last executing test programs:

26m54.84663737s ago: executing program 4 (id=1610):
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000880), 0x5005)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
sendmsg$nl_xfrm(r0, 0x0, 0x20040000)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x1cc, 0x0, 0x800, 0x70bd2d, 0x49, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd087f77ea19bf351}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x90}, 0x40000)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000120003001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB="08002800870e09"], 0x40}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917511679abf4579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

26m53.343354196s ago: executing program 4 (id=1618):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) (async)
setrlimit(0x0, &(0x7f00000000c0)={0x0, 0x1})
r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="91109d00000000009500001000000000147c2b775bda3dfa4b13cf7d130ddb3b9fc6d1fafa57f577073853665109a068ef18fb706ee2e9362c1429b4cc0b1b5ed7fb6788d57c81e9b8665a40179887b3db2913710f73aca254ac8470d27cfb209da8b33f772044d585bd80a24fbdce31914e2feb552360fb7ed52502885629297ff9fe7e7a97fac15f"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000007b6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0xb0, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xac, 0x6, 0xfe}}}}}]}}]}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0) (async)
syz_clone3(&(0x7f0000003900)={0x40000, &(0x7f0000000140), &(0x7f00000002c0)=<r7=>0x0, &(0x7f0000000300), {0x2f}, &(0x7f0000002880)=""/98, 0x62, &(0x7f0000002900)=""/4096, &(0x7f0000000380)=[r4, r4], 0x2}, 0x58)
sched_setattr(r7, &(0x7f0000003980)={0x38, 0x0, 0x20, 0x1, 0x8001, 0x3, 0x100000001, 0x7, 0x19, 0x5}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}}, 0x24}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r8, &(0x7f0000000280)={0x10, 0x0, r9}, 0x10) (async)
syz_emit_ethernet(0x2ce, 0x0, 0x0)

26m51.14868032s ago: executing program 4 (id=1623):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x20004000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, @redirect={0x5, 0x1, 0x0, @private=0xa010101, {0x5, 0x4, 0x3, 0x2a, 0xc7e, 0x64, 0xdd, 0x2, 0x21, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xffc, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040))
write$tcp_congestion(r3, &(0x7f0000000000)='illinois\x00', 0x9)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x100f, 0xffffffffffffffff, 0x0, 0x0})
r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000040)={0x0, 0x4})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x20004000) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, @redirect={0x5, 0x1, 0x0, @private=0xa010101, {0x5, 0x4, 0x3, 0x2a, 0xc7e, 0x64, 0xdd, 0x2, 0x21, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) (async)
syz_open_dev$video4linux(&(0x7f00000001c0), 0xffc, 0x0) (async)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) (async)
write$tcp_congestion(r3, &(0x7f0000000000)='illinois\x00', 0x9) (async)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x100f, 0xffffffffffffffff, 0x0, 0x0}) (async)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000040)={0x0, 0x4}) (async)

26m49.499312042s ago: executing program 4 (id=1626):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0xa, 0x5, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe170005"], 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xa283, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0x200, 0x0)
r5 = dup2(r4, r3)
readv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1)
fcntl$setstatus(r4, 0x4, 0x2800)
ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]})
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x1c, 0x1, 0x7, "d30580c9042b7275077bafe6410c2087850000000000000000000080001500", 0x59455247})
r7 = getpid()
ioprio_get$pid(0x1, r7)
r8 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40)
r11 = open_tree(r10, &(0x7f0000000bc0)='./file0\x00', 0x800)
move_mount(r11, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0xec3, 0xfdffffffffffb5b2, 0x7, 0xc, 0x8000000000000003]}, &(0x7f0000000200)=0x78)

26m46.047827373s ago: executing program 4 (id=1644):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000003c0)={&(0x7f0000000400)=[{0x499, 0x4200, 0x0, 0x0}, {0x3, 0x1201, 0x0, 0x0}, {0xfff, 0x9801, 0x0, 0x0}], 0x3})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x94}]}}}]}, 0x54}}, 0x40004)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r6 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r5, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P'], 0x50}}, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r9, 0x0)
r10 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241)
ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0010"])
r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r12, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x76de, 0x0, 0x0, 0x0}], 0x1})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r11, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000000408030000000000000000000a000000340004e10fe00540010000041bf4038b00000100080201400000040018000340002079f342612e2392d9880000810800044000000040190070400000000006000240000036352e74431c8ff44f66fd54619354b06d8b33a9faaad1ad3ca84bd412eeefdd9c8665894ac4551692f784f15ec99119c7eb005ec138b88d94ed9df5d027908ce06d211011bf363992a11ac9b4d9406745a85edcde53a24bbdad9932ded8b06ffe08ccb6b33009f9c969d2132ebce3044f4745d05c50d4de044a7e4a663e8ec3232c9083fcea"], 0x58}, 0x1, 0x0, 0x0, 0x404c000}, 0xc744aa5c80d764a1)
r13 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x0)
syz_usb_control_io$hid(r13, 0x0, 0x0)

26m45.78033808s ago: executing program 4 (id=1645):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000ffe000/0x1000)=nil)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x2000)

26m45.435799088s ago: executing program 32 (id=1645):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000ffe000/0x1000)=nil)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x2000)

19m16.254932162s ago: executing program 2 (id=3393):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$cgroup_type(r0, &(0x7f0000000040), 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r3 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x2}, 0x18, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100010000001300000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001007564703a"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x100}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x10001}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000080)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/224, 0xe0, 0x0, &(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000000400)=0x40)

19m16.080753653s ago: executing program 2 (id=3394):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x11, &(0x7f0000019200)=ANY=[@ANYBLOB="180800000500000000000000fbffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf9a00000000000056080000000000008500000007000000b7000000000e000095"], &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

19m15.833174769s ago: executing program 2 (id=3397):
userfaultfd(0x801) (async)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x1c, r1, 0x30b, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000016c000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000212000/0x1000)=nil, &(0x7f0000121000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c05000/0x3000)=nil, &(0x7f0000c0b000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x10039}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xff}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x10039}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xff}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r6 = socket(0x10, 0x803, 0x0)
socket$tipc(0x1e, 0x5, 0x0) (async)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000180)=@name={0x1e, 0x2, 0x47b8f505e53035ec, {{0x43, 0x2}, 0x3}}, 0x10)
socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406a0563000000000000010902"], 0x0)
write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2)

19m12.741559408s ago: executing program 2 (id=3414):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0))
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) (async)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x24008024)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) (async)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_emit_ethernet(0x72, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x13, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2000000, @empty, {[@generic={0x94, 0x12, "a38efe8fa0c58a9f848a0b152da71955"}, @cipso={0x86, 0x24, 0x3, [{0x5, 0xa, "ef58568f38b4e457"}, {0x5, 0xc, "95e380d4008ce5f0e976"}, {0x0, 0x8, "4c977db54fea"}]}]}}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x62040200) (async)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) (async)
socket$kcm(0x10, 0x400000002, 0x0) (async)
r4 = fsopen(&(0x7f0000000380)='nilfs2\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) (async)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newlink={0x104, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40440}, [@IFLA_BROADCAST={0xa}, @IFLA_NET_NS_FD={0x8}, @IFLA_VF_PORTS={0x7c, 0x18, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "fd2e679e3928e7319e14e239ba6ac791"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8f}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9162bb40e270c599e14678426fcb207e"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7fcbd5eab6b0dd33e15ce71292d116cb"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a01027833d629df13a95898c74f3768d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "eedc6f4890d94a61c539795845540fec"}]}]}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x6b566}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x104}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe800000000000000007000000000000000004400e1f00cd0500070088000000060005409e6cf3f87d1de04feb9898c6356ff0569b8a2a26"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0)

19m12.439041943s ago: executing program 2 (id=3415):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1b, &(0x7f0000000000)=@raw=[@ringbuf_query, @alu={0x4, 0x1, 0x9, 0x6, 0x8, 0x30, 0x10}, @generic={0x5, 0xf, 0x0, 0x69, 0x101}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x7, 0x9, 0x5, 0x80, 0x8001}, @exit], &(0x7f0000000100)='GPL\x00', 0x4, 0x9e, &(0x7f0000000140)=""/158, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x3, 0x6, 0xf}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x4, 0x1, 0x7, 0x7}], 0x10, 0x9}, 0x94) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1b, &(0x7f0000000000)=@raw=[@ringbuf_query, @alu={0x4, 0x1, 0x9, 0x6, 0x8, 0x30, 0x10}, @generic={0x5, 0xf, 0x0, 0x69, 0x101}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x7, 0x9, 0x5, 0x80, 0x8001}, @exit], &(0x7f0000000100)='GPL\x00', 0x4, 0x9e, &(0x7f0000000140)=""/158, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x3, 0x6, 0xf}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x4, 0x1, 0x7, 0x7}], 0x10, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000000bc0)={@loopback, <r3=>0x0}, &(0x7f0000000c00)=0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r1, r3, 0x25, 0x4, @void}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000380)={0x2, 0xffffffe4, 0x79, 0x4080})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0aac0f000dac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
mlock2(&(0x7f0000cc1000/0x3000)=nil, 0x3000, 0x0)

19m12.127918469s ago: executing program 2 (id=3416):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}})
syz_open_dev$char_usb(0xc, 0xb4, 0x2000000)
close(0x3)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wg2\x00'})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x2000c88c)
creat(0x0, 0xd931d3864d39dcdb)
rseq(0x0, 0x0, 0x0, 0x0)
r3 = gettid()
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0xffffff00], 'veth0_macvtap\x00', 'nr0\x00', {}, {}, 0x73}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x0, 0x9, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x1, 0x3, 'snmp\x00', {0x1}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x5, 0x82}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3, 0x0, 0x80}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r5 = open(0x0, 0x0, 0x1a1)
fcntl$setlease(r5, 0x400, 0x1)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setlease(r5, 0x400, 0x2)

18m56.957318799s ago: executing program 33 (id=3416):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}})
syz_open_dev$char_usb(0xc, 0xb4, 0x2000000)
close(0x3)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wg2\x00'})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x2000c88c)
creat(0x0, 0xd931d3864d39dcdb)
rseq(0x0, 0x0, 0x0, 0x0)
r3 = gettid()
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0xffffff00], 'veth0_macvtap\x00', 'nr0\x00', {}, {}, 0x73}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x0, 0x9, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x1, 0x3, 'snmp\x00', {0x1}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x5, 0x82}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3, 0x0, 0x80}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r5 = open(0x0, 0x0, 0x1a1)
fcntl$setlease(r5, 0x400, 0x1)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setlease(r5, 0x400, 0x2)

18m17.399995687s ago: executing program 3 (id=3653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async, rerun: 64)
r2 = io_uring_setup(0x4e1, &(0x7f0000000440)={0x0, 0xc602, 0x100, 0x1, 0x25f}) (rerun: 64)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003000)=[{0x4, 0x1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/156, 0x9c}, {&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000000980)=""/179, 0xb3}], &(0x7f0000000a40)=[0xfffffffffffffa36, 0x81, 0x6, 0xfffffffffffffff1, 0x2, 0x5, 0xfffffffffffffffc, 0x33, 0x3]}, {0x2, 0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/90, 0x5a}], &(0x7f0000000c80)=[0x10000, 0x80, 0x29, 0x9d, 0xffffffffffff0000, 0x1ee72f75]}, {0x1, 0x1, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000cc0)=""/119, 0x77}], &(0x7f0000000d80)=[0x6, 0x3, 0x3, 0x9]}, {0x7, 0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000dc0)=""/91, 0x5b}, {&(0x7f0000000e40)=""/96, 0x60}, {&(0x7f0000000ec0)=""/1, 0x1}, {&(0x7f0000000f00)=""/12, 0xc}, {&(0x7f0000000f40)=""/139, 0x8b}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/250, 0xfa}], &(0x7f00000011c0)=[0x5eed421a, 0x7fffffffffffffff, 0x3, 0x80000001, 0x0]}, {0x1, 0x1, 0x0, &(0x7f0000001240)=[{&(0x7f0000001200)=""/29, 0x1d}], &(0x7f0000001280)=[0x2]}, {0x4, 0x1, 0x0, &(0x7f0000001400)=[{&(0x7f00000012c0)=""/241, 0xf1}, {&(0x7f00000013c0)=""/15, 0xf}, {&(0x7f0000001480)=""/197, 0xc5}, {&(0x7f0000001580)=""/185, 0xb9}], &(0x7f0000001640)=[0xcf5, 0x1, 0x1, 0xfffffffffffffff8, 0x4]}, {0x2, 0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001680)=""/175, 0xaf}, {&(0x7f0000001740)=""/4096, 0x1000}], &(0x7f0000002780)=[0x4, 0xff]}, {0x6, 0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000027c0)=""/88, 0x58}, {&(0x7f0000002840)=""/57, 0x39}, {&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/199, 0xc7}, {&(0x7f0000002a40)=""/103, 0x67}, {&(0x7f0000002ac0)=""/187, 0xbb}], &(0x7f0000002c00)=[0x40, 0xfffffffffffffff9, 0x100000001]}, {0x5, 0x1, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002c40)=""/85, 0x55}, {&(0x7f0000002cc0)=""/63, 0x3f}, {&(0x7f0000002d00)=""/194, 0xc2}, {&(0x7f0000002e00)=""/163, 0xa3}, {&(0x7f0000002ec0)=""/92, 0x5c}], &(0x7f0000002fc0)=[0x4]}], 0x9) (async)
syz_usb_connect(0x2, 0x48, &(0x7f0000000c00)=ANY=[@ANYBLOB="120100004cb6e810c5109a81919501020301090236000100ff000009048006040300000009050501000406070109052a00080004c40f09050803400019000309050b030800248607"], 0x0) (async)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r4 = syz_io_uring_setup(0x4419, &(0x7f0000000380)={0x0, 0xf487, 0x400}, &(0x7f0000003140), &(0x7f00000001c0)) (async, rerun: 64)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000680)={0x42, 0xfffffffa, 0x1}, 0x10) (async)
r6 = socket$tipc(0x1e, 0x5, 0x0) (async)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async)
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x20000042, 0x6, 0x3}, 0x10)
close_range(r4, r6, 0x0)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842)
ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000003180)=ANY=[@ANYBLOB="090000000023000000000000f661996e8d7864a74294644fcd93322b08f16b64688a5dd47aeef2bce7bb589f2698deb1be382eb316b773f215a29f5c2e33f525daf30743b58791b7bdf1f9c09fc16f06994e3dba584b88910d86839e8ae346a75f3f1cd251265fb6dd0e8790ee447543d9791e2f25ca4afda28dc42c17359ea2323c9c44"]) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r10=>r3, {0x4}}, './file0\x00'}) (rerun: 32)
sendmsg$kcm(r10, &(0x7f00000007c0)={&(0x7f0000000180)=@isdn={0x22, 0x8, 0x9, 0x6, 0xff}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="ed3fad4cab9fdeb0e690de00e5a4d4e842dfb00114acab32ea9d09690c7425c79fed2e8bc2fee95a07a60c7838389c386fd3d45d5ca64f555f8dec3ed44db6d77c1110276a951e4ffaa66cabd76075b84e52728e136248f9762d0c796beaeccd43f13cfe1403533b68210348d26096c5609fdb96e749dee431073caa7c64f3b7f1011aaa8dc4dc3f0c3441221e960966b985b3ba59a4f5cebca04a074e09f53741c602a60fd5952d206dcb6b039d8474db6c0b27ae81adf9e3a04fa926bd8c01613774d9e101f935d1eba1e01b9af78aea963b1fae", 0xd5}, {0x0}, {&(0x7f0000000540)="1ced21ec0ec184d0787d82102fa06579c24bd38e68558f829332fc373376498cf72ea32794e99c390f7a194a91bdacfd380eff27a4874cdd8dcc9f8b0aee317b5b90777823a1ea1272fe5c778f91c9d247318d7651ce59c09a343e3225387413754d40d4ea2512c61b718934c07f8e5313f28c08729313ad2aaecab471fcfb0697b3792720876d2ff286b663a3bc9cf141fea6d7ec5fc26405326a19a499d0435fb2a67057bb235046f9dde131bade40a96f83dc78d06a99a362efc3ffe10370aa42681b4111093c3711a63a7113794bc53a259dbcf4", 0xd6}, {&(0x7f0000000640)="6352dd17d65d7dfc54d29ec93833b82f69342f6dab4d9846ed62576aae920ffb22c33587e1c72dd98460d96a9b0e0f3c6fb6f673a4e2711bc55e30e31f9645ae6e4af0552963a4c07778acc7cb16b3550b0e471e1b52d046330ba7a2eda4683b715534b16818328fdd9d47c997ea0b9a5542c1a559a2a269e1c2aa5acc6de21c2880cc6f1dc8ed6302d4fab0c7cfdd", 0x8f}], 0x4, &(0x7f0000000700)=[{0xa8, 0x102, 0x9, "6ec2e98a2c8bcf796428b67364a9d4a80476416d04d12807ed72e7a926933b6131e5bee0362aaa230df75958f0b087022137f8b9de50fc823fd5e4e6fb2df8aec07aee8a255bcf8346f98316da6505e0fe8f844508d945525ba056731a149e16e2ef2da9a13e35cae8ea8c06cfe3922321e585086e9fcaaa1163af8da74aeee68297e4b72c69e7d002d958286a7531a859c4"}], 0xa8}, 0x40010) (async)
syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16], 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) (async)
r11 = timerfd_create(0x0, 0x80800)
ioctl$TFD_IOC_SET_TICKS(r11, 0x40085400, &(0x7f0000000040)=0x4)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4625, 0x0, @remote, 0xfffffe01}}}, 0x108) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)

18m17.281869158s ago: executing program 3 (id=3654):
r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0))
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x261, 0x40000036, r1, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840100001a"], 0x184}}, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="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", 0x197}], 0x1}, 0x34008880)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'macvlan1\x00', @random="0100201f8145"})
r7 = fanotify_init(0x200, 0x0)
fanotify_mark(r7, 0x2, 0x40001014, r3, 0x0)
unshare(0x28000600)
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x100081, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000300))

18m17.158277545s ago: executing program 3 (id=3655):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x404480)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000000)=0x8)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x5)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f00000001c0)=[{0x50, 0xa3, 0x10}, {0x6, 0x30, 0x2, 0x9}]}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000200)=0x6, 0x4)
syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[], 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x2)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000))
fsopen(&(0x7f00000000c0)='fusectl\x00', 0x1)
r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x6)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6020400)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x9)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x80, @remote}, 0x10)
close(r5)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x10c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd7}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a45}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40dc0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x2400c085}, 0x20000000)
write(r4, &(0x7f0000000080)='g', 0x1)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000300)={0x6, 0x3, 0x100, 0x804, 0x1a, "ee1dd756f760f25a63aef119c3249425ea59d8"})
r6 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x50, &(0x7f00000000c0)=0x12f5, 0x4)
fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, <r7=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sched_setattr(r7, &(0x7f0000000180)={0x38, 0x4, 0x2, 0x9, 0x7, 0x8, 0xffffffffffffffff, 0x3, 0x0, 0x8}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000320000000000081f451c001c0000000000029078ac1e0001ac1414aa1200907837133f2c09e0e0000001"], 0x0)

18m16.996216649s ago: executing program 3 (id=3656):
r0 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',blksize=0x0000000000000400,default_permissions,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c6d61736b3d4d41595f4558070000006f6f74636f6e746578743d73797361f7f910382c736d61636b66736861743d3a2c6d61736b3d5e4d41595f57526861743d2c6673636f6e7465785c3d756e636f6e66696e65645f752c00"], 0x1, 0x0, &(0x7f0000000180)="9b6f611d125bed017b2a4312b5b16dc9250c699e69a17df4c2a5462540d9bda4e5ccc8758a5bc8948ff70c75ac0ee4f37a15b9878c76169bade22f727ef322ae81f40dda48390ca5a76016e709bd769074c6930f18e89f8b822f67d5aea471f9117de4eb5daa79")
openat(r0, &(0x7f0000000100)='./file1\x00', 0x402100, 0x1fb)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
r2 = epoll_create1(0x0)
r3 = syz_io_uring_setup(0x775, &(0x7f0000000480)={0x0, 0x41dd, 0x80, 0x202, 0x3ffc}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000380)=<r5=>0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r7, &(0x7f0000000100)='./file0\x00', 0x220)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0)
r9 = eventfd2(0xa, 0x0)
r10 = eventfd2(0x2, 0x0)
ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x0, r10})
ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f00000000c0)={0x0, r9})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x32, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12041, 0x34fb032366a58db9})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000340))
write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
r11 = syz_usb_connect_ath9k(0x3, 0x5d, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x412, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x1d0, &(0x7f0000000280)=ANY=[@ANYBLOB="2400004e6be8f0b6ee2420bf926f6af7edbb052ef8dd8f9221b900585564babc748c4fbea31865b89200004e"])
r12 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000200)={<r13=>0xffffffffffffffff})
close(r12)
ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000000040))
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

18m15.011893565s ago: executing program 3 (id=3663):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78)
write$binfmt_script(r1, &(0x7f0000000000), 0xfea7)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffff43, 0x18}, 0xc)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7de}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
bind$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)={0x30, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x14c}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\x1c'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x3}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

18m14.688616272s ago: executing program 3 (id=3668):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r2, &(0x7f0000000080)=[{0x5, 0x0, 0x0, 0xfd, @time, {0x0, 0x2}, {0xe}, @time=@tick=0x3}], 0x1c)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0xfffffffffffffffe, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x4}, [@tmpl={0x4}]}, 0xbc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001e5a803a0a0101010000000000000000000000007f000001000000000000000000000000fc020000000006000000000000000001000000000000000000000000000000013c040000000000000a000a000a010101000000000000000000000000200100000000001a000000000000000000ac1414340000000000000000000000003c0400000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

18m13.792348348s ago: executing program 34 (id=3668):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r2, &(0x7f0000000080)=[{0x5, 0x0, 0x0, 0xfd, @time, {0x0, 0x2}, {0xe}, @time=@tick=0x3}], 0x1c)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0xfffffffffffffffe, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x4}, [@tmpl={0x4}]}, 0xbc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001e5a803a0a0101010000000000000000000000007f000001000000000000000000000000fc020000000006000000000000000001000000000000000000000000000000013c040000000000000a000a000a010101000000000000000000000000200100000000001a000000000000000000ac1414340000000000000000000000003c0400000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

14m30.567058427s ago: executing program 0 (id=4525):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x36, 0x57, 0x1a, 0x20, 0xccd, 0x80, 0x67fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x76, 0xe3}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0xfffffffffffffedf, &(0x7f0000000040)={0x0, 0x10, 0x8, "eb2a3b4ea1e47af0a2061bab7c94b73e9d61a2f5f661520663d3e0fe35c18ef2d941bdd206ec22fbe1dac141fe68dd83ae88a85500c869c4999fd6e23ad1a26d7b5cd6f96c784253d84f10ef3d5fca359280ebe4814b6c23cfc22197ad0de58b4de2576bd451426112739c8747c0649c8880dfe58ccbf2d9904101852c5657cc4e328424632d0a53b9ea128201bff5113bb90af10ad904e95afc0d0d00dbd3694dc23453759ffb2a6af4481eb9f0702fa12b77e7524bfd37a1cfceb8b17b06bc5f39c9929825f723a28f1b66a5f1cb"}, 0x0, 0x0, 0x0, 0x0, 0x0})

14m25.424045923s ago: executing program 0 (id=4527):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060102000000000000000000000000140007800500140007000000080012400005000009"], 0x60}, 0x1, 0x0, 0x0, 0x24004011}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x38600)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000180)=""/120)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}})
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)

14m21.529068784s ago: executing program 0 (id=4531):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019c09000f01c2", 0x69}], 0x1, 0x7d, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000480)={0x8, {{0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x18}}, {{0xa, 0x4e21, 0xc1f, @remote, 0x5}}}, 0x108)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000693000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0x6, 0x5, 0x7fff, 0x1000200004, 0x4, 0xfffffffffffffffe, 0x0, 0x4000000000000000], 0x8080000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14m18.570094694s ago: executing program 0 (id=4533):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x800)

