last executing test programs:

17m43.589248365s ago: executing program 4 (id=2592):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x2, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_CAP_DISABLE_QUIRKS2(r0, 0x4068aea3, &(0x7f0000000040)={0xd5, 0x0, 0x24})
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000240)={<r2=>r0, &(0x7f0000000140)='&%\xc0\'-@!\'.!+\x00', 0x30000, &(0x7f0000000180)={@align=0x8000000000000000, {0x9, 0x9, 0x54800000, 0x732a}}, 0x1, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x8d}) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', <r4=>0x0, 0x80, 0x40, 0x8001, 0x2c, {{0x1b, 0x4, 0x0, 0x1e, 0x6c, 0x67, 0x0, 0xf9, 0x29, 0x0, @broadcast, @remote, {[@rr={0x7, 0xf, 0x80, [@broadcast, @loopback, @broadcast]}, @cipso={0x86, 0xd, 0x3, [{0x7, 0x7, "c4eb6fa07d"}]}, @noop, @timestamp_prespec={0x44, 0x34, 0xf4, 0x3, 0x7, [{@loopback, 0x5}, {@private=0xa010101, 0xb8}, {@multicast1, 0x8}, {@local, 0x5}, {@multicast2, 0x8bf7}, {@private=0xa010102, 0x7}]}, @rr={0x7, 0x7, 0xcd, [@remote]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', <r5=>0x0, 0x8, 0x80, 0xf082, 0x0, {{0x9, 0x4, 0x3, 0x22, 0x24, 0x68, 0x0, 0xcc, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0x1d, [@local, @empty, @empty]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x80, 0x5, 0xcd6, 0x4a, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x20, 0x7, 0xfff}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'gretap0\x00', <r8=>0x0, 0x1, 0x20, 0xc2c, 0xd59b, {{0x25, 0x4, 0x3, 0x10, 0x94, 0x64, 0x0, 0xb, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp={0x44, 0x18, 0x73, 0x0, 0x0, [0x7c9f, 0x6, 0x800, 0x2, 0x2]}, @timestamp={0x44, 0x10, 0xa4, 0x0, 0x3, [0x80, 0xb, 0x3]}, @timestamp_prespec={0x44, 0x24, 0x4a, 0x3, 0x0, [{@empty, 0x400000}, {@remote, 0x2}, {@empty, 0x8}, {@multicast1, 0x2d}]}, @rr={0x7, 0x17, 0xb8, [@loopback, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @timestamp={0x44, 0x18, 0x64, 0x0, 0x9, [0x10, 0xfffffff2, 0x2, 0x1e4, 0x7]}, @ra={0x94, 0x4}, @noop]}}}}})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x18c, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000000) (async)
r9 = syz_open_dev$sg(&(0x7f0000000900), 0x9, 0x40000)
ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r2)
sendmsg$DEVLINK_CMD_TRAP_GET(r10, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x84, r11, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x901}, 0x5) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'gre0\x00', r5, 0x8000, 0x7, 0x4, 0xa7d, {{0x14, 0x4, 0x3, 0x6, 0x50, 0x66, 0x0, 0xff, 0x2f, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0x3c, 0x1c, 0x1, 0x6, [{@private=0xa010101, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33b6}, {@remote, 0x800000}, {@loopback, 0x10001}, {@remote, 0xff}, {@loopback, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x6}]}]}}}}})
ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f0000000bc0)) (async)
r12 = epoll_create(0x4) (async)
r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000c40)={0x20000010}) (async)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r1)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, r14, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x443}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x659}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x4804) (async)
r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e40), r10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x6c, r15, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r10, 0x8008f512, &(0x7f0000000f80)) (async)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x9)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000fc0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async)
ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000001000))

17m43.398882121s ago: executing program 4 (id=2593):
syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003030000108205a3004000010203010902600003010540060904020000010100000a240103000a000201020904010000010200000904010101010200000905010940000205"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f00000000c0)) (async)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_usb_connect$uac3(0x0, 0xeb, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x3, 0x1, 0x3, 0xf0, 0x0, {0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x30, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xff, 0x3, 0x7f, 0x8, "b057"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x100, 0x1, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x1000, 0x2, 0x9}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0x9, "548e76299ae3f9aa"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x6, 0x5, "eda85f1dd39d9a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x7, 0x87, {0xa, 0x25, 0x25, 0x7f, 0x3, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x82, 0xffffffa8, 0x5, 0x1, 0x81, 0x5, 0x4, 0xba}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0x81, 0x4}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x2, 0x1, 0xb, "aba97df8862e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x1, {0xa, 0x25, 0x25, 0x10, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x6, 0xaf, 0x9, 0x8, 0x70}, 0x51, &(0x7f0000000600)={0x5, 0xf, 0x51, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xf7, 0x2, 0x7ff07ee, 0xf0f, 0x5, [0x0, 0xf]}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x6, 0xf00, 0x100, [0xc0, 0xff0000, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x9, 0x3, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x9, 0x8, 0x0, 0x7, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x7, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x0, 0xce}]}, 0xa, [{0x27, &(0x7f0000000680)=@string={0x27, 0x3, "2d4731c0173d7255aa5bae3ca7659d78a07bdb366dad1a4fe9d2d21b895d3276ae5e9c7366"}}, {0x5d, &(0x7f00000006c0)=@string={0x5d, 0x3, "b6b28e4740f0d0d9b597c01f43c826a0ed2b59e6bf261b8d00bcfe48f343ae57cc64aa4cd4596ee54ee542f66a1e49f43a0592a042d4dd0a37f0be8e79be9e6b02cd3b9b44554956d0912e77d9ecb09aa3ae47d22545f67837d86c"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x401}}, {0xa0, &(0x7f0000000800)=@string={0xa0, 0x3, "b8c8779bcbb092b3940fc5525c6bd6775d9e7208bb0fd74443d4522a6ecbbe5366bed7e82b69de012f1e36a7bd90378ab81c48eef49336100f2a7ca732916cb48bdbe9a4c51630b52c5bf4954b1c3e14de7f8eeca78dd8cb674f6d92a659fd9945eec2ace3217176b7081769bc1fdd0c84a2d3d595a38f6095e9fd31395c723cd9c6a7ec3d02f6009512ddbc897e92c80f1fa5fc4fd132c8ed07c9e03422"}}, {0xfe, &(0x7f00000008c0)=@string={0xfe, 0x3, "0db3f00bdcf172315bff6038eeda760a1768c2f1bc80a0b0e304566ce7653ae05fcdb42901b9804d5921a3db1d433362d5f0a82f695f965b6a16e41a0683e740a86b14b4a17d53eb7422b159e6b8c3241d573a4d2a7580eef1fed243c0007cd77e70d9fb4129bb516a047c949e3df99503b35dfdfca322f3c06ffc2d191b6f9ecc40a0186ab7e7417868b3861379ccb677ef93b128536b54001220e7b7a47f21679c9b6d8c4e9c8362e6e2a0a31f41140239e84c770fee7629870ba2f0de871dca2651171aa4a942a8021977561bc16b872c0cb60aabdc0411ebdda839af534df806e022f6227f0973b61d0c52bc3d307c28de4637e02314e905cfee"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x4b, &(0x7f0000000a00)=@string={0x4b, 0x3, "c5413c3fb6f6ce698aed1de510ecd3332f7ad89cc98acdb81fac8a7ec6ea46ade8e1a31b93df3d0f958e9c751ac77959fc288f8f51f66d2d0634f1790661df0ef5f7dd7d95972862b5"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x846}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x180a}}]})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) (async)
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)
syz_usb_connect$midi(0x3, 0xd3, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x11d86ba1cd4758b0, 0x582, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x1, 0x1, 0x5, 0x80, 0xfb, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x64, [@ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x8, 0x7}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x9, 0x8, 0x2, {0xc, 0x25, 0x1, 0x8, "2a6e380ae230d1c9"}}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x7, 0x8, 0x4a, {0x5, 0x25, 0x1, 0x1, 'a'}}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x8, 0x3, 0xb, {0x10, 0x25, 0x1, 0xc, "d817d54ff38dda64401b5ebb"}}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x8, 0xfd, 0x6, {0x11, 0x25, 0x1, 0xd, "9499bd2ccdb515a11c1f10431f"}}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xa0, 0xfc, 0x7f, {0x9, 0x25, 0x1, 0x5, "1838f65a92"}}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x0, 0x58, 0x0, {0x9, 0x25, 0x1, 0x5, "aad8e106b2"}}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x2, 0xea, 0x3, {0x5, 0x25, 0x1, 0x1, '}'}}}, {{0x9, 0x5, 0xc, 0x0, 0x210, 0x3c, 0x6, 0x31, {0x11, 0x25, 0x1, 0xd, "3b56baef62e8ddae78f670b80f"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x40, 0x9, 0x8, 0xff, 0x6}, 0x109, &(0x7f0000000480)={0x5, 0xf, 0x109, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x2c, 0x4, 0x9, 0xff00, 0x9, [0xc00f, 0x1feffc7, 0xff0000, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x90, 0x2, 0xb4, 0xf, 0x8}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xac, 0x3, 0xa5, 0x7, 0x5}, @generic={0xcf, 0x10, 0x3, "0f41fd8e4c3968158f2a1c0e1ff0c12bee06cefec689be996bf49044161ac4a8b23a0f299b514519cb180fffc0c6b07cdc2502167a956f615cb841720954e9a7ca6a7626b53f17fb416130ab25a3a5e75c210088d4ea3bb8560bad60a34ae44e7de04e12f4edbb5b497cc5716cee3ccb6613794464e31867df56cd0f7747bffa55f8918ca9bb68c895a126e77c33b09c83f2879eb1ffbb7759a3edefb2b11c80f8b1a0798f75cd6ef85c9f41d675a09bfd62be4b718b83b985b491e5b3cd422c27b29b42e93ebb112809e1e0"}]}, 0x1, [{0x9c, &(0x7f0000000380)=@string={0x9c, 0x3, "cdb342cb70c44f79a4ac438505b0bf74d9b69d5c8b33397db6300b111f08c549c0454f44feee706ebfac306b9713ffea8b24c4a5aeaf9a5172a2d748ffb05cb15d1c9f8f5932a605b7070ea51073622bd3d3541a7c5cc70dcaa0e287e98ea2387dac5748995d51c172a202fcbf887e0cbc530f8bd178999b963b7e32ffb46d5e2f1a8e8c5e8b5eec3a12b2d7c835f4d8ebdaac56c82a06451d91"}}]})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

17m42.765596007s ago: executing program 4 (id=2600):
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
accept4$packet(r0, 0x0, &(0x7f0000000000), 0x80000)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xf)
listen(r1, 0x8)
accept4(r1, 0x0, 0x0, 0x0) (async)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) (async)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan0\x00') (async)
syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan0\x00')
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5ec", 0x36}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf", 0xe3}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507", 0x70}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x5}}], 0x2, 0x0) (async)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5ec", 0x36}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf", 0xe3}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507", 0x70}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x5}}], 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x29, 0xd, 0x6, 0x5, 0x9, 0xe, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x8000000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x9, 0xc5]})
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

17m42.518205272s ago: executing program 4 (id=2603):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x378, 0x0, 0x1b0, 0x0, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0x0, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x3, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xff, 0x0, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @remote}, 0x3, 0x0, 0x0, 0x3}}, 0x26)
socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000010)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x1, 0x0, 0x2, r3}])
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0xa, 0x5}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000040ac05240300000000000109022d00010000e80b0904000001030082000921fd7f000122e30109058103"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, &(0x7f00000006c0)={0x44, 0x0, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, 0x0, &(0x7f0000000540)={0x20, 0x81, 0x2, "6db1"}, &(0x7f0000000580)={0x20, 0x82, 0x2, "258b"}, &(0x7f00000005c0)={0x20, 0x83, 0x3, "3ae988"}, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000680)={0x20, 0x85, 0x3, "c9f762"}})
syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

17m39.46142556s ago: executing program 4 (id=2616):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x1)
mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x83000000) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000080))
ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000140)={0x50, 0x20, &(0x7f00000000c0)="782560adfabb114cd2d0a9b90967f7731cbf916542f1d6fc0fdc8b5713b7c44db384aed75e3cbc8c5d872b9fe951f587267902a1e0875dbf4dbca6822c1e0f36cb086201348d4891217a223ed48985435f14571faa", {0x8, 0x9, 0x35323645, 0x8, 0x5, 0x7, 0x0, 0x1000}}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'}) (async)
r3 = geteuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>r0, {r3}}, './file0\x00'})
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)=<r5=>0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000240)={0x200, 0x6, {r5}, {r3}, 0x1, 0x4})
getpeername$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0x75, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex=<r8=>r6, 0x2f, 0x0, 0xeb, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000780)={0x4, 0x3, 0x2}) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r7, 0x4)
io_uring_enter(r4, 0x301d, 0xc83e, 0x0, &(0x7f0000000800)={[0x101]}, 0x8) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x8, 0x0, 0x5, 0xd53, {{0x2b, 0x4, 0x3, 0x35, 0xac, 0x64, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote, {[@ssrr={0x89, 0x7, 0x69, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x56, 0x3, 0x2, [{@loopback, 0x28}, {@private=0xa010101, 0x1}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x101}]}, @generic={0x7, 0xa, "480f39b2382362cf"}, @cipso={0x86, 0x16, 0x0, [{0x0, 0x8, "ec4e2d82c1e4"}, {0x2, 0x8, "6ca38288580d"}]}, @timestamp_prespec={0x44, 0x24, 0x24, 0x3, 0x8, [{@private=0xa010101, 0x1}, {@private=0xa010100, 0xfffff001}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @timestamp_addr={0x44, 0x24, 0x4d, 0x1, 0x6, [{@multicast1, 0x8f}, {@multicast1, 0xf456}, {@local, 0x10}, {@multicast1, 0x108}]}]}}}}})
r9 = open_tree(r4, &(0x7f0000000980)='./file0\x00', 0x800)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, &(0x7f00000009c0)={0x0, 0x9d32, 0x300d}) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r4)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r11, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000b80)={0x0, <r12=>0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000000c80)={r12, 0x6, &(0x7f0000000bc0)=[0x8, 0x3, 0x6, 0x40, 0xd, 0x0], &(0x7f0000000c00)=[0x8000, 0xf, 0x6443, 0x9, 0x0, 0x7, 0xfff2], &(0x7f0000000c40)=[0x1000, 0xdda4, 0x6, 0x6, 0xc2a4, 0x1, 0x8, 0x7, 0x6]})
ioctl$F2FS_IOC_GET_FEATURES(r9, 0x8004f50c, &(0x7f0000000cc0))
read$FUSE(r2, &(0x7f0000000d00)={0x2020, 0x0, <r13=>0x0}, 0x2020)
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000002d40)={0x20, 0x0, r13, {0x0, 0x3}}, 0x20) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000002e00)={&(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002dc0)=[0x0, 0x0], 0x6, r12, 0xb0b0b0b0}) (async)
getsockopt$IP_SET_OP_VERSION(r9, 0x1, 0x53, &(0x7f0000002e40), &(0x7f0000002e80)=0x8) (async)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)

17m39.334146146s ago: executing program 4 (id=2617):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net\x00')
fchdir(r0)
exit(0xffff)
pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00')
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0)
ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x5, 0x8, 0xff, 0x9}, {0x9, 0xfffffffffffffff9, 0xa, 0x6}], 0x2, 0x20, 0x59, 0x7})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011067ba5f281a482ae886d1b5decb723b2d03cd447308c2153c003e8a01020301090224000105bc800709040000022b89d9940905051000020401ff0905070040000202048e77d4de9ed3eb969e682aa988bdb64030"], &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0})
unshare(0x3a040100)
unshare(0x40000)

17m39.114208369s ago: executing program 32 (id=2617):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net\x00')
fchdir(r0)
exit(0xffff)
pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00')
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0)
ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x5, 0x8, 0xff, 0x9}, {0x9, 0xfffffffffffffff9, 0xa, 0x6}], 0x2, 0x20, 0x59, 0x7})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011067ba5f281a482ae886d1b5decb723b2d03cd447308c2153c003e8a01020301090224000105bc800709040000022b89d9940905051000020401ff0905070040000202048e77d4de9ed3eb969e682aa988bdb64030"], &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0})
unshare(0x3a040100)
unshare(0x40000)

15m8.167111114s ago: executing program 0 (id=3504):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x0, &(0x7f0000000180)}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4048080}], 0x1, 0x44)
pselect6(0x1d, &(0x7f0000004c00)={0x4, 0x1, 0x5, 0x0, 0x4, 0x1, 0x422a, 0xfffffffffffffc03}, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="acaaaaaaaaaaaaaaaaaaaaaa08004a00003c00008100fe0690780a0101020a01010200000002000000002101782a1ad8ffbf17eb5b2f410baaf3fe4a5ec870e19f911a3cab4c36fea92582c497d20fb31d20b1c3665e49295afb77421f7225c27279b4c595e95f3818577a3ba23ceb849f15d9f542b280def3792372171ed62b8dc3b084ea1bf7f0e4059e12959f430bd7634653cf53bc1f316d20870d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010)
io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46"], 0x78)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}})

15m7.270024922s ago: executing program 0 (id=3515):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}})

15m7.186265132s ago: executing program 0 (id=3517):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file1/../file0'}, 0x14)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76632cb010852f426072a", 0x2a}, {&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3f9bc6c", 0x25}], 0x2)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22dffefb420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}})

15m7.051157749s ago: executing program 0 (id=3519):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
syz_ublk_setup_io_uring(0x4c21, &(0x7f0000000900)={0x0, 0xb1df, 0x8000, 0x3, 0x1da}, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e22, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)
r5 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000080)={0x8dfb, 0x32344d59, 0x4008, 0xc95e1a, 0x3, @stepwise={{0x18, 0x6}, {0x6, 0x80}, {0x40}}})
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x50, 0x5300, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @const={0x9, {0x4, 0x9, 0x69, 0x615b}}})
syz_usb_connect$cdc_ecm(0x1, 0xd2, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x1, 0x1, 0x1, 0xd0, 0x2, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x2, 0x6, 0x0, 0x91, {{0x9, 0x24, 0x6, 0x0, 0x0, "96619175"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x5, 0x7, 0xfc}, [@mdlm_detail={0x4a, 0x24, 0x13, 0x4, "72a979d46a575a2ce45f2cdc546eca9bfbc0a83c8db79b5d7bdc6ce3b8744f2c2dbb94c364cb2193229f0e0cf9deb2e4368f7a5b15a27c2b74a097c8ecc1c0df6517610c176b"}, @mdlm={0x15, 0x24, 0x12, 0x3}, @country_functional={0x8, 0x24, 0x7, 0xd6, 0x6, [0x8000]}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x800, 0x1, 0x1, 0x3, 0x101, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x9, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x0, 0xc}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x5, 0x4, 0x37}, 0x52, &(0x7f0000000340)={0x5, 0xf, 0x52, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x5, 0xf00f, 0x6, [0x7, 0xc000, 0xf0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "17fe50afde3ba92d1598d1710804e846"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x2, 0xf, 0x400, [0x3f0f, 0x0]}]}, 0x5, [{0x6b, &(0x7f00000003c0)=@string={0x6b, 0x3, "3276fe6a5fa1db1f6d4b89b69e2de82781692282643e4069f25a38c6f4dbed274ff45d353a55f1104011fb6e08601a1f2eaa5c4f87507a3103b47361fae1f19bbb18a0cb530d1dd2e761e5ec749ec4fb39ae02a47860370ae43bc46a9d0dd73324b3d22b33f2b55f85"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2801}}]})
r6 = socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r9 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901)
move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)=@deltaction={0x29c, 0x31, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x39}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xab}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x180}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

15m3.946806362s ago: executing program 0 (id=3540):
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x40000000009)
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_overlay={0x2, 0xd, 0x4, 0x70000, 0x9, {0x0, 0xea60}, {0x3, 0xc, 0x7, 0x80, 0x40, 0x4, "080000ff"}, 0x4, 0x3, {&(0x7f0000000140)=[{0x7, 0x0, {0x16000}, 0x10001}, {0x1, 0x9, {0x1}, 0xe0}]}, 0x7fff})
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0xffffffffffffffff, r4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="2500000000fffffd7f00000afd7ce86e7d2f1515c1360000"], 0x18}, 0xc4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8001, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="0400ec0050002d"], 0x70}}, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

15m3.665899708s ago: executing program 0 (id=3542):
socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

15m3.39503791s ago: executing program 33 (id=3542):
socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

8m57.566919776s ago: executing program 1 (id=5788):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
syz_clone3(&(0x7f0000000340)={0x42107480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0))
timer_create(0x3, &(0x7f0000000480)={0x0, 0x2a, 0x2, @thr={&(0x7f00000001c0)="e88b56f96cb5185e085c170ac47ed230941a9d38457a8bb41ff1df4bdd4ead7f6956081b7c8a779c0a8194c4efc675ec526ab66e7bd9dab39c691e58ae7379d360a10c8f8a0ee5a6caa1074a37e0a08beb970be51bb0fe663d1f6ee211c22b3bffcca083d235c0eca7b2f1fb2cf474ece493685e7c3778b755a756beddfa0a3971971071e99a00db777483516bd817af9a2fc3d3793cd855b615ddffb0538863bae9506d7a0add060a5558e79277cb91c64ccae2cc09582500e9513396b627552ada407680bc3a6a11a586b94da5f4eff520e424ab6937233835618bcc78849b4f5ac97c1dd5d3ce7dfd6782a0329865e1be", &(0x7f00000003c0)="5c082850e44d471f5fcea0cebf4623de379584bc7b80c004a94d3df3f95f6f4ce48c5dfde2beab9d9e6533ae69e58de96ae582f4b192e3dda5b3116402b0fd020451f045517cf56229a9650482bb6a3b87dc7e1a933d16f96b82359f1166cf7d87f61a700e0af354605971be964f20f20397410cdce19f4f67fb4f7d8781e62b3db8b09cf3bed05e4d2f826b26845e713b68b63164183267fcd34f25bf467ff44d4cba831a5b472af356f8ea0a2479"}}, &(0x7f00000004c0)=<r4=>0x0)
timer_gettime(r4, &(0x7f0000000500))
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x77, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002000000106307302040000102030109026500030168c0c00904000000010100000a2401ff0f0f0002010205240503"], 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)

