last executing test programs:

5m4.188908035s ago: executing program 32 (id=673):
set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x5d)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x5f, 0xfffefe0000000009, 0x7, 0xffffffff}, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x20a02, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r5, &(0x7f0000003700)=[{{0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x5c, 0x10140, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000140))
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r7, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x4, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc})
syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0xa8)

4m17.568256062s ago: executing program 0 (id=743):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r1)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
getsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001040)=0x4)

4m16.617793225s ago: executing program 0 (id=745):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20048081}, 0x4040850)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xdd, 0x3a, 'k],]\xc8-', 0x3a, '^\',[}', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x34) (async)
write$binfmt_register(r5, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xdd, 0x3a, 'k],]\xc8-', 0x3a, '^\',[}', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x34)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r10=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf4, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0xc800}, 0x4008000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

4m15.566971588s ago: executing program 0 (id=747):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0) (async)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="057b641f0fc757971c002bc3a10a8c7352188168fa6afd687da1ba648c5a4493f154"]})
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x19, 0x0, &(0x7f0000002b80))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={r6, 0xfffffc4b, 0x1}, &(0x7f0000000300)=0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000bcfe6744c2b6d37da03a39bbfd0743e13b2109a0129136dfb0ea82bb4608a1f6097a0d239de7b11d628076c5fce36e93aef099022b62d1f30efa1891f8521819fd03b18fc3b4b471eb4dfe8fc086f9cf27a8a00f05085bd016b9d962d5861759d655a33b4b0a460d3708d7d7c31625689e0b2e397470f3df2d10af81ee431f8251760e89188ac9b931e55f6c8ca35a956a8d0"], 0x24}, 0x1, 0x0, 0x0, 0x40040050}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006900030500000000000000a0bfb52bdae223c18ae612d6126c6a390000000000000000000800010002000000"], 0x20}}, 0x0) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00')
r10 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x0, 0x0, r9})
io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

4m12.796624719s ago: executing program 0 (id=751):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) (async)
move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f00001ef000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) (async)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xc3ba, 0x2}) (async)
r0 = socket(0x1, 0x3, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) (async)
madvise(&(0x7f0000a76000/0x3000)=nil, 0x3000, 0x64)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000001ac1e0001000000000000000000000000000000000000000000000000000a0000", @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000003300000020010000000000000000000000000002000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000400656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014007368613100"/316], 0x184}, 0x1, 0x0, 0x0, 0x24044000}, 0x0)

4m12.050180636s ago: executing program 0 (id=752):
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x1, 0x6}, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x1, 0x0, 0x200000001300, 0xab], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000008200000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff17000000000000000000000000000000000000000000004de800000000000000000000000000000000000000fcffffff00000000"]}, 0x108)
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1f986020f205db80e000000b8000000000f23c00f21f83503000d006a0f23f80f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x47}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r2, 0xa, 0x12)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8)
dup2(r2, r3)
fcntl$setown(r2, 0x8, r1)
tkill(r1, 0x13)

4m10.562656956s ago: executing program 0 (id=753):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x2b, 0x0, &(0x7f0000000280))
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(0x0, 0x22)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r4 = socket(0x10, 0x803, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2000)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f00000001c0)={0x0})
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x2, 0x40004, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, [0x1]}})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff460400007fffffff7b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x194}}, 0x8000)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x10, 0x803, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)

4m3.258251184s ago: executing program 33 (id=742):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x100000, 0x1800, 0x1}, 0x20)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r4, 0x2, {0x1, 0xf0, 0x2}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x53}]}, &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_int(r2, &(0x7f00000000c0)=0xa7, 0x12)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x99f}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, 0x0, 0x5, 0x20, &(0x7f0000000000)=""/32, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
r8 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0)
ftruncate(r8, 0x3)
write$P9_RLERRORu(r8, &(0x7f0000000280)={0x16, 0x7, 0x1, {{0x9, 'pim6reg0\x00'}, 0x8}}, 0x16)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYBLOB="20002cbd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4041)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

4m0.258137882s ago: executing program 34 (id=746):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @loopback}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d892}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRESDEC=r3, @ANYRES64=r1, @ANYRESOCT=r3, @ANYRES8], 0x68}}, 0x8800) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00'})
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_usb_control_io$rtl8150(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x0, 0xd, 0x4, "bb1bc00c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x19, 0x2, "996a"}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x2}}) (async)
syz_usb_control_io$printer(r4, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x6b, 0x7e, 0xc3, 0x10, 0x2040, 0x7200, 0x699c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x4, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0xa, 0x0, 0x68, 0xcf, 0xcf, 0x2}}]}}]}}, 0x0) (async)
r5 = socket(0x840000000002, 0x3, 0x100) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@ipv6_getaddr={0x18, 0x16, 0x921}, 0x18}}, 0x94)
setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f00000000c0)=0x7, 0x4) (async)
vmsplice(r1, &(0x7f00000019c0)=[{&(0x7f0000000340)="3e6c76261d4d3e1c723383d46caf43ec26ac96624e895056720f8b5be98158f4f3683070d88d6d53d75a9c610617", 0x2e}, {&(0x7f0000000380)}, {&(0x7f0000000780)="ffccf6b705a398ef9f7dda8deb44097561ccbf75e9061a4a075c34fabc22bfee13f1b4ceabfffbebd4e6236fce8769cd9de1024a0b51a86b3b2f062678beee81b58871f3d1c007d9e6881454ddd1d2462aa52ab3f74370cecab81e8b0d8329829b6f0b0b85db5c6716e9e36e3724104fbfbecc0a0123e82d556fd00b03c73e096cc59bffffb3eea9bab9cee56a1d4bbaaa3bd0f77eff60e46a017f7fcebee038cfd69fdaf2bf03d03a12b289c8d1f4f4806fbffc0007ff4471d927f9fba74bd1d8e0a072ac33b7af50875a", 0xcb}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="29d4ead500791dba72fdebc6a1256c35fbebf188837d0b8984c81168", 0x1c}], 0x5, 0x4) (async)
socket$netlink(0x10, 0x3, 0x0)

3m55.232080846s ago: executing program 35 (id=753):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x2b, 0x0, &(0x7f0000000280))
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(0x0, 0x22)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r4 = socket(0x10, 0x803, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2000)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f00000001c0)={0x0})
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x2, 0x40004, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, [0x1]}})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff460400007fffffff7b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x194}}, 0x8000)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x10, 0x803, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)

2m9.435407428s ago: executing program 7 (id=967):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
sendmsg$NFT_BATCH(r1, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x72c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="03070000000000000000080000006800048004"], 0x7c}}, 0x0)

2m8.986911316s ago: executing program 7 (id=970):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r0, 0x0, 0x0, 0x80800)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x6f, 0x5, 0x7fff0000}]})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7}]})
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2m6.941624278s ago: executing program 7 (id=982):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd1c01000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getrule={0x1c, 0x22, 0x800, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
munlockall()
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r2, 0xb0dd000)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x3f, &(0x7f00000008c0)=0x2, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xffffffab}], 0x1, 0x55, 0xfffffffc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
socket$xdp(0x2c, 0x3, 0x0)

2m4.47374135s ago: executing program 7 (id=993):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0)
close(r3)
unlink(0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r5, 0x0, 0xffffffdb)
socket$kcm(0x29, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

2m2.518800864s ago: executing program 7 (id=996):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x3}, 0x94) (async)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e0000007da700000600000000000000000bd3021d36f70a7b79a010100000", @ANYRES32, @ANYBLOB="100c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000000000000100"/28], 0x50) (async)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000180)=[{0x94, 0x29, 0x0, 0xfffff00d}, {0x6, 0x80}]}, 0x10) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x800, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4, 0x5}, {0xe, 0xd}, {0x0, 0xe}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40010) (async, rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) (async)
syz_usb_connect(0x0, 0x38, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000344dd044808861a2f5aa6c6359500000000000001fc08d0220a1020000d5481090501030800050e070200"/56], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xc}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0})
sendto$packet(r9, &(0x7f00000002c0)="0503222ed3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$unix(0x1, 0x1, 0x0) (async)
r11 = socket$netlink(0x10, 0x3, 0x4)
write(r11, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x29)

2m2.444539114s ago: executing program 7 (id=997):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x5, 0x0, 'queue1\x00'})
shmctl$SHM_UNLOCK(0x0, 0xc)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2)
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r1 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603)
ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000040)=0x7f)
syz_open_dev$usbfs(&(0x7f0000000480), 0x206, 0x10b481)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x8000000000000001, 0x100)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
bpf$PROG_LOAD(0x22, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6}, 0x94)
syz_open_dev$usbfs(&(0x7f0000000480), 0x206, 0x10b481)

1m46.561094804s ago: executing program 36 (id=997):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x5, 0x0, 'queue1\x00'})
shmctl$SHM_UNLOCK(0x0, 0xc)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2)
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r1 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603)
ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000040)=0x7f)
syz_open_dev$usbfs(&(0x7f0000000480), 0x206, 0x10b481)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x8000000000000001, 0x100)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
bpf$PROG_LOAD(0x22, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6}, 0x94)
syz_open_dev$usbfs(&(0x7f0000000480), 0x206, 0x10b481)

1m43.627043238s ago: executing program 6 (id=1046):
mount$fuse(0x0, 0x0, 0x0, 0x261820, &(0x7f0000000040)=ANY=[@ANYRESHEX])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654})
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x5, 0xfbffffff}, 0x10)
sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x3}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000003c0), 0x8)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m43.029379044s ago: executing program 6 (id=1048):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x6f, 0x5, 0x7fff0000}]})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7}]})
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m41.295067767s ago: executing program 6 (id=1054):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$inet(0xa, 0x801, 0x84)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000140)=0x2)
listen(r2, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)
socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r5 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='workdir', 0x0, r6)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000008280), 0xffffffffffffffff)

1m37.528928081s ago: executing program 6 (id=1059):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)

1m37.259443308s ago: executing program 6 (id=1061):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
msgget$private(0x0, 0x3ac)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#\x00'], 0x23) (async, rerun: 64)
r1 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) (rerun: 64)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0)
close(r0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
clock_getres(0x0, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000500)={&(0x7f00000004c0)=[{0x46, 0x1, 0xca, &(0x7f00000002c0)="92011793983150b7074746650c353440e9970b3c7ad6b7a0b3a9e9f18817a735b7da7f89db21d846fff5ee78c3fee1f429f6f5252d673d8898a6b556b37bf444c6ddcfdf178fc724bddd9021070793444a1049c3ddf9231f488bc1a616387387bb1a0448c9b0dff165fc75f5c42b893a1fd56adaf9774e5bfd77f40e67d394c07d800db6abc36c11084eea4bbcdd7f86d37bd9e56077a03e60097b9798dff69bd125afd05163be07a89cedd01dbd4b6d11c3aeac4da37ec33b6df3c10ab77b81682795486be95a90a16a"}, {0xdc, 0x7810, 0xc1, &(0x7f00000003c0)="4a17f5a77884038aa63972138769179429f5fd96f42eac2427105950c3e0778c2b2280ac6fa3e697f22f8cbdc6b643742ad64c141d9cdb5f9b54d42c68f3fe9b0fd31b4ad7639b543d7c373b02b2e9f8d74ab37fe4c6d569fea8f3d71a9c0487b02d5689658c1113c0ed542f94a643b36bca31d820ed9a4ac611e06d0a8930b5108c1b277885df77f25ddf93668531d2716575e85a1a6454cf78a6ad4c9f87cc2441223e499fcfe56f9e9bd00199e6bf2070548c573c92ec67d1df3c447357e61f"}], 0x2})
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

1m36.846778682s ago: executing program 6 (id=1062):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000600)=ANY=[], 0x18)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8)
sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x5})
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd)
keyctl$chown(0x4, r6, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x2)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c084)

1m23.210952566s ago: executing program 9 (id=1104):
r0 = socket$packet(0x11, 0x2, 0x300)
sendmmsg$sock(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x1a56, 0x80, 0x2, 0x178}, &(0x7f0000002180)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$uac3(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000100)={0x40, 0x1, 0x2, "80fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000580)={0x40, 0xa, 0x2, "5ed4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x257}, &(0x7f0000002380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x2, 0x308}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x300c, 0x800, 0xfffffffd, 0x107, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6e, 0x8200, 0x2, 0x290}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0xfeffff7f, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9)
sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008085, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x40080c5}, 0x4004044)

1m21.555312709s ago: executing program 37 (id=1062):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000600)=ANY=[], 0x18)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8)
sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x5})
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd)
keyctl$chown(0x4, r6, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x2)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c084)

1m19.991926785s ago: executing program 9 (id=1113):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$inet(0x2, 0x80001, 0x84)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, '\t\x00'}, @global=@item_012={0x2, 0x1, 0x0, "a844"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, '\x000'}, @local=@item_4={0x3, 0x2, 0x8, "0a52528d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0x2020)
syz_clone(0x648e5000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x241, 0x0, &(0x7f0000000b80)="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", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000008}, 0x50)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40600003, 0x0, 0x6, 0x7})
r3 = inotify_init1(0x80000)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x90000860)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x5, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

