last executing test programs:

12m30.869388661s ago: executing program 0 (id=510):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000050000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

12m30.488795911s ago: executing program 0 (id=511):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000507d0000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080400000000000000000000000000000044000500ac141440000000000000000000000000000000003c"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x4c050)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000003000001"], 0xfdef)

12m30.042696683s ago: executing program 0 (id=516):
socket$packet(0x11, 0x2, 0x300)
r0 = syz_open_dev$sg(0x0, 0x0, 0x401)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, 0x0, 0x0)
r2 = dup2(r1, r1)
sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890)
write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="a9c085dcbba4000954e46d408a9619631217cd6d34", @ANYRES64=r0], 0xb2)

12m29.791489288s ago: executing program 0 (id=519):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = io_uring_setup(0xadc, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x257})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x1c, 0x0}, 0x4000018)
io_uring_setup(0x8808, &(0x7f0000000140)={0x0, 0x9e04, 0x1000, 0x8, 0x2090, 0x0, r1})
io_uring_enter(r1, 0x2000000, 0x2, 0xf, &(0x7f0000000000)={[0x100000]}, 0x18)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r4})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r4, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x7ffffffe})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0xdddbf000, 0x108000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x334e8b})
r6 = dup(r2)
sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000006000000000a00000008000000b67b2a3017e913cfd81eef2a1cc01fd527ea067fd9090a06d1f141cc12b32984322172a2fc64a4830559c7e39356e8b92d6f7d1300006434b5cab42d7bd664f2560d2c1408d5d8f3f61a79550ae283316ff6e46c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/436], 0x1fc}}, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901)
move_mount(r10, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)

12m29.09424695s ago: executing program 0 (id=523):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000060000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

12m28.737641377s ago: executing program 0 (id=524):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000140))
syz_usb_control_io(r0, &(0x7f00000008c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f0000000640)={0x0, 0xf, 0x13b, {0x5, 0xf, 0x13b, 0x5, [@generic={0x102, 0x10, 0x1c873ab3fe98f691, "88fde0ade9c0e68e1795859c6c6b936ef2fe37c28acb7946acdda077e66f2a0c7a889bad30ec5cf6490eb5718f1ee7791867b9d0ab21d911a6b44eef5fa86bb614c53e34a22d8a8fe112a4eddce059d38fb9c613222495fe2b2bd49f577eccc240a2395740b6b10884041a331487b40313ad8914baa55f9731120e09621ad16261c182abdc8db8056fd645c0fa411fbd73bbec58aded251c62b3cdff2deaa5f777908f1954cfb9fe2992b2e8ad20ae9102010e0211c58934706e47418621fe446caa14120aa8b89623416207c65dbcf59e078a79009cb2342e0ad5b73ffefe4ea0f72ce7f9f0d5f22eb82799132c4ce5409a722b4c5ab21000e05795de1607"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x0, 0x3b, 0x9, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0x5, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x1, 0x5, 0x200, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "692963ddcc20b9b5e6d4f4bc7b259efb"}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x1, 0x6, "8aecea17", "1830a0ef"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x3, 0x8, 0x3, 0x9, 0xe0}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000900)={0x40, 0xb, 0x4, "782092e3"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x0, 0x10, [0xff]}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0xe8}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "ad89"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x17, 0x6}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "9825"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x7}})
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x1, 0x0, 0xffffb030}, {0x8, 0x5, 0x0, 0xfffffc}]}, 0x10)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2024e939d20090875a"], &(0x7f0000000300)=ANY=[@ANYBLOB="200034b2"], 0x0, 0x0})
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0xf030000, 0x1, 0x9, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x980905, 0x8004, '\x00', @p_u16=0x0}})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

12m28.352785568s ago: executing program 32 (id=524):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000140))
syz_usb_control_io(r0, &(0x7f00000008c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f0000000640)={0x0, 0xf, 0x13b, {0x5, 0xf, 0x13b, 0x5, [@generic={0x102, 0x10, 0x1c873ab3fe98f691, "88fde0ade9c0e68e1795859c6c6b936ef2fe37c28acb7946acdda077e66f2a0c7a889bad30ec5cf6490eb5718f1ee7791867b9d0ab21d911a6b44eef5fa86bb614c53e34a22d8a8fe112a4eddce059d38fb9c613222495fe2b2bd49f577eccc240a2395740b6b10884041a331487b40313ad8914baa55f9731120e09621ad16261c182abdc8db8056fd645c0fa411fbd73bbec58aded251c62b3cdff2deaa5f777908f1954cfb9fe2992b2e8ad20ae9102010e0211c58934706e47418621fe446caa14120aa8b89623416207c65dbcf59e078a79009cb2342e0ad5b73ffefe4ea0f72ce7f9f0d5f22eb82799132c4ce5409a722b4c5ab21000e05795de1607"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x0, 0x3b, 0x9, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0x5, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x1, 0x5, 0x200, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "692963ddcc20b9b5e6d4f4bc7b259efb"}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x1, 0x6, "8aecea17", "1830a0ef"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x3, 0x8, 0x3, 0x9, 0xe0}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000900)={0x40, 0xb, 0x4, "782092e3"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x0, 0x10, [0xff]}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0xe8}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "ad89"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x17, 0x6}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "9825"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x7}})
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x1, 0x0, 0xffffb030}, {0x8, 0x5, 0x0, 0xfffffc}]}, 0x10)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2024e939d20090875a"], &(0x7f0000000300)=ANY=[@ANYBLOB="200034b2"], 0x0, 0x0})
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0xf030000, 0x1, 0x9, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x980905, 0x8004, '\x00', @p_u16=0x0}})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

7m47.340153024s ago: executing program 4 (id=1828):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/67, 0x3b}, {0x0}], 0x2}, 0x10009}], 0x1, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed", 0x12}, {&(0x7f0000000040)="35ba85253b191d4d85f7618803e93304e734d7f43fe630fe755e96ea50bfe0339d671f11cb790fd3e1", 0x29}], 0x2}}], 0x1, 0x20e8086)
sendmmsg(r0, &(0x7f00000092c0), 0x0, 0x800)

7m46.365308408s ago: executing program 4 (id=1832):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x8000000000000001]}, 0x8, 0x80000)
poll(&(0x7f0000000800)=[{r0, 0x200}], 0x1, 0x1ad)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x9, 0x200006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x10}, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket(0x1e, 0x3, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, <r5=>0xffffffffffffffff})
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000000c0)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r8=>0x0, 0x0, <r9=>0x0], &(0x7f0000000040), 0x3, r7})
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r7], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r8, r9, r9], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)
r11 = accept4(r10, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, <r12=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3c, 0x2, 0x7, 0x5})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f00000002c0)={0x3, r9, r12})
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r13 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r13, r13, r13}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={'sha224\x00'}})

7m43.427642619s ago: executing program 4 (id=1839):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x80480, 0x0, 0x33}, 0x18)
unlinkat(r3, &(0x7f00000002c0)='./file0\x00', 0x0)
io_uring_setup(0x7, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000580)='yeah', 0x4)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1)
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f00000003c0)="97", &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000001c0), 0x5, r10}, 0x38)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x8080000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0x3000, 0xa, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0x9f, 0x20, 0x0, 0x3}, {0x10000, 0x54000, 0xc, 0x0, 0x40, 0x7, 0x8, 0x40, 0x26, 0x5, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0x0, 0x0, 0x26000, [0x4, 0x0, 0x40000000002]})
ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000200)={0x9, 0x5, &(0x7f00000000c0)=[0x0, 0x7, 0xe7, 0x1, 0x1], &(0x7f0000000140)=[0x0, 0x9, 0x5, 0x8], &(0x7f0000000180)=[0xffff, 0x5a76, 0xffff, 0x9, 0x80, 0x7, 0x7, 0xa545], &(0x7f00000001c0)=[0x2]})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{0xeeee8000, 0x2000, 0xb, 0xad, 0x3, 0x4, 0x7c, 0x7, 0x0, 0x2b, 0x9}, {0x2, 0x30000, 0xf, 0x2c, 0x8, 0x0, 0x7f, 0x1, 0x4, 0xf0, 0x9, 0x80}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0x22, 0x0, 0xa, 0x0, 0x5, 0xf, 0xff}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0xf8, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0xd, 0x23, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x0, 0xf2, 0x41}, {0x30000, 0x6000, 0xb, 0x7c, 0x2, 0x24, 0x7f, 0xb3, 0x80, 0xf5, 0x8, 0x3d}, {0x7000, 0x100000, 0x3, 0x3, 0x8, 0x5, 0x1, 0x3, 0x5, 0x82}, {0x5000, 0x3000, 0x3, 0x5, 0x9, 0xf, 0x3, 0x37, 0x0, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0xd000, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x4, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x3]})
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

7m42.891688124s ago: executing program 4 (id=1841):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)
io_setup(0x42, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000b02000/0x1000)=nil, &(0x7f000082c000/0x3000)=nil, &(0x7f0000928000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000b34000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f00000a3000/0x1000)=nil, &(0x7f000099f000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000180)={0x5, 0x1})
r2 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x5, 0x800000c1})
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00')
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040))
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

7m41.824538367s ago: executing program 4 (id=1852):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000006ffc)=0xa00, 0xffffffffffffff14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000240)="3622d602e1c778ba5ed0df8de48c0909e3ee7fe5756dbefa83a1fd811e4364774554f48304f88a74b9fbf5c8f61e34ad63013de40cd726ceadd206a43e25f6c1f905f5377c77c2d30f7120fbba5e6e9e4f84b9330374fc2dae04ad5494657556dea517e211282501aa125f75ecd4491821894c7631e0465474e3b00c1936ddeb4199099c5f70352d8f2fce533f1a80df923540196bd88538588fde58438facf7d9116a493c03a7d0dea800080ebb711ab5ae9f8d3a951c9d3b493c83f4760cfa3dc1bd401164188975b248ce8e7f93395acbb9c14a8c9898322ba6937915ab6a696cc78ad273774b59982e05817937be1f8a", 0xf2}, {&(0x7f0000000500)="74f3953be3ff0f2c4f0ea7d87ad5ab6ea44300d6b05eedcafd87700ec55d711c7963d3023c3a74b3060d625faaf84c21cc9778eb91ecf7db2c47932904ddd025f6524f96d59ef0846b7e456fc320c9d7eb0dfdf9584a46ee67368b091299e05e8f2758fed98ee69e580f31aa7c19fe09ed4f457fae07384534319a8c670212821cb6001c8902bc0b9c90988db27979696d49626b7e6db7ad8dd6aef062134b47b4da0606422dd962ae2d837628288d8d93b05791227fe4f6c4c1e4583b9235bb6e06723e2b746c013e95308c9a19a210d0d3dc186b4edbda0f121781ce9a5d10", 0xe0}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="efb9d88ec257929cc1c1f052468e28de2101671e80663f2c6283cdcac1de431dede714372daeac8fc9c5932efebb3efc49f54a71c7f61bb2a651915b6494714437df42b10131ecfe8acc0be44a4c10c903581b9e22f846281cc7f020ca91fb8727547098df", 0x65}, {&(0x7f0000001c80)="8188f116073c9f20aa12341e57c93b4393bfbced1a40606028f06c9301dee9917f75f5f0d276dc5f75840855d91ce64090c11c093fef01533d7303f9616f9db6adeca834157630520c17a6d56157f41dcfd450df77899227754e20c5241989bdb4513cb96dc228bc4097a2e95907d0094663129bdeabedb3bd74c95492b15d1b3b0ff7edd984b1c82cc98d9e53631e3ffa66b9e88e3075a5344a890a6f0ba3ee858e4fa8cca737b8beae4aaf456f416228034dbd32", 0xb5}, {&(0x7f0000001d40)="49212ac3192113916f51f76e1488a3487031d8ecde3a56d47b20e6af1f442a", 0x1f}, {&(0x7f0000001d80)="c1716e8640f1cf8b0082e5e58b", 0xd}, {&(0x7f0000001dc0)="da737fff00948bdb500350043db9bd2f2997d1d9d4a409fd08d8bd773477cd96ddf5c7b0d43f3b76fc54dde11f00bcf1b7728861704b206e066b4e6ce206ce7af808171ba67f8cfad9cd1219e9d0dc6db7d6344bd08626112b170d0a4db4b9093ea86980a0f4eb65f664a0e0841b249a196f04f5ebb93b458acf7d554c4eae3c7e37e958381869dadff3f84f23a6f21744d90b", 0x93}], 0x8}, 0x40)
r5 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x80)
recvmmsg(r5, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)=""/180, 0xb4}], 0x1, &(0x7f0000000ac0)=""/8, 0x8}, 0xe}], 0x1, 0x40002080, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r6)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000002d80)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r6, 0x40085507, &(0x7f00000000c0)=0x18)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800)
socket$unix(0x1, 0x1, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0ca5f01280b02e518d00000009000000002f0000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3ff, r9, 0x9000000}, 0x38)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000b80)={@random="5b685c7e778f", @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "060015", 0x18, 0x11, 0x1, @local, @local, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x5c4c}}}}}}}, 0x0)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)

7m41.227790833s ago: executing program 4 (id=1855):
syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="490200001078"], 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x3)
set_mempolicy(0x8006, 0x0, 0x5)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
close(0x3)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00')
pread64(r0, &(0x7f0000000500)=""/8, 0x8, 0xffffffff)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)

7m40.714664043s ago: executing program 33 (id=1855):
syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="490200001078"], 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x3)
set_mempolicy(0x8006, 0x0, 0x5)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
close(0x3)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00')
pread64(r0, &(0x7f0000000500)=""/8, 0x8, 0xffffffff)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)

6m35.463949164s ago: executing program 2 (id=2184):
unshare(0x2c020400)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sync()
sync()
sync()
sync()
sync()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
ioctl$TIOCGICOUNT(r0, 0x5409, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2, 0x8}, 0x30, 0x0)
landlock_restrict_self(r2, 0x9)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
pipe2(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
sendfile(r3, r4, 0x0, 0x10ffff)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002bc0)={'ip_vti0\x00', @random="8148a660d2a7"})
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000180)={0x0, 0xd2b7, 0x10000, 0x1, 0x48}, &(0x7f0000000200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f60, 0x2, 0x0, 0x2aa}, <r12=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x75ad, 0x2, 0x3, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5eef, 0x200, 0x3, 0x249}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x913, 0x100, 0x3, 0x14}}], 0x4, &(0x7f0000001480)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, '\x00', {0x3, 0x9ec, 0x0, &(0x7f0000000480)=@buf_1k="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"}}, &(0x7f0000001500))
r13 = io_uring_setup(0x4c6, &(0x7f0000001540)={0x0, 0xe413, 0x18c40, 0x2, 0xf9})
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000001940)={<r14=>r2, &(0x7f0000001840)='%&\x00', 0xa0480, &(0x7f0000001880)={@_ha_fsid={[0xfffffff8, 0x81]}, {0x7f3f, 0x4, 0x10001, 0x3}}, 0x8001, &(0x7f00000018c0)={@_ha_fsid}, &(0x7f0000001900)=0x5})
r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000002a80), r3)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="04032bbd7000ffdbdf250e00000008803b000100008008002b000200000008003100a50200000800310080000000050033090000000008fa76000800000005003800000000000500350003000000"], 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x20008014)
r16 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_ublk_setup_queues(r3, r9, &(0x7f0000000000)={0x0, 0xb0ec, 0x40488, 0x3, 0x26}, &(0x7f00000015c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9d4a, 0x40, 0x1, 0x211, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x57d3, 0x80, 0x0, 0x26b, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44c6, 0x4, 0x3, 0x2bb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd185, 0x40, 0x3, 0x2f8, 0x0, r1}}], 0x4, &(0x7f0000002980)={0x2e, 0x44, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x41}, 0x0, r16, '\x00', {0x6, 0x432, 0x0, &(0x7f0000001980)=@buf_1k="fbb70114aa82db3b79fa0386891744a38a9de1f1c8fde3d91af86fd5f15fd99f4249129b149248017a7a3d2ed517c3724718203850f4645260ee83e2fc37caca345f2bb7304e969d0fa98c334da87f7637535f65649c0f649c23a5c465a82ef63a62741a5ccb2ff7148000710655c0190de03ad9ad2802df7e4584b08762c5c1ae51bc167b32710cf7dc6b0f6542fe3b41e14bef6713e72ba4050b38fe145076600952e6c9a48bebd80916fbce102afe38eb20a406eb1162b5acb6dbb6d045eb4fad99853c2f75a15faba1f6cedb1b274a5729305a6b5cf24d5fb39aa2b019ba6c46802e92b4a83dce76e9d89ce139af995499d4add2017bbfca8686b863ff84cf56beba125db9df734453ff33df9474d9c3f1cca27b8c9099d54f28de7f355d9b4863a7577059df34d9f2c3e67e9c37a8accc19ec725f056ee821da644db44a609648b10a307b8bdfb65be01f6fa71916471a61f4ed516269e1fdd7f0576ffb8c20979c1237e32b4454d01b11312ce216a3968d6ca6c6ab43181ea552bf2933b0ea9f22321d4e8f6f14ff28fc41789c32e080fab3f02baed9555b86a2263b802be793a86e8aa97754885281d93293368a838afa1a0fd533c8ee37784afed703f5803d374b18db04dc0d7fa0e2b62e8d1dc3e02173b0265736bcf559f4337a60f9ef2ec2a603b3840eb25a3dad8459c7c64a16bbeecf8bf4ef066002a526c74791da558af48013e005a96623865f914c97871078f4a48e051d8a1b6b4a6a7f64f8a5ef42b16242a5b53b6bdeff8715634bf96ede23b73f3eeb3a25cf1d6b633a517bbf3740d64f089f1b078043825db952bcf0d429317978056ae1a4ada114a2d1185bc4e3cf29cb5d6c6786ee34faf9996e115f99f510fe24b42ac17aebd06f2b293eab20b5a740268046f4bc1532714cd123ef17976fae7ef2f7fc60c60cadfb5e98b049498d3b576588a92e229c73d48a4cf7447eef459bf94cb7290828ce99ff9de6c54906eab4c85f3ece0a17e4e32f5aea604ef8594960be0603a778dddedada5c54e5bd1e33a1cc5b9cf26fbb4144df96d58e2f588919ea5851fdfab9d11831df6079ba64fe05022f12cf240032b27f5c7505e2c88dbb841cf3cc4be0fa300c4ca76a46eeb0be80e9466592c9bc21d64aae0e54900569d60e8e194281aacc280092cbf50eb4d512c1b1561afc8eeb506d0941510fd225a1c0e343062d1010770331e310ecbc596a14844216ee66c3e4fd3f7060c2a0ad95460523929641fc1568d0f3d544d8177711401722791cf8422b1d80bb1529475bab41715f920794832d2092234f65d9d3176b07e023f416bf8d9d9aacf61c553c78009d1e29936c275f2e28a9339a6c155ee956ea3f722f8c0a8c8cf54a02d26eb2fdf83ec8cf83528d08aedd676e4989ba487b44aabe5ed48e4c809496738f286f81d8739a"}}, &(0x7f0000002a00))