8m54.287803821s ago: executing program 1 (id=5801):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000100)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x4000, 0x0, 0x1, 0x0, @private=0xa010101, @local, {[@generic={0x1c, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0x9, 0x9}}}}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r4, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000240)={r4, 0xc89, 0xd, 0xfffffffa, 0x1, [], [0x20000005, 0x5, 0xffffffff, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffff8, 0xa679, 0x1, 0x7f]})
close_range(r1, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x9, 0x6, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x80000009, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x10000, 0x10, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x440, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x6, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100008, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0x1, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x283, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c0000004a0003002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x20000010)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000002080)=0x3b, 0x23e)
signalfd4(r0, &(0x7f0000000040)={[0x40000000000000]}, 0x8, 0x800)

8m54.154048139s ago: executing program 1 (id=5802):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r1 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0xa8, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}, 0x1c)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x6, 0x4)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008005}, 0x20048004)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x8, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m51.129976835s ago: executing program 1 (id=5814):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000d40)={0x1, 0x0, 0x98, &(0x7f0000000440)={0xf46, 0x5, 0x10}})
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffe)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0x23, 0x61, {0x61, 0xb, "91e0a24fd2413e9b0eaa61889e93a3ba6457367ad4b0e40953fea0888696dc96d3d12afd1d72e9d5dad0dd9b153a69533275f84406dc7a166b5a9852fdbde00c2d2ceb8cbd12b5eee292d2829418d825c09a6dcc8e26442712206c42489fea"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000280)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "afad8eeb8eadc6bf2fd9ad10ad41d659"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "0aa542f2277ffa39f4485b3328a98f5c"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0xff, 0x6e, "2a3c40df", "122dd00d"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x4, 0x4, 0xff, 0x6, 0x1}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000c00)=ANY=[@ANYBLOB="2017013c5091f25fe339561f2338c2b89ce332408c948b27f5d6c889fccd180ad88344a181d60c7044cebb9f807815a42e300af217df9c49539b7ea0701028d2c10338a53bd200f84d77f65426280871c48b4c5244477321cbd3f3c56e760fb9569b49181f195002f48ccfa8d87672dba6b10ce1aa7673cb508d3f0eaffbd9e3a34954fb4efc1fafadf8eaadffde00000000000000000000a820cc496000bb95d4caedf7fe9555f2a9603f680b569f19db26bf3980088ba653e6017843f7faf8d1e99edee5656a27cc530b92da13a7a65aefd990c936ed4a3fa7c92b20fa1b540d68f89cb9abdcf8d6a4d1f096a54b79e87cec67f15b8f9e03373030760a16950a09435b7f2657ac9d529cd6"], &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x40, 0x1, [0xf]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "8225"}, &(0x7f0000000700)={0x40, 0xf, 0x2}, &(0x7f0000000740)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000780)={0x40, 0x17, 0x6, @local}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "61d9"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x6}})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8, 0x100, 0x94, 0x7, 0x38b, 0x7f, 0x400, 0x4, 0x5, 0x800, 0x2, 0x9, 0x8000, 0x81, 0x3b], 0x100000, 0x20002})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41)
socket$pptp(0x18, 0x1, 0x2)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x1, 0xfffffffe, 0x0, 0x7}}]})
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220)
r7 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000, 0x3})

8m50.457453639s ago: executing program 1 (id=5816):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r1, 0x2285, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r3, 0x4000000000000800, 0x8000, 0x367, 0x2, 0x1, {0x0, 0x0, r2}})
io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
dup(0xffffffffffffffff)
write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

8m50.352724303s ago: executing program 1 (id=5818):
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8002, 0x8}, {0x10, 0x9}, {0xffe0, 0x6}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES64=r0, @ANYBLOB="00000000000000000000004abe5640aa1672b43a9e06a6070000000000000000002eba52cfdcf78fe4f935a51548225f6b9b7ceb19fc143310b9813b3e025e063de4e85acb9f8be2d544bd9e8455d10500000000000000c19952cfaa10c2e3a262e3ff638eeb74d3ad551b9b35437ec36c4fa52733cc74e9c00c1a8492b4e00ff8ef8130a206685be2e63ffbd61de90b90d88fc344d68dafe2617f7a1771", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = dup3(r1, r1, 0x80000)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4)
socket$qrtr(0x2a, 0x2, 0x0)
r3 = syz_ublk_setup_io_uring(0x16d, &(0x7f00000002c0)={0x0, 0x83f0, 0x10810, 0x0, 0x3c3}, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400))
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000580)={0x0, 0x1}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa7000000000000a702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf0f29e9a52808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca87fff201588427bb65ed3d5e7a74e9b5ece44067d4a9875a210bc1fe72b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e5020a71023bca1194ad87cade480ba3dce8f3244d716d1cba50a8165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d224527a1ce3afbff66f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x5e80, 0x0)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0, 0x19}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x6}}], 0x60, 0x45}, 0x0)
ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x32, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x1, @uvalue=0xd093}, {0x2, @uvalue=0x8}, {0x1, @uvalue=0x6}]}, 0x87}, {0x15, '\x00', @data=0x2, 0x6}, {0x38, '\x00', @data=0x2, 0x6}, {0x3, '\x00', @data=0x6, 0x2}]})
fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x1000000000010001, 0x7})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000200))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)="b1b70e1e7c709d44a654032a137645", 0xf}], 0x1}}], 0x1, 0x4040)

8m50.241497607s ago: executing program 34 (id=5818):
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8002, 0x8}, {0x10, 0x9}, {0xffe0, 0x6}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES64=r0, @ANYBLOB="00000000000000000000004abe5640aa1672b43a9e06a6070000000000000000002eba52cfdcf78fe4f935a51548225f6b9b7ceb19fc143310b9813b3e025e063de4e85acb9f8be2d544bd9e8455d10500000000000000c19952cfaa10c2e3a262e3ff638eeb74d3ad551b9b35437ec36c4fa52733cc74e9c00c1a8492b4e00ff8ef8130a206685be2e63ffbd61de90b90d88fc344d68dafe2617f7a1771", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = dup3(r1, r1, 0x80000)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4)
socket$qrtr(0x2a, 0x2, 0x0)
r3 = syz_ublk_setup_io_uring(0x16d, &(0x7f00000002c0)={0x0, 0x83f0, 0x10810, 0x0, 0x3c3}, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400))
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000580)={0x0, 0x1}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa7000000000000a702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf0f29e9a52808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca87fff201588427bb65ed3d5e7a74e9b5ece44067d4a9875a210bc1fe72b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e5020a71023bca1194ad87cade480ba3dce8f3244d716d1cba50a8165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d224527a1ce3afbff66f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x5e80, 0x0)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0, 0x19}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x6}}], 0x60, 0x45}, 0x0)
ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x32, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x1, @uvalue=0xd093}, {0x2, @uvalue=0x8}, {0x1, @uvalue=0x6}]}, 0x87}, {0x15, '\x00', @data=0x2, 0x6}, {0x38, '\x00', @data=0x2, 0x6}, {0x3, '\x00', @data=0x6, 0x2}]})
fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x1000000000010001, 0x7})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000200))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)="b1b70e1e7c709d44a654032a137645", 0xf}], 0x1}}], 0x1, 0x4040)

7m32.582165453s ago: executing program 6 (id=6315):
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000480)=0x1c)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca", 0x15}, {&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000000)="4274aad7aa7926ee12814c8f6ea8d8db4317e4954e00969c9a83bbbcd8ae7df28dd2f41ef596", 0x26}, {&(0x7f0000000080)="45bce491eb54ac5324", 0x9}, {&(0x7f0000000700)="82b35c391233ec5c4bcae6bc5cac224f0316f5e4de9b940e99aeef2a1d8d0cc89de4ddeb4ac5d6bf88a5c72a4599b8d29cf1a9c74d40b1219181ff4ac8aa59216a58ecc8ae71cf82b386dd2e7e666424c81290a4dcaf00f06e94d2e436dce94b6397d369a937eb363069d834e0612985b6aec238252ed513d874ab830fad872dd6a270ed0311b4ea41", 0x89}], 0x5}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7m32.54294033s ago: executing program 6 (id=6316):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000700)='source', &(0x7f0000000580)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0))
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44)
r4 = socket$kcm(0x21, 0x7, 0x2)
sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffe7}, 0x4c004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x4c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x2010, 0xffffffffffffffff, 0x40eae000)
socket(0x1, 0x5, 0xf06b)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0)

7m31.022775053s ago: executing program 6 (id=6332):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
syz_clone(0x400a0000, &(0x7f0000000040)="79cbe2cbe0217f4eb4d8e19ff95187fb1fca7ac20834da7f35aec2c6df35f52cc5f7c3feb78cb7e3329a69f1112562", 0x2f, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="576bd168fac73d4c0b2d614a9723e9e6a9be67c5fa3619cad1e51446d4a295208cd5df03021720365c4219d49b3f0ecd7e70135b0119bd79b3f55ef7714621ce3eeb2015f34d2d6593a4145e10bfefd81a2d34572eb21d6310e8a707494280187d24279ce93ef20f74824e508c78096c46e156a52779917330e676c115c00a6a1ac2fcf43e30354f2034bf201f89a64d26181cb5c31897d5172131a9ebbb01cfb4cf62242a82e4ea58c188eb79cd1a5fdec2736de1707ba2")
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = dup3(r2, r0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x78}, {0x3, 0x7f, 0x92, '\x00', 0xa}, {0xf, 0x0, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x0, 0xfc, 0xfb, '\x00', 0x8}, {0x8, 0x2, 0x13, '\x00', 0x9f}, {0x8, 0xa, 0x6, '\x00', 0x3}, {0x2, 0xa, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x56, 0x4, '\x00', 0x7}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0x8}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x5, 0x8, 0x20, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0xb}]}})
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000019200)='net/route\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000000), 0x4)
setsockopt$inet6_buf(r4, 0x29, 0xd3, &(0x7f0000019080), 0x0)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000200)={r4, 0x0, 0x0, 0xfffff000})

7m30.709745153s ago: executing program 6 (id=6333):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)
fadvise64(r0, 0x1, 0x8, 0x1)
getsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001100), &(0x7f0000001140)=0x4)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
readv(r0, &(0x7f0000002380)=[{&(0x7f0000001180)=""/105, 0x69}, {&(0x7f0000001200)}, {&(0x7f0000001240)=""/193, 0xc1}, {&(0x7f0000001340)=""/21, 0x15}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x5)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r4], 0x14}}, 0x8810)
splice(r4, 0x0, r2, 0x0, 0x16a, 0x1200000000000000)
ioctl$TCFLSH(r2, 0x540b, 0x1)
r5 = syz_usb_connect(0x1, 0x24, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1], 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$rtc(&(0x7f0000001080), 0x7f, 0x8e110aede39e6eff)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r6, {0x3ff, 0xc7ff}}, './file0\x00'})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180a0000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b00000018010000646c6c2500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000200400056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40008c0)
sendto$packet(r8, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0xffe8, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r10, 0x1, 0x4, 0x6, @local}, 0x14)
r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
ioctl$KVM_GET_NESTED_STATE(r12, 0xc080aebe, &(0x7f0000000000)=@svm={0x1, 0x1, 0x1080, {0xdddd1000}, {"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"}})

7m27.563809357s ago: executing program 6 (id=6343):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0042b9a0ec6bfce6ea9626300000000424060014002b8008000100", @ANYRES32, @ANYBLOB="080003000400000008001b0000000000"], 0x3c}}, 0x814)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80441, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d05}]})
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/notes', 0x1ed00, 0x182)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c00058005001900031400001400030062726964673bb73d4f5fbb12a1300000f2c5710fc55b63371cebca11f1344d5b5ada67503e3877d05d029dca5443d820b394af305ec2956664a4519dfde85e4180fa5cb0b16df276a4bacfc671c81788fef8e864d1d8c7fe0acfc13fa527cb5dba2ad12a4a6dea6eef3a4db0c72cc48166c64e0b394685796031fa37f1f2b3c098ffafa4756e494668544db942ec0b4fffb04b29bed3af37098d1dc3a506c2ea4cf69966755d16f5a8883110"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYRES16=r1, @ANYRES32=r9, @ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/address_bits', 0x82002, 0x105)
r12 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000000c0)=0x6, 0x4)
ioctl$SG_IO(r12, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xac, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="4800e75eb700", 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0x2, 0x40, 0x3, 0x0, 0x30, 0x19}, {0xeeeb1000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x2}, {0xdddd1000, 0xe000, 0x8, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0xa, 0x2, 0x43, 0x3, 0xfb, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x4, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0xc, 0xd, 0x88, 0xf, 0x4, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0x1, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@text32={0x20, &(0x7f0000000080)="0f01710f660f38062f0f21a9c4e1d81555000f7823c4c1ddde9bc4c20d3ba89d9800008fe978d1b600400000c4e27d32cf363e650fc75b71", 0x24}], 0x1, 0x1b, 0x0, 0x0)

7m27.136547452s ago: executing program 6 (id=6344):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000740)='X', 0x1}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000400), &(0x7f0000000300)=r6}, 0x20)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0), 0x3e80}], 0x1}, 0x900d0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24000017}, 0x44001)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x184, 0x7, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x92, 0x7, 0x1, 0x0, "b9974f4cc9bcdc6273680feed923126d1f9742c495e2e731a9ba67d2ff75dbbb85d64de4d92bc3719de8827db85ee327e70d8a8b9fe619df211512dc3f25907aabe66e1ddcd700066313c99bb1e6b1154d33b0378a791db085cb7556ae6f62ca293788905ba7b10b017c7ef8c4176d6dc4ea0353fb09621be81a67546e71f56bf14a52b0036551906e2c65476bb4"}, @NFTA_RULE_USERDATA={0x90, 0x7, 0x1, 0x0, "e50c64d2a1953abdbdf509031a8371e9ca935622e094b7846e51a3f4bce680bc0873cac6ba43b5e21689dd4047dc5a90b57abec7f7a639dfd187e3bcfd6336888b3fd38f603503cd95397ff832f0638878c3f4574b5f78b2546ff89ea4752864e0ce8f39421ad39e0db9d5a945c5f929fdee29382000b859fbe267290a9717d36d58cf16610ebe066a0bea7c"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x28, 0x7, 0x1, 0x0, "18b7d36537712309dd642e877cb1bb431e4d92aa1426e3cd0148cb2efbcdcbbf6ab7cf4c"}]}, 0x184}, 0x1, 0x0, 0x0, 0x24048060}, 0x0)

7m11.808802221s ago: executing program 35 (id=6344):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000740)='X', 0x1}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000400), &(0x7f0000000300)=r6}, 0x20)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0), 0x3e80}], 0x1}, 0x900d0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24000017}, 0x44001)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x184, 0x7, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x92, 0x7, 0x1, 0x0, "b9974f4cc9bcdc6273680feed923126d1f9742c495e2e731a9ba67d2ff75dbbb85d64de4d92bc3719de8827db85ee327e70d8a8b9fe619df211512dc3f25907aabe66e1ddcd700066313c99bb1e6b1154d33b0378a791db085cb7556ae6f62ca293788905ba7b10b017c7ef8c4176d6dc4ea0353fb09621be81a67546e71f56bf14a52b0036551906e2c65476bb4"}, @NFTA_RULE_USERDATA={0x90, 0x7, 0x1, 0x0, "e50c64d2a1953abdbdf509031a8371e9ca935622e094b7846e51a3f4bce680bc0873cac6ba43b5e21689dd4047dc5a90b57abec7f7a639dfd187e3bcfd6336888b3fd38f603503cd95397ff832f0638878c3f4574b5f78b2546ff89ea4752864e0ce8f39421ad39e0db9d5a945c5f929fdee29382000b859fbe267290a9717d36d58cf16610ebe066a0bea7c"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x28, 0x7, 0x1, 0x0, "18b7d36537712309dd642e877cb1bb431e4d92aa1426e3cd0148cb2efbcdcbbf6ab7cf4c"}]}, 0x184}, 0x1, 0x0, 0x0, 0x24048060}, 0x0)

10.030230886s ago: executing program 8 (id=8727):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, 0x2, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x1, 0x2]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000850}, 0x80)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x4, "216827dd"}, 0x0, 0x0, 0x0, 0x0})

8.307482481s ago: executing program 8 (id=8735):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100))
connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0x1}, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0)
openat$cgroup_procs(r3, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x5, 0x1)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000002ac0)=ANY=[@ANYRESHEX=r4, @ANYBLOB="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", @ANYRES32=r4], 0xa8)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x200)
ioctl$FE_READ_BER(r7, 0x80046f46, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x2c, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xf}}, [{0x8, 0xb, 0x197}]}, 0x2c}}, 0x240400c0)
r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000280)={0x9, @pix={0x8, 0x2, 0x38416761, 0x5, 0x3, 0x9, 0x1, 0x7, 0x0, 0x1, 0x2, 0x5}})

7.93149332s ago: executing program 2 (id=8737):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x644c00, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000040)={0x71, 0x1, 0x3, 0x6, "f29e4d1c237565a55a353a59c00de9953e1c06dac491d5ef4015fad114bad28822949ed1da908fcd1b1fbad63f6db37c218181573b9fef5d4821e2aa53a785a2f6bcf3a57790edada0ee89668821a4f2d9900082152bab94cf"})

7.710395791s ago: executing program 2 (id=8739):
ftruncate(0xffffffffffffffff, 0x7000000)
r0 = syz_open_dev$video(&(0x7f00000075c0), 0x9, 0x8100)
ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000008)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
rmdir(0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4094)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {0x2, 0x8}, {0xc, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000)
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_UNMAP(r13, 0x3b86, &(0x7f0000000900)={0x18, r14, 0xfffffffffffffffa, 0x1003ffc})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r15})
socket$nl_route(0x10, 0x3, 0x0)