1m17.315354138s ago: executing program 9 (id=1117):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x6f, 0x5, 0x7fff0000}]})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7}]})
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m15.202860789s ago: executing program 9 (id=1121):
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e68ad01002040080b0201012130c60904000000010130000a2401040900ff0f0000132403050001020602028000000100101302000d240902021a000322db"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x37})
syz_usb_connect$cdc_ncm(0x3, 0xbd, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000d80)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x8, 0x7, 0x33, 0x10, 0x7f}, 0x2ca, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x9, [{0xf, &(0x7f0000000900)=@string={0xf, 0x3, "bf287c3c0d7ab6cc1a9b36cd96"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x416}}, {0xa8, &(0x7f0000000b80)=@string={0xa8, 0x3, "a28a7da4baffc5312711484faf8200cfc2c508330c20d9d5d5c546525a1846d02b646905aa2864693a0c770f5a91bfc95f5da88e085ce8d8abd46e5b976ca10433491900f0052931b0567bf81fc354cb58845df652db384a3bc53ec90b977011fed254f8b5cc95c25f60755e0f382cddba66e543a7a84e21479cf4919672393538813b644fe1b09b75a44331b37371cce10542ae760210fe9f6e288109ac2fa3128801dbcf41"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x1401}}]})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xd0d3e4eb4b061fcf, 0x7, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x3, 0xf6, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x3, 0x40}}}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x0, 0x0, 0x1, 0xff, 0xb}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x445}}, {0xf1, &(0x7f00000013c0)=@string={0xf1, 0x3, "ad0e724b12fc45821ec1b868aeeaa14d0f665ed56fad3012eec6800edfecf4962faa70916ff161560f9923b0eb311a9fad8aa7e7199253d86155e55e4bd5cc5cbcdb29df233704efc184d0ae910e709f3f2320fc5773bd9ef1b77dd73a010239ceae582ad8ecc1f7d32c1ff57835d665e031e97de0609c62043ad8ad858733aa4dc20b95fa73c09495e7f4029a0bc45c429d4a42d34ab1175f4a840ce44e4a496ca7389b8d6cd7166c536338fffac95f69b13e67d799b887e7f810ca0a2a72c09b1885df62ae35127360cd1547072925dc1b8da6c9c0da8a3fcc372f287badb870fa280c0070cfa74b2c9b756e196e"}}, {0xa7, &(0x7f0000000640)=@string={0xa7, 0x3, "0c2b05a7d7559fba2172a3e193757c60a8d06606a48150ea4571d62357838a54981cc5ca14ea278bf1ca5e2c22f2075fe55d6ee591c4b7d1bd238b782f71155132dc9d9f452c26d7988f5ed5f52aa90a7b04335801e6b1964d4175d8c7e8122b48189591369590ffa7c11b7719070cf3adac270c64da0767a1211713ad149f5871fa5bf971acbed1874ae78f90db03274f0a46fb4b348228c8d37f9759f63a3e39557c37c0"}}, {0x17, &(0x7f0000000700)=@string={0x17, 0x3, "a0e7188888367fe90d36f25245c8cfa67c9f29bf35"}}, {0x3d, &(0x7f0000000740)=@string={0x3d, 0x3, "44818fa76b36bf65185ee3a450a9172d3f5f8044f4cd381129bfe3134841a1d27b5e6328e17665c37bea6fc723305e5e072d0f2707b119866e4b31"}}, {0xa5, &(0x7f0000000780)=@string={0xa5, 0x3, "2ab54445c3704a671546ef910a4d16154fdd43a7a71ffdb3c0bd2f0bdca75605620110e0a4f233e08218b1e45a7d1ec34b8253383739c338c259050534921b080c1006fe6aa82020e1c49ac07f140fc3fa3b08d27ca76072d70d34e478e6a5b73c1800f6d6c668e2fda54dfc75e432210aef13d940aa3c90da6598509338d0f5e4dc1f9bb65542069d8f8629e66da8efe4c74db6f713d72cb049d6863de692d2c78e14"}}, {0xc6, &(0x7f0000001200)=ANY=[@ANYBLOB="c6033c8b6e2ab67d495ea5daeb05018ff975d4883bbb2bfb862b9bd27172f5cdda072d9696d9680d4e367fdc872864826c6ae5f771ae22b32b91a82ccc2a51baf7f088d9d9ced91939a3b53ec85ae4ba006b7a6894a3da31ea62f5914acd146ff320be1ea60c1d34279764ce101efa2f52c44649febbdd6f3c356885a3d6a5cde2c51571d6870c09ee971a2ea856b82937645af251315159cf2b365d7e6607fe9a4b935d7aa404dda6ec85bce7189af52a441f6edc00"/194]}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x41a}}]})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000140007800500140080ff00000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io(r3, &(0x7f0000000b40)={0x2c, &(0x7f0000000880)={0x60, 0x4, 0x54, {0x54, 0x11, "87038b12a25782ee4729eab1ca633495cbb25385205d964aa32f769ee3386f1b5cf50d2a95fb743630234aca8260a9a36552bc31bf363103a7c6da3176e15ebdd31a90654bab5212843bcd4c673069f8539c"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, &(0x7f0000000a00)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x6, 0xff0f, 0x2, [0x0, 0xff003f, 0xff3fc0, 0x0, 0xff000f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x3a, 0x8000}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x1, 0x3, 0x88, "f1524960", 'cM@|'}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0xf4, 0xfb, 0x8, 0x7dfe, 0x6}}}, &(0x7f0000001c80)={0x84, &(0x7f0000001800)={0x0, 0x14, 0x9c, "4a90409698fc8166a150a52365fdd5745427cd8fd873c71a0d33c5e4665c9d2332c67b3fc4b0597ec84ca46140f751798cdbddd083584517d0033c06fd2c19d8d16cee0ab1f4c3c6845c9697330d4b0e24f9e7c7b7ba9324814ced91546bf04c2fc1b4f57c1b7e33657ba7561a9c48faad628095c1bde4bd9a630e614bc97394eb008f72c3ab74583773357fa37d651cf09c664587dab59b491a90af"}, &(0x7f00000018c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000001980)={0x20, 0x0, 0x4, {0x400, 0x8}}, &(0x7f00000019c0)={0x40, 0x7, 0x2, 0xf}, &(0x7f0000001a00)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001a40)={0x40, 0xb, 0x2, "066a"}, &(0x7f0000001a80)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001ac0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000001b00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001b40)={0x40, 0x19, 0x2, "dfa3"}, &(0x7f0000001b80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001bc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001c00)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000001c40)={0x40, 0x21, 0x1, 0xe0}})
syz_usb_connect$uac1(0x4, 0xb1, &(0x7f00000010c0)=ANY=[@ANYBLOB="1201500200000008b421810040000102030109029f0003010310550904000000010100000a24010400420002010208240401068a697809240306810404038a092404068f984f2dd80a2404045916e1eb28dc0924030200010601000b24080105000266bb106e0904010000010200000904010101010200000724010e0e020009050109400089074f0725010400030009040200000102000009040201010102000009058209200080043bf66200000000000072ffbedbf6973377459d1093e414a58052fc47c83d31f3ab9d55a37dbb60cded63b5bd3724e03e5b4d5e52e64bd5ddfd3d60ed6b6ef041ea10a706ee08edfd8a10df2ab98f7bfe869f5b5c8f8fb9acc20a5ec02d5906e402fe816d6911ab48f8d9953612fed5acbe99277f424798ebfd94689429aa2ee233265b"], &(0x7f0000001040)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x600, 0xf3, 0xff, 0x5, 0x18, 0xce}, 0xc, &(0x7f00000003c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x6, 0x7ff}]}, 0x6, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x140c}}, {0xa4, &(0x7f00000004c0)=@string={0xa4, 0x3, "08cbb2620c82ad5c33282a12aa6a39d42ab1e697d1991999b035f6700c111d2f5d9f770e1d4affce48e5f5adf61fc576691f9244ca2ae9625941af1b88b75f6314c1c10e7049e12f49bd564499a3d6f562a5786980537d95569e07c1d248e3b90fe0dc34bd4a63fda4632a9a29662c1100e351e3891be9cf2653d2eb4527182a178633213fad2177668bf8ac96917bb36c5e6939e262bfc32ab8c3110c6757153260"}}, {0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d0323e5809574b48f15f38fb1d08454720b62dad476bc6b8f955ac158a4cbcd114c673e726e58a3868b1fbf223c3ec79855dee4818ac96db2d3f572b76c0cfed7d5fe120793e5d840d8502031a4e4e848ea42b5382d7244181a3d424c42bbb811bcb186e56a6a02000000"]}, {0x9e, &(0x7f0000000e40)=@string={0x9e, 0x3, "70241839dcb8b124b21dea1f66229ec05fed0cc5761fa46f7d51ccf26e2b77ca255c1d547d8bb25e251d11a99b47af88f1c6302c057468e977a360561bdb393063ed09dc19a85fca9ace5a4ac433ed02fbfe47c584f25e827dc1d7e7e29644c4871b0b9afbadbb1eb41c2a7becc0fb36e441ba7e5261fa928bc7ac10eee7dc4d880066afc5af73118de1008445cbe7d9937742c7e454870e6d87c8b7"}}, {0xe7, &(0x7f0000000f00)=@string={0xe7, 0x3, "e292bef4b861e7009f601abe5e87e9748811e98db9b629818b334a6e308c67c98e25d05e67a600cc98693e10f9034b2014b02c76f73d87539a11dfc630e76f4155b7d2e19c2b300f59bacc8793eb3a7a1b7770951ff9c9b7282c1ea4c4d36e510591c95befba84e380d6c5a32f44c345c6fed2c26179489e95f89b03fd6cd42b2c95aa3017657632317a2dfa5eaed173821d29a77da3135419ce596df6df59788e3cc50e818b6fc0520ea497973b80f696384967e5885180811dc17859e5536c61f50539f56cf9d0281d4d41b322e5e527f7d798321e827a7a3291c8bca28882f4ea157989"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x80c}}]})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f00000000c0)=0x400, 0x4)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000840)={'geneve0\x00', {0x2, 0x4e22, @multicast1}})

1m12.780209028s ago: executing program 9 (id=1128):
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x582, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 32)
bind$packet(r2, &(0x7f00000001c0)={0x11, 0x11, 0x0, 0x1, 0xf, 0x6, @remote}, 0x14) (async)
pipe2(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0xe366efb4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'vlan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@delchain={0x44, 0x65, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0xd}, {0x5, 0xf}, {0xd, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x44}}, 0x4048880)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x4, 0x0, 0xb, 0x2, 0x1, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xa000, 0x60000, 0xd, 0x2, 0x2, 0x1, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0xb, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x65, 0xff, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x0, 0x27, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x7000, 0x2, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x4, 0x1801, 0x70000, [0x8000000000000000, 0x5, 0x0, 0x9]}) (async)
syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x28c482, 0x0)
close(r7) (async, rerun: 32)
socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0)
poll(&(0x7f0000000080)=[{r8, 0x3a0}, {r8, 0x8000}], 0x2, 0x76) (async)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) (rerun: 32)

1m12.153825016s ago: executing program 9 (id=1129):
unshare(0x4000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fanotify_init(0x4000, 0x101003)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
rmdir(&(0x7f0000000040)='./file0\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b0000000000080011"], 0x3c}}, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})

56.858477313s ago: executing program 38 (id=1129):
unshare(0x4000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fanotify_init(0x4000, 0x101003)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
rmdir(&(0x7f0000000040)='./file0\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b0000000000080011"], 0x3c}}, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})

56.828511727s ago: executing program 8 (id=1162):
socket$inet(0x2, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
write(0xffffffffffffffff, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000002000087d1eb42d0000000000010902"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

53.122855994s ago: executing program 8 (id=1171):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000008000000420000004000", @ANYRES32=r0, @ANYRES16=r0, @ANYRES8], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001580)={r1, &(0x7f0000000180), 0x0}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
unshare(0x62040200)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000004000000000000000200000010000000", @ANYRES32=r1, @ANYBLOB="0707000000000000008c539af822a8b59776aa3b4d55de077db1e2f6123fdaec0e98d48bd54adfaacfb72b3490f4217985173dc09a2bdde094a57e32cb3e1e0d962e53e9154d3b93f994d8acd88f66e6a6f72d61380000e50322e1831663a84e5783e549ba6d", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000002000000020000000100"/28], 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000006801e96800000000000800000a0000000000000004ffff00ffec3e6262b62d388b2fa1401b48"], 0x1c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
set_mempolicy(0x0, 0x0, 0x7)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmmsg$inet(r4, 0x0, 0x0, 0x20008004)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xfffffffd, 0x10004}})

50.986716369s ago: executing program 8 (id=1177):
socket(0x10, 0x3, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) (async)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0) (async, rerun: 64)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r8 = dup(r6)
syz_open_dev$audion(0x0, 0x4, 0x4200) (async)
r9 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1) (async, rerun: 32)
r12 = eventfd(0x5f0) (rerun: 32)
ioctl$KVM_IOEVENTFD(r11, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r12}) (async)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r11, 0x4020aed2, &(0x7f0000000100)={0x0, 0x600000, 0x8}) (async, rerun: 32)
ioctl$LOOP_SET_FD(r0, 0x4c00, r12) (rerun: 32)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0xf0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@common=@ttl={{0x28}, {0x0, 0x4e}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x18, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x1, 0x4e20, 0x10, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)
syz_ublk_setup_queues(r8, r5, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0x2, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x800a2, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async, rerun: 64)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) (async, rerun: 64)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
process_madvise(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

50.790522097s ago: executing program 8 (id=1178):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x3c, 0x2, 0x6, 0x3, 0x1000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x8000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/3, 0x3}, 0xfffffff7}], 0x2, 0x12000, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1b}, 0x1, 0x0, 0x0, 0x4008058}, 0x4044040)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x10001}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0x1}])
r5 = landlock_create_ruleset(&(0x7f0000000280)={0x7466, 0x4, 0x1, 0x2000, 0x3}, 0x30, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
landlock_restrict_self(r5, 0xe)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x3c, 0x2, 0x6, 0x3, 0x1000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) (async)
socket(0x1e, 0x4, 0x0) (async)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x8000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/3, 0x3}, 0xfffffff7}], 0x2, 0x12000, 0x0) (async)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1b}, 0x1, 0x0, 0x0, 0x4008058}, 0x4044040) (async)
pipe(&(0x7f0000000040)) (async)
io_setup(0x3ff, &(0x7f0000000500)) (async)
io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x10001}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0x1}]) (async)
landlock_create_ruleset(&(0x7f0000000280)={0x7466, 0x4, 0x1, 0x2000, 0x3}, 0x30, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async)
accept4(r6, 0x0, 0x0, 0x800) (async)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
landlock_restrict_self(r5, 0xe) (async)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)

49.861123381s ago: executing program 8 (id=1180):
socket$inet(0x2, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
write(0xffffffffffffffff, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000002000087d1eb42d0000000000010902"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

46.617053106s ago: executing program 8 (id=1188):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000280)={0xc, r2})
unshare(0x2a020400)
r3 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xcc_\xe3\x00\x00\x00\x00\x00\x00\x00\x00E}\xd6`\x84\xb9\x82\xa0\xbf\xa4\xaf\xe9\xbd\n\x92,x\xc8<\xa8WfCW\xee2\xd3\x87\xafT\x81V\xc4\xcbm\x12\xf5\xb4\v\xa14\xf4\x9d\x93Li\xbd\x7fU)a\xee[\xea\xb1\xe7/\x8b\xcb<\xb8\x1a\xdb/\x9c\xdbK\xfb', 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1)
io_uring_setup(0x30d5, &(0x7f0000000000)={0x0, 0xffffffff, 0x10})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x80000001, 0x7fb, 0x8, 0x100200}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0xa}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
ftruncate(r3, 0xdcb)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x0, 0xff, 0x2, 0xc1, 0x6}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0})
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0)
recvmmsg(r4, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400})
pread64(r3, &(0x7f00000009c0)=""/239, 0xef, 0x1)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r2})

31.015966827s ago: executing program 39 (id=1188):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000280)={0xc, r2})
unshare(0x2a020400)
r3 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xcc_\xe3\x00\x00\x00\x00\x00\x00\x00\x00E}\xd6`\x84\xb9\x82\xa0\xbf\xa4\xaf\xe9\xbd\n\x92,x\xc8<\xa8WfCW\xee2\xd3\x87\xafT\x81V\xc4\xcbm\x12\xf5\xb4\v\xa14\xf4\x9d\x93Li\xbd\x7fU)a\xee[\xea\xb1\xe7/\x8b\xcb<\xb8\x1a\xdb/\x9c\xdbK\xfb', 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1)
io_uring_setup(0x30d5, &(0x7f0000000000)={0x0, 0xffffffff, 0x10})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x80000001, 0x7fb, 0x8, 0x100200}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0xa}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
ftruncate(r3, 0xdcb)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x0, 0xff, 0x2, 0xc1, 0x6}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0})
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0)
recvmmsg(r4, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400})
pread64(r3, &(0x7f00000009c0)=""/239, 0xef, 0x1)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r2})

13.118703125s ago: executing program 3 (id=1277):
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db})
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
write$binfmt_script(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r4, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x14014)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r8 = socket(0x400000000010, 0x6, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9181}, {0x4, 0x2, 0x8, 0x2, 0x8, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

10.286446385s ago: executing program 4 (id=1284):
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001004e000000000000000000000a38000002060a01010000000000000000020000000900020073797a32000000000900010073797a300000000e0c0003400000000000000002140000001100010000000000000000000500000a"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x28, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000007000390229bd7000fbdbdf2507000000", @ANYRES32=r6, @ANYBLOB="0c000180080001000900031eed48b86c1cb29defffb88e18d27668187ae8589e437b0d195068ff2d2c843bc7"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)
dup(r4)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x14)
ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001ac0)={r9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})
socket$netlink(0x10, 0x3, 0x0)

9.720514988s ago: executing program 3 (id=1285):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddbdf253800000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) (async)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0x10, 0x8, 0x0, 0x40}, 'syz0\x00', 0x26})
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000225bd70007464657673696d0000000b0002006e657464657673696d30000008000b002e000000080001007063690011000200303030303a30303a31302e300000000008000b001000"/90], 0x60}, 0x1, 0x0, 0x0, 0x4000101}, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x10c, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @loopback, 0xf0b}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @private1, 0xe381}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1d20f2e2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

9.101440455s ago: executing program 3 (id=1286):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@l2tp, 0x80, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=""/123, 0x7b}, 0xbe47}, {{&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/117, 0x75}, {&(0x7f0000000a80)=""/75, 0x4b}], 0x2, &(0x7f0000000b40)=""/103, 0x67}, 0x2}, {{&(0x7f0000000bc0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/124, 0x7c}, {&(0x7f0000000cc0)=""/69, 0x45}, {0x0}], 0x3, &(0x7f0000000e40)=""/86, 0x56}, 0xf2fe}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000f40)=""/36, 0x24}, {&(0x7f0000000f80)=""/14, 0xe}, {&(0x7f0000000fc0)=""/25, 0x19}, {0x0}, {0x0}], 0x5}, 0x8}], 0x5, 0x2, 0x0) (async)
r3 = getpid() (async, rerun: 32)
r4 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) (rerun: 32)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0285628, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc})
r5 = syz_pidfd_open(r3, 0x0) (async, rerun: 32)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) (rerun: 32)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000504fcff", 0x58}], 0x1) (async)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'})
write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) (async)
close_range(r5, 0xffffffffffffffff, 0x0) (async)
dup2(r1, r2)
fremovexattr(r1, &(0x7f0000000140)=@known='user.syz\x00') (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)