6m32.213597233s ago: executing program 2 (id=2191):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x8847}, 0x0)

6m32.036164411s ago: executing program 2 (id=2193):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000090002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc01000000000000000000000000000000000000000000000200", @ANYRESDEC], 0xc8}}, 0x0)

6m31.954463508s ago: executing program 2 (id=2195):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
unshare(0x22020600)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_setup(0x3fd, &(0x7f0000000500)=<r5=>0x0)
io_submit(r5, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xfffffdfc}])
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

6m30.903545562s ago: executing program 2 (id=2203):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000ff020000000000000000000000000001ac1e01012000000000000000000000004e23ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003300000000000000000000000000001b00000000fefffffffffffffffeffffffffffffff060000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000900000000000000010000000000000000084000000000000900000000000000920200000000000000100000000000000000000000000000000000000a0004002c00000000000000600002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e000b000000002000000000190080ff0000feffff7f00004c0014"], 0x19c}}, 0x44050)

6m30.076559779s ago: executing program 2 (id=2210):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000001000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x7, 0x0, <r0=>0xffffffffffffffff})
getdents(r0, &(0x7f0000000180)=""/108, 0x6c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYBLOB=',\x00\x00\x00', @ANYBLOB="11002dbd70000000001f12000000180001801400020064756d6d7930", @ANYRESHEX=r1], 0x2c}}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x28a, 0x0, 0x4000000000000008}]})

6m29.622601381s ago: executing program 34 (id=2210):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000001000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x7, 0x0, <r0=>0xffffffffffffffff})
getdents(r0, &(0x7f0000000180)=""/108, 0x6c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYBLOB=',\x00\x00\x00', @ANYBLOB="11002dbd70000000001f12000000180001801400020064756d6d7930", @ANYRESHEX=r1], 0x2c}}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x28a, 0x0, 0x4000000000000008}]})

41.688265153s ago: executing program 5 (id=3668):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f000001000000000080ff000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc01000000000000000000000000000000000000000000000200", @ANYRESDEC], 0xc8}}, 0x0)

41.456054295s ago: executing program 5 (id=3671):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30", @ANYRES64=r0], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

41.358741648s ago: executing program 5 (id=3672):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc0100001900010025bd700000000000fc020000000000000000000000000000ff01000000000000000000000000000100000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1bc}}, 0x0)

41.157287194s ago: executing program 5 (id=3676):
syz_open_dev$vbi(0x0, 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
r1 = dup2(r0, r0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
read$char_usb(r1, &(0x7f0000000480)=""/193, 0x9d)
read$char_usb(r1, &(0x7f0000000100)=""/166, 0xa6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000})
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r2 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x2, &(0x7f0000000280)=ANY=[@ANYRES64])
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d75c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe)
keyctl$set_timeout(0xf, r4, 0x10001)
read$FUSE(r1, &(0x7f00000035c0)={0x2020}, 0x2020)
ioctl$int_in(r3, 0x40000000af01, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600))
r6 = dup(r5)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x220002, 0x0)
r8 = fcntl$dupfd(r3, 0x0, r7)
ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0xe000})
ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)={0x0, r6})
ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f00000002c0))

40.179417806s ago: executing program 5 (id=3678):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e1f, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x1, @private1, 0x4}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e24, @empty}}, 0xfffc}, 0x90)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
accept$alg(r0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000002c0))
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141", 0x6, 0x5, 0xffffffff}], 0x0)
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000380)={0x0, 0xe, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x2000001, 0x4, 0xc2, 0x53, 0x4, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x8, 0x2, 0x1}, {0xb, 0xa7f3, 0x8, 0x8, 0x33, 0xff, 0x6, 0x3, 0xe, 0x7, 0x7, 0x6, 0x1}, {0x0, 0x8, 0xd, 0x10, 0x21, 0x9, 0x0, 0xbb, 0x4, 0x0, 0x0, 0x2, 0xfffffffffffffb97}], 0x9})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x9a3, 0x1003, 0x3, 0x8, 0x1000000000000010, 0x2, 0x4, 0x0, 0x3, 0x4000000000000000], 0x10000, 0x102200})
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x5, 0x401, 0x7, 0x7fef, 0x81, 0x7, 0x0, {r3, @in6={{0xa, 0x4e20, 0xef83, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, 0x4, 0x9, 0x60c, 0x6a, 0x400}}, &(0x7f0000000500)=0xb0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
r8 = socket$inet(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)

39.848221907s ago: executing program 5 (id=3680):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x4000010, r0, 0x10d000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000005c0)={0x5, 0x0, [{0x40000000, 0xffffffff, 0x4, 0xffffff89, 0x6, 0xa9, 0x2}, {0xc0000000, 0x100, 0x4, 0x5, 0x400003, 0x40000002, 0x100003}, {0x4, 0x4, 0x1, 0xe2, 0xfffffffd, 0x56fecc05, 0x2000005}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf3, 0x6, 0x80000001}, {0xa, 0x4, 0x7, 0x0, 0x7f, 0x9, 0x7ff}]})
r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
mmap$usbfs(&(0x7f000005b000/0x1000)=nil, 0x1000, 0x1000001, 0x10010, r4, 0x5)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

24.770333693s ago: executing program 35 (id=3680):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x4000010, r0, 0x10d000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000005c0)={0x5, 0x0, [{0x40000000, 0xffffffff, 0x4, 0xffffff89, 0x6, 0xa9, 0x2}, {0xc0000000, 0x100, 0x4, 0x5, 0x400003, 0x40000002, 0x100003}, {0x4, 0x4, 0x1, 0xe2, 0xfffffffd, 0x56fecc05, 0x2000005}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf3, 0x6, 0x80000001}, {0xa, 0x4, 0x7, 0x0, 0x7f, 0x9, 0x7ff}]})
r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
mmap$usbfs(&(0x7f000005b000/0x1000)=nil, 0x1000, 0x1000001, 0x10010, r4, 0x5)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

10.222525713s ago: executing program 7 (id=3851):
sendto(0xffffffffffffffff, &(0x7f0000000100)="120000001200e7ef007b00000000000000653ce2f7c606ee4baa585c1070396d050c01c1c804cafee2cce195fa54e48b7690b529d7eb35ac8f562e3c5ab53e510ecb3933bdeea4e48e679e201af08b9f1566527f2a4d5fd533f6ca243241496d769e3a046ff7f76dc46e4ae67c558afaec7d9f1082e85f7ccb9b5298376b08b96ed95e4619ff7bcd2701732b36", 0x8d, 0x200048f0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020008402505a1a44000010203010902680002010040000904000001020e0000052406080005240000fa0d370f0100160000000000000006241b0000000c241b"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0)
syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x5, 0x2, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2)
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in=@local, 0x0, 0x1, 0x4e22, 0xe, 0xa}, {0xfffffffffffffffc, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in=@local, 0x34ff, 0x2, 0x3, 0x0, 0x2}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4)
close(r6)
read$watch_queue(r4, 0x0, 0x0)
keyctl$revoke(0x3, r3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000))
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

7.076376084s ago: executing program 7 (id=3860):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x3, 0x7f, 0x80000001, 0x1, 0x0, 0x4, 0x1000, 0x3ff, 0x8, 0x7, 0x8001], 0x54000, 0x100204})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.660276863s ago: executing program 7 (id=3861):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc9f}, 0x4089}, {{0x0, 0x0, &(0x7f0000000080)}, 0x2}], 0x400000000000070, 0x40000101, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYBLOB="61b4d10c2d0d50e0d0625787002211e6d0f153b7ec48c2a2f03c594c4dbe756911ce25a494c63f3152d5110d443a998fd3d812586d9265634de41064e7", @ANYRES16=r0], 0x0)
socket$inet_sctp(0x2, 0x800000000000001, 0x84) (async)
r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000280)={0x20, 0x1a, 0x44, {0x44, 0x29, "8e4d083a2f858725bb36fc53cf6b1526f10e60cfc391d3b963d4d8b1149e73d851ce47beefe5d6238b83ad6fd3ad5248e338851890f3b670bf7513f556d4c3fd03ca"}}, &(0x7f0000000300)={0x0, 0x3, 0xb6, @string={0xb6, 0x3, "1d886c1b2315520b6889afdcdb8e0b88ec22577a3523cb60a7de2627624ece40df5f7bedafbf469626c72ac25d1c67a1b07c54e2490aecada81cbaaa1f8a6f7da48d42a1c829cd04f0a014071da7c996a7efda22c11e80a59e38f33fbda2faf1d58cd281b70c4f350fdc4822bce411873b452d473081461ca92d607df3a64816959e4ff10da71cab3343fe0f4e29f94e1c4dcfbb835a46d68c83af51cd5e485676fe3e7426765bee4ccb0295f2bc78ef239d0b2a"}}, &(0x7f00000003c0)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0xa, "adad"}, @local=@item_012={0x1, 0x2, 0x0, 'T'}, @global=@item_012={0x2, 0x1, 0x2, 'r\"'}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xf98}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x20, 0xd, 0xe1, "e3f03fd537fb3658481f77bd28f90002d2401f24230df95d94fa49eaa0e8b9452fb418e2fd88d1ccdd3d5ff9842cd6b2e85e8636bc359b471c9adc0428e1c24932026f11504ccea9635095b91d9980b9a2bf22de75329f5f9ea45bf50f07ff8e18aef9754541c71efb21c562660af89686a31852ede810eb81e6c4f884c3658aef2287e76f2b00de4ba3f623eb9991f43bcc4698837225fb12975a41ee288a872d6fd80b048aee188b65e5dc464f45fbb107062c8a51e047078b16e46a88480c5acef12017826ec08da14ff9828f2c19a0bd23c95ea992ae6e335027d129befa74"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x1, 0xb4, "c015382531272eeeaf8f8bdf9e2ea10076b6235b57a9b816fd17e0fea78707910eea5dfc54a4c03a23c16fc1c3b6d4e6ed8fbcc16316a19c4665cf2ace72c5a3f041828383f8237adf2dad00f1cc3d8faa8b9a7325a99586698edb8ac2da4c6c45f7a2d51c63992f062f7be1886f8e59f6cc9716f7a273366abf849db2262d8f6ca93bc44c81adca77fbd6afd1eb532c5010bcc6e4b295c73612e43492386323e0789fe2ce7e96f32aa0a8c05ec59c16e5d784d6"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x1}}) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000280)={0x20, 0x1a, 0x44, {0x44, 0x29, "8e4d083a2f858725bb36fc53cf6b1526f10e60cfc391d3b963d4d8b1149e73d851ce47beefe5d6238b83ad6fd3ad5248e338851890f3b670bf7513f556d4c3fd03ca"}}, &(0x7f0000000300)={0x0, 0x3, 0xb6, @string={0xb6, 0x3, "1d886c1b2315520b6889afdcdb8e0b88ec22577a3523cb60a7de2627624ece40df5f7bedafbf469626c72ac25d1c67a1b07c54e2490aecada81cbaaa1f8a6f7da48d42a1c829cd04f0a014071da7c996a7efda22c11e80a59e38f33fbda2faf1d58cd281b70c4f350fdc4822bce411873b452d473081461ca92d607df3a64816959e4ff10da71cab3343fe0f4e29f94e1c4dcfbb835a46d68c83af51cd5e485676fe3e7426765bee4ccb0295f2bc78ef239d0b2a"}}, &(0x7f00000003c0)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0xa, "adad"}, @local=@item_012={0x1, 0x2, 0x0, 'T'}, @global=@item_012={0x2, 0x1, 0x2, 'r\"'}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xf98}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x20, 0xd, 0xe1, "e3f03fd537fb3658481f77bd28f90002d2401f24230df95d94fa49eaa0e8b9452fb418e2fd88d1ccdd3d5ff9842cd6b2e85e8636bc359b471c9adc0428e1c24932026f11504ccea9635095b91d9980b9a2bf22de75329f5f9ea45bf50f07ff8e18aef9754541c71efb21c562660af89686a31852ede810eb81e6c4f884c3658aef2287e76f2b00de4ba3f623eb9991f43bcc4698837225fb12975a41ee288a872d6fd80b048aee188b65e5dc464f45fbb107062c8a51e047078b16e46a88480c5acef12017826ec08da14ff9828f2c19a0bd23c95ea992ae6e335027d129befa74"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x1, 0xb4, "c015382531272eeeaf8f8bdf9e2ea10076b6235b57a9b816fd17e0fea78707910eea5dfc54a4c03a23c16fc1c3b6d4e6ed8fbcc16316a19c4665cf2ace72c5a3f041828383f8237adf2dad00f1cc3d8faa8b9a7325a99586698edb8ac2da4c6c45f7a2d51c63992f062f7be1886f8e59f6cc9716f7a273366abf849db2262d8f6ca93bc44c81adca77fbd6afd1eb532c5010bcc6e4b295c73612e43492386323e0789fe2ce7e96f32aa0a8c05ec59c16e5d784d6"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x1}})
sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
shutdown(r2, 0x1) (async)
shutdown(r2, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x8100, 0x4001}, 0x10)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000080)={0x0, 0x30, 0x37, "98f09f70ffffb03908e5069332d022d640f3078a99e4435de635fc6f2ee9833ac735dac94ce1eb5b7cd23a6fb6c8aefa45577f752ef152"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.8922697s ago: executing program 3 (id=3866):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000f0000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

5.692158781s ago: executing program 3 (id=3868):
syz_usb_connect(0x4, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7}}]}}]}}, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) (async)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (async)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x147bc2, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) (async, rerun: 32)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 32)
writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) (async)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async, rerun: 64)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 64)
select(0x40, &(0x7f0000000040)={0x1, 0xf, 0x10001, 0xfffffffffffffffd, 0x1d4d953e, 0x1, 0x3, 0x9}, 0x0, &(0x7f00000000c0)={0x9, 0x7ff, 0x9, 0xc, 0x10000, 0x3, 0x6, 0x3}, 0x0) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000180)="d9", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000400)="8b", 0x1}], 0x1}}], 0x2, 0x50) (async, rerun: 64)
shutdown(r2, 0x1) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000a80)={<r3=>0x0, 0x1}, &(0x7f00000004c0)=0x8)
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80000000000000007af791950000bb060004400e1f00000500070088000000060005404e", @ANYRES8, @ANYRES64=r2, @ANYRESDEC=r3], 0x5c}, 0x1, 0x0, 0x0, 0x10004842}, 0x90) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0xee01, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async, rerun: 64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000003060500"/19], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)

5.43900366s ago: executing program 3 (id=3870):
open$dir(0x0, 0x1, 0x27)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x280, 0x230, 0x230, 0x280, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x1000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)
ptrace$setsig(0x4203, r0, 0x10000000000051, &(0x7f0000000200)={0x202f, 0x1e, 0x9})
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, r1}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50edd90000007460f6e547964e679b1add0f9c02d4c16c7f11a4cb3331a64a22b09d8c2641640e7bca6742fc37e79a7b376e1197135fe045306d411d9d2d1ada4c76ce20b2907d817b07b04511cf69a99222c8e348f12263a58729bd1922f35853f1e3ceda7ad6258a650ff0646c968f172470a02ab3a89935b47c4710b19c39d8812efc958a7e3168b6d060718911c3ab25687bfa08ac9228334336b3e256f6814874f5ac929e394b8035d775fcaac2b7d20703eee3cb6359", @ANYRES16=r3, @ANYBLOB="00022cbd7000fedbdf25050000003c00038008000200050000000800020000000e0008000300030000000800020002000000080003000400000008000300010000000800010009000000"], 0x50}, 0x1, 0x0, 0x0, 0x8044}, 0xc010)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x40000)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000580)=""/189)

5.185367205s ago: executing program 3 (id=3873):
r0 = memfd_secret(0x0)
r1 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000070904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010001020d00000904010102020d00000905820200020942f90905030210"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xd5f}}, {{{0x9, 0x5, 0x81, 0x3, 0x79f, 0xa1, 0x7, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x83, 0x6}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x2, 0x8, 0x7, 0xcf, 0xff}, 0x15, &(0x7f00000001c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x7, 0xf, 0x1, [0x0]}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xfcff}}]})
syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f00000002c0)={0x20, 0x5, 0x48, {0x48, 0x23, "aafb9850df283668d251c6775e2f9c24f9d16fe831cf2c29586b18a370f58db561789a1d63aeaee4bd319bd9524b4651a882dae40014188ae73ba38d5bb6062305800bc24adc"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f00000013c0)={0x0, 0x22, 0x12, {[@local=@item_012={0x2, 0x2, 0x0, "d5b1"}, @local=@item_4={0x3, 0x2, 0x8, "d3802a5e"}, @main=@item_4={0x3, 0x0, 0x9, "e193d688"}, @main=@item_4={0x3, 0x0, 0x8, "0be06073"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x256}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x40, 0x15, 0x23, "d9450fd2f5a318dcaed98b5a33c63376438c696e4139e2c5465220898daf5b222183e8"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x97}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x11}, &(0x7f0000000600)={0x20, 0x1, 0x7e, "452af242f6efb241b1ee94bf0a6faeaadb866ba000977624320163423619f0b1969ea48e95ac3d9a595251b8bd51c1d11616969b8f61e4dc9f69c5bb00b28e385a1bfc49201500de4d63e312c99530b910f4c7a846c18bae4c9e6a8c59c1b07d2554fb26b2485b4148f67b539d8bf51374c32cb31577457a0629e2974364"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x1a}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/fscreate\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
syz_clone3(&(0x7f0000000080)={0x1810000, 0x0, 0x0, 0x0, {0x20080027}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
madvise(&(0x7f00005fb000/0x3000)=nil, 0x3000, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x44014)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2020)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xb30, 0x539, 0xf, 0x7, 0xf, 0x40, 0x2, 0xfff, 0x7fff, 0x4, 0x5, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0)