7.282395853s ago: executing program 2 (id=8742):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xbd, 0x6})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10)
sendmmsg$alg(r2, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000001c00)="5985d20392a438a118753a61ccd1d0e83101f02653a3db12a8785d9bcc59b58251f9ae571dc6a2d023b82407fbb8ae52a24b445059869df6095b826013c10bb7745d9edc0ef211452945180b52cc3986fb74d70cdc0194be37b376d2d4798d4e4463d042b1a462e80d80915fcffca56f2e0f5a6b6bff7e43eb6c80c1a8e85c077f4e980c3aa7b4b34562044059224e7280a86d55356ca279765d0943a185ac585ba7355885a40b0f4d02e5afe7b154deb20048d62307273f7069b86987af5b7fd9272d1ed5a9891e493deafa8a98f30c86803d00028221b891d3ae3437e26e9e0bbb0c152036ffebc06c5aa3fe55480e68414e7283793c5f93bf95ee471bf2b70abf696bb304bbecce852fd81439df022489675c1827a96f824378a80ce5338143bbc8fc3b1955bba34f2121cf485212c7cd8b50d81382605d28573b46b376e1092560f6d76c8ee2c4ebd9cf88665cec5acd5c2bb34ed1ce0338a7c1c8583914be1ef3a054e91f35a82147c0ef819f7971e12c18c5314df9e06bbbea133f82e638fd4646fb6a517fe75130f65392e8e1456fff3ae5cc7298b7bd6e7ea141808b4b4ec6930e7ee97e802a9a5c37c7bfaf6f8fd113b1e713e9d07cf0ddddf91965c29dbcc7a6478a071efe498458ee8428baeacd171ca321a88863d747ae8ba633f835401e66c831bec8d66ede3a6be8c9d6cd2e543df191a661d934e115c49db11cd3382aa4c378ea27b37078e4dbd52d5237873388f0b114dbcd77332e3cae456d8a96465a763709b9e33255b9648f186ae462f585dd729676a66e5dcba00b76ef82b9926d820d1f81f2ef2bdedb9727bc9b8420a16af0a3d49bfabaf53637b5712cd1efcfecefea443d99749398406a15af44464330fcc7ae05bc1319a403f17320384adf670171b10572b7a3c29224327d4da0cc98605adb69b143b75f495c3ee34b0e2df6119cdecfc9c14adac77c00225ba394a33c2031f7fd6fd5c51603133fd282b714d0206a61dcbfd9826847751c0828c7258b75739fc0f26cb4f5037652f608bfd156660b8ca43069fdfd27dc658b768b0842a71bd2191064e7c343710b26b4f94900dea847881b9269a250b165aa5b32cb02e853e01df7283f5aae557f555cdd110ffa52c5c702cb214934c5aa8a99c87b2ec9dd6717693827029ad477fa822c84c83303d04a6db313af73b83ef53d0caae2a0de16e13746d092a2e6260638245c57bf2904740ef4d4385b3fd888ea17795c712dbce6a559c71a8425deab805f99ec9f16cf268c5c6cb6cbbefe71115e62c85e9a0940b96a19a49b4a9373250c5b7a2446b4393aaa144ba32a9a0fff5cffc515d48691911a84ef869af3c3b08db4d8e44279b8ecf0753e88e5405897b4050db08c254cf0ff5b69a045bc62049218a573c6a395148454953a72768ddbd4326a0d247a0a4571ea894875a2f899f47487c3d2b62e51d8239633d3421fd79b0c32d05b99256614accf64ee6e2d51a3bdd2210d000000e6ac68159923977200feba975e290d768d7255416a06c8f161fa39f7a04c4651d420f1d96703cb3773bd2a2a0c37b1603151c4cc47f0699900849509534f8ec5131cfee5d96d598e28d571328ca037a34ba31aa5e6d51fe2604f8316545f129f0ae8e0856888d3315ed22f6246852df12d67e3a64e7891df946b81495189341e9401406037cfb31490fcff4fc0406f2f70e2cabcd0fb8adeec4be909526dfa252a5aee0435df3a07e0897b86eaff8dd190f466b2a81e8a37ffb577bfb5feddefb292809c1d925c2f9cf27380dc78e74d74ceb1d31ebe84bbd2e6ce48dded3c55203966896ad1458d3d3095b9bacf250416ee27aa73a5c5d6ec6b2c9c323759ffe97df44481f796f4762e3245c0a88fd129dbafde688f2c57445665c623025a76748a9931a7f67c53faa4a155c9ba5caa38986462e48db7c580749bd372955244c9d4a17631f24b9b64036de9e97147b7056dcb54652fca36a037d0c3f754a303c594d8e04f706fe75e8f19607e6cc94ac60d83b4fc620a00b52605323391f3e005dcdb9be443b59d89760b605f32c07bef27a326863e07d770e7bb2853354f6404a83d099559e5a25849bd16c6381354ec45df14e3e16099a0cc299256118be93e47c025b01a2fe899c81411c8f6b74808562ecb2f91b8688b1617b93516b29162bf71db6e2dbee1ba98fba3cf6e7f56d90fbf017d2d81d2411515d73272bc167a55770deacb3d79dcfa1cb9c27e27585b521d3900e4fb280c1ba1f9e956bd1326bf162255f66b0189ae648a402e48cc61fdd20fd3a09070c88167730bf80b34cecfcb37a4046552d1b345f66c97fb67f1993990e55e43ee58372455864de62d636d836477fca1ca355bce2eed04ca30751ad642e61862d1e29886b9acc5be9d6ab7e6eab7c89a7ebde051116ae5f12432caa8228c4dddb5221f7f5fafeef8d397ee0c7d94dfcd2fade21947c98bd89b071f4e24dfb43b46f1db5f1276d8d71e3cccca479cb612be6bd02e6f188403b85022ed0e9d42f9c4531a11659bfd144b4a49b6659be2a548658a66d7faa44622742d7c42d7f90caa2ca3a24d10c993a9b1c814f4e0b735615cbd9c00d6bf444d0ae1071f2b74023d2e53b9d2b79f6ddaeadcef3bcc5d13971b7f9c7e72d1a431e1d79234e1dab13ee758f741777d836905c7873de0192ecda15d3a224331fc2222f6793edd69da51befe4f772ec696e4e4e5deba877b52b91d8b7de4fd151e1009134cebf4a353e6219b21f131487b3fba0f4b7e39626c5c7583ed5073086ff735ce19cb786e8d1bf359b4c3a7bc29bbf9d441d914d7e842b88f0868d0f6a6fd41624271ad5e166d677ea5109b6c8e9d2fdfff9e944e9c9ad50b3cde7e3f229e2bbf81c6aaa7b7c8e5700362000b6509942bbed25253e0833a5f7a71975b780472ed6f3da3a2ba162f20b3b90d4a084acbb137129bbd9b65f3e9ba6886241d80ee90dcf7d64050d52e8550f21262a88395ca06b83a5b5d9c05426582c86fe7753019a71ecc84c59fae3239d195246306f153b301629fbc6bd6e3fbc6aff7d35d79c5c8046b61ec70e2b7356c9400477778990364091be2b74bdab711f5561ff137021fdf9e82a35fd5bf85673bbb2944cf1f36a2e25fa4dd948525621f7a14dc3c8d1e1f1ec9d334dddcf7f9487f3d3ec60106becfddc15ece3850215aa3231a543264263757c6417adde58eb6b624096a9759c8f7a1c9add4d374a4301a86fcc5c7b96e4e294cc935ad9315669d03b80522e5b7f6207e325cc5e9a33cdd8d5512aa388e452674a936826d47f23097d33c4e4a1f2f0802a2b9be2a608f2f0ff27f6b041d70d268f848687d45e6e510691ad516c7d7038d4153fb30415e425a4cb9d879aee8ffbca65df46876151af9a583d9a3fb331fb1b616a8007fddba31bee77e420172cd2a2a140a3376db47d7336d958bfa6f4ae80f78310c9043a184258dbaa9bba0c2482d7eb70c2bd94d52587fb92fd80c58110b05ad6eb1623009cd263deb3cb219bfde713ef738dfed0b1c6254177d939e8c358cc69ddfa3e31aa4c3cbfe384d96749217ff3b2b45a15f34403fe327aa2f805d1eaf7ee7f187070032eceba18a11e4ccf7c2e3a4d5c72d1db7b0bb5dc2354ae7eb27dedb91a5571203835b482353950220ad39f21334135c6fdd22a71c6119ce5dfa292a71ad296b141663210872c192aa228e21068d717235f1186234de39e69e5904ead38314ef69b86a656371d9987d327a7064fc6e1acd7f822165b1e42da9bff573db1eaf2563552bf6dbb6591031883f5cf7e22d1f2e2522e5bb88fc4bdece187d7f2612886a7f314895d43dd2c9e1b731aec39014028590ea0c76f1cd7d71c96ed45ce31d5e38f38a36a95d54708875dd99d8612275450a700251c7f21742d31b9be6de5fcf63b7b639ff746f31537694b3005ddf6cc8375f25bd782bc784943b72bd19f938a449fe0a617b5b1430a4d506e3bf0a1f118b6e45e9e6a3515efd9ecd1a964c5459921b01a0cacf0d4e4659f06ee2e53123a2241b583072f91af6b82f51fa14622ead00697b2f511e7f54cc4e8b015bd03b4ebae849ec9f7738d945450ff8363aee60678b80a86e93326f6a87d73b1a114f6f6186e2a4365d66d5b74df15280c4060ec847da5a1baf1706e7a373f2ec73ad755bffdd5813cf5ce8cf8b07d4ac8b324293b7248145b35b13fe638f902c5e8147084c221591cefa221573080f49ed7b3479e9c81c4ec2e5e8df89ce0266f6023327aae85f74fc70085398ca9749a1b8467d3d2d7bdcfc4bb9af62721a4cf55a5d2600210eeda03de3b9353725eb991583d7226debf7e3d4b06d89c41599b3687d56571c6c810882e1060510b0e6480b4e3d8705c858e24897dd8bd936f9a16bd626b98dd55696aa2dea3c0a12a6b12f5befba90ea487134453b5a8e863b5446565730e9d84e019d664654568c3448bbddd8cccc15e4615addae0d732dafe6f54b229cd5689396720d0010dfea3f9e6d9793b51be5c4e39659e8eb604ec15ee7ae2a2961a8b815d9417795cdde0702d6cf7dcdc16f02365d7eee5dfc7a0a9ea3957672f00a209fb845e782777ef9e5c9e7aa7926bb93c3486a8612e222ddc9709d9a2acef6c60db859c4fd39f365bb22f90edd04f891fd3ccdff35c5eac56ec49d02063a7859aa14c938d575fb85cc26a3f3fb3ef4d8ce576e927dc54c27702aff904e133a6869ac4384ca6ce273d1a7f3b4ffb570dd097e607ade8eb8ca1d436733262b527c508e4ff7e09bb56432c36a38065c582210252efc06aa0d3fe0ea99e97e6ee88f80ad33bcb2cd0570b8f97488bfe09d4560b9ab44ec7ea5726d291460ab46d32922c1b37067425ff9abc8a4bf810879114dc266a575e1ddcbfd6ef2c51b624091b3ebe68ededfd94f883ae674b1f00be817a559b3c6376aa68f039628ae425191b7c7ba60e73b0fa3c4fe5533b4f8fe0b21f61a5f9e520e22cdbebd929048552b6d8d1d5c18fa9900b7786462e7e4d738e57485e9a6dd14a0fd37f0256613317df8ec3518c7eee50c59070a7276f8b0575426887f2cb5be122cc766a25a07132ef01611d0c2d3f16de29a8c0f39a3a5a3e9596b61fdd3dff97b95ff67b4798ddbc4b14e518bcc52cdd2d87605ce9d9c5f2a6d4e11d2f94575b0d5de72d0b97d0a2cf32b5465c6a4ddb62d61b97f2331341c9d448ec765180f858394f2c0b2ee982b9f867d73f97d0e0e3b275ef49c7c262c4d6f5fac787edafaa8b79410b1288a0b52afd93c8584ff9d61eddfa0cada98bd3c200fc708078098764bbe304c44d62eff132415a917c022c9f7466318017da7b4649eb0fae58fcb716a1f295d84dd9ec14218beb0372c041aaa4421a8f75eaef5115f0f32aca8fd30fde0e9e08972e23faf5381eb18c626c0ce920261461c3dfe7f1e8b35ca16f7283de3af4bba5c384e256cd369568214101a8e27c94531a81fe4fba595a4455f8724eebea716d1a4940b3d787fc4bd6ad8aa403fceb74f316fb5a816890646338efb6f13aba195f127aa1b1107bf303b1f997c74d6f4f664d708f58c3b3ca063825405ad7a61260debf4b220443b6537f5ae94820ec62901944cc9023e655f82e0e31a13f351ed0336cbcfda8ae0b20025fb33e49f011f6aa708140cffefbd06f9b90fefc6f9d79f67495ff0b1a2f1ff075eda3fdd800088fc0583dc0e1e9f7f02673da61cc4466a2559d70cd90e453b11449442eb11f444e1203bc38754f7ad0d93bb91e40f9cd490d2dd5d7e2571c460", 0xffe}, {&(0x7f00000004c0)="2013d207c5b00fd12c1b4f666d91fa3095e7525d7b38e15402692726beac1160019c6c0a51c9", 0x26}], 0x2, 0x0, 0x0, 0x20000010}], 0x1, 0x20049001)
recvmsg(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4095, 0xfff}, {&(0x7f00000002c0)=""/39, 0x27}], 0x2}, 0x2)
syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa208004500008c0000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e400000090780000080a00000000000000001e03040112450000000099645c317e7d8c8ea0b1f313127a282cf8ff359142faa20f8f2636bd79050e00000000000000000000000013123af5340e5fb3639bdbcc6c76357d1b181e10270d000000000000000007000000000000"], 0x0)
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x1d8)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statfs(&(0x7f0000000680)='./file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000480)={'dummy0\x00', &(0x7f00000005c0)=@ethtool_rxnfc={0x2e, 0x0, 0x4, {0x8, @sctp_ip6_spec={@local, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x4e20, 0x4e23, 0x9}, {0x0, @link_local, 0x1, 0x7, [0x401, 0xe]}, @ah_ip4_spec={@empty, @loopback, 0x80000000, 0x6}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 0x1ff, 0x9, [0x4, 0x2852]}, 0x62b9, 0xffffffff}}})
syz_usb_connect(0x2, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0xc0, 0x7, 0x63, 0x40, 0x6e1, 0xa334, 0xc49f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0xa0, 0x81, "", [{{0x9, 0x4, 0x5c, 0x9, 0x0, 0x90, 0x93, 0x6d, 0x5}}]}}]}}, 0x0)
lsm_set_self_attr(0x68, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000001000000000000000e100000000000000c100000000000000374afaf4c064add3af599853340540358884f21ed44edc8dbecfe9637cf6b56049b2e4c8c741456a40dc66dc7ec7df0985e75ff334ceddf11fd3b7f4579113ea7602e603f33b5c7d1545b33d0487a37a2f74cf755bad5a1729b10a5e231e73b87903bdcfa98caf3e8a18cc64babaf4a3080925d3935bab28b189a377bf8bc1c673c8bd1854d485abb9dfac5db3446e6bb0c076ea6535be9273f8964ad872143b403f50fd6351266df378176144626d5138200f3a2e2d901505a91c91fda2ec9806"], 0xe1, 0x0)

5.296277726s ago: executing program 5 (id=8753):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x15, 0x1, 0x70bd2c, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x44080)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1})
fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3})
fcntl$lock(r2, 0x26, &(0x7f0000000180))
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
r3 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000000380)=<r4=>0x0)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff", @ANYRES64=r5, @ANYRES64], 0xc8)
timer_settime(r4, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
timer_delete(r4)
r6 = gettid()
tkill(r6, 0x16)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
rt_tgsigqueueinfo(0x0, 0x0, 0x3e, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000200)={0x0, 0x2, 0x8, 0x7})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
ioctl$sock_ifreq(r7, 0x8937, &(0x7f0000000740)={'dummy0\x00', @ifru_ivalue=0x10001})

5.217597534s ago: executing program 8 (id=8754):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x12d6, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x9, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x20000005, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
syz_usb_connect(0x2, 0x2d, &(0x7f00000018c0)={{0x12, 0x1, 0x250, 0xc7, 0x77, 0xdc, 0x8, 0x5ac, 0x8501, 0x13a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xff, 0x9, 0x50, 0xb, "", [{{0x9, 0x4, 0xd1, 0xa, 0x1, 0xe, 0x1, 0x0, 0xc2, [], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0xfd, 0x5}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890)
syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x303400)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

4.391724751s ago: executing program 5 (id=8757):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x3000, 0x0, 0x0, 0x41000004, 0x0)

4.170128241s ago: executing program 5 (id=8758):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r3 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c100000008002907800000000e00003000800907800060003fa9874dc39349424f077aab502284b44b8f8fa39203d8403c2c1e6f852ea78bd2436ef2753a6b50fb27a8627dc6fe22e4d4161bbc0631734d92ad0618efb51d95891e07704d34c929f776f129f05140c2d59c3d375218933cfe100bd5dc014965be0e2d41decc98a5aa874696d7074d48b703bcdd9a57d91e5e8894d5f018a75300429d3d835b1b1d4072a206936d938a250a3275ea3c2fe9c30f1027130ed"], 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]})
syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00')
getdents(r5, &(0x7f0000000080)=""/60, 0x3c)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000440), 0x4)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_DEBUGREGS(r9, 0x4080aea2, 0x0)
syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="26f30f2b2a0f870600b80b008ee8bad10466b80000000066ef0f01d4652b13b8fd000f00d0660fdaa45000baf80c66b8203b898566efbafc0c66ed66b828dd00000f23d80f21f86635400000700f23f8", 0x50}], 0xaaaaaaaaaaaab6b, 0x4, &(0x7f0000000400)=[@efer], 0x1)
syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x21c1)
close_range(r4, 0xffffffffffffffff, 0x0)

4.16988784s ago: executing program 2 (id=8759):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$vim2m(&(0x7f0000005680), 0x1, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xb, 0x1, 0x0, "268100ba7af9819e79b058d9f2a15b81f0000000000100", 0x32314d56})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000050010000500000005"], 0x50)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
prlimit64(r2, 0x8, &(0x7f0000000040)={0x1, 0x4}, &(0x7f0000000080))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380)}, 0x20)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4)
syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed040003010902220001000000000904000001437b6a000905000000000000f60705d4"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a240)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x10}, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, 0x0, &(0x7f0000000480)=""/177}, 0x20)

3.974252799s ago: executing program 7 (id=8760):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x7, @capture={0x0, 0x1, {0x5, 0xc698}, 0x7, 0x9}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

3.569713994s ago: executing program 8 (id=8762):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file1/../file0'}, 0x14)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76632cb010852f426072a", 0x2a}, {&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3f9bc6c", 0x25}], 0x2)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000ffffffffffffefff00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}})

3.250249964s ago: executing program 8 (id=8763):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)

3.24498174s ago: executing program 8 (id=8764):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100))
connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0x1}, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0)
openat$cgroup_procs(r3, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x5, 0x1)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000002ac0)=ANY=[@ANYRESHEX=r4, @ANYBLOB="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", @ANYRES32=r4], 0xa8)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x200)
ioctl$FE_READ_BER(r7, 0x80046f46, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x2c, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xf}}, [{0x8, 0xb, 0x197}]}, 0x2c}}, 0x240400c0)
r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000280)={0x9, @pix={0x8, 0x2, 0x38416761, 0x5, 0x3, 0x9, 0x1, 0x7, 0x0, 0x1, 0x2, 0x5}})

2.652573109s ago: executing program 7 (id=8765):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/45, 0x2d}, 0x1000}], 0x1, 0x60010002, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="440000002c00010000000000fcdbdf253400f2800c0019"], 0x44}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="18005a80140001800500010030000000060002"], 0x34}, 0x1, 0x0, 0x0, 0x40400}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000290001"], 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001040)={<r8=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000010c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000001000)=0x1, r8, 0x0, 0x2, 0x4}}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000))

2.501836406s ago: executing program 7 (id=8766):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000040802080000000000000000000000012c0004800800014000000001080001400000000908000140000000020c0001400000000508000140000000020900010073797a30000000000500030001"], 0x54}, 0x1, 0x0, 0x0, 0x4890}, 0x880)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000000000002200", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}})

2.345956444s ago: executing program 7 (id=8768):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x1000000, 0x0, 0x0, 0x41000004, 0x0)

2.22961928s ago: executing program 2 (id=8769):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)

2.215123101s ago: executing program 7 (id=8770):
socket$l2tp(0x2, 0x2, 0x73) (async)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000840)=@multiplanar_userptr={0x18, 0xb, 0x4, 0x8, 0x3ff, {<r1=>0x0, <r2=>0x0}, {0x4d43131eec730f3d, 0x0, 0x24, 0x23, 0x5, 0xc, "03004700"}, 0x3, 0x2, {&(0x7f0000000780)=[{0x80000001, 0x7, {&(0x7f0000000700)}, 0x3ff}, {0x5, 0xfff, {&(0x7f0000000480)}, 0x4}]}, 0x2e1})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f000000acc0)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000680)="e7fc53f7202b352688b12145964b1d22fb6f9abba373027b854a09501336260d89b3438ebb116186511321356e5af8938172b37bb7e2d6f93e6a8bf37a9f526639a9676c8136fba67af78de06d668b3524ef65c0f2a7fe8ccaaf54c8abc9c1d4c497e3791e2c36cf6e241723508f97", 0x6f}, {&(0x7f00000008c0)="84d7026457b9728dd259fd7a26283a64621b20dd2496097ba826a3408410466c57e76d9ffb1f86b86f2e673c4727cc78135fc5d8b37b231de1c5e13a864ed8ab5fdb09ce381ec696762987fd39d0", 0x4e}, {&(0x7f00000004c0)="38700160f56de6fdb63bcfad51faaad75112839af07cbfba0c63cac0bc99ca9956b6f452a9697250c84609d2bf1c876c9a4c233f5f9d650a36175260b20e034f2e4423d62dc93d55626c58f9d826e82874770221eeb96dcd6664516f10c4e96b1a4f5992821582918e59eb020cb1605edd5e4a3ba7b7fa1d97b37996a2bcf7490b467eb08eef46f009013862200926f4456a6dcd07", 0x95}], 0x3, &(0x7f0000000180)=ANY=[], 0x48, 0xc000}}, {{0x0, 0x0, &(0x7f0000006a00)=[{&(0x7f0000003580)="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", 0x1000}, {&(0x7f0000004580)="9fade5248d012ffef6d41cb89328373f7602b2fc5b720083f44a29e3a700993d44c4a33f22d3702a3b6f1e92e9f0880ce01a1926a5", 0x35}, {&(0x7f00000045c0)}, {&(0x7f0000000a40)="a961e58d9351d10ee55c33d41870fd342eb8062f3fad69467228aeee05c119047cfe4d4bb2d193af75002c1e96d11d22cafb5bb240e5ce3ba2aa67f46f6f08411bad8aba6df24d34e408066c7ca1fa100000001fbb08777251131ab401f7bcfb3f0c8bfa7bf1d802145f53f58eec020f2996d257614f99e9d25d747a2921b20049a4bd3b9525bf87e5f09627fc8fcc131943583d1d1ee8862b66ed2bcb6694693e6e03387dec6e26a1625ba99863b79ee42401d3a1333cda21d969f711d9bac9966613e062a9e6bbdd5f202060bdac4020ec62e931f54890d8ad5c42d1ceba2cd49ce8e6f94084a91333ae010e30282e5913107f506d497f97e7629a6d074821d703b4f47cccdc35b4f1dc08d8325e09cd", 0x111}, {&(0x7f0000004680)="4a8728dbe3", 0x5}, {&(0x7f00000046c0)="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", 0xfd}, {&(0x7f0000000e40)="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", 0x110}, {&(0x7f0000006940)="32f12d0cfeb90ea5d6cbfe778ac4ac121941e0d057b9a4cfbcab10a5d8f327d2778dac4ec62227666523b4456ec8989afd92c032a5abeb6312522cfffea5dcf657377b6171be0c370f61ed534540ae74100174722c6b30976882b373354bf972adcf1364cc096a9433802f75e720a0d07a4177e3f311e797450fa8dae91b781b8412840200", 0x85}], 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="000000000000000001000000020000000edb42e72064f794fd30f01a8b23742bc52055757865871c819f1b6100a3a0f6418de8731a0e6f2befe75bdc669f7cc26ffeb2af5756ddc6977fe67645e878e05b9a3a21f4fe128f7e200f9fa9ec74f116a7423fbe0233ceb4e95241", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRESOCT=r2, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="7f086952631834f7c3f9761ea7fd08aae38473bd1fbcc3770b74e1f153f08bb44ee17cc8d2b6e407009d9d413a6e4de552d49dbbc96c19a30ef5fe9aae2fc20ee52b48841573ecc90cb7d52f92c279a65f580d38aae4afa1691b63e80aff00bb999acc6508a264f1211dea135e0e5b325d0bf0e95e4e2f912914ba664fec4b2cf35f2e95a18994c58aa979ec196790943718ad019ff8fa1816a2946c8bc0f19fc4efdd6ae67cdf6de232a21515f3ffac244bc13be5def6dc9c31d3ca", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x6040040}}], 0x2, 0x20045001)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_clone(0x80306811, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000100)={0x2, 0xaaa, &(0x7f0000000240), 0x0}) (async)
ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000100)={0x2, 0xaaa, &(0x7f0000000240), 0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB='\v'], 0x1c}, 0x1, 0x0, 0x0, 0x4048885}, 0x44040)
read$FUSE(0xffffffffffffffff, &(0x7f0000001540)={0x2020, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0xf35)
r9 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r9, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9df2"}, 0x14) (async)
bind$packet(r9, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9df2"}, 0x14)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async)
r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r11 = syz_open_procfs(r8, &(0x7f0000000180)='loginuid\x00')
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, &(0x7f0000000040)) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, &(0x7f0000000040))
getresgid(&(0x7f00000055c0), &(0x7f0000005600), &(0x7f0000005640)) (async)
getresgid(&(0x7f00000055c0)=<r12=>0x0, &(0x7f0000005600), &(0x7f0000005640))
write$FUSE_ENTRY(r11, &(0x7f0000005680)={0x90, 0xe4ff7aec81568612, 0x0, {0x0, 0x2, 0x0, 0x7fff, 0x9, 0xe48, {0x3, 0x5, 0x3913, 0xf, 0x7, 0x9ff, 0x84a, 0x81, 0x7, 0xc000, 0x200, 0x0, r12, 0x3, 0x10e92e51}}}, 0x90)
r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r14 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r14, 0xc0184800, &(0x7f0000000100)={0x20004, r13, 0x2})
syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={<r15=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbf, 0x80, 0x2, 0x2, [r15, r15], [0x80ffdb, 0x2, 0x367afe9c], [], [0x6]}) (async)
ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbf, 0x80, 0x2, 0x2, [r15, r15], [0x80ffdb, 0x2, 0x367afe9c], [], [0x6]})
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f00000002c0)={{0x29, @multicast1, 0x4e24, 0x0, 'lblcr\x00', 0x8, 0x9, 0xa}, {@private=0xa010100, 0x4e23, 0x2000, 0x7f, 0x9, 0x7}}, 0x44) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f00000002c0)={{0x29, @multicast1, 0x4e24, 0x0, 'lblcr\x00', 0x8, 0x9, 0xa}, {@private=0xa010100, 0x4e23, 0x2000, 0x7f, 0x9, 0x7}}, 0x44)