14m16.374682503s ago: executing program 0 (id=4537):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
socket(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0)
landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d0000000000000000", 0x12)
syz_clone3(&(0x7f0000000400)={0x100010000, &(0x7f0000000000), &(0x7f00000000c0), 0x0, {0xf}, &(0x7f0000000280)=""/173, 0xad, &(0x7f0000000380)=""/14, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0xa}, 0x58)
sched_getattr(0x0, &(0x7f0000000480)={0x38}, 0x38, 0x0)
r5 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0)
mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r5, 0x15b77000)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000200)=0x6)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000001c0)=0x9)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x25c25000)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e1f, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44)

14m12.813746401s ago: executing program 0 (id=4540):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x8, 0x42, 0x2, {0x5, @vbi={0x0, 0x9c1, 0x8, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {<r4=>0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000200100000000000000000000000000010000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fdfffffffffffffffbffffffffffffff00000000000000000000e0a50000000000000000000000000000000000000000007f0000000000000000000000000002"], 0xb8}}, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000380)=ANY=[@ANYRES8=r4]}]})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYRES64], 0x38}}, 0x10)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)

13m57.025850528s ago: executing program 35 (id=4540):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x8, 0x42, 0x2, {0x5, @vbi={0x0, 0x9c1, 0x8, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {<r4=>0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000004f00290000000000000000000000000014b2b0a0ac011b957af7aab3a8cbd83b188d4589b46bdcb9e6b826c1d6c5a026dd1710ec4288896b8e6f1159732c8c98a81d9020990051ba9e6fc190ccf8f294d39abcf2e5d98399af69d3d19597b1027c7c4e95b177fd6106f32f1e7b423853a04c9dc01dc40566dd672a417c38db199aa4c460bae07217bad65f6f5e72122cb4a532c92a4002cfbcb531940589558d95e8fe223feb59c46083f99b16c854692def02dacf748105a085d17a0364b33348d208a144d8037c731b9175e656cbb7e5c9f3ebf256", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000200100000000000000000000000000010000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fdfffffffffffffffbffffffffffffff00000000000000000000e0a50000000000000000000000000000000000000000007f0000000000000000000000000002"], 0xb8}}, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000380)=ANY=[@ANYRES8=r4]}]})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYRES64], 0x38}}, 0x10)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)

43.707980805s ago: executing program 5 (id=6860):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
accept4(r0, 0x0, 0x0, 0x800) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x2, 0x88)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000ac0)={{0x2, 0xfffffffc, 0x5, 0x81, 0x9}, 0x62, [0x5, 0x1, 0x650a, 0x80, 0x8, 0x5, 0x6913, 0xfb01, 0x7ff, 0x8001, 0x6, 0x0, 0x3, 0x0, 0x190, 0x6, 0xa, 0x80000001, 0x8, 0x2, 0x100, 0x8, 0x5, 0x2e0f, 0x0, 0xa, 0x4, 0x5, 0xa4, 0x9, 0x1, 0x7, 0x8fe, 0x5, 0x1, 0x2, 0xffff, 0xff, 0x7fffffff, 0x7fffffff, 0x10000, 0x4, 0xfff, 0xffffffff, 0xff, 0x5, 0x7f062c45, 0xf33, 0x5307, 0x1, 0x200, 0x7, 0x52, 0x2, 0x6, 0x4, 0x7fffffff, 0x8, 0xb, 0x4, 0x800, 0x0, 0x8, 0x6, 0x7, 0x4, 0x1e30000, 0x9, 0x401, 0x4, 0x3, 0x6, 0xb1, 0x4, 0x9, 0x7, 0x6, 0x0, 0x7fff, 0x0, 0x6, 0x100, 0x3, 0xc3e, 0x7, 0xa, 0x8, 0x7, 0x4, 0x1000, 0x8000, 0x10001, 0x800, 0x8, 0x6, 0x5, 0x7fe7, 0x6, 0x310000, 0x0, 0x729, 0x401, 0x10000, 0x6, 0x3, 0x1, 0xffffffff, 0x7, 0x4, 0x7, 0x3a, 0x14, 0x3, 0x8, 0x455, 0xfdb, 0x6, 0x8, 0x7, 0x28, 0x400, 0x5, 0x5, 0x28, 0x9f18, 0x0, 0x904c, 0x8, 0x4, 0x1, 0x9, 0x0, 0x10001, 0x7, 0x2, 0x5, 0x9, 0x5, 0x80000001, 0x0, 0x6, 0x5, 0x6, 0x0, 0x0, 0x0, 0x1000, 0xffffe5ea, 0x80000001, 0x40, 0x6, 0x6, 0x3, 0x3, 0x3, 0x7, 0x34, 0x8, 0x9, 0xba1, 0x6, 0x3, 0x7cb, 0x9, 0x2, 0x9, 0x800, 0xd, 0x3, 0xffff, 0x7, 0xfffffff9, 0x101, 0x7fff, 0x0, 0xfffffff7, 0xf, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x46c2770e, 0x9, 0x2, 0xfffffffd, 0x7, 0x5, 0xffff, 0x6, 0x10000, 0x5, 0x2, 0xff, 0x81, 0x0, 0x6, 0x81, 0x0, 0x745d, 0xf, 0x9, 0x5, 0x35, 0x7f, 0x0, 0x3, 0x2, 0x230, 0x0, 0x0, 0x0, 0x5, 0x7b3, 0x1, 0xc1800000, 0xfffffffe, 0x5df5, 0x7, 0x6, 0xfffffffa, 0xc8, 0x3, 0x5, 0x7, 0x5b31, 0x9, 0x5, 0x0, 0xb, 0xc, 0x2301, 0x0, 0x200, 0x6, 0x9, 0x6, 0x8678, 0x800, 0x8, 0x0, 0x6, 0x5f3, 0x4, 0x3, 0x6, 0x800, 0x0, 0x800, 0x6, 0x4b6bca10, 0xffffffff, 0xfffffffb, 0xd2, 0x8, 0xb, 0x9, 0x4, 0xfffffff0, 0x3ce, 0x8, 0xfffffffe, 0xffff, 0x2, 0x3, 0x101, 0x80000000, 0x4, 0x4, 0x4, 0x0, 0x1, 0x5, 0x7, 0x7, 0x1, 0x81, 0x8, 0x1ff, 0x9, 0xe365, 0xff, 0x7b516099, 0x8, 0x8001, 0x8001, 0x0, 0xa63, 0xf50, 0x6, 0x7ff, 0x428606b1, 0x80000001, 0xb1b3, 0x200, 0x307, 0x6, 0x8, 0x0, 0x2, 0x3, 0x1, 0x2, 0x80000001, 0x8000, 0xf, 0x8, 0x2fdd, 0x4, 0x8, 0x9, 0x5, 0x9, 0x5, 0x7f, 0x8, 0x3ff, 0x2, 0xa, 0x1, 0x9, 0x5, 0x57570133, 0x9, 0xb4, 0x2fe1, 0x80, 0xa, 0x3, 0x3, 0x2, 0x6, 0x7, 0x3, 0x800000, 0x7, 0x4, 0xf, 0x5, 0x8b, 0x5, 0xc29f, 0x10001, 0x3, 0x401, 0x200, 0x8, 0xce, 0x1, 0x6, 0xfffffffd, 0x80000000, 0x6, 0x6, 0x6, 0x6cea, 0x0, 0x8000, 0x5, 0xfffffff7, 0xcc9f, 0x5, 0xcd, 0x1, 0xfff, 0x8, 0x0, 0xe0000000, 0x49baa988, 0x3, 0x5, 0x5, 0x8, 0x6, 0x4, 0x4, 0x100, 0x40, 0x3, 0x6a5, 0xcb2, 0x151cfa29, 0x5, 0x100, 0x5, 0xd, 0x1, 0x1, 0x2, 0x9, 0xc59, 0x5, 0x47bc, 0x1000, 0x5, 0x796, 0x70c, 0x2, 0x5, 0x3c, 0xf6, 0x120000, 0x609, 0x5, 0x10, 0x5, 0x8001, 0x7, 0x80000000, 0x4, 0x0, 0xa63, 0xfffffffb, 0x3dd, 0xff40, 0x3b838ac1, 0x2, 0x5, 0x6, 0xf, 0xffff, 0x0, 0x2, 0x845, 0xd5, 0xba, 0x1, 0x10000, 0x2, 0x80000001, 0x10000, 0x9, 0x7fff, 0x3, 0x1, 0xe2b, 0x6, 0x711f, 0x200, 0x4, 0x4, 0xfffffffa, 0x93bd, 0x7f, 0x7, 0x100, 0xe1, 0x7, 0x5, 0x1, 0x3, 0x5, 0x200, 0x5, 0x401, 0x8, 0x2, 0xbac, 0x3, 0x3, 0xc2, 0xd75, 0x9, 0x4, 0x5, 0x3, 0x19c, 0x0, 0x1db90b23, 0x400, 0x67, 0xd01, 0x8, 0x2, 0x0, 0x8, 0x2d91, 0x8001, 0x8, 0x80, 0xa6, 0xfffffff7, 0x0, 0x10001, 0x8, 0x6, 0xaef3, 0x1, 0x5, 0x5, 0x3, 0x3, 0x0, 0x87c, 0xd6, 0x7fffffff, 0x80000000, 0x100, 0x7, 0x5, 0x0, 0x8, 0x1000, 0x7, 0x996, 0x8, 0x8, 0x80000001, 0xfffffff5, 0x7, 0x5, 0xfffffff9, 0xed, 0x646, 0x8, 0x7, 0x7, 0x0, 0x1, 0x6, 0xff5, 0x2, 0x0, 0x80, 0x4, 0x331adb99, 0xe62, 0x9, 0x2, 0x5, 0x1, 0x0, 0x3b, 0x90a2, 0x7, 0x7, 0x4, 0x7, 0x32e1, 0x1, 0x6, 0xfffffff7, 0x200, 0xa, 0x1, 0x0, 0x7, 0x56, 0x3, 0x6, 0x2, 0x8, 0x6, 0xfffffffa, 0x3ff, 0x80, 0xfcc, 0x2, 0x8, 0xa5, 0x400, 0x0, 0x40, 0x7fffffff, 0x4, 0x81, 0x3, 0x9, 0x401, 0x1, 0x800, 0x0, 0x200, 0x7, 0x8ce, 0x5, 0x5, 0x4, 0x6, 0x3, 0x1dbe, 0x4, 0x8, 0x8000, 0x4, 0x7, 0x1, 0x6, 0xffffffc0, 0x3, 0x4, 0x94e, 0x1, 0x4, 0x8, 0xb, 0x87, 0x0, 0x7fff, 0x0, 0x7, 0x6, 0x48000, 0x2, 0x80, 0x4, 0x391, 0x4, 0x9, 0x0, 0xffffffff, 0x9b9b, 0x9, 0x7, 0x5, 0xfc1, 0xfffffffa, 0x566b, 0x8, 0xfffffff7, 0xffffffbb, 0x4, 0x7, 0x7, 0xe, 0x4, 0x9, 0x1ff, 0x3, 0x6, 0x0, 0x519, 0x80000001, 0x9, 0x0, 0x5, 0x800, 0xa403, 0x8bd, 0x2, 0x4000000, 0x358000, 0x80000000, 0x5, 0xc9, 0x6, 0x0, 0x3, 0x3, 0x4, 0xe35, 0x4, 0x4, 0x10000, 0x8, 0xa9af, 0x7fb4, 0x1, 0x8, 0x6, 0xa9f, 0x2, 0x8a, 0x7, 0x4, 0x200, 0xffffffff, 0x401, 0x3, 0x3, 0x198692a0, 0xff, 0x3, 0x3, 0x2, 0x10001, 0x10, 0x8, 0x0, 0x1, 0x9, 0x3177cc64, 0x4, 0x93, 0x1, 0x8, 0x1, 0x10001, 0x7, 0x5, 0x0, 0x6, 0xaeb, 0x5, 0x9, 0x4, 0x4, 0x80, 0x8, 0xbc9, 0x4, 0x3, 0x10000, 0xc, 0x53, 0x7, 0x7f, 0x9, 0x7ff, 0x3, 0x5, 0x617, 0xc, 0xffff, 0x9, 0x6, 0xfffffffb, 0x1, 0x6, 0x8, 0x6, 0x4, 0x1, 0x4, 0x1, 0x5f6, 0x1, 0x1, 0x4, 0x40, 0x6, 0x1, 0xba7, 0x9, 0x1, 0xfff, 0x8af, 0x5, 0x3, 0x3, 0x49ee, 0x7ff, 0x80000001, 0x4, 0x1, 0x4, 0xbdf6, 0x5, 0x8000, 0xd, 0x1, 0xca46, 0x400, 0x8, 0x81, 0x10000, 0x8, 0x1, 0x5, 0x4, 0x81, 0x4, 0xfffffff7, 0xfffffff9, 0x101, 0x6, 0x10000, 0x6, 0x4, 0x421, 0x9, 0x4, 0x5, 0x6, 0xfffffffb, 0x9, 0x7, 0x1, 0x1, 0xffff, 0xfff, 0xfffeffff, 0x7, 0x5, 0x1, 0xffffffff, 0x7, 0x376, 0x881, 0x0, 0x6, 0x5, 0x73e, 0x20, 0xa, 0x8, 0x1, 0x7, 0xffffffff, 0x776d, 0x7, 0x8, 0x9, 0x7, 0x9, 0xd8e6, 0x7f, 0x7f, 0x7, 0x147, 0x4c, 0xca3e, 0xf, 0x9, 0x7, 0x10000, 0x1, 0x7, 0x0, 0x6, 0xc, 0x1, 0x8001, 0x10, 0x0, 0x19b, 0x0, 0x3, 0x9, 0x6, 0x6, 0x0, 0x9, 0x2, 0x4, 0x101, 0x2805, 0x8001, 0x5, 0x4, 0x0, 0x6, 0xffffffff, 0x5, 0x8, 0x3, 0x8, 0xc1e, 0x8, 0x4, 0xac, 0x6, 0x1ff, 0x3ff, 0xe, 0x4, 0xffff, 0x9, 0x101, 0x5, 0x400, 0x7, 0x6, 0x9740b06a, 0x8000, 0x8, 0x734, 0x8, 0x7, 0x4, 0x2, 0xa66f, 0x8, 0x1, 0xe4, 0x3, 0x9, 0x33, 0x3, 0x5, 0x9, 0xffffffff, 0xffffffff, 0x7, 0x101, 0x1, 0x8, 0x6ab, 0x3, 0x6, 0xd, 0xe, 0x0, 0x3, 0x4, 0x3ff, 0xb1e2, 0xc, 0x3, 0xffff, 0xf6, 0x2, 0x3, 0x5, 0x3, 0x511, 0xfffff801, 0x7ff, 0x0, 0x7, 0xfffffff5, 0x4, 0x2, 0x0, 0x351, 0xffff, 0x588e, 0x0, 0x80000001, 0x9, 0xfffffff9, 0x4, 0x7, 0x0, 0x0, 0x4a28, 0x4, 0xfffffffc, 0x81, 0x1, 0x8, 0x6, 0x1, 0xe, 0x6b38, 0x0, 0x4e3, 0xfff80000, 0x3, 0x8, 0x80000001, 0x2, 0x6, 0x8, 0x3e, 0xd6e, 0xe, 0x2, 0x8, 0x30, 0x8, 0xc, 0x80000000, 0x4, 0x3d, 0x3, 0x3, 0x7fffffff, 0x200, 0x7c, 0x0, 0x8, 0x100, 0x6, 0xa, 0x0, 0x6, 0xc, 0x80000001, 0x4, 0x0, 0x1, 0x1, 0x4, 0x4, 0x1000, 0x7ff, 0x0, 0x9, 0x80000001, 0x7ff, 0x9, 0xb4, 0x3, 0x0, 0x1, 0xfffffffc, 0x3, 0x9, 0x6, 0x0, 0x0, 0x53, 0x1ff, 0x3, 0x9f, 0x3, 0x3, 0x0, 0x0, 0x5, 0xfffffffb, 0x400, 0x1, 0x6, 0x7f9e185c, 0xe, 0x2, 0x10, 0xacfe, 0x1ff, 0x7fff, 0x1, 0x0, 0xbf, 0x10000, 0x2, 0xfffffffc, 0x1, 0x5, 0x7b76524d, 0x3c9b, 0xb, 0xc]})

40.712123601s ago: executing program 5 (id=6872):
clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000480)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0xe53729bd61505fe4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x1, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c)
r2 = gettid()
timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r2}, &(0x7f0000044000))
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0x9, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

40.451773795s ago: executing program 5 (id=6873):
r0 = socket(0x80000000000000a, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socket(0x23, 0x6, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x141}, 0x0, &(0x7f0000000380))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00')
rename(0x0, 0x0)
r4 = getpid()
r5 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18)
syz_pidfd_open(r4, 0x0)
io_uring_setup(0x80070c5, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)

38.409327659s ago: executing program 5 (id=6881):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="000000007cd000002400128009000100626f6e640000000014000280080009000000000008000a00010000e7"], 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x4048880)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x4)
r4 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000000))
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa002}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2100, 0x6000, 0x80000000, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty}}}})

37.288473342s ago: executing program 5 (id=6882):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22080, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x4, 0x41, 0x6, 0x1, 0x6, 0x1, 0x4, 0xf8, 0x7f, 0x6, 0x8, 0x7, 0xa, 0x9, 0x3, 0x6}}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0xa, 0x2, 0x7, 0x25, 0xf7, 0x7f, 0x44233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x1, 0x5, 0x0, 0xfffffdfffffffffd], 0x4000, 0x80300}) (async, rerun: 32)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x59, 0x10, 0xd03, 0x70bc2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035550932880)

36.722571033s ago: executing program 5 (id=6888):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x6, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r10 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', <r11=>0x0, 0x7, 0x20, 0x2, 0x6, {{0x11, 0x4, 0x3, 0x3e, 0x44, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2, {[@ssrr={0x89, 0xb, 0xb3, [@local, @broadcast]}, @generic={0x94, 0xf, "ad1afffd4895acb25fcffe8470"}, @generic={0x88, 0x12, "e88ad9a545e9e7f3093d9e7f43124c7a"}, @end]}}}}})
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r12, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x1c, 0x10, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x8}, 0xfffffff1}, @in={0x2, 0x0, @remote}}}, 0x118)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', r11, 0x8, 0x1, 0x3, 0x6, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x81, 0x29, 0x0, @loopback, @broadcast}}}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x93}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000003c0)={'lo\x00', <r16=>0x0})
bind$packet(r14, &(0x7f0000001100)={0x11, 0x8, r16, 0x1, 0x0, 0x6, @multicast}, 0x14)
r17 = dup2(r14, r14)
ioctl$EVIOCSKEYCODE_V2(r17, 0x40284504, 0x0)

35.331474287s ago: executing program 36 (id=6888):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x6, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r10 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', <r11=>0x0, 0x7, 0x20, 0x2, 0x6, {{0x11, 0x4, 0x3, 0x3e, 0x44, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2, {[@ssrr={0x89, 0xb, 0xb3, [@local, @broadcast]}, @generic={0x94, 0xf, "ad1afffd4895acb25fcffe8470"}, @generic={0x88, 0x12, "e88ad9a545e9e7f3093d9e7f43124c7a"}, @end]}}}}})
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r12, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x1c, 0x10, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x8}, 0xfffffff1}, @in={0x2, 0x0, @remote}}}, 0x118)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', r11, 0x8, 0x1, 0x3, 0x6, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x81, 0x29, 0x0, @loopback, @broadcast}}}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x93}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000003c0)={'lo\x00', <r16=>0x0})
bind$packet(r14, &(0x7f0000001100)={0x11, 0x8, r16, 0x1, 0x0, 0x6, @multicast}, 0x14)
r17 = dup2(r14, r14)
ioctl$EVIOCSKEYCODE_V2(r17, 0x40284504, 0x0)

20.515616276s ago: executing program 7 (id=6930):
pipe2(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x7)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00')
splice(r2, &(0x7f0000000000)=0x2, r1, 0x0, 0x401, 0xc) (async)
syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYRESOCT=r1], 0x0) (async)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f00000011c0)=""/230)

20.347803256s ago: executing program 7 (id=6932):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0xe0}], 0x18}, 0x44)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001680)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x20008885}, 0x0)
recvmmsg$unix(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000100, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)

20.156340036s ago: executing program 7 (id=6933):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, 0x0, 0x0)
mmap(&(0x7f0000473000/0x1000)=nil, 0x1000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r5, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4)
recvmmsg(r5, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
syz_io_uring_setup(0x3241, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x2, 0xc4, 0x0, r0}, &(0x7f0000001740)=<r6=>0x0, &(0x7f00000012c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1e})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

15.370962324s ago: executing program 7 (id=6949):
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async)

15.194871722s ago: executing program 7 (id=6952):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000087032caa98ee97fc5eb369cec1ccc3000100ffffffff95"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x34, &(0x7f0000000100)=[{0x1d, '\x00', @buffer={"efd276c2de78a4b0520401e0b00a546c932af18fdc53e3ba9286f559d69b4b25", 0x20}, 0x2}]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfea7)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000040), 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r5=>0x0, <r6=>0x0})
timer_settime(r4, 0x0, &(0x7f00000001c0)={{}, {r5, r6+60000000}}, 0x0)
r7 = accept4(r3, 0x0, 0x0, 0x0)
ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408)
sendfile(r7, r1, &(0x7f0000000440)=0x8, 0x1002)
setsockopt$inet6_tcp_int(r7, 0x6, 0x1, &(0x7f0000000080)=0x52c, 0x4)

14.358035208s ago: executing program 7 (id=6955):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24009c80}, 0x40048d4)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xd0, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x9a, 0xa8, @random="516dcbb462a1efbdedbcfa9231b4bfa849ff387b7ff6176c733de694ba7da71bb827d0e9dae145bd433f6f72683d9e6ae880d516b4f23bc03e7da167a52136c8e532762740a44907cd0d83bf0a83f901b2ba4c603965bd57a712b460d12fde51e7bb2c21ee04168a44b4e96910398b1199f9bc99a5dfed8697878731a041fa10720387e54886cc566244c5af899ef6a80541a4c300cf"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4c011}, 0x0)