8.750281624s ago: executing program 5 (id=1287):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 32)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003480), 0x100, 0x0) (rerun: 32)
ioctl$BLKRASET(r2, 0x1262, 0x0) (async, rerun: 64)
connect$unix(r0, 0x0, 0x0) (rerun: 64)
sendmmsg$unix(r1, 0x0, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f0000007400)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/117, 0x75}, {&(0x7f00000001c0)=""/193, 0xc1}], 0x2, &(0x7f0000000300)=""/40, 0x28}, 0x2}, {{&(0x7f00000003c0)=@can={0x1d, <r3=>0x0}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/166, 0xa6}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/33, 0x21}, {&(0x7f0000001800)=""/4085, 0xff5}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x6, &(0x7f0000003880)=""/205, 0xcd}, 0x7}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000003980)=""/137, 0x89}, {&(0x7f0000003a40)=""/17, 0x11}, {&(0x7f0000003a80)=""/170, 0xaa}, {&(0x7f0000007080)=""/92, 0x5c}, {&(0x7f0000003bc0)=""/179, 0xb3}, {&(0x7f0000003c80)=""/103, 0x67}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/4096, 0x1000}], 0x8, &(0x7f0000005d80)=""/4096, 0x1000}, 0x3f249db5}, {{&(0x7f0000006d80)=@nl, 0x80, &(0x7f0000006e80)=[{&(0x7f0000006e00)=""/101, 0x65}], 0x1, &(0x7f0000006ec0)=""/8, 0x8}, 0x5}, {{&(0x7f0000006f00)=@x25={0x9, @remote}, 0x80, &(0x7f00000072c0)=[{&(0x7f0000006f80)=""/225, 0xe1}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f0000007100)=""/224, 0xe0}, {&(0x7f0000007200)=""/179, 0xb3}], 0x4, &(0x7f0000007300)=""/255, 0xff}, 0x401}], 0x5, 0x2, 0x0) (async)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000005c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r5=>0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
msgget$private(0x0, 0x3ac)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5, 0x0, 0x0, <r6=>0x0}) (rerun: 32)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'})
syz_usb_connect(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYRES8=r3, @ANYRESOCT=r1, @ANYRESDEC=r6, @ANYRESHEX=r7], 0x0) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) (async, rerun: 64)
fsopen(0x0, 0x1) (async, rerun: 64)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)

8.372239028s ago: executing program 1 (id=1289):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x8000, 0x1, 0x17d0, 0x4, 0x2, "3cb4ec2121c419cf"})
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040))
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)

8.267498097s ago: executing program 5 (id=1290):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x2817, 0x0, 0x0, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00070a0000000a0d7fca41c7e7105096"], 0x0, 0x0, 0x0, 0x0}, 0x0)

8.267105138s ago: executing program 2 (id=1291):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_create_resource$binfmt(&(0x7f00000008c0)='./file0/file0\x00')
r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
openat$binfmt(0xffffff9c, r2, 0x41, 0x1ff)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x4)
mprotect(&(0x7f000018f000/0x4000)=nil, 0x4000, 0x2000009)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000b80)=ANY=[@ANYBLOB="66643de6db7e9a4c074a62a4d597d3eb16636cd71c5cae340c", @ANYRESHEX, @ANYBLOB=',rootmode=0000', @ANYBLOB])
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000bb40)="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", 0x2000, 0x0)
madvise(&(0x7f00005ae000/0x2000)=nil, 0x2000, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r4=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

7.872487626s ago: executing program 3 (id=1292):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001c300000000fcffc75900000400", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b80080003000200000008001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffc, 0x6, 0xb4, @scatter={0x0, 0x2000000, 0x0}, &(0x7f00000005c0)="2a08000000b7", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0})
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58)
syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f00000007c0)={0x3, 0xb6, "bf724ac406a8dd63f139497917e5a3218d22d84890bf04c05b2047117bc18a6a36b950de9c79155511f56272add0846b45234d60964d3ec81a870c5817dba7f3e3da65f34333c436b79c9c1a3afe2c4460ecb4929efe81b73a6fb01de0c8946771ab97119f27d57d9b019d9070949efb6a9cb08f459ee69f182a4203ef5485071880c02ce30415062ddf36183bb1237ac747230fef45404321db6343d3e60ea94591770326d4e03d9fcade4ca720dc3ef53d0ba4ee8c"})
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={<r6=>0x0, 0x3}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={r6, 0x9d, "7db783ac8b89af57cf017bb316ddd95c5f307e5cb0194fde0bae2f445820fbec39c28f05ab7ff848857cfab6919e2762cd0bca7062e22db9e9555828effa421448e0f2adcbc32fe824afd23a052ce5562e13790d52d54ffa481fd45708501080abdab77a57875c371bb2d770def180999da4ecf4160c0d023af4ecc3bae9a198626ac0b743317487021ccb1b8a9c353d0c3f2e402522ad2fb309f18e14"}, &(0x7f0000000400)=0xa5)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x80000000, 0x0, 0x100})
syz_usb_connect$uac2(0x6, 0xf2, &(0x7f00000005c0)={{0x12, 0x1, 0xfd2ae4ddff4fca98, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1057, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0xd5, 0x80, 0xb, {0x8, 0xb, 0x0, 0x1, 0x1, 0x6, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x2, 0x2c, 0xc}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x280, 0x7, 0x3, 0x91, 0x0, 0x2}, @effect_unit={0x9, 0x24, 0x7, 0x6, 0x0, 0x6, [0x0]}, @multiply_unit={0x7, 0x24, 0xc, 0x30, 0x3, 0x6, 0xff}, @extension_unit={0x7, 0x24, 0x9, 0x4, 0x8, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x401, 0xf, "fbbffe14aa"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x1b, 0xd, {0x8, 0x25, 0x1, 0x84, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x2, 0x0, 0x0, 0x9}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x0, "f1d391365ba17d5e57"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x10, 0x7, "1acc"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x2, 0xa3, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0xfffc, 0x7, 0x3}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x4, 0x3, 0x3, "86bce52477e7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x40, 0xae, 0xbb, {0x8, 0x25, 0x1, 0x82, 0x3, 0xfe, 0x6}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0x2, 0x9, 0xf7, 0x10, 0x9}, 0x2e, &(0x7f0000000700)={0x5, 0xf, 0x2e, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0x6, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x17, 0x5, 0x7a, 0xa}, @ssp_cap={0x18, 0x10, 0xa, 0xf0, 0x3, 0x1f9040e, 0x0, 0xa, [0xffc000, 0xffff30, 0x0]}]}, 0x1, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x200a}}]})
r7 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
fsetxattr$system_posix_acl(r7, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {0x8, 0x2}, [], {0x4, 0x3}}, 0x24, 0x2)

7.655429634s ago: executing program 1 (id=1293):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={<r1=>0x0, 0x1}, &(0x7f0000000040)=0x8)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000000c0)=0x200)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', <r4=>r3, 0x2f, 0xe4, 0x9, 0x1, 0x9, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x8000, 0x8, 0x1, 0x8}})
ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000200)={0xffffffffffffffff, 0x3, 0x5, 0x97, 0x5})
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000280), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r6=>0x0})
getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl2\x00', <r9=>r4, 0x2f, 0x80, 0x8, 0x3, 0x22, @mcast1, @mcast2, 0x1, 0x1, 0x4, 0x2000}})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000480)={0x5a0, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3e6}}}]}}, {{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r6}, {0x23c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xdc09, 0xc, 0x7, 0x8}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xcdc}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}]}}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x24004c01}, 0x20000452)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x101000, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)=@deltfilter={0x1c4, 0x2d, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0x9}, {0xffff, 0x6}, {0x3, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_basic={{0xa}, {0x168, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_BASIC_ACT={0x15c, 0x3, [@m_bpf={0xc8, 0x8, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x2000, 0xf9, 0xc3, 0x1000}, {0x3a, 0x9, 0xfc, 0x8}, {0x653, 0x9, 0x4, 0x63}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x7, 0xc, 0x0, 0x3}, {0x8, 0x5, 0x72, 0x6}, {0x65e, 0x9, 0x1, 0x60000000}, {0x4, 0x6, 0x1, 0x200}, {0x9, 0x4, 0xf4, 0x8}, {0x0, 0x9, 0x4, 0x6}]}]}, {0x2c, 0x6, "f98e8be770903d811446a74e408dfa3ea700ad65910a9f887cefb1e5e7ce65c59e095d01f1ffe4b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x90, 0xc, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "95b7d13bcb96ef39b1d5934b20ba93f1"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ccd885d6f829fcb2494be1825a04ce0e"}]}, {0x2a, 0x6, "c72ad235fadf71f439c777f885d575c7d5a0715d1adef13fd0e320554a6976f9dabf01c47d7e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4c}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000041}, 0x4010040)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10000, 0x0)
syz_create_resource$binfmt(&(0x7f0000000e00)='./file0\x00')
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000e40)={r1, 0x76, 0x6, [0x8, 0x903, 0x9, 0x6, 0xaf, 0x5]}, 0x14)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r10, 0x7e07000)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x30, r11, 0xb6ef000)
fchmod(0xffffffffffffffff, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x60, 0x0, &(0x7f0000001100)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000001040)={@ptr={0x70742a85, 0x0, &(0x7f0000000e80)=""/238, 0xee, 0x2, 0x31}, @fda={0x66646185, 0x5, 0x2, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000f80)=""/154, 0x9a, 0x2, 0x25}}, &(0x7f00000010c0)={0x0, 0x28, 0x48}}}], 0xfc, 0x0, &(0x7f0000001180)="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"})
socket$key(0xf, 0x3, 0x2)
epoll_create(0xfffffff7)
r12 = syz_open_dev$audion(&(0x7f00000012c0), 0xfc, 0x10000)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000001300)={0x6, 0xffffffffffffffff, 0x1})
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
gettid()
r13 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0)
ioctl$VIDIOC_S_INPUT(r13, 0xc0045627, &(0x7f0000001380)=0xdaf)

7.186667247s ago: executing program 5 (id=1294):
syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0)
syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r4}, 0x14)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000840)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r4, @ANYBLOB="607d172b"], 0x28}}], 0x1, 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f)
read$watch_queue(r6, &(0x7f0000000000)=""/1, 0x1)
keyctl$revoke(0x3, r5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000))
r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0)
syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)

7.166014089s ago: executing program 1 (id=1295):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x2, 0x4)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000240))
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000a00)="b002401d42b755c94142dfeb56e69ee92fb553bbe868a4be6fba0d398c1476c229eb8a3adcb877aab2b787762fd27d5f6d6ad9a4a2a47ce39ca6e3d760cc358243db3e44e58902158e35675b209a041d546325ceff9884bda4f9fe1902ad539cf6c75b084a384d94e7216a1daa987b43280a330090fe001faf5977e6806a474c3ebbcc323190bad3dfb465dad9653e3c9c24bd86fd965db3adffb3bde57540e967954dd5a1f2389d7348b1a44d938c3f32298bd5e10c28ead285bffb9ff418ce6562a1e417ed73d0f2624bb5796cbda04c3934bb4962a6eb46dccc686bf7e14fdf2bd42a8b7402dbe09247", 0xeb}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8)
close(r3)
fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x2)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40)
ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000400))
r7 = getpid()
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setattr(r7, &(0x7f0000000340)={0x38, 0x3, 0x1000002d, 0x12000, 0x299d4, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
r9 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r10 = fcntl$dupfd(r9, 0x0, r9)
write$binfmt_script(r10, &(0x7f0000001b00), 0xfffffd9d)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x88}}, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

6.230682594s ago: executing program 4 (id=1296):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x3, 0x22})
ppoll(&(0x7f0000002700)=[{r0, 0x8018}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) (rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
syz_emit_ethernet(0xff03, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x30, 0x0, 0x4000, 0x8, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfc, 0x1, 0x7, @loopback, @rand_addr=0x640100fa}}}}}}, 0x0) (async)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) (async)
r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, r4, 0x40000) (async)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r6, 0x0) (async)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000002040)={0xf0f080, 0x5}) (async)
r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) (async)
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xc0002009})
r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) (async)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x1) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0x0, 0x1}) (async)
r10 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
open_by_handle_at(r10, &(0x7f0000000900)=ANY=[@ANYBLOB="10000000f1000000980000000000000000000002"], 0x400040) (async)
fcntl$setsig(r1, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0)
dup2(r1, r2)

5.659142849s ago: executing program 4 (id=1297):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x10}}, 0x90}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, 0x7, 0xa, 0x37179fdb750fe999, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4305}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}]}, @NFTA_RULE_POSITION_ID={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0xcec5589a7a31c0c2}, 0x0)

5.410434088s ago: executing program 4 (id=1298):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}})
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r3=>0x0})
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@mcast2, r3}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r3, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000300004", @ANYRES32=r6, @ANYRESDEC=r6], 0x28}, 0x4044804)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @remote, 0x8000}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40)
r8 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4)
r10 = signalfd4(r2, &(0x7f0000000400)={[0x4]}, 0x8, 0x800)
sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, r9, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000001)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
close(0x4)

4.859393752s ago: executing program 2 (id=1299):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) (async, rerun: 64)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{0xa, 0x4, 0x1, 0x2}, {0x3, 0x5, 0x1, 0x80000001}, {0x2, 0x1}, {0x4, 0x1, 0x0, 0x9}, {0x0, 0xf8, 0x5, 0xfffffffe}, {0x9, 0x5, 0x2, 0x2}, {0x5be, 0xb0, 0x0, 0xc3f6}, {0x7, 0x6, 0x5, 0x5}, {0x6, 0x1, 0x1, 0x17}, {0x4, 0x2, 0xd0, 0xe}]}) (async, rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x1080}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2)
syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.48703531s ago: executing program 4 (id=1300):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012b", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000140)="2bc4", 0x4b}], 0x4}, 0x20008b88) (async)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012b", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000140)="2bc4", 0x4b}], 0x4}, 0x20008b88)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x5, 0x200000b, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)

2.896775528s ago: executing program 4 (id=1301):
socket$inet(0x2, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000002000087d1eb42d0000000000010902"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.649482568s ago: executing program 2 (id=1302):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
fchdir(r0)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000180)=""/242, 0xf2}, &(0x7f00000002c0), 0x578aa25ce0221e08}, 0x20)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

2.331669215s ago: executing program 5 (id=1303):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009", @ANYBLOB="04"], 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
getdents64(r4, &(0x7f0000000040)=""/48, 0x59)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
getdents(r4, &(0x7f00000005c0)=""/180, 0xb4)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r5 = eventfd2(0xe5c, 0x80000) (async)
r6 = eventfd2(0x42000006, 0x801) (async)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x109100, 0x24, 0x3a}, 0x18)
r8 = openat$incfs(r7, &(0x7f00000000c0)='.pending_reads\x00', 0x2, 0x166)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', <r9=>0x0, 0x1, 0x1, 0x7, 0x3, {{0x1c, 0x4, 0x2, 0x0, 0x70, 0x64, 0x0, 0xf9, 0x4, 0x0, @rand_addr=0xffffff00, @loopback, {[@timestamp_addr={0x44, 0x2c, 0xf2, 0x1, 0x3, [{@remote}, {@loopback}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x100}, {@empty, 0x100}]}, @timestamp={0x44, 0x28, 0x8a, 0x0, 0x3, [0x1, 0x2, 0x3, 0xd, 0x5, 0x4b800000, 0x7, 0x101, 0x7f]}, @ra={0x94, 0x4}, @noop]}}}}}) (async)
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000580)=<r10=>0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x7, 0x4e20, 0xe3, 0x2, 0x0, 0x40, 0x33, r9, r10}, {0x5, 0x2, 0xe, 0x4, 0x100, 0x8, 0xfffffffffffffffb, 0x4a0}, {0x6, 0x4, 0x7, 0x8}, 0xb1f5, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in6=@private2, 0x4d4, 0x6c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3501, 0x0, 0x2, 0xd9, 0x7fff, 0x9, 0x4}}, 0xe8) (async, rerun: 32)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000240)={r6, 0x7, 0x2, r5}) (async, rerun: 32)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r11 = eventfd2(0xe5c, 0x80000) (async)
ioctl$IOMMU_IOAS_COPY(r8, 0x3b83, &(0x7f00000001c0)={0x28, 0x4, 0x0, 0x0, 0x7, 0x70, 0xfffffffffffffc86})
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r11, 0x7, 0x2, r5}) (async)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0xcf, 0xd, 0x2000000000004, 0x100000000, 0x3, 0x4000000001002, 0x80000ef, 0x7b, 0x5, 0x0, 0x7ff, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="18001000f43fa8d600001af22e50252f"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) (async)
r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x8000000000000000)
ioctl$SG_GET_RESERVED_SIZE(r12, 0x2272, &(0x7f0000000000))

2.275016791s ago: executing program 2 (id=1304):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x204033, 0xffffffffffffffff, 0x42795000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x84)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r3, 0x540a, 0x0)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000200)=',', 0x1}], 0x20)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000140))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x404000, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000100)={0x0})
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0)

1.951546272s ago: executing program 3 (id=1305):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000400)={0x3, 0x0, 0x84, 0x9, "b75fc47f994d6d4056b9b835c0a5dd0fcd70131cb9a8f007512701d3987e5821"})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048000)