2.04028537s ago: executing program 5 (id=8772):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x12d6, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x9, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x20000005, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
syz_usb_connect(0x2, 0x2d, &(0x7f00000018c0)={{0x12, 0x1, 0x250, 0xc7, 0x77, 0xdc, 0x8, 0x5ac, 0x8501, 0x13a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xff, 0x9, 0x50, 0xb, "", [{{0x9, 0x4, 0xd1, 0xa, 0x1, 0xe, 0x1, 0x0, 0xc2, [], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0xfd, 0x5}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890)
syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x303400)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

1.796312003s ago: executing program 7 (id=8774):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x1)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x267)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000006c0)={r6, 0x0, 0x7b, 0x0, &(0x7f0000000080)="b7748fe8b3c4a172679a9222749d6c4839174071d1aa23607c3357f4bee8b70efd040fd65317c7b9e5813610f1dfdcf46164ecc50519ebbeb42aad253acf6816cd96395a086c64abd6307c76f262b4459fec46c2d0ab994aebe6e08fbc640e319beeacfe3710ca4a4be76ebdd7720c95face4c3219d8339178d8c1", 0x0, 0x4, 0x0, 0xe6, 0x0, &(0x7f00000005c0)="048e694caaf601338a2a1e3c04f87361407d111c0bf51ecf5a5b93b266f80e087970f9dd9500d6b8016d6c6734600d1e12cd3ac823a2c2658661fefa440fb9d810c0c02ca90d7eec540def9f91dbc9c4abd1244a7fd9fe588bf4045795627461f0b08586b4f8d0ebcc4eef18771001e79ff5d376dbb572482e23a7b974fc2c533e484548aff7c2440ab1a7282cecc8e24631d58a7497f53152a3384136c64079c1c6064df99bb52eb41b63bfa3b3d1f831c52cfe6e90c7f76cd130be7978815a788a2267fa29bf02ac770e96467e0d25a0b7a13cfb2f76ecaa67b4a1456d4dc4b8d5eb551198", 0x0, 0x2, 0x0, 0x6}, 0x50)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4)
syz_usb_disconnect(r3)
read$char_usb(r4, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0xff}]})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80)
close_range(r7, 0xffffffffffffffff, 0x0)

1.753546195s ago: executing program 3 (id=8775):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000300000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000000000000000000100000000320000000000000000000000000000000000000000000000023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000700000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c00"], 0x23c}}, 0x0)

1.610089594s ago: executing program 3 (id=8776):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4", 0x33}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedf", 0x3d}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06", 0x31}, {&(0x7f0000000280)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd1", 0x62}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.394252807s ago: executing program 2 (id=8777):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/14, &(0x7f0000000040)=0xe)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000840))
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac2(r1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22401, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x400, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000002b1b7c2ce3607a9d73a8d7533d797b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000007f0e417575"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
syz_usb_connect$uac3(0x4, 0x12b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x2, 0x7, 0x4, 0x40, 0xf}, 0x16, &(0x7f0000000380)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x2, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9f, 0x4}]}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3421}}, {0x2, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x416}}]})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
r7 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1})
syz_io_uring_setup(0x17, &(0x7f0000000140)={0x0, 0xb9c4, 0x21000, 0x3, 0x361}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240))
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x40, 0x21, 0x5d, {0x5d, 0x20, "c790968a4b7e242d68252076bc5caef354fde8b7ded9ae0505d3bde7005e540c2cee5668e76c7ad54b5e6fca17bb860837226ce6478554d9855f2a392d8c5c1f3a1ec1d525b283ea304f0e6ca0179d191200d8f5b27e8837d79a63"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x40, 0x18, 0x64, "16c081fb9a30b046119bfe8a5f905d48ec2c3745a00bebb3ba8b59e71045d63b69e0c0b9c979876f8b017c7e4534d9323a3e292ac97290c58a991ee8b5edcdd180635073544f15a1b65697821be780aa15541d82afd002123694427a6c843f37d859d7f9"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xfff1, 0x6, 0xfffffffd, 0x0, 0xe414, 0x1, 0x6, 0x10000, 0x1, 0x7, 0x4, 0x4}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xdb71}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, &(0x7f0000000780)={0x20, 0x89, 0x2}})

1.138111789s ago: executing program 3 (id=8778):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000040000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)

842.049823ms ago: executing program 3 (id=8779):
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x73f4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
open(&(0x7f0000000180)='./bus\x00', 0x8517e, 0x8b)
socket$inet6_udp(0xa, 0x2, 0x0)
pipe2$9p(&(0x7f0000000040), 0x84880)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$vim2m(&(0x7f0000000340), 0xffff7fff, 0x2)
eventfd2(0x4009, 0x801)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x205f41, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)

295.163426ms ago: executing program 5 (id=8780):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x2000000, 0x0, 0x0, 0x41000004, 0x0)

241.314805ms ago: executing program 5 (id=8781):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_usb_connect$cdc_ecm(0x3, 0x97, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902850001010000000904000012020600000b24060000b819b958fd1d05240000000d240f0104000000000000000007240a02a0050108241c000002feff0c241b010001000e060800081524127706a317a88b045e4f01a607c0ffcb7e392a0424020007240a02087f06090581030004020007090582020002000000090503"], 0x0)
syz_usb_ep_read(r1, 0x3, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="a08f23235e8730eb4658cbed6b2264048d954fcdd15bd4d2bad2f452d949b8a45a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x1, 0x120, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10e, 0x3, 0x1, 0x82, 0x80, 0x0, {0x8, 0xb, 0x1, 0x0, 0x1, 0x26, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x36, 0x4fd}, [@selector_unit={0xd, 0x24, 0xc, 0x6, 0x8, "3deb452b39b9088c"}, @selector_unit={0xc, 0x24, 0xc, 0xee, 0x7, "0c5e8b43094035"}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0xf0f2c4017541bbef, 0x1, 0x1, 0x5, 0x1, 0x0, 0x81, 0x8000}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x10, 0xf1, "", "c43928"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x4, 0x4, 0x4, "1841435e1963"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0x67, "76fe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x10, 0x3d, {0xa, 0x25, 0x25, 0x1e52d1af, 0x10, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x4, 0x81, 0x7, "", "aa39"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x8, 0x9, "c9", "bb2a77"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xb7, 0x3ff, 0x2, "ab3af4b4bd"}, @as_header={0x17, 0x24, 0x1, 0x6, 0x0, 0x3, 0x1002, 0xe7, 0x5, 0x9, 0x10}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x1, 0x7, 'z', "71a5"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x7, 0x9, "afe2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xff, 0x8, 0xa, {0xa, 0x25, 0x25, 0xc, 0x5, 0x9}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0xf, 0x7, 0x0, 0x20, 0xd7}, 0x31, &(0x7f0000000300)=ANY=[@ANYBLOB="050f310004071002010ca000071a08200110100a00003f0000000000002000000000000012000000001d5cc40d06"], 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44b}}]})

97.031689ms ago: executing program 3 (id=8782):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000050010000500000005"], 0x50)
syz_pidfd_open(0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
prlimit64(0x0, 0x8, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

0s ago: executing program 3 (id=8783):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0xd65, 0x0, 0x0, 0x0, 0x800})
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
syz_open_dev$evdev(0x0, 0x3, 0x822b01)
unshare(0x8000000)
r7 = semget$private(0x0, 0x4000, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c)
sendto$inet6(r8, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c)
semop(r7, &(0x7f0000000000)=[{0x3, 0x8, 0x1800}], 0x1)
semctl$IPC_RMID(r7, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180))

kernel console output (not intermixed with test programs):