9.459345047s ago: executing program 8 (id=6965):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x141080)
ioctl$USBDEVFS_RESET(r0, 0x5514)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x101243)
ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000080)) (async)
ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000080))
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x8, 0x40)
ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=<r3=>0x0)
migrate_pages(r3, 0x1, &(0x7f0000000200)=0x3, &(0x7f0000000240)=0x9240)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x80010, r1, 0x2cba3000)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000280)}}, {{&(0x7f00000002c0), 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1, &(0x7f0000000440)=""/124, 0x7c}, 0xe1}, {{&(0x7f00000004c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000540)=""/126, 0x7e}, {&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f00000006c0)=""/113, 0x71}, {&(0x7f0000000740)=""/211, 0xd3}, {&(0x7f0000000840)=""/1, 0x1}, {&(0x7f0000000880)=""/53, 0x35}, {&(0x7f00000008c0)=""/143, 0x8f}], 0x7, &(0x7f0000000a00)=""/4, 0x4}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/187, 0xbb}, {&(0x7f0000000bc0)=""/134, 0x86}, {&(0x7f0000000c80)=""/41, 0x29}], 0x4, &(0x7f0000000d00)=""/128, 0x80}, 0x6}, {{&(0x7f0000000d80)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/232, 0xe8}], 0x1, &(0x7f0000000f40)=""/223, 0xdf}, 0x6}], 0x5, 0x40000000, &(0x7f0000001180)={0x77359400})
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000011c0)=@usbdevfs_connect={0x2}) (async)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000011c0)=@usbdevfs_connect={0x2})
stat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000001200)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f0000001300)={0x400, 0x9, 0x1, 0x2})
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001340), 0x5000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0/file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000001380)={{0x1, 0x1, 0x18, <r7=>r2, {0x8}}, './file0/file0\x00'})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000013c0)=[@in6={0xa, 0x4e20, 0x2, @local, 0x6}, @in6={0xa, 0x4e21, 0xfffffff2, @private1, 0x8}, @in6={0xa, 0x4e22, 0x102, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa137}, @in6={0xa, 0x4e24, 0x4, @local, 0x80000001}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x8b2}, @in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x9c)
io_uring_enter(r7, 0x68c, 0xbbad, 0x4, &(0x7f0000001480)={[0x8]}, 0x8) (async)
io_uring_enter(r7, 0x68c, 0xbbad, 0x4, &(0x7f0000001480)={[0x8]}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000001500)={&(0x7f00000014c0)="89aaa0670136e20b25a3e8a39b405f39cecdcf8512cee2ffdb501836fb854067", 0x20, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000001640)={r8, 0xf5, &(0x7f0000001540)=""/245}) (async)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000001640)={r8, 0xf5, &(0x7f0000001540)=""/245})
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x18, 0x140f, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x18, 0x140f, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
openat(r7, &(0x7f0000001780)='./file0/file0\x00', 0x40000, 0x20)
recvmmsg(r4, &(0x7f0000002440)=[{{&(0x7f00000017c0)=@un=@abs, 0x80, &(0x7f0000001840), 0x0, &(0x7f0000001880)=""/234, 0xea}, 0xffff0001}, {{&(0x7f0000001980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/75, 0x4b}, {&(0x7f0000001a80)=""/39, 0x27}], 0x2}, 0x401}, {{&(0x7f0000001b00)=@generic, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/88, 0x58}, {&(0x7f0000001c00)=""/33, 0x21}], 0x2}, 0x10000}, {{&(0x7f0000001c80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/55, 0x37}, {&(0x7f0000001d40)=""/144, 0x90}], 0x2, &(0x7f0000001e40)=""/192, 0xc0}, 0x5}, {{&(0x7f0000001f00)=@caif=@rfm, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/5, 0x5}], 0x2, &(0x7f0000002100)=""/199, 0xc7}, 0x5}, {{&(0x7f0000002200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002280)=""/239, 0xef}, {&(0x7f0000002380)=""/3, 0x3}], 0x2, &(0x7f0000002400)=""/17, 0x11}, 0x3}], 0x6, 0x100, &(0x7f00000025c0)={0x77359400})
read$FUSE(r7, &(0x7f0000002600)={0x2020}, 0x2020) (async)
read$FUSE(r7, &(0x7f0000002600)={0x2020, 0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000004640)={0x50, 0x0, r10, {0x7, 0x2d, 0x4, 0x90c0221, 0x6, 0x3, 0x6, 0x4, 0x0, 0x0, 0x4, 0x5}}, 0x50)
ioctl$AUTOFS_IOC_SETTIMEOUT(r9, 0x80049367, &(0x7f00000046c0)=0x9)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

9.311545798s ago: executing program 8 (id=6966):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x114)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100))
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="f8000000000000000b01000003000000b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3496137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5e900000000000028000000000000000000000000080000c133a12a91872b3730467c92a3a5050f02b82b7e452f3e6b500000000000000012010000ff030000ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f5167332a0000000038000000000000000a010000630a0000fa08ab919987305c8ad63785f4a4bc84cb79f70a5d7698a3f59e1f0dbbe9b9f8ed970000001000000000000000130100000900000010000000000000001001000004000000000000000000000000000000000077874cf6e18bde0f1a4f9cd71371465fa0f4f73d8d253601dad8e0a53409cf897ab7626a1fdfcc35dd98", @ANYRESDEC=r2, @ANYRESDEC=r0], 0x1c8}, 0x4000c010)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000000700000600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xffffff0a)
r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x24002deb)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})

8.941578956s ago: executing program 9 (id=6967):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x898, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x86c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x68cf46baa5fee8f4}, @TCA_TBF_RATE64={0xc, 0x4, 0x9f33e8ddf88e8093}, @TCA_TBF_BURST={0x8, 0x6, 0x7}, @TCA_TBF_RTAB={0x404, 0x2, [0x2d2, 0x2, 0xfffeffff, 0x6, 0x6, 0x7, 0x8, 0x200, 0x9, 0xffff, 0xfffffffa, 0xfffffffa, 0x8, 0x0, 0x10, 0xfffffffd, 0x7ff, 0x3, 0x6b08f39b, 0x18df, 0x51, 0x4, 0x20d2, 0x0, 0x6, 0x3, 0x2, 0x1, 0xd82, 0xfffff6ea, 0xffff, 0x4, 0xa5, 0x5, 0x1c, 0x3, 0x7, 0x3a, 0xfffffffe, 0x2, 0xfffffff7, 0x1, 0xe, 0x7, 0x5, 0x101, 0x8, 0x8, 0x3955, 0x7, 0x0, 0xffffffff, 0x101, 0x0, 0x4, 0x4, 0x40, 0x4, 0xfffffffd, 0xfffffff9, 0xa8, 0x5, 0x9, 0x1, 0x8, 0x80, 0x2, 0x0, 0x9, 0x1, 0x5, 0x7, 0x4, 0x7, 0x13bf, 0xff, 0x0, 0x4, 0xd, 0x80, 0x1000, 0xffff8d55, 0x40, 0x8, 0x8000, 0x7, 0x8, 0x2, 0x6, 0x5, 0x400, 0x101, 0x8, 0x8, 0x1, 0x7ff, 0x0, 0x1, 0x9, 0x9, 0x10001, 0x5, 0x4, 0x3, 0x81, 0x3ff, 0xffff, 0x6, 0x8, 0x3, 0x2, 0x1000, 0x9, 0xb1, 0xfffffffc, 0x8, 0xf, 0x400, 0x10, 0x0, 0x5, 0x0, 0x8, 0x5, 0xffffffff, 0x9, 0x1, 0x4, 0x8000, 0x9, 0x3, 0x3, 0x6, 0x8000, 0x1, 0xf476, 0x0, 0x5, 0x6, 0x7, 0x6fcc, 0x794e3220, 0x4, 0x3ff, 0x40000, 0x9, 0x9, 0x3, 0x80000000, 0x4, 0xc45f, 0x2, 0x3, 0xfffffffd, 0x7ff, 0x8001, 0x1, 0x5, 0x4, 0x1, 0xf, 0x0, 0x4, 0x8001, 0x7fffffff, 0x8001, 0x30e, 0xaff2, 0x9, 0x7fff, 0x5, 0x2, 0xfffffc00, 0x4, 0xcc3, 0x40, 0x7, 0x7, 0x7, 0x2, 0x8, 0x0, 0x3, 0x10000, 0x7, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0xd3b7, 0x7, 0x10, 0x7, 0xfbd, 0x4, 0x5, 0x7, 0x7, 0x7, 0x0, 0x18000000, 0x7, 0x0, 0x776, 0x3, 0x40, 0x3ae9, 0x3, 0x101, 0x7ff, 0x1, 0x9d, 0x800, 0x4, 0x6, 0x2, 0x5, 0x9, 0x6, 0x3, 0x6, 0x2, 0x0, 0x2, 0x9, 0xde7, 0xffffff80, 0x8, 0x2, 0xb, 0x4, 0x2, 0xffffff4a, 0x4, 0x1, 0x3, 0x0, 0x1000, 0xffffff0d, 0x9, 0x7, 0x0, 0x3, 0x1, 0xdf, 0x4, 0xfffffff7, 0x9, 0x9, 0xff, 0x10000, 0x7, 0x9, 0xfff, 0x8, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x8, 0xff, 0x4, 0x4}, {0x8, 0x0, 0x1, 0x1, 0x8, 0x800}, 0x3, 0xffff, 0xb4a}}, @TCA_TBF_BURST={0x8}, @TCA_TBF_PBURST={0x8, 0x7, 0xd91}, @TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_RTAB={0x404, 0x2, [0x2, 0x38, 0xfffffff8, 0x8, 0x200, 0x5, 0x3, 0x8, 0xfffffffc, 0x5, 0x8, 0x8, 0xa, 0x0, 0x97, 0x0, 0x34b, 0x0, 0x4, 0xfffeffff, 0x80000001, 0x100, 0x0, 0x39a, 0x9, 0x1, 0x3, 0x1e3, 0x7, 0x2, 0x7, 0x5, 0xe9, 0x0, 0x5a96, 0x4, 0x1000, 0x0, 0xf, 0x2, 0xf97a, 0x8, 0x100, 0xa, 0x3, 0x10000, 0x10, 0x80000000, 0x8, 0x1, 0x7, 0x0, 0x1, 0x9, 0x9, 0x9, 0x0, 0x5cdb, 0x2, 0xfffffff7, 0x8, 0x0, 0x8, 0x10, 0x10000, 0x1, 0x2, 0x5, 0x6, 0x0, 0x4, 0x3d, 0x1, 0xb94, 0x9, 0x7, 0x48b, 0x3, 0x0, 0x8000, 0x1, 0xf, 0x546c, 0xc94, 0x2, 0x1, 0x401, 0x8, 0x1, 0x7, 0x9, 0x0, 0x1, 0xe, 0x5, 0x5, 0xe330, 0x7, 0x7f, 0x604, 0x8, 0x80000000, 0xc76d, 0x5, 0xffffffea, 0x18000000, 0xffffff00, 0x7, 0x3a02, 0xe46, 0x1c79, 0x200, 0x9, 0x101, 0x80, 0x7, 0x5, 0x6, 0x7fff, 0x7a5d, 0x1cda, 0x371e, 0x5, 0xffffffff, 0x7, 0x8, 0x0, 0x8, 0x49, 0x100, 0xfffffffa, 0x4, 0x4, 0xfffffffc, 0xe0, 0xb6, 0x0, 0xc0, 0x1d19, 0x5, 0xd, 0x0, 0xfffffffa, 0x6, 0x4, 0x2, 0xfffffffe, 0x4, 0x3, 0xd, 0x9, 0x9, 0x3cf, 0x100, 0x401, 0x6, 0x0, 0x4f, 0x9, 0x9, 0x5, 0x7, 0x6, 0x8f, 0x0, 0x7, 0x9, 0x200000, 0x8000, 0x8, 0x71, 0x8001, 0x4, 0x5, 0x6, 0x9, 0x4, 0x4, 0x5, 0x101, 0x0, 0xfffffff7, 0x20, 0x710, 0x4, 0xfffff001, 0x4, 0xfff, 0x1, 0x5, 0x7aa700de, 0x3, 0x7f7ba0ec, 0x3, 0x8001, 0x4, 0x7, 0x1ef, 0xffff8ab0, 0x7fffffff, 0x4, 0x33, 0x7, 0x96f, 0x5, 0xffffff6d, 0x1, 0x6, 0x10001, 0x1, 0xfffff3bb, 0x3, 0x4, 0x1, 0x7fffffff, 0x9, 0x2, 0x401, 0x7dc2, 0x101, 0x7, 0x100, 0xdf2, 0x0, 0x401, 0x5, 0xffff31c9, 0x81, 0x2, 0x401, 0x5a8f, 0x2, 0x5, 0x100, 0x80000000, 0x8, 0x8, 0x40, 0x1, 0x8, 0x1, 0x6, 0xa9d, 0x34, 0x8007fff, 0x0, 0xbb, 0xe, 0x10000, 0x8000, 0x5, 0x67, 0x3, 0x0, 0x80000, 0x4]}]}}]}, 0x898}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
r9 = syz_open_dev$video4linux(&(0x7f0000000140), 0x6, 0x40440)
ioctl$VIDIOC_G_DV_TIMINGS(r9, 0xc0845658, &(0x7f0000000280)={0x0, @bt={0x3, 0x10000, 0x0, 0x1, 0x80, 0x2, 0x8, 0xfff, 0x8001, 0x3, 0x8, 0x1, 0x5, 0x1, 0x14, 0xa, {0x7a1c, 0x4}, 0x6, 0xaf}})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
syz_emit_ethernet(0xc5, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2286dd60cabf00008f3afffe8000000000000000000000000000bbff0200000000000000000000000000018600907800000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502000100000005000000002600040004fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d"], 0x0)
r10 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000002010200000000000000000000000004000380300002802c00018014000300fe800000000000000000000000001e2c14000400fc"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r12 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r12, &(0x7f00000000c0), 0x492492492492627, 0x0)

7.760270671s ago: executing program 8 (id=6968):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x5, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="da4706c41abac0b4402038b14201040000010902a6baeb94415e1fa6f36882014dae1fad501e8f5bb926ed388a908251af51344f1617ad383a3e4ee60f562114b013707c4225bdbc961459362f06a8d3f7931460f8c8f16fce91cb964f0edef18d2381857ad080f1d3eb9eff32e1e1da94acc3b6b98f19563026132cce4b09aafea6f8"], 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$ENABLE_STATS(0x20, &(0x7f0000000400), 0x4)
connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x20, 0x10, 0x1, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x4008b}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x80400, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001c004d6cfe48eda149453ba8d584b786ad6a14cdab2470a8ba852487b95d98ef31f85a8449a668b17d08776bed10d48c96b020e312a92b28340b7dadc6edcb", @ANYRES32, @ANYBLOB="04001400"], 0x2c}, 0x1, 0x0, 0x0, 0x46801}, 0x4080000)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, <r8=>0xffffffffffffffff, 0x1})
unshare(0x2000000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b})

7.203490975s ago: executing program 9 (id=6970):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
unshare(0x8040480)
socket$unix(0x1, 0x1, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00')
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r5, 0x400, 0x1)
fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
socket(0x10, 0x3, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

6.879657661s ago: executing program 1 (id=6971):
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x10, 0x10010, r1, 0x5000)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000440)=@x25, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/218, 0xda}, {&(0x7f00000004c0)=""/106, 0x6a}], 0x2, &(0x7f0000000640)=""/140, 0x8c}, 0x8}, {{&(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1, &(0x7f0000000780)=""/216, 0xd8}, 0x300}], 0x2, 0x10002, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000980)='iso9660\x00', 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000940)='S', 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4044010)
openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0xc0000, 0x0)
ppoll(&(0x7f0000010140)=[{r0, 0x2046}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mlock(&(0x7f00008bf000/0x1000)=nil, 0x1000)
syz_open_dev$swradio(0x0, 0x0, 0x2)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000000000000069bd8800fbdbdf250200000500f61efefacab1504ddee30100faa300000000008e2f0b80bc59efbc395e6815a13aa8d3a72f241aafd2f0e4c0f80b690f399db55013d5fd7e1eaf35ed0429f1c026b2b018c1c79362c22b4b5c21f64d1bbef512d4f8f2c3f8e8494f28db2779ea3c5eed95571a6ae37b2d0fec9ed673bc284bbacc7aefb991a3bfff64e3b0699f99f9634babc1aa0ed92ec4c1"], 0x1c}, 0x1, 0x0, 0x0, 0x34008000}, 0x20000008)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x101ff, 0x0, 0xb000, 0x2000, &(0x7f0000000000/0x2000)=nil})
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1f4, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000400)={'icmp\x00'}, &(0x7f0000000900)=0x1e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070003000000080006"], 0x4c}}, 0x4020004)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)

5.759700311s ago: executing program 1 (id=6972):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, 0x0, 0x0)
mmap(&(0x7f0000473000/0x1000)=nil, 0x1000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r5, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4)
recvmmsg(r5, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
syz_io_uring_setup(0x3241, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x2, 0xc4, 0x0, r0}, &(0x7f0000001740)=<r6=>0x0, &(0x7f00000012c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1e})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)

4.888586438s ago: executing program 1 (id=6973):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
userfaultfd(0x80001) (async)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000a37000/0x3000)=nil, 0x3000}}) (async)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000a37000/0x3000)=nil, 0x3000}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x480080, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000cd40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xb, 0x12}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000800)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x4010) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x4010)
r4 = socket(0xd7c2c4c2e55a6990, 0x80000, 0xd5)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x35e409a857089c71}, 0x1) (async)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x35e409a857089c71}, 0x1)

4.487883708s ago: executing program 9 (id=6974):
syz_emit_ethernet(0x66, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x68}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "5b72b9541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000))
r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x9)
ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000140)={0x7, 0x61b, 0x8, 0x8, 0xb, "a9b39ba517c50901"})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0xa, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

4.295280731s ago: executing program 6 (id=6975):
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x214, 0x10, 0x0, 0x101, 0x0, 0x25dfdbfe, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0x1f8, 0x45, 0x0, 0x1, [@nested={0x1f1, 0xed, 0x0, 0x1, [@generic="b7b743abbf1a5e25cd1276235989f50ed05e3e53e45683005d3e9ccbd32b780b5a1807e79400b557d4465d01b61e84382ec3b3adbdde10abc4d4581ba3b0a1e37aae5002d543ec1a5e95bf035bc6185766a3348e561e0b7d92", @nested={0x193, 0x3f, 0x0, 0x1, [@generic="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", @generic="722b01e7697a8e8bca045df12697bdd6280a827f24f07645b27544de05f7ae411b2156847e2095aa8e8d2b9fe4f370873cd51828977c7ae12a1f9f5fbdbd32cfc9df47ffcf853243fbd4ec614cea299987bede9a98e09c0403b29c2a46a05f955e665a8b18dbe367d5fbff0331dfc4392cb748488bf2d920754a8959e140fc69fab2af5e46d29574ff", @typed={0x8, 0x12, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x3}]}]}]}]}, 0x214}}, 0x0) (async)
socketpair(0x28, 0x5, 0x28, &(0x7f0000000000))
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d"], 0xfe33)

4.284884663s ago: executing program 8 (id=6976):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000200)=""/199, &(0x7f0000000140)=0xc7)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f0000000580)={0x6, 0x0, [{0xa0f, 0x0, 0x8000000000000000}, {0x9bf, 0x0, 0x2}, {0xa5c, 0x0, 0x8}, {0xc0000102, 0x0, 0x8}, {0xb3e, 0x0, 0x1ff}, {0xaa5, 0x0, 0x6}]})
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000180)={&(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000b00)=[@zcopy_cookie={0x18}, @zcopy_cookie={0x18, 0x114, 0xc, 0x81}], 0x30}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={<r7=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
socket$netlink(0x10, 0x3, 0x0)
r8 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000f400cf1077c877d474ca010203010902240001000000000904d800020805010009050abe02100000fa00090582025004"], 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast2}}}}}}, 0x0)
syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="208101797700ea"], 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x1, '@'}, 0x0, 0x0})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)

4.219615896s ago: executing program 6 (id=6977):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x114)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100))
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRESDEC=r0], 0x1c8}, 0x4000c010)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000000700000600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xffffff0a)
r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x24002deb)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})

2.528075634s ago: executing program 6 (id=6978):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc))
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x0)
r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x269, 0x0, 0x800000000000000}]})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xe], 0x1, 0x1c4213})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000615002001c0012800b00010067656e65766500000c00028008000100020000000a000100aaaaaaaaaafe00007be886de0f658e731b22ad4a1eb6a7ecedee2dc1160f9bed742baea351e3b8f3abe21ea00a90a5fe614565fbe4deaeb3627b295698139267ea9870bbd9e12d3d88629024cbf7363a8cdcbd50f473c1342f0fd9b24cd8ea5b61d8fa8ffea9da347c297db9cab2c910bf1ec2899a9d7fe9ba374404baf86515e7f3629c96d934e201aaa0ff55832cae472b1dd6be2ae6f6efeb42318908eed457dd963e7faf"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.816298398s ago: executing program 9 (id=6979):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC=0x0], 0x48}, 0x1, 0x0, 0x0, 0x1d58078d8c26741e}, 0x20044004)
syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002)
r0 = syz_io_uring_setup(0x2646, &(0x7f0000000240)={0x0, 0xfffffffc, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e100002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000540)={0x28, 0x4, 0x0, {0x1, 0xffffffffffefffff}}, 0x28)
openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4201, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
futex_waitv(&(0x7f0000000940)=[{0x4e7, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000b80)={0x77359400}, 0x1)
sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

1.729953949s ago: executing program 6 (id=6980):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002019})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x7)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0xa000000a})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000000000071100a00000000000f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002019}) (async)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x7) (async)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0xa000000a}) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000000000071100a00000000000f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)

1.705625799s ago: executing program 1 (id=6981):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0xbedffffc}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x8)
r5 = syz_open_pts(r1, 0x101)
r6 = dup3(r5, r1, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000300)={0x9, [0x19f, 0x1581], [{0x200, 0xfffffff6, 0x1, 0x1, 0x0, 0x1}, {0x8001, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x51da7290, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x10000, 0x0, 0x1}, {0x9, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x80000000, 0x1, 0x0, 0x1}, {0x3, 0x10, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x6, 0x1, 0x0, 0x1}, {0x6, 0x7, 0x0, 0x1}, {0xe, 0x72b, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x0, 0x1, 0x1}, {0x9c, 0x8, 0x1}], 0x9})
getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
sendto$inet(r0, &(0x7f0000000100)="33a1691f33aba22152cb006b0577d23d2896565179efdc28cf3ff252250ff75eb969e0996ec4abaf76f275eb085126fe6085a047bc055fed7ad52e0508dbead29fac946b40f6dcc7d7770f56f4f6635b52d673dbfb9f2038a6c55b054f67d549ba8c1c76b5eb308ecec840e06ff49e8533ba87002ca6b4f844f9761cdfe3a49d39d91fc8", 0x84, 0x8801, 0x0, 0x0)
shutdown(r0, 0x1)
write$UHID_CREATE2(r6, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x92, 0x7, 0x81, 0x7fffffff, 0x200, 0x1, "499b75dfb0ffaf9e39437790ba3bf60e2c683f7c0f2693e8eef0eebae389b2f8bebdb41ad8825f8627194caf4ac47669bf447bf3e2f1ef5c6e6d6851ee3fc6220385ec7e7ca4c5d3b5088960620ddad83d4f10765f472dbe9187d1c05066a4e930c7df8b126cea73184a8bdbe43f6344c25e181ce00e8ab02a10a8068057e13f2530392e78943ea91ecee50592e78afd0a76"}}, 0x1aa)

1.470955848s ago: executing program 6 (id=6982):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, 0x0, 0x0)
mmap(&(0x7f0000473000/0x1000)=nil, 0x1000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r4, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4)
recvmmsg(r4, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
syz_io_uring_setup(0x3241, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x2, 0xc4, 0x0, r0}, &(0x7f0000001740)=<r5=>0x0, &(0x7f00000012c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)

1.044904949s ago: executing program 1 (id=6983):
r0 = syz_open_dev$video4linux(&(0x7f0000002000), 0x7, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x5, 0xff, 0x6, 0x7}})
r1 = syz_io_uring_setup(0x882, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x9, 0x8, 0x7, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b)

917.660088ms ago: executing program 8 (id=6984):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010329bd7000fddbdf2500000000", @ANYBLOB="05992df2a2af632ec418c98b9818222e771d942ddbe81e6d8bf500491a150dc2f5c386ca5bc1cc61a7e6025cb6e2faa0bb1b5ceb4af1a995c437e43eb5e32adf097ba90d07f0fe4335e840186ff576adc8d4373308ac", @ANYRES16=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x4000804)

838.239277ms ago: executing program 9 (id=6985):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b80000000b76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0ae4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
getresuid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

660.59045ms ago: executing program 8 (id=6986):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2000000, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x62040200)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40})
socket$kcm(0x10, 0x400000002, 0x0)
r3 = fsopen(&(0x7f0000000380)='nilfs2\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x50}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0)

556.537108ms ago: executing program 6 (id=6987):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x114)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100))
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRESDEC=r0], 0x1c8}, 0x4000c010)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000000700000600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xffffff0a)
r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x24002deb)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})