3.586097411s ago: executing program 1 (id=3882):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x3, 0x7f, 0x80000001, 0x1, 0x0, 0x4, 0x1000, 0x3ff, 0x8, 0x7, 0x8001], 0x54000, 0x100204})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.4247396s ago: executing program 7 (id=3884):
socket(0xa, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0)
clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0xffffffffffffffff})
r3 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f0000000040)={0x9, 0x2, 0x7, 0x0, 'syz0\x00', 0x33})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x4e24, 0x1, @local, 0x7}]}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={r5, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000000c0)={0x0, 0xffffffffffffff6d, r7})
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000180)={0xa0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}})
r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r7, @ANYRES16=r10, @ANYBLOB="010028bd7000f8dbdf25170000005800068008000600010000004c00040067636d2861657329000000000000000000000000000000000000000000000000240000009ea2d328893918792a5ca222a6ad61b1143aa3a6ace61df176c9eac6c0e10bb12bbb5261"], 0x6c}, 0x1, 0x0, 0x0, 0x806}, 0x80)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsmount(r8, 0x0, 0x1)

3.35872734s ago: executing program 1 (id=3885):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000030000000000000300000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)

3.00429213s ago: executing program 1 (id=3887):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004)
socket$kcm(0x10, 0x2, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x400, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1c, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x86}, @TCA_SAMPLE_PARMS={0xffffffffffffff99, 0x2, {0x0, 0x0, 0x0, 0x40, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c}, 0x20040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900014073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002408000000008000140000000050900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xb4}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getlink={0x34, 0x12, 0x1, 0x70bd25, 0x25dfdbfc, {0x7}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x200, 0x70bd28, 0x10, {{}, {@void, @val={0xc, 0x99, {0x8f, 0x7e}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000300000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)

2.898809474s ago: executing program 8 (id=3888):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x3f00)

2.730343535s ago: executing program 8 (id=3889):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4081}], 0x1, 0x40800) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
r2 = socket$packet(0x11, 0x2, 0x300) (async)
syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) (async)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000200)="000088a8", 0x4, 0x14000b01, &(0x7f00000000c0)={0x11, 0x8100, r4, 0x1, 0x80, 0x6, @multicast}, 0x14) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
pipe2$9p(&(0x7f0000000080)={<r7=>0xffffffffffffffff}, 0x0)
splice(r7, 0x0, r6, 0x0, 0x317e, 0x4)
close_range(r5, 0xffffffffffffffff, 0x0) (async)
r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000240)=[@nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @cpuid={0x64, 0x18, {0xc841, 0x7000000}}, @nested_vmresume={0x130, 0x18, 0x2}, @code={0xa, 0x6c, {"66baf80cb876111a8cef66bafc0cec660f173ec74424005e000000c7442402d6574848ff1c24f20f08c744240002010000c744240209000000ff1c24c461fc5ae8653666430f01f8f3410fc77300c402ed06f04e0fc79e00000000"}}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0x91fe}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xa4, 0x3, 0x9}}, @wr_drn={0x68, 0x20, {0x1, 0x1ff}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x6, 0x5}}, @wr_drn={0x68, 0x20, {0x0, 0x91}}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0x9d9b}}, @nested_load_syzos={0x136, 0xa8, {0x0, 0x6, [@nested_amd_set_intercept={0x181, 0x30, {0x0, 0x1, 0x4}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xbb, 0x1, 0x5, 0x1}}, @wr_crn={0x67, 0x20, {0x8, 0xd3f3}}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host64=0x2c05, 0x1, 0xff, 0x7}}, @rdmsr={0x66, 0x18, {0x40000a47}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_vmresume={0x130, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0x8000}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x72, 0x6, 0x6, 0x3}}, @wr_drn={0x68, 0x20, {0x0, 0xa}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x1, 0xc, 0x1}}, @cpuid={0x64, 0x18, {0x0, 0x7}}, @nested_create_vm={0x12d, 0x18, 0x1}, @cpuid={0x64, 0x18, {0xffff}}], 0x434})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

2.427683369s ago: executing program 1 (id=3890):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x181141)
r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x60000, 0x3)
getdents(r4, &(0x7f0000001500)=""/4116, 0x1014)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x3, 0x0, 0x7, 0x0})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000002c0)=0xc)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
lstat(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000000000000000000000000000000ff020000000000000000000000000001000000080100000000000000003ff50d00"/64, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000800600000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000400000000804000020000000000000800"/112], 0xb8}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0x12)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random='\x00\x00B\f\x00', @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x11}], "fafb17c133d11e5921853b87e3f48b43"}}}}}}}, 0x0)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000680)={<r12=>0x0, 0x4, 0x5ad4, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000a80)={r12, "fed2ac117e1bd2451f72b65d0b6eb0c4"})
close_range(r1, r2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/power/resume', 0x80000, 0x80)
lseek(r13, 0x0, 0x3)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x8a, 0xbb, 0x72, 0x20, 0x582, 0x40, 0xf469, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0xff, 0x0, 0x6, "", [{{0x9, 0x4, 0x2f, 0x8, 0x2, 0x8d, 0x52, 0xf8, 0x20, [], [{{0x9, 0x5, 0xa, 0x10, 0x200, 0x1, 0x6, 0x8}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xf3, 0x0, 0x6}}]}}]}}]}}, 0x0)

2.332138966s ago: executing program 8 (id=3891):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000507d0000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080400000000000000000000000000000044000500ac141440000000000000000000000000000000003c"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x4c050)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff02000000000000000000002f000001"], 0xfdef)

2.177792618s ago: executing program 6 (id=3892):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0xa8e9, @empty, 0xa6}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x20, &(0x7f0000000580)={&(0x7f0000000380)=""/234, 0xea, 0x0, &(0x7f0000000480)=""/204, 0xcc}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRESOCT=r5], &(0x7f00000001c0)='GPL\x00', 0x2, 0xd2, &(0x7f0000000240)=""/210, 0x0, 0xc, '\x00', 0x0, @fallback=0x36, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r6 = getpgid(0x0)
setpriority(0x3, r6, 0x5)
r7 = getpgrp(r6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000, 0x0, &(0x7f0000000180)=0x1)
prlimit64(r7, 0xb, &(0x7f0000000000)={0xfffffffffffffffa, 0x28}, &(0x7f0000000040))
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040060002a00118031f9e05e2f"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0xa8e9, @empty, 0xa6}, 0x1c) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
dup(r3) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x20, &(0x7f0000000580)={&(0x7f0000000380)=""/234, 0xea, 0x0, &(0x7f0000000480)=""/204, 0xcc}}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRESOCT=r5], &(0x7f00000001c0)='GPL\x00', 0x2, 0xd2, &(0x7f0000000240)=""/210, 0x0, 0xc, '\x00', 0x0, @fallback=0x36, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async)
getpgid(0x0) (async)
setpriority(0x3, r6, 0x5) (async)
getpgrp(r6) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000, 0x0, &(0x7f0000000180)=0x1) (async)
prlimit64(r7, 0xb, &(0x7f0000000000)={0xfffffffffffffffa, 0x28}, &(0x7f0000000040)) (async)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040060002a00118031f9e05e2f"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async)

2.016431128s ago: executing program 3 (id=3893):
syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
r1 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, &(0x7f0000000280)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, 0x0, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=@bridge_getlink={0x28, 0x12, 0x1609, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x4a020, 0x10}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xf89}]}, 0x28}, 0x1, 0xa1, 0x0, 0x4040000}, 0x20000004)
close(0x3)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r12, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
connect$inet(r12, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r12, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r13 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r13, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socket$unix(0x1, 0x3, 0x0)

1.844010477s ago: executing program 8 (id=3894):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='o'])
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000263dde896582fa4f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00", 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x4, 0x8d2, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000f80)={&(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x2d, 0xf3, 0xffffffff80004010, 0x81, 0x7ff, 0x3, 0x7285, 0x0, 0x0, 0x10, 0x81}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@rnullb, r1, &(0x7f00000002c0)='./file0\x00')

1.843368947s ago: executing program 6 (id=3895):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x3, 0x7f, 0x80000001, 0x1, 0x0, 0x4, 0x1000, 0x3ff, 0x8, 0x7, 0x8001], 0x54000, 0x100204})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x44}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000000c0)={0x7074, 0x3, 0x3, 0xfffffffe})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
set_mempolicy_home_node(&(0x7f0000c8f000/0x4000)=nil, 0x4000, 0x1, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000300)={0xffffffffffffffff, 0x3, 0x2})
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@migrate={0xe8, 0x11, [{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@empty, @in6=@empty, @in=@local, @in6=@loopback, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x138}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='veno', 0x4)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.493955393s ago: executing program 6 (id=3896):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x80)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="080000000000000000000000000000000000000000000000000000000000000004"], &(0x7f0000000080)=0x2c)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000380)={0x79, 0x0, 0xc50})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e5e}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x1}}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.071674467s ago: executing program 6 (id=3897):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000ffffff800000000000000300000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)

920.44837ms ago: executing program 6 (id=3898):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="900200001000010028bc7000fdffffffff0200000000000000000000000000010a0101000000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000020000000fcffffffffffffff0000000000000000090000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000000000000000000000a0004002c00000000000000510102006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480800001a000b000073026a6a41067390e81a00606ea6b38500e88cd73be620c9574b2f1baf04f1114a8fead23a4dd4013cb8af7dd599120cca85ffa96510ee6a2a2a9eb372cdee47d16b4600000037d1edce11bd893da81801e652de5ee6345c533ae3e078b4b2e0c5e4b0a86dd201c8106b2d0800f3fd8f62fdf5ba642f24b37e606ed64feaca3508e61b40f4fedfd29bc4ab18ea6ef7cccb18adedc3a313e61dc18917e86a63d25209fd6213b3db48ef96141020a332fc477e86cfb4dff01843ea100571454aff274e69c27e480bf3db9661a12c0957584391ef8ddfed1582d1279f1d3731194b5c63e56d5b90095a77f1b0d37a4a892cde0c26703561a36a437252ec8c85da1657fd8d780000004c001400686d61632873686132353629"], 0x290}}, 0x44050)

863.853564ms ago: executing program 6 (id=3899):
r0 = syz_open_dev$evdev(0x0, 0x4, 0x40000)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/215)

818.622309ms ago: executing program 8 (id=3900):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004)
socket$kcm(0x10, 0x2, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x400, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1c, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x86}, @TCA_SAMPLE_PARMS={0xffffffffffffff99, 0x2, {0x0, 0x0, 0x0, 0x40, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c}, 0x20040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900014073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002408000000008000140000000050900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xb4}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getlink={0x34, 0x12, 0x1, 0x70bd25, 0x25dfdbfc, {0x7}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x200, 0x70bd28, 0x10, {{}, {@void, @val={0xc, 0x99, {0x8f, 0x7e}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000300000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)

749.544601ms ago: executing program 1 (id=3901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}})

643.470966ms ago: executing program 7 (id=3902):
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8091}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44c", 0x7b}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc", 0x23}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

635.252982ms ago: executing program 8 (id=3903):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x38, 0x8001, 0x0, 0x9, 0x0, 0x8000, 0x8000, 0xffffffff}, 0x0) (async)
r2 = getpgid(0x0)
setpriority(0x3, r2, 0x5) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) (async)
unshare(0x8000000) (async)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) (async)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x3}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async)
lseek(r4, 0x400, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000480)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x100b}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @free_buffer], 0x0, 0x0, 0x0}) (async)
dup3(r6, r1, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x1002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x100) (async, rerun: 64)
write$dsp(0xffffffffffffffff, &(0x7f0000000240)=' ', 0x1) (async, rerun: 64)
close(0xffffffffffffffff) (async)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) (async, rerun: 64)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (rerun: 64)

508.944795ms ago: executing program 3 (id=3904):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'team_slave_1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040025bd7000fddbdf251200008f61c0b40be762a90008000700080000000008000700090000000800080000800000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffff000}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x1ff}]}}]}, 0x40}}, 0x0)

376.265234ms ago: executing program 7 (id=3905):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = msgget$private(0x0, 0x0)
msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000040)=""/8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x70, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x70}}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000008c0)=@gcm_128={{0x304}, "405bf3aa407a3d36", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendto$inet6(r2, &(0x7f0000000ac0)="81000000", 0x4, 0xc000, 0x0, 0x0)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000300)={0x6, 0x3, 0x5c34, 0x55, 0x52f9})
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
write(r2, &(0x7f0000000900)="ff9651", 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f00000004c0)=0x27)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000600)={r6, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}}, [0xfffffffffffff4e6, 0x9e, 0x0, 0x1, 0x1b7, 0xffffffffffffffc0, 0x1, 0x4, 0xa, 0x4, 0x6, 0xaa, 0x7a2e, 0x9, 0x8]}, &(0x7f0000000700)=0x100)
close(r2)
ioctl$int_in(r1, 0x40000000af01, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000003c0)={0x1})
syz_usb_connect(0x2, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dcbbe203a81fe229c89010203010902360001050000000904d30000ef010100062d0600017705240001dd0c240f"], 0x0)

0s ago: executing program 1 (id=3906):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x3, 0x7f, 0x80000001, 0x1, 0x0, 0x4, 0x1000, 0x3ff, 0x8, 0x7, 0x8001], 0x54000, 0x100204})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x44}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000000c0)={0x7074, 0x3, 0x3, 0xfffffffe})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
set_mempolicy_home_node(&(0x7f0000c8f000/0x4000)=nil, 0x4000, 0x1, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000300)={0xffffffffffffffff, 0x3, 0x2})
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@migrate={0xe8, 0x11, [{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@empty, @in6=@empty, @in=@local, @in6=@loopback, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x138}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='veno', 0x4)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