47394][T13684] team_slave_0: entered allmulticast mode
[ 1422.172666][   T29] audit: type=1326 audit(1781914788.914:17109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13683 comm="syz.7.8329" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1422.178499][T25400] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[ 1422.201171][   T29] audit: type=1326 audit(1781914788.914:17110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13683 comm="syz.7.8329" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1422.201206][   T29] audit: type=1326 audit(1781914788.914:17111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13683 comm="syz.7.8329" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1422.201238][   T29] audit: type=1326 audit(1781914788.914:17113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13683 comm="syz.7.8329" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1422.201268][   T29] audit: type=1326 audit(1781914788.914:17112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13683 comm="syz.7.8329" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1422.201302][   T29] audit: type=1326 audit(1781914788.914:17114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13683 comm="syz.7.8329" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1422.339276][T13684] team_slave_1: entered allmulticast mode
[ 1422.345078][T27365] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1422.360482][T13685] team0: left allmulticast mode
[ 1422.373800][T13685] team_slave_0: left allmulticast mode
[ 1422.388398][T13685] team_slave_1: left allmulticast mode
[ 1422.510888][T27365] usb 4-1: Using ep0 maxpacket: 16
[ 1422.521426][T25400] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1422.534192][T25400] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[ 1422.546141][T25400] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1422.555874][T25400] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1422.566042][T27365] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1422.576251][T13670] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1422.584474][T27365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1422.593539][T13670] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1422.601579][T27365] usb 4-1: Product: syz
[ 1422.607885][T25400] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1422.615286][T27365] usb 4-1: Manufacturer: syz
[ 1422.620037][T27365] usb 4-1: SerialNumber: syz
[ 1422.631687][T27365] usb 4-1: config 0 descriptor??
[ 1422.649103][T22696] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[ 1422.801086][T22696] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1422.827790][T22696] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[ 1422.864396][T22696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1422.914100][T22696] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1422.952626][T22696] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1422.974555][T22696] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3
[ 1422.987310][T22696] usb 6-1: Manufacturer: syz
[ 1422.997193][T22696] usb 6-1: SerialNumber: syz
[ 1423.004240][T25400] usb 9-1: USB disconnect, device number 8
[ 1423.026441][T22696] usb 6-1: config 0 descriptor??
[ 1423.055165][T22696] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input194
[ 1423.113894][T27365] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1423.133117][T27365] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1423.166006][T27365] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1423.204221][T27365] usb 4-1: media controller created
[ 1423.231227][T27365] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1423.799256][T27365] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1423.842831][ T5683] usb 6-1: USB disconnect, device number 21
[ 1423.848875][T27365] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1423.872130][T27365] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1424.090235][T13782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1424.145481][T13782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1424.297953][  T810] usb 3-1: USB disconnect, device number 122
[ 1424.449414][T27365] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[ 1424.449546][ T5683] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[ 1424.621135][T27365] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1424.623508][ T5683] usb 6-1: config 0 has an invalid interface number: 70 but max is 0
[ 1424.638695][ T5683] usb 6-1: config 0 has no interface number 0
[ 1424.650506][T27365] usb 9-1: not running at top speed; connect to a high speed hub
[ 1424.663003][ T5683] usb 6-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[ 1424.663867][T27365] usb 9-1: config 255 has an invalid interface number: 209 but max is 0
[ 1424.691372][ T5683] usb 6-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1424.703228][T27365] usb 9-1: config 255 has no interface number 0
[ 1424.704044][T27365] usb 9-1: config 255 interface 209 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1424.704074][T27365] usb 9-1: config 255 interface 209 has no altsetting 0
[ 1424.705927][T27365] usb 9-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=13.a2
[ 1424.743635][  T810] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 1424.757809][T27365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1424.757834][ T5683] usb 6-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64
[ 1424.786215][T27365] usb 9-1: Product: syz
[ 1424.786539][ T5683] usb 6-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1424.807652][T27365] usb 9-1: Manufacturer: syz
[ 1424.807652][ T5683] usb 6-1: config 0 interface 70 has no altsetting 0
[ 1424.823747][T27365] usb 9-1: SerialNumber: syz
[ 1424.826517][ T5683] usb 6-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e
[ 1424.838285][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1424.848374][ T5683] usb 6-1: Product: syz
[ 1424.853520][ T5683] usb 6-1: Manufacturer: syz
[ 1424.873385][ T5683] usb 6-1: SerialNumber: syz
[ 1424.902545][ T5683] usb 6-1: config 0 descriptor??
[ 1424.911130][  T810] usb 3-1: Using ep0 maxpacket: 16
[ 1424.918433][T13779] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1424.949433][  T810] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[ 1424.971002][  T810] usb 3-1: config 0 has no interface number 0
[ 1424.987053][  T810] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1425.002446][  T810] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1425.024025][  T810] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1425.039869][  T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1425.053839][  T810] usb 3-1: Product: syz
[ 1425.058823][  T810] usb 3-1: Manufacturer: syz
[ 1425.065764][  T810] usb 3-1: SerialNumber: syz
[ 1425.066153][T13793] syzkaller0: entered promiscuous mode
[ 1425.079915][  T810] usb 3-1: config 0 descriptor??
[ 1425.096085][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8341'.
[ 1425.096929][T13803] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1425.106505][T13793] syzkaller0: entered allmulticast mode
[ 1425.129585][T13803] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1425.193345][T13793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1425.244442][T13793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1425.332838][T13793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1425.380844][T13792] tipc: Resetting bearer <eth:syzkaller0>
[ 1425.408363][T13803] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1425.425151][T13803] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1425.472547][T13792] tipc: Disabling bearer <eth:syzkaller0>
[ 1425.565283][T27365] uvcvideo 9-1:255.209: Found UVC 0.00 device syz (05ac:8501)
[ 1425.575236][T27365] uvcvideo 9-1:255.209: No valid video chain found.
[ 1425.588056][T27365] usb 9-1: USB disconnect, device number 9
[ 1425.684963][ T5683] ti_usb_3410_5052 6-1:0.70: TI USB 3410 1 port adapter converter detected
[ 1425.721514][ T5683] usb 6-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[ 1425.808642][ T5683] usb 6-1: USB disconnect, device number 22
[ 1425.832737][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8340'.
[ 1425.853724][ T5683] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[ 1425.877033][ T5683] ti_usb_3410_5052 6-1:0.70: device disconnected
[ 1426.267831][T13872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1426.305063][T13872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1426.649815][ T5683] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1426.887791][ T5683] usb 9-1: Using ep0 maxpacket: 32
[ 1426.918272][ T5683] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 1426.954255][ T5683] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1426.986876][ T5683] usb 9-1: Product: syz
[ 1426.993076][ T5683] usb 9-1: Manufacturer: syz
[ 1426.998156][ T5683] usb 9-1: SerialNumber: syz
[ 1427.020215][ T5683] usb 9-1: config 0 descriptor??
[ 1427.509289][ T5683] airspy 9-1:0.0: Board ID: 00
[ 1427.514568][ T5683] airspy 9-1:0.0: Firmware version: 
[ 1427.539108][T25387] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1427.551873][T13936] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1427.719689][T25387] usb 6-1: Using ep0 maxpacket: 32
[ 1427.735475][T25387] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1427.761473][T25387] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1427.779033][T25387] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1427.801090][T25387] usb 6-1: Product: syz
[ 1427.809023][T25387] usb 6-1: Manufacturer: syz
[ 1427.821450][T25387] usb 6-1: SerialNumber: syz
[ 1427.849003][T25387] usb 6-1: config 0 descriptor??
[ 1427.860259][T13925] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[ 1427.886298][T25387] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1427.927753][T25387] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1428.013980][  T810] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1428.038437][  T810] asix 3-1:0.34: probe with driver asix failed with error -71
[ 1428.078670][  T810] usb 3-1: USB disconnect, device number 123
[ 1428.210692][T25389] usb 6-1: USB disconnect, device number 23
[ 1428.491176][ T5683] airspy 9-1:0.0: usb_control_msg() failed -71 request 0e
[ 1428.520722][ T5683] airspy 9-1:0.0: Registered as swradio24
[ 1428.537155][ T5683] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 1428.557006][ T5683] usb 9-1: USB disconnect, device number 10
[ 1428.805417][T14003] ipt_REJECT: TCP_RESET invalid for non-tcp
[ 1428.881200][T14010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1428.891506][T14010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1428.926188][T14010] syzkaller0: entered promiscuous mode
[ 1428.931935][T14010] syzkaller0: entered allmulticast mode
[ 1428.980219][T14010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1428.994118][T14010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1429.006178][T14010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1429.024246][T14009] tipc: Resetting bearer <eth:syzkaller0>
[ 1429.037135][T14009] tipc: Disabling bearer <eth:syzkaller0>
[ 1429.299215][ T5683] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1429.482459][ T5683] usb 9-1: config 0 has no interfaces?
[ 1429.504124][ T5683] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1429.515754][ T5683] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1429.528875][T14067] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8365'.
[ 1429.538704][ T5683] usb 9-1: Product: syz
[ 1429.543005][ T5683] usb 9-1: Manufacturer: syz
[ 1429.547603][ T5683] usb 9-1: SerialNumber: syz
[ 1429.560909][ T5683] usb 9-1: config 0 descriptor??
[ 1430.386933][T14097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1430.464924][T14097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1430.557874][T25400] usb 9-1: USB disconnect, device number 11
[ 1430.879613][T14112] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1431.470449][T14180] fuse: Bad value for 'fd'
[ 1431.649361][T25400] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[ 1431.810932][T25400] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1431.837395][T25400] usb 6-1: not running at top speed; connect to a high speed hub
[ 1431.875652][T25400] usb 6-1: config 255 has an invalid interface number: 209 but max is 0
[ 1431.904826][T25400] usb 6-1: config 255 has no interface number 0
[ 1431.936052][T25400] usb 6-1: config 255 interface 209 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1431.979221][T25400] usb 6-1: config 255 interface 209 has no altsetting 0
[ 1432.003574][T25400] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=13.a2
[ 1432.020330][T25400] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1432.038513][T25400] usb 6-1: Product: syz
[ 1432.047955][T25400] usb 6-1: Manufacturer: syz
[ 1432.060999][T25400] usb 6-1: SerialNumber: syz
[ 1432.314243][T14172] syzkaller0: entered promiscuous mode
[ 1432.336974][T14172] syzkaller0: entered allmulticast mode
[ 1432.436327][T14204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1432.490634][T14204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1432.575430][T14172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1432.604475][T14171] tipc: Resetting bearer <eth:syzkaller0>
[ 1432.637334][T14171] tipc: Disabling bearer <eth:syzkaller0>
[ 1432.722344][T25400] uvcvideo 6-1:255.209: Found UVC 0.00 device syz (05ac:8501)
[ 1432.752342][T25400] uvcvideo 6-1:255.209: No valid video chain found.
[ 1432.786582][T25400] usb 6-1: USB disconnect, device number 24
[ 1434.073750][T14275] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 1434.080307][T14275] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1434.104907][T14275] vhci_hcd vhci_hcd.0: Device attached
[ 1434.246325][ T8595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1434.266555][ T8595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1434.269157][T25400] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1434.359034][T27365] usb 40-1: SetAddress Request (6) to port 0
[ 1434.365702][T27365] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd
[ 1434.439231][T25400] usb 6-1: Using ep0 maxpacket: 32
[ 1434.451056][T25400] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1434.474902][T25400] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1434.492065][T25400] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1434.520723][T25400] usb 6-1: Product: syz
[ 1434.528841][T25400] usb 6-1: Manufacturer: syz
[ 1434.537901][T25400] usb 6-1: SerialNumber: syz
[ 1434.550575][T25400] usb 6-1: config 0 descriptor??
[ 1434.561964][T14271] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1434.571101][T25400] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1434.583134][T25400] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1434.719147][T14276] vhci_hcd: connection reset by peer
[ 1434.725452][ T8602] vhci_hcd vhci_hcd.3: stop threads
[ 1434.733807][ T8602] vhci_hcd vhci_hcd.3: release socket
[ 1434.740247][ T8602] vhci_hcd vhci_hcd.3: disconnect device
[ 1434.759424][T25389] usb 3-1: new full-speed USB device number 124 using dummy_hcd
[ 1434.879423][T25400] usb 6-1: USB disconnect, device number 25
[ 1434.931257][T25389] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1434.952526][T25389] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[ 1434.982085][T25389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1435.011946][T25389] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1435.046484][T25389] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1435.083636][T25389] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3
[ 1435.099691][T25389] usb 3-1: Manufacturer: syz
[ 1435.108118][T25389] usb 3-1: SerialNumber: syz
[ 1435.122414][T25389] usb 3-1: config 0 descriptor??
[ 1435.138568][T25389] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input198
[ 1435.385507][T14318] fuse: Bad value for 'fd'
[ 1435.797968][T14351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1435.811358][T14351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1435.858290][T25389] usb 3-1: USB disconnect, device number 124
[ 1435.969840][T14351] syzkaller0: entered promiscuous mode
[ 1435.990988][T14351] syzkaller0: entered allmulticast mode
[ 1436.003406][T14376] fuse: Bad value for 'user_id'
[ 1436.017942][T14376] fuse: Bad value for 'user_id'
[ 1436.058012][T14351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1436.093020][T14351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1436.126164][T14351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1436.148643][T14350] tipc: Resetting bearer <eth:syzkaller0>
[ 1436.176731][T14350] tipc: Disabling bearer <eth:syzkaller0>
[ 1436.497633][T14394] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8399'.
[ 1436.907618][   T29] kauditd_printk_skb: 30 callbacks suppressed
[ 1436.907635][   T29] audit: type=1326 audit(1781914803.704:17145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.3.8401" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f23d9ce59 code=0x7ffc0000
[ 1436.957043][   T29] audit: type=1326 audit(1781914803.744:17146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.3.8401" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f23d9ce59 code=0x7ffc0000
[ 1436.985629][   T29] audit: type=1326 audit(1781914803.744:17147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.3.8401" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f23d5d68e code=0x7ffc0000
[ 1437.012467][T14398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8401'.
[ 1437.022701][T14398] netlink: 'syz.3.8401': attribute type 7 has an invalid length.
[ 1437.031030][   T29] audit: type=1326 audit(1781914803.744:17148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.3.8401" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f23d9caeb code=0x7ffc0000
[ 1437.057447][T14398] netlink: 'syz.3.8401': attribute type 8 has an invalid length.
[ 1437.066105][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8401'.
[ 1437.075211][   T29] audit: type=1326 audit(1781914803.744:17149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.3.8401" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f23d9ce59 code=0x7ffc0000
[ 1437.150083][   T29] audit: type=1326 audit(1781914803.744:17150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.3.8401" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f23d9ce59 code=0x7ffc0000
[ 1437.181692][   T29] audit: type=1326 audit(1781914803.744:17151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.3.8401" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f23d9caeb code=0x7ffc0000
[ 1437.215820][   T29] audit: type=1326 audit(1781914803.744:17152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.3.8401" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f23d9ce59 code=0x7ffc0000
[ 1437.276377][   T29] audit: type=1326 audit(1781914803.744:17153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.3.8401" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f23d9ce59 code=0x7ffc0000
[ 1437.307333][   T29] audit: type=1326 audit(1781914803.744:17154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.3.8401" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f23d9ce59 code=0x7ffc0000
[ 1437.773976][T14447] fuse: Bad value for 'fd'
[ 1437.839839][T25389] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1437.999235][T25389] usb 6-1: device descriptor read/64, error -71
[ 1438.028023][T14461] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1438.181350][T14471] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1438.259145][T25389] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1438.295962][T14476] syzkaller0: entered promiscuous mode
[ 1438.317543][T14476] syzkaller0: entered allmulticast mode
[ 1438.399501][T25389] usb 6-1: device descriptor read/64, error -71
[ 1438.519431][T25389] usb usb6-port1: attempt power cycle
[ 1438.668996][T22696] usb 3-1: new full-speed USB device number 125 using dummy_hcd
[ 1438.831049][T22696] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1438.847242][T22696] usb 3-1: not running at top speed; connect to a high speed hub
[ 1438.880215][T22696] usb 3-1: config 255 has an invalid interface number: 209 but max is 0
[ 1438.880248][T25389] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1438.913249][T22696] usb 3-1: config 255 has no interface number 0
[ 1438.927878][T22696] usb 3-1: config 255 interface 209 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1438.929846][T25389] usb 6-1: device descriptor read/8, error -71
[ 1438.956631][T22696] usb 3-1: config 255 interface 209 has no altsetting 0
[ 1438.967412][T22696] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=13.a2
[ 1438.983593][T22696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1438.993039][T22696] usb 3-1: Product: syz
[ 1438.997266][T22696] usb 3-1: Manufacturer: syz
[ 1439.004847][T22696] usb 3-1: SerialNumber: syz
[ 1439.128211][T14500] bond3 (unregistering): Released all slaves
[ 1439.239380][T25389] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1439.256511][T14482] syzkaller0: entered promiscuous mode
[ 1439.280702][T14482] syzkaller0: entered allmulticast mode
[ 1439.288830][T25389] usb 6-1: device descriptor read/8, error -71
[ 1439.363048][T14583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1439.385331][T14582] netlink: 'syz.7.8416': attribute type 1 has an invalid length.
[ 1439.394133][T14583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1439.409850][T27365] usb 40-1: device descriptor read/8, error -110
[ 1439.423113][T14482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1439.431686][T25389] usb usb6-port1: unable to enumerate USB device
[ 1439.450309][T14481] tipc: Resetting bearer <eth:syzkaller0>
[ 1439.473348][T14481] tipc: Disabling bearer <eth:syzkaller0>
[ 1439.528791][T22696] uvcvideo 3-1:255.209: Found UVC 0.00 device syz (05ac:8501)
[ 1439.539506][T22696] uvcvideo 3-1:255.209: No valid video chain found.
[ 1439.555651][T22696] usb 3-1: USB disconnect, device number 125
[ 1439.563562][T25400] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1439.662354][T14591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8418'.
[ 1439.673320][T14591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8418'.
[ 1439.697512][T14591] syzkaller1: entered promiscuous mode
[ 1439.704125][T25400] usb 9-1: device descriptor read/64, error -71
[ 1439.711132][T14591] syzkaller1: entered allmulticast mode
[ 1439.819924][T27365] usb usb40-port1: attempt power cycle
[ 1439.949083][T25400] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1440.079072][T25400] usb 9-1: device descriptor read/64, error -71
[ 1440.120469][T14623] fuse: Unknown parameter 'grou00000000000000000000'
[ 1440.189260][T25400] usb usb9-port1: attempt power cycle
[ 1440.340126][T14629] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1440.379725][T27365] usb usb40-port1: unable to enumerate USB device
[ 1440.529303][T25400] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1440.559736][T25400] usb 9-1: device descriptor read/8, error -71
[ 1440.809400][T25400] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1440.856978][T14656] fuse: Unknown parameter 'fd�H	hU� �j~�)��W��v�̢�jxXU�>8em�1'vd9�
{.o�x���&����5ϧ�V稣֣�����|{��S
[ 1440.856978][T14656] �D����]��X�l-�[����/	A�yH����l7�"c۶	WX&��?�AZ�&���h|0x0000000000000004'
[ 1440.880315][T25400] usb 9-1: device descriptor read/8, error -71
[ 1440.989495][T25400] usb usb9-port1: unable to enumerate USB device
[ 1441.079044][T27365] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1441.239355][T27365] usb 6-1: Using ep0 maxpacket: 8
[ 1441.256872][T27365] usb 6-1: config 0 has an invalid interface number: 151 but max is 1
[ 1441.276721][T27365] usb 6-1: config 0 has no interface number 1
[ 1441.288983][T27365] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1441.313955][T27365] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[ 1441.338341][T27365] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[ 1441.353762][T27365] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1441.365012][T27365] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1441.378768][T27365] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A
[ 1441.391390][T27365] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 187
[ 1441.403199][T14664] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1441.405340][T27365] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[ 1441.420172][T27365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1441.428181][T27365] usb 6-1: Product: syz
[ 1441.432831][T27365] usb 6-1: Manufacturer: syz
[ 1441.437475][T27365] usb 6-1: SerialNumber: syz
[ 1441.452147][T27365] usb 6-1: config 0 descriptor??
[ 1441.458765][T14651] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1441.470799][T27365] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1441.496652][T27365] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1441.574114][T14688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1441.592388][T14688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1441.848974][T27365] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1442.000817][T27365] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1442.010476][T27365] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1442.022288][T27365] usb 3-1: string descriptor 0 read error: -22
[ 1442.028674][T27365] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40
[ 1442.038056][T27365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1442.404257][T14714] fuse: Unknown parameter 'grou00000000000000000000'
[ 1443.299981][T14725] syzkaller1: entered promiscuous mode
[ 1443.313390][T14725] syzkaller1: entered allmulticast mode
[ 1443.821621][T25400] usb 6-1: USB disconnect, device number 30
[ 1444.123058][T14778] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1444.158739][T14782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1444.194852][T14782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1444.263816][T14792] syzkaller1: entered promiscuous mode
[ 1444.276588][T14792] syzkaller1: entered allmulticast mode
[ 1444.315865][T14792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1444.356001][T14792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1444.389341][T25400] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[ 1444.466531][T14802] netlink: 'syz.7.8444': attribute type 9 has an invalid length.
[ 1444.524946][   T29] kauditd_printk_skb: 17 callbacks suppressed
[ 1444.524965][   T29] audit: type=1326 audit(1781914811.324:17172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14801 comm="syz.7.8444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1444.561882][T25400] usb 6-1: device descriptor read/64, error -71
[ 1444.597173][   T29] audit: type=1326 audit(1781914811.324:17173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14801 comm="syz.7.8444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1444.647352][   T29] audit: type=1326 audit(1781914811.364:17174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14801 comm="syz.7.8444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1444.696896][   T29] audit: type=1326 audit(1781914811.384:17175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14801 comm="syz.7.8444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3299d9ce59 code=0x0
[ 1444.736869][T25387] usb 3-1: USB disconnect, device number 126
[ 1444.809432][T25400] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[ 1444.826137][T14812] fuse: Unknown parameter 'grou00000000000000000000'
[ 1444.939061][T25400] usb 6-1: device descriptor read/64, error -71
[ 1445.049694][T25400] usb usb6-port1: attempt power cycle
[ 1445.399415][T25400] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[ 1445.419399][T25400] usb 6-1: device descriptor read/8, error -71
[ 1445.529279][T27365] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1445.648397][   T29] audit: type=1326 audit(1781914812.444:17176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.7.8450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1445.659001][T25400] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[ 1445.710447][T27365] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1445.734516][T27365] usb 9-1: config 0 has no interfaces?
[ 1445.736456][   T29] audit: type=1326 audit(1781914812.454:17177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.7.8450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1445.796727][T25400] usb 6-1: device descriptor read/8, error -71
[ 1445.804789][T27365] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1445.817339][T27365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1445.818112][   T29] audit: type=1326 audit(1781914812.454:17178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.7.8450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1445.877087][T27365] usb 9-1: Product: syz
[ 1445.889713][T27365] usb 9-1: Manufacturer: syz
[ 1445.906333][T27365] usb 9-1: SerialNumber: syz
[ 1445.916713][   T29] audit: type=1326 audit(1781914812.454:17179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.7.8450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1445.919476][T25400] usb usb6-port1: unable to enumerate USB device
[ 1445.977662][T27365] usb 9-1: config 0 descriptor??
[ 1446.036348][   T29] audit: type=1326 audit(1781914812.454:17180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.7.8450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1446.102650][   T29] audit: type=1326 audit(1781914812.454:17181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.7.8450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3299d9ce59 code=0x7ffc0000
[ 1446.271572][T14825] bridge0: port 1(syz_tun) entered blocking state
[ 1446.278307][T14825] bridge0: port 1(syz_tun) entered forwarding state
[ 1446.305558][T14825] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1446.349717][T14825] 8021q: adding VLAN 0 to HW filter on device team0