369.33979ms ago: executing program 1 (id=6988):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async)
keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00A\xbd\x98\x88\xf8\xc8\xa1#\xc5\xae\xe2\x17\xde\x8f2\x90')
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x2c, 0x400, 0x70bd27, 0x0, {}, [@nested={0x7, 0x4b, 0x0, 0x1, [@generic="31f9e0"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42805}, 0x80)

0s ago: executing program 9 (id=6989):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lsetxattr$trusted_overlay_opaque(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000700), 0x0, 0x0, 0x3)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x80000000, {0x1, 0x4000000000, 0x0, 0xfffffffffffffffb, 0x7, 0x0, {0x0, 0x0, 0x4aba, 0x0, 0x0, 0x0, 0xb, 0x0, 0x101, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
write$cgroup_subtree(r3, 0x0, 0x2b)
sendmsg$AUDIT_SET(r3, &(0x7f0000001900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x3c, 0x3e9, 0x200, 0x70bd28, 0x25dfdbff, {0x28, 0x0, 0x0, r2, 0x3, 0x0, 0x8, 0x8000, 0x0, 0x7fffffff, 0x80000001}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x240440d0}, 0x40)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[], 0x0)
r5 = syz_usb_connect(0x4, 0x111e, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0xbf, 0x8, 0xfa, 0xff, 0x1608, 0x304, 0x5aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110c, 0x4, 0x0, 0x9, 0x40, 0x9, [{{0x9, 0x4, 0x81, 0x3, 0x7, 0x22, 0xff, 0xc9, 0x1d, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "c83a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0xe99, 0x28}, [@mdlm_detail={0x9c, 0x24, 0x13, 0xd4, "229a0f71be2a0045708056fd2a748519ed768984a73cdf83afb7a6c141af0a61032f8c6b694ea92e473c15de2f57a2d8ed52cc1ee7fa52b711403c8b96690f43c73efb9210de5a4133a302797e8beb4b3d39dd099638e94cc9ee96dd8d2edf23085f63771ee547288bcb9b46fb424d4359347de4f4de5f44fbc98f16beac2e040aaca879ed4979041d312dd32f65e5b2f105aefe6f643875"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}]}], [{{0x9, 0x5, 0xb, 0xc, 0x668, 0xfe, 0x35, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8}, @generic={0xd5, 0x21, "568cb1de104afacf65b107aa174cefc20aa591bbc3aab7667004aae98f7c0a9770f3c168da2a027a94729d392219bab6d00b6e031ab968c454450faef20f3818a52d2dbb902b54c3cd838e34d233f458f297a0eb9b88fee7bf7b4ea587bdd812ed0c8e9bddbd0d49a61fd71440bd47a77ecccb325e0879e4e0781b0c63471e7496d9999a215ddad616366939d0bbc0ed84d2cc2f6b09595024f277680bb30f24dafafbd3723cfb912765ad76786cd742d19b05e3c706b0a22fe350b6ec3b5a8c524e12c11a872b6f53ee1c1d3d244759f3eb8d"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x57, 0x8d, 0xe6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x4}, @generic={0xdd, 0x9, "c2094e6c61dd846037b67fd181b0a3cc1e971e7dea42953fe117d8f4063bc3fe6996cce47dafaea176e5893273050f87dc32e1bd9f63ae5e1fe938a421aa563e057ac6764818dc6b20ef170f18f5f5e6cd7288db078cdb55621c24551eab8ac4990c867040962e973ced52ff1b33ba38be2c39c48ac941efe35d507be904caba93ebd91e3cf0b388c33f07e1d6363b092db90f578b9dd9a7e7d689dd70a795efb933353ea606451f03353c2e7675b5791c12b0ebb056756d7bbbe7ced25de43ed00e0759154fb2797199779e8cb6cd26b2a0317652bb083b385330"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x610, 0x9, 0x7, 0x30, [@generic={0xce, 0x23, "0fc497786043c31b37e08d60b7dd28de97e1e8dff8e2981208e6f9761ef8e936fa38feb15a590d8d2970d8e2394cb4034938a943dcf115ffbae1464a6aae6e543434fe65235f20f4d3998aef4b509533f7d2cd285a13c55b98d51c9f28f74ee5faf3d7e7ffd611fbc943f515ec4b2e9e8afe552c2a1dad4eab5b655bde458011fa52606a3451c91e00a399cc2d740959b6f0fb980d2bfa088dbbede18a80f5cb3e88c124666e8f546b07d9bdfb7f19332b91d019ec84be5c99f426f0a8f7fef43947ed45d74b41c4b7ec1b6a"}, @generic={0x2, 0x9}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x40, 0x1, 0x4, [@generic={0x9a, 0x1, "bb5799a570df88400b52865f2d705c8d83660cde26688cb52185b2008bb3170953fdcb84fe361bca25f3c4d4d0cb8e046baff20aae776d287a7a89845a0208fb7104c79b6eedec4cee368c02dbb2e9cf0f3832589de49dc09ab32a1a2f14e3fe2106eccdd0b1cdea77a44fd9fddfe4f2b75206e2bd362ffcd3e8de23c3d47b92952873c59beca4841331c93239a58a808c1805bf8da49ffa"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x4, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x8dfd}, @generic={0x1b, 0x0, "a6bd7d88d2b9b1bae9e7e15189c2d64aa106d5b0910a575a54"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x9, 0xf, 0x7f, [@generic={0x1c, 0x23, "90e866e046a608f01bdd5b4327da25e4446b416a94dc7c5c91a0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xd, 0x25, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x7ff}]}}]}}, {{0x9, 0x4, 0xd7, 0x2, 0xf, 0x70, 0x53, 0x81, 0x7, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "ae49aed2569c"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8, 0x9, 0x2}, [@acm={0x4, 0x24, 0x2, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x9, 0x40, 0x9, 0x2}]}], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0x6, 0xc0, 0xe6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x10}]}}, {{0x9, 0x5, 0xd, 0x2, 0x460, 0x5, 0xe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x7, 0x9f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x3, 0x4, 0x1a, [@generic={0xd9, 0x23, "e96d310870a3f92f1f98cba1738723b348f6187e856e0f8335e347294ea065d05706385061f09d987d23ec48a4339d6da18b5c7e9294c9cc0051274db4863fddf4af8475f5f0f3ee259adaf4142a340882b8e159cc922b4243ac8ef542779780fc4892ba140d80bc64bcebbe5af6038b3a96fbdd84f557ce70c878b94eecda1986891a755413b7f138e7cf61a16507b75376fbb9b437dd5ad16ea8634cd36596f2eaae4f7cf5f8dc071cbf7ce055e7da672c5f76abb670085e4f261d57f985678245f0d8657449a56beda01f7bd9d377eb4c0df7a7457e"}]}}, {{0x9, 0x5, 0xf, 0x9, 0x20, 0xf9, 0x0, 0x5, [@generic={0xdf, 0x22, "1a8f9767e49fc1f76bc716896e52ccf922a709c3238c2df8869b92929342dc0a072cd978e42cf6fba43d974267ed023b8e619b65715554432877d59ef28948e90bf689469e87057b0c95fa252d10f03dcc73a71c0673afedad44163e021b497d83f75dbd81848a0b38d2bed45af22f51cacd6d79b08d377ea4d4ba6c269367338b5abc513969cd2ff9a6e3147bf2f36383abae2c32c80313955c2fca137c75021270aabe7fe220e73ecd9c6031e924dacbf4df70de15d8a09c9e49ace3bedcb425fd222af81f810b24d951056fc74bdf9cc349947b044351e98a449df4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xe}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x0, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x3}, @generic={0x30, 0x2, "81bbcdf6b3d281e3dca21402993ab388e6e29e610fe9d8895d9b9892d0aa94427b407d1ac680119f8e0237c73115"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x55, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xb400}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0xd, 0xa, [@generic={0x56, 0x12, "7424987fbfcae4f3ecfd325b88599c5c9d6fcea428d8e0a7c043d20cf46eeaa3b16e6de53e60db20e41c5f968dfb3063dca5a859a0deba99ad24725b01949d24600a0b0743845d15e3defe38a76d91cc2a20375a"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x2, 0xa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xca, 0x5}, @generic={0xde, 0x5, "35754caf3fa4e04709d1b70a58dc7df2f58b6b1d8e15cbc744cac6088c643c5cf9a913c8b386aad56d8018e14cefedba232fa33c40bfb6cc15a16dd2a3f2204f338aa8e4667e116dfba67868084b90b20fe6e2808ac8bce7ba3b5ae1f0b068ce118e30f1879df9967e022ae968fbc8a3892eb457fe8dd7bcb7158a725edbe103f5e9ccff8b1234dcd77f5d6a3e9324d6223dc7ffc901092a931b14a35e95ff730ef4ce2cc946a85371e16714c952dbce13489f0b44ba2ef967f03a05886bf1360eb037e206bf1380444849d9a3a4b6463abdaaf318184ba6a4cbbdd6"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x73, 0x60, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xae66}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x2, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x7, 0x49}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x6, 0xa, [@generic={0xca, 0x5, "ebfe6b3261a4ad76d32ccb17dfaf02f0669403a0cf2a422c2a4a5a67025cfe362618a35ea4990af22587d7bf2f71c5503eaf5debcdb6f79f10dc8dc255d79538d8e470175e8016de8c955d0c87a4ddc708a38798a2446c19324cb475e816736fe5af843967a7bf5586ec6de42c28e65ea7ed94528e56eb79d64b26bd2f356a0d3de04239a1889ce5d15719ef336618d3b48eddf0f2cd42aee820b5187d4160d8c2d629198faa3c47af110255d1fe378ebcb9a71d932f03098e55f20e2c96eb220d2a7e1e1198763c"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x2, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0xa14}]}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x3, 0x1, 0x0, [@generic={0x19, 0x0, "513e391286276af9b125b5afb50dc2b7f30742223eb6e0"}]}}, {{0x9, 0x5, 0x3, 0x11, 0x40, 0x8, 0x10, 0x9, [@generic={0xa8, 0xe, "56df08042a16ce7baef8485b76ec1ecc95c1550d8ffa27f9c96265d6f5f7be907920241f706f96a8d2794851bf7eeb906b99347caff2765944242ab07735c6006b5cbd48fe377c547c8d07d73cbacaf08cbccd4967c447ee63e1a9767853ffe8a882cfe133edaaad1de2489b683ab7420108a298c8f1b7f39289d526bc30a677aecfaf8f1ed221991fce4b6830ee12ed2385e5d3a52f2f6c7fb7d4df1c5979eea04407960f85"}]}}]}}, {{0x9, 0x4, 0x39, 0xf3, 0xd, 0x4f, 0x66, 0xfd, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1}, [@processing_unit={0xb, 0x24, 0x7, 0x6, 0x3, 0x8, "5f2a39ba"}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x8}]}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x5, 0x0, 0x7d, [@generic={0x3b, 0xc, "9c583b073a512f71d95291534d9b74f58bc4331b5ecdaa84e597185c7606d34c53cff7ba57485406bf30f95f2f4b14499cf33d1143b796fef1"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0xf, 0xe, 0xeb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x80}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1a, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0xf1, 0x401}]}}, {{0x9, 0x5, 0x5, 0x12, 0x20, 0x7, 0x6, 0x2, [@generic={0xb4, 0x1, "90b60668dc0ed1310b87e17d14cd3af117c9c6080a50edab6f1402a5ecee088bdae59f55002b5e2a25be4d13654c9c72816ec830104ff11901bfec4d96bfc429bd7fbe96f1e86229b0e449855b4fc65ff563c9f6cfcb170723855a9483aa13a58796cd3b59c1effd1a7bcc79467498eade8380fb3f594a545e5dacc77402abdfd75a7f589d46855f94fad63fabb34b8e3cf92ac673aecf097c3fa5c82c8caedf1946caf728a98419a06630102a636ccafd69"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x5, 0x2, 0x0, [@generic={0x42, 0x8, "3eebe1a9504bb833895f2ae89357eeccae0ee063cbcd641931c7b15b0c4d1fa0785451a2d02ef48b2f5d99607b10dd51fb0dd465e9b3db712bf9f6f83198159b"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0xbb, 0x3, 0x0, [@generic={0xc1, 0x23, "834aaa86eb6aacb8cc2fb06def80cc8858326828034c83178410abd2d833bf8b89da1e04627604fd6dfa13a05ffbe4a0939aaaeef79ee4eeb9bb8437cea6c7f2e44293863866b7cea0886c65f4a7355390f6e7a9d4abb9e87b30958693ef76f739e68b298c4727411a002d4624415954ee1457023e3360fa32e83e844e71fe8bd8d1608f407677b667f1a777f5d644e1c8ab21a4fd7acf161b102b7e2bf32de6c2090e81b377e9b3a645b5c3e6fb9486913defc87aaeca0e382fa6069d7fae"}, @generic={0x12, 0xc, "2b3e838d5ce4d1d137b4b24ca30402ea"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x4e, 0x6, 0x0, [@generic={0x35, 0x10, "353fd670c4958d0dc4576f6e7e9bbe3ff9b566378cec1440efccba59381fb2b13f14d9ae1bfb700e47c113ce8a7888e1aa64cb"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x18, 0xd4, 0xd3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x0, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x5}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xff, 0x7d, 0x4, [@generic={0xd6, 0x21, "cb4295a434ac0ac7a795f0c2e71bf09fa7a6765ab0fda84822a28958e8093c55ab83dd83cc859ae5c13fcefa4d0a5d92d775a1f20e46a378000c3b8af65c3f68d0a58e0ff6f00fe2cae45ac2bc4aada16bdc97ab342d861628c8b42046f467067959296a64879320e7158e6e2cf1a018c5f97796901aad46edd68acaff39a13570c8ce32ad2c9e5eaf53385bb842637f8da569edd6a8fe816e1a687aa446caecb15987130c9fbb2e81a101fa87ce5d7d501517b88456f8f6dcdc1784369f79914191a21537f33d0d30535c9a2b830dbca601dea6"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x3, 0x4, 0x4, [@generic={0xcf, 0xf, "1d39454fb623bfcc93867541afac71211672dc71d8d532333d1c29824fa86f401267e595c0b5c3b6a1d8dcf0d52fe5ab97d99c80260851c89347b3812e6b527cbdc3c7b828a010a548f9abc652c8b3980a88a95e83940f281c6bdbc1e0197e97a765c04c985e7719850c981a03c7c62a081a21ce5e13ece7c2229ff78735afd938a1d635becceb59af59a54fed1c5e9b20580cfdf9a4df476af0ed2554c4e7e0246ff931303ae7dd889f87e7135a1d3563ebb38e8cff7fe3009bed4920f9940c592c596bc598174819d676a39f"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x2, 0xa2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x6}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x2, 0xf7, 0x4, [@generic={0x88, 0x4, "77b5d22d0f1a1f24ed69acf1e8e4b3a80f8eee67255e206a9d8d4496107df4510e9a864cb622d4bcba69853f318a82d919f0450bf512cc18a9cd5fa27e963505e9c829c52ab45cc876a269760a417ec25660f43ed4d1c982b4e13da6501e1312577779e1f170b348bc85b9c603aa2643fe680d346dde68f5fd1d50fa58e8917d9775ce9e32ee"}]}}]}}, {{0x9, 0x4, 0xfe, 0x3, 0x9, 0xff, 0xff, 0xff, 0x5, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0x40, 0x9, "be10add8"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x6, 0x1002}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xf9, 0x2, 0x7, 0x81, '$nr', "0d1a3e"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xe, 0x1, 0x0, 0x4, 'x'}]}, @generic={0xb3, 0xe, "4d42f0cb335cd40cb56800b3f4fc678b0e02fbe9701fc33f2c7f1c22d936d03e7d40ca536bdaa772903a0326867478644ec4c729cf1305d7889941595979d0c394091176c19e5cf867d1864ac54bd8b71ca863571715b8f576aaa57389112252e7f8af927d80cbaa84b866c9ebf10c42c16eedfb26091dd9b6d714bb4fe5039362703adb1a09ddc64e5a191be0ea6ecfc60f5ebbb5fa1426579eaad02a65d70618589d27b0cdf4cdeb0ce87eb643e10ec0"}], [{{0x9, 0x5, 0x0, 0x3, 0x20, 0x4, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3a1d}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0xff, 0x0, 0x0, [@generic={0x45, 0x22, "f465930576d4c589d7e04149b2293f3ea3d96ac60331a29e68b288dcff4819d2deba0f0ff33bbbe053d17bf3fbe5bfac9167646fdacf58b33146ab5f516dc8c6c8b366"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x5, 0x0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x6, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf7, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x6, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1ff}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0xe, 0x9, 0x93, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x2}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x9, 0x1, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3b, 0x8000}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x66, 0x7f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x57, 0x3}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xfa, 0xf, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x17, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xc}]}}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x3, 0x0, 0x5, 0x40, 0xff}, 0x12, &(0x7f0000000080)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x6, 0x21, 0x6}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x5d, &(0x7f0000001300)=@string={0x5d, 0x3, "fc88d3e44b24a127094ed8f1282299594e391a79d50fa427fc0e7efd27d8c905fcbfd16bd5f513d5f6ca59bb848fb74cde82da85a4820041fc80da3f3053778a45e571c7fca0e0544632cc3f840ac783703514e32dd6fb30719bbe"}}, {0x3e, &(0x7f0000001380)=@string={0x3e, 0x3, "7c948105313197cd29a1d6142fbad1f19d0ba226e203533f16c64d95cfd44af937d4c86e99ad37e7334adbec2852a71cd2f026f0fa2375d1b732035c"}}, {0xed, &(0x7f00000013c0)=@string={0xed, 0x3, "4444bddd28412d52f9fd087e5eeea60c5e0bc49a9d655fca012ee63da001c5f3c68c34c7e032847bcb4fd35ced7897dd896a1ba05eeb312b980e6573da823939dbb0bc5077371644b21d1751c9ba2573c65dfc5edfe7f2907141cf40a2d26611a8acf95da15f70292320734ecc7f5671b5414402fd0469d9c44504b1b70a68d684b7917bdadf8437b631bb76152f2bfa338d5b5eb17c616838963291813dec88fc146cf3341268daf1880607a426582ed276fade15a1dbba81b51ece2fe9e6a1cee17e466c960d54cf9859e14ee1082c4fadb81ff3faeec46295dd1a3117b88550e1cbab2004031cc0c060"}}]})
syz_usb_control_io$hid(r5, &(0x7f0000001740)={0x24, &(0x7f0000001540)={0x0, 0x1, 0x91, {0x91, 0x4, "3451c05d3785ca6137a4f39d8f8de45a4a7bdc79535cc5c5e1ca3c6aa8ac8f86e2533567f9b8c34a64ee656c9c7c0683fe652e895d836eb2d40a7a37d98643cbb254c2271884794d5dde2fa495b6d4f5218e6c0829bd9c1f807632b135e11e20bf5f91f954425a44476beb157002f10fd8f00d033918e2a24e0c3d1549cf16471d32e88554d8625c686c39b727a1a2"}}, &(0x7f0000001600)={0x0, 0x3, 0x94, @string={0x94, 0x3, "12b43c6f232332a7e10d5998bb71235757f50ecf0e80e9c11c02ffbf0d2e2e51988f2cab3afe7e9fac96d843d5028b2b5a49df2a3a4303c3d08e0ff6528240f007fcf81c7c3a3550de17570827ab0e290e7e23f4e90dc4ba2def989ec1ce0563d2bb504fa2044418419b9fdfbbdccfe360819a59555652e31739a5cd30fcd531924b68f73833d464394dd8a0aafcf770fb59"}}, &(0x7f00000016c0)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0xe, "4bdbcdf8"}, @main=@item_012={0x2, 0x0, 0xc, "c512"}, @global=@item_4={0x3, 0x1, 0x6, "7f9cc32e"}, @local=@item_4={0x3, 0x2, 0x8, "b1c606e5"}, @main=@item_012={0x0, 0x0, 0xc}]}}, &(0x7f0000001700)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfc6, 0xb, 0x1, {0x22, 0xb61}}}}, &(0x7f0000001980)={0x2c, &(0x7f0000001780)={0x40, 0x1, 0x48, "fbbb53a1f4374e8d9405471c9a7b25273bc55a78622b738567d650be32d713bd2f388154b6d5f6c29ef22b915da4d2261ed7da4af6318c1b64229e13fa62589a46b8cc6f5d46e393"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0xbc}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000019c0)=ANY=[@ANYBLOB="2001920000000c542c873322de9b17fbffff5652455aecbe70d68b5acb19d0c6f063b87cf6cd1f49400000000046de3f963c340fd80702e5698eb4d1cab6b0d9b8fe058c026dbe1b9cbaa9d74ba5281a4c88e5211189bc5aeef301dd24d20bb5409fc9ba65c58c6998b1206b73abd5ae80921a87a0ab2c5bece4e8332c5d371969b741b6cc25ee8d4b245ceb48260d8bcbc7a8893d17dd4994"], &(0x7f0000001940)={0x20, 0x3, 0x1, 0x2}})
syz_usb_control_io$sierra_net(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003c67bd194060000002ff17c"]}, 0x0)

kernel console output (not intermixed with test programs):