turned -16
[  778.641211][T12612] usb 4-1: USB disconnect, device number 61
[  778.661078][ T6142] usb 2-1: USB disconnect, device number 37
[  778.987258][T16801] input: syz1 as /devices/virtual/input/input49
[  779.103924][T16801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  779.114653][T16801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.210895][T16807] loop5: detected capacity change from 0 to 7
[  779.230487][T16807] Dev loop5: unable to read RDB block 7
[  779.238382][T16807]  loop5: unable to read partition table
[  779.246520][T16807] loop5: partition table beyond EOD, truncated
[  779.254279][T16807] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  779.264633][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3226'.
[  779.310687][T16810] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3228'.
[  779.572036][T16817] fuse: fd is not a fuse device
[  779.604798][T16815] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.612738][T16815] bridge0: port 1(bridge_slave_0) entered disabled state
[  779.711024][T16815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  779.727167][T16815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  779.824848][ T5637] Bluetooth: hci4: command tx timeout
[  779.913872][ T6170] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  779.953162][T13623] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.964865][T13623] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.976140][T13623] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  780.037227][T13623] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  780.116138][ T6170] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  780.144204][ T6170] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  780.183591][ T6170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  780.203367][T16840] netlink: 'syz.5.3239': attribute type 10 has an invalid length.
[  780.211601][ T6170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  780.235354][ T6170] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  780.253452][ T6170] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  780.287312][ T6170] usb 4-1: Product: syz
[  780.302459][ T6170] usb 4-1: Manufacturer: syz
[  780.316596][ T6170] usb 4-1: SerialNumber: syz
[  780.343585][ T6170] usb 4-1: config 0 descriptor??
[  780.382369][T16842] bridge0: port 1(vlan0) entered blocking state
[  780.391778][T16842] bridge0: port 1(vlan0) entered disabled state
[  780.399395][T16842] vlan0: entered allmulticast mode
[  780.406171][T16842] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  780.418029][T16842] vlan0: entered promiscuous mode
[  780.424254][T16842] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  780.525664][T16848] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3242'.
[  780.583425][ T6170] rc_core: IR keymap rc-imon-rsc not found
[  780.594355][ T6170] Registered IR keymap rc-empty
[  780.607093][ T6170] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  780.645723][ T6170] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50
[  780.665738][ T6170] imon_raw 4-1:0.0: probe with driver imon_raw failed with error -90
[  780.697829][ T6170] usb 4-1: USB disconnect, device number 62
[  780.878827][T16859] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3247'.
[  780.890064][T16859] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3247'.
[  780.899456][T16859] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3247'.
[  780.913719][T12618] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  781.089653][T12618] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  781.123471][T12618] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  781.151198][T12618] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  781.159660][T16865] fuse: fd is not a fuse device
[  781.189871][T12618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  781.214815][T12618] usb 2-1: SerialNumber: syz
[  781.255808][T16867] netlink: 'syz.3.3250': attribute type 10 has an invalid length.
[  781.471355][T12618] usb 2-1: 0:2 : does not exist
[  781.611912][T12618] usb 2-1: USB disconnect, device number 38
[  781.679685][T10940] udevd[10940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  781.865430][T16881] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3255'.
[  782.184484][T16878] batman_adv: batadv0: Interface deactivated: ipvlan2
[  782.326437][T16878] vlan3: left allmulticast mode
[  782.337648][T16878] bond5: left allmulticast mode
[  782.399799][   T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  782.421430][   T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  782.450082][   T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  782.464043][   T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  782.604092][ T6170] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  782.763555][ T6170] usb 4-1: Using ep0 maxpacket: 16
[  782.771047][ T6170] usb 4-1: config 8 has an invalid interface number: 39 but max is 0
[  782.786661][ T6170] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  782.797450][ T6170] usb 4-1: config 8 has no interface number 0
[  782.803376][T12611] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  782.805873][ T6170] usb 4-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  782.829105][ T6170] usb 4-1: config 8 interface 39 has no altsetting 0
[  782.839492][ T6170] usb 4-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77
[  782.850140][ T6170] usb 4-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3
[  782.859163][ T6170] usb 4-1: Product: syz
[  782.865672][ T6170] usb 4-1: Manufacturer: syz
[  782.870929][ T6170] usb 4-1: SerialNumber: syz
[  782.963089][T12611] usb 2-1: Using ep0 maxpacket: 16
[  782.977729][T12611] usb 2-1: unable to get BOS descriptor or descriptor too short
[  782.998029][T12611] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34
[  783.009025][T12611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.017675][T12611] usb 2-1: Product: syz
[  783.023553][T12611] usb 2-1: Manufacturer: syz
[  783.028369][T12611] usb 2-1: SerialNumber: syz
[  783.148745][T16907] fuse: fd is not a fuse device
[  783.412745][T16914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.430982][T16914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.488807][T16916] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3267'.
[  783.527555][T16914] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  783.617394][T16920] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3268'.
[  785.079668][ T6170] ipheth 4-1:8.39: Unable to find endpoints
[  785.104434][ T6170] usb 4-1: USB disconnect, device number 63
[  785.586076][ T6170] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  785.676085][T12611] usb 2-1: USB disconnect, device number 39
[  785.786524][ T6170] usb 4-1: Using ep0 maxpacket: 32
[  785.804913][ T6170] usb 4-1: config index 0 descriptor too short (expected 164, got 36)
[  785.826170][ T6170] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  785.856604][ T6170] usb 4-1: config 0 has no interfaces?
[  785.869694][T16945] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  785.882780][ T6170] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  785.907613][ T6170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.956483][ T6170] usb 4-1: config 0 descriptor??
[  786.166431][T16947] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3279'.
[  786.217429][ T6170] usb 4-1: USB disconnect, device number 64
[  786.519508][T16951] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3281'.
[  786.955702][T16955] loop5: detected capacity change from 0 to 7
[  786.986315][T16955] Dev loop5: unable to read RDB block 7
[  787.016549][T16955]  loop5: unable to read partition table
[  787.048296][T16955] loop5: partition table beyond EOD, truncated
[  787.086790][T16955] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  787.239562][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  787.239583][   T30] audit: type=1326 audit(1783712577.185:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.7.3288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  787.328707][   T30] audit: type=1326 audit(1783712577.225:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.7.3288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  787.417141][T16975] input: syz1 as /devices/virtual/input/input52
[  787.460094][   T30] audit: type=1326 audit(1783712577.235:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.7.3288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  787.543572][   T30] audit: type=1326 audit(1783712577.235:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.7.3288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  787.593745][   T30] audit: type=1326 audit(1783712577.235:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.7.3288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  787.664794][   T30] audit: type=1326 audit(1783712577.305:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.7.3288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  787.732780][   T30] audit: type=1326 audit(1783712577.305:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.7.3288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fadcb79dbc2 code=0x7ffc0000
[  787.792748][   T30] audit: type=1326 audit(1783712577.305:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.7.3288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fadcb79dc57 code=0x7ffc0000
[  787.850217][   T30] audit: type=1326 audit(1783712577.305:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.7.3288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fadcb75ab51 code=0x7ffc0000
[  787.903243][   T30] audit: type=1326 audit(1783712577.305:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.7.3288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fadcb79ec49 code=0x7ffc0000
[  788.362729][T12611] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  788.534734][T12611] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  788.547719][T12611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.567504][T12611] usb 2-1: Product: syz
[  788.572088][T12611] usb 2-1: Manufacturer: syz
[  788.578600][T12611] usb 2-1: SerialNumber: syz
[  788.591812][T12611] usb 2-1: config 0 descriptor??
[  788.844528][T16985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3295'.
[  788.923641][ T6142] usb 2-1: USB disconnect, device number 40
[  789.302977][T17006] netlink: 'syz.3.3299': attribute type 10 has an invalid length.
[  789.730587][T17013] netlink: 'syz.1.3301': attribute type 1 has an invalid length.
[  789.983463][ T6142] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  790.153731][ T6142] usb 2-1: Using ep0 maxpacket: 32
[  790.174737][ T6142] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  790.195634][ T6142] usb 2-1: config 0 has no interface number 0
[  790.219935][ T6142] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  790.254220][ T6142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  790.280862][ T6142] usb 2-1: Product: syz
[  790.318968][ T6142] usb 2-1: Manufacturer: syz
[  790.349445][ T6142] usb 2-1: SerialNumber: syz
[  790.405714][ T6142] usb 2-1: config 0 descriptor??
[  790.439670][ T6142] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  790.593059][T17028] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  790.670882][ T6142] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  790.734404][ T6142] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  790.760942][T17032] loop2: detected capacity change from 0 to 7
[  790.804943][T17032] Dev loop2: unable to read RDB block 7
[  790.820102][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3311'.
[  790.830226][T17032]  loop2: unable to read partition table
[  790.836860][T17032] loop2: partition table beyond EOD, truncated
[  790.846745][T17032] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  791.413734][T17053] xt_hashlimit: size too large, truncated to 1048576
[  792.048831][T17065] input: syz1 as /devices/virtual/input/input53
[  792.531891][T17068] syzkaller0: entered promiscuous mode
[  792.538020][T17068] syzkaller0: entered allmulticast mode
[  792.551352][T17068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  792.560768][T17067] tipc: Resetting bearer <eth:syzkaller0>
[  792.594976][T17067] tipc: Disabling bearer <eth:syzkaller0>
[  792.684871][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  792.687133][T12611] usb 2-1: USB disconnect, device number 41
[  792.725268][T12611] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  792.757812][T12611] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  792.787963][T12611] quatech2 2-1:0.51: device disconnected
[  792.930278][T17076] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3325'.
[  792.954011][T17076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3325'.
[  793.055516][T17078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3325'.
[  793.072886][T12612] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  793.178842][T17080] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3326'.
[  793.234588][T12612] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  793.256538][T12612] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  793.277916][T17082] binder: 17081:17082 ioctl c00c620f 200000000040 returned -22
[  793.286282][T12612] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  793.303888][T12612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  793.315937][T17084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  793.328685][T17072] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  793.341725][T17084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  793.361368][T12612] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  793.386180][T17084] binder: 17083:17084 ioctl c0306201 200000000000 returned -14
[  793.583567][T17090] FAULT_INJECTION: forcing a failure.
[  793.583567][T17090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  793.622633][T17090] CPU: 1 UID: 0 PID: 17090 Comm: syz.7.3331 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  793.622669][T17090] Tainted: [L]=SOFTLOCKUP
[  793.622678][T17090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  793.622693][T17090] Call Trace:
[  793.622702][T17090]  <TASK>
[  793.622712][T17090]  dump_stack_lvl+0xe8/0x150
[  793.622751][T17090]  should_fail_ex+0x40c/0x560
[  793.622783][T17090]  _copy_from_user+0x2d/0xb0
[  793.622816][T17090]  ___sys_sendmsg+0x1c6/0x360
[  793.622850][T17090]  ? __lock_acquire+0x683/0x2cf0
[  793.622886][T17090]  ? __pfx____sys_sendmsg+0x10/0x10
[  793.622956][T17090]  ? __fget_files+0x2a/0x420
[  793.622984][T17090]  ? __fget_files+0x3a2/0x420
[  793.623022][T17090]  __x64_sys_sendmsg+0x1b1/0x290
[  793.623058][T17090]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  793.623118][T17090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.623142][T17090]  do_syscall_64+0x174/0x580
[  793.623172][T17090]  ? trace_irq_disable+0x3b/0x140
[  793.623199][T17090]  ? clear_bhb_loop+0x40/0x90
[  793.623226][T17090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.623248][T17090] RIP: 0033:0x7fadcb79de59
[  793.623268][T17090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  793.623287][T17090] RSP: 002b:00007fadcc5c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  793.623311][T17090] RAX: ffffffffffffffda RBX: 00007fadcba25fa0 RCX: 00007fadcb79de59
[  793.623327][T17090] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  793.623341][T17090] RBP: 00007fadcc5c6090 R08: 0000000000000000 R09: 0000000000000000
[  793.623355][T17090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  793.623368][T17090] R13: 00007fadcba26038 R14: 00007fadcba25fa0 R15: 00007fadcbb4fa48
[  793.623402][T17090]  </TASK>
[  793.927427][T13623] bond2: left allmulticast mode
[  793.933344][T13623] bond2: left promiscuous mode
[  793.947665][T13623] bridge0: port 2(bond2) entered disabled state
[  793.960194][T13623] vlan2: left promiscuous mode
[  793.970819][T13623] bridge_slave_0: left promiscuous mode
[  793.986395][T13623] vlan2: left allmulticast mode
[  793.997372][T13623] bridge_slave_0: left allmulticast mode
[  794.013237][T17091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  794.023217][T17091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  794.035912][T13623] bridge0: port 1(vlan2) entered disabled state
[  794.098632][T13623] pimreg: left allmulticast mode
[  795.083693][T13623] bond0 (unregistering): Released all slaves
[  795.118722][T13623] bond1 (unregistering): (slave macvlan1): Releasing active interface
[  795.129598][T13623] bond1 (unregistering): Released all slaves
[  795.176866][T13623] bond2 (unregistering): Released all slaves
[  795.226011][ T6142] usb 4-1: USB disconnect, device number 65
[  795.250442][T17114] syzkaller0: entered promiscuous mode
[  795.263427][T17114] syzkaller0: entered allmulticast mode
[  795.283706][T17116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  795.312107][T17107] tipc: Resetting bearer <eth:syzkaller0>
[  795.436291][T17107] tipc: Disabling bearer <eth:syzkaller0>
[  795.586143][T13623] tipc: Left network mode
[  795.804101][T17123] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3338'.
[  796.118748][T17137] FAULT_INJECTION: forcing a failure.
[  796.118748][T17137] name failslab, interval 1, probability 0, space 0, times 0
[  796.139518][T17137] CPU: 1 UID: 0 PID: 17137 Comm: syz.7.3342 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  796.139555][T17137] Tainted: [L]=SOFTLOCKUP
[  796.139564][T17137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  796.139577][T17137] Call Trace:
[  796.139586][T17137]  <TASK>
[  796.139596][T17137]  dump_stack_lvl+0xe8/0x150
[  796.139634][T17137]  should_fail_ex+0x40c/0x560
[  796.139664][T17137]  should_failslab+0xa8/0x100
[  796.139697][T17137]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  796.139724][T17137]  ? local_lock_release+0x9c/0x160
[  796.139755][T17137]  ? __alloc_skb+0x1d7/0x7a0
[  796.139781][T17137]  ? __alloc_skb+0x1d7/0x7a0
[  796.139827][T17137]  __alloc_skb+0x1d7/0x7a0
[  796.139862][T17137]  pfkey_sendmsg+0x20c/0x11d0
[  796.139987][T17137]  ? unwind_next_frame+0x8f/0x2550
[  796.140022][T17137]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  796.140059][T17137]  ? aa_sk_perm+0x6d5/0x900
[  796.140102][T17137]  ? __pfx_aa_sk_perm+0x10/0x10
[  796.140139][T17137]  ? aa_sock_msg_perm+0xf1/0x1b0
[  796.140167][T17137]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  796.140194][T17137]  sock_sendmsg_nosec+0x13a/0x180
[  796.140223][T17137]  ____sys_sendmsg+0x54e/0x850
[  796.140262][T17137]  ? __pfx_____sys_sendmsg+0x10/0x10
[  796.140304][T17137]  ? import_iovec+0x73/0xa0
[  796.140343][T17137]  ___sys_sendmsg+0x2a5/0x360
[  796.140374][T17137]  ? __lock_acquire+0x683/0x2cf0
[  796.140407][T17137]  ? __pfx____sys_sendmsg+0x10/0x10
[  796.140472][T17137]  ? __fget_files+0x2a/0x420
[  796.140517][T17137]  ? __fget_files+0x3a2/0x420
[  796.140555][T17137]  __x64_sys_sendmsg+0x1b1/0x290
[  796.140592][T17137]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  796.140641][T17137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.140665][T17137]  do_syscall_64+0x174/0x580
[  796.140696][T17137]  ? trace_irq_disable+0x3b/0x140
[  796.140725][T17137]  ? clear_bhb_loop+0x40/0x90
[  796.140751][T17137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.140772][T17137] RIP: 0033:0x7fadcb79de59
[  796.140793][T17137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  796.140821][T17137] RSP: 002b:00007fadcc5c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  796.140845][T17137] RAX: ffffffffffffffda RBX: 00007fadcba25fa0 RCX: 00007fadcb79de59
[  796.140862][T17137] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  796.140877][T17137] RBP: 00007fadcc5c6090 R08: 0000000000000000 R09: 0000000000000000
[  796.140890][T17137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  796.140904][T17137] R13: 00007fadcba26038 R14: 00007fadcba25fa0 R15: 00007fadcbb4fa48
[  796.140940][T17137]  </TASK>
[  796.604274][T17140] loop2: detected capacity change from 0 to 7
[  796.613366][T17140] Dev loop2: unable to read RDB block 7
[  796.619268][T17140]  loop2: unable to read partition table
[  796.626063][T17140] loop2: partition table beyond EOD, truncated
[  796.632487][T17140] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  796.683583][T17142] syzkaller0: entered promiscuous mode
[  796.721727][T17142] syzkaller0: entered allmulticast mode
[  796.737766][T17146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  796.751548][T17146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  797.002489][T13623] hsr_slave_0: left promiscuous mode
[  797.026238][T13623] hsr_slave_1: left promiscuous mode
[  797.379937][T17164] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3350'.
[  798.826891][T17180] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  798.840970][T17180] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  798.912029][T17184] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  799.554130][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3359'.
[  800.106997][T17205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  800.138807][T17205] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  800.309195][T17207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  800.335960][T17207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  800.837729][T17224] loop2: detected capacity change from 0 to 7
[  800.847206][T17224] Dev loop2: unable to read RDB block 7
[  800.854034][T17224]  loop2: unable to read partition table
[  800.860484][T17224] loop2: partition table beyond EOD, truncated
[  800.875781][T17224] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  801.512794][T12612] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  801.592067][T17241] syz.5.3372 (17241) used obsolete PPPIOCDETACH ioctl
[  801.702731][T12612] usb 4-1: Using ep0 maxpacket: 32
[  801.711640][T12612] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  801.747234][T12612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.763817][T12612] usb 4-1: config 0 descriptor??
[  801.977907][T12612] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  802.000247][T12612] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  802.019014][T12612] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  802.029411][T12612] usb 4-1: media controller created
[  802.082721][T12612] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  802.569197][T17253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  802.584608][T17253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  802.822120][T17261] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  803.021417][T17266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  803.031939][T17266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  803.046297][T17266] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3379'.
[  803.343000][ T5363] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  803.512741][ T5363] usb 2-1: Using ep0 maxpacket: 8
[  803.521055][ T5363] usb 2-1: config 0 has no interfaces?
[  803.532330][ T5363] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  803.542136][ T5363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.550992][ T5363] usb 2-1: Product: syz
[  803.557220][ T5363] usb 2-1: Manufacturer: syz
[  803.561955][ T5363] usb 2-1: SerialNumber: syz
[  803.574196][ T5363] usb 2-1: config 0 descriptor??
[  803.660146][T17276] xt_hashlimit: size too large, truncated to 1048576
[  804.233522][T12612] az6027: usb out operation failed. (-110)
[  804.247851][T12612] az6027: usb out operation failed. (-32)
[  804.270152][T12612] stb0899_attach: Driver disabled by Kconfig
[  804.282441][T12612] az6027: no front-end attached
[  804.282441][T12612] 
[  804.294066][T12612] az6027: usb out operation failed. (-32)
[  804.300038][T12612] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  804.327107][T12612] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54
[  804.381033][T12612] dvb-usb: schedule remote query interval to 400 msecs.
[  804.402894][T12612] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  804.483985][T17290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  804.497544][T17290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  804.809175][T17295] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  805.118111][T12612] usb 6-1: USB disconnect, device number 67