1.936397281s ago: executing program 5 (id=1306):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
write$sequencer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="fdb813efe13ebebd505ca4bc22f7010509432f8a1467b856854b631c343f4143fd14ac12729c80e784ceda98760f493bbf3ebbda414dd7cb925c0fe6bde6d309d869f0c222907b111701e2f27f39ea3e34f683d5395c14d718a69bff308c91032691c1b6c6f121d722e077ef89f3752c4387"], 0x10)
socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x2, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x30c3f000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})
ioctl$LOOP_SET_BLOCK_SIZE(r9, 0x4c09, 0xff)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r10=>r5, 0x700, 0x7800, 0x46727b6b, 0xaf, {{0x8, 0x4, 0x3, 0x20, 0x20, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @private=0xa010100, {[@timestamp={0x44, 0xc, 0x30, 0x0, 0x4, [0x7fff, 0x10]}]}}}}})
sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@delchain={0x54, 0x65, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x10, 0xfff2}, {0x2, 0x2}, {0x10, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @TCA_RATE={0x6, 0x5, {0x9, 0xec}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r5, 0x29, 0x0, 0x5, 0xffff, 0x22, @mcast1, @empty, 0x0, 0x1, 0xfc}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x2, 0xffff2d37, 0x3, 0x46, 0x4, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0xffffffff, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0xffff0001, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x1000, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x41, 0x3, 0x6, 0x6, 0xffffffff, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x8000005, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0x0, 0x129432e6, 0xcd, 0x40c, 0x9, 0x2bf, 0x6c9, 0x1, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x10, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x7, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0xfffffffc, 0x6, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x4, 0x62de, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x3, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x9, 0x5, 0x8, 0x83, 0x4000003, 0x20000009, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x8, 0x8005, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x8, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x8003, 0xa2ed, 0x404, 0x25], [0x4000009, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53804, 0x0, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x6, 0x148, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xcc, 0x7, 0xfffff000, 0x10003, 0x3, 0x7e, 0x20100, 0x9602, 0xc63c, 0x20000002, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa21, 0xc, 0x7, 0xce3, 0x6c1b, 0x3, 0x6, 0x5, 0xb1e, 0x1, 0x1fe, 0xffff3441, 0x7]}, 0x45c)
ioctl$MEDIA_REQUEST_IOC_REINIT(r7, 0x7c81, 0x0)
unshare(0x26020480)

1.714910876s ago: executing program 2 (id=1307):
r0 = epoll_create(0x80)
fdatasync(r0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000540)={{0x80}, 'port1\x00', 0x72, 0x280000, 0x0, 0x8000005, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8001, 0x27, 0x6, 0x55a})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000002800)=[{0x0}, {&(0x7f0000001680)="fae0835e", 0x4}], 0x2, &(0x7f0000000000)}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffe, 0x3, 0x0, 0x1, 0x800, 0x0, 0xa10}, 0x0, &(0x7f0000000180)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x2a01, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
r7 = socket(0x2, 0x80805, 0x0)
ppoll(&(0x7f0000000500)=[{r0, 0x2}, {r2}, {r3}], 0x3, &(0x7f00000002c0), &(0x7f0000000400)={[0x98]}, 0x8)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x20004, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r10, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x1})
inotify_init1(0xc00)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r11=>r0, {0x7}}, './file0\x00'})
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r11, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="42b821b37e5c77300200ff03"], 0xc)

1.547831504s ago: executing program 2 (id=1308):
syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905073e2c"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r4, 0x3, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
fcntl$addseals(r1, 0x409, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001440)={0x1, &(0x7f0000001400)=[{0xfd, 0x1, 0x5, 0x81}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000280)=[{0x48, 0x0, 0x0, 0x7ff}, {0x30, 0x1, 0x8, 0xfffef024}, {0x6, 0x2, 0x0, 0x4}]}, 0x10)
r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x2)
ioctl$vim2m_VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000340)=@fd={0x7, 0x0, 0x4, 0x0, 0x3, {}, {0x1, 0x1, 0xf7, 0x9, 0x10, 0x6, "0100"}, 0xd, 0x4, {}, 0x80e8})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000140)=[{0x5, 0xbe, 0x3, 0x3}, {0x3, 0x0, 0x8, 0x4}, {0x3, 0x6, 0x1, 0x4000000}, {0x1ff, 0x0, 0x3, 0x7}, {0x20, 0x98, 0x6, 0x3}]}, 0x10)
syz_clone(0x2020000, 0x0, 0x0, &(0x7f0000000300), &(0x7f00000003c0), &(0x7f0000000400)="35ba0beeefd45fdf86e4f567a44c0716238e2f1a9351b85727573011c53834ed915c799e1c5297e0dac7ba627bf1a749ef42f9f47ded4fdcaf2432fb961e829f3712a1f4ec88ca43b2b8c65bf153b691f96d09322aa164e68a93949a61be1741ca89f4f848f165b17cb3bb50f0258d408559411c7e0cab2b623b6cd6ad7ec5f4557970c478fb50850fea58e5cfdde0b14c5affc3153d086def47138f0641bb275753348ed69d0ccc89eb86e7b1eebdc643557e0f26d59da1c702e4fe7b55bf8d6a751672d603bf4b749bd640881dabea55502c86f686cecb232ab180ffb539657869368ccfde84252b5174a67a16510f792bbe50d09f2a8e960c648326f6c598b4eceb673c9984a96a5e14df17842b2a3799745e66ceae7d7a2ef2d03eb36a78035a642fb6ef23426ce343103ab063c6c2b0d97d3d5a38a951f0057cc003b60e8f78c0f8442cbf72985378c3785afcf1abf41ccc791d161436097c2deec05b14201c8d44c9696a0a1a5f35f46643a48faf9fcd2e663f10142291d4e77604e5a18541fd3af0669f0a2ec193ac84778ca12760b586c8fff84d065cbb23abb8ac32b3db3709fa61aae40b74188dd6768375d01f10d95d7b94050b46b87602248bd68b874d85782806dcea48376492fa64812b2977de64d2b4581d1b257be20dac3622eef7357cda5860996ccfafdacaeab58392fef48d2d688bedac92cfcc727768766555ee26a8e82616d92c87a535e7bcec21d8b07c597d820688b0b4ce374c677d9a2ce1a8a37d07be6b6eafe3f7a3b6422bbb2ea4c0e3cc1122b764f52c4d5ada593d83ab6b545558f39623bb126b64042afb7f3913c3d681c75b6e824fab32abb6e30ca1d8fd9cf92b702079f5d77ea34f36209682c192624b71fb2c9b3036eb283dea80fe20eadbddf350d81e4ed5e37e367a2840424f2e61bc29cb0716c4b3c855a10e9242aa05cdb8ad766249a6a0bc0e61ab5e483578a00f794beeb84effc51758cbc22d10b8c697a89b9065112fcca4cb9223546817571ee4e357efb9fa9bedefd9b557c3437500f559c3bef99122b10c73854747a7acfbd6f195f14108b721d5929af9f277739443bd8a39babef4747cc3c34aaf29fad8a8dc64c352310394aeb33ba5f21eddc839d27a21a2b7a9202267766ea1326fec6d651c5d1b2079b88a0c28e50e1e86c9327a473cc78698a90d22d6f9eb62bc76bd1980ab2051f0923718bebc2e3495a672f3ad79e2cb201449da505578caebfcaed4e46edad9077fed10b9c42e75a55babac9062f2e6c4a67b44b9a771dbe15ab3548e2ddd4da3777ba7e7b3dba3a7243584c8f8c1b9d095cebf24a678b382fba66dd2766ac22d01d7cb16696294ae9476bcf07d67eeccf47e98dbd650a28dad0ead8131eb532d079531322d8229aa03a35b70f81619af21b5eed1025e20fe98acad05f672d4c82bab6e1d6953bcbf3ad24d750bc16018917e51269f05392fea97684961c4420c7aeda4c9a035f8605e6aa340e6ee7ba8e1f8806893c20d4358ab467eb14390aedf9dfdc0d7070d021fc6384fd2e1ae1e6e45b775b4d3bbb05596a4f2b0b22cdc87cfb60bfd0fc48f431cf2013c974229a00e919641c3b7e44a74aa3f14f77cf701bdec585713e3389be0a6779bb006943524adf386d6512d0a51d8faea3c4c234852e7980f0064710415c6c0f331084923b18e6bbd34a2fe16a68430faa4779cdc36a7bcc19fa424a3759c445119b9f94e98598da9cbad05aac111ed2668902cb6757cb8c6b12d95de862dfc56156a8aa82fd574815ce4e6d4cfaa7134acde6f512f48317c082bd8ac0f0ef7ab972fe32ad70ab652e1f3cc3985c005c30b8778715c407f3758cbd0d88627ce5b9090e7d70d10f932b78c164542c292fae18a6998bbaed82cd6380e38b26f0577426542bb532245087eb408d8115c2990da99cff300dfb0672b4750f41221ddac6ea7a1584b9300ba260a9d372081b6536e9ad6d8534937895fa07f1d1deecbe2cba09d1a69335bf98a83cfa600fd0493bb2abe1e424d9302a45c1a5f859914c171d5f6316b28e08472bcdb2e1e9671e045229a803c704b9af2ca48710953fe12c6c48ce5b686fc348b8ba0d377590a1f2a2139e65e521ebc1e7109b0565174df0c2c36a8fa2e2429a193884932155ad9a3b9e1054f16884f2503081b5997a333ed7c743e1054eea92f8a267f19e285616ec531baf6ed7318e68f8843f5753d6db2d87bf7093717cfd9e579df860759b9aebe987c093f3e7c5b6290baa0b2bba81391ab1f878db0364cd5d0bae5b765774c0b91ed2a708c98c43eeedb258667ebf1f32a4e45277fb5a15b32e75c5c82a2ef7a228ffd153435b3876808da6167a5ce177ccf59bcddf996a2f92b649ca00f7279803b17290b62068ca396de4fcfe541d99803d6b80166bd54b1b1047749c7ee4d5cc6e77625f0490100f7211fd209236ec2a812d3b20e51d615bc1b4968f58fbec649d20ede1018c4268179eef5bb25be575d9352d8f40d4b7b5a89513cb02c3075898f933e248e13979d10f2088ce1ecdc9393bbd4bdf12419afa0899247aa8959abe5cd158e4e542d9b1b5e339f1b6813c91483973ec5ec3a4955e29ca5fdde8ef073c1fdc9fd6fc4ff0c825d6e233866c7517dc19b6042375f6411e7678683e2db67b809b9622581e0c9dc63fca72f3569f8e0c36e8b9177739b2b4a73726a64878ec45fd7817133b80f2bb71332d6522f9ff747ecc2caccabca6c5b493038af377d31e8b331a5dbab9a6914e275b535d35e5c3189160f65b4f208e0a97f11cd98e386202dae0e49c4d2e224b86f90a6a759e8314cfae6392178d87241a4f94716f2495c12aed1f433abe72b33962dd8307d2d086994e86a267e7d82b0e5e3dd99aa26557c5027ab00f39e13ad862262e0b17018b0e16a41b63381d34dae7c6d1804de55c688399523039e9c590c376f0f31e202a119ef27a5f5267e5ec0544f721c323fb5afcf9c909bc9c2a9d23386891f98eb9f5c85b8f614665c0127053eb6ded9cde69f695e91f70745d4e4fbc1f32f5662394488a49bc24e3dd2c1d8ea2b576bf9aafe14d46de9d898fd4bee626ebea69438bdfb51babf68e466d1cb525b6fde73a34f52846c5d85146fdadb5737c42e683589025fc063ffe160ed07a35f44eaf4f6c805ea8b3b5af4d29ca95f13c0633cc189e0f5a62054841333911fa4bd8e1ee4d463ee1482e07e415820c9a0d2cf43f2b5a8fc59cf4bf79ead1668ef5988900ff5377f49764d63c38a7de7b352ac8d13d101d9af783d6501fbe2e84956d76161b2e16163d5068af6bc712580ebb6eda79d9df6b16c6b932b17d280421e10f21b654070a093eae1a31d17b2e3c5f4274c012b2926e1d77aeeda47bc161d5dbc79b2f322c8e81df33ded0399d172b297be0ab919fe1a894fef5e3da6a6c045e4b08d7224c0faf6ed593ad4a2feafeea9bf96385d2950867e95dbdaded530bc6f91a881fb5d3c1dd7089f3892a4d9307ad4e587b1e97e44ed9bf2bdb7bfefcee7ca5b0be3299dc7fc889023709b4008588088407985b786cd663d0130eed71f3bbe33bc9805d1d867b7ea85c1bf9b047ae0aea00eb881de29ae7a085846d2bb837598905397c2e32e6d53e3eac74b8b12a71e5bec725156f7e2d55816cb3a72da3b211bc5ab919cf5d592a28a423287245b47eb02da3c48482ff0048717ca48c89c7891d1a298989f2959ef02fd6f27798703d066ee1e159bc787fab15d0a1a717774ad2c1dc4f58500113c276e86360d9de3f4aa564abc6ba1ba5b1c9db0c8791ff8a0dc1d9db7e35b26ce4dd888c2e6fe9fb4171ae67854aead8947be31efa4598e33c9f8f3122f50c96264fd6e1c5ccb17617810c4981efe0dddef707ea617193e4418a8f1c319d297b4b0e61552072c5300a6a677db99bd607b4fc70639b257945dae635e4f8418559f70ef946b58f9ba8477586eb53f39823de1309e0ea8c932330d6c3e964e038ad1401c743af10d77f850b697a3441c74f6422fb14082daac09e728cc4529948c356bd62e7733631c17c1e60015af2867b24647d0506cf8bf350085bbba8aa14fb9a55ae70d3a7d4475eba0ee90364d40c2df5c86ff366fbf831add3c82d926446eae030a972d43794d5ca45a29f681e3f9867e46e797c07f4557805dd5b22813dfdc08539e6f16bdef51488930e2fa2ea7106ce87bdd4c3e1055ab05c81c72c6606c0cb2583ca585b859abd06d010a988579815b2a950ebf3a29612eb7d60c02a6ae6123156522d25742333240b378103d5a702cfa03959e77c0a19c6534d492037affb5b0f9498ff287fee9dce55ff23375a0ac03fd007bb6e2b37545bede7114e1bb6118e28e50e31c8cb12c3141c1419130eb5c054c185b21ed7d932cd440e59182370ac10a1b258f9eaf99ac6696bd2443f669366620b41c92bf67cc9aae2871e14c4a301a99cdee8163e56804a9a70077166b83d30d970cad831dfd89302b892be898a754cbabf56b343364af7e5b3ae976e4d34e5e3ef9ed4050ff89236d3cb8056a43deab822093c8a504a32c9af7a6501b3ae7a88e91eae1285a3cea30a580936202e11da5fe74c1a090a36c78bd762624d0b153b1d51da0556e1347c0f400b869c879026990741d995990671f445f299c355dc2ae74e0ea169bda475d16e33212f8a34ab592a719f114e15ddac1abee590a877c58eb7a11192daec25631e3bc08cf1461f3c6a64c9343cbbb61855f61783121d2688c0d50cafec9f57128a682f288584cbe0199c817518d4f8fad98bce9615667c989edee33b2010606adb9ae4e62f0ea970d8a48fea14fd78f5810f0f414624da73a2d17b2e9f2d6eac474b20778facb5e4ea451c8397280735a3b6c6b72535eb2d4c1b15dc8f1e5e9326860a948ef651f25f903f079663b6ab50c0971630214ab07dc4d5346545cd1f5dfb48b997e5d932f807b17769bfeca8d2b80c9d1c16437823bf69ac6d5121b7cc70e536749ffaf55304797d7510ccd3e3ae84f2947bf5ae9ed49d0c26c70442897fd98b3f24d14f7fd11cd10c98258caff5e105f37b39f6197703663da41cae674042aff8f3fd603bbe81223c6343cd88c0e52178e4e8b55f55e229f46726ac3a874c79a0378159cbf4e03430e074fe154a1868826d00d609efefdebe490c98e6348b532f148eec772c9d393a5357ba75abdac4fdea6cc4b82cf06dc1363b84bba28d28264466a33eb5949f3aa33671aafd1b7539156ec4ccc377d9d7a5811f691462d758e79ed51835b5ec45eae092c28d2960f69a482b2e461d08a278ead4b0257398cfdd0032d6bc1b657f0fc5c490c4a375ea6166a41b29d78a1a6c788f576c3271e9d6d59a2b76f5b4a45304c04f2ace1a2c588f89d96814620fabf488644a52b2ed5cae0eeb2924e73ef0767ea79b338805b81defed8266b09fbfa27d95e6161f17cddb214223800d9d052ff410c98d5db524115f3a31156256b86")
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r10, 0x0, 0xcb, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x2, @vifc_lcl_ifindex, @private=0xa010100}, 0x10)

1.080651978s ago: executing program 1 (id=1309):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000700)={0x0, 0x1, 0x40000, 0x2000, &(0x7f0000c7d000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x12, r4, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, <r6=>0x0}, 0x2020)
open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7)
write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x1022002, 0x0, 0x0, 0x5, 0x400000}}, 0x50)
read$FUSE(r5, &(0x7f00000065c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r8, r5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}, [@jmp={0x5, 0x1, 0xd}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x800020, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil})