[T31151] syzkaller0: entered promiscuous mode
[ 1931.900335][T31151] syzkaller0: entered allmulticast mode
[ 1932.362384][   T30] audit: type=1400 audit(1770910299.641:1778): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=31166 comm="syz.6.6299"
[ 1932.650296][   T30] audit: type=1326 audit(1770910299.931:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.1.6300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc362d9bf79 code=0x0
[ 1932.774386][T31176] FAULT_INJECTION: forcing a failure.
[ 1932.774386][T31176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1932.790869][T31176] CPU: 1 UID: 0 PID: 31176 Comm: syz.1.6301 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1932.790908][T31176] Tainted: [L]=SOFTLOCKUP
[ 1932.790916][T31176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1932.790928][T31176] Call Trace:
[ 1932.790937][T31176]  <TASK>
[ 1932.790947][T31176]  dump_stack_lvl+0xe8/0x150
[ 1932.790994][T31176]  should_fail_ex+0x412/0x560
[ 1932.791028][T31176]  _copy_to_user+0x31/0xb0
[ 1932.791053][T31176]  bpf_test_finish+0x22c/0x6b0
[ 1932.791088][T31176]  ? rcu_is_watching+0x15/0xb0
[ 1932.791121][T31176]  ? __pfx_bpf_test_finish+0x10/0x10
[ 1932.791149][T31176]  ? eth_type_trans+0x43b/0x6d0
[ 1932.791180][T31176]  bpf_prog_test_run_skb+0x114f/0x1d50
[ 1932.791222][T31176]  ? __fget_files+0x2a/0x420
[ 1932.791243][T31176]  ? __fget_files+0x3a0/0x420
[ 1932.791262][T31176]  ? __fget_files+0x2a/0x420
[ 1932.791288][T31176]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[ 1932.791317][T31176]  bpf_prog_test_run+0x2c7/0x340
[ 1932.791348][T31176]  __sys_bpf+0x643/0x950
[ 1932.791374][T31176]  ? __pfx___sys_bpf+0x10/0x10
[ 1932.791413][T31176]  ? ksys_write+0x242/0x270
[ 1932.791442][T31176]  ? __pfx_ksys_write+0x10/0x10
[ 1932.791474][T31176]  __x64_sys_bpf+0x7c/0x90
[ 1932.791503][T31176]  do_syscall_64+0x14d/0xf80
[ 1932.791533][T31176]  ? rcu_is_watching+0x15/0xb0
[ 1932.791554][T31176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1932.791576][T31176]  ? clear_bhb_loop+0x40/0x90
[ 1932.791601][T31176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1932.791622][T31176] RIP: 0033:0x7fc362d9bf79
[ 1932.791643][T31176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1932.791663][T31176] RSP: 002b:00007fc363cfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1932.791687][T31176] RAX: ffffffffffffffda RBX: 00007fc363015fa0 RCX: 00007fc362d9bf79
[ 1932.791703][T31176] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[ 1932.791717][T31176] RBP: 00007fc363cfd090 R08: 0000000000000000 R09: 0000000000000000
[ 1932.791730][T31176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1932.791742][T31176] R13: 00007fc363016038 R14: 00007fc363015fa0 R15: 00007fc36313fa48
[ 1932.791774][T31176]  </TASK>
[ 1933.248264][T31178] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1934.124672][   T30] audit: type=1400 audit(1770910301.361:1780): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=31202 comm="syz.6.6308"
[ 1934.557991][T31214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6310'.
[ 1934.912451][ T5871] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1935.130955][ T5871] usb 2-1: Using ep0 maxpacket: 8
[ 1935.157239][ T5871] usb 2-1: config 0 has an invalid interface number: 112 but max is 0
[ 1935.165484][ T5871] usb 2-1: config 0 has no interface number 0
[ 1935.189483][ T5871] usb 2-1: too many endpoints for config 0 interface 112 altsetting 254: 33, using maximum allowed: 30
[ 1935.225620][ T5871] usb 2-1: config 0 interface 112 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 33
[ 1935.263295][ T5871] usb 2-1: config 0 interface 112 has no altsetting 0
[ 1935.289882][ T5871] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1935.387194][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1935.404850][T31221] usb usb8: usbfs: process 31221 (syz.6.6312) did not claim interface 0 before use
[ 1935.420129][ T5871] usb 2-1: Product: syz
[ 1935.424409][ T5871] usb 2-1: Manufacturer: syz
[ 1935.439267][ T5871] usb 2-1: SerialNumber: syz
[ 1935.464425][ T5871] usb 2-1: config 0 descriptor??
[ 1935.703456][ T5871] usb 2-1: USB disconnect, device number 93
[ 1936.371409][T31235] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1937.015774][   T30] audit: type=1400 audit(1770910304.291:1781): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=31245 comm="syz.8.6322"
[ 1937.087974][T31252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6321'.
[ 1937.515654][   T24] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 1937.795503][   T24] usb 6-1: Using ep0 maxpacket: 8
[ 1937.828106][   T24] usb 6-1: config 0 has an invalid interface number: 143 but max is 0
[ 1937.837556][   T24] usb 6-1: config 0 has no interface number 0
[ 1937.843719][   T24] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[ 1937.856451][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1937.919252][   T24] usb 6-1: config 0 descriptor??
[ 1938.047012][   T24] viperboard 6-1:0.143: version 0.00 found at bus 006 address 124
[ 1938.114725][   T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[ 1938.127360][   T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[ 1938.277838][   T24] usb 6-1: USB disconnect, device number 124
[ 1939.019903][T31275] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1939.046590][   T24] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 1939.195918][   T24] usb 6-1: Using ep0 maxpacket: 32
[ 1939.204229][   T24] usb 6-1: config 50 has an invalid interface number: 94 but max is 0
[ 1939.212735][   T24] usb 6-1: config 50 contains an unexpected descriptor of type 0x2, skipping
[ 1939.221828][   T24] usb 6-1: config 50 has no interface number 0
[ 1939.228301][   T24] usb 6-1: config 50 interface 94 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1939.240756][   T24] usb 6-1: config 50 interface 94 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[ 1939.245899][ T5871] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1939.253890][   T24] usb 6-1: config 50 interface 94 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[ 1939.272076][   T24] usb 6-1: config 50 interface 94 altsetting 6 bulk endpoint 0xA has invalid maxpacket 64
[ 1939.282266][   T24] usb 6-1: config 50 interface 94 has no altsetting 0
[ 1939.293924][   T24] usb 6-1: New USB device found, idVendor=0e8d, idProduct=00a1, bcdDevice=ca.99
[ 1939.303383][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1939.311564][   T24] usb 6-1: Product: Ї
[ 1939.315783][   T24] usb 6-1: Manufacturer: П
[ 1939.320319][   T24] usb 6-1: SerialNumber: 鋜㵠�⒇羞㉜阎ԯ�ࠋ篮ꎌ✘�蚖䷟鶯嘾鸟⯩鮃ᒠ⫟��꺌��맥陣ꕌﱠ䴩䶔䬖�ఠ䜂�삳�
[ 1939.340221][T31269] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1939.415836][ T5871] usb 2-1: device descriptor read/64, error -71
[ 1939.665677][ T5871] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1939.805704][ T5871] usb 2-1: device descriptor read/64, error -71
[ 1939.915926][ T5871] usb usb2-port1: attempt power cycle
[ 1940.069131][   T24] option 6-1:50.94: GSM modem (1-port) converter detected
[ 1940.097519][   T24] usb 6-1: USB disconnect, device number 125
[ 1940.111333][   T24] option 6-1:50.94: device disconnected
[ 1940.255731][ T5871] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1940.306141][ T5871] usb 2-1: device descriptor read/8, error -71
[ 1940.566840][ T5871] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1940.585976][   T24] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1940.603421][ T5871] usb 2-1: device descriptor read/8, error -71
[ 1940.716313][ T5871] usb usb2-port1: unable to enumerate USB device
[ 1940.765631][   T24] usb 6-1: Using ep0 maxpacket: 32
[ 1940.795663][   T24] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1940.805024][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1940.819727][   T24] usb 6-1: Product: syz
[ 1940.827238][   T24] usb 6-1: Manufacturer: syz
[ 1940.834849][   T24] usb 6-1: SerialNumber: syz
[ 1940.853830][   T24] usb 6-1: config 0 descriptor??
[ 1940.874251][   T24] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1941.914972][T31287] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode
[ 1941.922874][T31287] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode
[ 1941.936376][T31287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1942.060176][   T24] gspca_topro: reg_w err -110
[ 1942.095681][   T24] gspca_topro: Sensor soi763a
[ 1942.315685][   T30] audit: type=1400 audit(1770910309.591:1782): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=31290 comm="syz.6.6337"
[ 1942.425666][ T9573] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1942.575612][ T9573] usb 2-1: Using ep0 maxpacket: 32
[ 1942.588158][ T9573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1942.607941][ T9573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1942.629127][ T9573] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[ 1942.639023][ T9573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1942.653349][ T9573] usb 2-1: config 0 descriptor??
[ 1943.083002][ T9573] greenasia 0003:0E8F:0012.004F: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0
[ 1943.097644][ T9573] greenasia 0003:0E8F:0012.004F: no inputs found
[ 1943.181498][ T9573] usb 6-1: USB disconnect, device number 126
[ 1943.290455][   T24] usb 2-1: USB disconnect, device number 98
[ 1943.879881][T31321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6344'.
[ 1943.948675][T31323] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6345'.
[ 1943.997148][T31323] syzkaller0: entered promiscuous mode
[ 1944.002688][T31323] syzkaller0: entered allmulticast mode
[ 1944.256167][   T24] usb 6-1: new full-speed USB device number 127 using dummy_hcd
[ 1944.419687][   T24] usb 6-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1944.440803][   T24] usb 6-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1944.460008][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1944.467531][   T24] usb 6-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1944.477165][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1944.493507][   T24] usb 6-1: config 0 descriptor??
[ 1944.504522][T31323] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1944.812421][   T30] audit: type=1400 audit(1770910312.071:1783): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=31335 comm="syz.7.6349"
[ 1944.839519][   T24] usbhid 6-1:0.0: can't add hid device: -71
[ 1944.851245][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1944.893417][   T24] usb 6-1: USB disconnect, device number 127
[ 1945.245673][ T5871] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1945.386358][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1945.500623][ T5871] usb 2-1: Using ep0 maxpacket: 8
[ 1945.508670][ T5871] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1945.543061][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[ 1945.555252][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1945.568613][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1945.582829][ T5871] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[ 1945.597897][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1945.621220][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2D, changing to 0xD
[ 1945.661581][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 29797, setting to 1024
[ 1945.685702][ T5871] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024
[ 1945.709037][ T5871] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1945.733973][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1945.754276][ T5871] usb 2-1: Product: syz
[ 1945.795012][ T5871] usb 2-1: Manufacturer: syz
[ 1945.804125][ T5871] usb 2-1: SerialNumber: syz
[ 1945.830468][ T5871] usb 2-1: config 0 descriptor??
[ 1945.849783][T31355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6355'.
[ 1945.850721][T31340] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1945.880288][T31340] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1945.910907][ T5871] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1946.379773][ T5871] usb 2-1: USB disconnect, device number 99
[ 1947.155714][   T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1947.307676][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1947.319367][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1947.330646][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1947.337993][ T5871] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1947.340690][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1947.360929][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1947.370164][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1947.380550][   T24] usb 2-1: config 0 descriptor??
[ 1947.497771][ T5871] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[ 1947.509081][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1947.520203][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1947.530035][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[ 1947.543240][ T5871] usb 6-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00
[ 1947.552527][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1947.563613][ T5871] usb 6-1: config 0 descriptor??
[ 1947.776443][T31377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1947.787904][T31377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1947.812767][   T24] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1948.011062][T31375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1948.025800][T31375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1948.319520][    C0] raw-gadget.4 gadget.5: ignoring, device is not running
[ 1948.331355][    C0] raw-gadget.4 gadget.5: ignoring, device is not running
[ 1948.339614][ T5871] usbhid 6-1:0.0: can't add hid device: -71
[ 1948.345755][ T5871] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1948.366761][ T5871] usb 6-1: USB disconnect, device number 2
[ 1948.458205][T31383] program syz.1.6360 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1948.678863][ T5871] usb 2-1: USB disconnect, device number 100
[ 1949.080427][T31388] lo: entered promiscuous mode
[ 1949.085409][T31389] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6364'.
[ 1949.098760][T31388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1949.520478][T31402] bridge0: port 1(macsec2) entered blocking state
[ 1949.536599][T31402] bridge0: port 1(macsec2) entered disabled state
[ 1949.543328][T31402] macsec2: entered allmulticast mode
[ 1949.557521][T31402] macsec2: left allmulticast mode
[ 1949.725838][T20799] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1949.868738][T31410] fuse: Bad value for 'fd'
[ 1949.885715][T20799] usb 6-1: Using ep0 maxpacket: 8
[ 1949.901205][T20799] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[ 1949.917112][T20799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1949.925141][T20799] usb 6-1: Product: syz
[ 1949.931855][T20799] usb 6-1: Manufacturer: syz
[ 1949.937279][T20799] usb 6-1: SerialNumber: syz
[ 1949.953079][T20799] usb 6-1: config 0 descriptor??
[ 1949.971327][T20799] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[ 1949.983913][T20799] pctv452e: pctv452e_power_ctrl: 1
[ 1949.983913][T20799] 
[ 1949.992506][T20799] usb 6-1: selecting invalid altsetting 3
[ 1950.005166][T20799] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[ 1950.005166][T20799] 
[ 1950.024645][T20799] dvb-usb: bulk message failed: -22 (5/0)
[ 1950.044509][T20799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1950.065314][T20799] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[ 1950.081645][T20799] usb 6-1: media controller created
[ 1950.092122][T20799] dvb-usb: bulk message failed: -22 (8/0)
[ 1950.106187][T20799] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[ 1950.126729][T20799] dvb-usb: MAC address reading failed.
[ 1950.170868][T20799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1950.418862][T20799] DVB: Unable to find symbol stb0899_attach()
[ 1950.435429][T20799] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[ 1950.652971][T20799] rc_core: IR keymap rc-tt-1500 not found
[ 1950.663087][T20799] Registered IR keymap rc-empty
[ 1950.676907][T20799] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[ 1950.729648][T20799] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input127
[ 1950.779372][T20799] dvb-usb: schedule remote query interval to 100 msecs.
[ 1950.813610][T20799] pctv452e: pctv452e_power_ctrl: 0
[ 1950.813610][T20799] 
[ 1950.848593][T20799] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[ 1950.889181][T31428] input: syz1 as /devices/virtual/input/input128
[ 1950.933168][T20799] dvb-usb: bulk message failed: -22 (4/0)
[ 1950.955316][T20799] dvb-usb: error -22 while querying for an remote control event.
[ 1950.957529][T31428] netlink: 'syz.1.6377': attribute type 5 has an invalid length.
[ 1951.096578][T20799] dvb-usb: bulk message failed: -22 (4/0)
[ 1951.110461][T20799] dvb-usb: error -22 while querying for an remote control event.
[ 1951.237589][T20799] dvb-usb: bulk message failed: -22 (4/0)
[ 1951.244073][T20799] dvb-usb: error -22 while querying for an remote control event.
[ 1951.360162][T20799] dvb-usb: bulk message failed: -22 (4/0)
[ 1951.367884][T20799] dvb-usb: error -22 while querying for an remote control event.
[ 1951.496083][T20799] dvb-usb: bulk message failed: -22 (4/0)
[ 1951.503825][T20799] dvb-usb: error -22 while querying for an remote control event.
[ 1951.616268][T20799] dvb-usb: bulk message failed: -22 (4/0)
[ 1951.622074][T20799] dvb-usb: error -22 while querying for an remote control event.
[ 1951.735701][T20799] dvb-usb: bulk message failed: -22 (4/0)
[ 1951.747094][T20799] dvb-usb: error -22 while querying for an remote control event.
[ 1951.875816][T20799] dvb-usb: bulk message failed: -22 (4/0)
[ 1952.162804][T20799] dvb-usb: error -22 while querying for an remote control event.
[ 1952.273012][T20799] usb 6-1: USB disconnect, device number 3
[ 1952.400796][T20799] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[ 1952.502689][T31453] syz.8.6384 (31453): attempted to duplicate a private mapping with mremap.  This is not supported.
[ 1952.688107][T31453] batadv_slave_1: entered promiscuous mode
[ 1952.697630][T31452] batadv_slave_1: left promiscuous mode
[ 1952.835826][T20799] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1953.030091][T20799] usb 6-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1953.149777][T20799] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1953.171795][T20799] usb 6-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0
[ 1953.235722][T20799] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1953.396034][T20799] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[ 1953.419616][T20799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1953.438199][T20799] usb 6-1: Product: syz
[ 1953.445972][T20799] usb 6-1: Manufacturer: syz
[ 1953.452342][T20799] usb 6-1: SerialNumber: syz
[ 1953.462131][T20799] usb 6-1: config 0 descriptor??
[ 1953.473459][T31446] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1953.871389][T20799] usb 6-1: USB disconnect, device number 4
[ 1954.063697][T31500] kernel read not supported for file /¡sxt (pid: 31500 comm: syz.6.6397)
[ 1954.140104][T31501] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1954.159827][   T30] audit: type=1800 audit(1770910321.351:1784): pid=31500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6397" name=A17378741A dev="mqueue" ino=175295 res=0 errno=0
[ 1954.220861][T31501] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1955.971450][T31520] batman_adv: batadv0: Interface deactivated: macsec1
[ 1956.061945][T31520] batman_adv: batadv0: Removing interface: macsec1
[ 1956.482147][T31535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1956.517073][T31535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1956.706543][ T5871] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1956.966442][ T5871] usb 6-1: Using ep0 maxpacket: 32
[ 1956.971326][T31551] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6410'.
[ 1956.975494][ T5871] usb 6-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59
[ 1956.992465][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1957.001096][ T5871] usb 6-1: Product: syz
[ 1957.007013][ T5871] usb 6-1: Manufacturer: syz
[ 1957.013600][ T5871] usb 6-1: SerialNumber: syz
[ 1957.021625][ T5871] usb 6-1: config 0 descriptor??
[ 1957.093405][    C1] hrtimer: interrupt took 12541 ns
[ 1957.241794][ T5871] pegasus 6-1:0.0: probe with driver pegasus failed with error -71
[ 1957.384382][ T5871] usb 6-1: USB disconnect, device number 5
[ 1957.427692][T31558] tipc: Enabled bearer <eth:gre0>, priority 10
[ 1958.365725][   T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1958.495785][ T5871] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1958.527963][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1958.539916][   T24] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00
[ 1958.549062][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1958.560487][   T24] usb 6-1: config 0 descriptor??
[ 1958.571091][   T24] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count
[ 1958.579279][   T24] usbhid 6-1:0.0: can't add hid device: -22
[ 1958.585294][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[ 1958.648449][ T5871] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1958.658406][ T5871] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1958.668736][ T5871] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1958.683720][ T5871] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[ 1958.693122][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1958.701187][ T5871] usb 2-1: Product: syz
[ 1958.705343][ T5871] usb 2-1: Manufacturer: syz
[ 1958.710079][ T5871] usb 2-1: SerialNumber: syz
[ 1958.727289][ T5871] usblp0: Disabling reads from problematic bidirectional printer
[ 1959.032265][ T5871] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004
[ 1959.266468][   T24] usb 2-1: USB disconnect, device number 101
[ 1959.274407][   T24] usblp0: removed
[ 1959.758294][T31591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6420'.
[ 1960.634070][T31620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6433'.
[ 1960.665208][T31620] input: syz1 as /devices/virtual/input/input129
[ 1960.861115][T31631] netlink: 348 bytes leftover after parsing attributes in process `syz.8.6436'.
[ 1960.884382][T31629] netlink: 43 bytes leftover after parsing attributes in process `syz.8.6436'.
[ 1960.940679][T31636] syz_tun: entered allmulticast mode
[ 1961.641904][T31626] syz_tun: left allmulticast mode
[ 1962.035654][   T24] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1962.185931][   T24] usb 2-1: Using ep0 maxpacket: 32
[ 1962.193210][   T24] usb 2-1: config 1 has an invalid interface number: 233 but max is 0
[ 1962.201574][   T24] usb 2-1: config 1 has no interface number 0
[ 1962.210323][   T24] usb 2-1: config 1 interface 233 altsetting 250 bulk endpoint 0x9 has invalid maxpacket 8
[ 1962.224863][   T24] usb 2-1: config 1 interface 233 has no altsetting 0
[ 1962.244506][   T24] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac
[ 1962.267909][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1962.291992][   T24] usb 2-1: Product: syz
[ 1962.301992][   T24] usb 2-1: Manufacturer: syz
[ 1962.311078][   T24] usb 2-1: SerialNumber: syz
[ 1962.326177][ T9573] usb 6-1: USB disconnect, device number 6
[ 1962.343421][T31647] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1962.592730][   T24] imon_raw 2-1:1.233: IR endpoint missing
[ 1962.644074][   T24] usb 2-1: USB disconnect, device number 102
[ 1963.818346][   T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1963.898014][T31690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1964.010453][   T24] usb 2-1: too many configurations: 120, using maximum allowed: 8
[ 1964.021693][   T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[ 1964.031346][T31691] geneve3: entered promiscuous mode
[ 1964.036852][   T24] usb 2-1: can't read configurations, error -22
[ 1964.076175][T31691] geneve3: entered allmulticast mode
[ 1964.215705][   T24] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1964.376405][   T24] usb 2-1: too many configurations: 120, using maximum allowed: 8
[ 1964.390366][   T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[ 1964.411858][   T24] usb 2-1: can't read configurations, error -22
[ 1964.435770][   T24] usb usb2-port1: attempt power cycle
[ 1964.710300][T31698] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer.
[ 1964.788642][T31702] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6456'.
[ 1964.837348][   T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1964.899382][   T24] usb 2-1: too many configurations: 120, using maximum allowed: 8
[ 1964.899438][T20464] wlan0: Trigger new scan to find an IBSS to join
[ 1964.915769][   T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[ 1965.067720][   T24] usb 2-1: can't read configurations, error -22
[ 1965.315794][   T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1965.471190][   T24] usb 2-1: too many configurations: 120, using maximum allowed: 8
[ 1965.486483][   T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[ 1965.715820][   T24] usb 2-1: can't read configurations, error -22
[ 1965.770482][   T24] usb usb2-port1: unable to enumerate USB device
[ 1965.908146][T31705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6457'.
[ 1966.343206][T31714] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.6458'.
[ 1966.407115][   T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1966.665691][   T24] usb 6-1: Using ep0 maxpacket: 32
[ 1966.673684][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1966.683896][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1966.715919][   T24] usb 6-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec
[ 1966.732280][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1966.758365][   T24] usb 6-1: Product: syz
[ 1966.765995][   T24] usb 6-1: Manufacturer: syz
[ 1966.777239][   T24] usb 6-1: SerialNumber: syz
[ 1966.797953][   T24] usb 6-1: config 0 descriptor??
[ 1967.014091][   T24] usb 6-1: USB disconnect, device number 7
[ 1967.298195][ T5871] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1967.507175][ T5871] usb 2-1: Using ep0 maxpacket: 32
[ 1967.825770][ T5871] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 1967.897624][ T5871] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1967.943236][ T5871] usb 2-1: can't read configurations, error -61
[ 1968.091987][ T5871] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1968.255696][ T5871] usb 2-1: Using ep0 maxpacket: 32
[ 1968.283681][ T5871] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 1968.300042][   T30] audit: type=1326 audit(1770910335.581:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31732 comm="syz.6.6465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f268a595d97 code=0x0
[ 1968.308627][ T5871] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1968.381376][ T5871] usb 2-1: can't read configurations, error -61
[ 1968.436848][ T5871] usb usb2-port1: attempt power cycle
[ 1968.599015][T20799] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1968.789266][T20799] usb 6-1: Using ep0 maxpacket: 32
[ 1968.805331][ T5871] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1968.823394][T20799] usb 6-1: config 0 has an invalid interface number: 23 but max is 0
[ 1968.833801][T20799] usb 6-1: config 0 has no interface number 0
[ 1968.840760][T20799] usb 6-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1968.851949][T20799] usb 6-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1968.863634][ T5871] usb 2-1: Using ep0 maxpacket: 32
[ 1968.874982][T20799] usb 6-1: config 0 interface 23 altsetting 2 endpoint 0xC has invalid maxpacket 1024, setting to 64
[ 1968.886183][ T5871] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 1968.887239][T21163] wlan0: Trigger new scan to find an IBSS to join
[ 1968.894254][T20799] usb 6-1: config 0 interface 23 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[ 1968.912328][T20799] usb 6-1: config 0 interface 23 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64
[ 1968.922647][T20799] usb 6-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[ 1968.933955][T20799] usb 6-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1968.946760][ T5871] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1968.954773][ T5871] usb 2-1: can't read configurations, error -61
[ 1968.965670][T20799] usb 6-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[ 1968.985861][T20799] usb 6-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[ 1968.996608][T20799] usb 6-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[ 1969.046050][T20799] usb 6-1: config 0 interface 23 has no altsetting 0
[ 1969.053009][T20799] usb 6-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b
[ 1969.062340][T20799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1969.105713][ T5871] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1969.144339][T20799] usb 6-1: config 0 descriptor??