[  805.230880][T13047] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  805.249555][T13047] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  805.259746][T13047] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  805.271137][T13047] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  805.280809][T13047] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  805.587497][T14838] syz_tun (unregistering): left allmulticast mode
[  805.810267][T12611] usb 2-1: USB disconnect, device number 42
[  805.926454][T17312] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.934624][T17312] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.050279][T17312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  806.073952][T17312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  806.232514][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  806.251396][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  806.263128][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  806.272649][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  806.471909][T17301] bridge0: port 1(bridge_slave_0) entered blocking state
[  806.481075][T17301] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.489985][T17301] bridge_slave_0: entered allmulticast mode
[  806.503751][T17301] bridge_slave_0: entered promiscuous mode
[  806.519631][T17301] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.538198][T17301] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.554042][T17301] bridge_slave_1: entered allmulticast mode
[  806.562109][T17301] bridge_slave_1: entered promiscuous mode
[  806.671938][T17301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  806.691284][T17301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  806.884994][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  806.885016][   T30] audit: type=1326 audit(1783712596.835:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.6.3400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  806.997359][   T30] audit: type=1326 audit(1783712596.865:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.6.3400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  807.023820][T17301] team0: Port device team_slave_0 added
[  807.066273][T17301] team0: Port device team_slave_1 added
[  807.153461][T17341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  807.181698][   T30] audit: type=1326 audit(1783712596.875:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.6.3400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  807.234478][T17341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  807.300746][   T30] audit: type=1326 audit(1783712596.875:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.6.3400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  807.342898][ T5637] Bluetooth: hci3: command tx timeout
[  807.388183][   T30] audit: type=1326 audit(1783712596.875:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.6.3400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  807.507550][T17301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  807.516006][   T30] audit: type=1326 audit(1783712596.925:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.6.3400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  807.545172][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.615033][T17301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  807.651371][T17301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  807.657866][   T30] audit: type=1326 audit(1783712596.925:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.6.3400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f706b19dbc2 code=0x7ffc0000
[  807.659548][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.717039][T17301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  807.773255][   T30] audit: type=1326 audit(1783712596.925:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.6.3400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f706b19dc57 code=0x7ffc0000
[  807.799631][   T30] audit: type=1326 audit(1783712596.925:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.6.3400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f706b15ab51 code=0x7ffc0000
[  807.826765][   T30] audit: type=1326 audit(1783712596.925:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.6.3400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f706b19ec49 code=0x7ffc0000
[  807.892684][ T6328] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  807.958685][T17301] hsr_slave_0: entered promiscuous mode
[  807.974381][T17301] hsr_slave_1: entered promiscuous mode
[  808.083558][ T6328] usb 2-1: Using ep0 maxpacket: 16
[  808.094920][ T6328] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11
[  808.140953][ T6328] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  808.181575][T17348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  808.203595][T17348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  808.224644][ T6328] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  808.272798][ T6328] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  808.291141][ T6328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.329262][ T6328] usb 2-1: Product: syz
[  808.352692][ T6328] usb 2-1: Manufacturer: syz
[  808.377165][ T6328] usb 2-1: SerialNumber: syz
[  809.030510][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  809.038368][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  809.146957][T17360] netlink: 'syz.7.3406': attribute type 10 has an invalid length.
[  809.434893][ T5637] Bluetooth: hci3: command tx timeout
[  809.465253][T17366] netlink: 'syz.7.3409': attribute type 1 has an invalid length.
[  809.562275][ T6328] cdc_ncm 2-1:1.0: bind() failure
[  809.619691][ T6328] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  809.643627][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3409'.
[  809.665175][ T6328] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  809.685485][ T6328] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  809.724373][ T6328] usb 2-1: USB disconnect, device number 43
[  809.797523][T17366] 8021q: adding VLAN 0 to HW filter on device bond1
[  809.836514][T17366] bond1: (slave gretap1): making interface the new active one
[  809.848700][T17366] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  809.907959][T17301] vlan0 (unregistering): left allmulticast mode
[  809.915006][T17301] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode
[  809.925208][T17301] vlan0 (unregistering): left promiscuous mode
[  809.934547][T17301] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode
[  809.947169][T17301] bridge0: port 1(vlan0) entered disabled state
[  810.193852][T17301] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  810.210443][T17301] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  810.219612][T17301] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  810.231303][T17301] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  810.240564][T17301] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  810.253475][T17301] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  810.264926][T17301] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  810.292299][T17301] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  810.559220][T17301] 8021q: adding VLAN 0 to HW filter on device bond0
[  810.621931][T17301] 8021q: adding VLAN 0 to HW filter on device team0
[  810.644190][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  810.651460][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  810.688227][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  810.695577][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  810.768312][T17389] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3414'.
[  810.814998][T17389] ip6gre2: entered promiscuous mode
[  810.831663][T17389] ip6gre2: entered allmulticast mode
[  810.990826][T17301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  811.110720][T17301] veth0_vlan: entered promiscuous mode
[  811.142585][T17301] veth1_vlan: entered promiscuous mode
[  811.237959][T17301] veth0_macvtap: entered promiscuous mode
[  811.256275][T17301] veth1_macvtap: entered promiscuous mode
[  811.306550][T17301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  811.336405][T17301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  811.376755][  T157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  811.401998][  T157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  811.430483][  T157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  811.453781][  T157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  811.503548][ T5637] Bluetooth: hci3: command tx timeout
[  811.925486][T13625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  811.945016][T13625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  812.071782][T13625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  812.081786][T13625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  812.378912][T17402] netlink: 'syz.1.3417': attribute type 10 has an invalid length.
[  812.549316][T17406] syzkaller0: entered promiscuous mode
[  812.568711][T17406] syzkaller0: entered allmulticast mode
[  812.596107][T17406] tipc: Started in network mode
[  812.614184][T17406] tipc: Node identity 7eeae2673674, cluster identity 4711
[  812.666024][T17406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  812.697990][T17405] tipc: Resetting bearer <eth:syzkaller0>
[  812.776459][T17405] tipc: Disabling bearer <eth:syzkaller0>
[  812.839612][   T30] kauditd_printk_skb: 54 callbacks suppressed
[  812.839634][   T30] audit: type=1326 audit(1783712602.785:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.5.3391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79419de59 code=0x7ffc0000
[  812.884834][   T30] audit: type=1326 audit(1783712602.815:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.5.3391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79419de59 code=0x7ffc0000
[  812.970257][   T30] audit: type=1326 audit(1783712602.825:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.5.3391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff794197bd7 code=0x7ffc0000
[  813.003144][   T30] audit: type=1326 audit(1783712602.825:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.5.3391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff79413f1d9 code=0x7ffc0000
[  813.033063][   T30] audit: type=1326 audit(1783712602.825:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.5.3391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79419de59 code=0x7ffc0000
[  813.072135][   T30] audit: type=1326 audit(1783712602.825:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.5.3391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79419de59 code=0x7ffc0000
[  813.162251][   T30] audit: type=1326 audit(1783712602.825:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.5.3391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79419de59 code=0x7ffc0000
[  813.197366][T17414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3420'.
[  813.222159][T17414] netlink: 'syz.1.3420': attribute type 7 has an invalid length.
[  813.247361][   T30] audit: type=1326 audit(1783712602.825:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.5.3391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff794197bd7 code=0x7ffc0000
[  813.279579][T17414] netlink: 'syz.1.3420': attribute type 8 has an invalid length.
[  813.282276][   T30] audit: type=1326 audit(1783712602.825:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.5.3391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff79413f1d9 code=0x7ffc0000
[  813.316773][   T30] audit: type=1326 audit(1783712602.825:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.5.3391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79419de59 code=0x7ffc0000
[  813.347170][T17416] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3420'.
[  813.361750][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3420'.
[  813.389548][T17414] ip6gretap0: entered promiscuous mode
[  813.398744][T17414] syz_tun: entered promiscuous mode
[  813.467495][T17414] erspan0: entered promiscuous mode
[  813.516938][T17414] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  813.545904][T17400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  813.565910][T17414] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  813.586416][ T5637] Bluetooth: hci3: command tx timeout
[  813.605937][T17414] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[  813.840807][T17424] loop2: detected capacity change from 0 to 7
[  813.861792][T17424] Dev loop2: unable to read RDB block 7
[  813.872683][T17424]  loop2: unable to read partition table
[  813.882064][T17424] loop2: partition table beyond EOD, truncated
[  813.892150][T17424] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  814.012124][T17427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3425'.
[  814.070944][T17427] netlink: 'syz.1.3425': attribute type 7 has an invalid length.
[  814.112799][T17427] netlink: 'syz.1.3425': attribute type 8 has an invalid length.
[  814.138246][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3425'.
[  814.213778][T17432] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3425'.
[  814.329988][T17438] ip6gre2: left promiscuous mode
[  814.386975][T17438] ip6gre2: left allmulticast mode
[  815.464909][T12606] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  815.644187][T12606] usb 2-1: unable to get BOS descriptor or descriptor too short
[  815.683112][T12606] usb 2-1: not running at top speed; connect to a high speed hub
[  815.714271][T12606] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  815.747782][T12606] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  815.791450][T12606] usb 2-1: New USB device found, idVendor=1235, idProduct=8207, bcdDevice= 0.40
[  815.836732][T12606] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  815.876602][T12606] usb 2-1: Product: syz
[  815.888201][T17467] loop2: detected capacity change from 0 to 7
[  815.890496][T12606] usb 2-1: Manufacturer: syz
[  815.915882][T17467] Dev loop2: unable to read RDB block 7
[  815.931545][T12606] usb 2-1: SerialNumber: syz
[  815.932067][T17467]  loop2: unable to read partition table
[  815.963133][T17467] loop2: partition table beyond EOD, truncated
[  815.982049][T17467] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  816.941643][T12606] usb 2-1: USB disconnect, device number 44
[  817.155255][T10940] udevd[10940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  818.433928][T17492] fuse: fd is not a fuse device
[  818.478302][T17496] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3444'.
[  819.437678][T17513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3450'.
[  819.489538][T17513] netlink: 'syz.1.3450': attribute type 7 has an invalid length.
[  819.538394][T17516] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3450'.
[  819.554379][T17513] netlink: 'syz.1.3450': attribute type 8 has an invalid length.
[  819.594667][T17513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'.
[  820.058687][T17529] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3453'.
[  820.467701][ T6160] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  820.673915][ T6160] usb 2-1: Using ep0 maxpacket: 32
[  820.699437][T17534] netlink: 328 bytes leftover after parsing attributes in process `syz.3.3455'.
[  820.727397][ T6160] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  820.752220][ T5637] Bluetooth: hci5: Malformed LE Event: 0x0d
[  820.766877][ T6160] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  820.793737][ T6160] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  820.821450][ T6160] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  820.861519][ T6160] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  820.892703][ T6160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.916062][ T6160] usb 2-1: Product: syz
[  820.929155][ T6160] usb 2-1: Manufacturer: syz
[  820.943612][ T6160] usb 2-1: SerialNumber: syz
[  820.975794][    C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  821.007084][ T6160] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input55
[  821.198204][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3457'.
[  821.212729][ T6160] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  821.246826][ T6160]  (id 0x00)
[  821.441353][T17541] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3457'.
[  821.544001][   T30] kauditd_printk_skb: 218 callbacks suppressed
[  821.544022][   T30] audit: type=1326 audit(1783712611.495:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.6.3458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  821.575923][ T6160] rc_core: IR keymap rc-imon-pad not found
[  821.582504][ T6160] Registered IR keymap rc-empty
[  821.591639][ T6160] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  821.613162][ T6160] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  821.623880][   T30] audit: type=1326 audit(1783712611.525:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.6.3458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  821.661420][   T30] audit: type=1326 audit(1783712611.535:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.6.3458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  821.687999][   T30] audit: type=1326 audit(1783712611.535:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.6.3458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  821.713649][   T30] audit: type=1326 audit(1783712611.535:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.6.3458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  821.739280][   T30] audit: type=1326 audit(1783712611.535:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.6.3458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  821.906466][   T30] audit: type=1326 audit(1783712611.535:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.6.3458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  822.018151][   T30] audit: type=1326 audit(1783712611.535:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.6.3458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  822.080747][   T30] audit: type=1326 audit(1783712611.555:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.6.3458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  822.138844][   T30] audit: type=1326 audit(1783712611.555:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.6.3458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  822.266143][ T6170] IPVS: starting estimator thread 0...
[  822.288031][T17554] IPVS: ip_vs_add_dest(): server weight less than zero
[  822.327607][T17554] IPVS: ip_vs_add_dest(): server weight less than zero
[  822.358451][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.378360][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.397608][T17555] IPVS: using max 26 ests per chain, 62400 per kthread
[  822.405536][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.430242][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.440781][T17557] netlink: 'syz.7.3463': attribute type 10 has an invalid length.
[  822.460308][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.481222][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.499367][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.518134][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.534570][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.542092][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.560553][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.573552][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.581495][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.611862][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.621179][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.629619][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.637779][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.646065][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.654545][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.662993][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.670010][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.681573][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.688983][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.698223][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.725315][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.741161][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.757702][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.772624][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.792700][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.811308][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  822.823535][T17554] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:0
[  823.036498][ T6160] imon:send_packet: packet tx failed (-71)
[  823.062780][ T6160] imon 2-1:155.0: remote input dev register failed
[  823.069601][ T6160] imon 2-1:155.0: imon_init_intf0: rc device setup failed
[  823.265713][ T6160] imon 2-1:155.0: unable to initialize intf0, err 0
[  823.273136][ T6160] imon:imon_probe: failed to initialize context!
[  823.281424][ T6160] imon 2-1:155.0: unable to register, err -19
[  823.302067][ T6160] usb 2-1: USB disconnect, device number 45
[  823.421540][T17566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  823.432205][T17566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  823.633796][ T6160] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  823.823130][ T6160] usb 2-1: Using ep0 maxpacket: 8
[  823.835976][ T6160] usb 2-1: unable to get BOS descriptor or descriptor too short
[  823.854227][ T6160] usb 2-1: config 4 interface 0 has no altsetting 0
[  823.874540][ T6160] usb 2-1: string descriptor 0 read error: -22
[  823.887974][ T6160] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  823.907959][ T6160] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  823.946165][ T6160] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  823.997172][ T6160] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  824.026298][ T6160] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  824.043599][ T6160] usb 2-1: media controller created
[  824.088171][ T6160] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  824.180496][ T6160] zl10353_read_register: readreg error (reg=127, ret==0)
[  824.288330][ T6160] usb 2-1: USB disconnect, device number 46
[  825.161253][T17602] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3477'.
[  825.231681][T17605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  825.246666][T17605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  825.902381][T17623] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3485'.
[  826.196063][T17628] loop2: detected capacity change from 0 to 7
[  826.246366][T17628] Dev loop2: unable to read RDB block 7
[  826.294531][T17628]  loop2: unable to read partition table
[  826.332794][T17628] loop2: partition table beyond EOD, truncated
[  826.370276][T17628] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  826.737019][T17640] syzkaller0: entered promiscuous mode
[  826.781271][T17640] syzkaller0: entered allmulticast mode
[  826.800127][T17644] sg_write: data in/out 224704/136 bytes for SCSI command 0x0-- guessing data in;
[  826.800127][T17644]    program syz.7.3493 not setting count and/or reply_len properly
[  826.870086][T17642] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3492'.
[  826.905816][T17645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  826.922161][T17639] tipc: Resetting bearer <eth:syzkaller0>
[  827.024661][T17639] tipc: Disabling bearer <eth:syzkaller0>
[  827.336706][T17654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  827.372304][T17654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  827.660832][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3497'.
[  827.937598][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3500'.
[  827.946963][T17668] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3500'.
[  827.959736][T17668] vlan1: entered allmulticast mode
[  827.966156][T17668] veth0_vlan: entered allmulticast mode
[  828.273663][T17675] netlink: 'syz.6.3503': attribute type 12 has an invalid length.
[  829.537627][T17701] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3511'.
[  831.441997][T17719] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  833.750122][T17750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3527'.
