efb119841a0fea6401fd4348caa0bffed601904ce79fd84842e1ccd47414df41035d0c6228f17cbadd9798750536e7955f4852d4fa"}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x28, {0x2, 0x8, 0x7, 0x7303, [0x7f, 0x100000001, 0x6, 0x8]}}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @loopback}, @enc_lim]}, @srh={0x67, 0x8, 0x4, 0x4, 0x8, 0x0, 0x3, [@local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, @remote]}, @routing={0x2c, 0xa, 0x2, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0xb}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, @remote]}, @fragment={0x88, 0x0, 0xc, 0x1, 0x0, 0x1, 0x65}], {0x4e20, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "a229e69fbd3e21c7092f2e00c82d008d70d922e7452149cfde514f83099aac49", "ff67aea4ebd46ff439721359f8d8e3d5", {"4ce4dd89df982135e6808abde2708ab7", "671fc3af6739b0060ab6a10eec7ab2c4"}}}}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000500000000010002122b47c6b9987ee6937d702e41e2"], 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x1d9002, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)

31m6.666991344s ago: executing program 3 (id=95):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x8042, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000840)={0x240, 0x2, 0x0, {{0x500, 0xff, 0xffff, 0xe803, {0x2, 0x0, 0x2}, 0x40800000, 0x0, 0x9, 0x0, 0x53, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14 CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x24, '\xd2\x99\x98\x80\xe9\x82\xcf\xc2m\xd7\xc5\xf7\xf0L\xd8_*p\xf5\xe9\x93\x0e\x974\xbd\xfd\xf0\xadpt\x13\xba3\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x240)

31m5.927886041s ago: executing program 3 (id=98):
r0 = socket(0x28, 0x1, 0x0)
r1 = io_uring_setup(0xf09, 0x0)
listen(r0, 0x0)
io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000100)={0x4}, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = syz_io_uring_setup(0x1d9f, &(0x7f0000000340)={0x0, 0x63f6, 0x40, 0x1, 0x94}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f00000002c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

30m57.853761345s ago: executing program 3 (id=106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x40800)

30m56.480213595s ago: executing program 3 (id=109):
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000500)=[{0x2, 0x0, 0x6f, 0x2}, {0x4, 0x0, 0x1, 0x2}]})
r0 = socket(0x20, 0x80816, 0x41)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x8, 0x5, 0x0, 0x3, 0xfffffffffffffffd, 0xffff, 0xfa11, 0x9}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b000100", @ANYRES32=r3, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x14)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048000)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r7, 0x4)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCGETA(r8, 0x5405, &(0x7f0000000000))
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r9, 0x0, 0x0, 0x4000001)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000001c7d7ea68548faf18b31f64370bbd04bf3adf3"], 0x1c}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

30m40.592814389s ago: executing program 33 (id=109):
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000500)=[{0x2, 0x0, 0x6f, 0x2}, {0x4, 0x0, 0x1, 0x2}]})
r0 = socket(0x20, 0x80816, 0x41)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x8, 0x5, 0x0, 0x3, 0xfffffffffffffffd, 0xffff, 0xfa11, 0x9}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b000100", @ANYRES32=r3, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x14)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048000)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r7, 0x4)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCGETA(r8, 0x5405, &(0x7f0000000000))
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r9, 0x0, 0x0, 0x4000001)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000001c7d7ea68548faf18b31f64370bbd04bf3adf3"], 0x1c}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

29m18.355816923s ago: executing program 2 (id=204):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff58006c000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x4040044)

29m17.642546472s ago: executing program 2 (id=205):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4001, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
io_setup(0x3, &(0x7f0000000040)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0, 0x0, 0x0, 0x0, 0x4, r1}])
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000", @ANYRES32=r3, @ANYBLOB="060015"], 0x38}}, 0x10)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20000000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xda, &(0x7f00000004c0)=""/218, 0x0, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x0, 0x3}, 0x10, 0x17ebf, r1, 0x8, &(0x7f0000000280)=[r1, r1, r1, r1], &(0x7f0000000380)=[{0x1, 0x4, 0xf, 0xb}, {0x5, 0x4, 0xb, 0xa}, {0x3, 0x4, 0x9}, {0x1, 0x5, 0xb, 0x2}, {0x4, 0x4, 0xf, 0x2}, {0x3, 0x2, 0x6, 0xc}, {0x4, 0x5, 0x5, 0x9}, {0x4, 0x3, 0x10, 0x9}], 0x10, 0xaf}, 0x94)
ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f00000006c0)={{r1}, "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"})
umount2(&(0x7f0000000080)='./file0\x00', 0x3)

29m16.092876817s ago: executing program 2 (id=207):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = signalfd4(r1, &(0x7f00000001c0)={[0x400]}, 0x8, 0xb91f8088f2a49ce)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={<r4=>r3, 0x8137, 0xb0c, 0x8})
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x10}, 0x1, 0x0, 0x0, 0x8845}, 0x24008085)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8)
ioctl$KDDISABIO(r4, 0x4b37)

29m15.471300748s ago: executing program 2 (id=208):
sendmsg$key(0xffffffffffffffff, 0x0, 0x2000c804) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x8000, 0x1000000000, 0x1ffffffffffd, 0x3, 0x2d191, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7c, 0x3, 0x5, 0x9, 0x7, 0x10000000000002, 0x0, 0x5], 0x5000, 0xa02})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) (async)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={<r4=>0x0, @in6={{0xa, 0x4e20, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}}, [0x5, 0x80000001, 0x100, 0x7fff, 0x9, 0x6b4694c0, 0x9, 0x28b4, 0xfffffffffffffff9, 0x4, 0x10000, 0x32, 0x5, 0x3, 0x7]}, &(0x7f0000000180)=0x100)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000280)={r4, 0x3, 0x1, [0xfff0]}, &(0x7f0000000380)=0xa) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff2, 0xffe0}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8000, 0x7, 0x4}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1}}}}, @TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x466, 0x4, 0xfa19}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000045}, 0x4000000)

29m10.924309371s ago: executing program 2 (id=210):
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528", @ANYRES32=0x0], 0x200) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xd8, 0x29, 0x36, {0x5e, 0x17, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x966, 0x7, 0x1, 0x1]}}, @generic={0x8, 0x64, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff70"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x188}}], 0x1, 0x810) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa17d6eaa40f1e40dab9f427d85943241e191c78e6f552fcbf0050938e7b2511c3ee70e6749e1fe51991654e6aa47561590e8b7acf4f8b5ce9f0c90feb97c0ed1a5a08fdd", 0xe9}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5", 0x20}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x8, 0x4d9e, 0x8) (async)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r7=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000600)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, r7, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}}, 0xa0) (async)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

29m10.106635649s ago: executing program 2 (id=213):
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5e}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x440c1)
setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000640)=@add_del={0x2, &(0x7f0000000680)='nicvf0\x00'})
writev(r8, &(0x7f0000000780)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}, {&(0x7f00000006c0)="81f988f7d01677fa806c9ff41307bc9b8cb6db04e1b7d5ab4959a0ede89c37a1ca9a42f1a61ef72e4fb86f94cdfe3c9c4325d35f239f774e1838b2934ce62dc81864d63a7bcfee9b001d3cd603f9ce972b8d94a012abec187bb111474d57c1fb163653619dce7331e67d43aa3a396013d9b654e2104b17e46939dddd13cd350db3deac5d0eda5afe154fdc6bca481a6aac640d35fa37ab5aa40a90464527523f0a", 0xa1}], 0x2)
sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
unshare(0x40000400)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
migrate_pages(0x0, 0x5, 0x0, 0x0)

28m54.232542727s ago: executing program 34 (id=213):
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5e}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x440c1)
setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000640)=@add_del={0x2, &(0x7f0000000680)='nicvf0\x00'})
writev(r8, &(0x7f0000000780)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}, {&(0x7f00000006c0)="81f988f7d01677fa806c9ff41307bc9b8cb6db04e1b7d5ab4959a0ede89c37a1ca9a42f1a61ef72e4fb86f94cdfe3c9c4325d35f239f774e1838b2934ce62dc81864d63a7bcfee9b001d3cd603f9ce972b8d94a012abec187bb111474d57c1fb163653619dce7331e67d43aa3a396013d9b654e2104b17e46939dddd13cd350db3deac5d0eda5afe154fdc6bca481a6aac640d35fa37ab5aa40a90464527523f0a", 0xa1}], 0x2)
sendto$inet(r4, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
unshare(0x40000400)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
migrate_pages(0x0, 0x5, 0x0, 0x0)

9.996834553s ago: executing program 1 (id=6127):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0x0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x8, 0x5365}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
socket$inet6_tcp(0xa, 0x1, 0x0)

9.882639114s ago: executing program 1 (id=6129):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x20e183) (async, rerun: 32)
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (rerun: 32)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) (async)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) (async)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x3, {0x0, 0xea60}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) (async)
r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)='P', 0x1}], 0x1, 0xbeb, 0x7) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24002de8)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2600, 0x0)

9.619289052s ago: executing program 1 (id=6130):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"})
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240)=r3, 0x4)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x819, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f32, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x8000, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x1, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000880)=""/87, 0x57}], 0x2}, 0x0)
write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe)
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0)

9.433823417s ago: executing program 6 (id=6132):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000800) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000800)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000140)=0x7)
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$video(&(0x7f00000001c0), 0x2, 0x101000)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0xfffffffe, 0x3136564e, 0x6, 0xc, [{0x3, 0x10001}, {0x9, 0x5}, {0x800004, 0x9}, {0x2, 0x5}, {0x9, 0x5}, {0x1964, 0x10000}, {0x5, 0x402}, {0x7, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}}) (async)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0xfffffffe, 0x3136564e, 0x6, 0xc, [{0x3, 0x10001}, {0x9, 0x5}, {0x800004, 0x9}, {0x2, 0x5}, {0x9, 0x5}, {0x1964, 0x10000}, {0x5, 0x402}, {0x7, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, 0x0, &(0x7f00000000c0)) (async)
r5 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, 0x0, &(0x7f00000000c0))
io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0xfffffffd, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010141}}}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0xfffffffd, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010141}}}]}, 0x34}}, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
unshare(0x2000400)
write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40)
syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x5c, 0x90, 0xae, 0x40, 0xb95, 0x2790, 0xa9a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb6, 0x3, 0x90, 0x2}}]}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

9.064194326s ago: executing program 0 (id=6136):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socket(0x23, 0x6, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=<r2=>0x0)
sched_setattr(r2, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xffffffff, 0x108, 0x65aa}, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(&(0x7f0000000200)='./file1/file3\x00', &(0x7f00000002c0)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
clock_gettime(0x8, &(0x7f0000001ac0))
mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b)
prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x9e5c1000)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224000100000000090400000003010000002100000001220000090581030000000000b88b2318cc264dcacf37a7fb4d0453f004f4185aed67e99c6a3704482fbed1c6f903ed30d7efbffcde1e50734ac58f484d67f106453e480fd837e2d83e6accc51527"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x24, 0x48, 0x301, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x5}, [@IFAL_LABEL={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x40040)
write$sysctl(r4, &(0x7f0000000180)='4\x00', 0x2)

8.061097707s ago: executing program 6 (id=6138):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x4004804)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)

7.958388429s ago: executing program 1 (id=6139):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0x94fa, 0xfc00, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x28, 0x80000, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f0000000580)={0x6, 0x0, [{0xa0f, 0x0, 0x8000000000000000}, {0x9bf, 0x0, 0x2}, {0xa5c, 0x0, 0x4}, {0x38c, 0x0, 0x8f5}, {0xb3e, 0x0, 0x1fe}, {0xa5f, 0x0, 0x6}]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r6, @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x40048}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280), 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000f400cf1077c877d474ca010203010902240001000000000904d800020805010009050abe02100000fa00090582025004", @ANYRESHEX, @ANYRES8=r1], 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250)

6.702962047s ago: executing program 5 (id=6145):
socket(0x2, 0x3, 0xff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x7, 0x0, 0x9, 0x1, 0x8, 0xfa11, 0x1ff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc0541, 0x0)
r4 = fsopen(&(0x7f0000000700)='affs\x00', 0x1)
fcntl$dupfd(r3, 0x0, r4)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10)
lsetxattr$security_capability(0x0, &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0)
creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x92)
syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a020009050000000000faff0705d37e"], 0x0)

6.474206083s ago: executing program 7 (id=6146):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@generic={0x94, 0x6, "d853bd7a"}, @noop, @noop]}}, @address_request={0x11, 0x0, 0x0, 0x90b6}}}}}, 0x0)
getsockopt$inet6_int(r6, 0x29, 0x35, 0x0, &(0x7f0000000140))
bind$inet(r0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', <r8=>0x0})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x90)
setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

5.165012556s ago: executing program 0 (id=6147):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005380)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x2, 0x1, 0x70e2, 0x5, 0x81}, {0xa2, 0x1, 0xff00, 0x5, 0x984a, 0xffff}, 0x5, 0x5, 0x12c7}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0xfffffffe, 0x10, 0x5, 0x0, 0x3dc4f35b, 0x9, 0x10, 0x69, 0x5, 0xe, 0x6, 0x800, 0x68, 0x67da5a7f, 0x7, 0x3, 0x3, 0x1002, 0x1000, 0x1, 0x10001, 0x16800000, 0x88, 0x1714, 0x9, 0x4, 0x5, 0x2, 0x6, 0x8, 0x8, 0xffffffff, 0xda1, 0x37, 0x4, 0x7, 0xd, 0xcc, 0x3, 0x34, 0xfac, 0x0, 0xfdc, 0xffff, 0xda, 0x81, 0x80000000, 0x1ff, 0x34b8, 0x5, 0x81, 0x8, 0x10, 0xa7a3, 0x8, 0x0, 0xd, 0x9, 0xa3b, 0x1, 0xffe00000, 0x6, 0x1, 0x1, 0x401, 0x3, 0x88e3, 0xbc99, 0x7fff, 0x5, 0xfffffff8, 0x4, 0x717a, 0x2, 0x4, 0x80000000, 0x0, 0x7, 0x1, 0x200, 0x7, 0x9, 0x10001, 0x9, 0xed1f, 0x800, 0x1, 0xffffffff, 0x7, 0x9, 0x8, 0x401, 0x10, 0xffffffff, 0x7, 0x400, 0x5, 0x1, 0x100, 0x4, 0x7f, 0x0, 0x8, 0x7fff, 0xff, 0x2599797e, 0xfffffffc, 0x6, 0x5, 0xfffffff7, 0x9, 0x9, 0x7, 0x81, 0xe44, 0x9, 0x5, 0x8, 0x9, 0xccac, 0x5, 0xb, 0x9, 0x7, 0x1000, 0x1, 0x9, 0xc1, 0xf86, 0x7, 0x0, 0x4, 0x1, 0x7, 0x7, 0xfffffff7, 0x1, 0x2, 0x4, 0x2, 0x0, 0x6, 0x401, 0x5, 0x4, 0x6, 0x8, 0x6, 0x9, 0x2, 0x10001, 0x80000001, 0x3, 0x10000, 0x3, 0xce, 0xffffffd9, 0x100, 0x6, 0x6, 0x5, 0x915, 0x8, 0x5, 0x7ff, 0xfff, 0x1000, 0xa, 0x2, 0x7fd, 0x4007, 0x20000000, 0xff, 0xfffff4d5, 0x1, 0x6, 0x0, 0x0, 0x757, 0x0, 0x4, 0x3, 0xc, 0x3, 0xa8, 0x5ef5, 0x5077, 0x6, 0x78, 0xfffff07c, 0x8, 0x5b4, 0x1, 0xc71f, 0xffff, 0x1, 0x4, 0x4000, 0x8000, 0xe8c, 0x4, 0x3, 0x6, 0x0, 0x87f, 0x0, 0x1ff, 0x6, 0x4, 0x5, 0x4, 0x9, 0x1ff, 0x67, 0xf8086dc1, 0x7, 0x4, 0x7b95, 0x7, 0x19, 0x10, 0x6, 0x3, 0x1, 0x2, 0x0, 0x0, 0x8, 0x8, 0x8, 0x9, 0x5380, 0x80000001, 0x7, 0x6, 0x1, 0x8, 0x9, 0x6, 0x7, 0x6, 0x9, 0x6, 0x3, 0x5, 0x2, 0x6, 0x71c9, 0x1, 0x5, 0x9, 0x312, 0x401, 0x6, 0x8000]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x400dc}, 0x8000)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084)

4.877425907s ago: executing program 6 (id=6148):
r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001340)=@newsa={0xfc, 0x10, 0x7, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x8000000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x34ff, 0xa, 0x2, 0x0, 0x70}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x4}}]}, 0xfc}}, 0x20040000)
unshare(0x22020600)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90eca", 0x10)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0)
sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0xfffffffff000, 0x3, &(0x7f0000ffc000/0x4000)=nil)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0)
r7 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
r10 = socket$inet(0x2, 0x1, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x3})
setsockopt$inet_int(r10, 0x0, 0x13, &(0x7f0000000040)=0xfffffffe, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1})
r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0)
syz_usb_control_io(r11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000000)={0x2, 0x3, 0x1})
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000004c0)={0x2, 0x2, 0x3, 0x8, 0x4, 0xf})