[ 1969.165426][T31738] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1969.173031][ T5871] usb 2-1: Using ep0 maxpacket: 32
[ 1969.180536][ T5871] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 1969.834375][ T5871] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1969.855407][ T5871] usb 2-1: can't read configurations, error -71
[ 1969.877309][ T5871] usb usb2-port1: unable to enumerate USB device
[ 1969.942747][T20799] usb 6-1: string descriptor 0 read error: -71
[ 1969.974340][T20799] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[ 1970.045750][T20799] gspca_mr97310a: reg write [21] error -8
[ 1970.051718][T20799] mr97310a 6-1:0.23: probe with driver mr97310a failed with error -8
[ 1970.119392][T20459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1970.150048][T20799] usb 6-1: USB disconnect, device number 8
[ 1970.612772][T31759] tmpfs: Unknown parameter 'fd'
[ 1970.703679][T31765] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6472'.
[ 1970.755210][T31765] netlink: 12296 bytes leftover after parsing attributes in process `syz.5.6472'.
[ 1970.785349][T31765] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6472'.
[ 1971.195711][   T24] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[ 1971.449082][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 32181, setting to 1023
[ 1971.600952][   T24] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 1971.940803][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1971.951794][T31777] vivid-007: =================  START STATUS  =================
[ 1971.961957][T31777] vivid-007: Enable Output Cropping: true
[ 1971.968024][T31777] vivid-007: Enable Output Composing: true
[ 1971.981924][   T24] usb 6-1: Product: syz
[ 1971.984704][T31777] vivid-007: Enable Output Scaler: true
[ 1971.992390][   T24] usb 6-1: Manufacturer: syz
[ 1972.003380][   T24] usb 6-1: SerialNumber: syz
[ 1972.014090][T31777] vivid-007: Tx RGB Quantization Range: Automatic
[ 1972.020777][T31777] vivid-007: Transmit Mode: HDMI
[ 1972.026265][T31777] vivid-007: Hotplug Present: 0x00000000
[ 1972.036375][T31777] vivid-007: RxSense Present: 0x00000000
[ 1972.042085][T31777] vivid-007: EDID Present: 0x00000000
[ 1972.047680][T31777] vivid-007: ==================  END STATUS  ==================
[ 1972.102715][   T24] usb 6-1: config 0 descriptor??
[ 1972.127760][   T24] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1972.143982][   T24] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1972.161865][   T24] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input131
[ 1972.481310][T31785] netlink: 'syz.7.6478': attribute type 1 has an invalid length.
[ 1972.987667][   T24] usb 6-1: USB disconnect, device number 9
[ 1973.074887][T31800] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6482'.
[ 1973.130774][T31800] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6482'.
[ 1973.513173][T31814] geneve3: entered promiscuous mode
[ 1973.558078][   T61] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[ 1973.580710][   T61] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[ 1973.598215][   T61] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[ 1973.616242][T20459] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[ 1973.714606][   T30] audit: type=1800 audit(1770910340.991:1786): pid=31808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6484" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1973.831072][T31821] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6488'.
[ 1973.850146][T31821] netlink: 87 bytes leftover after parsing attributes in process `syz.5.6488'.
[ 1974.749643][T31841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1974.819639][T31841] vlan0: entered allmulticast mode
[ 1974.824839][T31841] macsec0: entered allmulticast mode
[ 1974.863611][T31845] ksmbd: Unknown IPC event: 4, ignore.
[ 1974.992205][T31849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6495'.
[ 1975.022588][T31849] bridge1: port 1(veth0_to_bond) entered blocking state
[ 1975.031200][T31849] bridge1: port 1(veth0_to_bond) entered disabled state
[ 1975.039739][T31849] veth0_to_bond: entered allmulticast mode
[ 1975.051999][T31849] veth0_to_bond: entered promiscuous mode
[ 1975.125055][T31854] geneve4: entered promiscuous mode
[ 1975.676837][T31863] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6498'.
[ 1976.092030][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.098819][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1977.617447][T31888] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1981.033225][T31940] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1981.528315][   T24] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1981.734495][   T24] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[ 1981.746187][   T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1981.760117][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1981.770025][   T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1981.795089][   T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1981.805912][   T24] usb 2-1: Product: syz
[ 1981.813753][   T24] usb 2-1: Manufacturer: syz
[ 1981.819204][   T24] usb 2-1: SerialNumber: syz
[ 1981.847687][   T24] usb 2-1: config 0 descriptor??
[ 1981.856265][   T24] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1981.866149][   T24] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1981.880490][   T24] usb 2-1: selecting invalid altsetting 0
[ 1982.137616][ T5871] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1982.305974][ T5871] usb 6-1: Using ep0 maxpacket: 16
[ 1982.317542][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1982.328027][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1982.338361][ T5871] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[ 1982.349190][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1982.367086][ T5871] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 1982.376897][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1982.378830][   T24] usb 2-1: USB disconnect, device number 111
[ 1982.385024][ T5871] usb 6-1: Product: syz
[ 1982.385047][ T5871] usb 6-1: Manufacturer: syz
[ 1982.402009][ T5871] usb 6-1: SerialNumber: syz
[ 1982.421468][ T5871] usb 6-1: config 0 descriptor??
[ 1982.458920][ T5871] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[ 1982.653091][T31948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1982.661878][T31948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1982.670862][   T24] usb 6-1: USB disconnect, device number 10
[ 1982.835708][ T5871] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1982.985886][ T5871] usb 2-1: Using ep0 maxpacket: 16
[ 1982.994300][ T5871] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1983.003563][ T5871] usb 2-1: config 7 has an invalid interface number: 79 but max is 0
[ 1983.011751][ T5871] usb 2-1: config 7 has no interface number 0
[ 1983.018470][ T5871] usb 2-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64
[ 1983.029452][ T5871] usb 2-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10
[ 1983.040573][ T5871] usb 2-1: config 7 interface 79 has no altsetting 0
[ 1983.050744][ T5871] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98
[ 1983.059884][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1983.067920][ T5871] usb 2-1: Product: syz
[ 1983.072089][ T5871] usb 2-1: Manufacturer: syz
[ 1983.077627][ T5871] usb 2-1: SerialNumber: syz
[ 1983.319702][ T5871] usb 2-1: USB disconnect, device number 112
[ 1983.736209][T20799] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1983.987133][T20799] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1983.996383][T20799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1984.007194][T20799] usb 6-1: config 0 descriptor??
[ 1984.048608][T20799] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1984.592023][T31985] loop7: detected capacity change from 0 to 16384
[ 1986.151192][T31972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1986.177984][T31972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1986.780908][T32014] loop7: detected capacity change from 0 to 16384
[ 1987.292556][T20799] gspca_stv06xx: I2C: Read error writing address: -71
[ 1987.308184][T20799] usb 6-1: USB disconnect, device number 11
[ 1987.655019][T32033] dlm: no locking on control device
[ 1987.743936][T32033] veth3: entered promiscuous mode
[ 1987.759780][   T30] audit: type=1326 audit(1770910355.041:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.8.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 1987.861379][   T30] audit: type=1326 audit(1770910355.041:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.8.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 1988.225920][   T30] audit: type=1326 audit(1770910355.041:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.8.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 1988.261291][   T30] audit: type=1326 audit(1770910355.071:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.8.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 1988.291566][   T30] audit: type=1326 audit(1770910355.071:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.8.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 1988.318607][   T30] audit: type=1326 audit(1770910355.071:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.8.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 1988.361716][   T30] audit: type=1326 audit(1770910355.071:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.8.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 1988.385730][   T30] audit: type=1326 audit(1770910355.071:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.8.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 1988.409462][   T30] audit: type=1326 audit(1770910355.071:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.8.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 1988.438305][   T30] audit: type=1326 audit(1770910355.071:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.8.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 1988.565185][T32055] fuse: Bad value for 'user_id'
[ 1988.570463][T32055] fuse: Bad value for 'user_id'
[ 1988.960375][T20799] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1989.132617][T20799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1989.156321][T20799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1989.167073][T20799] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1989.180959][T20799] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1989.195727][T20799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1989.216746][T20799] usb 6-1: config 0 descriptor??
[ 1990.074821][T32083] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1990.273651][T20799] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1990.363561][T32084] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1990.689750][T32094] loop7: detected capacity change from 0 to 16384
[ 1991.730285][T20799] usb 6-1: reset high-speed USB device number 12 using dummy_hcd
[ 1991.851669][T32106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6563'.
[ 1991.870154][T20799] usb 6-1: device descriptor read/64, error -32
[ 1992.115633][T20799] usb 6-1: reset high-speed USB device number 12 using dummy_hcd
[ 1992.130626][T32110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6564'.
[ 1992.265970][T20799] usb 6-1: device descriptor read/64, error -32
[ 1992.558166][T20799] usb 6-1: reset high-speed USB device number 12 using dummy_hcd
[ 1992.636091][T20799] usb 6-1: device descriptor read/8, error -32
[ 1992.932027][T20799] usb 6-1: reset high-speed USB device number 12 using dummy_hcd
[ 1992.982642][T20799] usb 6-1: device descriptor read/8, error -32
[ 1993.115792][T20799] raw-gadget.0 gadget.5: failed to queue suspend event
[ 1993.142512][T28418] usb 6-1: USB disconnect, device number 12
[ 1993.208621][T28418] raw-gadget.0 gadget.5: failed to queue reset event
[ 1993.283911][T32082] raw-gadget.0 gadget.5: failed to queue disconnect event
[ 1993.824249][T32135] netlink: 'syz.1.6571': attribute type 12 has an invalid length.
[ 1994.315854][T32144] could not allocate digest TFM handle crc32c-generic
[ 1995.116268][T32157] dvmrp1: tun_chr_ioctl cmd 1074025677
[ 1995.140748][T32157] dvmrp1: linktype set to 270
[ 1995.326454][T32158] loop7: detected capacity change from 0 to 16384
[ 1998.378106][T32183] netlink: 'syz.5.6583': attribute type 12 has an invalid length.
[ 2000.197945][T32200] loop7: detected capacity change from 0 to 16384
[ 2000.433130][T32208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6591'.
[ 2000.454549][T32208] xfrm2: entered promiscuous mode
[ 2000.460120][T32208] xfrm2: entered allmulticast mode
[ 2000.466360][T32208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6591'.
[ 2001.005717][T32218] netlink: 'syz.6.6594': attribute type 12 has an invalid length.
[ 2001.167526][T32220] input: syz0 as /devices/virtual/input/input132
[ 2001.378782][T32223] xt_cgroup: invalid path, errno=-2
[ 2001.402173][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6595'.
[ 2001.440192][T32206] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2001.451140][T32206] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 2001.503679][T32206] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2001.524204][T32206] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 2001.555613][T32206] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2001.561594][T32206] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 2001.604991][T32206] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2001.624927][T32206] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 2001.675589][T32206] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2001.686380][T32206] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 2002.135629][ T9573] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 2002.275611][ T9573] usb 6-1: device descriptor read/64, error -71
[ 2002.656022][ T9573] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 2003.095809][ T9573] usb 6-1: device descriptor read/64, error -71
[ 2003.206601][ T9573] usb usb6-port1: attempt power cycle
[ 2003.298404][T32246] binder: 32245:32246 ioctl c018620c 200000000000 returned -22
[ 2003.555947][ T9573] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 2003.588876][ T9573] usb 6-1: device descriptor read/8, error -71
[ 2003.835681][ T9573] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 2003.877219][ T9573] usb 6-1: device descriptor read/8, error -71
[ 2003.996435][ T9573] usb usb6-port1: unable to enumerate USB device
[ 2004.511825][T32258] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6606'.
[ 2004.888589][T32269] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6607'.
[ 2005.362414][T32273] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6609'.
[ 2005.928944][T28418] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 2006.178660][T28418] usb 6-1: Using ep0 maxpacket: 32
[ 2006.187821][T28418] usb 6-1: config 0 has an invalid interface number: 72 but max is 0
[ 2006.199875][T28418] usb 6-1: config 0 has no interface number 0
[ 2006.230682][T28418] usb 6-1: New USB device found, idVendor=d265, idProduct=baff, bcdDevice=57.f9
[ 2006.266527][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2006.280558][T28418] usb 6-1: Product: syz
[ 2006.290969][T28418] usb 6-1: Manufacturer: syz
[ 2006.305186][T28418] usb 6-1: SerialNumber: syz
[ 2006.336006][T28418] usb 6-1: config 0 descriptor??
[ 2006.373976][T28418] usb-storage 6-1:0.72: USB Mass Storage device detected
[ 2006.576589][T32277] loop9: detected capacity change from 0 to 7
[ 2006.586008][ T9573] usb 6-1: USB disconnect, device number 18
[ 2006.617349][T32290] netlink: 412 bytes leftover after parsing attributes in process `syz.6.6611'.
[ 2007.463490][   T30] kauditd_printk_skb: 256 callbacks suppressed
[ 2007.463515][   T30] audit: type=1804 audit(1770910374.741:2053): pid=32297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6616" name="/newroot/446/file0" dev="fuse" ino=1 res=1 errno=0
[ 2008.975624][ T9573] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 2009.135675][ T9573] usb 6-1: Using ep0 maxpacket: 16
[ 2009.147362][ T9573] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[ 2009.157795][ T9573] usb 6-1: config 0 has no interface number 0
[ 2009.163932][   T30] audit: type=1326 audit(1770910376.441:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32345 comm="syz.1.6629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc362d9bf79 code=0x0
[ 2009.186344][ T9573] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 2009.196644][ T9573] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 2009.209339][ T9573] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 2009.218676][ T9573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2009.227593][ T9573] usb 6-1: Product: syz
[ 2009.231920][ T9573] usb 6-1: Manufacturer: syz
[ 2009.237171][ T9573] usb 6-1: SerialNumber: syz
[ 2009.248379][ T9573] usb 6-1: config 0 descriptor??
[ 2009.254535][T32341] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2009.262154][T32341] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2009.488458][T32341] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2009.501916][T32341] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2009.712539][ T9573] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 2009.724302][ T9573] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61
[ 2009.735752][ T9573] asix 6-1:0.251: probe with driver asix failed with error -5
[ 2009.977738][   T30] audit: type=1400 audit(1770910377.231:2055): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=32360 comm="syz.8.6635"
[ 2010.636957][T32377] FAULT_INJECTION: forcing a failure.
[ 2010.636957][T32377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2010.835870][T32377] CPU: 1 UID: 0 PID: 32377 Comm: syz.7.6639 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2010.835906][T32377] Tainted: [L]=SOFTLOCKUP
[ 2010.835913][T32377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2010.835926][T32377] Call Trace:
[ 2010.835935][T32377]  <TASK>
[ 2010.835943][T32377]  dump_stack_lvl+0xe8/0x150
[ 2010.835976][T32377]  should_fail_ex+0x412/0x560
[ 2010.836009][T32377]  _copy_from_user+0x2d/0xb0
[ 2010.836032][T32377]  do_sock_getsockopt+0x165/0x3f0
[ 2010.836057][T32377]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 2010.836079][T32377]  ? __fget_files+0x3a0/0x420
[ 2010.836097][T32377]  ? __fget_files+0x2a/0x420
[ 2010.836122][T32377]  __x64_sys_getsockopt+0x1a4/0x240
[ 2010.836153][T32377]  do_syscall_64+0x14d/0xf80
[ 2010.836183][T32377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2010.836201][T32377]  ? trace_irq_disable+0x37/0x100
[ 2010.836226][T32377]  ? clear_bhb_loop+0x40/0x90
[ 2010.836250][T32377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2010.836270][T32377] RIP: 0033:0x7f4593b9bf79
[ 2010.836287][T32377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2010.836306][T32377] RSP: 002b:00007f45949e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 2010.836329][T32377] RAX: ffffffffffffffda RBX: 00007f4593e15fa0 RCX: 00007f4593b9bf79
[ 2010.836344][T32377] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003
[ 2010.836357][T32377] RBP: 00007f45949e7090 R08: 0000200000000280 R09: 0000000000000000
[ 2010.836370][T32377] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[ 2010.836383][T32377] R13: 00007f4593e16038 R14: 00007f4593e15fa0 R15: 00007f4593f3fa48
[ 2010.836414][T32377]  </TASK>
[ 2011.662955][T32409] netlink: 'syz.7.6644': attribute type 13 has an invalid length.
[ 2011.671066][T28418] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 2011.819162][T20799] usb 6-1: USB disconnect, device number 19
[ 2011.885887][T28418] usb 2-1: device descriptor read/64, error -71
[ 2012.125609][T28418] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 2012.305627][T28418] usb 2-1: device descriptor read/64, error -71
[ 2012.426146][T28418] usb usb2-port1: attempt power cycle
[ 2012.808362][T28418] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 2012.826496][T20799] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 2012.840897][T28418] usb 2-1: device descriptor read/8, error -71
[ 2013.021452][T20799] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2013.037526][T20799] usb 6-1: config 1 has no interface number 0
[ 2013.048770][T20799] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2013.068014][T20799] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 2013.077229][T20799] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2013.095664][T20799] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 2013.109564][T28418] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 2013.122763][T20799] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2013.159330][T28418] usb 2-1: device descriptor read/8, error -71
[ 2013.169268][T20799] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2013.178828][T20799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2013.187090][T20799] usb 6-1: Product: syz
[ 2013.191371][T20799] usb 6-1: Manufacturer: syz
[ 2013.196613][T20799] usb 6-1: SerialNumber: syz
[ 2013.276116][T28418] usb usb2-port1: unable to enumerate USB device
[ 2013.416935][T32417] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2014.093207][T32417] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2014.103046][T20799] cdc_ncm 6-1:1.1: bind() failure
[ 2014.307355][T20799] usb 6-1: USB disconnect, device number 20
[ 2014.338178][T32426] xt_hashlimit: max too large, truncated to 1048576
[ 2014.885631][T28418] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 2015.060195][T28418] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[ 2015.073367][T28418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2015.098277][T28418] usb 2-1: config 0 descriptor??
[ 2015.530784][T28418] uclogic 0003:28BD:0055.0052: interface is invalid, ignoring
[ 2015.720566][T32458] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 2015.731729][T32435] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2015.762059][T32435] fuse: Unknown parameter 'Ë‘y
[ 2015.762059][T32435] &æ±›_ž1²Ü'
[ 2015.799428][T28418] usb 2-1: USB disconnect, device number 117
[ 2016.965902][T28418] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 2017.130028][T28418] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2017.142677][T28418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2017.154296][T28418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2017.164952][T28418] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2017.178336][T28418] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2017.187715][T28418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2017.202181][T28418] usb 2-1: config 0 descriptor??
[ 2017.726619][T28418] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 2018.327599][T32485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2018.336468][T32485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2018.485959][T28418] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[ 2018.553937][ T9573] usb 2-1: USB disconnect, device number 118
[ 2018.648214][T28418] usb 6-1: not running at top speed; connect to a high speed hub
[ 2018.676100][T28418] usb 6-1: config 1 interface 0 has no altsetting 0
[ 2018.742559][T28418] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2018.768758][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2018.789113][T28418] usb 6-1: Product: Х
[ 2018.793271][T28418] usb 6-1: Manufacturer: Ж
[ 2018.824366][T32492] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6672'.
[ 2018.836472][T32492] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2019.518500][T28418] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[ 2019.548365][T28418] usb 6-1: USB disconnect, device number 21
[ 2019.735935][T20799] usb 2-1: new full-speed USB device number 119 using dummy_hcd
[ 2019.897798][T20799] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2019.912739][T20799] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2019.955771][T20799] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2019.962629][T20799] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[ 2019.993221][T20799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2020.045194][T20799] usb 2-1: config 0 descriptor??
[ 2020.484680][T32511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2020.493607][T32500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2020.505029][T32514] program syz.5.6676 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2020.516164][T32500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2020.538706][T20799] lenovo 0003:17EF:60EE.0054: unknown main item tag 0x0
[ 2020.546020][T20799] lenovo 0003:17EF:60EE.0054: unknown main item tag 0x0
[ 2020.553256][T20799] lenovo 0003:17EF:60EE.0054: unknown main item tag 0x0
[ 2020.561887][T20799] lenovo 0003:17EF:60EE.0054: unknown main item tag 0x0
[ 2020.572062][T20799] lenovo 0003:17EF:60EE.0054: unknown main item tag 0x0
[ 2020.638068][T20799] lenovo 0003:17EF:60EE.0054: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0
[ 2021.330313][   T30] audit: type=1326 audit(1770910388.611:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32520 comm="syz.8.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2021.415959][   T30] audit: type=1326 audit(1770910388.611:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32520 comm="syz.8.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2021.463779][   T30] audit: type=1326 audit(1770910388.611:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32520 comm="syz.8.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2021.572777][   T30] audit: type=1326 audit(1770910388.611:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32520 comm="syz.8.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2021.596135][   T30] audit: type=1326 audit(1770910388.611:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32520 comm="syz.8.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2021.619867][   T30] audit: type=1326 audit(1770910388.611:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32520 comm="syz.8.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2021.692007][   T30] audit: type=1326 audit(1770910388.611:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32520 comm="syz.8.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2021.742295][   T30] audit: type=1326 audit(1770910388.611:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32520 comm="syz.8.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2021.809881][   T30] audit: type=1326 audit(1770910388.611:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32520 comm="syz.8.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91b379bce2 code=0x7ffc0000
[ 2021.858479][   T30] audit: type=1326 audit(1770910388.611:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32520 comm="syz.8.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f91b379bd77 code=0x7ffc0000
[ 2022.499817][T32542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6684'.
[ 2022.518977][T32544] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6683'.
[ 2022.687987][T28418] usb 2-1: USB disconnect, device number 119
[ 2023.521533][T32558] fuse: Unknown parameter '†•x-Èó'
[ 2024.035859][T28418] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 2024.196887][T32569] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0
[ 2024.196922][T28418] usb 6-1: Using ep0 maxpacket: 32
[ 2024.207986][T32568] IPVS: stopping backup sync thread 32569 ...
[ 2024.260778][T28418] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[ 2024.269548][T28418] usb 6-1: config 0 has no interface number 0
[ 2024.281045][T28418] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 2024.308570][T28418] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 2024.321599][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2024.341916][T28418] usb 6-1: Product: syz
[ 2024.355714][T28418] usb 6-1: Manufacturer: syz
[ 2024.361806][T28418] usb 6-1: SerialNumber: syz
[ 2024.386129][T28418] usb 6-1: config 0 descriptor??
[ 2024.400355][T32562] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2024.630803][T32583] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6696'.
[ 2024.680610][T32563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6690'.
[ 2024.690318][T32563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6690'.
[ 2024.704872][T32585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6690'.
[ 2024.716676][T32585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6690'.
[ 2024.730108][T32562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6690'.
[ 2024.752568][T32562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6690'.
[ 2024.783153][T32563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6690'.
[ 2024.807106][T32563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6690'.
[ 2024.830414][T32585] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2025.190373][T32593] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20004