504.676445ms ago: executing program 5 (id=1310):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x8864000000000000)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6, 0x20ffd, 0x0, <r6=>0x0})
mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000300)={r6})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
recvmmsg(r8, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/118, 0x76}], 0x1}, 0x8}], 0x1, 0x2040, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$packet(0x11, 0x1, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0x8b, 0x2000003}, 0x1c)
getsockopt$sock_buf(r9, 0x1, 0x1a, 0x0, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x50, 0xffffffffffffffff, 0x9de5000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00010006"], 0x2c}}, 0x4040000)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r11, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a00", @ANYRES32=0x0, @ANYBLOB="06001f"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4)
r12 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r12, &(0x7f0000000140), 0x4924b68, 0x0)
r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r13, 0x400caed0, &(0x7f0000000100)={0x2, 0xff03, @ioapic={0xffffffff, 0x1, 0x3, 0x80000000, 0x0, [{0xd2, 0x5, 0x0, '\x00', 0x6}, {0x7, 0x9, 0x9f, '\x00', 0xc}, {0x6, 0x2, 0xfc, '\x00', 0xd1}, {0x5, 0x8, 0xfc, '\x00', 0xa}, {0x2, 0x40, 0x7, '\x00', 0x1}, {0x7f, 0x7, 0x9, '\x00', 0xa3}, {0x4, 0x10, 0x1, '\x00', 0x5}, {0x4, 0x6, 0x2, '\x00', 0x10}, {0x2, 0x3, 0x9}, {0x3, 0x3, 0x6, '\x00', 0x4}, {0x2, 0x8, 0x4, '\x00', 0x9}, {0x0, 0x2, 0x1, '\x00', 0xb4}, {0xeb, 0x10, 0xa, '\x00', 0x6}, {0x6, 0x6, 0x5, '\x00', 0x8}, {0x8d, 0x2, 0x1, '\x00', 0x7}, {0x80, 0x7, 0x6, '\x00', 0x1}, {0xff, 0x4, 0xff, '\x00', 0x6}, {0x0, 0x0, 0x5, '\x00', 0x4}, {0xa, 0x4, 0x2, '\x00', 0x6}, {0x6, 0x1c, 0x4b, '\x00', 0x3}, {0x6, 0x45, 0x9, '\x00', 0x7d}, {0xd, 0xfa, 0x40, '\x00', 0xa}, {0x5, 0x6, 0xb, '\x00', 0x1}, {0x92, 0xc, 0x4, '\x00', 0x4}]}})

502.063565ms ago: executing program 1 (id=1311):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0xfffffffffffffffb)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x169c02) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) (async)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x44090) (async)
r2 = syz_open_dev$midi(&(0x7f0000000000), 0xbab1, 0x40000)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000040)=0x8001)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x3, 0x9, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x64010102}}}})

126.828578ms ago: executing program 1 (id=1312):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x2c, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x14, 0x31, 0x0, 0x0, @ipv6=@loopback}]}, 0x2c}], 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x2c, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x14, 0x31, 0x0, 0x0, @ipv6=@loopback}]}, 0x2c}], 0x1, 0x0, 0x0, 0x800}, 0x0)

0s ago: executing program 3 (id=1313):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$inet6(r3, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f00000090c0)="9a4037055e1d2207e96d56db2b87dc0f58811431433ec0e2435dab2ea838935a599486af8d13ab2df30ff8d0a89465852ec7abbeffae9462a84e0967d932a92cccb35fdc84", 0x45}, {&(0x7f0000009140)="14b48e5b08fd6c6c9c03031067a0f6194cf12963721ad167aa845aa732510bdfc2795ea40719d18c35e44298992aafa50921ae2de7ce25d85f96044894250e8a684d06c37ca05fddbafd651f2f0ab91dadf0ed44f422cf", 0x57}, {&(0x7f0000000080)="59058e8bf0cc944add2bc5e92c2a324f8f63fd7000", 0x15}], 0x3}}], 0x1, 0x44051)
syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0xf, [0x0, 0x2]}, @lsrr={0x83, 0x7, 0x61, [@private=0xa010101]}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x7}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff, 0x0, 0x3d}}}}}}, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x400, 0x1a1100)
ioctl$HDIO_GETGEO(r5, 0x301, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000200)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffa, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x2}, 0x0, 0x3f0, 0x0, 0x80d613, 0x1, 0x5, 0x0, 0x0, 0x3, 0x4000000, 0x2000000, 0x0, 0x0, 0x100})

kernel console output (not intermixed with test programs):