4.688180606s ago: executing program 0 (id=6149):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x30bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}]}, 0x28}}, 0x40) (fail_nth: 1)

4.405448338s ago: executing program 0 (id=6150):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}})

4.137074179s ago: executing program 0 (id=6151):
keyctl$describe(0x6, 0x0, 0x0, 0x0)
r0 = msgget$private(0x0, 0x510)
msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000040)=""/111)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x8, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x4000)
r3 = socket(0x8, 0x8, 0x5)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
syz_usb_connect(0x7, 0x3a, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x98, 0x8d, 0x14, 0x20, 0x4e2, 0x1403, 0xad2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0x7, 0x7, 0x80, 0x0, "", [{{0x9, 0x4, 0x27, 0x6, 0x2, 0x2, 0x85, 0x1, 0x2, [], [{{0x9, 0x5, 0x85, 0x10, 0x8, 0xa, 0xfc}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x8, 0x7, 0x9, [@generic={0x2, 0x4}, @generic={0x2, 0x22}]}}]}}]}}]}}, 0x0)

3.688562553s ago: executing program 7 (id=6152):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socket(0x2, 0x2, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)

3.529761887s ago: executing program 7 (id=6153):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'ipvlan1\x00', &(0x7f0000000580)=@ethtool_coalesce={0x1, 0x8, 0x6, 0x1f3e, 0x6, 0x10000, 0x40, 0xda, 0x1, 0x1, 0x1, 0x9, 0x9, 0x6, 0x8, 0x8001, 0x1, 0x3, 0x2, 0x7fffffff, 0x400, 0x7, 0x10001}})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000})
socket$netlink(0x10, 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f})
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
io_setup(0x222, &(0x7f0000000180)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r5, &(0x7f0000000a00)="1c73de19da4e24a4be5c3011d88efffbb251589a5bef61f451a747474f315938cc426a841b78d07b04cc6f2d276323ea48a6fd1c0ba66f5055239df5a21b234315694fd58fe32aeaa543e5fe08ccdf3e689caa8cedec8010f8bb8c59eaa1ecbf0f6f66afde88c010b3138095b6a0116af9c9011f03cc24e087286f2553198568c0aea639920383723c52ce2839b5dcb5ecf2eb92eeb24271354e1719e92347b792d0402fb04bbbf78fbebbf4b4832385561e1010dd612da55e8f738b13288b548d333c1d174ade527cafb3fc6576c16cd2e71f68286e28d5d8a17ef63d253bc56ce36b8d4aef6c0a34d8b9463ce4535f9c1700a5bf7b0f217ae63d3d377ddbcf7d4dd2f3f8f08de60c87b1e07487cae176e2f76ea307fa1693d84328c7f751d6d997555964813b103ea44b6e2e8bcc09609c25e5d1e0f174c44dfed19aa2fc6e6a60c589909709ff6b1a8e3c7462427d11469f81fa4d9a69ee39b8f3824889f3ee0c5838a22832193d9f42bfcff8f1990746da71c109c82f51aaffbc9b33b03fe4993f4bfb59461c5a2e13514072283677447793cfe1e7bf5b48416b80a7e18e22cb13e0370f7bb9bf952c4c5355dbb8fe0d912f88d743c536db4b306075c2dcd59d602e75bb159f71e4f11192631fc338203c136c9efc5f05bf94d2fee1a6ad20f2c7e834e5be49ebedde2d9735f46eb08c6537d24f3f06589a4597f2d9378f", 0x200, 0x200}])
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

3.437617738s ago: executing program 0 (id=6154):
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000600)={0x77359400}, 0x0)
r1 = gettid()
timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000044000))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x8, 0x5, 0x600, 0x2f8, 0xf0, 0xffffffff, 0x0, 0x0, 0x530, 0x530, 0xffffffff, 0x530, 0x530, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x33, 0x4, 0x4, 0x42}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @port=0x4e20}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@sctp={{0x148}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}, @gre_key=0x3, @gre_key=0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_clone(0x8001000, &(0x7f0000000100)="6e4b0da2b4caa0c24082af3ad9691514a0d1132ea8dce5ebf0382824227cbcccffefd0", 0x23, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000380)="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")
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r7, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f00000004c0)={0x28, 0x4, r8, r7, 0x0, 0x0, 0xdead, 0xfffffffffffffd4c, &(0x7f0000000040)})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x101, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x0)

3.205309618s ago: executing program 5 (id=6155):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000cf000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000002000005584ceff000000009500008000000066387b7b00"], &(0x7f0000000340)='GPL\x00', 0x7fffbfff, 0xa0, &(0x7f0000000140)=""/160, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xd, 0x0, 0x1}, 0x10, 0x2147, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f00000002c0)=[{0x3, 0x3, 0x10, 0x9}, {0x3, 0x1, 0x1, 0x7}, {0x5, 0x5, 0x1, 0x6}, {0x4, 0x4, 0x10000ff, 0x4}, {0x0, 0x5, 0x8, 0xc}], 0x10, 0xa}, 0x94)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0), 0x8)
prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff)
ptrace(0x10, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', <r3=>0x0})
r4 = dup(r0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="1a00000000200000000000000561ef3e04ad829b75ebc9b5791a8ffade0d1c772f76c8ff050a8ae7d260b4250710e54a3846e30c79769db96e4fbf30a513a0a7d0fa8defe39ad7e0a9aa6daff90ac5f3210ab9bb428ebd45730aa78d8b028e23728a5a4138866d9618f62f6cee2852de", @ANYRES32=r4, @ANYBLOB, @ANYRES64=0x0], 0x20)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYBLOB="d92c64656661756c7465726d697373696f6e0000"], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r5, &(0x7f000000a100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38d7b98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b3276342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440f97f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb526301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd437497320d383e752dd224aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee660debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6de640bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f2f7ee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc6c9a44c575738725815a9af1ced500", 0x2000, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x77, 0x2143040, 0x7f7f, 0x9, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x7, &(0x7f00000003c0)={<r8=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000440)={0xb, 0x10, 0xfa00, {0x0, r8, 0x3}}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0))
syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000000))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x80080d0, 0x1})
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

3.155675979s ago: executing program 1 (id=6156):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x50)
r0 = syz_io_uring_setup(0xd38, &(0x7f0000000340)={0x0, 0x7735, 0x8, 0x201, 0x352}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

2.565843593s ago: executing program 1 (id=6157):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socket(0x23, 0x6, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=<r2=>0x0)
sched_setattr(r2, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xffffffff, 0x108, 0x65aa}, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(&(0x7f0000000200)='./file1/file3\x00', &(0x7f00000002c0)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
clock_gettime(0x8, &(0x7f0000001ac0))
mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b)
prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x9e5c1000)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224000100000000090400000003010000002100000001220000090581030000000000b88b2318cc264dcacf37a7fb4d0453f004f4185aed67e99c6a3704482fbed1c6f903ed30d7efbffcde1e50734ac58f484d67f106453e480fd837e2d83e6accc51527"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="9d625d0000c60124818327b2369deca65eb2dc2e2c7b9b0d8310c7db3407000000000000004d0b44e052682c9431576d24fe5fa863cfeb68f4d7e6e1fa94dc5a12a178ef0141a43ce537e382f0c625a675da88a1e2243859793366f6500e166c663df6896128b418170387c9739796a63377a532e746e5cf44a3df6bda972b8bbe652400b7a6df0d4ec894674b675c48670c1bba3615091d75e9c084db1f7a593ff2d25e4b4a868f20421faef3fb8c04b5fb1eaf52b86056f7c4defa4e6a39cb5e3047f1c87666b10ab885653768a85f8f1a2122faff0db521ebfe73ebd900290be2bc297a9a20e5e3ff55184e2e2d76bfbbeb004a5739c176239f3b16b3de79565443822d2e6d875b66fb03786f4638355d793121c1e7bec3b14406c2ba2ef28d8eaa66b7a202ad30ff395caeb62690e33f4e72c28ead0b36a2a3ca776a2aeb3f66c36095ed3dfb8f808c32a16dd903767681ecb697a5a763a9fca6f3a384419ce882d32fa2bfbd05b3246a07352b8c3b3cc786f9728c6fbe68bc08f256161151a8d1b6e2bee25e81995acc9540d60cc3ad61d32b417c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x24, 0x48, 0x301, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x5}, [@IFAL_LABEL={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x40040)
write$sysctl(r4, &(0x7f0000000180)='4\x00', 0x2)

2.381328057s ago: executing program 5 (id=6158):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1c2b, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3010}, 0x1})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x15, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0xf4fa}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x31}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x7fffffff, 0x3d, &(0x7f0000000440)=""/61, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x1, 0x81, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500)=[r1, r1, r1, r1], &(0x7f0000000740)=[{0x2, 0x5, 0x6, 0x1}, {0x5, 0x2, 0xf, 0xa}, {0x4, 0x2, 0x8, 0x8}, {0x3, 0x1, 0xb, 0x6}], 0x10, 0x2a}, 0x94)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x58, 0x10, 0x801, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}]}, @IFLA_IFALIAS={0x14, 0x14, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x200000000000000, 0x0, 0x20}, 0x0)
io_uring_enter(r2, 0x2ded, 0x4000, 0x4, 0x0, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000940)="57f40956c8a73fced25a958d9344746a5c3d07950ecf5b2d89e2c783ac082565e8c94edee9ae2a24b0b925438be888317de67e3f74808e13eab027dae34f70315c9d1bc4df9cda9cf1d23f8451be3b7273824e501d56a169a1bb2b55fd1fd0c280509342fb583c935d2b4cee059e2f0e2e62ce03de4c522668e9f2f0e44e1335a7fbc4682d30", 0x86)
listen(r7, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x80800)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x1d0, r9, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'xfrm0\x00'}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe16, @dev={0xfe, 0x80, '\x00', 0x24}, 0x200}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4ab965e7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x1d0}}, 0x4800)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000200)=0x1)

1.536859029s ago: executing program 6 (id=6160):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1c2b, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3010}, 0x1})
r5 = socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0xf4fa}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x31}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x7fffffff, 0x3d, &(0x7f0000000440)=""/61, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x1, 0x81, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500)=[r1, r1, r1, r1], &(0x7f0000000740)=[{0x2, 0x5, 0x6, 0x1}, {0x5, 0x2, 0xf, 0xa}, {0x4, 0x2, 0x8, 0x8}, {0x3, 0x1, 0xb, 0x6}], 0x10, 0x2a}, 0x94)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x58, 0x10, 0x801, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}]}, @IFLA_IFALIAS={0x14, 0x14, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20}, 0x0)
io_uring_enter(r2, 0x2ded, 0x4000, 0x4, 0x0, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000940)="57f40956c8a73fced25a958d9344746a5c3d07950ecf5b2d89e2c783ac082565e8c94edee9ae2a24b0b925438be888317de67e3f74808e13eab027dae34f70315c9d1bc4df9cda9cf1d23f8451be3b7273824e501d56a169a1bb2b55fd1fd0c280509342fb583c935d2b4cee059e2f0e2e62ce03de4c522668e9f2f0e44e1335a7fbc4682d30", 0x86)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, &(0x7f0000000040)=0xbc)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000040)={0x0, 0x7fffffff}, 0x8)
listen(r7, 0x0)
r9 = accept4(r7, 0x0, 0x0, 0x80800)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x180, r10, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'xfrm0\x00'}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe16, @dev={0xfe, 0x80, '\x00', 0x24}, 0x200}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4ab965e7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x180}}, 0x4800)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000200)=0x1)

1.338295191s ago: executing program 7 (id=6161):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f00000000c0)={0x25, &(0x7f00000006c0)=[{0x8, '\x00', @st={0x4, [{0x0, @svalue=0xf2}, {0x3, @uvalue=0x2}, {0x1, @uvalue=0x5}, {0x0, @uvalue=0x5}]}, 0x3}]})
ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x24000000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000640)=@ethtool_stats})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, 0x0, 0x0, 0x200, 0xd})

1.141500906s ago: executing program 5 (id=6162):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d) (async)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x5210c0, 0xc1)
vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) (async, rerun: 32)
r2 = socket$unix(0x1, 0x2, 0x0) (rerun: 32)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f00000000c0)={0xfffffeff, 0x5, 0x1ff, 0x9, 0xb2a1, 0x0, 0x7}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}, {0x0}], 0x2}) (async, rerun: 32)
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) (rerun: 32)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='dvmrp1\x00', 0x10) (async)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x48080, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10, 0x11, r9, 0x35efd000) (async)
ioctl$TIOCGPTPEER(r8, 0x5441, 0x5) (async)
setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) (async)
recvmsg(r3, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0xffffffed}, 0xaf}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000540)=""/4124, 0x101c}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000000500)=""/38, 0x26}], 0x3}, 0x7}], 0x3, 0x2000, 0x0)

770.39611ms ago: executing program 7 (id=6163):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socket(0x2, 0x2, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16, 0x0, 0x0, 0x3000000}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)

764.725885ms ago: executing program 5 (id=6164):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$pppoe(0x18, 0x1, 0x0) (rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) (async)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8a080, 0x39, 0x15}, 0x18)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
setxattr$trusted_overlay_origin(0x0, &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x0) (async, rerun: 64)
r4 = gettid() (rerun: 64)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xffffffffffffffe3, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0)
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f0000000b80)=""/175, 0xaf}, {&(0x7f00000029c0)=""/4099, 0x1003}, {&(0x7f00000004c0)=""/175, 0xaf}], 0x6}, 0x22120)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)

442.959691ms ago: executing program 7 (id=6165):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="360a000000000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d"], 0x0)

292.084614ms ago: executing program 6 (id=6166):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000480)="c0", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000001980)='G', 0x1}], 0x10000220}}], 0x2, 0x404c8d0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a160a010400000000000000000117e493f6ca560000000900010073797a3000000000a57ae435181f54f62b7097870900020073797a3000000000"], 0x58}}, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
ppoll(&(0x7f0000000200)=[{r0, 0x2402}], 0x1, 0x0, 0x0, 0xfffffffffffffff0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x4e23, @local}, {0x306, @multicast}, 0x70, {0x2, 0x4e21, @rand_addr=0x64010101}, 'ip6tnl0\x00'})
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/freeze_filesystems', 0x149a82, 0x0)
write$cgroup_int(r4, &(0x7f0000000080)=0x80001f00, 0x12)
symlinkat(&(0x7f0000000040)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00')

73.198298ms ago: executing program 5 (id=6167):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x94000)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x40044160, 0x3)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="fccd35d7352b6df743ae39d626c623e9", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_io_uring_setup(0x4e9, &(0x7f00000003c0)={0x0, 0x334b, 0x80, 0x8003, 0x805}, &(0x7f00000001c0)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
pipe(0x0)
timer_create(0x2, 0x0, &(0x7f0000bbdffc)=<r9=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_delete(r9)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc600c7, 0x0)
io_uring_enter(r6, 0xbbc, 0xd582, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)