[ 2025.483081][T28418] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 2025.495806][T28418] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[ 2025.523163][T28418] asix 6-1:0.188: probe with driver asix failed with error -32
[ 2025.625971][ T9573] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 2025.780405][ T9573] usb 2-1: Using ep0 maxpacket: 32
[ 2025.797538][ T9573] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 2025.819394][ T9573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2025.854354][ T9573] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 2026.335876][ T9573] gspca_nw80x: reg_r err -71
[ 2026.340880][ T9573] nw80x 2-1:3.0: probe with driver nw80x failed with error -71
[ 2026.370353][ T9573] usb 2-1: USB disconnect, device number 120
[ 2026.616455][ T9562] usb 6-1: USB disconnect, device number 22
[ 2027.196757][ T9562] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 2027.345966][ T9573] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 2027.364182][ T9562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2027.444673][ T9562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2027.477013][ T9562] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[ 2027.489945][ T9562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2027.508186][ T9562] usb 6-1: config 0 descriptor??
[ 2027.517669][ T9573] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2027.530959][ T9573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2027.608522][ T9573] usb 2-1: config 0 descriptor??
[ 2027.619869][ T9573] cp210x 2-1:0.0: cp210x converter detected
[ 2028.009938][ T9562] hkems 0003:2006:0118.0055: ignoring exceeding usage max
[ 2028.093913][ T9562] hkems 0003:2006:0118.0055: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.5-1/input0
[ 2028.154268][ T9562] hkems 0003:2006:0118.0055: no inputs found
[ 2028.175185][ T9562] hkems 0003:2006:0118.0055: force feedback init failed
[ 2028.185402][T32629] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode
[ 2028.220529][T32629] batadv_slave_0: entered promiscuous mode
[ 2028.300583][ T9562] usb 6-1: USB disconnect, device number 23
[ 2030.160446][ T9573] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71
[ 2030.206443][ T9573] cp210x 2-1:0.0: GPIO initialisation failed: -71
[ 2030.217872][ T9573] usb 2-1: cp210x converter now attached to ttyUSB0
[ 2030.254347][ T9573] usb 2-1: USB disconnect, device number 121
[ 2030.375386][ T9573] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2030.400128][ T9573] cp210x 2-1:0.0: device disconnected
[ 2030.735610][ T9573] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 2031.074290][ T9573] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2031.086751][ T9573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2031.098208][ T9573] usb 2-1: Product: syz
[ 2031.342456][ T9573] usb 2-1: Manufacturer: syz
[ 2031.352950][ T9573] usb 2-1: SerialNumber: syz
[ 2031.379119][ T9573] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2031.500483][ T9562] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2032.133663][T32683] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6718'.
[ 2032.565814][ T9562] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2032.573361][ T9562] ath9k_htc: Failed to initialize the device
[ 2032.599466][ T9562] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2032.848948][T32699] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[ 2032.908884][T32699] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6722'.
[ 2032.946738][T20799] usb 2-1: USB disconnect, device number 122
[ 2033.071950][T32701] loop7: detected capacity change from 0 to 16384
[ 2034.355785][ T9562] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 2034.559402][ T9562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2034.579746][ T9562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 2034.618972][ T9562] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2034.635756][ T9562] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2034.654250][ T9562] usb 2-1: Product: syz
[ 2034.664412][ T9562] usb 2-1: Manufacturer: syz
[ 2034.674568][ T9562] usb 2-1: SerialNumber: syz
[ 2034.692218][ T9562] usb 2-1: config 0 descriptor??
[ 2034.772812][T32713] binder: 32708:32713 ioctl c00c6211 ffffffffffffffff returned -14
[ 2035.018898][ T9562] usb 2-1: USB disconnect, device number 123
[ 2035.139679][T29292] udevd[29292]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2035.175764][ T9573] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 2035.188239][T32645] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0
[ 2035.204634][T32645] hid-generic 0000:0000:0000.0056: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2035.347550][ T9573] usb 6-1: Using ep0 maxpacket: 32
[ 2035.357798][ T9573] usb 6-1: config 2 has an invalid interface number: 157 but max is 0
[ 2035.369212][ T9573] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[ 2035.383077][ T9573] usb 6-1: config 2 has no interface number 1
[ 2035.414764][ T9573] usb 6-1: too many endpoints for config 2 interface 0 altsetting 5: 142, using maximum allowed: 30
[ 2035.483073][ T9573] usb 6-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 142
[ 2035.516966][ T9573] usb 6-1: config 2 interface 0 has no altsetting 0
[ 2035.534944][ T9573] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[ 2035.546511][ T9573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2035.554518][ T9573] usb 6-1: Product: syz
[ 2035.564458][ T9573] usb 6-1: Manufacturer: syz
[ 2035.565603][   T30] kauditd_printk_skb: 50 callbacks suppressed
[ 2035.565620][   T30] audit: type=1326 audit(1770910402.811:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32727 comm="syz.8.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2035.609005][ T9573] usb 6-1: SerialNumber: syz
[ 2035.645970][   T30] audit: type=1326 audit(1770910402.811:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32727 comm="syz.8.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2035.682180][T32730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6732'.
[ 2035.682916][   T30] audit: type=1326 audit(1770910402.811:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32727 comm="syz.8.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2035.718571][ T9573] imon 6-1:2.157: inconsistent driver matching
[ 2035.725058][ T9573] imon 6-1:2.157: unable to register, err -22
[ 2035.732073][ T9573] imon 6-1:2.157: probe with driver imon failed with error -22
[ 2035.745632][   T30] audit: type=1326 audit(1770910402.811:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32727 comm="syz.8.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2035.768451][T32730] bond0: Unable to set down delay as MII monitoring is disabled
[ 2035.768972][   T30] audit: type=1326 audit(1770910402.841:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32727 comm="syz.8.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2035.806246][   T30] audit: type=1326 audit(1770910402.841:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32727 comm="syz.8.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2035.837158][   T30] audit: type=1326 audit(1770910402.841:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32727 comm="syz.8.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2035.896880][ T9573] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 2035.908900][ T9573] imon 6-1:2.0: unable to initialize intf0, err -19
[ 2035.916087][ T9573] imon:imon_probe: failed to initialize context!
[ 2035.922524][ T9573] imon 6-1:2.0: unable to register, err -19
[ 2035.929117][   T30] audit: type=1326 audit(1770910402.841:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32727 comm="syz.8.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2035.963009][ T9573] usb 6-1: USB disconnect, device number 24
[ 2035.994231][   T30] audit: type=1326 audit(1770910402.841:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32727 comm="syz.8.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2036.040876][   T30] audit: type=1326 audit(1770910402.841:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32727 comm="syz.8.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b379bf79 code=0x7ffc0000
[ 2036.115433][T32733] fuse: Unknown parameter '00000000000000000000'
[ 2036.802607][T32746] loop7: detected capacity change from 0 to 16384
[ 2037.552144][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.565349][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2037.848193][T32753] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:23
[ 2037.987657][T32757] ptrace attach of "./syz-executor exec"[28532] was attempted by "\x09   
                   Àÿ      Àÿ      Ðÿ      àÿ              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        À    "[32757]
[ 2038.665658][ T9573] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 2038.795575][ T9573] usb 2-1: device descriptor read/64, error -71
[ 2039.057759][ T9573] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 2039.225647][ T9573] usb 2-1: device descriptor read/64, error -71
[ 2039.335814][ T9573] usb usb2-port1: attempt power cycle
[ 2039.695671][ T9573] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 2039.875875][  T318] netlink: 'syz.8.6746': attribute type 4 has an invalid length.
[ 2040.196479][ T9573] usb 2-1: device descriptor read/8, error -71
[ 2040.458056][ T9573] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 2040.512034][ T9573] usb 2-1: device descriptor read/8, error -71
[ 2040.647961][ T9573] usb usb2-port1: unable to enumerate USB device
[ 2040.920745][  T327] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6748'.
[ 2041.279346][  T334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6750'.
[ 2041.288606][  T334] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6750'.
[ 2041.727419][  T336] loop7: detected capacity change from 0 to 16384
[ 2042.415009][  T344] program syz.7.6752 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2042.995009][  T354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6755'.
[ 2043.069113][  T352] netlink: 'syz.8.6755': attribute type 1 has an invalid length.
[ 2043.154865][  T357] netlink: 'syz.5.6756': attribute type 1 has an invalid length.
[ 2043.164633][  T357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2043.869645][   T30] kauditd_printk_skb: 12 callbacks suppressed
[ 2043.869665][   T30] audit: type=1400 audit(1770910411.151:2138): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=384 comm="syz.5.6764"
[ 2044.037424][  T389] syzkaller0: entered promiscuous mode
[ 2044.045101][  T389] syzkaller0: entered allmulticast mode
[ 2044.131863][  T390] loop7: detected capacity change from 0 to 16384
[ 2044.609260][T28418] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 2044.776872][T28418] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[ 2044.797054][T28418] usb 6-1: config 0 has no interface number 0
[ 2044.815823][T28418] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 2044.831073][T28418] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2044.847896][T28418] usb 6-1: config 0 interface 255 has no altsetting 0
[ 2044.858670][T28418] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 2044.868243][T28418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2044.912196][T28418] usb 6-1: config 0 descriptor??
[ 2045.129528][T28418] usb 6-1: string descriptor 0 read error: -71
[ 2045.136913][T28418] ums-realtek 6-1:0.255: USB Mass Storage device detected
[ 2045.195113][T28418] usb 6-1: USB disconnect, device number 25
[ 2045.305669][ T9573] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[ 2045.457642][ T9573] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2045.468136][ T9573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2045.479601][ T9573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2045.489726][ T9573] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 2045.503950][ T9573] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2045.513105][ T9573] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2045.521251][ T9573] usb 2-1: Manufacturer: syz
[ 2045.528749][ T9573] usb 2-1: config 0 descriptor??
[ 2045.837897][  T408] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6768'.
[ 2045.848597][  T408] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6768'.
[ 2045.857778][ T9573] rc_core: IR keymap rc-hauppauge not found
[ 2045.863824][ T9573] Registered IR keymap rc-empty
[ 2045.868993][ T9573] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2045.876388][  T408] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6768'.
[ 2045.906232][ T9573] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2045.980894][ T9573] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 2046.059016][ T9573] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input136
[ 2046.087496][  T416] xt_bpf: check failed: parse error
[ 2046.093805][ T9573] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2046.097755][  T416] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 2046.145690][ T9573] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2046.185745][T28418] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 2046.227559][ T9573] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2046.277561][ T9573] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2046.295682][ T9573] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2046.315673][ T9573] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2046.342901][T28418] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2046.355748][ T9573] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2046.375158][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2046.414221][T28418] usb 6-1: Product: syz
[ 2046.426982][T28418] usb 6-1: Manufacturer: syz
[ 2046.428569][ T9573] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2046.448125][T28418] usb 6-1: SerialNumber: syz
[ 2046.495870][ T9573] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2046.496188][T28418] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2046.531455][T20799] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2046.535696][ T9573] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2046.736964][ T9573] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2046.791998][ T9573] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2046.809967][ T9573] usb 2-1: USB disconnect, device number 2
[ 2047.482520][   T30] audit: type=1400 audit(1770910414.751:2139): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=433 comm="syz.8.6775"
[ 2047.736700][ T9573] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 2047.905682][ T9573] usb 2-1: device descriptor read/64, error -71
[ 2047.997331][  T446] loop7: detected capacity change from 0 to 16384
[ 2048.037762][T20799] usb 6-1: Service connection timeout for: 256
[ 2048.044075][T20799] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 2048.081950][T20799] ath9k_htc: Failed to initialize the device
[ 2048.094727][T20799] usb 6-1: ath9k_htc: USB layer deinitialized
[ 2048.243268][ T9573] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 2048.396221][ T9573] usb 2-1: device descriptor read/64, error -71
[ 2048.626049][ T9573] usb usb2-port1: attempt power cycle
[ 2049.317833][T28418] usb 6-1: USB disconnect, device number 26
[ 2049.591216][  T464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6782'.
[ 2049.755852][T28418] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 2049.927128][T28418] usb 6-1: Using ep0 maxpacket: 16
[ 2049.934581][T28418] usb 6-1: config 1 has too many interfaces: 101, using maximum allowed: 32
[ 2049.953025][T28418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2049.987246][T28418] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 101
[ 2050.018951][T28418] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 2050.028801][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2050.037313][T28418] usb 6-1: Product: syz
[ 2050.041602][T28418] usb 6-1: Manufacturer: syz
[ 2050.051530][T28418] usb 6-1: SerialNumber: syz
[ 2050.091633][T28418] r8152-cfgselector 6-1: Unknown version 0x0000
[ 2050.166388][  T490] loop5: detected capacity change from 0 to 7
[ 2050.180349][T29291] Dev loop5: unable to read RDB block 7
[ 2050.205147][T29291]  loop5: unable to read partition table
[ 2050.213550][T29291] loop5: partition table beyond EOD, truncated
[ 2050.258643][  T490] Dev loop5: unable to read RDB block 7
[ 2050.264289][  T490]  loop5: unable to read partition table
[ 2050.281121][  T490] loop5: partition table beyond EOD, truncated
[ 2050.296066][  T490] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2050.330651][  T497] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2050.349152][  T462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2050.379608][  T462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2050.507950][  T501] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6791'.
[ 2050.514836][   T30] audit: type=1326 audit(1770910417.791:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.6.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268a59bf79 code=0x7ffc0000
[ 2050.544325][   T30] audit: type=1326 audit(1770910417.791:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.6.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268a59bf79 code=0x7ffc0000
[ 2050.585799][   T30] audit: type=1326 audit(1770910417.791:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.6.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f268a59bf79 code=0x7ffc0000
[ 2050.654065][   T30] audit: type=1326 audit(1770910417.791:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.6.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268a59bf79 code=0x7ffc0000
[ 2050.682941][   T30] audit: type=1326 audit(1770910417.791:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.6.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268a59bf79 code=0x7ffc0000
[ 2050.729470][   T30] audit: type=1326 audit(1770910417.791:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.6.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f268a59bf79 code=0x7ffc0000
[ 2050.763826][   T30] audit: type=1326 audit(1770910417.791:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.6.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268a59bf79 code=0x7ffc0000
[ 2050.765841][  T506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2050.825082][   T30] audit: type=1326 audit(1770910417.791:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.6.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268a59bf79 code=0x7ffc0000
[ 2050.894538][  T506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2050.911278][   T30] audit: type=1326 audit(1770910417.791:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.6.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f268a59bf79 code=0x7ffc0000
[ 2050.941073][  T506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2050.951131][  T506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2050.976234][   T30] audit: type=1326 audit(1770910417.851:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.6.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268a59bf79 code=0x7ffc0000
[ 2051.291758][  T512] input: syz1 as /devices/virtual/input/input137
[ 2051.561509][  T521] loop7: detected capacity change from 0 to 16384
[ 2051.707669][  T525] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2052.523847][ T9573] r8152-cfgselector 6-1: USB disconnect, device number 27
[ 2052.906841][  T537] binder: 532:537 ioctl 400c620e 200000000100 returned -22
[ 2053.335826][T20799] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 2053.557061][T20799] usb 6-1: device descriptor read/64, error -71
[ 2053.825620][T20799] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 2054.036120][T20799] usb 6-1: device descriptor read/64, error -71
[ 2054.147590][T20799] usb usb6-port1: attempt power cycle
[ 2054.525582][T20799] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 2054.565313][T20799] usb 6-1: device descriptor read/8, error -71
[ 2054.825872][T20799] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 2054.857537][T20799] usb 6-1: device descriptor read/8, error -71
[ 2054.988661][T20799] usb usb6-port1: unable to enumerate USB device
[ 2055.867648][  T579] netlink: 'syz.1.6814': attribute type 1 has an invalid length.
[ 2055.878208][  T580] netlink: 'syz.1.6814': attribute type 1 has an invalid length.
[ 2056.220825][  T588] loop7: detected capacity change from 0 to 16384
[ 2057.201838][T20799] IPVS: starting estimator thread 0...
[ 2057.316280][  T605] IPVS: using max 29 ests per chain, 69600 per kthread
[ 2057.702836][  T623] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6822'.
[ 2058.255571][T20799] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 2058.417274][T20799] usb 6-1: Using ep0 maxpacket: 32
[ 2058.438625][T20799] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[ 2058.456300][T20799] usb 6-1: config 0 has no interface number 0
[ 2058.462670][T20799] usb 6-1: config 0 interface 12 has no altsetting 0
[ 2058.479303][T20799] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 2058.491992][T20799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2058.501351][T20799] usb 6-1: Product: syz
[ 2058.506746][T20799] usb 6-1: Manufacturer: syz
[ 2058.511992][T20799] usb 6-1: SerialNumber: syz
[ 2058.533638][T20799] usb 6-1: config 0 descriptor??
[ 2058.685847][  T651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6829'.
[ 2058.772484][  T648] loop7: detected capacity change from 0 to 16384
[ 2060.204601][T20799] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 2060.213594][T20799] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[ 2060.274432][T20799] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 2060.295401][T20799] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[ 2060.313208][T20799] usb 6-1: USB disconnect, device number 32
[ 2061.172885][  T709] loop7: detected capacity change from 0 to 16384
[ 2061.466538][  T700] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6838'.
[ 2061.636767][  T710] loop7: detected capacity change from 16384 to 0
[ 2062.265859][T20799] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 2062.341680][  T724] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6844'.
[ 2062.353388][  T725] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6844'.
[ 2062.432351][T20799] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 2062.445336][T20799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2062.454758][T20799] usb 6-1: Product: syz
[ 2062.459324][T20799] usb 6-1: Manufacturer: syz
[ 2062.463946][T20799] usb 6-1: SerialNumber: syz
[ 2062.896785][T20799] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 2062.913730][T20799] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[ 2062.941996][T20799] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 2062.971780][T20799] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 2063.044805][T20799] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 2063.167686][T20799] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[ 2063.230037][  T746] binder_alloc: binder_alloc_mmap_handler: 745 200000ffd000-200000fff000 already mapped failed -16
[ 2063.243912][T20799] usb 6-1: USB disconnect, device number 33
[ 2063.276085][  T746] binder_alloc: binder_alloc_mmap_handler: 745 200000ffd000-200000fff000 already mapped failed -16
[ 2063.774106][  T752] loop7: detected capacity change from 0 to 16384
[ 2063.895784][T20799] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 2064.075775][T20799] usb 6-1: Using ep0 maxpacket: 32
[ 2064.102395][T20799] usb 6-1: config 0 has an invalid interface number: 239 but max is 0
[ 2064.131556][T20799] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2064.167966][T20799] usb 6-1: config 0 has no interface number 0
[ 2064.184478][T20799] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[ 2064.200642][T20799] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[ 2064.286239][T20799] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[ 2064.318364][T20799] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[ 2064.345590][T20799] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[ 2064.395567][T20799] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[ 2064.434795][T20799] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2064.481952][T20799] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[ 2064.512668][T20799] usb 6-1: config 0 interface 239 has no altsetting 0
[ 2064.535784][ T9554] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 2064.538138][T20799] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[ 2064.582170][T20799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2064.605566][T20799] usb 6-1: Product: syz
[ 2064.609926][T20799] usb 6-1: Manufacturer: syz
[ 2064.635146][T20799] usb 6-1: SerialNumber: syz
[ 2064.658553][T20799] usb 6-1: config 0 descriptor??
[ 2064.673838][  T754] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 2064.675955][ T9554] usb 2-1: device descriptor read/64, error -71
[ 2064.696119][  T754] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 2064.735721][ T5826] Bluetooth: hci5: urb ffff888078a8cc00 submission failed (90)
[ 2064.938971][ T9554] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 2064.952681][T20799] usb 6-1: USB disconnect, device number 34
[ 2065.076739][ T9554] usb 2-1: device descriptor read/64, error -71
[ 2065.190053][ T9554] usb usb2-port1: attempt power cycle
[ 2065.535860][ T9554] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 2065.805988][ T9554] usb 2-1: device descriptor read/8, error -71
[ 2065.916126][T20799] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 2066.045707][ T9554] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 2066.068038][ T9554] usb 2-1: device descriptor read/8, error -71
[ 2066.077933][T20799] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 2066.089138][T20799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2066.121970][T20799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2066.161515][T20799] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 2066.176022][ T9554] usb usb2-port1: unable to enumerate USB device
[ 2066.187129][T20799] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 2066.196554][T20799] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 2066.205185][T20799] usb 6-1: Manufacturer: syz
[ 2066.214884][T20799] usb 6-1: config 0 descriptor??
[ 2066.629928][T20799] appleir 0003:05AC:8243.0057: unknown main item tag 0x0
[ 2066.646151][T20799] appleir 0003:05AC:8243.0057: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2066.737772][  T811] loop7: detected capacity change from 0 to 16384
[ 2067.695591][ T9554] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 2067.855817][ T9554] usb 2-1: Using ep0 maxpacket: 8
[ 2067.864688][ T9554] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[ 2067.875810][ T9554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2067.885030][ T9554] usb 2-1: Product: syz
[ 2067.893669][ T9554] usb 2-1: Manufacturer: syz
[ 2067.905637][ T9554] usb 2-1: SerialNumber: syz
[ 2067.917831][ T9554] usb 2-1: config 0 descriptor??
[ 2067.960317][ T5871] hid-generic 0006:0004:0009.0058: unknown main item tag 0x0
[ 2067.973253][ T5871] hid-generic 0006:0004:0009.0058: unknown main item tag 0x0
[ 2067.986367][ T5871] hid-generic 0006:0004:0009.0058: unknown main item tag 0x0
[ 2068.001769][ T5871] hid-generic 0006:0004:0009.0058: unknown main item tag 0x0
[ 2068.015190][ T5871] hid-generic 0006:0004:0009.0058: unknown main item tag 0x0
[ 2068.031305][ T5871] hid-generic 0006:0004:0009.0058: unknown main item tag 0x0
[ 2068.045049][ T5871] hid-generic 0006:0004:0009.0058: unknown main item tag 0x0
[ 2068.057817][ T5871] hid-generic 0006:0004:0009.0058: unknown main item tag 0x0
[ 2068.072541][ T5871] hid-generic 0006:0004:0009.0058: unknown main item tag 0x0
[ 2068.094555][ T5871] hid-generic 0006:0004:0009.0058: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 2068.140170][ T9554] gspca_main: sunplus-2.14.0 probing 04a5:3003
[ 2068.209389][  T826] fido_id[826]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2068.749688][ T9573] usb 6-1: USB disconnect, device number 35
[ 2069.040831][  T845] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 2069.192477][  T817] netlink: 'syz.1.6868': attribute type 3 has an invalid length.
[ 2069.200375][  T817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6868'.
[ 2069.926160][ T9554] gspca_sunplus: reg_r err -110
[ 2069.936249][ T9554] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[ 2070.148244][T20799] usb 2-1: USB disconnect, device number 10
[ 2070.612398][  T872] loop7: detected capacity change from 0 to 16384
[ 2071.303788][  T875] bond4: option arp_all_targets: invalid value (18446744073290121217)
[ 2071.420344][  T875] bond4 (unregistering): Released all slaves
[ 2072.730573][  T897] bond2: entered promiscuous mode
[ 2072.846201][  T897] bond2: entered allmulticast mode