] Tainted: [L]=SOFTLOCKUP
[  514.949457][T19561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  514.949470][T19561] Call Trace:
[  514.949479][T19561]  <TASK>
[  514.949488][T19561]  dump_stack_lvl+0xe8/0x150
[  514.949530][T19561]  should_fail_ex+0x40c/0x560
[  514.949563][T19561]  _copy_to_user+0x31/0xb0
[  514.949599][T19561]  simple_read_from_buffer+0xe1/0x170
[  514.949671][T19561]  proc_fail_nth_read+0x1bb/0x230
[  514.949713][T19561]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  514.949746][T19561]  ? rw_verify_area+0x24a/0x4c0
[  514.949783][T19561]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  514.949835][T19561]  vfs_read+0x213/0xa80
[  514.949874][T19561]  ? __pfx___mutex_lock+0x10/0x10
[  514.949976][T19561]  ? __pfx_vfs_read+0x10/0x10
[  514.950010][T19561]  ? __fget_files+0x2a/0x420
[  514.950044][T19561]  ? __fget_files+0x3a2/0x420
[  514.950071][T19561]  ? __fget_files+0x2a/0x420
[  514.950108][T19561]  ksys_read+0x150/0x270
[  514.950144][T19561]  ? __pfx_ksys_read+0x10/0x10
[  514.950177][T19561]  ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10
[  514.950217][T19561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.950242][T19561]  do_syscall_64+0x174/0x580
[  514.950277][T19561]  ? clear_bhb_loop+0x40/0x90
[  514.950306][T19561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.950328][T19561] RIP: 0033:0x7fa9a0b5e6ce
[  514.950350][T19561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  514.950369][T19561] RSP: 002b:00007fa9a1b0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  514.950394][T19561] RAX: ffffffffffffffda RBX: 00007fa9a1b0e6c0 RCX: 00007fa9a0b5e6ce
[  514.950411][T19561] RDX: 000000000000000f RSI: 00007fa9a1b0e0a0 RDI: 0000000000000004
[  514.950428][T19561] RBP: 00007fa9a1b0e090 R08: 0000000000000000 R09: 0000000000000000
[  514.950441][T19561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  514.950453][T19561] R13: 00007fa9a0e26038 R14: 00007fa9a0e25fa0 R15: 00007fa9a0f4fa48
[  514.950488][T19561]  </TASK>
[  515.302669][T19571] netlink: 'syz.6.1015': attribute type 1 has an invalid length.
[  515.399562][T19571] macvtap1: entered allmulticast mode
[  515.433470][T19576] macvtap2: entered allmulticast mode
[  515.772490][T19592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1017'.
[  516.397483][ T9670] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  516.489184][ T9635] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71
[  516.525054][ T9635] usb 9-1: USB disconnect, device number 21
[  516.580213][ T9670] usb 7-1: Using ep0 maxpacket: 32
[  516.593391][ T9670] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  516.613228][ T9670] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  516.643558][ T9670] usb 7-1: config 0 interface 0 has no altsetting 0
[  516.659194][ T9670] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  516.671242][ T9670] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.711914][ T9670] usb 7-1: Product: syz
[  516.721106][ T9670] usb 7-1: Manufacturer: syz
[  516.733467][ T9670] usb 7-1: SerialNumber: syz
[  516.754072][ T9670] usb 7-1: config 0 descriptor??
[  517.185437][ T9670] gs_usb 7-1:0.0: Configuring for 1 interfaces
[  517.272784][T19604] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  517.280092][T19604] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  517.376366][T19628] vhci_hcd: connection closed
[  517.384980][T19604] vhci_hcd vhci_hcd.0: Device attached
[  517.424897][T11936] vhci_hcd vhci_hcd.4: stop threads
[  517.466437][T11936] vhci_hcd vhci_hcd.4: release socket
[  517.489885][T11936] vhci_hcd vhci_hcd.4: disconnect device
[  517.813190][ T9670] usb 7-1: USB disconnect, device number 16
[  518.128680][   T29] audit: type=1326 audit(1784318658.537:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19629 comm="syz.8.1021" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fc819de99 code=0x0
[  518.796270][ T9641] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  518.960837][ T9641] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  519.000573][ T9641] usb 7-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40
[  519.021993][ T9641] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.039799][ T9641] usb 7-1: Product: syz
[  519.056244][ T9641] usb 7-1: Manufacturer: syz
[  519.060969][ T9641] usb 7-1: SerialNumber: syz
[  519.165979][ T9644] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  519.193677][T19715] tipc: Started in network mode
[  519.201963][T19715] tipc: Node identity 2007ff, cluster identity 4711
[  519.211870][T19715] tipc: Node number set to 2099199
[  519.316221][ T9644] usb 9-1: Using ep0 maxpacket: 8
[  519.332051][ T9644] usb 9-1: config 0 has no interfaces?
[  519.339215][ T9644] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  519.352381][ T9644] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.369174][ T9644] usb 9-1: config 0 descriptor??
[  519.638267][ T5646] Bluetooth: hci6: command 0x0406 tx timeout
[  519.846056][ T9641] usb 7-1: incorrect wMaxPacketSize 0x3ff for BADD profile
[  520.022798][ T9641] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  520.081794][ T9641] usb 7-1: USB disconnect, device number 17
[  520.199836][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  520.308914][T19779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1026'.
[  520.325989][T19779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1026'.
[  520.342077][T19779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1026'.
[  520.627691][ T9673] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  520.802467][ T9673] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  520.903663][ T9673] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  520.924116][ T9673] usb 5-1: too many endpoints for config 1 interface 1 altsetting 0: 246, using maximum allowed: 30
[  520.953414][ T9673] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246
[  521.029605][ T9673] usb 5-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[  521.044244][ T9673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.057880][T19792] loop5: detected capacity change from 0 to 7
[  521.074424][ T9673] usb 5-1: Product: syz
[  521.079992][ T9673] usb 5-1: Manufacturer: syz
[  521.086355][ T9673] usb 5-1: SerialNumber: syz
[  521.108779][T19792] Dev loop5: unable to read RDB block 7
[  521.141644][T19792]  loop5: unable to read partition table
[  521.162767][T19792] loop5: partition table beyond EOD, truncated
[  521.186476][T19792] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  521.529701][ T9673] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  521.574431][ T9673] usb 5-1: USB disconnect, device number 99
[  521.644263][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  521.736076][ T5715] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  521.757467][ T9635] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  521.906024][ T5715] usb 6-1: Using ep0 maxpacket: 8
[  521.919926][ T9635] usb 7-1: Using ep0 maxpacket: 8
[  521.930078][ T9635] usb 7-1: config 0 has an invalid interface number: 186 but max is 0
[  521.939056][ T5715] usb 6-1: unable to get BOS descriptor or descriptor too short
[  521.947172][ T9635] usb 7-1: config 0 has no interface number 0
[  521.954096][ T9635] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  521.966728][ T5715] usb 6-1: config 4 has an invalid interface number: 147 but max is 0
[  521.975457][ T9635] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  521.987262][ T5715] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  521.998924][ T9635] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  522.020514][ T5715] usb 6-1: config 4 has no interface number 0
[  522.030230][ T9635] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 102, changing to 10
[  522.057950][ T5715] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  522.067536][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.075667][ T9635] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 24624, setting to 1024
[  522.089081][ T5715] usb 6-1: Product: syz
[  522.095657][ T5715] usb 6-1: Manufacturer: syz
[  522.100609][ T9635] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  522.114203][ T5715] usb 6-1: SerialNumber: syz
[  522.151499][ T9635] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  522.174164][ T9635] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.188554][ T9635] usb 7-1: Product: syz
[  522.194748][ T9635] usb 7-1: Manufacturer: syz
[  522.205993][ T9635] usb 7-1: SerialNumber: syz
[  522.230648][ T9635] usb 7-1: config 0 descriptor??
[  522.360028][T19811] binder_alloc: 19809: pid 19809 spamming oneway? 1 buffers allocated for a total size of 4096
[  522.493967][ T9635] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  522.840603][T19816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.855188][ T5715] uvcvideo 6-1:4.147: Found UVC 0.02 device syz (04f2:b746)
[  522.872933][T19816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  522.891371][ T9635] usb 9-1: USB disconnect, device number 22
[  522.926303][ T5715] uvcvideo 6-1:4.147: No valid video chain found.
[  522.947818][T19816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.993467][T19816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.010790][ T5715] usb 6-1: USB disconnect, device number 23
[  523.242772][T19888] warning: `syz.8.1032' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  523.279396][ T5715] usb 7-1: USB disconnect, device number 18
[  524.146706][T19904] bond1: (slave bond_slave_1): Device is not bonding slave
[  524.154521][T19904] bond1: option active_slave: invalid value (bond_slave_1)
[  524.196273][T19904] bond1 (unregistering): Released all slaves
[  524.432761][T19966] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  524.606305][   T29] audit: type=1326 audit(1784318664.997:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19907 comm="syz.5.1033" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9a0b9de99 code=0x0
[  524.764741][ T5645] Bluetooth: hci7: command 0x0406 tx timeout
[  525.094895][T20029] netlink: 'syz.4.1036': attribute type 6 has an invalid length.
[  525.190587][   T29] audit: type=1326 audit(1784318665.587:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.8.1037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc819de99 code=0x7ffc0000
[  525.296687][   T29] audit: type=1326 audit(1784318665.587:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.8.1037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc819de99 code=0x7ffc0000
[  525.445928][   T29] audit: type=1326 audit(1784318665.587:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.8.1037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc819de99 code=0x7ffc0000
[  525.539873][   T29] audit: type=1326 audit(1784318665.587:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.8.1037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3fc819de99 code=0x7ffc0000
[  525.570934][ T9641] usb 5-1: new full-speed USB device number 100 using dummy_hcd
[  525.626032][   T29] audit: type=1326 audit(1784318665.587:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.8.1037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc819de99 code=0x7ffc0000
[  525.652117][   T29] audit: type=1326 audit(1784318665.597:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.8.1037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f3fc819de99 code=0x7ffc0000
[  525.678928][   T29] audit: type=1326 audit(1784318665.597:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.8.1037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc819de99 code=0x7ffc0000
[  525.764321][ T9641] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  525.782169][   T29] audit: type=1326 audit(1784318665.627:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.8.1037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc819de99 code=0x7ffc0000
[  525.820958][ T9641] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  525.841307][ T9641] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  525.868752][   T29] audit: type=1326 audit(1784318665.627:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.8.1037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc819de99 code=0x7ffc0000
[  525.895469][ T9641] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  525.916667][ T9641] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  525.932109][ T9641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.946791][ T9641] usb 5-1: Product: syz
[  525.951293][ T9641] usb 5-1: Manufacturer: syz
[  525.965551][ T9641] usb 5-1: SerialNumber: syz
[  525.995758][T20032] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  526.263316][T20029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  526.727175][ T9647] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  526.896194][ T9647] usb 9-1: Using ep0 maxpacket: 16
[  526.927589][ T9647] usb 9-1: unable to get BOS descriptor or descriptor too short
[  526.959979][ T9647] usb 9-1: config 10 has an invalid interface number: 45 but max is 0
[  526.983603][ T9647] usb 9-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  527.022639][ T9647] usb 9-1: config 10 has no interface number 0
[  527.036106][ T9647] usb 9-1: config 10 interface 45 altsetting 248 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  527.059957][T20032] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  527.068714][ T9647] usb 9-1: config 10 interface 45 altsetting 248 endpoint 0xA has invalid wMaxPacketSize 0
[  527.093850][ T9647] usb 9-1: config 10 interface 45 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  527.128323][ T9647] usb 9-1: config 10 interface 45 has no altsetting 0
[  527.152280][ T9647] usb 9-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=66.41
[  527.167724][ T9647] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.179526][ T9647] usb 9-1: Product: syz
[  527.184721][ T9647] usb 9-1: Manufacturer: syz
[  527.190722][ T9647] usb 9-1: SerialNumber: syz
[  527.432992][T20066] netlink: 'syz.8.1039': attribute type 1 has an invalid length.
[  527.651536][T20066] 8021q: adding VLAN 0 to HW filter on device bond1
[  527.809666][ T9647] s2255 9-1:10.45: Could not find bulk-in endpoint
[  527.857068][ T9647] Sensoray 2255 driver load failed: 0xfffffff4
[  527.895209][ T9647] s2255 9-1:10.45: probe with driver s2255 failed with error -12
[  527.996593][ T9647] usb 9-1: USB disconnect, device number 23
[  528.004025][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  528.033398][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  528.045407][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  528.070501][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  528.086227][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  528.488400][ T9641] cdc_ncm 5-1:1.0: failed to get mac address
[  528.520431][ T9641] cdc_ncm 5-1:1.0: bind() failure
[  528.562047][ T9641] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  528.628275][ T9641] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  528.687964][ T9641] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  528.776144][ T9641] usb 5-1: USB disconnect, device number 100
[  529.315940][ T9641] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  529.493402][ T9641] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  529.548124][ T9641] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  529.576611][ T9641] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  529.605488][ T9641] usb 9-1: Product: syz
[  529.617903][ T9641] usb 9-1: Manufacturer: syz
[  529.624438][ T9641] usb 9-1: SerialNumber: syz
[  529.656461][T19706] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  529.796299][T19706] usb 6-1: device descriptor read/64, error -71
[  529.891029][ T9641] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  529.928581][T20113] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.945046][T20113] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.968094][T20113] bridge_slave_0: entered allmulticast mode
[  530.001218][T20113] bridge_slave_0: entered promiscuous mode
[  530.046322][T19706] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  530.073627][T20113] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.093231][T20113] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.105249][T20113] bridge_slave_1: entered allmulticast mode
[  530.133195][T20113] bridge_slave_1: entered promiscuous mode
[  530.199795][T16811] Bluetooth: hci3: command tx timeout
[  530.216003][T19706] usb 6-1: device descriptor read/64, error -71
[  530.348989][T19706] usb usb6-port1: attempt power cycle
[  530.414384][T20113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.457583][T20113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.715245][T19706] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  530.764527][T19706] usb 6-1: device descriptor read/8, error -71
[  530.918292][T20113] team0: Port device team_slave_0 added
[  530.939424][T20113] team0: Port device team_slave_1 added
[  531.037383][T19706] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  531.087815][T19706] usb 6-1: device descriptor read/8, error -71
[  531.118276][T20113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.152612][T20113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.217803][T19706] usb usb6-port1: unable to enumerate USB device
[  531.241167][T20113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.260826][   T29] kauditd_printk_skb: 132 callbacks suppressed
[  531.260858][   T29] audit: type=1326 audit(1784318671.667:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.4.1047" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  531.296028][   T29] audit: type=1326 audit(1784318671.667:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.4.1047" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  531.323123][   T29] audit: type=1326 audit(1784318671.707:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.4.1047" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  531.362751][T20113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.370186][T20113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.423917][   T29] audit: type=1326 audit(1784318671.707:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.4.1047" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  531.450027][T20113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.471754][   T29] audit: type=1326 audit(1784318671.707:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.4.1047" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  531.543397][   T29] audit: type=1326 audit(1784318671.707:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.4.1047" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  531.612870][   T29] audit: type=1326 audit(1784318671.707:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.4.1047" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  531.695947][   T29] audit: type=1326 audit(1784318671.707:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.4.1047" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  531.787549][   T29] audit: type=1326 audit(1784318671.707:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.4.1047" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  531.841889][   T29] audit: type=1326 audit(1784318671.707:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.4.1047" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  532.003116][T20113] hsr_slave_0: entered promiscuous mode
[  532.036250][ T5748] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  532.047311][T20113] hsr_slave_1: entered promiscuous mode
[  532.054033][T20113] debugfs: 'hsr0' already exists in 'hsr'
[  532.081789][T20113] Cannot create hsr debugfs directory
[  532.090246][ T9670] usb 9-1: USB disconnect, device number 24
[  532.179242][ T9670] usblp0: removed
[  532.219083][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  532.250747][ T5748] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  532.276991][T16811] Bluetooth: hci3: command tx timeout
[  532.289044][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.301005][ T5748] usb 5-1: config 0 descriptor??
[  532.307876][T20370] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  532.547502][T20369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.636598][T20369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.738834][ T5748] usbhid 5-1:0.0: can't add hid device: -71
[  532.768668][ T5748] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  532.799726][ T5748] usb 5-1: USB disconnect, device number 101
[  532.857137][ T9676] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  533.059203][ T9676] usb 9-1: Using ep0 maxpacket: 16
[  533.070722][ T9676] usb 9-1: unable to get BOS descriptor or descriptor too short
[  533.088395][ T9676] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  533.124372][ T9676] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  533.174993][ T9676] usb 9-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0
[  533.205397][ T9676] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  533.222144][ T9676] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.267553][ T9676] usb 9-1: Product: syz
[  533.291911][ T9676] usb 9-1: Manufacturer: syz
[  533.298186][ T5748] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  533.310098][ T9676] usb 9-1: SerialNumber: syz
[  533.519747][ T5748] usb 5-1: Using ep0 maxpacket: 8
[  533.569285][ T5748] usb 5-1: config 0 has no interfaces?
[  533.575340][ T5748] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  533.635404][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.748999][ T5748] usb 5-1: config 0 descriptor??
[  533.988779][T20463] bond1: (slave bond_slave_1): Device is not our slave
[  534.013361][T20463] bond1: option active_slave: invalid value (bond_slave_1)
[  534.047938][T20463] bond1 (unregistering): Released all slaves
[  534.358044][ T5645] Bluetooth: hci3: command tx timeout
[  535.348947][ T9676] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found
[  535.371892][ T9676] cdc_ncm 9-1:1.0: bind() failure
[  535.450368][ T9676] usb 9-1: USB disconnect, device number 25
[  535.630416][T20113] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  535.692265][T20113] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  535.742220][T20113] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  535.813915][T20113] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  535.838323][T20113] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  535.958191][T20113] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  535.988601][T20113] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  536.041329][T20113] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  536.058496][T20652] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1057'.
[  536.145365][ T9647] usb 5-1: USB disconnect, device number 102
[  536.446158][ T5645] Bluetooth: hci3: command tx timeout
[  536.564978][T20113] 8021q: adding VLAN 0 to HW filter on device bond0
[  536.599006][ T9647] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  536.702915][T20113] 8021q: adding VLAN 0 to HW filter on device team0
[  536.772995][   T91] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.776440][ T9647] usb 5-1: Using ep0 maxpacket: 32
[  536.780666][   T91] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.833890][ T9647] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  536.871202][ T9647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.916701][ T9647] usb 5-1: config 0 descriptor??
[  536.964044][T11936] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.971708][T11936] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.989676][ T9647] gspca_main: nw80x-2.14.0 probing 055f:d001
[  537.376215][ T9647] gspca_nw80x: reg_r err -32
[  537.391341][ T9647] nw80x 5-1:0.0: probe with driver nw80x failed with error -32
[  537.680671][T20113] 8021q: adding VLAN 0 to HW filter on device batadv0
[  537.882978][T20113] veth0_vlan: entered promiscuous mode
[  538.039335][T20113] veth1_vlan: entered promiscuous mode
[  538.258930][T20705] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1064'.
[  538.518150][T20113] veth0_macvtap: entered promiscuous mode
[  538.579148][T20113] veth1_macvtap: entered promiscuous mode
[  538.695179][T20113] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.731451][T20113] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.879961][ T9647] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  538.924534][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  538.924554][   T29] audit: type=1326 audit(1784318679.327:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20694 comm="syz.8.1063" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fc819de99 code=0x0
[  539.034581][  T138] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  539.036983][ T9647] usb 6-1: device descriptor read/64, error -71
[  539.088816][  T138] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  539.138106][  T138] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  539.166199][  T138] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  539.326031][ T9647] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  539.399895][T19706] usb 5-1: USB disconnect, device number 103
[  539.516868][ T9647] usb 6-1: device descriptor read/64, error -71
[  539.661216][T20752] netlink: 'syz.4.1066': attribute type 26 has an invalid length.
[  539.686319][ T9647] usb usb6-port1: attempt power cycle
[  539.692597][ T8321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.708080][T20752] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[  539.719676][ T8321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.828217][  T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.849717][  T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.872830][   T29] audit: type=1326 audit(1784318680.277:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20767 comm="syz.4.1068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  539.943015][   T29] audit: type=1326 audit(1784318680.277:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20767 comm="syz.4.1068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  540.023888][   T29] audit: type=1326 audit(1784318680.277:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20767 comm="syz.4.1068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  540.057109][ T9651] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  540.067607][ T9647] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  540.128242][ T9647] usb 6-1: device descriptor read/8, error -71
[  540.139931][   T29] audit: type=1326 audit(1784318680.277:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20767 comm="syz.4.1068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  540.201215][   T29] audit: type=1326 audit(1784318680.277:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20767 comm="syz.4.1068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  540.256029][T19706] usb 5-1: new low-speed USB device number 104 using dummy_hcd
[  540.266591][ T9651] usb 9-1: Using ep0 maxpacket: 8
[  540.285349][ T9651] usb 9-1: config 0 has no interfaces?
[  540.296784][ T9651] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  540.304771][   T29] audit: type=1326 audit(1784318680.277:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20767 comm="syz.4.1068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  540.331714][ T9651] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.354182][ T9651] usb 9-1: config 0 descriptor??