0s ago: executing program 6 (id=6168):
syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x879a, 0x10000, 0x0, 0x2}, 0x0, 0x0)
syz_clone3(&(0x7f0000000080)={0x100801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000300)={0x18, r3, 0x7, 0x0, &(0x7f00000003c0)=[{0xc, 0x6}, {0x401}, {0x6, 0x3}, {0x1000, 0x9}, {0xfad6, 0x8}, {0xb3b, 0x9}, {0x6, 0x7}]})
r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYRES16=r0, @ANYRESHEX=r4], 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000200)={'raw\x00', 0x0, [0xe, 0x1, 0x9, 0x100, 0x1]}, &(0x7f0000000280)=0x54)
syz_emit_ethernet(0x181, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x4, [0x9fe, 0xf5c, 0x7ff, 0xe60]})

kernel console output (not intermixed with test programs):

etdevsim3: renamed from eth3
[ 1857.932331][T27823] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1858.126540][T27901] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[ 1858.169887][T27823] 8021q: adding VLAN 0 to HW filter on device team0
[ 1858.193493][T27901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5480'.
[ 1858.282880][T23236] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[ 1858.390027][T15689] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1858.397548][T15689] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1858.453338][ T5826] Bluetooth: hci5: command tx timeout
[ 1858.462826][ T5831] kworker/0:3 (5831) used greatest stack depth: 15744 bytes left
[ 1858.472888][T15689] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1858.480168][T15689] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1858.547689][T23236] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1858.581502][T23236] usb 2-1: not running at top speed; connect to a high speed hub
[ 1858.613594][T23236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1858.624652][T23236] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1858.659259][T23236] usb 2-1: string descriptor 0 read error: -22
[ 1858.669208][T23236] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1858.678952][T23236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1859.141187][T23236] usb 2-1: 0:2 : does not exist
[ 1859.159545][T27905] input: syz1 as /devices/virtual/input/input148
[ 1859.514404][T27823] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1859.746586][T27823] veth0_vlan: entered promiscuous mode
[ 1859.773768][T27823] veth1_vlan: entered promiscuous mode
[ 1859.963589][T27912] FAULT_INJECTION: forcing a failure.
[ 1859.963589][T27912] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1859.979616][T27912] CPU: 1 UID: 0 PID: 27912 Comm: syz.7.5483 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1859.979651][T27912] Tainted: [L]=SOFTLOCKUP
[ 1859.979660][T27912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1859.979674][T27912] Call Trace:
[ 1859.979683][T27912]  <TASK>
[ 1859.979693][T27912]  dump_stack_lvl+0xe8/0x150
[ 1859.979730][T27912]  should_fail_ex+0x412/0x560
[ 1859.979764][T27912]  _copy_from_iter+0x1d3/0x1670
[ 1859.979794][T27912]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1859.979828][T27912]  ? __pfx_policy_nodemask+0x10/0x10
[ 1859.979859][T27912]  ? __pfx__copy_from_iter+0x10/0x10
[ 1859.979906][T27912]  ? set_page_refcounted+0xa0/0x1e0
[ 1859.979933][T27912]  ? page_copy_sane+0x4e/0x270
[ 1859.979965][T27912]  copy_page_from_iter+0xdd/0x170
[ 1859.980000][T27912]  tun_get_user+0x1d4b/0x3dd0
[ 1859.980138][T27912]  ? tun_get_user+0x6ff/0x3dd0
[ 1859.980186][T27912]  ? aa_file_perm+0x50e/0x15e0
[ 1859.980217][T27912]  ? __pfx_tun_get_user+0x10/0x10
[ 1859.980246][T27912]  ? aa_file_perm+0x192/0x15e0
[ 1859.980294][T27912]  ? ref_tracker_alloc+0x35c/0x4c0
[ 1859.980326][T27912]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1859.980362][T27912]  ? tun_get+0x1c/0x2f0
[ 1859.980398][T27912]  ? tun_get+0x1c/0x2f0
[ 1859.980426][T27912]  ? tun_get+0x1c/0x2f0
[ 1859.980461][T27912]  tun_chr_write_iter+0x113/0x200
[ 1859.980495][T27912]  vfs_write+0x61d/0xb90
[ 1859.980525][T27912]  ? __pfx_vfs_write+0x10/0x10
[ 1859.980557][T27912]  ? __fget_files+0x2a/0x420
[ 1859.980598][T27912]  ksys_write+0x150/0x270
[ 1859.980623][T27912]  ? __pfx_ksys_write+0x10/0x10
[ 1859.980655][T27912]  do_syscall_64+0x14d/0xf80
[ 1859.980678][T27912]  ? trace_irq_disable+0x3b/0x150
[ 1859.980710][T27912]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1859.980732][T27912]  ? clear_bhb_loop+0x40/0x90
[ 1859.980759][T27912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1859.980780][T27912] RIP: 0033:0x7fa0c395cfce
[ 1859.980801][T27912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1859.980820][T27912] RSP: 002b:00007fa0c488cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1859.980844][T27912] RAX: ffffffffffffffda RBX: 00007fa0c488d6c0 RCX: 00007fa0c395cfce
[ 1859.980860][T27912] RDX: 000000000000006a RSI: 0000200000000000 RDI: 00000000000000c8
[ 1859.980874][T27912] RBP: 00007fa0c488d090 R08: 0000000000000000 R09: 0000000000000000
[ 1859.980899][T27912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1859.980912][T27912] R13: 00007fa0c3c16038 R14: 00007fa0c3c15fa0 R15: 00007fa0c3d3fa48
[ 1859.980945][T27912]  </TASK>
[ 1860.249960][T27823] veth0_macvtap: entered promiscuous mode
[ 1860.259959][T27823] veth1_macvtap: entered promiscuous mode
[ 1860.277850][T27823] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1860.288954][T27823] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1860.485300][ T1093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1860.553900][ T5826] Bluetooth: hci5: command tx timeout
[ 1860.562699][ T1093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1860.616310][ T1093] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1860.650344][ T1093] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1860.845000][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1860.856052][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1860.870585][T27921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5486'.
[ 1861.034125][T15689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1861.055015][T15689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1861.508488][T27931] loop5: detected capacity change from 0 to 7
[ 1861.515895][T27931] Dev loop5: unable to read RDB block 7
[ 1861.521661][T27931]  loop5: unable to read partition table
[ 1861.528018][T27931] loop5: partition table beyond EOD, truncated
[ 1861.535066][T27931] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1861.592834][T16634] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 1861.708909][T23236] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1861.722339][T23236] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1861.745910][T23236] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[ 1861.753451][T16634] usb 6-1: Using ep0 maxpacket: 8
[ 1861.765882][T16634] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1861.792572][T16634] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1861.806838][T23236] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1861.817776][T16634] usb 6-1: Product: syz
[ 1861.822023][T16634] usb 6-1: Manufacturer: syz
[ 1861.829323][T16634] usb 6-1: SerialNumber: syz
[ 1861.845004][T16634] usb 6-1: config 0 descriptor??
[ 1861.861222][T23236] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1861.895491][T23236] usb 2-1: USB disconnect, device number 61
[ 1861.979060][   T29] audit: type=1326 audit(1772747623.635:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27936 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1862.004595][   T29] audit: type=1326 audit(1772747623.635:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27936 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1862.027866][   T29] audit: type=1326 audit(1772747623.665:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27936 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1862.058466][   T29] audit: type=1326 audit(1772747623.665:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27936 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1862.087187][T16634] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1862.095763][   T29] audit: type=1326 audit(1772747623.665:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27936 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1862.118715][   T29] audit: type=1326 audit(1772747623.695:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27936 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1862.145385][   T29] audit: type=1326 audit(1772747623.715:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27936 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1862.170353][   T29] audit: type=1326 audit(1772747623.715:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27936 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1862.192954][   T29] audit: type=1326 audit(1772747623.715:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27936 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1862.215583][   T29] audit: type=1326 audit(1772747623.715:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27936 comm="syz.1.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1862.612639][ T5826] Bluetooth: hci5: command tx timeout
[ 1863.919937][T16634] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1863.938000][T16634] usb 6-1: USB disconnect, device number 121
[ 1864.066852][T27963] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[ 1864.243289][T27972] FAULT_INJECTION: forcing a failure.
[ 1864.243289][T27972] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1864.274439][T27972] CPU: 1 UID: 0 PID: 27972 Comm: syz.7.5505 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1864.274474][T27972] Tainted: [L]=SOFTLOCKUP
[ 1864.274484][T27972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1864.274497][T27972] Call Trace:
[ 1864.274507][T27972]  <TASK>
[ 1864.274517][T27972]  dump_stack_lvl+0xe8/0x150
[ 1864.274553][T27972]  should_fail_ex+0x412/0x560
[ 1864.274588][T27972]  _copy_to_user+0x31/0xb0
[ 1864.274623][T27972]  simple_read_from_buffer+0xe1/0x170
[ 1864.274661][T27972]  proc_fail_nth_read+0x1bb/0x230
[ 1864.274686][T27972]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1864.274710][T27972]  ? rw_verify_area+0x2a6/0x4d0
[ 1864.274725][T27972]  ? tun_chr_write_iter+0x18a/0x200
[ 1864.274745][T27972]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1864.274768][T27972]  vfs_read+0x20c/0xa70
[ 1864.274782][T27972]  ? fdget_pos+0x246/0x320
[ 1864.274809][T27972]  ? __pfx___mutex_lock+0x10/0x10
[ 1864.274826][T27972]  ? __pfx_vfs_read+0x10/0x10
[ 1864.274843][T27972]  ? __fget_files+0x2a/0x420
[ 1864.274868][T27972]  ? __fget_files+0x3a0/0x420
[ 1864.274889][T27972]  ? __fget_files+0x2a/0x420
[ 1864.274917][T27972]  ksys_read+0x150/0x270
[ 1864.274935][T27972]  ? __pfx_ksys_read+0x10/0x10
[ 1864.274959][T27972]  do_syscall_64+0x14d/0xf80
[ 1864.274974][T27972]  ? trace_irq_disable+0x3b/0x150
[ 1864.274996][T27972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1864.275012][T27972]  ? clear_bhb_loop+0x40/0x90
[ 1864.275037][T27972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1864.275052][T27972] RIP: 0033:0x7fa0c395cfce
[ 1864.275068][T27972] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1864.275081][T27972] RSP: 002b:00007fa0c488cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1864.275098][T27972] RAX: ffffffffffffffda RBX: 00007fa0c488d6c0 RCX: 00007fa0c395cfce
[ 1864.275110][T27972] RDX: 000000000000000f RSI: 00007fa0c488d0a0 RDI: 0000000000000004
[ 1864.275120][T27972] RBP: 00007fa0c488d090 R08: 0000000000000000 R09: 0000000000000000
[ 1864.275130][T27972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1864.275140][T27972] R13: 00007fa0c3c16038 R14: 00007fa0c3c15fa0 R15: 00007fa0c3d3fa48
[ 1864.275164][T27972]  </TASK>
[ 1865.333831][T27985] fuse: Bad value for 'fd'
[ 1865.372773][T12024] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 1865.533188][T12024] usb 6-1: Using ep0 maxpacket: 32
[ 1865.540018][T12024] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1865.563115][T12024] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1865.595884][T12024] usb 6-1: New USB device found, idVendor=0c45, idProduct=627b, bcdDevice=fc.b8
[ 1865.612924][T12024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1865.631880][T12024] usb 6-1: Product: syz
[ 1865.636435][T12024] usb 6-1: Manufacturer: syz
[ 1865.652257][T12024] usb 6-1: SerialNumber: syz
[ 1865.663400][T12024] usb 6-1: config 0 descriptor??
[ 1865.946903][T28002] xt_hashlimit: size too large, truncated to 1048576
[ 1866.176940][T23237] usb 6-1: USB disconnect, device number 122
[ 1866.454601][T28010] x_tables: duplicate underflow at hook 2
[ 1867.772620][T12024] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 1867.917831][T28033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5520'.
[ 1867.928215][T12024] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1867.946326][T12024] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1868.010783][T12024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1868.022158][T12024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1868.036433][T12024] usb 6-1: Product: syz
[ 1868.046777][T12024] usb 6-1: Manufacturer: syz
[ 1868.070853][T12024] usb 6-1: SerialNumber: syz
[ 1868.607181][T12024] cdc_ncm 6-1:1.0: SET_CRC_MODE failed
[ 1868.720357][T28047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5522'.
[ 1868.830979][T12024] cdc_ncm 6-1:1.0: bind() failure
[ 1868.886831][T12024] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[ 1868.956399][T12024] cdc_ncm 6-1:1.1: bind() failure
[ 1869.169929][T12024] usb 6-1: USB disconnect, device number 123
[ 1870.141817][T28069] netlink: 'syz.0.5528': attribute type 339 has an invalid length.
[ 1870.228763][T28074] x_tables: duplicate underflow at hook 1
[ 1870.532130][T28078] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5530'.
[ 1870.606375][T28078] netlink: 'syz.0.5530': attribute type 1 has an invalid length.
[ 1872.451933][T28115] trusted_key: encrypted_key: insufficient parameters specified
[ 1872.522675][T16634] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 1872.683461][T16634] usb 6-1: Using ep0 maxpacket: 8
[ 1872.754557][T16634] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[ 1872.764359][T16634] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1872.777977][T16634] usb 6-1: Product: syz
[ 1872.782909][T16634] usb 6-1: Manufacturer: syz
[ 1872.788159][T16634] usb 6-1: SerialNumber: syz
[ 1872.831285][T16634] usb 6-1: config 0 descriptor??
[ 1872.860957][T16634] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244)
[ 1873.015127][T28122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5544'.
[ 1873.409296][T16634] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[ 1873.421516][T16634] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1873.449611][T16634] usb 6-1: USB disconnect, device number 124
[ 1873.646762][T28131] FAULT_INJECTION: forcing a failure.
[ 1873.646762][T28131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1873.680901][T28131] CPU: 1 UID: 0 PID: 28131 Comm: syz.0.5546 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1873.680942][T28131] Tainted: [L]=SOFTLOCKUP
[ 1873.680951][T28131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1873.680966][T28131] Call Trace:
[ 1873.680976][T28131]  <TASK>
[ 1873.680985][T28131]  dump_stack_lvl+0xe8/0x150
[ 1873.681040][T28131]  should_fail_ex+0x412/0x560
[ 1873.681074][T28131]  _copy_from_user+0x2d/0xb0
[ 1873.681109][T28131]  ___sys_sendmsg+0x1c6/0x360
[ 1873.681151][T28131]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1873.681219][T28131]  ? __fget_files+0x2a/0x420
[ 1873.681252][T28131]  ? __fget_files+0x3a0/0x420
[ 1873.681295][T28131]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1873.681319][T28131]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1873.681351][T28131]  ? __pfx_ksys_write+0x10/0x10
[ 1873.681388][T28131]  do_syscall_64+0x14d/0xf80
[ 1873.681410][T28131]  ? trace_irq_disable+0x3b/0x150
[ 1873.681443][T28131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1873.681466][T28131]  ? clear_bhb_loop+0x40/0x90
[ 1873.681493][T28131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1873.681516][T28131] RIP: 0033:0x7fbd26d9c799
[ 1873.681537][T28131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1873.681557][T28131] RSP: 002b:00007fbd27bab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1873.681580][T28131] RAX: ffffffffffffffda RBX: 00007fbd27015fa0 RCX: 00007fbd26d9c799
[ 1873.681597][T28131] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 0000000000000003
[ 1873.681612][T28131] RBP: 00007fbd27bab090 R08: 0000000000000000 R09: 0000000000000000
[ 1873.681626][T28131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1873.681639][T28131] R13: 00007fbd27016038 R14: 00007fbd27015fa0 R15: 00007fbd2713fa48
[ 1873.681673][T28131]  </TASK>
[ 1874.172150][T28135] netlink: 'syz.0.5547': attribute type 10 has an invalid length.
[ 1874.637210][T28146] input: syz1 as /devices/virtual/input/input149
[ 1876.123303][T16634] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 1876.134002][T28172] FAULT_INJECTION: forcing a failure.
[ 1876.134002][T28172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1876.208366][T28172] CPU: 0 UID: 0 PID: 28172 Comm: syz.1.5557 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1876.208402][T28172] Tainted: [L]=SOFTLOCKUP
[ 1876.208411][T28172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1876.208425][T28172] Call Trace:
[ 1876.208435][T28172]  <TASK>
[ 1876.208444][T28172]  dump_stack_lvl+0xe8/0x150
[ 1876.208482][T28172]  should_fail_ex+0x412/0x560
[ 1876.208516][T28172]  _copy_to_user+0x31/0xb0
[ 1876.208552][T28172]  simple_read_from_buffer+0xe1/0x170
[ 1876.208589][T28172]  proc_fail_nth_read+0x1bb/0x230
[ 1876.208625][T28172]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1876.208661][T28172]  ? rw_verify_area+0x2a6/0x4d0
[ 1876.208683][T28172]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1876.208716][T28172]  vfs_read+0x20c/0xa70
[ 1876.208738][T28172]  ? fdget_pos+0x246/0x320
[ 1876.208775][T28172]  ? __pfx___mutex_lock+0x10/0x10
[ 1876.208801][T28172]  ? __pfx_vfs_read+0x10/0x10
[ 1876.208825][T28172]  ? __fget_files+0x2a/0x420
[ 1876.208862][T28172]  ? __fget_files+0x3a0/0x420
[ 1876.208894][T28172]  ? __fget_files+0x2a/0x420
[ 1876.208935][T28172]  ksys_read+0x150/0x270
[ 1876.208961][T28172]  ? __pfx_ksys_read+0x10/0x10
[ 1876.208996][T28172]  do_syscall_64+0x14d/0xf80
[ 1876.209025][T28172]  ? trace_irq_disable+0x3b/0x150
[ 1876.209058][T28172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1876.209080][T28172]  ? clear_bhb_loop+0x40/0x90
[ 1876.209108][T28172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1876.209132][T28172] RIP: 0033:0x7f29afd5cfce
[ 1876.209153][T28172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1876.209172][T28172] RSP: 002b:00007f29b0c72fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1876.209196][T28172] RAX: ffffffffffffffda RBX: 00007f29b0c736c0 RCX: 00007f29afd5cfce
[ 1876.209213][T28172] RDX: 000000000000000f RSI: 00007f29b0c730a0 RDI: 0000000000000004
[ 1876.209227][T28172] RBP: 00007f29b0c73090 R08: 0000000000000000 R09: 0000000000000000
[ 1876.209241][T28172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1876.209254][T28172] R13: 00007f29b0016128 R14: 00007f29b0016090 R15: 00007f29b013fa48
[ 1876.209290][T28172]  </TASK>
[ 1876.702351][T28177] trusted_key: encrypted_key: insufficient parameters specified
[ 1877.323772][T28189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5561'.
[ 1877.913547][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1878.443043][T12024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1878.732188][T28199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5563'.