[  833.760777][T17750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3527'.
[  833.786028][T17750] bridge0: entered promiscuous mode
[  833.795557][T17750] bridge0: left promiscuous mode
[  833.816922][T17751] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3527'.
[  834.307764][T17763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3532'.
[  834.328809][T17763] team0: Port device bridge0 added
[  834.490135][T17767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3534'.
[  834.501100][T17767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3534'.
[  834.573893][T17771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  834.589813][T17771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.708246][T17779] loop5: detected capacity change from 0 to 7
[  834.718574][T17779] Dev loop5: unable to read RDB block 7
[  834.724673][T17779]  loop5: unable to read partition table
[  834.731392][T17779] loop5: partition table beyond EOD, truncated
[  834.738218][T17779] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  834.812433][T17781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3538'.
[  834.821902][T17781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3538'.
[  834.843734][T17781] bridge0: entered promiscuous mode
[  834.858171][T17781] bridge0: left promiscuous mode
[  834.893926][T12603] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  834.928262][T17782] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3538'.
[  835.067917][T12603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  835.078362][T12603] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  835.088972][T12603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  835.099516][T12603] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  835.117162][T12603] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  835.127045][T12603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.139530][T12603] usb 2-1: config 0 descriptor??
[  835.193336][T17794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  835.202412][T17794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  835.481617][T12603] hdpvr 2-1:0.0: unexpected answer of status request, len -32
[  835.493304][T17797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  835.504369][T12603] hdpvr 2-1:0.0: device init failed
[  835.553945][T17797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  835.557958][T12603] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  835.649562][T17801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  835.669352][T17801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  835.925173][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3547'.
[  835.936045][T17807] team0: Cannot enslave team device to itself
[  835.970196][T17807] batman_adv: batadv0: Removing interface: batadv_slave_0
[  835.979590][T17807] batman_adv: batadv0: Removing interface: batadv_slave_1
[  836.166545][T17818] netlink: 'syz.6.3548': attribute type 6 has an invalid length.
[  836.195243][T17818] netlink: 'syz.6.3548': attribute type 5 has an invalid length.
[  836.574472][T17824] bridge0: entered promiscuous mode
[  836.602216][T17824] ip6gretap0: entered promiscuous mode
[  836.628512][T17824] debugfs: 'hsr1' already exists in 'hsr'
[  836.644355][T17824] Cannot create hsr debugfs directory
[  838.537934][T12603] usb 2-1: USB disconnect, device number 47
[  838.732137][T17856] bridge0: entered promiscuous mode
[  838.739692][T17856] bridge0: left promiscuous mode
[  838.776563][T17857] __nla_validate_parse: 8 callbacks suppressed
[  838.776580][T17857] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3561'.
[  838.997857][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3560'.
[  839.037585][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  839.037623][   T30] audit: type=1800 audit(1783712628.985:1229): pid=17859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3562" name="nullb0" dev="devtmpfs" ino=3251 res=0 errno=0
[  839.806428][T17886] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3572'.
[  839.831749][T17886] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3572'.
[  839.867661][T17886] bridge0: entered promiscuous mode
[  839.894926][T17886] ip6gretap0: entered promiscuous mode
[  839.910858][T17886] debugfs: 'hsr1' already exists in 'hsr'
[  839.930464][T17886] Cannot create hsr debugfs directory
[  839.938113][T17895] FAULT_INJECTION: forcing a failure.
[  839.938113][T17895] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  839.953748][T17886] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  839.979077][T17886] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  839.979637][T17894] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3572'.
[  839.991969][T17895] CPU: 1 UID: 0 PID: 17895 Comm: syz.1.3575 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  839.992057][T17895] Tainted: [L]=SOFTLOCKUP
[  839.992080][T17895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  839.992119][T17895] Call Trace:
[  839.992143][T17895]  <TASK>
[  839.992173][T17895]  dump_stack_lvl+0xe8/0x150
[  839.992308][T17895]  should_fail_ex+0x40c/0x560
[  839.992395][T17895]  _copy_to_user+0x31/0xb0
[  839.992490][T17895]  simple_read_from_buffer+0xe1/0x170
[  839.992589][T17895]  proc_fail_nth_read+0x1bb/0x230
[  839.992692][T17895]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  839.992819][T17895]  ? rw_verify_area+0x24a/0x4c0
[  839.992913][T17895]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  839.992988][T17895]  vfs_read+0x213/0xa80
[  839.993086][T17895]  ? __pfx___mutex_lock+0x10/0x10
[  839.993182][T17895]  ? __pfx_vfs_read+0x10/0x10
[  839.993269][T17895]  ? __fget_files+0x2a/0x420
[  839.993355][T17895]  ? __fget_files+0x3a2/0x420
[  839.993429][T17895]  ? __fget_files+0x2a/0x420
[  839.993526][T17895]  ksys_read+0x150/0x270
[  839.993623][T17895]  ? __pfx_ksys_read+0x10/0x10
[  839.993729][T17895]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  839.993794][T17895]  do_syscall_64+0x174/0x580
[  839.993878][T17895]  ? trace_irq_disable+0x3b/0x140
[  839.993958][T17895]  ? clear_bhb_loop+0x40/0x90
[  839.994024][T17895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  839.994092][T17895] RIP: 0033:0x7efc7755e68e
[  839.994166][T17895] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  839.994223][T17895] RSP: 002b:00007efc78520fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  839.994279][T17895] RAX: ffffffffffffffda RBX: 00007efc785216c0 RCX: 00007efc7755e68e
[  839.994322][T17895] RDX: 000000000000000f RSI: 00007efc785210a0 RDI: 0000000000000004
[  839.994363][T17895] RBP: 00007efc78521090 R08: 0000000000000000 R09: 0000000000000000
[  839.994404][T17895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  839.994435][T17895] R13: 00007efc77826038 R14: 00007efc77825fa0 R15: 00007efc7794fa48
[  839.994523][T17895]  </TASK>
[  840.429315][T17900] netlink: 'syz.1.3577': attribute type 10 has an invalid length.
[  841.675792][T17919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3585'.
[  841.693895][T17919] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3585'.
[  841.701586][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3583'.
[  841.878147][T17924] FAULT_INJECTION: forcing a failure.
[  841.878147][T17924] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  841.892059][T17924] CPU: 1 UID: 0 PID: 17924 Comm: syz.5.3587 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  841.892086][T17924] Tainted: [L]=SOFTLOCKUP
[  841.892092][T17924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  841.892102][T17924] Call Trace:
[  841.892110][T17924]  <TASK>
[  841.892118][T17924]  dump_stack_lvl+0xe8/0x150
[  841.892147][T17924]  should_fail_ex+0x40c/0x560
[  841.892169][T17924]  _copy_from_user+0x2d/0xb0
[  841.892194][T17924]  keyctl_dh_compute+0xd4/0x180
[  841.892296][T17924]  ? __pfx_keyctl_dh_compute+0x10/0x10
[  841.892326][T17924]  __se_sys_keyctl+0x44c/0x9d0
[  841.892379][T17924]  ? __pfx___se_sys_keyctl+0x10/0x10
[  841.892407][T17924]  ? __mutex_unlock_slowpath+0x731/0x900
[  841.892433][T17924]  ? __fget_files+0x2a/0x420
[  841.892455][T17924]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  841.892479][T17924]  ? __fget_files+0x3a2/0x420
[  841.892504][T17924]  ? fput+0xa0/0xd0
[  841.892561][T17924]  ? ksys_write+0x242/0x270
[  841.892595][T17924]  ? __pfx_ksys_write+0x10/0x10
[  841.892634][T17924]  ? __x64_sys_keyctl+0x20/0xc0
[  841.892664][T17924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.892688][T17924]  do_syscall_64+0x174/0x580
[  841.892717][T17924]  ? trace_irq_disable+0x3b/0x140
[  841.892744][T17924]  ? clear_bhb_loop+0x40/0x90
[  841.892771][T17924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.892793][T17924] RIP: 0033:0x7ff79419de59
[  841.892815][T17924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  841.892834][T17924] RSP: 002b:00007ff7950c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  841.892857][T17924] RAX: ffffffffffffffda RBX: 00007ff794425fa0 RCX: 00007ff79419de59
[  841.892874][T17924] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000017
[  841.892889][T17924] RBP: 00007ff7950c4090 R08: 0000200000000000 R09: 0000000000000000
[  841.892903][T17924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  841.892916][T17924] R13: 00007ff794426038 R14: 00007ff794425fa0 R15: 00007ff79454fa48
[  841.892950][T17924]  </TASK>
[  842.159929][T17927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3588'.
[  842.169254][T17927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3588'.
[  842.191740][T17927] bridge0: entered promiscuous mode
[  842.199134][T17927] bridge0: left promiscuous mode
[  842.450999][T17938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  842.460477][T17938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  843.136022][T17962] bridge0: entered promiscuous mode
[  843.147796][T17962] bridge0: left promiscuous mode
[  843.317501][T17970] binder: 17963:17970 ioctl 4018620d 0 returned -22
[  843.667734][T17967] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:4096x2160 (0x33424752, 8, 0, 0, 0)
[  844.280476][T17989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  844.313786][T17989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  844.349411][T17989] __nla_validate_parse: 5 callbacks suppressed
[  844.349432][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3607'.
[  844.943063][ T6170] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  845.118445][ T6170] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  845.128357][ T6170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.137095][ T6170] usb 2-1: Product: syz
[  845.141297][ T6170] usb 2-1: Manufacturer: syz
[  845.146852][ T6170] usb 2-1: SerialNumber: syz
[  845.155523][ T6170] usb 2-1: config 0 descriptor??
[  845.166080][ T6170] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  845.371136][T17994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  845.384486][T17994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  845.400536][T17998] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in;
[  845.400536][T17998]    program syz.3.3609 not setting count and/or reply_len properly
[  845.597733][T18002] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3611'.
[  845.607610][T18002] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3611'.
[  845.657866][T18003] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3611'.
[  845.803435][ T6170] gspca_sunplus: reg_r err -71
[  845.827297][ T6170] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  845.866180][ T6170] usb 2-1: USB disconnect, device number 48
[  846.248951][T18017] loop2: detected capacity change from 0 to 7
[  846.258367][T18017] Dev loop2: unable to read RDB block 7
[  846.264865][T18017]  loop2: unable to read partition table
[  846.270866][T18017] loop2: partition table beyond EOD, truncated
[  846.277711][T18017] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  846.458886][T18019] loop5: detected capacity change from 0 to 7
[  846.470308][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3618'.
[  846.510557][T18019] Dev loop5: unable to read RDB block 7
[  846.529788][T18024] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4
[  846.555760][T18019]  loop5: unable to read partition table
[  846.596185][T18019] loop5: partition table beyond EOD, truncated
[  846.635925][T18019] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  846.672468][T18022] ip6gretap0 (unregistering): left promiscuous mode
[  846.771894][T18023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3617'.
[  847.188626][T18033] fuse: fd is not a fuse device
[  847.227490][T18033] sg_write: data in/out 884800/136 bytes for SCSI command 0x9-- guessing data in;
[  847.227490][T18033]    program syz.1.3620 not setting count and/or reply_len properly
[  870.466281][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  870.473022][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  872.543227][T13047] Bluetooth: hci5: command 0x0406 tx timeout
[  898.142997][T13047] Bluetooth: hci4: command 0x0406 tx timeout
[  900.684717][T18041] netlink: 'syz.1.3622': attribute type 5 has an invalid length.
[  900.693442][T18041] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3622'.
[  900.958009][T18056] loop2: detected capacity change from 0 to 7
[  900.975765][T18056] Dev loop2: unable to read RDB block 7
[  901.000085][T18056]  loop2: unable to read partition table
[  901.023888][T18056] loop2: partition table beyond EOD, truncated
[  901.046298][T18056] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  901.122802][ T6160] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  901.312735][ T6160] usb 2-1: Using ep0 maxpacket: 8
[  901.325979][ T6160] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  901.335204][ T6160] usb 2-1: config 179 has no interface number 0
[  901.343120][ T6160] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  901.359566][ T6160] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  901.380139][ T6160] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  901.398324][ T6160] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  901.413567][ T6160] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  901.432275][ T6160] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  901.442913][ T6160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.461688][T18052] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  901.483689][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3631'.
[  901.700693][T18052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  901.713599][T18052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  901.738539][ T6160] usb 2-1: USB disconnect, device number 49
[  901.744709][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  901.744757][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  902.136712][T18077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  902.147513][T18077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  902.160826][T18077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  902.170902][T18077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  902.180980][T18077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  902.190545][T18077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  902.202201][T18077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  902.212265][T18077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  902.623015][T12606] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  902.798223][T12606] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  902.808291][T12606] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  902.817193][T12606] usb 2-1: Product: syz
[  902.821719][T12606] usb 2-1: Manufacturer: syz
[  902.826939][T12606] usb 2-1: SerialNumber: syz
[  902.846601][T12606] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  902.959596][T18087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  902.970924][T18087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  902.987077][T18087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  902.998363][T18087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  903.231370][T18090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  903.247415][T18081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  903.250023][T18090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  903.279904][T18081] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  903.311456][T12606] vp7045: USB control message 'in' went wrong.
[  903.332565][T12606] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  903.355940][T12606] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  903.400170][T12606] usb 2-1: USB disconnect, device number 50
[  903.401999][T18095] loop2: detected capacity change from 0 to 7
[  903.415132][T18095] Dev loop2: unable to read RDB block 7
[  903.420772][T18095]  loop2: unable to read partition table
[  903.431068][T18095] loop2: partition table beyond EOD, truncated
[  903.438336][T18095] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  903.861261][T18100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3643'.
[  904.066564][T18102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  904.075688][T18102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  904.290186][T18116] tipc: Started in network mode
[  904.296139][T18116] tipc: Node identity 5a85b6c7eba6, cluster identity 4711
[  904.305386][T18116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  904.314023][T18116] syzkaller0: entered promiscuous mode
[  904.320242][T18116] syzkaller0: entered allmulticast mode
[  904.338011][T18116] tipc: Resetting bearer <eth:syzkaller0>
[  904.353458][T18114] tipc: Resetting bearer <eth:syzkaller0>
[  904.412452][T18114] tipc: Disabling bearer <eth:syzkaller0>
[  904.846270][ T6170] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  904.967009][T18136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  904.977348][T18136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  904.991728][T18136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  905.004828][T18136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  905.025338][ T6170] usb 2-1: Using ep0 maxpacket: 32
[  905.035429][ T6170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  905.047428][ T6170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  905.059203][ T6170] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  905.070621][ T6170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.085199][ T6170] usb 2-1: config 0 descriptor??
[  905.096980][ T6170] hub 2-1:0.0: USB hub found
[  905.498253][ T6170] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  905.525266][ T6170] usbhid 2-1:0.0: can't add hid device: -71
[  905.544781][ T6170] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  905.594060][ T6170] usb 2-1: USB disconnect, device number 51
[  905.630196][T18138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  905.644905][T18138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  906.033304][ T6170] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  906.193312][ T6170] usb 2-1: Using ep0 maxpacket: 32
[  906.208854][ T6170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  906.242830][ T6170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  906.263393][ T6170] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  906.276124][ T6170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.289996][ T6170] usb 2-1: config 0 descriptor??
[  906.305912][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3658'.
[  906.323811][ T6170] hub 2-1:0.0: USB hub found
[  906.358389][T18140] 8021q: adding VLAN 0 to HW filter on device bond0
[  906.367791][T18140] 8021q: adding VLAN 0 to HW filter on device team0
[  906.446087][T18140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  906.457128][T18140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  906.474509][T18140] veth1_vlan: left promiscuous mode
[  906.481227][T18140] veth0_vlan: left promiscuous mode
[  906.489095][T18140] veth0_vlan: entered promiscuous mode
[  906.497561][T18140] veth1_vlan: entered promiscuous mode
[  906.514766][ T6170] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  906.518651][T18140] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  906.536267][T18140] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  906.545725][T18140] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  906.548939][ T6170] usbhid 2-1:0.0: can't add hid device: -71
[  906.560660][T18140] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  906.569996][ T6170] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  906.604428][ T6170] usb 2-1: USB disconnect, device number 52
[  906.612217][T11915] bridge0: port 1(bridge_slave_0) entered blocking state
[  906.619654][T11915] bridge0: port 1(bridge_slave_0) entered forwarding state
[  906.633466][T11915] bridge0: port 2(bridge_slave_1) entered blocking state
[  906.640997][T11915] bridge0: port 2(bridge_slave_1) entered forwarding state
[  906.696120][  T157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  906.709877][  T157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  906.728039][  T157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  906.738597][  T157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  907.447876][T18146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3660'.
[  907.631738][T18154] syz.3.3663 (18154): drop_caches: 2
[  907.642745][T18154] syz.3.3663 (18154): drop_caches: 2
[  907.793458][T18157] netlink: 820 bytes leftover after parsing attributes in process `syz.7.3664'.
[  907.803706][T18157] netlink: 820 bytes leftover after parsing attributes in process `syz.7.3664'.
[  908.329420][T18178] loop5: detected capacity change from 0 to 7
[  908.330206][T18182] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3671'.
[  908.369379][T18178] Dev loop5: unable to read RDB block 7
[  908.407541][T18178]  loop5: unable to read partition table
[  908.423385][T18178] loop5: partition table beyond EOD, truncated
[  908.435301][T18178] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  908.539408][T18184] syzkaller0: entered promiscuous mode
[  908.555286][T18184] syzkaller0: entered allmulticast mode
[  908.686744][T18195] vivid-000: =================  START STATUS  =================
[  908.716399][T18195] vivid-000: Radio HW Seek Mode: 
[  908.726726][T18198] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 2, id = 0
[  908.726774][T18195] Bounded
[  908.755853][T18195] vivid-000: Radio Programmable HW Seek: false
[  908.768802][T18195] vivid-000: RDS Rx I/O Mode: Block I/O
[  908.779103][T18195] vivid-000: Generate RBDS Instead of RDS: false
[  908.787490][T18195] vivid-000: RDS Reception: true
[  908.793678][T18195] vivid-000: RDS Program Type: 0 inactive
[  908.799775][T18195] vivid-000: RDS PS Name:  inactive
[  908.848908][T18195] vivid-000: RDS Radio Text:  inactive
[  908.855696][T18195] vivid-000: RDS Traffic Announcement: false inactive
[  908.866609][T18195] vivid-000: RDS Traffic Program: false inactive
[  908.874519][T18195] vivid-000: RDS Music: false inactive
[  908.880353][T18195] vivid-000: ==================  END STATUS  ==================
[  908.923667][T12603] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  909.107877][T12603] usb 2-1: Using ep0 maxpacket: 16
[  909.116641][T12603] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  909.136580][T12603] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  909.150321][T18205] binder: 18203:18205 ioctl c0306201 2000000003c0 returned -14
[  909.172622][T12603] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  909.204007][T12603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  909.229544][T12603] usb 2-1: config 0 descriptor??
[  909.486878][T18192] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  909.545150][T18192] xt_connbytes: Forcing CT accounting to be enabled
[  910.234273][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3679'.
[  910.648101][T18220] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3682'.
[  910.741380][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3683'.
[  910.758920][T18222] syz_tun: left allmulticast mode
[  910.765939][T18222] syz_tun: left promiscuous mode
[  910.771504][T18222] bridge0: port 1(syz_tun) entered disabled state
[  910.786020][T18222] vlan2: left allmulticast mode
[  910.795314][T18222] bridge_slave_0: left allmulticast mode