[  540.383471][   T29] audit: type=1326 audit(1784318680.277:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20767 comm="syz.4.1068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  540.396252][ T9647] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  540.433074][   T29] audit: type=1326 audit(1784318680.277:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20767 comm="syz.4.1068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  540.465486][   T29] audit: type=1326 audit(1784318680.277:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20767 comm="syz.4.1068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  540.478815][ T9647] usb 6-1: device descriptor read/8, error -71
[  540.502278][T19706] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  540.508190][T20784] loop5: detected capacity change from 0 to 7
[  540.512284][T19706] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  540.533712][T20784] Dev loop5: unable to read RDB block 7
[  540.537211][T19706] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  540.546783][T20784]  loop5: unable to read partition table
[  540.553301][T19706] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  540.559598][T20784] loop5: partition table beyond EOD, truncated
[  540.575639][T19706] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  540.591437][T19706] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  540.600399][T19706] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  540.612501][ T9647] usb usb6-port1: unable to enumerate USB device
[  540.620089][T19706] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  540.643443][T20784] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  540.649266][T19706] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  540.671910][T19706] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  540.719714][T19706] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  540.740805][T19706] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  540.783958][T19706] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  540.806310][T19706] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  540.820542][T19706] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  540.843298][T19706] usb 5-1: string descriptor 0 read error: -22
[  540.850567][T19706] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  540.860761][T19706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.901406][T19706] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  541.355177][T20813] bridge0: port 3(syz_tun) entered blocking state
[  541.362704][T20813] bridge0: port 3(syz_tun) entered disabled state
[  541.374266][T20813] syz_tun: entered allmulticast mode
[  541.382387][T20813] syz_tun: entered promiscuous mode
[  541.389385][T20813] bridge0: port 3(syz_tun) entered blocking state
[  541.399891][T20813] bridge0: port 3(syz_tun) entered forwarding state
[  541.458589][T20810] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  541.666356][ T9651] usb 10-1: new low-speed USB device number 2 using dummy_hcd
[  541.742891][T20829] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  541.843061][ T9651] usb 10-1: config 0 interface 0 altsetting 88 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  541.882394][ T9651] usb 10-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  541.911799][ T9651] usb 10-1: config 0 interface 0 has no altsetting 0
[  541.937375][ T9651] usb 10-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00
[  541.961797][ T9651] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.996069][ T9651] usb 10-1: config 0 descriptor??
[  542.008931][T20813] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22
[  542.045593][ T9651] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input32
[  542.215445][T20828] syz.5.1074 (20828): drop_caches: 2
[  542.369884][ T4977] bcm5974 10-1:0.0: could not read from device
[  542.389966][ T4977] bcm5974 10-1:0.0: could not read from device
[  542.414401][ T9651] usb 10-1: USB disconnect, device number 2
[  542.437610][ T4977] bcm5974 10-1:0.0: could not read from device
[  542.541771][ T5632] udevd[5632]: Error opening device "/dev/input/event4": No such file or directory
[  542.558080][ T5632] udevd[5632]: Unable to EVIOCGABS device "/dev/input/event4"
[  542.569326][ T5632] udevd[5632]: Unable to EVIOCGABS device "/dev/input/event4"
[  542.586759][ T5632] udevd[5632]: Unable to EVIOCGABS device "/dev/input/event4"
[  542.604444][ T5632] udevd[5632]: Unable to EVIOCGABS device "/dev/input/event4"
[  542.749931][ T9672] usb 9-1: USB disconnect, device number 26
[  543.145982][ T9635] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  543.340482][ T9635] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.358559][ T9635] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  543.395262][ T9635] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  543.404803][ T9635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.413045][ T9635] usb 6-1: Product: syz
[  543.417390][ T9635] usb 6-1: Manufacturer: syz
[  543.422050][ T9635] usb 6-1: SerialNumber: syz
[  543.576069][ T9672] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  543.634264][T20881] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1077'.
[  543.726117][ T9672] usb 9-1: device descriptor read/64, error -71
[  543.858953][T20917] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  543.887683][T20917] bond1 (unregistering): Released all slaves
[  543.976938][ T9672] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  544.136382][ T9672] usb 9-1: device descriptor read/64, error -71
[  544.256593][ T9672] usb usb9-port1: attempt power cycle
[  544.606136][ T9672] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  544.636922][ T9672] usb 9-1: device descriptor read/8, error -71
[  544.886009][ T9672] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  544.918024][ T9672] usb 9-1: device descriptor read/8, error -71
[  544.997372][ T5748] usb 5-1: USB disconnect, device number 104
[  545.037012][ T9672] usb usb9-port1: unable to enumerate USB device
[  545.100509][ T9635] usb 6-1: unit 4 not found!
[  545.190699][ T9635] usb 6-1: USB disconnect, device number 32
[  545.237975][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  545.305081][T21023] netlink: 'syz.9.1085': attribute type 6 has an invalid length.
[  545.313350][T21023] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1085'.
[  545.575962][ T9672] usb 5-1: new low-speed USB device number 105 using dummy_hcd
[  545.656796][ T5748] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  545.720239][ T9672] usb 5-1: device descriptor read/64, error -71
[  545.810993][ T5748] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[  545.819979][ T5748] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  545.832130][ T5748] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  545.842400][ T5748] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  545.852773][ T5748] usb 10-1: Manufacturer: syz
[  545.863412][ T5748] usb 10-1: config 0 descriptor??
[  545.966441][ T9672] usb 5-1: new low-speed USB device number 106 using dummy_hcd
[  545.978895][ T5748] rc_core: IR keymap rc-hauppauge not found
[  545.985376][ T5748] Registered IR keymap rc-empty
[  545.992483][ T5748] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  546.006196][ T5748] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input33
[  546.095939][ T9672] usb 5-1: device descriptor read/64, error -71
[  546.165969][ T9651] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  546.209356][ T9672] usb usb5-port1: attempt power cycle
[  546.325952][ T9651] usb 6-1: Using ep0 maxpacket: 8
[  546.349896][ T9651] usb 6-1: config 0 has no interfaces?
[  546.367326][ T9651] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  546.387608][ T9651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.404486][ T9651] usb 6-1: config 0 descriptor??
[  546.422855][ T9651] usb 10-1: USB disconnect, device number 3
[  546.566708][ T9672] usb 5-1: new low-speed USB device number 107 using dummy_hcd
[  546.607498][ T9672] usb 5-1: device descriptor read/8, error -71
[  546.865974][ T9672] usb 5-1: new low-speed USB device number 108 using dummy_hcd
[  546.899033][ T9672] usb 5-1: device descriptor read/8, error -71
[  546.920634][   T29] kauditd_printk_skb: 773 callbacks suppressed
[  546.920659][   T29] audit: type=1326 audit(1784318687.327:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21097 comm="syz.8.1091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fc819de99 code=0x0
[  547.017461][ T9672] usb usb5-port1: unable to enumerate USB device
[  548.401435][   T29] audit: type=1326 audit(1784318688.807:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.4.1096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  548.450724][   T29] audit: type=1326 audit(1784318688.807:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.4.1096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  548.502347][   T29] audit: type=1326 audit(1784318688.837:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.4.1096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  548.556184][   T29] audit: type=1326 audit(1784318688.837:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.4.1096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  548.616459][   T29] audit: type=1326 audit(1784318688.837:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.4.1096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  548.657589][   T29] audit: type=1326 audit(1784318688.847:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.4.1096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  548.739196][   T29] audit: type=1326 audit(1784318688.847:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.4.1096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  548.797199][   T29] audit: type=1326 audit(1784318688.857:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.4.1096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  548.847842][   T29] audit: type=1326 audit(1784318688.857:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21124 comm="syz.4.1096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x7ffc0000
[  548.878008][T21127] netlink: 'syz.4.1097': attribute type 29 has an invalid length.
[  548.891187][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'.
[  548.969009][T19706] usb 6-1: USB disconnect, device number 33
[  549.098409][T21138] loop4: detected capacity change from 0 to 2640
[  549.139300][T21138] buffer_io_error: 25 callbacks suppressed
[  549.139316][T21138] Buffer I/O error on dev loop4, logical block 0, async page read
[  549.155995][T21138] Buffer I/O error on dev loop4, logical block 0, async page read
[  549.157636][ T9676] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  549.164442][T21138] Buffer I/O error on dev loop4, logical block 0, async page read
[  549.213169][T21138] Buffer I/O error on dev loop4, logical block 0, async page read
[  549.213290][T21138] Buffer I/O error on dev loop4, logical block 0, async page read
[  549.213430][T21138] Buffer I/O error on dev loop4, logical block 0, async page read
[  549.213578][T21138] Buffer I/O error on dev loop4, logical block 0, async page read
[  549.213681][T21138] Buffer I/O error on dev loop4, logical block 0, async page read
[  549.213699][T21138] ldm_validate_partition_table(): Disk read failed.
[  549.213800][T21138] Buffer I/O error on dev loop4, logical block 0, async page read
[  549.213903][T21138] Buffer I/O error on dev loop4, logical block 0, async page read
[  549.214093][T21138] Dev loop4: unable to read RDB block 0
[  549.217602][T21138]  loop4: unable to read partition table
[  549.242723][T21138] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  549.320184][ T9676] usb 5-1: Using ep0 maxpacket: 16
[  549.322519][ T9676] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  549.322556][ T9676] usb 5-1: config 0 has no interface number 0
[  549.322585][ T9676] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  549.322605][ T9676] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  549.325045][ T9676] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  549.325069][ T9676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.325084][ T9676] usb 5-1: Product: syz
[  549.325096][ T9676] usb 5-1: Manufacturer: syz
[  549.325108][ T9676] usb 5-1: SerialNumber: syz
[  549.328447][ T9676] usb 5-1: config 0 descriptor??
[  549.333687][T21127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  549.333819][T21127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  549.497505][ T5748] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  549.543776][T21127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  549.590783][T21127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  549.758537][ T5748] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  549.771150][ T5748] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  549.781901][ T5748] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  549.793955][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.810795][ T9676] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  549.826858][ T9635] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  549.841360][T21138] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  549.859408][ T5748] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  550.024282][ T9635] usb 9-1: config 0 has an invalid interface number: 255 but max is 0
[  550.059328][ T9635] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  550.092314][ T9635] usb 9-1: config 0 has no interface number 0
[  550.103340][ T9635] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  550.137579][ T9635] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  550.153194][ T9635] usb 9-1: config 0 interface 255 has no altsetting 0
[  550.164534][ T9635] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41
[  550.175306][ T9635] usb 9-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2
[  550.188737][ T9635] usb 9-1: Product: syz
[  550.193036][ T9635] usb 9-1: SerialNumber: syz
[  550.230017][ T9635] usb 9-1: config 0 descriptor??
[  550.242200][ T5748] usb 6-1: USB disconnect, device number 34
[  550.471533][T21149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.510609][T21149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.535061][ T9635] ftdi_sio 9-1:0.255: FTDI USB Serial Device converter detected
[  550.564296][ T9635] usb 9-1: Detected SIO
[  550.577388][ T9635] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  550.594355][ T9635] usb 9-1: USB disconnect, device number 31
[  550.615567][ T9635] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  550.629651][ T9635] ftdi_sio 9-1:0.255: device disconnected
[  551.207828][ T9651] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  551.391377][ T9651] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  551.403818][ T9651] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  551.412726][ T9651] usb 10-1: Product: syz
[  551.421700][ T9651] usb 10-1: config 0 descriptor??
[  551.439060][ T9651] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected
[  551.451131][ T9651] usb 10-1: Detected FT232H
[  551.615957][ T9635] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  551.634954][ T9651] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  551.776031][ T9635] usb 9-1: Using ep0 maxpacket: 8
[  551.793841][ T9635] usb 9-1: config 0 has no interfaces?
[  551.808032][ T9635] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  551.821345][ T9635] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.846048][ T9635] usb 9-1: config 0 descriptor??
[  552.080174][ T9651] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  552.258258][T21247] fuse: Unknown parameter '0000000000000000000001001777777777777777777777}/ˆ@µVì3u+†@Ÿ¥@T<¿UÖ¿Y¶àéQéQô7õhí4qÕÃL&ûZë�¨Eí'˜wd†dþì|é@P�|êA”ý¾'
[  552.390517][ T9676] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  552.413028][ T9676] asix 5-1:0.34: probe with driver asix failed with error -71
[  552.471344][ T9676] usb 5-1: USB disconnect, device number 109
[  553.040385][T16811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  553.070637][T16811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  553.084017][T16811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  553.098796][T16811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  553.108773][T16811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  554.023933][ T9676] usb 10-1: USB disconnect, device number 4
[  554.144906][ T9676] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  554.188569][ T9676] ftdi_sio 10-1:0.0: device disconnected
[  554.226050][ T9635] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  554.408034][ T9635] usb 6-1: Using ep0 maxpacket: 8
[  554.431482][ T9635] usb 6-1: config 0 has no interfaces?
[  554.437205][ T9635] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  554.447305][ T9635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.464977][ T9635] usb 6-1: config 0 descriptor??
[  554.539067][ T9676] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  554.570696][T21303] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.579193][T21303] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.587714][T21303] bridge_slave_0: entered allmulticast mode
[  554.596658][T21303] bridge_slave_0: entered promiscuous mode
[  554.606187][T21303] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.613724][T21303] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.621273][T21303] bridge_slave_1: entered allmulticast mode
[  554.632552][T21303] bridge_slave_1: entered promiscuous mode
[  554.696834][T21303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.712339][T21303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.722541][ T9676] usb 10-1: Using ep0 maxpacket: 16
[  554.738297][ T9676] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.751743][ T9676] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.765058][ T9676] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  554.778614][ T9676] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  554.790219][ T9676] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.817584][ T9676] usb 10-1: config 0 descriptor??
[  554.847860][T19706] usb 9-1: USB disconnect, device number 32
[  554.915466][T21303] team0: Port device team_slave_0 added
[  554.941254][T21303] team0: Port device team_slave_1 added
[  555.011467][T21303] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.019045][T21303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.058148][T21303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.111133][T21303] batman_adv: batadv0: Adding interface: batadv_slave_1
[  555.129818][T21303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.160423][T21303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  555.237191][T16811] Bluetooth: hci4: command tx timeout
[  555.254130][ T9676] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max
[  555.328180][ T9676] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0015/input/input34
[  555.353519][T21303] hsr_slave_0: entered promiscuous mode
[  555.383586][T21303] hsr_slave_1: entered promiscuous mode
[  555.406877][T21303] debugfs: 'hsr0' already exists in 'hsr'
[  555.414812][T21303] Cannot create hsr debugfs directory
[  555.446452][ T9676] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[  555.562791][T21537] program syz.9.1113 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  556.036860][ T9651] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  556.120543][ T9672] usb 10-1: USB disconnect, device number 5
[  556.223864][ T9651] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  556.330883][ T9651] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  556.342092][ T9651] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  556.350925][ T9651] usb 9-1: Product: syz
[  556.355405][ T9651] usb 9-1: Manufacturer: syz
[  556.361249][ T9651] usb 9-1: SerialNumber: syz
[  556.655649][ T9651] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  557.019386][ T9672] usb 6-1: USB disconnect, device number 35
[  557.326693][T16811] Bluetooth: hci4: command tx timeout
[  558.182689][   T29] kauditd_printk_skb: 15 callbacks suppressed
[  558.182712][   T29] audit: type=1326 audit(1784318698.587:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.9.1117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80c8b9de99 code=0x0
[  559.278431][T19706] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  559.295662][ T9672] usb 9-1: USB disconnect, device number 33
[  559.353943][ T9672] usblp0: removed
[  559.397075][T16811] Bluetooth: hci4: command tx timeout
[  559.472210][T19706] usb 10-1: unable to get BOS descriptor or descriptor too short
[  559.512740][T19706] usb 10-1: config index 0 descriptor too short (expected 26766, got 142)
[  559.526970][T19706] usb 10-1: config 1 has too many interfaces: 173, using maximum allowed: 32
[  559.538550][T19706] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  559.586895][T19706] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 173
[  559.618969][T19706] usb 10-1: string descriptor 0 read error: -22
[  559.634759][T19706] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  559.648813][T19706] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.714787][T19706] usb 10-1: selecting invalid altsetting 1
[  559.737594][T19706] usb 10-1: unit 6 not found!
[  559.927610][T21709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  559.948029][ T9672] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  559.981331][T21709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.157724][ T9672] usb 9-1: Using ep0 maxpacket: 8
[  560.176932][ T9672] usb 9-1: config 0 has no interfaces?
[  560.194665][ T9672] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  560.227897][T21709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.244581][ T9672] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.265602][T21709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.311382][ T9672] usb 9-1: config 0 descriptor??
[  560.496496][ T9651] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  560.562328][T21709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.614770][T21709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.796865][T19706] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22
[  560.822726][T19706] usb 10-1: USB disconnect, device number 6
[  561.278594][ T9647] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  561.478327][T16811] Bluetooth: hci4: command tx timeout
[  561.503596][ T9647] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  561.528791][T21303] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  561.529286][ T9651] usb 5-1: new full-speed USB device number 111 using dummy_hcd
[  561.581230][T21303] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  561.602142][ T9647] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  561.614333][T21303] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  561.636303][ T9647] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  561.672016][ T9647] usb 6-1: Product: syz
[  561.672801][T21303] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  561.707157][ T9647] usb 6-1: Manufacturer: syz
[  561.707880][T21303] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  561.731598][ T9647] usb 6-1: SerialNumber: syz
[  561.754483][ T9651] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  561.765071][T21303] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  561.820348][ T9651] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  561.883014][T21303] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  561.902833][T21303] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  561.930585][ T9651] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  561.995897][ T9651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.045651][ T9651] usb 5-1: Product: syz
[  562.057794][ T9651] usb 5-1: Manufacturer: syz
[  562.092810][ T9651] usb 5-1: SerialNumber: syz
[  562.098961][ T9647] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  562.362694][ T9651] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  562.590886][T21303] 8021q: adding VLAN 0 to HW filter on device bond0
[  562.656270][ T9651] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  562.691929][ T9651] usb 5-1: USB disconnect, device number 111
[  562.703241][T21303] 8021q: adding VLAN 0 to HW filter on device team0
[  562.738241][T11930] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.747242][T11930] bridge0: port 1(bridge_slave_0) entered forwarding state
[  562.790686][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  562.826219][T11936] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.833920][T11936] bridge0: port 2(bridge_slave_1) entered forwarding state
[  562.985267][ T9651] usb 9-1: USB disconnect, device number 34
[  563.648057][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  563.654779][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  563.763326][T21303] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.196446][ T9647] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  564.364452][ T9676] usb 6-1: USB disconnect, device number 36
[  564.389793][ T9647] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  564.430628][T21303] veth0_vlan: entered promiscuous mode
[  564.444637][ T9676] usblp0: removed
[  564.524774][T21303] veth1_vlan: entered promiscuous mode
[  564.572488][ T9647] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  564.626090][ T9647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  564.684083][ T9647] usb 5-1: Product: syz
[  564.721068][ T9647] usb 5-1: Manufacturer: syz
[  564.774411][   T29] audit: type=1326 audit(1784318705.177:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21898 comm="syz.8.1130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fc819de99 code=0x0
[  564.800067][ T9647] usb 5-1: SerialNumber: syz
[  565.132631][ T9647] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 112 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  565.191559][T21303] veth0_macvtap: entered promiscuous mode
[  565.254736][T21303] veth1_macvtap: entered promiscuous mode
[  565.331017][ T9672] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  565.357147][T21303] batman_adv: batadv0: Interface activated: batadv_slave_0
[  565.429100][T21303] batman_adv: batadv0: Interface activated: batadv_slave_1
[  565.500602][   T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.525881][ T9672] usb 6-1: Using ep0 maxpacket: 8
[  565.531613][   T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.545737][   T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.549565][ T9672] usb 6-1: config 129 has an invalid interface number: 164 but max is 0
[  565.572927][ T9672] usb 6-1: config 129 has no interface number 0
[  565.592053][ T9672] usb 6-1: config 129 interface 164 has no altsetting 0
[  565.603384][   T65] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.632789][ T9672] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16
[  565.675836][ T9672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.713062][ T9672] usb 6-1: Product: syz
[  565.745191][ T9672] usb 6-1: Manufacturer: syz
[  565.770778][ T9672] usb 6-1: SerialNumber: syz
[  566.020051][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.061510][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.101671][ T9672] ums_eneub6250 6-1:129.164: USB Mass Storage device detected
[  566.223746][ T9672] usb 6-1: USB disconnect, device number 37
[  566.281082][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.319494][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.566032][ T9670] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  566.753370][ T9670] usb 9-1: unable to get BOS descriptor or descriptor too short