[ 1878.801109][T28200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5563'.
[ 1879.745841][T23236] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1879.961598][T28223] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present
[ 1879.991322][T23236] usb 2-1: Using ep0 maxpacket: 8
[ 1880.007907][T23236] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1880.054243][T23236] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1880.107114][T23236] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1880.139466][T23236] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1880.161837][T23236] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1880.191557][T23236] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1880.258141][T23236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1880.425315][T28231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5573'.
[ 1880.515878][T23236] usb 2-1: GET_CAPABILITIES returned 0
[ 1880.521524][T23236] usbtmc 2-1:16.0: can't read capabilities
[ 1880.734584][T28239] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1880.806379][T28240] trusted_key: encrypted_key: insufficient parameters specified
[ 1881.617846][T28252] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5577'.
[ 1882.462334][T28254] vlan3: entered promiscuous mode
[ 1882.482566][T28254] bond0: entered promiscuous mode
[ 1882.509306][T28254] bridge3: entered promiscuous mode
[ 1883.342536][T23237] usb 6-1: new full-speed USB device number 126 using dummy_hcd
[ 1883.374991][T12024] usb 2-1: USB disconnect, device number 62
[ 1883.494157][T23237] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1883.516724][T23237] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1883.528738][T28271] netlink: 'syz.0.5584': attribute type 3 has an invalid length.
[ 1883.549438][T23237] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1883.606612][T23237] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1883.651695][T23237] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1883.689444][T23237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1883.739432][T23237] usb 6-1: Product: syz
[ 1883.749552][T23237] usb 6-1: Manufacturer: syz
[ 1883.769754][T23237] usb 6-1: SerialNumber: syz
[ 1883.802020][T28264] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1883.823696][T23237] cdc_mbim 6-1:1.0: skipping garbage
[ 1883.856282][T28278] binder: 28277:28278 ioctl 40046205 0 returned -22
[ 1883.953189][T28284] syz_tun: entered allmulticast mode
[ 1884.133245][T28280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5588'.
[ 1884.234917][T23237] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS
[ 1884.251477][T23237] cdc_mbim 6-1:1.0: bind() failure
[ 1884.275038][T23237] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[ 1884.292420][T23237] cdc_ncm 6-1:1.1: bind() failure
[ 1884.461021][T28295] trusted_key: encrypted_key: insufficient parameters specified
[ 1884.608461][T28300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1884.647208][T28299] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1885.362418][T15685] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1885.448627][T15685] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1885.483455][T15685] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1885.552246][T15685] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1885.665682][ T5938] usb 6-1: USB disconnect, device number 126
[ 1886.183172][ T5938] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 1886.332577][ T5938] usb 6-1: Using ep0 maxpacket: 16
[ 1886.340013][ T5938] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1886.349151][ T5938] usb 6-1: config 7 interface 0 has no altsetting 0
[ 1886.358477][ T5938] usb 6-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=76.09
[ 1886.367793][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1886.376259][ T5938] usb 6-1: Product: syz
[ 1886.380463][ T5938] usb 6-1: Manufacturer: syz
[ 1886.386222][ T5938] usb 6-1: SerialNumber: syz
[ 1886.412646][T23237] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[ 1886.542826][T23237] usb 2-1: device descriptor read/64, error -71
[ 1886.630888][ T5938] usb 6-1: USB disconnect, device number 127
[ 1886.802584][T23237] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[ 1886.850372][T28277] syz_tun: left allmulticast mode
[ 1886.940430][T23237] usb 2-1: device descriptor read/64, error -71
[ 1887.063161][T23237] usb usb2-port1: attempt power cycle
[ 1887.402556][T23237] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[ 1887.443375][T23237] usb 2-1: device descriptor read/8, error -71
[ 1887.482760][T23236] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1887.644688][T23236] usb 6-1: Using ep0 maxpacket: 16
[ 1887.653910][T23236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1887.666514][T23236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1887.677591][T23236] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1887.693581][T23237] usb 2-1: new full-speed USB device number 66 using dummy_hcd
[ 1887.702094][T23236] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[ 1887.711783][T23236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1887.720957][T23237] usb 2-1: device descriptor read/8, error -71
[ 1887.732168][T23236] usb 6-1: config 0 descriptor??
[ 1887.844180][T23237] usb usb2-port1: unable to enumerate USB device
[ 1888.149962][T23236] waterforce 0003:1044:7A4D.003F: unknown main item tag 0x0
[ 1888.157515][T23236] waterforce 0003:1044:7A4D.003F: unknown main item tag 0x0
[ 1888.166724][T23236] waterforce 0003:1044:7A4D.003F: unknown main item tag 0x0
[ 1888.175938][T23236] waterforce 0003:1044:7A4D.003F: unknown main item tag 0x0
[ 1888.183626][T23236] waterforce 0003:1044:7A4D.003F: unknown main item tag 0x0
[ 1888.190954][T23236] waterforce 0003:1044:7A4D.003F: unknown main item tag 0x0
[ 1888.198668][T23236] waterforce 0003:1044:7A4D.003F: unknown main item tag 0x0
[ 1888.206764][T23236] waterforce 0003:1044:7A4D.003F: unknown main item tag 0x0
[ 1888.214412][T23236] waterforce 0003:1044:7A4D.003F: unexpected long global item
[ 1888.223014][T23236] waterforce 0003:1044:7A4D.003F: hid parse failed with -22
[ 1888.230424][T23236] waterforce 0003:1044:7A4D.003F: probe with driver waterforce failed with error -22
[ 1888.365972][ T5938] usb 6-1: USB disconnect, device number 2
[ 1889.106599][T28342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5607'.
[ 1889.267089][T28346] trusted_key: encrypted_key: insufficient parameters specified
[ 1890.202583][ T5938] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1890.372853][ T5938] usb 2-1: Using ep0 maxpacket: 8
[ 1890.717084][ T5938] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1890.764576][ T5938] usb 2-1: config 4 has an invalid interface number: 163 but max is 0
[ 1891.012647][ T5938] usb 2-1: config 4 has no interface number 0
[ 1891.035199][ T5938] usb 2-1: config 4 interface 163 has no altsetting 0
[ 1891.074280][ T5938] usb 2-1: New USB device found, idVendor=106c, idProduct=caa3, bcdDevice=49.b0
[ 1891.109279][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1891.222578][ T5938] usb 2-1: Product: syz
[ 1891.226945][ T5938] usb 2-1: Manufacturer: syz
[ 1891.231575][ T5938] usb 2-1: SerialNumber: syz
[ 1891.545607][ T5938] qmi_wwan 2-1:4.163: bogus CDC Union: master=0, slave=0
[ 1891.614002][ T5938] qmi_wwan 2-1:4.163: probe with driver qmi_wwan failed with error -22
[ 1891.653940][ T5938] usb 2-1: USB disconnect, device number 67
[ 1891.792662][T23236] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1891.954897][T23236] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[ 1891.968526][T23236] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129
[ 1891.984985][T23236] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[ 1891.994652][T10831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1892.009208][T23236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1892.042206][T23236] usb 6-1: Product: syz
[ 1892.047033][T23236] usb 6-1: Manufacturer: syz
[ 1892.053296][T23236] usb 6-1: SerialNumber: syz
[ 1892.068022][T23236] usb 6-1: config 0 descriptor??
[ 1892.382815][T28397] trusted_key: encrypted_key: insufficient parameters specified
[ 1892.666311][T28399] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5624'.
[ 1892.763656][T23236] mos7840 6-1:0.0: required endpoints missing
[ 1892.773208][T23236] usb 6-1: USB disconnect, device number 3
[ 1892.932998][T10831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1893.782691][T28424] bond7: (slave tunl0): Device is not bonding slave
[ 1893.806321][T28424] bond7: option active_slave: invalid value (tunl0)
[ 1893.857499][T28424] bond7 (unregistering): Released all slaves
[ 1894.292697][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1894.466464][T28442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5636'.
[ 1894.969692][T28455] trusted_key: encrypted_key: insufficient parameters specified
[ 1895.256330][ T5938] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1895.468695][ T5938] usb 6-1: Using ep0 maxpacket: 8
[ 1895.490029][ T5938] usb 6-1: config 0 has no interfaces?
[ 1895.505659][ T5938] usb 6-1: config 0 has no interfaces?
[ 1895.521271][ T5938] usb 6-1: config 0 has no interfaces?
[ 1895.535531][ T5938] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1895.600295][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1895.621496][ T5938] usb 6-1: Product: syz
[ 1895.632635][ T5938] usb 6-1: Manufacturer: syz
[ 1895.667835][ T5938] usb 6-1: SerialNumber: syz
[ 1895.692802][ T5938] usb 6-1: config 0 descriptor??
[ 1895.971700][T28464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5644'.
[ 1896.275199][T28473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1896.285454][T28473] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1896.592931][T28476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1896.675804][T28476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1896.696855][T28476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1896.713196][T28476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1896.788932][ T5938] usb 6-1: USB disconnect, device number 4
[ 1896.935450][T28475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5645'.
[ 1896.992664][T28475] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1897.232974][ T5938] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[ 1897.395298][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1897.405285][ T5938] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1897.462701][T23236] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1897.531227][ T5938] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice= 0.00
[ 1897.582838][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1897.656997][T23236] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1897.670782][T23236] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1897.698637][ T5938] usb 6-1: config 0 descriptor??
[ 1897.702383][T28484] openvswitch: netlink: Tunnel attr 15617 out of range max 16
[ 1897.746712][T23236] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1897.761638][ T5938] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1897.773775][T23236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1897.803208][T23236] usb 2-1: Product: Ⴥ蒔�時�릤�⎣鋨
[ 1897.803766][ T5938] imon 6-1:0.0: unable to initialize intf0, err -19
[ 1897.810067][T23236] usb 2-1: Manufacturer: á°Š
[ 1897.810089][T23236] usb 2-1: SerialNumber: ┨ﳉ��햒륉銄ࡧ緳暳؛⑆딊섌ˌ踖踎嫳ʉ렵誨ඪ陾陋㦯抢Ὡ㷯逃�꼴黩㘀箢襙ꛨ鼲과鄹⟸곗ⳤ礅
[ 1897.864322][ T5938] imon:imon_probe: failed to initialize context!
[ 1897.871630][ T5938] imon 6-1:0.0: unable to register, err -19
[ 1897.904337][ T5938] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1898.937051][T10831] usb 6-1: USB disconnect, device number 5
[ 1899.297886][T28505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5654'.
[ 1899.470339][T23236] usb 2-1: unit 4 not found!
[ 1899.722311][T28513] trusted_key: encrypted_key: insufficient parameters specified
[ 1899.746873][T28513] FAULT_INJECTION: forcing a failure.
[ 1899.746873][T28513] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1899.774229][T23236] usb 2-1: USB disconnect, device number 68
[ 1899.796521][T28513] CPU: 1 UID: 0 PID: 28513 Comm: syz.1.5656 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1899.796564][T28513] Tainted: [L]=SOFTLOCKUP
[ 1899.796574][T28513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1899.796588][T28513] Call Trace:
[ 1899.796597][T28513]  <TASK>
[ 1899.796607][T28513]  dump_stack_lvl+0xe8/0x150
[ 1899.796644][T28513]  should_fail_ex+0x412/0x560
[ 1899.796679][T28513]  strncpy_from_user+0x36/0x2b0
[ 1899.796710][T28513]  __se_sys_add_key+0xdb/0x420
[ 1899.796735][T28513]  ? __pfx___se_sys_add_key+0x10/0x10
[ 1899.796769][T28513]  ? __x64_sys_add_key+0x20/0xc0
[ 1899.796785][T28513]  do_syscall_64+0x14d/0xf80
[ 1899.796802][T28513]  ? trace_irq_disable+0x3b/0x150
[ 1899.796825][T28513]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1899.796841][T28513]  ? clear_bhb_loop+0x40/0x90
[ 1899.796860][T28513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1899.796876][T28513] RIP: 0033:0x7f29afd9c799
[ 1899.796890][T28513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1899.796904][T28513] RSP: 002b:00007f29b0c52028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1899.796920][T28513] RAX: ffffffffffffffda RBX: 00007f29b0016180 RCX: 00007f29afd9c799
[ 1899.796932][T28513] RDX: 00002000000000c0 RSI: 0000200000000440 RDI: 00002000000003c0
[ 1899.796943][T28513] RBP: 00007f29b0c52090 R08: fffffffffffffffd R09: 0000000000000000
[ 1899.796954][T28513] R10: 00000000000000c9 R11: 0000000000000246 R12: 0000000000000001
[ 1899.796963][T28513] R13: 00007f29b0016218 R14: 00007f29b0016180 R15: 00007f29b013fa48
[ 1899.796987][T28513]  </TASK>
[ 1900.301608][ T9270] udevd[9270]: setting owner of /dev/bus/usb/002/068 to uid=0, gid=0 failed: No such file or directory
[ 1900.348916][T10806] udevd[10806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1900.703289][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1900.862918][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1901.133194][ T5938] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1901.282698][ T5938] usb 2-1: Using ep0 maxpacket: 8
[ 1901.289849][ T5938] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1901.299377][ T5938] usb 2-1: config 7 has an invalid interface number: 115 but max is 0
[ 1901.308131][ T5938] usb 2-1: config 7 has no interface number 0
[ 1901.315084][ T5938] usb 2-1: config 7 interface 115 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1901.326583][ T5938] usb 2-1: config 7 interface 115 has no altsetting 0
[ 1901.338538][ T5938] usb 2-1: New USB device found, idVendor=0675, idProduct=0200, bcdDevice=e1.e3
[ 1901.353313][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1901.361364][ T5938] usb 2-1: Product: syz
[ 1901.404167][ T5938] usb 2-1: Manufacturer: syz
[ 1901.414707][ T5938] usb 2-1: SerialNumber: syz
[ 1901.881004][ T5938] cxacru 2-1:7.115: cxacru_bind: interface has incorrect endpoints
[ 1901.913039][ T5938] cxacru 2-1:7.115: usbatm_usb_probe: bind failed: -19!
[ 1901.940545][ T5938] usb 2-1: USB disconnect, device number 69
[ 1902.073919][T28551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5666'.
[ 1902.130842][T28554] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5667'.
[ 1902.342337][   T29] kauditd_printk_skb: 38 callbacks suppressed
[ 1902.342360][   T29] audit: type=1326 audit(1772747663.955:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1902.385626][   T29] audit: type=1326 audit(1772747663.965:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1902.410830][   T29] audit: type=1326 audit(1772747663.965:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1902.493001][   T29] audit: type=1326 audit(1772747663.965:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1902.517277][   T29] audit: type=1326 audit(1772747663.965:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1902.558686][   T29] audit: type=1326 audit(1772747663.965:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1902.581951][   T29] audit: type=1326 audit(1772747663.965:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1902.695112][   T29] audit: type=1326 audit(1772747663.965:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1902.791914][   T29] audit: type=1326 audit(1772747664.115:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1902.951266][   T29] audit: type=1326 audit(1772747664.115:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1906.444424][T28631] IPVS: length: 131 != 24
[ 1906.482889][ T5938] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1906.632637][ T5938] usb 2-1: Using ep0 maxpacket: 8
[ 1906.640019][ T5938] usb 2-1: config 45 has an invalid interface number: 2 but max is 0
[ 1906.648444][ T5938] usb 2-1: config 45 has no interface number 0
[ 1906.654871][ T5938] usb 2-1: config 45 interface 2 has no altsetting 0
[ 1906.663958][ T5938] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb
[ 1906.673176][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1906.681274][ T5938] usb 2-1: Product: syz
[ 1906.685963][ T5938] usb 2-1: Manufacturer: syz
[ 1906.690603][ T5938] usb 2-1: SerialNumber: syz
[ 1906.893060][T28639] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5694'.
[ 1907.031643][T28645] netlink: 'syz.5.5696': attribute type 1 has an invalid length.
[ 1907.063902][T28645] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1907.090006][T28645] bond1: (slave bridge1): making interface the new active one
[ 1907.099761][T28645] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1909.214435][T28116] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1909.368480][ T5938] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[ 1909.393711][T28116] usb 6-1: Using ep0 maxpacket: 8
[ 1909.401299][ T5938] dvb-usb: bulk message failed: -22 (3/0)
[ 1909.424210][T28116] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1909.457142][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1909.468386][ T5938] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[ 1909.532350][T28116] usb 6-1: config 8 has an invalid interface number: 42 but max is 0
[ 1909.562181][ T5938] usb 2-1: media controller created
[ 1909.573318][T28116] usb 6-1: config 8 has no interface number 0
[ 1909.595507][ T5938] dvb-usb: bulk message failed: -22 (5/0)
[ 1909.601639][T28116] usb 6-1: config 8 interface 42 has no altsetting 0
[ 1909.620897][ T5938] dvb-usb: MAC address reading failed.
[ 1909.643478][T28116] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb
[ 1909.663161][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1909.692356][T28116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1909.707754][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1909.722641][T28116] usb 6-1: Product: syz
[ 1909.732637][T28116] usb 6-1: Manufacturer: syz
[ 1909.752735][T28116] usb 6-1: SerialNumber: syz
[ 1909.833477][ T5938] dvb-usb: bulk message failed: -22 (6/0)
[ 1909.849865][ T5938] dvb-usb: bulk message failed: -22 (6/0)
[ 1909.874193][ T5938] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[ 1909.916232][ T5938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input151
[ 1909.941390][ T5938] dvb-usb: schedule remote query interval to 100 msecs.
[ 1909.948737][ T5938] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[ 1909.968664][ T5938] usb 2-1: USB disconnect, device number 70
[ 1910.045828][ T5938] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[ 1910.392693][ T5938] usb 2-1: new full-speed USB device number 71 using dummy_hcd