[ 1446.397559][T14825] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1446.514975][T14825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1446.557253][T14825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1446.593016][T19884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1446.601448][T19884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1446.610628][T19884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1446.618568][T19884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1446.628159][T19884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1446.704226][T14825] veth1_vlan: left promiscuous mode
[ 1446.765058][T14825] veth0_vlan: left promiscuous mode
[ 1446.780023][T14825] veth0_vlan: entered promiscuous mode
[ 1446.808472][T14825] veth1_vlan: entered promiscuous mode
[ 1446.821947][T14825] tipc: Resetting bearer <eth:ipvlan0>
[ 1446.829240][T14825] tipc: Resetting bearer <eth:ipvlan0>
[ 1446.837570][T14825] veth1_macvtap: left promiscuous mode
[ 1446.846073][T14825] veth0_macvtap: left promiscuous mode
[ 1446.857636][T14825] veth0_macvtap: entered promiscuous mode
[ 1446.869740][T14864] input: syz0 as /devices/virtual/input/input201
[ 1446.884819][T14825] veth1_macvtap: entered promiscuous mode
[ 1446.895551][T14864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1446.932527][T14825] 8021q: adding VLAN 0 to HW filter on device 
[ 1446.940118][T14864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1446.957349][T14825] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1447.026728][T14825] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1447.041272][T14825] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1447.067715][T14825] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1447.102855][T14825] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1447.166272][T13975] netdevsim netdevsim8 : set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.185641][T13975] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.203073][T25400] usb 9-1: USB disconnect, device number 16
[ 1447.324136][T13975] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.341994][T14890] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1447.364091][ T8602] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.386655][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.401100][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.417541][T13975] ip6_tunnel: K xmit: Local address not yet configured!
[ 1447.458598][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.490657][T13975] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1447.510310][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1448.343857][T14861] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1448.369872][T14861] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1448.372807][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8462'.
[ 1448.409566][T14861] bridge_slave_0: entered allmulticast mode
[ 1448.418439][T14861] bridge_slave_0: entered promiscuous mode
[ 1448.427452][T14861] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1448.436051][T14861] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1448.451900][T14861] bridge_slave_1: entered allmulticast mode
[ 1448.467890][T14861] bridge_slave_1: entered promiscuous mode
[ 1448.588647][T14861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1448.634195][T14861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1448.689038][T19884] Bluetooth: hci4: command tx timeout
[ 1448.756676][T14861] team0: Port device team_slave_0 added
[ 1448.767930][T14861] team0: Port device team_slave_1 added
[ 1448.806514][T14861] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1448.815525][T14861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1448.895371][T14861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1449.015465][T14861] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1449.039634][T15114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1449.055080][T14861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1449.056804][T15115] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1449.117492][T15114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1449.163818][T14861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1449.346655][T14861] hsr_slave_0: entered promiscuous mode
[ 1449.378031][T14861] hsr_slave_1: entered promiscuous mode
[ 1449.401181][T14861] debugfs: 'hsr0' already exists in 'hsr'
[ 1449.418494][T14861] Cannot create hsr debugfs directory
[ 1449.605091][T15168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1449.644779][T15168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1449.728506][T15168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1449.757784][T15168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1450.134536][T15273] 8021q: VLANs not supported on nlmon0
[ 1450.279267][T25400] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1450.406637][T14861] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1450.426443][T14861] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1450.434335][T25400] usb 6-1: device descriptor read/64, error -71
[ 1450.450627][T14861] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1450.474077][T14861] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1450.490226][T14861] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1450.511623][T14861] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1450.532436][T14861] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1450.551970][T14861] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1450.610249][T25387] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1450.664274][T14861] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1450.689151][T25400] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1450.710061][T14861] 8021q: adding VLAN 0 to HW filter on device team0
[ 1450.754334][T13971] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1450.761959][T13971] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1450.769063][T19884] Bluetooth: hci4: command tx timeout
[ 1450.788025][T13971] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1450.795628][T13971] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1450.811282][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8476'.
[ 1450.838999][T25400] usb 6-1: device descriptor read/64, error -71
[ 1450.916073][T14861] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1450.929249][T25387] usb 9-1: device descriptor read/64, error -71
[ 1450.959414][T25400] usb usb6-port1: attempt power cycle
[ 1450.996404][T14861] veth0_vlan: entered promiscuous mode
[ 1451.021120][T14861] veth1_vlan: entered promiscuous mode
[ 1451.079580][T14861] veth0_macvtap: entered promiscuous mode
[ 1451.102556][T14861] veth1_macvtap: entered promiscuous mode
[ 1451.131553][T14861] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1451.155788][T14861] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1451.178436][ T8595] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1451.198815][ T8595] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1451.210738][T25387] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1451.221954][ T8595] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1451.238472][ T8595] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1451.249064][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1451.256786][    C1] ip6_tunnel: K xmit: Local address not yet configured!
[ 1451.319027][T25400] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1451.327120][ T8602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1451.340728][ T8602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1451.350081][T25400] usb 6-1: device descriptor read/8, error -71
[ 1451.359687][T25387] usb 9-1: device descriptor read/64, error -71
[ 1451.369870][ T8595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1451.378098][ T8595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1451.480258][T25387] usb usb9-port1: attempt power cycle
[ 1451.589052][T25400] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1451.609605][T25400] usb 6-1: device descriptor read/8, error -71
[ 1451.719556][T25400] usb usb6-port1: unable to enumerate USB device
[ 1451.840014][T25387] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1451.871371][T22696] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1451.890853][T25387] usb 9-1: device descriptor read/8, error -71
[ 1451.923936][T15331] kvm: apic: phys broadcast and lowest prio
[ 1451.932191][T15331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1451.942522][T15331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1452.040088][T22696] usb 3-1: Using ep0 maxpacket: 16
[ 1452.051602][T22696] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[ 1452.060900][T22696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1452.069091][T22696] usb 3-1: Product: syz
[ 1452.073283][T22696] usb 3-1: Manufacturer: О
[ 1452.077797][T22696] usb 3-1: SerialNumber: syz
[ 1452.139518][T25387] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1452.180250][T25387] usb 9-1: device descriptor read/8, error -71
[ 1452.291474][T22696] usb 3-1: BAAD SPEAKER p_chmask mismatch
[ 1452.300826][T25387] usb usb9-port1: unable to enumerate USB device
[ 1452.325253][T22696] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1452.354450][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1452.456676][T15359] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1452.522615][T15323] syzkaller1: entered promiscuous mode
[ 1452.600532][T15323] syzkaller1: entered allmulticast mode
[ 1452.617374][T15362] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8454'.
[ 1452.634482][T15366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1452.649878][T15362] netlink: 30 bytes leftover after parsing attributes in process `syz.2.8454'.
[ 1452.662019][T15366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1452.670917][T15362] netlink: 30 bytes leftover after parsing attributes in process `syz.2.8454'.
[ 1452.850238][T19884] Bluetooth: hci4: command tx timeout
[ 1452.896490][   T29] kauditd_printk_skb: 8 callbacks suppressed
[ 1452.896601][   T29] audit: type=1326 audit(1781914819.684:17190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15365 comm="syz.3.8481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f23d9ce59 code=0x0
[ 1453.709388][T25375] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1453.733280][T15426] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8486'.
[ 1453.835209][T15433] loop3: detected capacity change from 0 to 7
[ 1453.851734][T15433] Dev loop3: unable to read RDB block 7
[ 1453.863596][T15433]  loop3: unable to read partition table
[ 1453.876866][T15433] loop3: partition table beyond EOD, truncated
[ 1453.889320][T25375] usb 9-1: Using ep0 maxpacket: 32
[ 1453.895089][T15433] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[ 1453.911731][T25375] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1453.954011][T25375] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1453.984719][T25375] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1454.006622][T25375] usb 9-1: Product: syz
[ 1454.015069][T25375] usb 9-1: Manufacturer: syz
[ 1454.024873][T25375] usb 9-1: SerialNumber: syz
[ 1454.044060][T25375] usb 9-1: config 0 descriptor??
[ 1454.056680][T15414] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1454.066141][T29484] usb 3-1: USB disconnect, device number 127
[ 1454.092663][T25375] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1454.103761][T25375] hub 9-1:0.0: probe with driver hub failed with error -5
[ 1454.289743][T25389] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1454.399255][T25375] usb 9-1: USB disconnect, device number 21
[ 1454.459535][T25389] usb 6-1: Using ep0 maxpacket: 16
[ 1454.472633][T25389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1454.485115][T25389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1454.497009][T25389] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1454.497116][   T29] audit: type=1326 audit(1781914821.294:17191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.8.8484" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bb659ce59 code=0x0
[ 1454.535351][T25389] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1454.544989][T25389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1454.555596][T25389] usb 6-1: config 0 descriptor??
[ 1454.627329][T15470] netlink: 'syz.7.8489': attribute type 1 has an invalid length.
[ 1454.666356][T15470] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1454.688096][T15504] bond3: (slave batadv_slave_1): making interface the new active one
[ 1454.702172][T15504] bond3: (slave batadv_slave_1): Enslaving as an active interface with an up link
[ 1454.736738][T15506] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1454.929593][T19884] Bluetooth: hci4: command tx timeout
[ 1454.983099][T25389] microsoft 0003:045E:07DA.006B: item fetching failed at offset 30/34
[ 1455.006842][T25389] microsoft 0003:045E:07DA.006B: parse failed
[ 1455.018270][T25389] microsoft 0003:045E:07DA.006B: probe with driver microsoft failed with error -22
[ 1455.031082][T15517] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 1455.058453][T15517] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1455.146101][T15512] syzkaller1: entered promiscuous mode
[ 1455.169549][T15512] syzkaller1: entered allmulticast mode
[ 1455.178819][T15512] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8492'.
[ 1455.191152][T15517] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1455.209168][T15512] netlink: 30 bytes leftover after parsing attributes in process `syz.7.8492'.
[ 1455.223286][T25400] usb 6-1: USB disconnect, device number 39
[ 1455.232336][T15512] netlink: 30 bytes leftover after parsing attributes in process `syz.7.8492'.
[ 1455.867297][T15543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1455.888221][T15543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1455.962852][T15548] FAULT_INJECTION: forcing a failure.
[ 1455.962852][T15548] name failslab, interval 1, probability 0, space 0, times 0
[ 1455.975761][T15548] CPU: 1 UID: 0 PID: 15548 Comm: syz.5.8495 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1455.975790][T15548] Tainted: [L]=SOFTLOCKUP
[ 1455.975797][T15548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1455.975808][T15548] Call Trace:
[ 1455.975816][T15548]  <TASK>
[ 1455.975824][T15548]  dump_stack_lvl+0xe8/0x150
[ 1455.975851][T15548]  should_fail_ex+0x40c/0x560
[ 1455.975881][T15548]  should_failslab+0xa8/0x100
[ 1455.975909][T15548]  __kmalloc_noprof+0xe8/0x750
[ 1455.975932][T15548]  ? security_task_alloc+0x4d/0x330
[ 1455.975958][T15548]  security_task_alloc+0x4d/0x330
[ 1455.975982][T15548]  ? copy_process+0xd2b/0x42e0
[ 1455.976006][T15548]  copy_process+0x1c57/0x42e0
[ 1455.976036][T15548]  ? copy_process+0xd2b/0x42e0
[ 1455.976062][T15548]  ? __pfx_copy_process+0x10/0x10
[ 1455.976085][T15548]  ? __raw_spin_lock_init+0x45/0x100
[ 1455.976109][T15548]  ? mutex_init_lockdep+0xdf/0x110
[ 1455.976130][T15548]  vhost_task_create+0x1f9/0x380
[ 1455.976149][T15548]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[ 1455.976173][T15548]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[ 1455.976197][T15548]  ? __pfx_vhost_task_create+0x10/0x10
[ 1455.976219][T15548]  ? __pfx_vhost_task_fn+0x10/0x10
[ 1455.976241][T15548]  ? kasan_save_track+0x4f/0x80
[ 1455.976262][T15548]  ? kasan_save_track+0x3e/0x80
[ 1455.976283][T15548]  ? kasan_save_free_info+0x40/0x50
[ 1455.976301][T15548]  ? __kasan_slab_free+0x5c/0x80
[ 1455.976323][T15548]  ? kfree+0x1c5/0x640
[ 1455.976343][T15548]  kvm_mmu_post_init_vm+0x147/0x2b0
[ 1455.976369][T15548]  kvm_arch_vcpu_ioctl_run+0x11f/0x2070
[ 1455.976399][T15548]  ? __mutex_trylock_common+0x15f/0x270
[ 1455.976420][T15548]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1455.976455][T15548]  ? rcu_is_watching+0x15/0xb0
[ 1455.976475][T15548]  ? trace_contention_end+0x3d/0x140
[ 1455.976497][T15548]  ? __mutex_lock+0x30d/0x1550
[ 1455.976521][T15548]  ? rcu_is_watching+0x15/0xb0
[ 1455.976540][T15548]  ? trace_irq_enable+0x3b/0x140
[ 1455.976567][T15548]  ? rcu_is_watching+0x15/0xb0
[ 1455.976585][T15548]  ? kvm_vcpu_ioctl+0x27f/0xfd0
[ 1455.976608][T15548]  ? get_task_pid+0x22/0x310
[ 1455.976626][T15548]  ? do_raw_write_lock+0x11d/0x260
[ 1455.976649][T15548]  ? rcu_is_watching+0x15/0xb0
[ 1455.976668][T15548]  ? lock_release+0x4b/0x3c0
[ 1455.976699][T15548]  ? get_task_pid+0x22/0x310
[ 1455.976717][T15548]  kvm_vcpu_ioctl+0xa61/0xfd0
[ 1455.976742][T15548]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1455.976764][T15548]  ? hook_file_ioctl+0x1f0/0x5c0
[ 1455.976793][T15548]  ? lock_release+0x4b/0x3c0
[ 1455.976812][T15548]  ? __fget_files+0x2a/0x420
[ 1455.976832][T15548]  ? __fget_files+0x3a2/0x420
[ 1455.976850][T15548]  ? __fget_files+0x2a/0x420
[ 1455.976871][T15548]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1455.976895][T15548]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1455.976917][T15548]  __se_sys_ioctl+0xfc/0x170
[ 1455.976940][T15548]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1455.976960][T15548]  do_syscall_64+0x174/0x580
[ 1455.976981][T15548]  ? trace_irq_disable+0x3b/0x140
[ 1455.977005][T15548]  ? clear_bhb_loop+0x40/0x90
[ 1455.977025][T15548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1455.977043][T15548] RIP: 0033:0x7f8cc3d9ce59
[ 1455.977059][T15548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1455.977075][T15548] RSP: 002b:00007f8cc4d15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1455.977095][T15548] RAX: ffffffffffffffda RBX: 00007f8cc4015fa0 RCX: 00007f8cc3d9ce59
[ 1455.977109][T15548] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1455.977121][T15548] RBP: 00007f8cc4d15090 R08: 0000000000000000 R09: 0000000000000000
[ 1455.977132][T15548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1455.977144][T15548] R13: 00007f8cc4016038 R14: 00007f8cc4015fa0 R15: 00007f8cc413fa48
[ 1455.977163][T15548]  </TASK>
[ 1456.709835][T15571] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1457.079248][T25387] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[ 1457.276643][T25387] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1457.296202][T25387] usb 6-1: not running at top speed; connect to a high speed hub
[ 1457.326330][T25387] usb 6-1: config 17 has an invalid interface number: 8 but max is 1
[ 1457.344563][T25387] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1457.424696][T25387] usb 6-1: config 17 has no interface number 0
[ 1457.495284][T25387] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1457.547438][T25387] usb 6-1: config 17 interface 8 has no altsetting 0
[ 1457.600436][T25387] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1457.639491][T25387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1457.701127][T25387] usb 6-1: Product: syz
[ 1457.713972][T25387] usb 6-1: Manufacturer: syz
[ 1457.732859][T25387] usb 6-1: SerialNumber: syz
[ 1458.769170][    C1] ip6_tunnel: K xmit: Local address not yet configured!
[ 1458.776341][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1459.020560][T15647] syzkaller1: entered promiscuous mode
[ 1459.040383][T15647] syzkaller1: entered allmulticast mode
[ 1459.429611][T15672] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1459.569393][T29484] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1459.675394][T25387] usb 6-1: selecting invalid altsetting 0
[ 1459.710570][T29484] usb 3-1: device descriptor read/64, error -71
[ 1459.727505][T25387] usb 6-1: USB disconnect, device number 40
[ 1459.959119][T29484] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1460.026992][T15716] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1460.109371][T29484] usb 3-1: device descriptor read/64, error -71
[ 1460.229389][T29484] usb usb3-port1: attempt power cycle
[ 1460.470747][T15729] loop3: detected capacity change from 0 to 7
[ 1460.498150][T15729] Dev loop3: unable to read RDB block 7
[ 1460.526884][T15729]  loop3: unable to read partition table
[ 1460.559118][T15729] loop3: partition table beyond EOD, truncated
[ 1460.583284][T29484] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1460.602725][T15729] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[ 1460.640077][T29484] usb 3-1: device descriptor read/8, error -71
[ 1460.899226][T29484] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1460.929508][T29484] usb 3-1: device descriptor read/8, error -71
[ 1461.040175][T29484] usb usb3-port1: unable to enumerate USB device
[ 1461.225013][T15756] can: request_module (can-proto-0) failed.
[ 1461.649708][T29484] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1461.809469][T29484] usb 6-1: Using ep0 maxpacket: 32
[ 1461.826205][T29484] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1461.850733][T29484] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1461.866576][T29484] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1461.887253][T29484] usb 6-1: Product: syz
[ 1461.896458][T29484] usb 6-1: Manufacturer: syz
[ 1461.913705][T29484] usb 6-1: SerialNumber: syz
[ 1461.927463][T29484] usb 6-1: config 0 descriptor??
[ 1461.942900][T15773] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1461.974953][T29484] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1461.983143][T29484] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1462.289433][T29484] usb 6-1: USB disconnect, device number 41
[ 1462.392402][   T29] audit: type=1326 audit(1781914829.194:17192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.5.8532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cc3d9ce59 code=0x0
[ 1462.505665][T15785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1462.519821][T15785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1462.709341][  T810] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1462.869010][  T810] usb 3-1: Using ep0 maxpacket: 32
[ 1462.875951][  T810] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1462.888247][  T810] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1462.898013][  T810] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1462.906597][  T810] usb 3-1: Product: syz
[ 1462.911098][  T810] usb 3-1: Manufacturer: syz
[ 1462.915830][  T810] usb 3-1: SerialNumber: syz
[ 1462.922445][  T810] usb 3-1: config 0 descriptor??
[ 1462.933278][T15808] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1462.942533][  T810] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1462.949475][  T810] hub 3-1:0.0: probe with driver hub failed with error -5
[ 1463.260946][  T810] usb 3-1: USB disconnect, device number 6
[ 1463.362507][   T29] audit: type=1326 audit(1781914830.164:17193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15807 comm="syz.2.8536" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcac939ce59 code=0x0
[ 1464.332143][T15855] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1464.528988][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8544'.
[ 1464.618710][T15872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1464.678851][T15872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1464.830161][T15882] netlink: 'syz.7.8548': attribute type 10 has an invalid length.
[ 1464.852440][T15882] bond0: (slave bond_slave_0): Releasing backup interface
[ 1464.895751][T15882] team0: Port device bond_slave_0 added
[ 1465.771335][T15906] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1465.845766][  T810] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[ 1466.021121][  T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64
[ 1466.050413][  T810] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1466.069615][  T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1466.086567][  T810] usb 3-1: Product: syz
[ 1466.094530][  T810] usb 3-1: Manufacturer: syz
[ 1466.114804][  T810] usb 3-1: SerialNumber: syz
[ 1466.132815][  T810] usb 3-1: config 0 descriptor??
[ 1466.155533][T15898] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1466.169300][T29484] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 1466.329211][T29484] usb 9-1: Using ep0 maxpacket: 32
[ 1466.347690][T29484] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1466.405444][T29484] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1466.409300][  T810] dm9601 3-1:0.0: probe with driver dm9601 failed with error -71
[ 1466.456186][T29484] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1466.493301][T29484] usb 9-1: Product: syz
[ 1466.507152][T29484] usb 9-1: Manufacturer: syz
[ 1466.525779][T29484] usb 9-1: SerialNumber: syz
[ 1466.572189][T29484] usb 9-1: config 0 descriptor??
[ 1466.623689][T15916] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1466.640287][  T810] usb 3-1: USB disconnect, device number 7
[ 1466.656772][T29484] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1466.690742][T29484] hub 9-1:0.0: probe with driver hub failed with error -5
[ 1466.770589][T15945] syzkaller1: entered promiscuous mode
[ 1466.784950][T15945] syzkaller1: entered allmulticast mode
[ 1466.960460][T29484] usb 9-1: USB disconnect, device number 22
[ 1466.979846][T15955] loop5: detected capacity change from 0 to 2640
[ 1466.988128][T15955] buffer_io_error: 23 callbacks suppressed
[ 1466.988159][T15955] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1467.004853][T15955] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1467.017235][T15955] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1467.026379][T15955] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1467.039910][T27365] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1467.042754][T15955] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1467.061764][   T29] audit: type=1326 audit(1781914833.864:17194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.8.8554" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bb659ce59 code=0x0
[ 1467.090602][T15962] Buffer I/O error on dev loop5, logical block 0, lost async page write
[ 1467.111875][T15962] Buffer I/O error on dev loop5, logical block 1, lost async page write
[ 1467.124688][T15955]  loop5: unable to read partition table
[ 1467.132318][T15955] loop_reread_partitions: partition scan of loop5 (3�����) failed (rc=-5)
[ 1467.143650][T15962] Buffer I/O error on dev loop5, logical block 2, lost async page write
[ 1467.156360][T15962] Buffer I/O error on dev loop5, logical block 3, lost async page write
[ 1467.166434][T15962] Buffer I/O error on dev loop5, logical block 4, lost async page write
[ 1467.229902][T27365] usb 6-1: Using ep0 maxpacket: 32
[ 1467.237403][T27365] usb 6-1: config 2 has an invalid interface number: 194 but max is 0
[ 1467.248032][T27365] usb 6-1: config 2 has no interface number 0
[ 1467.275008][T27365] usb 6-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833
[ 1467.303778][T27365] usb 6-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024
[ 1467.342557][T27365] usb 6-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid maxpacket 26565, setting to 1024
[ 1467.382138][T27365] usb 6-1: config 2 interface 194 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024
[ 1467.408641][T27365] usb 6-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[ 1467.433695][T27365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1467.479867][T15945] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1467.501232][T15945] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1467.529145][T15945] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1467.578582][T15981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1467.599644][T15981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1467.730086][T25387] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1467.764539][T27365] usb 6-1: string descriptor 0 read error: -71
[ 1467.783712][T27365] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1467.821816][   T29] audit: type=1326 audit(1781914834.624:17195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15979 comm="syz.3.8561" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f23d9ce59 code=0x0
[ 1467.834950][T27365] usb 6-1: USB disconnect, device number 42
[ 1467.869529][T25387] usb 3-1: device descriptor read/64, error -71
[ 1468.119055][T25387] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1468.249022][T25387] usb 3-1: device descriptor read/64, error -71
[ 1468.359283][T25387] usb usb3-port1: attempt power cycle
[ 1468.521518][T16026] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1468.709358][T25387] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1468.740054][T25387] usb 3-1: device descriptor read/8, error -71
[ 1468.989105][T25387] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1469.033112][T25387] usb 3-1: device descriptor read/8, error -71
[ 1469.103830][T16036] netlink: 'syz.8.8565': attribute type 1 has an invalid length.
[ 1469.159442][T25387] usb usb3-port1: unable to enumerate USB device
[ 1469.182286][T16036] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1469.216713][T16067] bond3: (slave geneve3): making interface the new active one
[ 1469.239098][T16067] bond3: (slave geneve3): Enslaving as an active interface with an up link
[ 1470.641253][T16119] netlink: 'syz.3.8574': attribute type 10 has an invalid length.
[ 1470.667581][T16119] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8574'.
[ 1470.690718][T16119] team0: Port device geneve1 added
[ 1470.721822][T16119] netlink: 10184 bytes leftover after parsing attributes in process `syz.3.8574'.
[ 1470.740942][T29484] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1470.759889][T16119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8574'.
[ 1470.776230][T16130] loop8: detected capacity change from 0 to 7
[ 1470.799139][T16119] kvm: apic: phys broadcast and lowest prio
[ 1470.800971][T16130] Dev loop8: unable to read RDB block 7
[ 1470.817183][T16119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1470.827814][T16119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1470.835154][T16130]  loop8: unable to read partition table