[  910.809906][T18222] vlan2: left promiscuous mode
[  910.823420][T18222] bridge_slave_0: left promiscuous mode
[  910.834937][T18222] bridge0: port 3(vlan2) entered disabled state
[  910.890489][T18222] bridge0 (unregistering): left promiscuous mode
[  911.215287][T18230] loop5: detected capacity change from 0 to 7
[  911.225581][T18230] Dev loop5: unable to read RDB block 7
[  911.232474][T18230]  loop5: unable to read partition table
[  911.240608][T18230] loop5: partition table beyond EOD, truncated
[  911.250038][T18230] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  911.274563][T18232] netlink: 'syz.3.3687': attribute type 46 has an invalid length.
[  911.300234][T18232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  911.331079][T18232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  911.558428][T18232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  911.584287][T18232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  911.605540][T18237] netlink: 324 bytes leftover after parsing attributes in process `syz.7.3689'.
[  911.760034][T12603] usb 2-1: USB disconnect, device number 53
[  911.785504][T18244] netlink: 'syz.7.3690': attribute type 1 has an invalid length.
[  911.919937][T18247] veth3: entered promiscuous mode
[  911.938857][T18247] bond2: (slave veth3): Enslaving as an active interface with a down link
[  911.989117][T18244] bond2: (slave veth5): Enslaving as an active interface with a down link
[  912.130030][T18251] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3693'.
[  912.437600][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3694'.
[  912.663294][T12619] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[  912.828058][T12619] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  912.838179][T12619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.847232][T12619] usb 2-1: Product: syz
[  912.851538][T12619] usb 2-1: Manufacturer: syz
[  912.858146][T12619] usb 2-1: SerialNumber: syz
[  912.872428][T12619] usb 2-1: config 0 descriptor??
[  913.091090][T12619] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  913.126076][T18265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.139447][T18265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.159386][T18265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.180248][T18265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.207379][T18265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.231627][T18265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.260541][T18265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.286387][T18265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.317373][T18265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.341409][T18265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.368918][T18265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.394142][T18265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  914.698457][T12619] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  914.725321][T12619] usb 2-1: USB disconnect, device number 54
[  915.176373][T18311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3710'.
[  915.240086][T18313] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3711'.
[  915.268144][T18313] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3711'.
[  915.331551][T18313] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3711'.
[  915.536213][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3713'.
[  915.650603][T18329] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3717'.
[  915.813321][T12619] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  915.973255][T12619] usb 2-1: Using ep0 maxpacket: 16
[  915.979142][T18342] batadv_slave_1: entered promiscuous mode
[  915.988627][T12619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  915.989277][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3722'.
[  916.001775][T12619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  916.020379][T12619] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  916.030374][T12619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  916.045453][T12619] usb 2-1: config 0 descriptor??
[  916.048929][T18341] batadv_slave_1: left promiscuous mode
[  916.124671][T18344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.135819][T18344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.261858][T18322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.271543][T18322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.280918][T18322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.293597][T18322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.304132][T18322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.314279][T18322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.323933][T18322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.335109][T18322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.345450][T18322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.357903][T18322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.611557][T12619] usbhid 2-1:0.0: can't add hid device: -71
[  916.633852][T12619] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  916.656485][T12619] usb 2-1: USB disconnect, device number 55
[  916.722731][T18349] FAULT_INJECTION: forcing a failure.
[  916.722731][T18349] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  916.739136][T18349] CPU: 0 UID: 0 PID: 18349 Comm: syz.3.3725 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  916.739174][T18349] Tainted: [L]=SOFTLOCKUP
[  916.739182][T18349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  916.739197][T18349] Call Trace:
[  916.739206][T18349]  <TASK>
[  916.739216][T18349]  dump_stack_lvl+0xe8/0x150
[  916.739257][T18349]  should_fail_ex+0x40c/0x560
[  916.739288][T18349]  _copy_to_user+0x31/0xb0
[  916.739323][T18349]  simple_read_from_buffer+0xe1/0x170
[  916.739359][T18349]  proc_fail_nth_read+0x1bb/0x230
[  916.739392][T18349]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  916.739426][T18349]  ? rw_verify_area+0x24a/0x4c0
[  916.739462][T18349]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  916.739491][T18349]  vfs_read+0x213/0xa80
[  916.739528][T18349]  ? __pfx___mutex_lock+0x10/0x10
[  916.739564][T18349]  ? __pfx_vfs_read+0x10/0x10
[  916.739598][T18349]  ? __fget_files+0x2a/0x420
[  916.739632][T18349]  ? __fget_files+0x3a2/0x420
[  916.739659][T18349]  ? __fget_files+0x2a/0x420
[  916.739697][T18349]  ksys_read+0x150/0x270
[  916.739732][T18349]  ? __pfx_ksys_read+0x10/0x10
[  916.739765][T18349]  ? __pfx_drm_ioctl+0x10/0x10
[  916.739892][T18349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  916.739917][T18349]  do_syscall_64+0x174/0x580
[  916.739947][T18349]  ? trace_irq_disable+0x3b/0x140
[  916.739976][T18349]  ? clear_bhb_loop+0x40/0x90
[  916.740003][T18349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  916.740026][T18349] RIP: 0033:0x7fad2355e68e
[  916.740047][T18349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  916.740067][T18349] RSP: 002b:00007fad244c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  916.740091][T18349] RAX: ffffffffffffffda RBX: 00007fad244c36c0 RCX: 00007fad2355e68e
[  916.740115][T18349] RDX: 000000000000000f RSI: 00007fad244c30a0 RDI: 0000000000000004
[  916.740129][T18349] RBP: 00007fad244c3090 R08: 0000000000000000 R09: 0000000000000000
[  916.740143][T18349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  916.740156][T18349] R13: 00007fad23826038 R14: 00007fad23825fa0 R15: 00007fad2394fa48
[  916.740191][T18349]  </TASK>
[  916.747263][ T5637] Bluetooth: hci4: unexpected event for opcode 0x200d
[  917.187174][T18357] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3727'.
[  917.873248][T12619] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  918.024420][T12619] usb 2-1: Using ep0 maxpacket: 32
[  918.032380][T12619] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  918.042322][T12619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.055256][T12619] usb 2-1: config 0 descriptor??
[  918.067972][T12619] as10x_usb: device has been detected
[  918.075203][T12619] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  918.111545][T12619] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  918.201321][T12619] as10x_usb: error during firmware upload part1
[  918.221941][T12619] Registered device nBox DVB-T Dongle
[  918.277329][T18368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  918.297006][T18368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  918.309416][T12603] usb 2-1: USB disconnect, device number 56
[  918.323882][T18373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  918.341260][T18373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  918.412159][T12603] Unregistered device nBox DVB-T Dongle
[  918.414324][T12603] as10x_usb: device has been disconnected
[  918.830621][T18387] macvlan1: entered allmulticast mode
[  918.837085][T18387] veth1_vlan: entered allmulticast mode
[  918.844788][T18387] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  919.158425][T18399] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  919.198517][T18403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3740'.
[  919.281583][T18403] 8021q: adding VLAN 0 to HW filter on device bond0
[  919.291940][T18403] 8021q: adding VLAN 0 to HW filter on device team0
[  919.308746][T18403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  919.401702][T18403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  919.414088][T18403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  919.431157][T18403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  919.442420][T18403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  919.463057][T18403] veth1_vlan: left promiscuous mode
[  919.470247][T18403] veth0_vlan: left promiscuous mode
[  919.480879][T18403] veth0_vlan: entered promiscuous mode
[  919.491286][T18403] veth1_vlan: entered promiscuous mode
[  919.521574][T18403] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  919.531159][T18403] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  919.541046][T18403] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  919.551043][T18403] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  919.574944][T12606] bridge0: entered promiscuous mode
[  919.599690][T11915] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.607233][T11915] bridge0: port 1(bridge_slave_0) entered forwarding state
[  919.621366][T11915] bridge0: port 2(bridge_slave_1) entered blocking state
[  919.629016][T11915] bridge0: port 2(bridge_slave_1) entered forwarding state
[  919.667085][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  919.699138][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  919.721673][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  919.740871][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  919.929059][T18412] xt_hashlimit: size too large, truncated to 1048576
[  919.993551][T18414] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3744'.
[  920.376190][T18419] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3747'.
[  920.786155][ T5637] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  920.795195][ T5637] Bluetooth: hci4: Injecting HCI hardware error event
[  920.808873][ T5637] Bluetooth: hci4: hardware error 0x00
[  920.869224][T18428] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3750'.
[  920.883243][ T5760] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  921.043555][ T5760] usb 2-1: Using ep0 maxpacket: 32
[  921.050838][ T5760] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  921.061886][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  921.074401][ T5760] usb 2-1: config 0 descriptor??
[  921.088876][ T5760] as10x_usb: device has been detected
[  921.095540][ T5760] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  921.124552][ T5760] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  921.150437][ T5760] as10x_usb: error during firmware upload part1
[  921.159041][ T5760] Registered device nBox DVB-T Dongle
[  921.287570][T18425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  921.303015][T18425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  921.317320][ T5760] usb 2-1: USB disconnect, device number 57
[  921.358262][ T5760] Unregistered device nBox DVB-T Dongle
[  921.361332][ T5760] as10x_usb: device has been disconnected
[  921.488871][T18430] binder: 18429:18430 ioctl 40085511 200000000080 returned -22
[  921.574715][T18432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  921.596040][T18432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  921.938444][T18444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3757'.
[  922.156650][T18451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  922.166924][T18451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  922.186169][T18451] netlink: 'syz.3.3759': attribute type 39 has an invalid length.
[  922.274466][T12606] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  922.467330][T12606] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  922.476990][T12606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.485434][T12606] usb 2-1: Product: syz
[  922.489778][T12606] usb 2-1: Manufacturer: syz
[  922.495378][T12606] usb 2-1: SerialNumber: syz
[  922.502914][T12606] usb 2-1: config 0 descriptor??
[  922.722646][T18449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3758'.
[  922.764006][ T5760] usb 2-1: USB disconnect, device number 58
[  922.866763][ T5637] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  922.965567][T18456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  922.978156][T18456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  923.635352][T12606] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  923.826084][T12606] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  923.841742][T12606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.854852][T12606] usb 2-1: config 0 descriptor??
[  924.002320][T18476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  924.013313][T18476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  924.719005][T12606] usb 2-1: Cannot set autoneg
[  924.724769][T12606] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  924.770308][T12606] usb 2-1: USB disconnect, device number 59
[  924.894696][T18484] vlan1: left allmulticast mode
[  924.901355][T18484] veth0_vlan: left allmulticast mode
[  924.923497][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3772'.
[  924.981901][T18484] 8021q: adding VLAN 0 to HW filter on device bond0
[  925.005712][T18484] 8021q: adding VLAN 0 to HW filter on device team0
[  925.165907][T18484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  925.191677][T18484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  925.230466][T18484] veth1_vlan: left promiscuous mode
[  925.258461][T18484] veth0_vlan: left promiscuous mode
[  925.281865][T13047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  925.306968][T13047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  925.321650][T13047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  925.348394][T13047] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  925.361662][T13047] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  925.364158][T18484] veth0_vlan: entered promiscuous mode
[  925.450524][T18484] veth1_vlan: entered promiscuous mode
[  925.480577][T18484] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  925.490370][T18484] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  925.500355][T18484] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  925.513124][T18484] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  925.526300][T18484] 8021q: adding VLAN 0 to HW filter on device bond1
[  925.545149][T18484] 8021q: adding VLAN 0 to HW filter on device bond2
[  925.559849][T18484] 8021q: adding VLAN 0 to HW filter on device bond3
[  925.650202][T18484] veth0_to_team: entered promiscuous mode
[  925.697993][   T36] bridge0: port 1(vlan2) entered blocking state
[  925.704505][   T36] bridge0: port 1(vlan2) entered forwarding state
[  925.736864][T18486] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3773'.
[  925.826564][T18497] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3777'.
[  925.842747][   T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  925.856577][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  925.880290][   T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  925.898427][T18499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  925.909602][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  925.912886][T18499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  925.938907][   T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  925.948898][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  925.960357][   T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  925.970860][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  926.564043][T12603] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  926.728178][T12603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  926.734723][T18490] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.750078][T18490] bridge0: port 1(bridge_slave_0) entered disabled state
[  926.758639][T18490] bridge_slave_0: entered allmulticast mode
[  926.764903][T12603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  926.764937][T12603] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  926.764988][T12603] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  926.765015][T12603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.843740][T18490] bridge_slave_0: entered promiscuous mode
[  926.844747][T12603] usb 2-1: config 0 descriptor??
[  926.893958][T18490] bridge0: port 2(bridge_slave_1) entered blocking state
[  926.925765][T18490] bridge0: port 2(bridge_slave_1) entered disabled state
[  926.940891][T18528] loop5: detected capacity change from 0 to 7
[  926.952072][T18490] bridge_slave_1: entered allmulticast mode
[  926.958403][T18528] Dev loop5: unable to read RDB block 7
[  926.964520][T18528]  loop5: unable to read partition table
[  926.970561][T18528] loop5: partition table beyond EOD, truncated
[  926.977234][T18528] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  927.009964][T18490] bridge_slave_1: entered promiscuous mode
[  927.119714][T18533] fuse: fd is not a fuse device
[  927.139123][T18530] bond1 (unregistering): Released all slaves
[  927.228237][T18490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  927.256322][T18490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  927.287478][T12603] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[  927.304801][T12603] plantronics 0003:047F:FFFF.0022: item fetching failed at offset 3/15
[  927.317680][T12603] plantronics 0003:047F:FFFF.0022: parse failed
[  927.324780][T12603] plantronics 0003:047F:FFFF.0022: probe with driver plantronics failed with error -22
[  927.378618][T18537] kernel profiling enabled (shift: 0)
[  927.407088][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3790'.
[  927.421939][T18490] team0: Port device team_slave_0 added
[  927.439008][T18490] team0: Port device team_slave_1 added
[  927.514126][ T5637] Bluetooth: hci0: command tx timeout
[  927.545412][T18490] batman_adv: batadv0: Adding interface: batadv_slave_0
[  927.552802][T18490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  927.579424][T18490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  927.595854][T18490] batman_adv: batadv0: Adding interface: batadv_slave_1
[  927.603266][T18490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  927.636948][T18508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  927.646628][T18490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  927.661509][T18508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  927.704472][T18506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  927.735089][T18506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  927.826862][T18490] hsr_slave_0: entered promiscuous mode
[  927.840525][T18490] hsr_slave_1: entered promiscuous mode
[  927.848142][T18490] debugfs: 'hsr0' already exists in 'hsr'
[  927.854497][T18490] Cannot create hsr debugfs directory
[  927.943285][T18547] netlink: 'syz.6.3792': attribute type 1 has an invalid length.
[  927.997604][T18547] 8021q: adding VLAN 0 to HW filter on device bond4
[  928.329142][T12618] usb 2-1: USB disconnect, device number 60
[  928.880820][ T5637] Bluetooth: hci3: command 0x0406 tx timeout
[  928.980721][T18490] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  928.992471][T18490] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  929.002231][T18490] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  929.013974][T18490] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  929.023259][T18490] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  929.034988][T18490] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  929.044058][T18490] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  929.058066][T18490] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  929.178710][T18490] 8021q: adding VLAN 0 to HW filter on device bond0
[  929.206900][T18490] 8021q: adding VLAN 0 to HW filter on device team0
[  929.234734][T11918] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.242064][T11918] bridge0: port 1(bridge_slave_0) entered forwarding state
[  929.261551][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.268762][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  929.482090][T18490] 8021q: adding VLAN 0 to HW filter on device batadv0
[  929.583735][T13047] Bluetooth: hci0: command tx timeout
[  929.647668][T18490] veth0_vlan: entered promiscuous mode
[  929.663994][T18490] veth1_vlan: entered promiscuous mode
[  929.763908][T18490] veth0_macvtap: entered promiscuous mode
[  929.794270][T18490] veth1_macvtap: entered promiscuous mode
[  929.852392][T18490] batman_adv: batadv0: Interface activated: batadv_slave_0
[  929.891559][T18490] batman_adv: batadv0: Interface activated: batadv_slave_1
[  929.919134][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  929.949172][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  929.990358][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  930.027579][T13623] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  930.278699][T18582] veth1_vlan: left allmulticast mode
[  930.299781][T18582] macvlan1: left allmulticast mode
[  930.327150][T13623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.335416][T13623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.440433][T18590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3805'.
[  930.449628][T11918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.457951][T11918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.613269][T12606] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  930.804710][T12606] usb 2-1: unable to get BOS descriptor or descriptor too short
[  930.824001][T12606] usb 2-1: not running at top speed; connect to a high speed hub
[  930.849255][T12606] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4
[  930.867522][T12606] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  930.877262][T12606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.885716][T12606] usb 2-1: Product: syz
[  930.890848][T12606] usb 2-1: Manufacturer: syz
[  930.896277][T12606] usb 2-1: SerialNumber: syz
[  931.077896][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3807'.
[  931.326509][T12606] usb 2-1: USB disconnect, device number 61
[  931.361610][T18602] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3808'.
[  931.463859][T18061] udevd[18061]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  931.586114][T18608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  931.599189][T18608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  931.662795][T13047] Bluetooth: hci0: command tx timeout
[  931.801777][T18615] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3814'.
[  931.909803][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  931.917765][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  932.492732][ T6328] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  932.652672][ T6328] usb 2-1: Using ep0 maxpacket: 16
[  932.660196][ T6328] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  932.671820][ T6328] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  932.682149][ T6328] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  932.692746][ T6328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.715928][ T6328] usb 2-1: config 0 descriptor??