[ 1910.547088][ T5938] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[ 1910.558401][ T5938] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 1910.569872][ T5938] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1910.579031][ T5938] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1910.588371][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1910.596942][ T5938] usb 2-1: Product: syz
[ 1910.602050][ T5938] usb 2-1: Manufacturer: syz
[ 1910.606795][ T5938] usb 2-1: SerialNumber: syz
[ 1910.615533][ T5938] usb 2-1: config 0 descriptor??
[ 1910.628091][ T5938] usb 2-1: selecting invalid altsetting 0
[ 1911.728814][T28116] empeg 6-1:8.42: empeg converter detected
[ 1911.736621][T28116] usb 6-1: active config #8 != 1 ??
[ 1911.750053][T28116] usb 6-1: USB disconnect, device number 6
[ 1912.018528][T28697] pim6reg: entered allmulticast mode
[ 1912.037911][T28697] pim6reg: left allmulticast mode
[ 1913.050349][T28706] loop5: detected capacity change from 0 to 7
[ 1913.059129][T28706] Dev loop5: unable to read RDB block 7
[ 1913.064920][T28706]  loop5: unable to read partition table
[ 1913.071014][T28706] loop5: partition table beyond EOD, truncated
[ 1913.080874][T28706] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1913.225040][T28116] usb 2-1: USB disconnect, device number 71
[ 1913.282620][T10831] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1913.475218][T10831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1913.489101][T10831] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1913.521393][T10831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1913.673036][T10831] usb 6-1: config 0 descriptor??
[ 1913.700784][T10831] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1913.900433][T28704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1913.914368][T28704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1913.933819][T28720] netlink: 'syz.1.5721': attribute type 21 has an invalid length.
[ 1913.941802][T28720] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5721'.
[ 1913.951482][T28720] netlink: 'syz.1.5721': attribute type 4 has an invalid length.
[ 1913.960028][T28720] netlink: 'syz.1.5721': attribute type 3 has an invalid length.
[ 1913.968525][T28720] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5721'.
[ 1914.612594][T23236] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1914.746579][T10831] usb 6-1: USB disconnect, device number 7
[ 1914.755104][T23236] usb 2-1: device descriptor read/64, error -71
[ 1914.785879][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.792865][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1915.002555][T23236] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1915.132724][T23236] usb 2-1: device descriptor read/64, error -71
[ 1915.242983][T23236] usb usb2-port1: attempt power cycle
[ 1915.583038][T23236] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1915.613164][T23236] usb 2-1: device descriptor read/8, error -71
[ 1915.882933][T23236] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1915.953249][T23236] usb 2-1: device descriptor read/8, error -71
[ 1916.064354][T23236] usb usb2-port1: unable to enumerate USB device
[ 1916.361840][T28747] input: syz1 as /devices/virtual/input/input152
[ 1916.852649][T22282] Bluetooth: hci4: command 0x0406 tx timeout
[ 1916.899838][T28754] 8021q: VLANs not supported on dvmrp0
[ 1917.208608][T28768] input: syz1 as /devices/virtual/input/input153
[ 1917.407707][T28770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5737'.
[ 1917.661666][   T29] kauditd_printk_skb: 45 callbacks suppressed
[ 1917.661686][   T29] audit: type=1326 audit(1772747679.315:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28774 comm="syz.1.5740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x0
[ 1918.232608][T23236] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[ 1918.384724][T23236] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1918.395104][T23236] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1918.404128][T23236] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[ 1918.415541][T23236] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1918.428078][T23236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1918.442863][T28787] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1918.457794][T23236] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1918.477944][T23236] hub 6-1:1.0: probe with driver hub failed with error -5
[ 1918.489995][T23236] cdc_wdm 6-1:1.0: skipping garbage
[ 1918.495835][T23236] cdc_wdm 6-1:1.0: skipping garbage
[ 1918.512040][T23236] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1918.518196][T23236] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1920.772572][T28787] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[ 1920.772582][ T5826] Bluetooth: hci2: command 0x0406 tx timeout
[ 1920.949828][T28787] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1920.957971][T28787] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1920.965178][T28787] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1920.971217][T28787] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1920.978730][T28787] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1920.984960][T28787] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1920.992155][T28787] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1921.105513][T28816] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1921.181441][T28816] netlink: 'syz.6.5751': attribute type 12 has an invalid length.
[ 1921.189560][T28816] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5751'.
[ 1922.183288][T28796] cdc_wdm 6-1:1.0: Error autopm - -16
[ 1922.184012][T28116] usb 6-1: USB disconnect, device number 8
[ 1922.543763][T28832] 8021q: VLANs not supported on dvmrp0
[ 1922.632929][T23236] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1922.802536][T23236] usb 6-1: Using ep0 maxpacket: 32
[ 1922.810157][T23236] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1922.821130][T23236] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1922.840606][T23236] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1922.852598][ T5826] Bluetooth: hci3: command 0x0406 tx timeout
[ 1922.859383][T23236] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1922.877909][T23236] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1922.888654][T23236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1922.898754][T23236] usb 6-1: Product: syz
[ 1922.903339][T23236] usb 6-1: Manufacturer: syz
[ 1922.908060][T23236] usb 6-1: SerialNumber: syz
[ 1922.927505][    C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1922.938369][T23236] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input154
[ 1923.012684][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1923.016345][T22282] Bluetooth: hci4: command 0x0406 tx timeout
[ 1923.020052][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1923.041156][T28837] binder: BINDER_SET_CONTEXT_MGR already set
[ 1923.047423][T28837] binder: 28836:28837 ioctl 4018620d 200000004a80 returned -16
[ 1923.110802][T28839] binder: 28836:28839 ioctl c0044dff 200000000240 returned -22
[ 1923.132748][T23236] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1923.141173][T23236]  (id 0x00)
[ 1923.202549][T23236] rc_core: IR keymap rc-imon-pad not found
[ 1923.208837][T23236] Registered IR keymap rc-empty
[ 1923.214060][T23236] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1923.224728][T23236] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1923.265319][T23236] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0
[ 1923.277765][T23236] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input155
[ 1923.295772][T23236] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:9> initialized
[ 1923.543356][T23236] usb 6-1: USB disconnect, device number 9
[ 1924.617761][T28860] loop5: detected capacity change from 0 to 7
[ 1924.626235][ T9270] Dev loop5: unable to read RDB block 7
[ 1924.632212][ T9270]  loop5: unable to read partition table
[ 1924.638360][ T9270] loop5: partition table beyond EOD, truncated
[ 1924.649760][T28860] Dev loop5: unable to read RDB block 7
[ 1924.656951][T28860]  loop5: unable to read partition table
[ 1924.681736][T28860] loop5: partition table beyond EOD, truncated
[ 1924.719933][T28860] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1924.837621][T23236] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1925.004899][T23236] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1925.043604][T23236] usb 2-1: config 63 has an invalid interface number: 66 but max is 0
[ 1925.056810][T23236] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[ 1925.077461][T23236] usb 2-1: config 63 has no interface number 0
[ 1925.093261][T28838] Bluetooth: hci4: command 0x0406 tx timeout
[ 1925.096650][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1925.104750][T23236] usb 2-1: config 63 interface 66 has no altsetting 0
[ 1925.129635][T23236] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[ 1925.129661][T23236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1925.129677][T23236] usb 2-1: Product: syz
[ 1925.129689][T23236] usb 2-1: Manufacturer: syz
[ 1925.129701][T23236] usb 2-1: SerialNumber: syz
[ 1925.368172][T23236] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[ 1925.401184][T23236] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1).
[ 1925.453444][T23236] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1).
[ 1925.478075][T23236] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1).
[ 1925.488933][T23236] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[ 1925.504591][T23236] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[ 1925.527905][T23236] uvcvideo 2-1:63.66: No streaming interface found for terminal 29.
[ 1925.552670][T23236] uvcvideo 2-1:63.66: Entity type for entity Output 32773 was not initialized!
[ 1925.619208][T23236] usb 2-1: USB disconnect, device number 76
[ 1925.806826][T28892] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1925.843002][T16634] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1925.863945][T28892] team0: Port device batadv1 added
[ 1925.982751][T23236] usb 2-1: new full-speed USB device number 77 using dummy_hcd
[ 1926.004849][T16634] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1926.027335][T16634] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[ 1926.039085][T16634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1926.068151][T16634] usb 6-1: config 0 descriptor??
[ 1926.079365][T28886] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1926.159201][T23236] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1926.174638][T23236] usb 2-1: not running at top speed; connect to a high speed hub
[ 1926.189741][T23236] usb 2-1: config 63 has an invalid interface number: 66 but max is 0
[ 1926.202659][T23236] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[ 1926.224005][T23236] usb 2-1: config 63 has no interface number 0
[ 1926.230299][T23236] usb 2-1: config 63 interface 66 has no altsetting 0
[ 1926.251702][T23236] usb 2-1: string descriptor 0 read error: -22
[ 1926.259920][T23236] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[ 1926.280135][T23236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1926.308329][T23236] uvcvideo 2-1:63.66: Found UVC 0.07 device <unnamed> (174f:8acf)
[ 1926.687082][T28863] netlink: 'syz.1.5765': attribute type 27 has an invalid length.
[ 1926.750939][T16634] asus 0003:0B05:1ABE.0040: unknown main item tag 0x0
[ 1926.796112][T16634] asus 0003:0B05:1ABE.0040: unknown main item tag 0x0
[ 1926.806473][T28903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1926.833425][T28903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1926.861785][T16634] asus 0003:0B05:1ABE.0040: unknown main item tag 0x0
[ 1926.887441][T16634] asus 0003:0B05:1ABE.0040: unknown main item tag 0x0
[ 1926.912658][T16634] asus 0003:0B05:1ABE.0040: unknown main item tag 0x0
[ 1926.939859][T16634] asus 0003:0B05:1ABE.0040: unknown main item tag 0x0
[ 1926.962713][T16634] asus 0003:0B05:1ABE.0040: unknown main item tag 0x0
[ 1926.990813][T16634] asus 0003:0B05:1ABE.0040: unknown main item tag 0x0
[ 1927.031974][T16634] asus 0003:0B05:1ABE.0040: unknown main item tag 0x0
[ 1927.066843][T16634] asus 0003:0B05:1ABE.0040: unknown main item tag 0x0
[ 1927.117607][T16634] asus 0003:0B05:1ABE.0040: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.5-1/input0
[ 1927.183254][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1927.196552][T16634] usb 6-1: USB disconnect, device number 10
[ 1927.632746][T28910] fido_id[28910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1927.940766][T28863] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1927.948994][T28863] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1928.683632][T28863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1928.760144][T28863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1929.168174][T28920] loop5: detected capacity change from 0 to 7
[ 1929.353253][T28920] Dev loop5: unable to read RDB block 7
[ 1929.358920][T28920]  loop5: unable to read partition table
[ 1929.382946][T28920] loop5: partition table beyond EOD, truncated
[ 1929.392192][T28920] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1930.493275][T28902] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1930.513744][T28902] 8021q: adding VLAN 0 to HW filter on device team0
[ 1930.535623][T28902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1930.832264][T14097] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1930.878877][T14097] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1930.983879][T28948] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1931.005640][T28948] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1931.097430][T28948] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1931.294095][T28948] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1931.362053][T23236] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1).
[ 1931.391122][T23236] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[ 1931.435728][T23236] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[ 1931.500961][T23236] uvcvideo 2-1:63.66: No streaming interface found for terminal 29.
[ 1931.517487][T28959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5784'.
[ 1931.584114][T23236] uvcvideo 2-1:63.66: Entity type for entity Output 32773 was not initialized!
[ 1931.642574][T23236] usb 2-1: USB disconnect, device number 77
[ 1931.704925][T28948] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1931.773648][T28948] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1931.825130][ T5826] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1931.991277][T28981] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1932.843481][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1933.409218][T23236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1933.637493][T29008] input: syz0 as /devices/virtual/input/input156
[ 1934.032561][T28913] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1934.262595][T28913] usb 2-1: Using ep0 maxpacket: 16
[ 1934.270556][T28913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1934.281820][T28913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1934.292028][T28913] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[ 1934.362506][T28913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1934.381560][T28913] usb 2-1: config 0 descriptor??
[ 1934.668902][T29022] xt_bpf: check failed: parse error
[ 1934.744244][T29024] binder: BINDER_SET_CONTEXT_MGR already set
[ 1934.750418][T29024] binder: 29023:29024 ioctl 4018620d 200000004a80 returned -16
[ 1934.809071][T28913] razer 0003:1532:011B.0041: unbalanced collection at end of report description
[ 1934.850899][T28913] razer 0003:1532:011B.0041: probe with driver razer failed with error -22
[ 1935.026187][T29012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5795'.
[ 1936.442564][T23236] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1936.582576][T23236] usb 6-1: device descriptor read/64, error -71
[ 1936.670254][T29067] binder: BINDER_SET_CONTEXT_MGR already set
[ 1936.693526][T29067] binder: 29066:29067 ioctl 4018620d 200000004a80 returned -16
[ 1936.820396][T28913] usb 2-1: USB disconnect, device number 78
[ 1936.822939][T23236] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1936.913939][T29072] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1936.974138][T29072] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1937.022550][T23236] usb 6-1: device descriptor read/64, error -71
[ 1937.055905][T29072] netlink: 'syz.1.5814': attribute type 21 has an invalid length.
[ 1937.132834][T23236] usb usb6-port1: attempt power cycle
[ 1937.474556][T23236] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1937.503318][T29097] trusted_key: encrypted_key: insufficient parameters specified
[ 1937.794145][T23236] usb 6-1: device descriptor read/8, error -71
[ 1937.903509][T29102] input: syz1 as /devices/virtual/input/input157
[ 1938.062606][T23236] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1938.095940][T23236] usb 6-1: device descriptor read/8, error -71
[ 1938.257018][T23236] usb usb6-port1: unable to enumerate USB device
[ 1938.275573][T29104] binder: BINDER_SET_CONTEXT_MGR already set
[ 1938.281850][T29104] binder: 29103:29104 ioctl 4018620d 200000004a80 returned -16
[ 1938.511845][T29110] binder: 29109:29110 ioctl 40046205 0 returned -22
[ 1939.317041][T29141] binder: BINDER_SET_CONTEXT_MGR already set
[ 1939.323752][T29141] binder: 29140:29141 ioctl 4018620d 200000004a80 returned -16
[ 1939.396481][T29145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5834'.
[ 1939.530120][T29147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5836'.
[ 1939.853451][T29156] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[ 1940.780213][T29169] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5842'.
[ 1940.793027][T29167] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5842'.
[ 1940.870830][T29171] kvm: user requested TSC rate below hardware speed
[ 1940.880715][   T29] audit: type=1326 audit(1772747702.545:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29170 comm="syz.5.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1940.908173][   T29] audit: type=1326 audit(1772747702.545:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29170 comm="syz.5.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1940.949253][   T29] audit: type=1326 audit(1772747702.545:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29170 comm="syz.5.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1940.973195][   T29] audit: type=1326 audit(1772747702.545:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29170 comm="syz.5.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1941.028468][   T29] audit: type=1326 audit(1772747702.545:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29170 comm="syz.5.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1941.076662][   T29] audit: type=1326 audit(1772747702.545:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29170 comm="syz.5.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1941.103362][   T29] audit: type=1326 audit(1772747702.565:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29170 comm="syz.5.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1941.129297][   T29] audit: type=1326 audit(1772747702.635:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29170 comm="syz.5.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1941.174721][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5845'.
[ 1941.188987][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5845'.
[ 1941.199130][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5845'.