[ 1470.850260][T16130] loop8: partition table beyond EOD, truncated
[ 1470.857203][T16130] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1470.910673][T29484] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1470.926953][T29484] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1470.958068][T29484] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1470.983282][T29484] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1471.007481][T29484] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1471.033321][T29484] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1471.060105][T29484] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1471.080417][T29484] usb 9-1: Product: syz
[ 1471.090430][T29484] usb 9-1: Manufacturer: syz
[ 1471.113398][T29484] cdc_wdm 9-1:1.0: skipping garbage
[ 1471.126753][T29484] cdc_wdm 9-1:1.0: skipping garbage
[ 1471.154116][T29484] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1471.174146][T29484] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1471.267659][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8582'.
[ 1471.446197][T16176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1471.463276][T16176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1471.483909][T16182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1471.510710][T16182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1471.569072][T25387] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1471.571797][    C1] cdc_wdm 9-1:1.0: Unexpected error -71
[ 1471.582510][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1471.589119][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1471.595879][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1471.602483][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1471.608978][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1471.615587][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1471.622539][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1471.629156][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1471.635622][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1471.642225][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1471.648534][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1471.655147][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1471.662213][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1471.668823][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1471.675580][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1471.682205][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1471.688474][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1471.695069][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1471.701625][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1471.703298][T25387] usb 3-1: device descriptor read/64, error -71
[ 1471.708229][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1471.711531][T25375] usb 9-1: USB disconnect, device number 23
[ 1471.711574][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1471.989081][T25387] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1472.119126][T25387] usb 3-1: device descriptor read/64, error -71
[ 1472.230197][T25387] usb usb3-port1: attempt power cycle
[ 1472.570294][T25387] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1472.584343][T16211] syzkaller0: entered promiscuous mode
[ 1472.590660][T16211] syzkaller0: entered allmulticast mode
[ 1472.611035][T25387] usb 3-1: device descriptor read/8, error -71
[ 1472.861018][T25387] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1472.873177][T25389] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 1472.909884][T25387] usb 3-1: device descriptor read/8, error -71
[ 1472.951824][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8593'.
[ 1473.030731][T25387] usb usb3-port1: unable to enumerate USB device
[ 1473.046238][T25389] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1473.046294][T25389] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1473.046341][T25389] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[ 1473.081427][T25389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1473.086646][T25389] usb 9-1: config 0 descriptor??
[ 1473.234239][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8596'.
[ 1473.269272][T25375] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1473.430925][T25375] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[ 1473.440061][T25375] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129
[ 1473.451234][T25375] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[ 1473.460670][T25375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1473.468726][T25375] usb 6-1: Product: syz
[ 1473.473042][T25375] usb 6-1: Manufacturer: syz
[ 1473.477657][T25375] usb 6-1: SerialNumber: syz
[ 1473.483823][T25375] usb 6-1: config 0 descriptor??
[ 1473.489177][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1473.496829][    C1] ip6_tunnel: K xmit: Local address not yet configured!
[ 1473.511870][T25389] arvo 0003:1E7D:30D4.006C: unknown main item tag 0x0
[ 1473.523425][T25389] arvo 0003:1E7D:30D4.006C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.8-1/input0
[ 1473.933786][T16225] syzkaller1: entered promiscuous mode
[ 1473.940175][T16225] syzkaller1: entered allmulticast mode
[ 1474.117592][T25375] mos7840 6-1:0.0: required endpoints missing
[ 1474.124959][T16252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1474.144133][T16252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1474.167113][T25375] usb 6-1: USB disconnect, device number 43
[ 1474.324315][T16300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1474.346632][T16300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1474.362388][T16300] netlink: 'syz.3.8600': attribute type 14 has an invalid length.
[ 1474.391634][T25389] arvo 0003:1E7D:30D4.006C: couldn't init struct arvo_device
[ 1474.410862][T25389] arvo 0003:1E7D:30D4.006C: couldn't install keyboard
[ 1474.423155][T25389] arvo 0003:1E7D:30D4.006C: probe with driver arvo failed with error -71
[ 1474.438037][T25389] usb 9-1: USB disconnect, device number 24
[ 1474.619307][T25375] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1474.628295][T16336] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1474.769332][T25375] usb 6-1: Using ep0 maxpacket: 16
[ 1474.775970][T25375] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1474.787721][T25375] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1474.807181][T25375] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1474.817317][T25375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1474.826460][T25375] usb 6-1: Product: syz
[ 1474.831230][T25375] usb 6-1: Manufacturer: syz
[ 1474.836105][T25375] usb 6-1: SerialNumber: syz
[ 1474.844058][T25375] usb 6-1: config 0 descriptor??
[ 1475.059285][    C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1475.076579][T25375] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input204
[ 1475.099175][T25375] send_packet: 10 callbacks suppressed
[ 1475.099191][T25375] imon:send_packet: packet tx failed (-71)
[ 1475.110614][T16359] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8608'.
[ 1475.126452][T16348] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len
[ 1475.136526][T25375] imon 6-1:0.0: panel buttons/knobs setup failed
[ 1475.211926][T25375] rc_core: IR keymap rc-imon-pad not found
[ 1475.239295][T25375] Registered IR keymap rc-empty
[ 1475.244396][T25375] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1475.271439][T25375] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1475.289179][T25375] imon:send_packet: packet tx failed (-71)
[ 1475.320564][T25375] imon 6-1:0.0: remote input dev register failed
[ 1475.331552][T25375] imon 6-1:0.0: imon_init_intf0: rc device setup failed
[ 1475.353503][T25375] imon 6-1:0.0: unable to initialize intf0, err 0
[ 1475.364401][T25375] imon:imon_probe: failed to initialize context!
[ 1475.372466][T25375] imon 6-1:0.0: unable to register, err -19
[ 1475.383013][T25375] usb 6-1: USB disconnect, device number 44
[ 1475.689002][T25375] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1475.849288][T25375] usb 6-1: Using ep0 maxpacket: 16
[ 1475.861925][T25375] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1475.881669][T16401] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1475.889160][T25375] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1475.900276][T25375] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1475.922263][T25375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1475.943193][T25375] usb 6-1: Product: syz
[ 1475.954428][T25375] usb 6-1: Manufacturer: syz
[ 1475.966578][T25375] usb 6-1: SerialNumber: syz
[ 1475.986462][T25375] usb 6-1: config 0 descriptor??
[ 1476.222717][T25375] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input206
[ 1476.306556][T16410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8618'.
[ 1476.366057][T16410] syzkaller1: entered promiscuous mode
[ 1476.376778][T16410] syzkaller1: entered allmulticast mode
[ 1476.600138][T25375] rc_core: IR keymap rc-imon-pad not found
[ 1476.637178][T25375] Registered IR keymap rc-empty
[ 1476.654969][T25375] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1476.698674][T25375] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1476.725308][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8619'.
[ 1476.760048][T25375] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1476.797649][T25375] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input207
[ 1476.846380][T25375] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:45> initialized
[ 1476.946954][    C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored
[ 1477.231373][T16434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1477.264837][T16434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1477.323474][T16445] loop8: detected capacity change from 0 to 7
[ 1477.335399][T16445] Dev loop8: unable to read RDB block 7
[ 1477.342555][T16445]  loop8: unable to read partition table
[ 1477.349363][T16445] loop8: partition table beyond EOD, truncated
[ 1477.355888][T16445] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1477.373374][    C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1477.374569][T25389] usb 6-1: USB disconnect, device number 45
[ 1477.598827][T16469] netlink: 164 bytes leftover after parsing attributes in process `syz.8.8622'.
[ 1477.941023][T16487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1477.979965][T25400] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1477.990201][T16487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1478.055655][   T29] audit: type=1326 audit(1781914844.854:17196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.5.8627" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cc3d9ce59 code=0x0
[ 1478.159664][T25400] usb 3-1: Using ep0 maxpacket: 32
[ 1478.171512][T25400] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1478.189772][T25400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1478.214519][T25400] usb 3-1: config 0 descriptor??
[ 1478.231947][T25400] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1478.433069][T25400] gspca_sunplus: reg_w_riv err -71
[ 1478.443256][T16475] netlink: 344 bytes leftover after parsing attributes in process `syz.2.8624'.
[ 1478.454480][T25400] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[ 1478.481456][T25400] usb 3-1: USB disconnect, device number 16
[ 1478.640213][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8629'.
[ 1478.662041][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8629'.
[ 1478.693105][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8629'.
[ 1478.716888][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8629'.
[ 1478.745099][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8629'.
[ 1478.762090][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8629'.
[ 1478.917670][T16530] loop8: detected capacity change from 0 to 7
[ 1478.931895][T16530] Dev loop8: unable to read RDB block 7
[ 1478.939622][T16530]  loop8: unable to read partition table
[ 1478.948741][T16533] netlink: 'syz.8.8631': attribute type 4 has an invalid length.
[ 1478.957383][T16530] loop8: partition table beyond EOD, truncated
[ 1478.970514][T16530] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1479.253037][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[ 1479.261424][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[ 1479.450678][T25389] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1479.504869][T16576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1479.514990][T16576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1479.611411][T25389] usb 3-1: device descriptor read/64, error -71
[ 1479.708370][T16597] loop8: detected capacity change from 0 to 7
[ 1479.715839][T16597] Dev loop8: unable to read RDB block 7
[ 1479.724524][T16597]  loop8: unable to read partition table
[ 1479.732013][T16597] loop8: partition table beyond EOD, truncated
[ 1479.738328][T16597] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1479.879089][T25389] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1480.019160][T25389] usb 3-1: device descriptor read/64, error -71
[ 1480.029298][T27365] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1480.141010][T25389] usb usb3-port1: attempt power cycle
[ 1480.190759][T27365] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1480.211265][T27365] usb 6-1: config 129 has an invalid interface number: 135 but max is 0
[ 1480.227199][T27365] usb 6-1: config 129 has an invalid interface number: 5 but max is 0
[ 1480.250801][T27365] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[ 1480.278249][T27365] usb 6-1: config 129 has no interface number 0
[ 1480.295667][T27365] usb 6-1: config 129 has no interface number 1
[ 1480.319863][T27365] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1480.346349][T27365] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[ 1480.365308][T27365] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[ 1480.382752][T27365] usb 6-1: config 129 interface 135 has no altsetting 0
[ 1480.392858][T27365] usb 6-1: config 129 interface 5 has no altsetting 0
[ 1480.420898][T27365] usb 6-1: string descriptor 0 read error: -22
[ 1480.427502][T27365] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[ 1480.470227][T27365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1480.510885][T27365] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1480.520915][T25389] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1480.526104][T16627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1480.543007][T27365] usb 6-1: MIDIStreaming interface descriptor not found
[ 1480.563578][T16627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1480.580095][T25389] usb 3-1: device descriptor read/8, error -71
[ 1480.714807][T16645] vlan0: entered promiscuous mode
[ 1480.820558][T25387] usb 6-1: USB disconnect, device number 46
[ 1480.870239][T25389] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1480.943334][T25389] usb 3-1: device descriptor read/8, error -71
[ 1481.005670][T16693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1481.026127][T16693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1481.072242][T25389] usb usb3-port1: unable to enumerate USB device
[ 1481.163376][T16714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1481.184523][T16714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1481.329232][ T6610] Bluetooth: hci0: command 0x0406 tx timeout
[ 1481.369004][T27365] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1481.406728][   T29] audit: type=1326 audit(1781914848.204:17197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16713 comm="syz.3.8649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f23d9ce59 code=0x0
[ 1481.443974][T16737] __nla_validate_parse: 130 callbacks suppressed
[ 1481.443994][T16737] netlink: 388 bytes leftover after parsing attributes in process `syz.5.8654'.
[ 1481.510549][T16744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1481.522916][T27365] usb 9-1: Using ep0 maxpacket: 16
[ 1481.531251][T27365] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1481.539373][T16744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1481.548322][T27365] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1481.559634][T27365] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1481.573130][T27365] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[ 1481.584577][T27365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1481.593414][T27365] usb 9-1: Product: syz
[ 1481.597600][T27365] usb 9-1: Manufacturer: syz
[ 1481.602366][T27365] usb 9-1: SerialNumber: syz
[ 1481.719074][T25400] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1481.813686][T27365] usb 9-1: Audio class v2/v3 interfaces need an interface association
[ 1481.822416][T27365] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1481.869135][T25400] usb 6-1: Using ep0 maxpacket: 8
[ 1481.875802][T25400] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[ 1481.885038][T25400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1481.896010][T25400] usb 6-1: config 0 descriptor??
[ 1481.911743][T25400] gm12u320 6-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[ 1481.920858][T25400] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5
[ 1481.931888][T25400] usb-storage 6-1:0.0: USB Mass Storage device detected
[ 1481.941214][T25400] usb-storage 6-1:0.0: device ignored
[ 1482.124879][T25400] usb 6-1: USB disconnect, device number 47
[ 1482.215645][T27365] usb 9-1: 2:1 : can't get Cluster Descriptor
[ 1482.428585][T25387] usb 9-1: USB disconnect, device number 25
[ 1482.529354][T25389] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1482.690441][T25389] usb 3-1: Using ep0 maxpacket: 32
[ 1482.697466][T25389] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1482.707091][T25389] usb 3-1: config 0 has no interface number 0
[ 1482.716460][T25389] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1482.726294][T25389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1482.735185][T25389] usb 3-1: Product: syz
[ 1482.749008][T25389] usb 3-1: Manufacturer: syz
[ 1482.754747][T25389] usb 3-1: SerialNumber: syz
[ 1482.764070][T25389] usb 3-1: config 0 descriptor??
[ 1483.187917][T25389] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1483.217431][T25389] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1483.879185][T25387] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1484.039093][T25387] usb 9-1: Using ep0 maxpacket: 16
[ 1484.047015][T25387] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1484.062018][T25387] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1484.072410][T25387] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1484.086791][T25387] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1484.096292][T25387] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1484.107775][T25387] usb 9-1: config 0 descriptor??
[ 1484.387083][T16874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1484.397622][T16874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1484.545531][T25387] microsoft 0003:045E:07DA.006D: item fetching failed at offset 30/34
[ 1484.557371][T25387] microsoft 0003:045E:07DA.006D: parse failed
[ 1484.564048][T25387] microsoft 0003:045E:07DA.006D: probe with driver microsoft failed with error -22
[ 1484.743366][T25389] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71
[ 1484.750194][T25400] usb 9-1: USB disconnect, device number 26
[ 1484.775236][T25389] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[ 1484.790785][T25389] usb 3-1: USB disconnect, device number 21
[ 1485.312749][T16909] IPv6: Can't replace route, no match found
[ 1485.321204][T16909] IPv6: Can't replace route, no match found
[ 1485.579450][T16947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8672'.
[ 1485.799598][T25389] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1485.832197][T16956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8674'.
[ 1485.860184][T27365] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1485.984619][T25389] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1485.999467][T25389] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1486.009010][T27365] usb 3-1: Using ep0 maxpacket: 16
[ 1486.025572][T25389] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1486.025623][T27365] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1486.047244][T27365] usb 3-1: config 1 has too many interfaces: 67, using maximum allowed: 32
[ 1486.050194][T25389] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1486.057627][T27365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1486.095172][T25389] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1486.096282][T27365] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 67
[ 1486.136413][T27365] usb 3-1: config 1 has no interface number 0
[ 1486.144371][T25389] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1486.161473][T27365] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1486.166253][T25389] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1486.173919][T27365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1486.180877][T25389] usb 9-1: Product: syz
[ 1486.189788][T27365] usb 3-1: Product: syz
[ 1486.199055][T25389] usb 9-1: Manufacturer: syz
[ 1486.200847][T27365] usb 3-1: Manufacturer: syz
[ 1486.208580][T27365] usb 3-1: SerialNumber: syz
[ 1486.231467][T25389] cdc_wdm 9-1:1.0: skipping garbage
[ 1486.246305][T25389] cdc_wdm 9-1:1.0: skipping garbage
[ 1486.256201][T25389] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1486.263420][T25389] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1486.351353][T29484] IPVS: starting estimator thread 0...
[ 1486.359461][T16985] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8680'.
[ 1486.438746][T16949] x_tables: duplicate underflow at hook 1
[ 1486.491449][T16986] IPVS: using max 85 ests per chain, 204000 per kthread
[ 1486.719954][T16942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1486.729983][T16942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1486.754573][T16942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1486.781613][T16942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1486.884594][T25387] usb 9-1: USB disconnect, device number 27
[ 1487.100303][T27365] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1487.182817][T27365] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2
[ 1487.222565][T27365] usb 3-1: USB disconnect, device number 22
[ 1487.252420][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1487.375003][  T810] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1487.529088][  T810] usb 6-1: device descriptor read/64, error -71
[ 1487.799162][  T810] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1487.939579][  T810] usb 6-1: device descriptor read/64, error -71
[ 1488.000027][T25389] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1488.059852][  T810] usb usb6-port1: attempt power cycle
[ 1488.183393][T25389] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1488.199082][T25389] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1488.208389][T25389] usb 9-1: can't read configurations, error -71
[ 1488.275868][T17099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1488.287692][T17099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.298673][T17099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1488.308697][T17099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.419292][  T810] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1488.439479][  T810] usb 6-1: device descriptor read/8, error -71
[ 1488.542738][T17097] syzkaller1: entered promiscuous mode
[ 1488.549556][T17097] syzkaller1: entered allmulticast mode
[ 1488.691566][  T810] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1488.720064][  T810] usb 6-1: device descriptor read/8, error -71
[ 1488.839688][  T810] usb usb6-port1: unable to enumerate USB device
[ 1489.296670][T17151] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8694'.
[ 1489.601979][T17171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1489.620304][T17171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1489.799147][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8697'.
[ 1490.020974][T25389] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1490.180329][T17194] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1490.190193][T17194] bond0: (slave bond1): Enslaving as an active interface with an up link
[ 1490.219658][T25389] usb 3-1: Using ep0 maxpacket: 8
[ 1490.243174][T25389] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1490.261932][T25389] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1490.277751][T25389] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.40
[ 1490.287915][T25389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1490.298165][T25389] usb 3-1: Product: 쩐択瘂ᖎ꼮ꘚ夋過㋃뻴ᔥ鲯峻玞㰖᝻퀤∗齦౐벣琸↿굫
[ 1490.311731][T25389] usb 3-1: Manufacturer: ఊ
[ 1490.316523][T25389] usb 3-1: SerialNumber: 닲躖⮵ѯ◭ཏⳊ굶⡁딬⧢迸衫鷀묮佬莥出遗᭗沩粛먖㉧आ袙⧺釽
[ 1490.499348][T29484] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1490.652357][T29484] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1490.661419][T29484] usb 6-1: config 129 has an invalid interface number: 135 but max is 0
[ 1490.670050][T29484] usb 6-1: config 129 has an invalid interface number: 5 but max is 0
[ 1490.678328][T29484] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[ 1490.687833][T29484] usb 6-1: config 129 has no interface number 0
[ 1490.695637][T29484] usb 6-1: config 129 has no interface number 1
[ 1490.703726][T29484] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1490.717603][T29484] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[ 1490.730598][T29484] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[ 1490.744234][T29484] usb 6-1: config 129 interface 135 has no altsetting 0
[ 1490.751518][T29484] usb 6-1: config 129 interface 5 has no altsetting 0
[ 1490.773323][T25389] usbhid 3-1:1.0: can't add hid device: -71
[ 1490.775290][T29484] usb 6-1: string descriptor 0 read error: -22
[ 1490.783183][T25389] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[ 1490.789220][T29484] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[ 1490.801295][T25389] usb 3-1: USB disconnect, device number 23
[ 1490.809444][T29484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1490.841517][T29484] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1490.848791][T29484] usb 6-1: MIDIStreaming interface descriptor not found
[ 1491.161049][T29484] usb 6-1: USB disconnect, device number 52
[ 1491.541723][T27365] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1491.699347][T27365] usb 3-1: Using ep0 maxpacket: 8
[ 1491.706781][T27365] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1491.718110][T27365] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1491.732560][T27365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1491.746988][T27365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1491.759701][T27365] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1491.781789][T27365] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1491.792835][T27365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1491.803081][T27365] usb 3-1: Product: syz
[ 1491.807855][T27365] usb 3-1: Manufacturer: syz
[ 1491.813131][T27365] usb 3-1: SerialNumber: syz
[ 1491.824460][T27365] usb 3-1: config 0 descriptor??
[ 1492.033692][T27365] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32
[ 1492.042649][T27365] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[ 1492.265677][  T810] usb 3-1: USB disconnect, device number 24
[ 1492.369403][T27365] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1492.529059][T27365] usb 9-1: Using ep0 maxpacket: 32
[ 1492.537395][T27365] usb 9-1: too many configurations: 17, using maximum allowed: 8
[ 1492.554375][T27365] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 1492.566155][T27365] usb 9-1: config 0 has no interface number 0
[ 1492.578053][T27365] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 1492.586559][T27365] usb 9-1: config 0 has no interface number 0
[ 1492.595485][T27365] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 1492.613616][T27365] usb 9-1: config 0 has no interface number 0
[ 1492.634727][T27365] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 1492.646688][T27365] usb 9-1: config 0 has no interface number 0
[ 1492.654504][T27365] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 1492.663000][T27365] usb 9-1: config 0 has no interface number 0
[ 1492.671245][T27365] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 1492.683235][T27365] usb 9-1: config 0 has no interface number 0
[ 1492.704121][T27365] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 1492.718094][T27365] usb 9-1: config 0 has no interface number 0
[ 1492.741426][T27365] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 1492.758991][T27365] usb 9-1: config 0 has no interface number 0
[ 1492.776839][T27365] usb 9-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[ 1492.805069][T27365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1492.836481][T27365] usb 9-1: Product: syz
[ 1492.846980][T27365] usb 9-1: Manufacturer: syz
[ 1492.864972][T27365] usb 9-1: SerialNumber: syz
[ 1492.884654][T27365] usb 9-1: config 0 descriptor??
[ 1492.917264][T27365] etas_es58x 9-1:0.2: Starting syz syz (Serial Number syz)
[ 1492.962707][T17333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1492.997409][T17333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1493.048507][T17333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1493.084190][T17333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1493.107121][T17333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1493.137580][T27365] etas_es58x 9-1:0.2: could not retrieve the product info string