[  932.992001][T18626] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  933.752894][T13047] Bluetooth: hci0: command tx timeout
[  934.019703][T18650] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3826'.
[  934.523604][T18665] netlink: 'syz.8.3830': attribute type 1 has an invalid length.
[  934.554658][T18665] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3830'.
[  935.317793][ T6160] usb 2-1: USB disconnect, device number 62
[  935.410658][   T30] audit: type=1326 audit(1783712725.355:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.7.3833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  935.470180][   T30] audit: type=1326 audit(1783712725.385:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.7.3833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  935.497303][   T30] audit: type=1326 audit(1783712725.385:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.7.3833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  935.538092][   T30] audit: type=1326 audit(1783712725.385:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.7.3833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  935.565957][   T30] audit: type=1326 audit(1783712725.395:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.7.3833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  935.592026][   T30] audit: type=1326 audit(1783712725.395:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.7.3833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  935.621262][   T30] audit: type=1326 audit(1783712725.395:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.7.3833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  935.650209][   T30] audit: type=1326 audit(1783712725.395:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.7.3833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  935.686023][   T30] audit: type=1326 audit(1783712725.395:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.7.3833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  935.713538][   T30] audit: type=1326 audit(1783712725.395:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.7.3833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  936.499723][T18678] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  936.873408][ T5760] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  937.054329][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  937.077902][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  937.107607][ T5760] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  937.136190][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.175623][ T5760] usb 2-1: config 0 descriptor??
[  937.385801][T18691] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3839'.
[  937.623396][ T5760] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0
[  937.633664][ T5760] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0
[  937.672367][ T5760] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0023/input/input60
[  937.718531][T18689] fuse: blksize only supported for fuseblk
[  937.778767][ T5760] cm6533_jd 0003:0D8C:0022.0023: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  938.311994][T18713] bridge0: port 2(bridge_slave_1) entered disabled state
[  938.319661][T18713] bridge0: port 1(bridge_slave_0) entered disabled state
[  938.480273][T11918] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  938.497740][T11918] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  938.507441][T11918] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  938.516813][T11918] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  939.500806][T18739] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3850'.
[  939.630061][ T5760] usb 2-1: USB disconnect, device number 63
[  940.063572][ T5760] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[  940.238992][ T5760] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  940.267984][ T5760] usb 2-1: config 0 interface 0 has no altsetting 0
[  940.281200][ T5760] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  940.310048][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.333467][ T5760] usb 2-1: config 0 descriptor??
[  940.340740][T18743] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22
[  940.459414][T18749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.476233][T18749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.698152][T18749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.708871][T18751] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  940.741912][T18749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.807408][T13047] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  940.829221][T18749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.843708][T18749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  941.197618][   T30] kauditd_printk_skb: 145 callbacks suppressed
[  941.197665][   T30] audit: type=1326 audit(1783712731.145:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18742 comm="syz.1.3852" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc7759de59 code=0x0
[  942.759870][   T30] audit: type=1326 audit(1783712732.705:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18767 comm="syz.6.3859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  942.800568][   T30] audit: type=1326 audit(1783712732.745:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18767 comm="syz.6.3859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b19de59 code=0x7ffc0000
[  942.863944][T13047] Bluetooth: hci5: command 0x0406 tx timeout
[  943.402328][ T5760] usbhid 2-1:0.0: can't add hid device: -71
[  943.432457][ T5760] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  943.484388][ T5760] usb 2-1: USB disconnect, device number 64
[  943.502467][T18776] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3862'.
[  943.716008][T18781] loop5: detected capacity change from 0 to 7
[  943.748433][T18781] Dev loop5: unable to read RDB block 7
[  943.762378][T18781]  loop5: unable to read partition table
[  943.771323][T18781] loop5: partition table beyond EOD, truncated
[  943.777802][T18781] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  943.922153][T18786] loop5: detected capacity change from 0 to 7
[  943.931125][T18786] Dev loop5: unable to read RDB block 7
[  943.938029][T18786]  loop5: unable to read partition table
[  943.949174][T18786] loop5: partition table beyond EOD, truncated
[  943.955831][T18786] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  943.985159][T18788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3865'.
[  944.186731][T18792] bridge_slave_1: entered promiscuous mode
[  944.196303][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3865'.
[  944.697626][T18808] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3872'.
[  944.711192][T18807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  944.732241][T18807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  944.778079][T18811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  944.818556][T18811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  945.027998][T18816] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3875'.
[  945.072378][T18818] netlink: 'syz.8.3876': attribute type 10 has an invalid length.
[  945.965530][T18833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3880'.
[  946.356678][T18840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  946.437496][T18845] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3885'.
[  946.929783][T18853] netlink: 'syz.8.3888': attribute type 10 has an invalid length.
[  947.190661][T18856] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3887'.
[  947.458905][T18862] cgroup: fork rejected by pids controller in /syz1
[  947.510625][T18865] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3891'.
[  947.783207][T12606] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  947.835053][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  947.873132][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  947.927970][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  947.959536][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  947.971941][T12606] usb 2-1: config 3 has an invalid interface number: 47 but max is 0
[  947.983637][T12606] usb 2-1: config 3 has no interface number 0
[  947.997289][T12606] usb 2-1: config 3 interface 47 altsetting 8 endpoint 0xA has invalid maxpacket 512, setting to 64
[  948.010281][T12606] usb 2-1: config 3 interface 47 altsetting 8 endpoint 0xB has invalid maxpacket 512, setting to 64
[  948.026707][T12606] usb 2-1: config 3 interface 47 has no altsetting 0
[  948.038506][T12606] usb 2-1: New USB device found, idVendor=0582, idProduct=0040, bcdDevice=f4.69
[  948.049805][T12606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.077563][T12606] usb 2-1: Product: syz
[  948.084491][T12606] usb 2-1: Manufacturer: syz
[  948.089513][T12606] usb 2-1: SerialNumber: syz
[  948.132142][T18877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'.
[  948.382135][T18882] netlink: 'syz.6.3896': attribute type 1 has an invalid length.
[  948.404352][T12606] usb 2-1: USB disconnect, device number 65
[  948.545978][T18882] 8021q: adding VLAN 0 to HW filter on device bond5
[  948.725730][T18886] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3897'.
[  949.035566][T18892] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3900'.
[  949.341721][T16682] syz_tun (unregistering): left promiscuous mode
[  949.384301][   T30] audit: type=1326 audit(1783712739.325:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.7.3905" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  949.427486][T18904] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  949.441344][   T30] audit: type=1326 audit(1783712739.335:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.7.3905" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  949.482402][   T30] audit: type=1326 audit(1783712739.365:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.7.3905" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  949.510565][   T30] audit: type=1326 audit(1783712739.365:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.7.3905" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  949.543594][   T30] audit: type=1326 audit(1783712739.365:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.7.3905" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  949.576395][   T30] audit: type=1326 audit(1783712739.365:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.7.3905" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  949.609669][   T30] audit: type=1326 audit(1783712739.365:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.7.3905" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  949.678623][   T30] audit: type=1326 audit(1783712739.365:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.7.3905" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  949.768377][   T30] audit: type=1326 audit(1783712739.365:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.7.3905" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  949.824624][   T31] INFO: task kworker/1:11:12612 blocked for more than 143 seconds.
[  949.836909][   T31]       Tainted: G             L      syzkaller #0
[  949.862223][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  949.875241][   T31] task:kworker/1:11    state:D
[  949.875263][   T30] audit: type=1326 audit(1783712739.365:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18903 comm="syz.7.3905" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcb79de59 code=0x7ffc0000
[  949.875294][   T31]  stack:21200 pid:12612 tgid:12612 ppid:2      task_flags:0x4288060 flags:0x00080000
[  949.918292][   T31] Workqueue: usb_hub_wq hub_event
[  949.923638][   T31] Call Trace:
[  949.927200][   T31]  <TASK>
[  949.930876][   T31]  __schedule+0x17d9/0x56c0
[  949.936971][   T31]  ? __pfx___schedule+0x10/0x10
[  949.942091][   T31]  ? __pfx___schedule+0x10/0x10
[  949.947305][   T31]  ? schedule+0x90/0x2b0
[  949.952256][   T31]  schedule+0x164/0x2b0
[  949.957055][   T31]  schedule_timeout+0xc0/0x2c0
[  949.962035][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  949.969188][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  949.974690][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  949.980236][   T31]  ? wait_for_completion+0x272/0x5e0
[  949.987642][   T31]  wait_for_completion+0x2ca/0x5e0
[  949.994216][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  950.000232][   T31]  ? kobject_put+0x50f/0x550
[  950.005777][   T31]  i2c_del_adapter+0x281/0x430
[  950.010849][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[  950.016587][   T31]  ? kfree+0x4d/0x640
[  950.022044][   T31]  dvb_usb_i2c_exit+0x64/0xb0
[  950.037984][   T31]  dvb_usb_device_exit+0x1cb/0x350
[  950.050200][   T31]  ? __pfx_rpm_resume+0x10/0x10
[  950.060362][   T31]  ? __pfx_dvb_usb_device_exit+0x10/0x10
[  950.072617][   T31]  ? usb_disable_interface+0x31d/0x350
[  950.088851][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  950.098991][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  950.111658][   T31]  usb_unbind_interface+0x295/0x9f0
[  950.121883][   T31]  ? kernfs_remove_by_name_ns+0x101/0x140
[  950.139665][   T31]  ? kernfs_remove_by_name_ns+0x101/0x140
[  950.149118][   T31]  ? __pfx_usb_unbind_interface+0x10/0x10
[  950.162590][   T31]  device_release_driver_internal+0x4f5/0x880
[  950.183331][   T31]  bus_remove_device+0x444/0x560
[  950.201442][   T31]  ? __pfx_bus_remove_device+0x10/0x10
[  950.219200][   T31]  ? kernfs_remove_by_name_ns+0x101/0x140
[  950.232577][   T31]  device_del+0x524/0x8f0
[  950.243047][   T31]  ? __pfx_device_del+0x10/0x10
[  950.253616][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  950.264443][   T31]  usb_disable_device+0x3d4/0x8d0
[  950.273344][   T31]  usb_disconnect+0x346/0x9a0
[  950.278461][   T31]  hub_event+0x1bbb/0x4d30
[  950.290387][   T31]  ? register_lock_class+0x31/0x2e0
[  950.302352][   T31]  ? trace_hrtimer_start+0x82/0x200
[  950.310995][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  950.321148][   T31]  ? __pfx_hub_event+0x10/0x10
[  950.332191][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  950.342375][   T31]  ? rcu_is_watching+0x15/0xb0
[  950.361240][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  950.371401][   T31]  process_scheduled_works+0xa8e/0x14e0
[  950.381591][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  950.393902][   T31]  ? assign_work+0x3cf/0x5d0
[  950.401906][   T31]  worker_thread+0xa47/0xfb0
[  950.407457][   T31]  ? __kthread_parkme+0x71/0x1f0
[  950.415004][   T31]  kthread+0x388/0x470
[  950.423986][   T31]  ? __pfx_worker_thread+0x10/0x10
[  950.435207][   T31]  ? __pfx_kthread+0x10/0x10
[  950.444439][   T31]  ret_from_fork+0x514/0xb70
[  950.453211][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  950.458879][   T31]  ? __switch_to+0xc89/0x1420
[  950.467909][   T31]  ? __pfx_kthread+0x10/0x10
[  950.478056][   T31]  ret_from_fork_asm+0x1a/0x30
[  950.489283][   T31]  </TASK>
[  950.501856][T13623] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  950.515959][   T31] 
[  950.515959][   T31] Showing all locks held in the system:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  950.569739][   T31] 1 lock held by khungtaskd/31:
[  950.578431][   T31]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  950.626570][   T31] 2 locks held by getty/5384:
[  950.651538][   T31]  #0: ffff8880322e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  950.728180][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  950.771412][   T31] 3 locks held by kworker/u8:20/11918:
[  950.797235][   T31]  #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  950.885512][   T31]  #1: ffffc90003d6fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  950.967127][   T31]  #2: ffffffff9002c0c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  950.967967][T12612] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  950.993238][T12618] usb 4-1: USB disconnect, device number 66
[  951.066301][   T31] 8 locks held by kworker/1:11/12612:
[  951.086493][   T31] 6 locks held by kworker/0:3/12618:
[  951.105337][   T31]  #0: ffff888022abb940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  951.133414][   T31]  #1: ffffc90006f07c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  951.170664][   T31]  #2: ffff88802a8961d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  951.193343][T13047] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  951.217403][T13047] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  951.230142][T13047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  951.239915][T13047] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  951.249967][T13047] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  951.319717][   T31]  #3: ffff88807a1951d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0
[  951.350027][   T31]  #4: ffff88803421c1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  951.391406][   T31]  #5: ffffffff8faa4700 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x2d8/0x650
[  951.427789][   T31] 7 locks held by kworker/u8:25/13623:
[  951.454907][   T31]  #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  951.483530][   T31]  #1: ffffc90003827c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  951.495165][   T31]  #2: ffffffff9001d528 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  951.512761][   T31]  #3: ffff88807b7e4128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  951.540931][   T31]  #4: ffff88807b7e5258 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  951.555158][   T31]  #5: ffffffff9002c0c0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800
[  951.565428][   T31]  #6: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  951.578153][   T31] 2 locks held by syz-executor/18908:
[  951.584804][   T31]  #0: ffffffff9001d528 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720
[  951.595493][   T31]  #1: ffffffff9002c0c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[  951.606277][   T31] 
[  951.608663][   T31] =============================================
[  951.608663][   T31] 
[  951.617181][   T31] NMI backtrace for cpu 1
[  951.617206][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  951.617234][   T31] Tainted: [L]=SOFTLOCKUP
[  951.617242][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  951.617254][   T31] Call Trace:
[  951.617264][   T31]  <TASK>
[  951.617274][   T31]  dump_stack_lvl+0xe8/0x150
[  951.617310][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  951.617336][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  951.617366][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  951.617392][   T31]  sys_info+0x135/0x170
[  951.617491][   T31]  watchdog+0xfd7/0x1030
[  951.617523][   T31]  ? watchdog+0x1c7/0x1030
[  951.617552][   T31]  kthread+0x388/0x470
[  951.617580][   T31]  ? __pfx_watchdog+0x10/0x10
[  951.617601][   T31]  ? __pfx_kthread+0x10/0x10
[  951.617629][   T31]  ret_from_fork+0x514/0xb70
[  951.617660][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  951.617688][   T31]  ? __switch_to+0xc89/0x1420
[  951.617723][   T31]  ? __pfx_kthread+0x10/0x10
[  951.617752][   T31]  ret_from_fork_asm+0x1a/0x30
[  951.617787][   T31]  </TASK>
[  951.617795][   T31] Sending NMI from CPU 1 to CPUs 0:
[  951.738365][    C0] NMI backtrace for cpu 0
[  951.738390][    C0] CPU: 0 UID: 0 PID: 157 Comm: kworker/u8:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  951.738417][    C0] Tainted: [L]=SOFTLOCKUP
[  951.738425][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  951.738438][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  951.738528][    C0] RIP: 0010:lock_release+0xa8/0x3c0
[  951.738557][    C0] Code: 00 0f 85 f7 01 00 00 49 81 3e 20 45 30 94 0f 84 ea 01 00 00 9c 5b fa 48 c7 c7 ba 4e 24 8e e8 df cd 2c 0a 65 ff 05 a8 6f ca 11 <c7> 44 24 24 01 00 00 00 83 3d a9 54 b5 0e 00 0f 84 90 01 00 00 41
[  951.738575][    C0] RSP: 0000:ffffc90002ee7498 EFLAGS: 00000002
[  951.738591][    C0] RAX: 0000000000000000 RBX: 0000000000000206 RCX: 0000000080000001
[  951.738604][    C0] RDX: ffffc90002ee7501 RSI: ffffffff8e244eba RDI: ffffffff8c4bd380
[  951.738619][    C0] RBP: 1ffffffff21f9601 R08: ffffc90002ee7920 R09: 0000000000000000
[  951.738633][    C0] R10: ffffc90002ee75f8 R11: fffff520005dcec1 R12: ffffc90002ee0000
[  951.738648][    C0] R13: ffffffff8176f27f R14: ffffffff8eb59c60 R15: ffff888020738000
[  951.738663][    C0] FS:  0000000000000000(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000
[  951.738679][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  951.738693][    C0] CR2: 0000200000404030 CR3: 000000007fd34000 CR4: 00000000003526f0
[  951.738710][    C0] Call Trace:
[  951.738717][    C0]  <TASK>
[  951.738728][    C0]  ? deref_stack_reg+0x18e/0x220
[  951.738749][    C0]  ? unwind_next_frame+0x8f/0x2550
[  951.738767][    C0]  unwind_next_frame+0x1baa/0x2550
[  951.738789][    C0]  ? kasan_save_track+0x3e/0x80
[  951.738813][    C0]  ? unwind_next_frame+0x8f/0x2550
[  951.738834][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  951.738859][    C0]  arch_stack_walk+0x11b/0x150
[  951.738880][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  951.738907][    C0]  stack_trace_save+0xa9/0x100
[  951.738929][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  951.738953][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  951.738977][    C0]  kasan_save_track+0x3e/0x80
[  951.739210][    C0]  ? kasan_save_track+0x3e/0x80
[  951.739270][    C0]  __kasan_slab_alloc+0x6c/0x80
[  951.739296][    C0]  ? kmem_cache_alloc_node_noprof+0x1a1/0x610
[  951.739321][    C0]  kmem_cache_alloc_node_noprof+0x355/0x610
[  951.739343][    C0]  ? local_lock_release+0x9c/0x160
[  951.739369][    C0]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  951.739392][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  951.739415][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  951.739443][    C0]  __alloc_skb+0x1d7/0x7a0
[  951.739469][    C0]  nsim_dev_trap_report_work+0x25f/0xb40
[  951.739497][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  951.739520][    C0]  process_scheduled_works+0xa8e/0x14e0
[  951.739553][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  951.739577][    C0]  ? assign_work+0x3cf/0x5d0
[  951.739599][    C0]  worker_thread+0xa47/0xfb0
[  951.739633][    C0]  kthread+0x388/0x470
[  951.739659][    C0]  ? __pfx_worker_thread+0x10/0x10
[  951.739679][    C0]  ? __pfx_kthread+0x10/0x10
[  951.739705][    C0]  ret_from_fork+0x514/0xb70
[  951.739735][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  951.739761][    C0]  ? __switch_to+0xc89/0x1420
[  951.739785][    C0]  ? __pfx_kthread+0x10/0x10
[  951.739810][    C0]  ret_from_fork_asm+0x1a/0x30
[  951.739836][    C0]  </TASK>
[  952.076875][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  952.083813][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  952.095090][   T31] Tainted: [L]=SOFTLOCKUP
[  952.099557][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  952.110301][   T31] Call Trace:
[  952.114507][   T31]  <TASK>
[  952.117657][   T31]  vpanic+0x56c/0xa60
[  952.121698][   T31]  ? __pfx___schedule+0x10/0x10
[  952.126606][   T31]  ? __pfx_vpanic+0x10/0x10
[  952.131180][   T31]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  952.137405][   T31]  panic+0xc5/0xd0
[  952.141185][   T31]  ? __pfx_panic+0x10/0x10
[  952.145651][   T31]  ? preempt_schedule_common+0x82/0xd0
[  952.151189][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  952.156628][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  952.163057][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  952.169614][   T31]  watchdog+0x1030/0x1030
[  952.174098][   T31]  ? watchdog+0x1c7/0x1030
[  952.178585][   T31]  kthread+0x388/0x470
[  952.182731][   T31]  ? __pfx_watchdog+0x10/0x10
[  952.187482][   T31]  ? __pfx_kthread+0x10/0x10
[  952.192246][   T31]  ret_from_fork+0x514/0xb70
[  952.196908][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  952.202179][   T31]  ? __switch_to+0xc89/0x1420
[  952.207073][   T31]  ? __pfx_kthread+0x10/0x10
[  952.211830][   T31]  ret_from_fork_asm+0x1a/0x30
[  952.216686][   T31]  </TASK>
[  952.220664][   T31] Kernel Offset: disabled
[  952.225114][   T31] Rebooting in 86400 seconds..