[ 1941.209850][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5845'.
[ 1941.229845][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5845'.
[ 1941.752664][T28913] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1941.882602][T28913] usb 6-1: device descriptor read/64, error -71
[ 1942.132774][T28913] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1942.282881][T28913] usb 6-1: device descriptor read/64, error -71
[ 1942.291761][T29186] netlink: 'syz.1.5849': attribute type 1 has an invalid length.
[ 1942.307475][T29186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5849'.
[ 1942.412795][T28913] usb usb6-port1: attempt power cycle
[ 1942.489380][T29192] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1942.832574][T28913] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1942.853533][T28913] usb 6-1: device descriptor read/8, error -71
[ 1943.122654][T28913] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1943.204632][T28913] usb 6-1: device descriptor read/8, error -71
[ 1943.282936][T29200] loop5: detected capacity change from 0 to 7
[ 1943.316375][T28913] usb usb6-port1: unable to enumerate USB device
[ 1943.323538][ T9270] Dev loop5: unable to read RDB block 7
[ 1943.333436][ T9270]  loop5: unable to read partition table
[ 1943.340315][ T9270] loop5: partition table beyond EOD, truncated
[ 1943.359759][T29200] Dev loop5: unable to read RDB block 7
[ 1943.435966][T29200]  loop5: unable to read partition table
[ 1943.456790][T29200] loop5: partition table beyond EOD, truncated
[ 1943.467520][T29200] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1943.749768][T29209] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20003
[ 1945.069337][T29251] loop5: detected capacity change from 0 to 7
[ 1945.077713][ T9270] Dev loop5: unable to read RDB block 7
[ 1945.083662][ T9270]  loop5: unable to read partition table
[ 1945.089856][ T9270] loop5: partition table beyond EOD, truncated
[ 1945.097647][T29251] Dev loop5: unable to read RDB block 7
[ 1945.105636][T29251]  loop5: unable to read partition table
[ 1945.111643][T29251] loop5: partition table beyond EOD, truncated
[ 1945.121534][T29251] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1945.303362][T29258] __nla_validate_parse: 3 callbacks suppressed
[ 1945.303387][T29258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5867'.
[ 1945.911092][T29267] tipc: Started in network mode
[ 1945.918922][T29267] tipc: Node identity dee2c781f50b, cluster identity 4711
[ 1945.930933][T29267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1946.000217][T29266] tipc: Disabling bearer <eth:syzkaller0>
[ 1946.346144][T29272] binder: 29271:29272 ioctl c0306201 200000000080 returned -14
[ 1946.359047][T29272] binder: 29271:29272 ioctl c0502100 2000000002c0 returned -22
[ 1946.378490][T29272] binder: 29271:29272 ioctl c00c620f 2000000000c0 returned -22
[ 1946.410691][T29274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5873'.
[ 1946.535994][T29276] netlink: 'syz.5.5874': attribute type 9 has an invalid length.
[ 1946.680518][T29280] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1946.741319][T29280] bond0: (slave bond5): Enslaving as an active interface with a down link
[ 1947.029954][T29299] netlink: 'syz.6.5880': attribute type 1 has an invalid length.
[ 1947.099732][T29299] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1947.137874][T29301] bridge2: entered allmulticast mode
[ 1947.154898][T29301] bond7: (slave bridge2): making interface the new active one
[ 1947.164860][T29301] bond7: (slave bridge2): Enslaving as an active interface with an up link
[ 1947.623222][T23236] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[ 1947.640587][T29317] team0: Port device syz_tun removed
[ 1947.649658][T29317] bond0: (slave dummy0): Releasing backup interface
[ 1947.659937][T29317] bond0: (slave bond_slave_0): Releasing backup interface
[ 1947.669084][T29317] bond0: (slave bond_slave_1): Releasing backup interface
[ 1947.678816][T29317] team0: Port device team_slave_0 removed
[ 1947.686235][T29317] team0: Port device team_slave_1 removed
[ 1947.693795][T29317] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1947.701671][T29317] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1947.787379][T23236] usb 6-1: config 255 has an invalid interface number: 16 but max is 0
[ 1947.796121][T23236] usb 6-1: config 255 has an invalid interface number: 167 but max is 0
[ 1947.804818][T23236] usb 6-1: config 255 has 2 interfaces, different from the descriptor's value: 1
[ 1947.814700][T23236] usb 6-1: config 255 has no interface number 0
[ 1947.820979][T23236] usb 6-1: config 255 has no interface number 1
[ 1947.827495][T23236] usb 6-1: config 255 interface 16 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1947.840898][T23236] usb 6-1: too many endpoints for config 255 interface 167 altsetting 119: 57, using maximum allowed: 30
[ 1947.852404][T23236] usb 6-1: config 255 interface 167 altsetting 119 has 1 endpoint descriptor, different from the interface descriptor's value: 57
[ 1947.865910][T23236] usb 6-1: config 255 interface 16 has no altsetting 0
[ 1947.872880][T23236] usb 6-1: config 255 interface 167 has no altsetting 0
[ 1947.881652][T23236] usb 6-1: New USB device found, idVendor=19d2, idProduct=1296, bcdDevice=7e.2c
[ 1947.890993][T23236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1947.899558][T23236] usb 6-1: Product: syz
[ 1947.903839][T23236] usb 6-1: Manufacturer: syz
[ 1947.908487][T23236] usb 6-1: SerialNumber: syz
[ 1948.121832][T23236] option 6-1:255.16: GSM modem (1-port) converter detected
[ 1948.139955][T23236] usb 6-1: USB disconnect, device number 19
[ 1948.149434][T23236] option 6-1:255.16: device disconnected
[ 1948.577541][T29323] gretap1: entered promiscuous mode
[ 1948.972555][T28913] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1949.122542][T28913] usb 6-1: Using ep0 maxpacket: 16
[ 1949.131889][T28913] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1949.141490][T28913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1949.149650][T28913] usb 6-1: Product: syz
[ 1949.154246][T28913] usb 6-1: Manufacturer: syz
[ 1949.158899][T28913] usb 6-1: SerialNumber: syz
[ 1949.167180][T28913] usb 6-1: config 0 descriptor??
[ 1949.180788][T28913] asix 6-1:0.0: probe with driver asix failed with error -22
[ 1949.380563][T29327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1949.391807][T29327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1949.401919][T28913] usb 6-1: USB disconnect, device number 20
[ 1949.614912][T29333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1949.624098][T29333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1949.862578][T28913] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1950.024831][T28913] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[ 1950.049773][T28913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1950.073553][T28913] usb 6-1: config 0 descriptor??
[ 1950.081655][T28913] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1950.282642][T28913] gp8psk: usb in 128 operation failed.
[ 1950.305051][T28913] gp8psk: usb in 137 operation failed.
[ 1950.310605][T28913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1950.333262][T28913] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[ 1950.356145][T28913] usb 6-1: media controller created
[ 1950.394377][T28913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1950.568470][T28913] gp8psk_fe: Frontend attached
[ 1950.575906][T28913] usb 6-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)...
[ 1950.593193][T28913] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1950.737904][T28913] gp8psk: usb in 138 operation failed.
[ 1950.751503][T28913] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[ 1950.784872][T28913] gp8psk: found Genpix USB device pID = 203 (hex)
[ 1950.844997][T28913] usb 6-1: USB disconnect, device number 21
[ 1951.000200][T28913] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[ 1951.145831][T29366] gretap0: entered promiscuous mode
[ 1951.668976][T29384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5907'.
[ 1951.697746][T29384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5907'.
[ 1951.712387][T29382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.756258][T29387] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1952.227753][T29400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5910'.
[ 1952.671854][T29410] Cannot find del_set index 2 as target
[ 1953.549116][T29418] netlink: 'syz.7.5916': attribute type 1 has an invalid length.
[ 1953.726514][T29418] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1953.837321][T29419] bridge4: entered promiscuous mode
[ 1953.852556][T29419] bridge4: entered allmulticast mode
[ 1953.866468][T29419] bond3: (slave bridge4): making interface the new active one
[ 1953.884937][T29419] bond3: (slave bridge4): Enslaving as an active interface with an up link
[ 1954.240480][T29426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5919'.
[ 1954.313863][T29427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5919'.
[ 1954.667659][T28913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1955.232745][T28912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1955.390449][T29441] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5922'.
[ 1956.082608][T28935] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1956.228485][T29454] netlink: 'syz.1.5927': attribute type 1 has an invalid length.
[ 1956.252879][T28935] usb 6-1: Using ep0 maxpacket: 16
[ 1956.270067][T28935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1956.282568][T28935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1956.305907][T29454] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1956.339993][T28935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1956.363450][T29456] bridge3: entered promiscuous mode
[ 1956.368698][T29456] bridge3: entered allmulticast mode
[ 1956.392568][T28935] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1956.402282][T28935] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1956.426655][T29456] bond1: (slave bridge3): making interface the new active one
[ 1956.463532][T29456] bond1: (slave bridge3): Enslaving as an active interface with an up link
[ 1956.493072][T28935] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1956.502183][T28935] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1956.550937][T28935] usb 6-1: Manufacturer: syz
[ 1956.582391][T28935] usb 6-1: config 0 descriptor??
[ 1956.796195][T29464] fuse: Bad value for 'fd'
[ 1956.903509][T28935] rc_core: IR keymap rc-hauppauge not found
[ 1956.909486][T28935] Registered IR keymap rc-empty
[ 1956.928871][T28935] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1956.978406][T29470] xt_bpf: check failed: parse error
[ 1956.986978][T28935] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1957.022720][   T29] audit: type=1326 audit(1772747718.675:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1957.059790][T28935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1957.080462][   T29] audit: type=1326 audit(1772747718.675:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1957.112231][T28935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input158
[ 1957.140459][T28935] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1957.166525][   T29] audit: type=1326 audit(1772747718.685:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1957.206322][   T29] audit: type=1326 audit(1772747718.685:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1957.229745][T28935] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1957.239627][   T29] audit: type=1326 audit(1772747718.735:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1957.263432][T28935] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1957.273235][T29476] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1957.284024][   T29] audit: type=1326 audit(1772747718.735:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1957.285939][T29476] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1957.307381][T28935] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1957.354430][T28935] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1957.383696][T28935] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1957.392998][   T29] audit: type=1326 audit(1772747718.735:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1957.433292][T28935] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1957.461477][   T29] audit: type=1326 audit(1772747718.735:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1957.484745][T28935] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1957.502601][T28935] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1957.517483][   T29] audit: type=1326 audit(1772747718.735:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1957.540206][T28935] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1957.549374][   T29] audit: type=1326 audit(1772747718.735:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1957.576885][T28935] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[ 1957.587459][T28935] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1957.626285][T28935] usb 6-1: USB disconnect, device number 22
[ 1958.272545][T28935] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1958.427311][T28935] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1958.452656][T28935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1958.464764][T28935] usb 6-1: Product: syz
[ 1958.469009][T28935] usb 6-1: Manufacturer: syz
[ 1958.473834][T28935] usb 6-1: SerialNumber: syz
[ 1958.481503][T28935] usb 6-1: config 0 descriptor??
[ 1958.495694][T29510] xt_bpf: check failed: parse error
[ 1958.574809][T29514] fuse: Unknown parameter 'gr'
[ 1958.894883][T29496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1959.046711][T29496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1959.585961][T28935] usb 6-1: Firmware version (0.0) predates our first public release.
[ 1959.605344][T28935] usb 6-1: Please update to version 0.2 or newer
[ 1959.701141][T28935] usb 6-1: USB disconnect, device number 23
[ 1959.802522][T23236] usb 2-1: new full-speed USB device number 79 using dummy_hcd
[ 1959.966477][T23236] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1959.976152][T23236] usb 2-1: not running at top speed; connect to a high speed hub
[ 1960.015834][T23236] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1960.032589][T23236] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1960.061314][T23236] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1960.083591][T23236] usb 2-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40
[ 1960.101401][T23236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1960.123578][T23236] usb 2-1: Product: syz
[ 1960.127818][T23236] usb 2-1: Manufacturer: syz
[ 1960.144078][T23236] usb 2-1: SerialNumber: syz
[ 1960.189663][T29536] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1960.392541][T28913] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1960.411637][T23236] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input159
[ 1960.438787][ T5178] bcm5974 2-1:1.0: could not read from device
[ 1960.466105][ T5178] bcm5974 2-1:1.0: could not read from device
[ 1960.475662][T23236] usb 2-1: USB disconnect, device number 79
[ 1960.564150][T28913] usb 6-1: Using ep0 maxpacket: 16
[ 1960.570919][T29560] xt_bpf: check failed: parse error
[ 1960.578082][ T5178] bcm5974 2-1:1.0: could not read from device
[ 1960.654190][T28913] usb 6-1: config 0 has no interfaces?
[ 1960.680536][T28913] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1960.732533][T28913] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1960.740627][T28913] usb 6-1: Manufacturer: syz
[ 1960.794898][T28913] usb 6-1: config 0 descriptor??
[ 1960.923969][T29569] trusted_key: encrypted_key: insufficient parameters specified
[ 1961.011713][T29546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1961.214176][T29546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1961.349285][T29546] netlink: 'syz.5.5954': attribute type 1 has an invalid length.
[ 1961.793417][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1961.832993][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1962.461510][T29596] xt_bpf: check failed: parse error
[ 1962.914499][T28913] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1962.978850][T23265] usb 6-1: USB disconnect, device number 24
[ 1963.044864][T29602] input: syz1 as /devices/virtual/input/input160
[ 1963.100666][T28913] usb 2-1: Using ep0 maxpacket: 8
[ 1963.119720][T28913] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1963.148847][T28913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1963.311551][T28913] usb 2-1: Product: syz
[ 1963.321537][T28913] usb 2-1: Manufacturer: syz
[ 1963.346531][T28913] usb 2-1: SerialNumber: syz
[ 1963.366890][T28913] usb 2-1: config 0 descriptor??
[ 1963.416124][T28913] gspca_main: se401-2.14.0 probing 047d:5003
[ 1963.590176][T29600] tipc: Started in network mode
[ 1963.606146][T29600] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[ 1963.622708][T29600] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1963.844900][T29600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1963.856823][T29600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1963.968255][T29613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1963.984069][T29613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1964.024636][T29600] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1964.061126][T28913] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input161
[ 1964.116090][T28913] usb 2-1: USB disconnect, device number 80
[ 1965.247706][T29633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5981'.
[ 1965.745633][T29645] input: syz1 as /devices/virtual/input/input162
[ 1966.762540][T23237] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1966.934023][T23237] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[ 1966.952339][T23237] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1967.003781][T23237] usb 6-1: config 0 has no interface number 0
[ 1967.015393][T23237] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[ 1967.052840][T23237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1967.060907][T23237] usb 6-1: Product: syz
[ 1967.092785][T23237] usb 6-1: Manufacturer: syz
[ 1967.097463][T23237] usb 6-1: SerialNumber: syz
[ 1967.113513][T23237] usb 6-1: config 0 descriptor??
[ 1967.544156][T29658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1967.570754][T29658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1967.604376][T23237] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823)
[ 1967.612752][T23237] uvcvideo 6-1:0.64: No valid video chain found.
[ 1967.643413][T23237] usb 6-1: USB disconnect, device number 25
[ 1967.778561][ T5826] Bluetooth: hci4: SCO packet for unknown connection handle 200
[ 1967.783027][T29673] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1967.811617][T29674] 8021q: VLANs not supported on dvmrp0
[ 1968.033674][T29687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5997'.
[ 1968.065937][T29689] fuseblk: Bad value for 'source'
[ 1968.068772][T29692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1968.130670][T29692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1968.542593][T28913] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1968.594900][T29702] tipc: Cannot configure node identity twice
[ 1968.702939][T28913] usb 6-1: Using ep0 maxpacket: 16
[ 1968.741123][T28913] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[ 1968.775893][T28913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1968.815583][T28913] usb 6-1: Product: syz