[ 2072.949139][  T897] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2073.632050][T21163] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 2073.694578][T21163] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 2074.200844][T21163] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 2074.239465][T22966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2074.276099][T22966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2074.283517][T21163] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 2074.295316][T22966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2074.319191][T22966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2074.338155][T22966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2074.366094][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2074.377054][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2074.386614][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2074.397428][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2074.407425][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2074.603597][  T923] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6894'.
[ 2074.626102][T21163] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 2074.639401][T21163] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 2074.840279][T21163] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 2074.852661][T21163] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 2075.211516][  T939] loop7: detected capacity change from 0 to 16384
[ 2075.832624][  T917] chnl_net:caif_netlink_parms(): no params data found
[ 2076.487132][T22966] Bluetooth: hci0: command tx timeout
[ 2076.698940][  T968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6901'.
[ 2076.904495][  T970] loop7: detected capacity change from 0 to 16384
[ 2076.966433][T21163] dvmrp0 (unregistering): left allmulticast mode
[ 2077.124061][T21163] bond2 (unregistering): (slave geneve2): Releasing active interface
[ 2077.335600][T21163] geneve0 (unregistering): left promiscuous mode
[ 2077.799970][T21163] bond3 (unregistering): (slave bridge3): Releasing backup interface
[ 2077.820179][T21163] bridge3 (unregistering): left promiscuous mode
[ 2078.396476][T21163] bond0 (unregistering): Released all slaves
[ 2078.417513][T21163] bond1 (unregistering): Released all slaves
[ 2078.574378][T22966] Bluetooth: hci0: command tx timeout
[ 2078.743550][  T984] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6903'.
[ 2078.771906][T21163] bond2 (unregistering): Released all slaves
[ 2079.190142][T21163] bond3 (unregistering): Released all slaves
[ 2079.210724][  T968] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 2079.389342][T21163] : left promiscuous mode
[ 2079.426942][  T917] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2079.434198][  T917] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2079.450206][  T917] bridge_slave_0: entered allmulticast mode
[ 2079.468427][  T917] bridge_slave_0: entered promiscuous mode
[ 2079.509787][T21163] : left promiscuous mode
[ 2079.527291][  T917] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2079.534958][  T917] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2079.555035][  T917] bridge_slave_1: entered allmulticast mode
[ 2079.568003][  T917] bridge_slave_1: entered promiscuous mode
[ 2079.645746][T20799] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 2079.750408][  T917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2079.803207][  T917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2079.923196][  T917] team0: Port device team_slave_0 added
[ 2079.962656][  T917] team0: Port device team_slave_1 added
[ 2080.022714][T21163] mac80211_hwsim hwsim53 wlan0 (unregistering): left promiscuous mode
[ 2080.085422][  T917] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2080.093823][  T917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2080.120729][  T917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2080.173199][  T917] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2080.196285][  T917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2080.223554][  T917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2080.248670][T21163] batadv_slave_0: left promiscuous mode
[ 2080.257221][T21163] hsr_slave_0: left promiscuous mode
[ 2080.263589][T21163] hsr_slave_1: left promiscuous mode
[ 2080.650254][T22966] Bluetooth: hci0: command tx timeout
[ 2080.951687][ T1024] loop7: detected capacity change from 0 to 16384
[ 2082.781111][T22966] Bluetooth: hci0: command tx timeout
[ 2083.408110][ T1063] netlink: 'syz.7.6916': attribute type 11 has an invalid length.
[ 2084.015644][ T9554] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 2084.254509][ T9554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2084.273601][  T917] hsr_slave_0: entered promiscuous mode
[ 2084.286072][ T9554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2084.301712][  T917] hsr_slave_1: entered promiscuous mode
[ 2084.328359][ T9554] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 2084.338061][  T917] debugfs: 'hsr0' already exists in 'hsr'
[ 2084.361282][  T917] Cannot create hsr debugfs directory
[ 2084.370122][ T9554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2084.427278][ T9554] usb 2-1: config 0 descriptor??
[ 2084.630674][T21163] IPVS: stop unused estimator thread 0...
[ 2084.860068][ T9554] cm6533_jd 0003:0D8C:0022.0059: invalid report_count 1192232228
[ 2084.884357][  T917] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2084.886227][ T9554] cm6533_jd 0003:0D8C:0022.0059: item 0 4 1 9 parsing failed
[ 2084.904306][  T917] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2084.917376][ T9554] cm6533_jd 0003:0D8C:0022.0059: parse failed
[ 2084.922205][  T917] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2084.931351][ T9554] cm6533_jd 0003:0D8C:0022.0059: probe with driver cm6533_jd failed with error -22
[ 2084.934840][  T917] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2084.952572][ T1076] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 2085.058976][ T5871] usb 2-1: USB disconnect, device number 12
[ 2085.199488][ T1094] FAULT_INJECTION: forcing a failure.
[ 2085.199488][ T1094] name failslab, interval 1, probability 0, space 0, times 0
[ 2085.209408][  T917] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2085.235627][ T1094] CPU: 1 UID: 0 PID: 1094 Comm: syz.8.6919 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2085.235674][ T1094] Tainted: [L]=SOFTLOCKUP
[ 2085.235683][ T1094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2085.235695][ T1094] Call Trace:
[ 2085.235705][ T1094]  <TASK>
[ 2085.235723][ T1094]  dump_stack_lvl+0xe8/0x150
[ 2085.235756][ T1094]  should_fail_ex+0x412/0x560
[ 2085.235789][ T1094]  should_failslab+0xa8/0x100
[ 2085.235820][ T1094]  __kmalloc_noprof+0xe8/0x760
[ 2085.235846][ T1094]  ? tomoyo_encode+0x28b/0x550
[ 2085.235881][ T1094]  tomoyo_encode+0x28b/0x550
[ 2085.235916][ T1094]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 2085.235948][ T1094]  ? tomoyo_domain+0xd7/0x130
[ 2085.235972][ T1094]  ? tomoyo_path_number_perm+0x219/0x630
[ 2085.235998][ T1094]  tomoyo_path_number_perm+0x246/0x630
[ 2085.236026][ T1094]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2085.236050][ T1094]  ? __lock_acquire+0x6b5/0x2cf0
[ 2085.236089][ T1094]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 2085.236142][ T1094]  ? __fget_files+0x2a/0x420
[ 2085.236167][ T1094]  ? __fget_files+0x2a/0x420
[ 2085.236184][ T1094]  ? __fget_files+0x3a0/0x420
[ 2085.236203][ T1094]  ? __fget_files+0x2a/0x420
[ 2085.236226][ T1094]  security_file_ioctl+0xc3/0x2a0
[ 2085.236252][ T1094]  __se_sys_ioctl+0x47/0x170
[ 2085.236282][ T1094]  do_syscall_64+0x14d/0xf80
[ 2085.236312][ T1094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2085.236332][ T1094]  ? trace_irq_disable+0x37/0x100
[ 2085.236354][ T1094]  ? clear_bhb_loop+0x40/0x90
[ 2085.236378][ T1094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2085.236398][ T1094] RIP: 0033:0x7f91b379bf79
[ 2085.236418][ T1094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2085.236436][ T1094] RSP: 002b:00007f91b4706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2085.236460][ T1094] RAX: ffffffffffffffda RBX: 00007f91b3a16090 RCX: 00007f91b379bf79
[ 2085.236475][ T1094] RDX: 00002000000000c0 RSI: 00000000c008aeb0 RDI: 0000000000000006
[ 2085.236488][ T1094] RBP: 00007f91b4706090 R08: 0000000000000000 R09: 0000000000000000
[ 2085.236502][ T1094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2085.236514][ T1094] R13: 00007f91b3a16128 R14: 00007f91b3a16090 R15: 00007f91b3b3fa48
[ 2085.236548][ T1094]  </TASK>
[ 2085.236621][ T1094] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2085.262984][  T917] 8021q: adding VLAN 0 to HW filter on device team0
[ 2085.564479][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2085.571724][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2085.628672][T21159] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2085.635894][T21159] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2085.822976][  T917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2085.919065][  T917] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2086.208373][  T917] veth0_vlan: entered promiscuous mode
[ 2086.262643][  T917] veth1_vlan: entered promiscuous mode
[ 2086.316027][ T1110] loop7: detected capacity change from 0 to 16384
[ 2086.453668][  T917] veth0_macvtap: entered promiscuous mode
[ 2086.561954][  T917] veth1_macvtap: entered promiscuous mode
[ 2086.771681][  T917] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2086.832059][  T917] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2086.882724][T20459] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2086.932128][T20459] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2087.044338][T20459] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2087.088675][T20459] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2087.548284][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2087.583490][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2087.656570][ T1129] netlink: 'syz.7.6924': attribute type 29 has an invalid length.
[ 2087.784959][ T1133] netlink: 'syz.7.6924': attribute type 29 has an invalid length.
[ 2087.853788][ T1129] netlink: 596 bytes leftover after parsing attributes in process `syz.7.6924'.
[ 2087.931520][ T1139] openvswitch: netlink: Message has 592 unknown bytes.
[ 2087.943737][ T1139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2087.978597][ T1139] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6927'.
[ 2088.010074][T14356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2088.023512][T14356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2088.297960][ T1146] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6929'.
[ 2088.307618][ T1147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6929'.
[ 2088.348601][ T1146] veth1_macvtap: left promiscuous mode
[ 2089.001057][ T1167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6931'.
[ 2089.914909][ T1182] ip6erspan0: entered allmulticast mode
[ 2090.479498][ T1197] loop7: detected capacity change from 0 to 16384
[ 2091.986381][ T1211] loop5: detected capacity change from 0 to 7
[ 2092.022587][ T1211] Dev loop5: unable to read RDB block 7
[ 2092.044414][ T1211]  loop5: AHDI p1 p2 p3
[ 2092.068849][ T1211] loop5: partition table partially beyond EOD, truncated
[ 2092.126687][ T1211] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 2092.133615][ T1211] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 2092.404230][ T1218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2092.466407][ T1227] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6943'.
[ 2092.466542][ T1223] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6943'.
[ 2092.479358][ T1219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6942'.
[ 2092.765638][ T9554] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 2092.935967][ T9554] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[ 2092.944387][ T9554] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 2092.974339][ T9554] usb 10-1: config 220 has no interface number 2
[ 2092.994777][ T9554] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 2093.016510][ T9554] usb 10-1: config 220 interface 0 has no altsetting 0
[ 2093.023431][ T9554] usb 10-1: config 220 interface 76 has no altsetting 0
[ 2093.046002][ T9554] usb 10-1: config 220 interface 1 has no altsetting 0
[ 2093.070643][ T9554] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 2093.081417][ T9554] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2093.097889][ T9554] usb 10-1: Product: syz
[ 2093.108092][ T9554] usb 10-1: Manufacturer: syz
[ 2093.112807][ T9554] usb 10-1: SerialNumber: syz
[ 2093.355852][ T9554] usb 10-1: selecting invalid altsetting 0
[ 2093.389859][ T9554] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 2093.410120][ T9554] uvcvideo 10-1:220.0: No valid video chain found.
[ 2093.437530][ T9554] usb 10-1: selecting invalid altsetting 0
[ 2093.451481][ T9554] usbtest 10-1:220.1: probe with driver usbtest failed with error -22
[ 2093.478795][ T1244] blktrace: Concurrent blktraces are not allowed on sg0
[ 2093.497539][ T9554] usb 10-1: USB disconnect, device number 2
[ 2094.186070][ T1259] input: syz0 as /devices/virtual/input/input140
[ 2094.466959][ T1260] fuse: Bad value for 'group_id'
[ 2094.471967][ T1260] fuse: Bad value for 'group_id'
[ 2094.481283][ T1260] loop7: detected capacity change from 0 to 16384
[ 2096.826891][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2096.841948][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2096.856180][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2096.886027][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2096.904301][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2097.909884][ T1299] xt_CT: No such helper "netbios-ns"
[ 2097.991427][ T1277] chnl_net:caif_netlink_parms(): no params data found
[ 2098.153917][T14356] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2098.317485][ T9562] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 2098.425578][ T9554] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 2098.537710][ T9562] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[ 2098.577850][ T9562] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 2098.595852][ T9562] usb 10-1: config 220 has no interface number 2
[ 2098.602415][ T9562] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 2098.617062][ T9562] usb 10-1: config 220 interface 0 has no altsetting 0
[ 2098.624717][ T9562] usb 10-1: config 220 interface 76 has no altsetting 0
[ 2098.632906][ T9562] usb 10-1: config 220 interface 1 has no altsetting 0
[ 2098.650813][ T9554] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 2098.660330][ T9554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2098.673031][ T9562] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 2098.676325][T14356] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2098.683300][ T9554] usb 2-1: Product: syz
[ 2098.705342][ T9562] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2098.716135][ T9554] usb 2-1: Manufacturer: syz
[ 2098.721917][ T9562] usb 10-1: Product: syz
[ 2098.726773][ T9554] usb 2-1: SerialNumber: syz
[ 2098.733465][ T9562] usb 10-1: Manufacturer: syz
[ 2098.852691][ T9554] usb 2-1: config 0 descriptor??
[ 2098.887865][ T9562] usb 10-1: SerialNumber: syz
[ 2098.986818][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2098.993139][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2099.013494][ T9554] ch341 2-1:0.0: ch341-uart converter detected
[ 2099.049818][ T5826] Bluetooth: hci5: command tx timeout
[ 2099.176996][T14356] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2099.233497][ T9554] usb 2-1: failed to receive control message: -121
[ 2099.242808][ T9554] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[ 2099.338906][T14356] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2099.389839][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2099.416041][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2099.443761][ T1277] bridge_slave_0: entered allmulticast mode
[ 2099.477883][ T1277] bridge_slave_0: entered promiscuous mode
[ 2099.494741][ T9562] usb 10-1: selecting invalid altsetting 0
[ 2099.504547][ T9562] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 2099.532003][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2099.545678][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2099.563315][ T1277] bridge_slave_1: entered allmulticast mode
[ 2099.568896][ T9562] uvcvideo 10-1:220.0: No valid video chain found.
[ 2099.582785][ T1277] bridge_slave_1: entered promiscuous mode
[ 2099.649761][ T9562] usb 10-1: selecting invalid altsetting 0
[ 2099.662228][ T9562] usbtest 10-1:220.1: probe with driver usbtest failed with error -22
[ 2099.685199][ T1277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2099.706947][ T1277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2099.736237][ T9562] usb 10-1: USB disconnect, device number 3
[ 2099.904406][ T1277] team0: Port device team_slave_0 added
[ 2099.921062][ T1277] team0: Port device team_slave_1 added
[ 2099.980925][ T1277] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2100.086146][ T1277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2100.154709][ T1277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2100.210968][ T1277] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2100.219277][ T1277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2100.262745][ T1277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2100.398610][ T1333] fuse: Bad value for 'group_id'
[ 2100.405162][ T1333] fuse: Bad value for 'group_id'
[ 2100.420744][ T1331] loop7: detected capacity change from 0 to 16384
[ 2101.135920][ T5826] Bluetooth: hci5: command tx timeout
[ 2101.779636][T14356] bond0 (unregistering): Released all slaves
[ 2101.812437][T14356] bond1 (unregistering): Released all slaves
[ 2101.957376][   T61] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2101.967126][ T1340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6961'.
[ 2102.300088][T20799] usb 2-1: USB disconnect, device number 13
[ 2102.308297][T20799] ch341 2-1:0.0: device disconnected
[ 2102.393259][ T1277] hsr_slave_0: entered promiscuous mode
[ 2102.431117][ T1277] hsr_slave_1: entered promiscuous mode
[ 2102.456274][ T1277] debugfs: 'hsr0' already exists in 'hsr'
[ 2102.472431][ T1277] Cannot create hsr debugfs directory
[ 2102.525576][T14356] tipc: Left network mode
[ 2102.653838][   T61] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2102.691623][   T61] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2102.765155][   T61] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2103.214716][ T5826] Bluetooth: hci5: command tx timeout
[ 2103.919273][T14356] hsr_slave_0: left promiscuous mode
[ 2103.930948][T14356] hsr_slave_1: left promiscuous mode
[ 2103.959046][T14356] veth0_macvtap: left promiscuous mode
[ 2103.972205][T14356] veth1_vlan: left promiscuous mode
[ 2103.989149][T14356] veth0_vlan: left promiscuous mode
[ 2104.244449][T14356] pim6reg (unregistering): left allmulticast mode
[ 2104.391246][T14356] team0 (unregistering): Port device batadv1 removed
[ 2104.965075][ T1387] netlink: 27 bytes leftover after parsing attributes in process `syz.9.6974'.
[ 2105.297243][ T1398] fuse: Bad value for 'group_id'
[ 2105.302327][ T5826] Bluetooth: hci5: command tx timeout
[ 2105.325973][ T1398] fuse: Bad value for 'group_id'
[ 2107.852295][T14356] IPVS: stop unused estimator thread 0...
[ 2108.200656][ T1277] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2108.221388][ T1277] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2108.234139][ T1277] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2108.280794][ T1277] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2109.551651][T28418] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 2109.615648][  T996] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 2109.811299][T28418] usb 2-1: Using ep0 maxpacket: 32
[ 2109.937881][T28418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2109.999686][T28418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2110.016721][  T996] usb 10-1: device descriptor read/64, error -71
[ 2110.053936][T28418] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2110.071400][T28418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2110.174642][T28418] usb 2-1: config 0 descriptor??
[ 2110.220684][ T1277] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2110.278761][  T996] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 2110.288956][T28418] hub 2-1:0.0: USB hub found
[ 2110.403601][ T1277] 8021q: adding VLAN 0 to HW filter on device team0
[ 2110.425812][T28418] hub 2-1:0.0: 1 port detected
[ 2110.435731][  T996] usb 10-1: device descriptor read/64, error -71
[ 2110.498449][T21163] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2110.505691][T21163] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2110.556486][  T996] usb usb10-port1: attempt power cycle
[ 2110.612671][T21163] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2110.619882][T21163] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2110.637814][T28418] hub 2-1:0.0: hub_hub_status failed (err = -71)
[ 2110.668378][T28418] hub 2-1:0.0: config failed, can't get hub status (err -71)
[ 2110.737378][T28418] usbhid 2-1:0.0: can't add hid device: -71
[ 2110.748080][T28418] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2110.807113][T28418] usb 2-1: USB disconnect, device number 14
[ 2110.915632][  T996] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 2110.937255][  T996] usb 10-1: device descriptor read/8, error -71
[ 2111.089317][ T1277] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2111.186240][  T996] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 2111.242194][  T996] usb 10-1: device descriptor read/8, error -71
[ 2111.340465][ T1277] veth0_vlan: entered promiscuous mode
[ 2111.366292][  T996] usb usb10-port1: unable to enumerate USB device
[ 2111.413252][ T1277] veth1_vlan: entered promiscuous mode
[ 2111.529794][ T1277] veth0_macvtap: entered promiscuous mode
[ 2111.602191][ T1277] veth1_macvtap: entered promiscuous mode
[ 2111.802228][ T1277] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2112.010824][ T1277] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2112.048113][T21159] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2112.057402][T21159] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2112.097234][T21159] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2112.107671][T21159] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2112.473838][T20464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2112.496371][T20464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2112.584550][T20464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2112.630676][T20464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2160.408648][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2160.414977][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2198.325841][T22966] Bluetooth: hci0: command 0x0406 tx timeout
[ 2221.856336][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.862680][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2223.925643][T22966] Bluetooth: hci5: command 0x0406 tx timeout
[ 2242.026071][T27455] ------------[ cut here ]------------
[ 2242.032295][T27455] time_after(jiffies, timeout)
[ 2242.032310][T27455] WARNING: io_uring/io_uring.c:2341 at io_ring_exit_work+0x4a3/0x960, CPU#0: kworker/u8:0/27455
[ 2242.047758][T27455] Modules linked in:
[ 2242.052353][T27455] CPU: 0 UID: 0 PID: 27455 Comm: kworker/u8:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2242.063725][T27455] Tainted: [L]=SOFTLOCKUP
[ 2242.068197][T27455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2242.078320][T27455] Workqueue: iou_exit io_ring_exit_work
[ 2242.083916][T27455] RIP: 0010:io_ring_exit_work+0x4a3/0x960
[ 2242.090063][T27455] Code: c6 05 05 3e cf 0e 01 48 c7 c7 e0 0e 26 8c be 25 00 00 00 48 c7 c2 a0 0a 26 8c e8 08 ca 75 00 e9 88 fe ff ff e8 ce 5f 99 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9f c7 84 24 b0 00 00 00
[ 2242.110007][T27455] RSP: 0018:ffffc90004bc7960 EFLAGS: 00010293
[ 2242.116410][T27455] RAX: ffffffff812afa62 RBX: 000000010002f5e2 RCX: ffff888028e53c80
[ 2242.124814][T27455] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000
[ 2242.133144][T27455] RBP: ffffc90004bc7af0 R08: ffffc90004bc78e7 R09: 1ffff92000978f1c
[ 2242.141164][T27455] R10: dffffc0000000000 R11: fffff52000978f1d R12: dffffc0000000000
[ 2242.149428][T27455] R13: 000000010002f5df R14: 0000000000002000 R15: ffff888028996000
[ 2242.157450][T27455] FS:  0000000000000000(0000) GS:ffff8881254bc000(0000) knlGS:0000000000000000
[ 2242.166424][T27455] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2242.173003][T27455] CR2: 000055dbf4130168 CR3: 000000007f6d2000 CR4: 00000000003526f0
[ 2242.181282][T27455] Call Trace:
[ 2242.184624][T27455]  <TASK>
[ 2242.187631][T27455]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 2242.193137][T27455]  ? process_scheduled_works+0xa0f/0x17a0
[ 2242.198949][T27455]  ? process_scheduled_works+0xa0f/0x17a0
[ 2242.204695][T27455]  process_scheduled_works+0xaec/0x17a0
[ 2242.210562][T27455]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2242.216639][T27455]  ? assign_work+0x3d5/0x5e0
[ 2242.221359][T27455]  worker_thread+0xa50/0xfc0
[ 2242.226465][T27455]  kthread+0x388/0x470
[ 2242.230568][T27455]  ? __pfx_worker_thread+0x10/0x10
[ 2242.236270][T27455]  ? __pfx_kthread+0x10/0x10
[ 2242.240903][T27455]  ret_from_fork+0x51e/0xb90
[ 2242.245834][T27455]  ? __pfx_ret_from_fork+0x10/0x10
[ 2242.251070][T27455]  ? __switch_to+0xc7d/0x1400
[ 2242.255843][T27455]  ? __pfx_kthread+0x10/0x10
[ 2242.260469][T27455]  ret_from_fork_asm+0x1a/0x30
[ 2242.265260][T27455]  </TASK>
[ 2242.268601][T27455] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2242.275907][T27455] CPU: 0 UID: 0 PID: 27455 Comm: kworker/u8:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2242.287012][T27455] Tainted: [L]=SOFTLOCKUP
[ 2242.291325][T27455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2242.301386][T27455] Workqueue: iou_exit io_ring_exit_work
[ 2242.306935][T27455] Call Trace:
[ 2242.310204][T27455]  <TASK>
[ 2242.313126][T27455]  vpanic+0x1e0/0x670
[ 2242.317120][T27455]  panic+0xc5/0xd0
[ 2242.320858][T27455]  ? __pfx_panic+0x10/0x10
[ 2242.325284][T27455]  ? ret_from_fork_asm+0x1a/0x30
[ 2242.330252][T27455]  __warn+0x315/0x4a0
[ 2242.334270][T27455]  ? io_ring_exit_work+0x4a3/0x960
[ 2242.339474][T27455]  ? io_ring_exit_work+0x4a3/0x960
[ 2242.344596][T27455]  __report_bug+0x29a/0x540
[ 2242.349100][T27455]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 2242.355007][T27455]  ? io_ring_exit_work+0x4a3/0x960
[ 2242.360126][T27455]  ? __pfx___report_bug+0x10/0x10
[ 2242.365148][T27455]  ? trace_contention_end+0x39/0x100
[ 2242.370439][T27455]  ? __mutex_lock+0x319/0x1300
[ 2242.375284][T27455]  ? io_ring_exit_work+0x41b/0x960
[ 2242.380414][T27455]  ? io_ring_exit_work+0x4a3/0x960
[ 2242.385590][T27455]  report_bug+0x16a/0x220
[ 2242.389939][T27455]  ? io_ring_exit_work+0x4a3/0x960
[ 2242.395058][T27455]  ? io_ring_exit_work+0x4a5/0x960
[ 2242.400177][T27455]  handle_bug+0x98/0x200
[ 2242.404429][T27455]  exc_invalid_op+0x1a/0x50
[ 2242.408953][T27455]  asm_exc_invalid_op+0x1a/0x20
[ 2242.413808][T27455] RIP: 0010:io_ring_exit_work+0x4a3/0x960
[ 2242.419541][T27455] Code: c6 05 05 3e cf 0e 01 48 c7 c7 e0 0e 26 8c be 25 00 00 00 48 c7 c2 a0 0a 26 8c e8 08 ca 75 00 e9 88 fe ff ff e8 ce 5f 99 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9f c7 84 24 b0 00 00 00
[ 2242.439159][T27455] RSP: 0018:ffffc90004bc7960 EFLAGS: 00010293
[ 2242.445299][T27455] RAX: ffffffff812afa62 RBX: 000000010002f5e2 RCX: ffff888028e53c80
[ 2242.453276][T27455] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000
[ 2242.461262][T27455] RBP: ffffc90004bc7af0 R08: ffffc90004bc78e7 R09: 1ffff92000978f1c
[ 2242.469251][T27455] R10: dffffc0000000000 R11: fffff52000978f1d R12: dffffc0000000000
[ 2242.477244][T27455] R13: 000000010002f5df R14: 0000000000002000 R15: ffff888028996000
[ 2242.485235][T27455]  ? io_ring_exit_work+0x4a2/0x960
[ 2242.490394][T27455]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 2242.495881][T27455]  ? process_scheduled_works+0xa0f/0x17a0
[ 2242.501604][T27455]  ? process_scheduled_works+0xa0f/0x17a0
[ 2242.507337][T27455]  process_scheduled_works+0xaec/0x17a0
[ 2242.512918][T27455]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2242.518912][T27455]  ? assign_work+0x3d5/0x5e0
[ 2242.523512][T27455]  worker_thread+0xa50/0xfc0
[ 2242.528134][T27455]  kthread+0x388/0x470
[ 2242.532218][T27455]  ? __pfx_worker_thread+0x10/0x10
[ 2242.537337][T27455]  ? __pfx_kthread+0x10/0x10
[ 2242.541942][T27455]  ret_from_fork+0x51e/0xb90
[ 2242.546543][T27455]  ? __pfx_ret_from_fork+0x10/0x10
[ 2242.551660][T27455]  ? __switch_to+0xc7d/0x1400
[ 2242.556347][T27455]  ? __pfx_kthread+0x10/0x10
[ 2242.560950][T27455]  ret_from_fork_asm+0x1a/0x30
[ 2242.565737][T27455]  </TASK>
[ 2242.569165][T27455] Kernel Offset: disabled
[ 2242.573485][T27455] Rebooting in 86400 seconds..