[ 1493.138662][T17333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1493.431778][T17306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1493.506638][T17306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1494.144106][ T5287] etas_es58x 9-1:0.2 can0: bit-timing not yet defined
[ 1494.144186][    C0] etas_es58x 9-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0161.
[ 1494.162002][    C0] etas_es58x 9-1:0.2: es58x_check_rx_urb: Biggest expected size for rx urb_cmd is 7809 but receive a command of size 34670
[ 1494.174750][    C0] etas_es58x 9-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[ 1494.182787][    C0] etas_es58x 9-1:0.2: es58x_split_urb() returned error -EBADMSG
[ 1494.356889][    C0] etas_es58x 9-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[ 1494.366138][    C0] etas_es58x 9-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[ 1494.375284][    C0] etas_es58x 9-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[ 1494.384422][    C0] etas_es58x 9-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[ 1494.393555][    C0] etas_es58x 9-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO
[ 1494.401564][    C0] etas_es58x 9-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[ 1494.469101][ T5287] etas_es58x 9-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL
[ 1494.550374][T25389] usb 9-1: USB disconnect, device number 30
[ 1494.580061][T25389] etas_es58x 9-1:0.2: Disconnecting syz syz
[ 1495.569346][T29484] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1495.760757][T29484] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1495.778564][T29484] usb 3-1: config 129 has an invalid interface number: 135 but max is 0
[ 1495.799079][T29484] usb 3-1: config 129 has an invalid interface number: 5 but max is 0
[ 1495.823166][T29484] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[ 1495.858833][T29484] usb 3-1: config 129 has no interface number 0
[ 1495.874661][T29484] usb 3-1: config 129 has no interface number 1
[ 1495.888543][T29484] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1495.929723][T29484] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[ 1495.973300][T29484] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[ 1496.014859][T29484] usb 3-1: config 129 interface 135 has no altsetting 0
[ 1496.051430][T29484] usb 3-1: config 129 interface 5 has no altsetting 0
[ 1496.072667][T29484] usb 3-1: string descriptor 0 read error: -22
[ 1496.100132][T29484] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[ 1496.141847][T29484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1496.184601][T29484] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1496.213312][T29484] usb 3-1: MIDIStreaming interface descriptor not found
[ 1496.541483][T25400] usb 3-1: USB disconnect, device number 25
[ 1497.123520][T25387] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1497.299037][T25387] usb 6-1: Using ep0 maxpacket: 8
[ 1497.322960][T25387] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1497.380621][T25387] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1497.427721][T25387] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1497.452167][T25387] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1497.484762][T25387] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1497.511613][T25387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1497.639559][T18542] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1497.777128][T25387] usb 6-1: GET_CAPABILITIES returned 0
[ 1497.822980][T18542] usb 3-1: Using ep0 maxpacket: 32
[ 1497.842450][T25387] usbtmc 6-1:16.0: can't read capabilities
[ 1497.872480][T18542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1497.956663][T18542] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf
[ 1497.985970][T17524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1498.004181][T18542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1498.035712][T17524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1498.045705][T18542] usb 3-1: Product: syz
[ 1498.060615][T18542] usb 3-1: Manufacturer: syz
[ 1498.073166][  T810] usb 6-1: USB disconnect, device number 53
[ 1498.081751][T18542] usb 3-1: SerialNumber: syz
[ 1498.133389][T18542] usb 3-1: config 0 descriptor??
[ 1498.180556][T18542] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[ 1498.431683][T17539] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1498.458430][T17539] bond1: (slave lo): Enslaving as an active interface with an up link
[ 1498.505123][T17539] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1498.571318][  T810] usb 3-1: USB disconnect, device number 26
[ 1498.746450][T17634] netlink: 'syz.5.8724': attribute type 1 has an invalid length.
[ 1499.228198][T17655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1499.250609][T17655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1499.409481][T18542] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1499.519455][  T810] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1499.579395][T18542] usb 9-1: Using ep0 maxpacket: 16
[ 1499.595282][T18542] usb 9-1: config index 0 descriptor too short (expected 51443, got 18)
[ 1499.628417][T18542] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1499.648546][T18542] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1499.659063][T18542] usb 9-1: Product: syz
[ 1499.664128][T18542] usb 9-1: Manufacturer: syz
[ 1499.672915][T17671] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1499.688786][T18542] usb 9-1: SerialNumber: syz
[ 1499.692460][T17671] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[ 1499.705874][T18542] r8152-cfgselector 9-1: Unknown version 0x0000
[ 1499.706696][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8732'.
[ 1499.713619][  T810] usb 6-1: Using ep0 maxpacket: 32
[ 1499.733761][T18542] r8152-cfgselector 9-1: config 0 descriptor??
[ 1499.746932][  T810] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1499.765393][  T810] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1499.775160][  T810] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1499.783837][  T810] usb 6-1: Product: syz
[ 1499.788144][  T810] usb 6-1: Manufacturer: syz
[ 1499.793434][  T810] usb 6-1: SerialNumber: syz
[ 1499.803575][  T810] usb 6-1: config 0 descriptor??
[ 1499.810744][T17661] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1499.827003][  T810] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1499.833487][  T810] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1499.964232][T18542] r8152-cfgselector 9-1: Needed 1 retries to read version
[ 1499.976155][T17688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1500.002013][T25387] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1500.027327][T17688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1500.171596][T29484] r8152-cfgselector 9-1: USB disconnect, device number 31
[ 1500.179978][T25387] usb 3-1: Using ep0 maxpacket: 32
[ 1500.195523][T25387] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1500.236615][T25387] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 3
[ 1500.253427][T25387] usb 3-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1500.274650][T25387] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40
[ 1500.285473][   T29] audit: type=1326 audit(1781914867.074:17198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17658 comm="syz.5.8730" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cc3d9ce59 code=0x0
[ 1500.320592][T25387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1500.339861][T25387] usb 3-1: Product: syz
[ 1500.349642][T25387] usb 3-1: Manufacturer: syz
[ 1500.358151][T25387] usb 3-1: SerialNumber: syz
[ 1500.385214][T25387] usb 3-1: Fast Track Pro config OK
[ 1500.500563][T17688] usb 6-1: reset high-speed USB device number 54 using dummy_hcd
[ 1500.558408][T17688] usb 6-1: device reset changed ep0 maxpacket size!
[ 1500.568103][T25400] usb 6-1: USB disconnect, device number 54
[ 1500.591099][T25387] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor
[ 1500.630660][T25387] usb 3-1: 1:1 : format type 0 is detected, processed as PCM
[ 1500.646680][T25387] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4
[ 1500.672535][T25387] usb 3-1: 0:2 : does not exist
[ 1500.686470][T25387] usb 3-1: unit 5 not found!
[ 1500.701403][T25387] usb 3-1: unit 6 not found!
[ 1500.739432][T25400] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1500.818265][T25387] usb 3-1: USB disconnect, device number 27
[ 1500.898979][T25400] usb 6-1: Using ep0 maxpacket: 16
[ 1500.909329][T25400] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[ 1500.925751][T25400] usb 6-1: config 0 has no interface number 0
[ 1500.955637][T25400] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1501.008429][T25400] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1501.023137][T17762] netlink: 'syz.3.8736': attribute type 1 has an invalid length.
[ 1501.023303][ T9723] udevd[9723]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1501.065532][T25400] usb 6-1: config 0 interface 41 has no altsetting 0
[ 1501.108820][T25400] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1501.158215][T25400] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1501.177516][T17762] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1501.205345][T25400] usb 6-1: Product: syz
[ 1501.231080][T25400] usb 6-1: Manufacturer: syz
[ 1501.259787][T25400] usb 6-1: SerialNumber: syz
[ 1501.303801][T25400] usb 6-1: config 0 descriptor??
[ 1501.332737][T17707] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1501.364566][T17707] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1501.501901][T17821] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1501.567330][T17821] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1501.614560][T17707] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1501.649133][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1501.678396][T17707] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1501.715696][T17832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1501.730488][T17832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1501.831463][T17832] syzkaller0: entered promiscuous mode
[ 1501.850670][T17832] syzkaller0: entered allmulticast mode
[ 1501.935800][T17846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1501.944820][T25400] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[ 1501.969675][T17846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1501.994864][T25400] usb 6-1: USB disconnect, device number 55
[ 1502.044210][T17846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1502.092789][T17830] tipc: Resetting bearer <eth:syzkaller0>
[ 1502.109969][T17830] tipc: Disabling bearer <eth:syzkaller0>
[ 1502.219008][T22696] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[ 1502.289042][    C1] ip6_tunnel: K xmit: Local address not yet configured!
[ 1502.373285][T22696] usb 3-1: config 8 has an invalid interface number: 92 but max is 0
[ 1502.384880][T22696] usb 3-1: config 8 has no interface number 0
[ 1502.397387][T22696] usb 3-1: config 8 interface 92 has no altsetting 0
[ 1502.412802][T22696] usb 3-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=c4.9f
[ 1502.422398][T22696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1502.430707][T22696] usb 3-1: Product: syz
[ 1502.439340][T22696] usb 3-1: Manufacturer: syz
[ 1502.446723][T22696] usb 3-1: SerialNumber: syz
[ 1502.708649][T17875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1502.721793][T17875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1503.363728][T17895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1503.374766][T17895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1503.449523][T17899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1503.468216][T17899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1503.522120][T17904] loop8: detected capacity change from 0 to 7
[ 1503.530525][T17904] Dev loop8: unable to read RDB block 7
[ 1503.536503][T17904]  loop8: unable to read partition table
[ 1503.544354][T17904] loop8: partition table beyond EOD, truncated
[ 1503.552116][T17904] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1503.740763][T17916] tc action pedit offset must be on 32 bit boundaries
[ 1504.130542][T17934] netlink: 'syz.3.8755': attribute type 1 has an invalid length.
[ 1504.149181][T29484] usb 9-1: new full-speed USB device number 32 using dummy_hcd
[ 1504.170333][T17934] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1504.201034][T17934] dummy0: left promiscuous mode
[ 1504.211171][T17934] bond3: (slave dummy0): Enslaving as a backup interface with an up link
[ 1504.279317][ T8602] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1504.313158][T29484] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1504.322190][T29484] usb 9-1: not running at top speed; connect to a high speed hub
[ 1504.331227][T29484] usb 9-1: config 255 has an invalid interface number: 209 but max is 0
[ 1504.350192][T29484] usb 9-1: config 255 has no interface number 0
[ 1504.364535][T29484] usb 9-1: config 255 interface 209 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1504.376979][T29484] usb 9-1: config 255 interface 209 has no altsetting 0
[ 1504.386130][T29484] usb 9-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=13.a2
[ 1504.395765][T29484] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1504.404828][T29484] usb 9-1: Product: syz
[ 1504.410697][T13975] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1504.413668][T29484] usb 9-1: Manufacturer: syz
[ 1504.426891][T29484] usb 9-1: SerialNumber: syz
[ 1504.654755][T17927] syzkaller0: entered promiscuous mode
[ 1504.661309][T17927] syzkaller0: entered allmulticast mode
[ 1504.759508][T17927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1504.782685][T17927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1504.808307][T17927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1504.820182][T17926] tipc: Resetting bearer <eth:syzkaller0>
[ 1504.860414][T17926] tipc: Disabling bearer <eth:syzkaller0>
[ 1504.872479][T22696] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state.
[ 1504.886808][T22696] dvb-usb: bulk message failed: -22 (3/0)
[ 1504.914576][T22696] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1504.927205][T22696] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0)
[ 1504.964020][T29484] uvcvideo 9-1:255.209: Found UVC 0.00 device syz (05ac:8501)
[ 1504.974290][T22696] usb 3-1: media controller created
[ 1504.987239][T22696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1504.998252][T29484] uvcvideo 9-1:255.209: No valid video chain found.
[ 1505.016188][T29484] usb 9-1: USB disconnect, device number 32
[ 1505.026102][T22696] dvb-usb: bulk message failed: -22 (6/0)
[ 1505.050746][T22696] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0'
[ 1505.081515][T22696] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input211
[ 1505.097035][T22696] dvb-usb: schedule remote query interval to 150 msecs.
[ 1505.107540][T22696] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected.
[ 1505.126185][T22696] usb 3-1: USB disconnect, device number 28
[ 1505.152279][T22696] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1505.282736][T25387] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1505.479313][T22696] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[ 1505.565369][T25387] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1505.596380][T25387] usb 6-1: config 129 has an invalid interface number: 135 but max is 0
[ 1505.608171][T25387] usb 6-1: config 129 has an invalid interface number: 5 but max is 0
[ 1505.615776][T18044] loop8: detected capacity change from 0 to 7
[ 1505.617707][T25387] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[ 1505.634803][T25387] usb 6-1: config 129 has no interface number 0
[ 1505.635959][T22696] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1505.642119][T25387] usb 6-1: config 129 has no interface number 1
[ 1505.655629][T18044] Dev loop8: unable to read RDB block 7
[ 1505.660630][T25387] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1505.676877][T18044]  loop8: unable to read partition table
[ 1505.682217][T25387] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[ 1505.686028][T22696] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[ 1505.696422][T25387] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[ 1505.723286][T18044] loop8: partition table beyond EOD, truncated
[ 1505.730833][T18044] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1505.732092][T22696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1505.755128][T25387] usb 6-1: config 129 interface 135 has no altsetting 0
[ 1505.765535][T25387] usb 6-1: config 129 interface 5 has no altsetting 0
[ 1505.774014][T22696] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1505.803660][T22696] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1505.820746][T22696] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3
[ 1505.839344][T22696] usb 3-1: Manufacturer: syz
[ 1505.849666][T22696] usb 3-1: SerialNumber: syz
[ 1505.869523][T22696] usb 3-1: config 0 descriptor??
[ 1505.884315][T22696] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input212
[ 1506.014251][T25387] usb 6-1: string descriptor 0 read error: -22
[ 1506.021591][T25387] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[ 1506.032926][T25387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1506.054178][T25387] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1506.075840][T25387] usb 6-1: MIDIStreaming interface descriptor not found
[ 1506.307295][T22696] usb 3-1: USB disconnect, device number 29
[ 1506.473472][T25387] usb 6-1: USB disconnect, device number 56
[ 1506.569862][T18100] netlink: 'syz.7.8765': attribute type 25 has an invalid length.
[ 1506.629876][T18114] loop3: detected capacity change from 0 to 7
[ 1506.638314][T18114] Dev loop3: unable to read RDB block 7
[ 1506.647845][T18114]  loop3: unable to read partition table
[ 1506.654699][T18114] loop3: partition table beyond EOD, truncated
[ 1506.663116][T18114] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[ 1506.990371][T18128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1507.017217][T18128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1507.379032][T27365] usb 6-1: new full-speed USB device number 57 using dummy_hcd
[ 1507.551213][T27365] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1507.570960][T27365] usb 6-1: not running at top speed; connect to a high speed hub
[ 1507.609521][T27365] usb 6-1: config 255 has an invalid interface number: 209 but max is 0
[ 1507.625946][T27365] usb 6-1: config 255 has no interface number 0
[ 1507.643907][   T29] audit: type=1326 audit(1781914874.444:17199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.7.8774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3299d9ce59 code=0x0
[ 1507.667960][T27365] usb 6-1: config 255 interface 209 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1507.667995][T27365] usb 6-1: config 255 interface 209 has no altsetting 0
[ 1507.679252][T27365] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=13.a2
[ 1507.741147][T27365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1507.759470][T27365] usb 6-1: Product: syz
[ 1507.767787][T27365] usb 6-1: Manufacturer: syz
[ 1507.775783][T27365] usb 6-1: SerialNumber: syz
[ 1508.007910][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8778'.
[ 1508.021025][  T810] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1508.045821][T18140] syzkaller0: entered promiscuous mode
[ 1508.059750][T18140] syzkaller0: entered allmulticast mode
[ 1508.129990][T18140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1508.141048][T18140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1508.166404][T18140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1508.185863][T18139] tipc: Resetting bearer <eth:syzkaller0>
[ 1508.202292][  T810] usb 3-1: Using ep0 maxpacket: 16
[ 1508.212358][T18139] tipc: Disabling bearer <eth:syzkaller0>
[ 1508.225530][  T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1508.259975][  T810] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1508.288146][  T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1508.292251][T27365] uvcvideo 6-1:255.209: Found UVC 0.00 device syz (05ac:8501)
[ 1508.305213][  T810] usb 3-1: Product: syz
[ 1508.316179][  T810] usb 3-1: Manufacturer: syz
[ 1508.317439][T18192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1508.321957][  T810] usb 3-1: SerialNumber: syz
[ 1508.330068][T27365] uvcvideo 6-1:255.209: No valid video chain found.
[ 1508.351584][T27365] usb 6-1: USB disconnect, device number 57
[ 1508.361208][T18192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1508.366802][  T810] usb 3-1: config 0 descriptor??
[ 1508.405365][T18192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1508.407105][  T810] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1508.432327][  T810] em28xx 3-1:0.0: DVB interface 0 found: bulk
[ 1508.441122][T18192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1508.992642][  T810] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1509.149603][T29484] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1509.311238][T29484] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1509.321406][T29484] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[ 1509.336511][T29484] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1509.345797][T29484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1509.354357][T29484] usb 6-1: SerialNumber: syz
[ 1509.363428][T29484] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[ 1509.416479][  T810] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1509.427137][  T810] em28xx 3-1:0.0: board has no eeprom
[ 1509.567328][T18217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1509.584708][T18217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1509.605733][T18217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1509.627657][T18217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1509.659727][T18168] ------------[ cut here ]------------
[ 1509.665628][T18168] usb 4-1: BOGUS control dir, pipe 80001480 doesn't match bRequestType c0
[ 1509.675351][T18168] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.2.8777/18168
[ 1509.686509][T18168] Modules linked in:
[ 1509.690737][T18168] CPU: 0 UID: 0 PID: 18168 Comm: syz.2.8777 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1509.702362][T18168] Tainted: [L]=SOFTLOCKUP
[ 1509.706823][T18168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1509.717247][T18168] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[ 1509.723099][T18168] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[ 1509.744103][T18168] RSP: 0018:ffffc9000425f958 EFLAGS: 00010246
[ 1509.750457][T18168] RAX: 0000000000000000 RBX: ffff888072fd0900 RCX: 0000000080001480
[ 1509.758661][T18168] RDX: ffff888058623e40 RSI: ffffffff8c819780 RDI: ffffffff903f3f20
[ 1509.766877][T18168] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[ 1509.775280][T18168] R10: ffffc9000425fa40 R11: fffff5200084bf54 R12: 1ffff1100698bd6c
[ 1509.783501][T18168] R13: ffff888034c5eb60 R14: ffff888058623e40 R15: 0000000080001480
[ 1509.791746][T18168] FS:  00007fcaca27c6c0(0000) GS:ffff88812525a000(0000) knlGS:0000000000000000
[ 1509.801166][T18168] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1509.807949][T18168] CR2: 0000200000001680 CR3: 0000000078aaa000 CR4: 00000000003526f0
[ 1509.816262][T18168] Call Trace:
[ 1509.819649][T18168]  <TASK>
[ 1509.822692][T18168]  usb_start_wait_urb+0x13f/0x5b0
[ 1509.827904][T18168]  ? rcu_is_watching+0x15/0xb0
[ 1509.833032][T18168]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1509.838813][T18168]  ? trace_kmalloc+0x2a/0xf0
[ 1509.843600][T18168]  usb_control_msg+0x234/0x3e0
[ 1509.848777][T18168]  dtv5100_i2c_msg+0x231/0x2f0
[ 1509.853982][T18168]  dtv5100_i2c_xfer+0x1a5/0x610
[ 1509.859429][T18168]  ? rcu_is_watching+0x15/0xb0
[ 1509.864347][T18168]  __i2c_transfer+0x7be/0x1fe0
[ 1509.869452][T18168]  ? trace_irq_enable+0x3b/0x140
[ 1509.874560][T18168]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1509.880620][T18168]  ? rt_mutex_lock_nested+0x156/0x1c0
[ 1509.886161][T18168]  ? i2c_transfer+0xc8/0x2d0
[ 1509.891119][T18168]  i2c_transfer+0x1cc/0x2d0
[ 1509.895763][T18168]  i2cdev_ioctl_rdwr+0x460/0x740
[ 1509.900949][T18168]  i2cdev_ioctl+0x6a5/0x880
[ 1509.905619][T18168]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1509.910862][T18168]  ? __fget_files+0x3a2/0x420
[ 1509.915714][T18168]  ? __fget_files+0x2a/0x420
[ 1509.920667][T18168]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1509.925770][T18168]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1509.930987][T18168]  __se_sys_ioctl+0xfc/0x170
[ 1509.935734][T18168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1509.942053][T18168]  do_syscall_64+0x174/0x580
[ 1509.946788][T18168]  ? clear_bhb_loop+0x40/0x90
[ 1509.952024][T18168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1509.958182][T18168] RIP: 0033:0x7fcac939ce59
[ 1509.962774][T18168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1509.984528][T18168] RSP: 002b:00007fcaca27c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1509.993573][T18168] RAX: ffffffffffffffda RBX: 00007fcac9615fa0 RCX: 00007fcac939ce59
[ 1510.001865][T18168] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000008
[ 1510.010253][T18168] RBP: 00007fcac9432e6f R08: 0000000000000000 R09: 0000000000000000
[ 1510.018449][T18168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1510.026669][T18168] R13: 00007fcac9616038 R14: 00007fcac9615fa0 R15: 00007fcac973fa48
[ 1510.034894][T18168]  </TASK>
[ 1510.038008][T18168] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1510.045271][T18168] CPU: 0 UID: 0 PID: 18168 Comm: syz.2.8777 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1510.056187][T18168] Tainted: [L]=SOFTLOCKUP
[ 1510.060492][T18168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1510.070529][T18168] Call Trace:
[ 1510.073794][T18168]  <TASK>
[ 1510.076712][T18168]  vpanic+0x56c/0xa60
[ 1510.080687][T18168]  ? __pfx__printk+0x10/0x10
[ 1510.085262][T18168]  ? __pfx_vpanic+0x10/0x10
[ 1510.089747][T18168]  ? rcu_is_watching+0x15/0xb0
[ 1510.094500][T18168]  panic+0xc5/0xd0
[ 1510.098202][T18168]  ? __pfx_panic+0x10/0x10
[ 1510.102599][T18168]  __warn+0x315/0x4c0
[ 1510.106572][T18168]  ? usb_submit_urb+0x1057/0x18b0
[ 1510.111585][T18168]  ? usb_submit_urb+0x1057/0x18b0
[ 1510.116608][T18168]  __report_bug+0x331/0x530
[ 1510.121165][T18168]  ? stack_depot_save_flags+0x250/0x800
[ 1510.126700][T18168]  ? usb_submit_urb+0x1057/0x18b0
[ 1510.131712][T18168]  ? __pfx___report_bug+0x10/0x10
[ 1510.136719][T18168]  ? irqentry_exit+0x218/0x8f0
[ 1510.141465][T18168]  ? usb_submit_urb+0x1105/0x18b0
[ 1510.146480][T18168]  ? usb_submit_urb+0x1100/0x18b0
[ 1510.151494][T18168]  report_bug_entry+0x19a/0x290
[ 1510.156419][T18168]  ? usb_submit_urb+0x1100/0x18b0
[ 1510.161430][T18168]  ? usb_submit_urb+0x1105/0x18b0
[ 1510.166437][T18168]  handle_bug+0xce/0x200
[ 1510.170666][T18168]  exc_invalid_op+0x1a/0x50
[ 1510.175157][T18168]  asm_exc_invalid_op+0x1a/0x20
[ 1510.179989][T18168] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[ 1510.185612][T18168] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[ 1510.205207][T18168] RSP: 0018:ffffc9000425f958 EFLAGS: 00010246
[ 1510.211271][T18168] RAX: 0000000000000000 RBX: ffff888072fd0900 RCX: 0000000080001480
[ 1510.219231][T18168] RDX: ffff888058623e40 RSI: ffffffff8c819780 RDI: ffffffff903f3f20
[ 1510.227193][T18168] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[ 1510.235158][T18168] R10: ffffc9000425fa40 R11: fffff5200084bf54 R12: 1ffff1100698bd6c
[ 1510.243121][T18168] R13: ffff888034c5eb60 R14: ffff888058623e40 R15: 0000000080001480
[ 1510.251087][T18168]  ? usb_submit_urb+0x1091/0x18b0
[ 1510.256122][T18168]  usb_start_wait_urb+0x13f/0x5b0
[ 1510.261154][T18168]  ? rcu_is_watching+0x15/0xb0
[ 1510.265908][T18168]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1510.271448][T18168]  ? trace_kmalloc+0x2a/0xf0
[ 1510.276036][T18168]  usb_control_msg+0x234/0x3e0
[ 1510.280798][T18168]  dtv5100_i2c_msg+0x231/0x2f0
[ 1510.285556][T18168]  dtv5100_i2c_xfer+0x1a5/0x610
[ 1510.290403][T18168]  ? rcu_is_watching+0x15/0xb0
[ 1510.295159][T18168]  __i2c_transfer+0x7be/0x1fe0
[ 1510.299918][T18168]  ? trace_irq_enable+0x3b/0x140
[ 1510.304852][T18168]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1510.310656][T18168]  ? rt_mutex_lock_nested+0x156/0x1c0
[ 1510.316039][T18168]  ? i2c_transfer+0xc8/0x2d0
[ 1510.320626][T18168]  i2c_transfer+0x1cc/0x2d0
[ 1510.325125][T18168]  i2cdev_ioctl_rdwr+0x460/0x740
[ 1510.330066][T18168]  i2cdev_ioctl+0x6a5/0x880
[ 1510.334564][T18168]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1510.339586][T18168]  ? __fget_files+0x3a2/0x420
[ 1510.344259][T18168]  ? __fget_files+0x2a/0x420
[ 1510.348840][T18168]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1510.353780][T18168]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1510.358802][T18168]  __se_sys_ioctl+0xfc/0x170
[ 1510.363488][T18168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1510.369560][T18168]  do_syscall_64+0x174/0x580
[ 1510.374172][T18168]  ? clear_bhb_loop+0x40/0x90
[ 1510.378844][T18168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1510.384730][T18168] RIP: 0033:0x7fcac939ce59
[ 1510.389144][T18168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1510.408749][T18168] RSP: 002b:00007fcaca27c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1510.417162][T18168] RAX: ffffffffffffffda RBX: 00007fcac9615fa0 RCX: 00007fcac939ce59
[ 1510.425125][T18168] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000008
[ 1510.433086][T18168] RBP: 00007fcac9432e6f R08: 0000000000000000 R09: 0000000000000000
[ 1510.441046][T18168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1510.449009][T18168] R13: 00007fcac9616038 R14: 00007fcac9615fa0 R15: 00007fcac973fa48
[ 1510.456986][T18168]  </TASK>
[ 1510.460268][T18168] Kernel Offset: disabled
[ 1510.464580][T18168] Rebooting in 86400 seconds..