[ 1968.834273][T28913] usb 6-1: Manufacturer: syz
[ 1968.852647][T28913] usb 6-1: SerialNumber: syz
[ 1968.888533][T28913] usb 6-1: config 0 descriptor??
[ 1969.093805][   T29] kauditd_printk_skb: 127 callbacks suppressed
[ 1969.093824][   T29] audit: type=1804 audit(1772747730.755:2188): pid=29714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.6005" name="bus" dev="ramfs" ino=166484 res=1 errno=0
[ 1969.143380][T29698] netlink: 'syz.5.6000': attribute type 21 has an invalid length.
[ 1969.151597][T29698] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6000'.
[ 1969.168688][T29698] netlink: 'syz.5.6000': attribute type 5 has an invalid length.
[ 1969.179869][T29698] netlink: 'syz.5.6000': attribute type 6 has an invalid length.
[ 1969.188798][T29698] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6000'.
[ 1969.365673][T28913] speedtch 6-1:0.0: speedtch_bind: data interface not found!
[ 1969.383301][T28913] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1969.403915][T28913] usb 6-1: USB disconnect, device number 26
[ 1970.573332][T28913] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1970.955616][T28913] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[ 1970.967612][T28913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64
[ 1970.979297][T28913] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1970.999081][T28913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1971.043852][T28913] usb 6-1: config 0 descriptor??
[ 1971.421286][T29724] openvswitch: netlink: IP tunnel dst address not specified
[ 1972.139059][T28913] ath6kl: Failed to submit usb control message: -110
[ 1972.259923][T28913] ath6kl: unable to send the bmi data to the device: -110
[ 1972.271468][T28913] ath6kl: Unable to send get target info: -110
[ 1972.305035][T28913] ath6kl: Failed to init ath6kl core: -110
[ 1972.339298][T28913] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1972.686022][T28913] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1973.472122][T28913] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1973.555317][T28913] usb 2-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a
[ 1973.591982][T28913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1973.613535][T28913] usb 2-1: Product: syz
[ 1973.642551][T28913] usb 2-1: Manufacturer: syz
[ 1973.647235][T28913] usb 2-1: SerialNumber: syz
[ 1973.667722][T29752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1973.676509][T29752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1974.024959][T29760] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6017'.
[ 1974.095797][T23237] usb 6-1: USB disconnect, device number 27
[ 1974.363353][   T29] audit: type=1804 audit(1772747735.915:2189): pid=29764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.6018" name="bus" dev="ramfs" ino=166649 res=1 errno=0
[ 1974.388955][T29759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6013'.
[ 1974.540291][T29769] ALSA: mixer_oss: invalid OSS volume '  -        -        -        - '
[ 1975.620098][T28913] option 2-1:4.0: GSM modem (1-port) converter detected
[ 1975.652810][T28913] usb 2-1: USB disconnect, device number 81
[ 1975.701664][T28913] option 2-1:4.0: device disconnected
[ 1976.214646][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1976.234099][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.243511][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.652159][T29787] input: syz1 as /devices/virtual/input/input163
[ 1977.136220][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1977.226720][T29802] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.6029'.
[ 1977.706470][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1978.042630][T28913] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1978.214631][T28913] usb 6-1: Using ep0 maxpacket: 8
[ 1978.240700][T28913] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1978.250532][T28913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1978.268994][T28913] usb 6-1: Product: syz
[ 1978.279808][T28913] usb 6-1: Manufacturer: syz
[ 1978.289944][T28913] usb 6-1: SerialNumber: syz
[ 1978.301095][T28913] usb 6-1: config 0 descriptor??
[ 1978.321445][T28913] gspca_main: se401-2.14.0 probing 047d:5003
[ 1978.722867][T29811] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1978.793065][T29811] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1978.818601][T28913] gspca_se401: Too many frame sizes
[ 1979.333021][T23237] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1979.526277][T23237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1979.548921][T23237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1979.583030][T23237] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1979.612529][T23237] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[ 1979.621644][T23237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1979.646799][T23237] usb 2-1: config 0 descriptor??
[ 1979.872129][T23237] ath6kl: Failed to submit usb control message: -71
[ 1979.882845][T23237] ath6kl: unable to send the bmi data to the device: -71
[ 1979.895305][T23237] ath6kl: Unable to send get target info: -71
[ 1979.932562][T23237] ath6kl: Failed to init ath6kl core: -71
[ 1979.939754][T23237] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1979.992386][T23237] usb 2-1: USB disconnect, device number 82
[ 1980.007489][T29836] input: syz1 as /devices/virtual/input/input164
[ 1980.114819][T29837] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1980.765707][T23237] usb 6-1: USB disconnect, device number 28
[ 1980.871371][   T29] audit: type=1326 audit(1772747742.525:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29850 comm="syz.5.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1980.918823][   T29] audit: type=1326 audit(1772747742.525:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29850 comm="syz.5.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1980.942685][   T29] audit: type=1326 audit(1772747742.565:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29850 comm="syz.5.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1980.966032][   T29] audit: type=1326 audit(1772747742.565:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29850 comm="syz.5.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1980.988986][   T29] audit: type=1326 audit(1772747742.565:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29850 comm="syz.5.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1981.012007][   T29] audit: type=1326 audit(1772747742.565:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29850 comm="syz.5.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1981.113555][   T29] audit: type=1326 audit(1772747742.565:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29850 comm="syz.5.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1981.254207][   T29] audit: type=1326 audit(1772747742.565:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29850 comm="syz.5.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1981.342877][   T29] audit: type=1326 audit(1772747742.565:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29850 comm="syz.5.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1981.444962][T29861] netdevsim netdevsim5: Direct firmware load for .
[ 1981.444962][T29861]  failed with error -2
[ 1981.463107][T29861] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[ 1981.463107][T29861] 
[ 1981.514437][   T29] audit: type=1326 audit(1772747742.565:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29850 comm="syz.5.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1981.752096][T29864] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1984.213314][T23237] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1984.372611][T23237] usb 6-1: Using ep0 maxpacket: 16
[ 1984.416960][T23237] usb 6-1: config 0 has no interfaces?
[ 1984.427270][T23237] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1984.450465][T23237] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1984.467380][T23237] usb 6-1: Manufacturer: syz
[ 1984.608941][T23237] usb 6-1: config 0 descriptor??
[ 1985.132345][T29914] xt_addrtype: ipv6 does not support BROADCAST matching
[ 1985.178317][T29914] loop5: detected capacity change from 0 to 7
[ 1985.223460][T29914] Dev loop5: unable to read RDB block 7
[ 1985.235200][T29914]  loop5: AHDI p1
[ 1985.241314][T29914] loop5: partition table partially beyond EOD, truncated
[ 1986.002579][T28913] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1986.165962][T28913] usb 2-1: Using ep0 maxpacket: 32
[ 1986.240531][T28913] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 1986.307440][T28913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1986.372341][T28913] usb 2-1: config 0 descriptor??
[ 1986.443944][T29939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6068'.
[ 1986.455488][T29939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6068'.
[ 1986.729293][T23265] usb 6-1: USB disconnect, device number 29
[ 1986.971944][T29948] batadv_slave_0: entered promiscuous mode
[ 1987.077866][   T29] kauditd_printk_skb: 4 callbacks suppressed
[ 1987.077887][   T29] audit: type=1326 audit(1772747748.705:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1987.145232][   T29] audit: type=1326 audit(1772747748.715:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1987.262265][T28913] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[ 1987.377229][T28913] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1987.400723][T28913] dib0700: firmware download failed at 7 with -22
[ 1987.417389][   T29] audit: type=1326 audit(1772747748.715:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1987.448378][T23265] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1987.504437][   T29] audit: type=1326 audit(1772747748.715:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1987.678197][T29955] 8021q: VLANs not supported on dvmrp0
[ 1987.692514][T23265] usb 6-1: Using ep0 maxpacket: 32
[ 1987.702189][T23265] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1987.715430][T23265] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1987.742315][   T29] audit: type=1326 audit(1772747748.715:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1987.774520][T23265] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1987.811394][T23265] usb 6-1: config 0 descriptor??
[ 1987.818814][   T29] audit: type=1326 audit(1772747748.715:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1987.851658][T23265] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1988.003571][   T29] audit: type=1326 audit(1772747748.715:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1988.090371][   T29] audit: type=1326 audit(1772747748.715:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1988.165665][   T29] audit: type=1326 audit(1772747748.715:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1988.208883][   T29] audit: type=1326 audit(1772747748.715:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.5.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7b1ef9c799 code=0x7ffc0000
[ 1988.560044][T29960] netlink: 'syz.0.6074': attribute type 4 has an invalid length.
[ 1988.568658][T29960] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6074'.
[ 1988.585020][T29960] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1989.694630][T23237] usb 2-1: USB disconnect, device number 83
[ 1990.141226][T23237] usb 6-1: USB disconnect, device number 30
[ 1990.170069][T29982] netlink: 'syz.1.6080': attribute type 1 has an invalid length.
[ 1990.203952][T29982] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1990.215060][T29982] bond2: (slave vxcan3): Error -95 calling set_mac_address
[ 1990.277266][T29982] bond2: (slave bridge4): Enslaving as an active interface with a down link
[ 1990.520198][T29991] Invalid argument reading file caps for ./file0
[ 1991.562600][T23237] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1991.714242][T23237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1991.734481][T23237] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1991.753153][T23237] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9
[ 1991.770812][T23237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1991.791127][T23237] usb 2-1: Product: syz
[ 1991.795543][T23237] usb 2-1: Manufacturer: syz
[ 1991.811457][T23237] usb 2-1: SerialNumber: syz
[ 1991.818862][T23237] usb 2-1: config 0 descriptor??
[ 1991.835670][T23237] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[ 1991.862884][T23237] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1991.880665][T23237] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[ 1991.900375][T23237] usb 2-1: media controller created
[ 1991.919204][T23237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1991.965913][T23237] DVB: Unable to find symbol tda10046_attach()
[ 1991.972376][T23237] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[ 1991.981189][T23237] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[ 1992.235180][T23237] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[ 1992.253073][T23237] usb 2-1: USB disconnect, device number 84
[ 1992.940343][   T29] kauditd_printk_skb: 39 callbacks suppressed
[ 1992.940365][   T29] audit: type=1326 audit(1772747754.595:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30008 comm="syz.1.6092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1993.006568][   T29] audit: type=1326 audit(1772747754.635:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30008 comm="syz.1.6092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1993.041107][T30016] netlink: 'syz.7.6093': attribute type 1 has an invalid length.
[ 1993.109100][   T29] audit: type=1326 audit(1772747754.635:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30008 comm="syz.1.6092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1993.187816][   T29] audit: type=1326 audit(1772747754.635:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30008 comm="syz.1.6092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1993.225783][T30016] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1993.273104][T23265] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1993.316828][   T29] audit: type=1326 audit(1772747754.635:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30008 comm="syz.1.6092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1993.390998][   T29] audit: type=1326 audit(1772747754.635:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30008 comm="syz.1.6092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1993.432955][T23265] usb 2-1: Using ep0 maxpacket: 32
[ 1993.516873][T23265] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1993.612752][T23265] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1993.647371][   T29] audit: type=1326 audit(1772747754.635:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30008 comm="syz.1.6092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1993.672799][T23265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1993.735264][T30028] hub 1-0:1.0: USB hub found
[ 1993.742246][T30028] hub 1-0:1.0: 1 port detected
[ 1993.791048][T23265] usb 2-1: config 0 descriptor??
[ 1993.796435][   T29] audit: type=1326 audit(1772747754.635:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30008 comm="syz.1.6092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1993.845612][T30028] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1993.864341][T23265] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1993.903050][   T29] audit: type=1326 audit(1772747754.635:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30008 comm="syz.1.6092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1994.011184][   T29] audit: type=1326 audit(1772747754.635:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30008 comm="syz.1.6092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 1995.057953][T30042] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6099'.
[ 1996.283394][T28913] usb 2-1: USB disconnect, device number 85
[ 1996.289391][T23265] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1996.476809][T23265] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1996.496502][T23265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1996.538945][T23265] usb 6-1: Product: syz
[ 1996.572277][T23265] usb 6-1: Manufacturer: syz
[ 1996.586028][T23265] usb 6-1: SerialNumber: syz
[ 1996.628843][T23265] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1996.654293][T28913] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1996.878402][    C1] usb 6-1: ath: unknown panic pattern!
[ 1997.184094][T30082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1997.193021][T30082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1997.290928][T30091] netlink: 'syz.6.6114': attribute type 27 has an invalid length.
[ 1997.462526][T23237] usb 2-1: new low-speed USB device number 86 using dummy_hcd
[ 1997.742703][T28913] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1997.771792][T28913] ath9k_htc: Failed to initialize the device
[ 1997.784944][T23237] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1997.800231][T23237] usb 2-1: config 2 has an invalid interface number: 222 but max is 0
[ 1997.828792][T23237] usb 2-1: config 2 has no interface number 0
[ 1997.866507][T23237] usb 2-1: config 2 interface 222 has no altsetting 0
[ 1997.929625][T28913] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1999.080980][T28913] usb 6-1: USB disconnect, device number 31
[ 2000.147779][T30116] 8021q: VLANs not supported on dvmrp0
[ 2001.168632][T30134] netlink: 'syz.5.6125': attribute type 1 has an invalid length.
[ 2001.179219][T30134] netlink: 'syz.5.6125': attribute type 1 has an invalid length.
[ 2001.256165][T23237] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.d9
[ 2001.302519][T23237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2001.333298][T23237] usb 2-1: can't set config #2, error -71
[ 2001.351639][T23237] usb 2-1: USB disconnect, device number 86
[ 2001.373514][T30140] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 2001.443663][T28913] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 2001.622591][T28913] usb 6-1: Using ep0 maxpacket: 16
[ 2001.629861][T28913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2001.686760][T28913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1064, setting to 1024
[ 2001.698213][T28913] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2001.711470][T28913] usb 6-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8
[ 2001.721055][T28913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2001.755498][T28913] usb 6-1: config 0 descriptor??
[ 2001.764642][T30133] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2002.202787][T28913] hid-generic 0003:045E:FC40.0042: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.5-1/input0
[ 2002.515686][   T29] kauditd_printk_skb: 125 callbacks suppressed
[ 2002.515706][   T29] audit: type=1326 audit(1772747764.165:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30171 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd26d9c799 code=0x7ffc0000
[ 2002.515764][   T29] audit: type=1326 audit(1772747764.165:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30171 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd26d9c799 code=0x7ffc0000
[ 2002.515819][   T29] audit: type=1326 audit(1772747764.165:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30171 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd26d9c799 code=0x7ffc0000
[ 2002.515866][   T29] audit: type=1326 audit(1772747764.165:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30171 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd26d9c799 code=0x7ffc0000
[ 2002.515913][   T29] audit: type=1326 audit(1772747764.165:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30171 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbd26d9c799 code=0x7ffc0000
[ 2002.515964][   T29] audit: type=1326 audit(1772747764.165:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30171 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd26d9c799 code=0x7ffc0000
[ 2002.516011][   T29] audit: type=1326 audit(1772747764.165:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30171 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fbd26d9c799 code=0x7ffc0000
[ 2002.516065][   T29] audit: type=1326 audit(1772747764.165:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30171 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd26d9c799 code=0x7ffc0000
[ 2002.516113][   T29] audit: type=1326 audit(1772747764.165:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30171 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fbd26d9c799 code=0x7ffc0000
[ 2002.516159][   T29] audit: type=1326 audit(1772747764.165:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30171 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd26d9c799 code=0x7ffc0000
[ 2002.822676][T23237] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 2003.022527][T23237] usb 1-1: Using ep0 maxpacket: 32
[ 2003.030295][T23237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2003.030359][T23237] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 2003.030384][T23237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2003.042256][T23237] usb 1-1: config 0 descriptor??
[ 2003.440575][T23237] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2003.982639][T23237] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 2004.104444][T28935] usb 6-1: USB disconnect, device number 32
[ 2004.163743][T23237] usb 2-1: Using ep0 maxpacket: 16
[ 2004.191116][T30195] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2004.198982][T30195] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2004.209215][T23237] usb 2-1: config 0 has an invalid interface number: 216 but max is 0
[ 2004.209816][T30195] bridge0: entered allmulticast mode
[ 2004.231449][T23237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2004.256942][T23237] usb 2-1: config 0 has no interface number 0
[ 2004.272543][T23237] usb 2-1: config 0 interface 216 altsetting 0 endpoint 0xA has invalid maxpacket 4098, setting to 1024
[ 2004.297905][T23237] usb 2-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024
[ 2004.319348][T23237] usb 2-1: config 0 interface 216 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2004.360214][T23237] usb 2-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74
[ 2004.388099][T23237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2004.452490][T23237] usb 2-1: Product: syz
[ 2004.470668][T23237] usb 2-1: Manufacturer: syz
[ 2004.534647][T23237] usb 2-1: SerialNumber: syz
[ 2004.657474][T23237] usb 2-1: config 0 descriptor??
[ 2004.699705][T30191] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 2004.714209][T23237] usb-storage 2-1:0.216: USB Mass Storage device detected
[ 2004.999665][T28913] IPVS: starting estimator thread 0...
[ 2005.122514][T30211] IPVS: using max 37 ests per chain, 88800 per kthread
[ 2005.269244][T30215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6146'.
[ 2005.336135][T28913] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 2005.502604][T28913] usb 6-1: Using ep0 maxpacket: 32
[ 2005.525373][T28913] usb 6-1: config 0 has an invalid interface number: 119 but max is 0
[ 2005.535599][T28913] usb 6-1: config 0 has no interface number 0
[ 2005.543934][T28913] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2005.562499][T28913] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83
[ 2005.632128][T28913] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 2005.691544][T28913] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0
[ 2005.710612][T28913] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2005.782696][T28913] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 2005.804880][T28913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2005.848981][T28913] usb 6-1: Product: syz
[ 2006.041820][T28913] usb 6-1: Manufacturer: syz
[ 2006.077696][T28913] usb 6-1: SerialNumber: syz
[ 2006.099512][T28913] usb 6-1: config 0 descriptor??
[ 2006.130525][T23265] usb 1-1: USB disconnect, device number 14
[ 2006.152573][T28913] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input165
[ 2006.491482][T30220] netlink: 71 bytes leftover after parsing attributes in process `syz.6.6148'.
[ 2006.674221][T30223] FAULT_INJECTION: forcing a failure.
[ 2006.674221][T30223] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2006.691442][T30223] CPU: 0 UID: 0 PID: 30223 Comm: syz.0.6149 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2006.691468][T30223] Tainted: [L]=SOFTLOCKUP
[ 2006.691474][T30223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2006.691485][T30223] Call Trace:
[ 2006.691492][T30223]  <TASK>
[ 2006.691499][T30223]  dump_stack_lvl+0xe8/0x150
[ 2006.691527][T30223]  should_fail_ex+0x412/0x560
[ 2006.691553][T30223]  _copy_from_user+0x2d/0xb0
[ 2006.691577][T30223]  ___sys_sendmsg+0x1c6/0x360
[ 2006.691607][T30223]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2006.691662][T30223]  ? __fget_files+0x2a/0x420
[ 2006.691686][T30223]  ? __fget_files+0x3a0/0x420
[ 2006.691715][T30223]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2006.691732][T30223]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2006.691754][T30223]  ? __pfx_ksys_write+0x10/0x10
[ 2006.691779][T30223]  do_syscall_64+0x14d/0xf80
[ 2006.691796][T30223]  ? trace_irq_disable+0x3b/0x150
[ 2006.691820][T30223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2006.691836][T30223]  ? clear_bhb_loop+0x40/0x90
[ 2006.691876][T30223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2006.691900][T30223] RIP: 0033:0x7fbd26d9c799
[ 2006.691925][T30223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2006.691939][T30223] RSP: 002b:00007fbd27bab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2006.691956][T30223] RAX: ffffffffffffffda RBX: 00007fbd27015fa0 RCX: 00007fbd26d9c799
[ 2006.691968][T30223] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003
[ 2006.691978][T30223] RBP: 00007fbd27bab090 R08: 0000000000000000 R09: 0000000000000000
[ 2006.691988][T30223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2006.691998][T30223] R13: 00007fbd27016038 R14: 00007fbd27015fa0 R15: 00007fbd2713fa48
[ 2006.692021][T30223]  </TASK>
[ 2006.952823][T30225] loop5: detected capacity change from 0 to 7
[ 2006.974957][ T9270] Dev loop5: unable to read RDB block 7
[ 2006.998750][ T9270]  loop5: unable to read partition table
[ 2007.026890][ T9270] loop5: partition table beyond EOD, truncated
[ 2007.060824][T30225] Dev loop5: unable to read RDB block 7
[ 2007.066921][T30225]  loop5: unable to read partition table
[ 2007.073463][T30225] loop5: partition table beyond EOD, truncated
[ 2007.104198][T30225] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2007.729301][T30229] xt_bpf: check failed: parse error
[ 2007.938375][T23237] usb 2-1: USB disconnect, device number 87
[ 2007.967042][T30234] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[ 2008.048593][T30234] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2008.065964][T30234] netlink: 'syz.0.6154': attribute type 1 has an invalid length.
[ 2008.087843][T23265] usb 6-1: USB disconnect, device number 33
[ 2008.471206][T30244] ptrace attach of "./syz-executor exec"[27823] was attempted by "./syz-executor exec"[30244]
[ 2008.563122][T30244] fuse: Bad value for 'fd'
[ 2008.761613][T30239] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address
[ 2008.772565][T30239] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[ 2008.796610][T30239] bond6: (slave ip6gre1): making interface the new active one
[ 2008.823933][T30239] bond6: (slave ip6gre1): Enslaving as an active interface with an up link
[ 2009.010408][   T29] kauditd_printk_skb: 39 callbacks suppressed
[ 2009.010428][   T29] audit: type=1326 audit(1772747770.665:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.1.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 2009.118004][   T29] audit: type=1326 audit(1772747770.665:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.1.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 2009.223145][   T29] audit: type=1326 audit(1772747770.705:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.1.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 2009.245950][   T29] audit: type=1326 audit(1772747770.705:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.1.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 2009.272550][   T29] audit: type=1326 audit(1772747770.705:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.1.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 2009.295213][   T29] audit: type=1326 audit(1772747770.705:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.1.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 2009.322766][   T29] audit: type=1326 audit(1772747770.705:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.1.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 2009.402602][T23265] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 2009.452778][   T29] audit: type=1326 audit(1772747770.705:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.1.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 2009.492193][   T29] audit: type=1326 audit(1772747770.705:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.1.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 2009.702499][T23265] usb 2-1: Using ep0 maxpacket: 32
[ 2009.789665][   T29] audit: type=1326 audit(1772747770.705:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.1.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f29afd9c799 code=0x7ffc0000
[ 2009.927439][T23265] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2009.962848][T23265] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 2010.005609][T23265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2010.038073][T23265] usb 2-1: config 0 descriptor??
[ 2010.063239][T23265] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2010.206120][T28838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2010.219966][T28838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2010.231017][T28838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2010.241347][T28838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2010.254543][T30262] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2010.272820][T28838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2010.451339][T28935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2010.713178][T30275] xt_bpf: check failed: parse error
[ 2011.042969][T28935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2011.280794][T30289] x_tables: duplicate entry at hook 1
[ 2011.373935][T30268] chnl_net:caif_netlink_parms(): no params data found
[ 2012.026609][T30268] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2012.042982][T30268] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2012.059549][T30268] bridge_slave_0: entered allmulticast mode
[ 2012.070722][T30268] bridge_slave_0: entered promiscuous mode
[ 2012.086589][T30268] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2012.094467][T30268] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2012.103107][T30268] bridge_slave_1: entered allmulticast mode
[ 2012.119238][T15700] ==================================================================
[ 2012.127444][T15700] BUG: KASAN: use-after-free in nf_hook_entry_head+0x1f1/0x2c0
[ 2012.135096][T15700] Read of size 8 at addr ffff88807c394108 by task kworker/u8:18/15700
[ 2012.143275][T15700] 
[ 2012.145644][T15700] CPU: 0 UID: 0 PID: 15700 Comm: kworker/u8:18 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2012.145678][T15700] Tainted: [L]=SOFTLOCKUP
[ 2012.145687][T15700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2012.145703][T15700] Workqueue: netns cleanup_net
[ 2012.145839][T15700] Call Trace:
[ 2012.145848][T15700]  <TASK>
[ 2012.145858][T15700]  dump_stack_lvl+0xe8/0x150
[ 2012.145891][T15700]  print_report+0xba/0x230
[ 2012.145933][T15700]  ? nf_hook_entry_head+0x1f1/0x2c0
[ 2012.145964][T15700]  kasan_report+0x117/0x150
[ 2012.146000][T15700]  ? nf_hook_entry_head+0x1f1/0x2c0
[ 2012.146034][T15700]  nf_hook_entry_head+0x1f1/0x2c0
[ 2012.146066][T15700]  __nf_unregister_net_hook+0x74/0x6f0
[ 2012.146099][T15700]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[ 2012.146186][T15700]  nf_tables_pre_exit_net+0x64a/0x900
[ 2012.146276][T15700]  ops_undo_list+0x187/0x940
[ 2012.146309][T15700]  ? __pfx_ops_undo_list+0x10/0x10
[ 2012.146340][T15700]  ? idr_destroy+0x218/0x290
[ 2012.146371][T15700]  ? do_raw_spin_unlock+0xf5/0x210
[ 2012.146397][T15700]  cleanup_net+0x56b/0x800
[ 2012.146427][T15700]  ? __pfx_cleanup_net+0x10/0x10
[ 2012.146461][T15700]  ? process_scheduled_works+0xa25/0x1830
[ 2012.146488][T15700]  ? process_scheduled_works+0xa25/0x1830
[ 2012.146517][T15700]  process_scheduled_works+0xb02/0x1830
[ 2012.146559][T15700]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2012.146590][T15700]  ? assign_work+0x3d5/0x5e0
[ 2012.146618][T15700]  worker_thread+0xa50/0xfc0
[ 2012.146660][T15700]  kthread+0x388/0x470
[ 2012.146681][T15700]  ? __pfx_worker_thread+0x10/0x10
[ 2012.146708][T15700]  ? __pfx_kthread+0x10/0x10
[ 2012.146729][T15700]  ret_from_fork+0x51e/0xb90
[ 2012.146758][T15700]  ? __pfx_ret_from_fork+0x10/0x10
[ 2012.146785][T15700]  ? __switch_to+0xc7d/0x1450
[ 2012.146818][T15700]  ? __pfx_kthread+0x10/0x10
[ 2012.146839][T15700]  ret_from_fork_asm+0x1a/0x30
[ 2012.146883][T15700]  </TASK>
[ 2012.146891][T15700] 
[ 2012.334002][T15700] The buggy address belongs to the physical page:
[ 2012.340449][T15700] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c397740 pfn:0x7c394
[ 2012.350536][T15700] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 2012.357674][T15700] page_type: f0(buddy)
[ 2012.361762][T15700] raw: 00fff00000000000 ffffea000225b008 ffffea0001e57308 0000000000000000
[ 2012.370361][T15700] raw: ffff88807c397740 0000000000000002 00000000f0000000 0000000000000000
[ 2012.378951][T15700] page dumped because: kasan: bad access detected
[ 2012.385379][T15700] page_owner tracks the page as freed
[ 2012.390759][T15700] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22574, tgid 22573 (syz.1.4005), ts 1510743769306, free_ts 1520937779854
[ 2012.412493][T15700]  post_alloc_hook+0x231/0x280
[ 2012.417342][T15700]  get_page_from_freelist+0x24dc/0x2580
[ 2012.422921][T15700]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 2012.428757][T15700]  allocate_slab+0x77/0x660
[ 2012.433293][T15700]  refill_objects+0x331/0x3c0
[ 2012.437996][T15700]  __pcs_replace_empty_main+0x2b9/0x620
[ 2012.443569][T15700]  kmem_cache_alloc_node_noprof+0x441/0x690
[ 2012.449481][T15700]  __alloc_skb+0x27d/0x7d0
[ 2012.453927][T15700]  alloc_uevent_skb+0x7d/0x230
[ 2012.458793][T15700]  kobject_uevent_net_broadcast+0x184/0x560
[ 2012.464707][T15700]  kobject_uevent_env+0x55c/0x9e0
[ 2012.469774][T15700]  net_rx_queue_update_kobjects+0x3e5/0x740
[ 2012.475781][T15700]  netdev_register_kobject+0x21f/0x310
[ 2012.481278][T15700]  register_netdevice+0x12c0/0x1cf0
[ 2012.486510][T15700]  veth_newlink+0x4a4/0xb70
[ 2012.491047][T15700]  rtnl_newlink_create+0x329/0xb70
[ 2012.496191][T15700] page last free pid 18197 tgid 18197 stack trace:
[ 2012.502705][T15700]  __free_frozen_pages+0xc2b/0xdb0
[ 2012.507846][T15700]  __slab_free+0x263/0x2b0
[ 2012.512283][T15700]  qlist_free_all+0x97/0x100
[ 2012.516888][T15700]  kasan_quarantine_reduce+0x148/0x160
[ 2012.522366][T15700]  __kasan_kmalloc+0x22/0xb0
[ 2012.526981][T15700]  __kmalloc_cache_node_noprof+0x3ef/0x6b0
[ 2012.532815][T15700]  __get_vm_area_node+0x13f/0x300
[ 2012.537858][T15700]  __vmalloc_node_range_noprof+0x372/0x1730
[ 2012.543772][T15700]  vzalloc_noprof+0xb2/0xe0
[ 2012.548326][T15700]  alloc_counters+0x64/0x5d0
[ 2012.553044][T15700]  do_ip6t_get_ctl+0xabd/0x1230
[ 2012.557920][T15700]  nf_getsockopt+0x26e/0x290
[ 2012.562531][T15700]  ipv6_getsockopt+0x1fd/0x2b0
[ 2012.567360][T15700]  do_sock_getsockopt+0x2d3/0x3f0
[ 2012.572410][T15700]  __x64_sys_getsockopt+0x1a4/0x240
[ 2012.577668][T15700]  do_syscall_64+0x14d/0xf80
[ 2012.582282][T15700] 
[ 2012.584793][T15700] Memory state around the buggy address:
[ 2012.590433][T15700]  ffff88807c394000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2012.598537][T15700]  ffff88807c394080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2012.606630][T15700] >ffff88807c394100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2012.614749][T15700]                       ^
[ 2012.619101][T15700]  ffff88807c394180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2012.627176][T15700]  ffff88807c394200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2012.635312][T15700] ==================================================================
[ 2012.653336][T30268] bridge_slave_1: entered promiscuous mode
[ 2012.684937][ T5826] Bluetooth: hci1: command tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2012.722598][T15700] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2012.729943][T15700] CPU: 0 UID: 0 PID: 15700 Comm: kworker/u8:18 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2012.741191][T15700] Tainted: [L]=SOFTLOCKUP
[ 2012.745552][T15700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2012.755654][T15700] Workqueue: netns cleanup_net
[ 2012.760487][T15700] Call Trace:
[ 2012.763793][T15700]  <TASK>
[ 2012.766754][T15700]  vpanic+0x56c/0xa60
[ 2012.770782][T15700]  ? __pfx_vpanic+0x10/0x10
[ 2012.775320][T15700]  panic+0xc5/0xd0
[ 2012.779069][T15700]  ? __pfx_panic+0x10/0x10
[ 2012.783515][T15700]  ? preempt_schedule_thunk+0x16/0x30
[ 2012.788945][T15700]  ? nf_hook_entry_head+0x1f1/0x2c0
[ 2012.794169][T15700]  ? preempt_schedule_thunk+0x16/0x30
[ 2012.799569][T15700]  ? nf_hook_entry_head+0x1f1/0x2c0
[ 2012.804793][T15700]  check_panic_on_warn+0x89/0xb0
[ 2012.809875][T15700]  ? nf_hook_entry_head+0x1f1/0x2c0
[ 2012.815130][T15700]  end_report+0x73/0x180
[ 2012.819402][T15700]  ? nf_hook_entry_head+0x1f1/0x2c0
[ 2012.824628][T15700]  kasan_report+0x128/0x150
[ 2012.829183][T15700]  ? nf_hook_entry_head+0x1f1/0x2c0
[ 2012.834419][T15700]  nf_hook_entry_head+0x1f1/0x2c0
[ 2012.839486][T15700]  __nf_unregister_net_hook+0x74/0x6f0
[ 2012.845005][T15700]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[ 2012.851453][T15700]  nf_tables_pre_exit_net+0x64a/0x900
[ 2012.856867][T15700]  ops_undo_list+0x187/0x940
[ 2012.861491][T15700]  ? __pfx_ops_undo_list+0x10/0x10
[ 2012.866637][T15700]  ? idr_destroy+0x218/0x290
[ 2012.871254][T15700]  ? do_raw_spin_unlock+0xf5/0x210
[ 2012.876387][T15700]  cleanup_net+0x56b/0x800
[ 2012.880832][T15700]  ? __pfx_cleanup_net+0x10/0x10
[ 2012.885802][T15700]  ? process_scheduled_works+0xa25/0x1830
[ 2012.891547][T15700]  ? process_scheduled_works+0xa25/0x1830
[ 2012.897287][T15700]  process_scheduled_works+0xb02/0x1830
[ 2012.902875][T15700]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2012.908896][T15700]  ? assign_work+0x3d5/0x5e0
[ 2012.913521][T15700]  worker_thread+0xa50/0xfc0
[ 2012.918150][T15700]  kthread+0x388/0x470
[ 2012.922235][T15700]  ? __pfx_worker_thread+0x10/0x10
[ 2012.927368][T15700]  ? __pfx_kthread+0x10/0x10
[ 2012.931984][T15700]  ret_from_fork+0x51e/0xb90
[ 2012.936602][T15700]  ? __pfx_ret_from_fork+0x10/0x10
[ 2012.941741][T15700]  ? __switch_to+0xc7d/0x1450
[ 2012.946441][T15700]  ? __pfx_kthread+0x10/0x10
[ 2012.951068][T15700]  ret_from_fork_asm+0x1a/0x30
[ 2012.955868][T15700]  </TASK>
[ 2012.959510][T15700] Kernel Offset: disabled
[ 2012.963848][T15700] Rebooting in 86400 seconds..