[  566.783253][ T9670] usb 9-1: config 4 has an invalid interface number: 138 but max is 0
[  566.805207][ T9670] usb 9-1: config 4 has no interface number 0
[  566.832205][ T9670] usb 9-1: config 4 interface 138 has no altsetting 0
[  566.843278][ T9672] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  566.876101][ T9670] usb 9-1: string descriptor 0 read error: -22
[  566.892998][ T9670] usb 9-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8
[  566.941714][ T9670] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.026067][ T9672] usb 2-1: Using ep0 maxpacket: 8
[  567.050123][ T9672] usb 2-1: config 0 has no interfaces?
[  567.068227][ T9672] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  567.100512][ T9672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.160805][ T9672] usb 2-1: config 0 descriptor??
[  567.209739][ T9670] catc 9-1:4.138: Missing or invalid endpoints
[  567.412805][T22009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.427376][ T9647] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  567.442453][T22009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.471123][T22009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.497359][T22013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.514878][T22013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.534800][T22009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.538630][ T9670] usb 5-1: USB disconnect, device number 112
[  567.588994][ T9670] usblp0: removed
[  567.604890][ T9647] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.638995][ T9647] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  567.653754][ T9647] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  567.692022][ T9651] usb 9-1: USB disconnect, device number 35
[  567.710087][ T9647] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  567.736959][ T9647] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.760634][ T9647] usb 6-1: config 0 descriptor??
[  568.166631][ T9670] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  568.232380][T22085] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1137'.
[  568.339333][ T9670] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  568.369825][ T9670] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  568.410138][ T9670] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fe4, bcdDevice= 0.40
[  568.426487][ T9670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.444998][ T9670] usb 5-1: Product: syz
[  568.454990][ T9670] usb 5-1: Manufacturer: syz
[  568.476036][ T9670] usb 5-1: SerialNumber: syz
[  568.761752][ T9670] usb 5-1: USB disconnect, device number 113
[  569.289816][T22121] netlink: 'syz.5.1140': attribute type 46 has an invalid length.
[  569.609010][ T9672] usb 2-1: USB disconnect, device number 40
[  570.114387][T22163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  570.174671][T22163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  570.570995][   T29] audit: type=1326 audit(1784318710.977:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.1.1147" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe44699de99 code=0x0
[  571.510735][   T29] audit: type=1326 audit(1784318711.917:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22147 comm="syz.4.1144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe75df9de99 code=0x0
[  572.837790][ T9647] usbhid 6-1:0.0: can't add hid device: -32
[  572.847859][ T9647] usbhid 6-1:0.0: probe with driver usbhid failed with error -32
[  572.908795][ T9672] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  573.096625][ T9672] usb 5-1: Using ep0 maxpacket: 16
[  573.112919][ T9672] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  573.151448][ T9672] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  573.179100][ T9672] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  573.266032][ T9672] usb 5-1: config 0 interface 0 has no altsetting 0
[  573.273056][ T9672] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00
[  573.317871][ T9672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.380051][ T9672] usb 5-1: config 0 descriptor??
[  573.636467][ T9647] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  573.780931][T22304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  573.830706][T22304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  573.858738][ T9647] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  573.897302][ T9672] topre 0003:0853:0146.0016: unknown main item tag 0x0
[  573.911991][ T9672] topre 0003:0853:0146.0016: unknown main item tag 0x0
[  573.935301][ T9672] topre 0003:0853:0146.0016: unknown main item tag 0x0
[  573.971324][ T9672] topre 0003:0853:0146.0016: unknown main item tag 0x0
[  573.973845][ T9647] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  574.004629][ T9672] topre 0003:0853:0146.0016: unknown main item tag 0x0
[  574.020182][ T9672] topre 0003:0853:0146.0016: unknown main item tag 0x0
[  574.027728][ T9672] topre 0003:0853:0146.0016: unknown main item tag 0x0
[  574.035493][ T9672] topre 0003:0853:0146.0016: unknown main item tag 0x0
[  574.070752][ T9647] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  574.088478][ T9647] usb 9-1: Product: syz
[  574.098531][ T9647] usb 9-1: Manufacturer: syz
[  574.114560][ T9672] topre 0003:0853:0146.0016: unknown main item tag 0x0
[  574.131902][ T9647] usb 9-1: SerialNumber: syz
[  574.147196][ T9672] topre 0003:0853:0146.0016: unknown main item tag 0x0
[  574.215622][ T9672] topre 0003:0853:0146.0016: hidraw0: USB HID v0.00 Device [HID 0853:0146] on usb-dummy_hcd.4-1/input0
[  574.284790][ T9672] usb 5-1: USB disconnect, device number 114
[  574.444503][ T9647] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  574.550038][T22318] fido_id[22318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  574.607036][T22334] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1154'.
[  574.845394][T22337] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  574.948563][T22337] bond1 (unregistering): Released all slaves
[  575.218133][ T9672] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  575.404435][ T9672] usb 5-1: Using ep0 maxpacket: 32
[  575.424181][ T9672] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  575.451836][ T9672] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  575.489596][ T9672] usb 5-1: config 0 interface 0 has no altsetting 0
[  575.524458][ T9672] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  575.555137][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.582385][ T9672] usb 5-1: Product: syz
[  575.598639][ T9672] usb 5-1: Manufacturer: syz
[  575.616387][ T9672] usb 5-1: SerialNumber: syz
[  575.667713][ T9672] usb 5-1: config 0 descriptor??
[  576.011156][T22424] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1157'.
[  576.032385][T22424] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1157'.
[  576.134089][ T9672] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  576.414942][T22434] fuse: Invalid uid '0x0000000000000004'
[  576.516307][T22434] syzkaller0: entered promiscuous mode
[  576.536549][T22434] syzkaller0: entered allmulticast mode
[  576.798021][ T9672] usb 5-1: USB disconnect, device number 115
[  577.129903][ T5723] usb 9-1: USB disconnect, device number 36
[  577.225136][ T5723] usblp0: removed
[  577.740700][ T9672] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  577.787217][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  577.806343][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  577.822681][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  577.831613][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  577.839722][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  578.017419][ T9672] usb 9-1: Using ep0 maxpacket: 8
[  578.073366][ T9672] usb 9-1: config 0 has no interfaces?
[  578.107211][ T9672] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  578.159899][ T9672] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.221678][ T9672] usb 9-1: config 0 descriptor??
[  578.438527][ T9676] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  578.648450][ T9676] usb 5-1: Using ep0 maxpacket: 8
[  578.692866][ T9676] usb 5-1: config 0 has no interfaces?
[  578.715866][ T9676] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  578.752898][ T9676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.786512][   T29] audit: type=1326 audit(1784318719.197:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22451 comm="syz.1.1159" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe44699de99 code=0x0
[  578.860717][ T9676] usb 5-1: config 0 descriptor??
[  579.285084][T22509] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.292828][T22509] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.300348][T22509] bridge_slave_0: entered allmulticast mode
[  579.309591][T22509] bridge_slave_0: entered promiscuous mode
[  579.321952][T22509] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.332507][T22509] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.358383][T22509] bridge_slave_1: entered allmulticast mode
[  579.400677][T22509] bridge_slave_1: entered promiscuous mode
[  579.648778][T22509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  579.728851][T22509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  579.832546][T22677] fuse: Unknown parameter 'group€id'
[  579.957743][T16811] Bluetooth: hci5: command tx timeout
[  580.035524][T22509] team0: Port device team_slave_0 added
[  580.073445][T22509] team0: Port device team_slave_1 added
[  580.257801][T22509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  580.274116][T22509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  580.334586][T22509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  580.380190][T22509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  580.393979][T22509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  580.434168][T22509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  580.840629][T22509] hsr_slave_0: entered promiscuous mode
[  580.875463][T22509] hsr_slave_1: entered promiscuous mode
[  580.888698][ T9651] usb 9-1: USB disconnect, device number 37
[  580.931553][T22509] debugfs: 'hsr0' already exists in 'hsr'
[  580.961634][T22509] Cannot create hsr debugfs directory
[  581.401857][   T29] audit: type=1326 audit(1784318721.807:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22796 comm="syz.5.1172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  581.496729][   T29] audit: type=1326 audit(1784318721.807:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22796 comm="syz.5.1172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  581.580186][   T29] audit: type=1326 audit(1784318721.837:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22796 comm="syz.5.1172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  581.650961][ T9672] usb 5-1: USB disconnect, device number 116
[  581.748505][   T29] audit: type=1326 audit(1784318721.837:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22796 comm="syz.5.1172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  581.857167][   T29] audit: type=1326 audit(1784318721.837:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22796 comm="syz.5.1172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  581.955598][   T29] audit: type=1326 audit(1784318721.837:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22796 comm="syz.5.1172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  582.032983][   T29] audit: type=1326 audit(1784318721.837:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22796 comm="syz.5.1172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  582.038992][T16811] Bluetooth: hci5: command tx timeout
[  582.237364][   T29] audit: type=1326 audit(1784318721.837:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22796 comm="syz.5.1172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  582.384715][   T29] audit: type=1326 audit(1784318721.837:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22796 comm="syz.5.1172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  583.396312][ T9676] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  583.606601][ T9676] usb 5-1: Using ep0 maxpacket: 8
[  583.623279][ T9676] usb 5-1: config 0 has no interfaces?
[  583.641060][ T9676] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  583.694613][ T9676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.714378][T22939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.739620][ T9676] usb 5-1: config 0 descriptor??
[  583.764933][T22939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.124185][ T5645] Bluetooth: hci5: command tx timeout
[  584.753052][ T5723] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  584.927463][ T5723] usb 9-1: Using ep0 maxpacket: 8
[  584.934924][ T5723] usb 9-1: config 0 has no interfaces?
[  584.954719][ T5723] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  584.988474][ T5723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.019868][ T5723] usb 9-1: config 0 descriptor??
[  585.291683][T23019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.322235][T23019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.199598][T22961] Bluetooth: hci5: command tx timeout
[  586.202350][ T5646] Bluetooth: hci0: command 0x0406 tx timeout
[  586.314191][T22509] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  586.395438][T22509] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  586.433997][T22509] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  586.464152][ T9672] usb 5-1: USB disconnect, device number 117
[  586.512280][T22509] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  586.541456][T22509] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  586.619541][T22509] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  586.643215][T22509] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  586.665272][T23075] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1185'.
[  586.714994][T22509] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  586.768913][T23075] gretap0: entered promiscuous mode
[  586.946044][ T5723] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  587.125898][ T5723] usb 5-1: Using ep0 maxpacket: 16
[  587.147505][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  587.193704][ T5723] usb 5-1: config 0 has no interfaces?
[  587.210515][ T5723] usb 5-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d
[  587.242227][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.263420][ T5723] usb 5-1: Product: syz
[  587.274935][ T5723] usb 5-1: Manufacturer: syz
[  587.300929][ T5723] usb 5-1: SerialNumber: syz
[  587.343689][ T5723] usb 5-1: config 0 descriptor??
[  587.436860][ T9670] usb 9-1: USB disconnect, device number 38
[  587.825703][T22509] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.931863][T22509] 8021q: adding VLAN 0 to HW filter on device team0
[  587.942220][ T9670] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  587.985063][T11928] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.992514][T11928] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.049685][T11928] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.056985][T11928] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.133031][T23166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.142887][ T9670] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  588.166035][ T9670] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.177922][T23166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.218927][ T9670] usb 9-1: config 0 descriptor??
[  588.373668][T22509] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.503176][T22509] veth0_vlan: entered promiscuous mode
[  588.529011][T22509] veth1_vlan: entered promiscuous mode
[  588.536215][ T5723] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  588.610144][T22509] veth0_macvtap: entered promiscuous mode
[  588.631324][T22509] veth1_macvtap: entered promiscuous mode
[  588.709374][T22509] batman_adv: batadv0: Interface activated: batadv_slave_0
[  588.718914][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  588.743324][ T5723] usb 2-1: New USB device found, idVendor=046d, idProduct=101a, bcdDevice= 0.00
[  588.769237][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.792887][T23187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.802973][ T5723] usb 2-1: config 0 descriptor??
[  588.812953][T22509] batman_adv: batadv0: Interface activated: batadv_slave_1
[  588.829488][T23176] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22
[  588.844868][T23187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.884922][T11935] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  588.928750][ T8321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  588.961487][ T8321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  588.973721][ T8321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  589.317304][ T9670] ath6kl: Failed to submit usb control message: -110
[  589.341960][ T5723] hid_parser_main: 28 callbacks suppressed
[  589.341990][ T5723] hid-generic 0003:046D:101A.0017: unknown main item tag 0x0
[  589.346167][ T9670] ath6kl: unable to send the bmi data to the device: -110
[  589.366714][ T8321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.393705][ T5723] hid-generic 0003:046D:101A.0017: unknown main item tag 0x0
[  589.412694][ T8321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.430722][ T5723] hid-generic 0003:046D:101A.0017: unknown main item tag 0x0
[  589.437728][ T9670] ath6kl: Unable to send get target info: -110
[  589.464762][ T5723] hid-generic 0003:046D:101A.0017: unknown main item tag 0x0
[  589.478933][ T9670] ath6kl: Failed to init ath6kl core: -110
[  589.491791][ T9670] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -110
[  589.504120][T23176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  589.525962][T23176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  589.536405][ T5723] hid-generic 0003:046D:101A.0017: unknown main item tag 0x0
[  589.549179][ T5723] hid-generic 0003:046D:101A.0017: unknown main item tag 0x0
[  589.578571][ T8321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.589026][ T5723] hid-generic 0003:046D:101A.0017: unknown main item tag 0x0
[  589.600039][ T5723] hid-generic 0003:046D:101A.0017: unknown main item tag 0x0
[  589.612357][ T8321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.650926][ T5723] hid-generic 0003:046D:101A.0017: unknown main item tag 0x0
[  589.660196][ T5723] hid-generic 0003:046D:101A.0017: unknown main item tag 0x0
[  589.760740][ T9676] usb 5-1: USB disconnect, device number 118
[  589.802270][ T5723] hid-generic 0003:046D:101A.0017: hidraw0: USB HID v7f.fd Device [HID 046d:101a] on usb-dummy_hcd.1-1/input0
[  589.906881][ T5723] usb 2-1: USB disconnect, device number 41
[  590.124009][T23228] fido_id[23228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  590.493808][T23267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1195'.
[  590.525961][ T5723] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  590.627197][ T9647] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  590.704639][ T5723] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  590.726965][ T5723] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  590.758588][ T5723] usb 2-1: config 220 has no interface number 2
[  590.791081][ T5723] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  590.812018][ T9647] usb 4-1: Using ep0 maxpacket: 8
[  590.840863][ T9647] usb 4-1: config 0 has no interfaces?
[  590.856049][ T9647] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  590.870942][ T5723] usb 2-1: config 220 interface 0 has no altsetting 0
[  590.885108][ T9647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.893855][ T5723] usb 2-1: config 220 interface 76 has no altsetting 0
[  590.901786][ T5723] usb 2-1: config 220 interface 1 has no altsetting 0
[  590.916572][ T9647] usb 4-1: config 0 descriptor??
[  590.925962][ T5723] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  590.961176][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.978951][ T5723] usb 2-1: Product: syz
[  590.990469][ T5723] usb 2-1: Manufacturer: syz
[  591.009673][T23279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.021602][ T5723] usb 2-1: SerialNumber: syz
[  591.048397][T23279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.282142][ T5723] usb 2-1: selecting invalid altsetting 0
[  591.345512][ T5723] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  591.370569][ T5723] uvcvideo 2-1:220.0: No valid video chain found.
[  591.412577][ T5723] usb 2-1: selecting invalid altsetting 0
[  591.441743][ T5723] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  591.490975][ T5723] usb 2-1: USB disconnect, device number 42
[  592.006008][T23200] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  592.205906][T23200] usb 5-1: Using ep0 maxpacket: 8
[  592.224544][T23200] usb 5-1: config 0 has no interfaces?
[  592.243473][T23339] trusted_key: encrypted_key: insufficient parameters specified
[  592.244785][T23200] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  592.244826][T23200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.270520][T23200] usb 5-1: config 0 descriptor??
[  592.705122][T23357] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1200'.
[  593.380097][ T9676] usb 4-1: USB disconnect, device number 55
[  594.037989][ T9670] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  594.297493][ T9670] usb 4-1: Using ep0 maxpacket: 32
[  594.331610][ T9670] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  594.391649][ T9670] usb 4-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40
[  594.422312][ T9670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.436203][ T9670] usb 4-1: Product: syz
[  594.440995][ T9670] usb 4-1: Manufacturer: syz
[  594.448876][ T9670] usb 4-1: SerialNumber: syz
[  594.474561][ T9670] usb 4-1: 1:1 : incorrect wMaxPacketSize for BADD profile
[  594.605343][ T9672] usb 5-1: USB disconnect, device number 119
[  594.690523][ T9670] usb 4-1: incorrect wMaxPacketSize 0x40 for BADD profile
[  594.812494][ T9670] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  594.953113][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  595.250183][ T9670] usb 4-1: USB disconnect, device number 56
[  595.592572][T23487] bond1: (slave bond_slave_1): Device is not our slave
[  595.658296][T23487] bond1: option active_slave: invalid value (bond_slave_1)
[  595.680848][T23487] bond1 (unregistering): Released all slaves
[  596.033849][T23529] geneve1: entered promiscuous mode
[  596.051254][T23574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1206'.
[  596.363676][T23587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.390809][T23587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.439205][ T5646] Bluetooth: hci2: command 0x0406 tx timeout
[  596.477886][   T29] kauditd_printk_skb: 39 callbacks suppressed
[  596.477908][   T29] audit: type=1800 audit(1784318736.887:1843): pid=23590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1208" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  597.285377][T23610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1209'.
[  597.427079][T23624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.453333][T23624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.774132][T23638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'.
[  598.302838][T23653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.387548][T23653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.641787][T23694] bond1: (slave bond_slave_1): Device is not our slave
[  599.694101][T23694] bond1: option active_slave: invalid value (bond_slave_1)
[  599.742850][T23694] bond1 (unregistering): Released all slaves
[  600.520552][T23773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  600.568940][T23772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  600.617263][T23773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  600.662095][T23772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  600.940723][T23789] netlink: 'syz.4.1219': attribute type 10 has an invalid length.
[  600.959190][T23789] ipvlan0: entered allmulticast mode
[  600.978381][T23789] team0: Device ipvlan0 failed to register rx_handler
[  601.516052][ T9670] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  601.696075][ T9670] usb 5-1: Using ep0 maxpacket: 8
[  601.705274][T23819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.727680][ T9670] usb 5-1: config 0 has no interfaces?
[  601.745882][ T9670] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  601.752429][T23819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.770312][ T9670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.801982][ T9670] usb 5-1: config 0 descriptor??
[  602.115954][ T5723] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  602.285972][ T9670] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  602.371181][ T5723] usb 2-1: Using ep0 maxpacket: 8
[  602.382061][ T5723] usb 2-1: config 0 has no interfaces?
[  602.395937][ T5723] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  602.415894][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.437076][ T9670] usb 4-1: Using ep0 maxpacket: 16
[  602.445286][ T5723] usb 2-1: config 0 descriptor??
[  602.489368][ T9670] usb 4-1: unable to get BOS descriptor or descriptor too short
[  602.521828][ T9670] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  602.545520][ T9670] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  602.710540][ T9670] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  602.729805][ T9670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.747024][ T9670] usb 4-1: Product: syz
[  602.753747][ T9670] usb 4-1: Manufacturer: syz
[  602.763175][ T9670] usb 4-1: SerialNumber: syz
[  603.041116][ T9670] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  603.073264][ T9670] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  603.333003][T23862] team_slave_1: entered promiscuous mode
[  603.352947][T23862] team_slave_1: entered allmulticast mode
[  603.424783][ T5646] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  603.447680][ T5646] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  603.464045][ T5646] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  603.474150][ T5646] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  603.483992][ T5646] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  604.364848][ T5723] usb 5-1: USB disconnect, device number 120
[  604.953917][T23876] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.961490][T23876] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.970047][T23876] bridge_slave_0: entered allmulticast mode
[  604.979556][T23876] bridge_slave_0: entered promiscuous mode
[  604.990877][T23876] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.999770][T23876] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.012811][T23876] bridge_slave_1: entered allmulticast mode
[  605.023237][T23876] bridge_slave_1: entered promiscuous mode
[  605.190757][T23876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  605.224877][ T9670] usb 4-1: USB disconnect, device number 57
[  605.250592][T23876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  605.317070][T23200] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  605.360534][T24048] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  605.368352][ T5723] usb 2-1: USB disconnect, device number 43
[  605.469830][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  605.525907][T23200] usb 5-1: Using ep0 maxpacket: 16
[  605.543081][T23200] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  605.558115][T16811] Bluetooth: hci8: command tx timeout
[  605.576001][T23200] usb 5-1: config 0 has no interface number 0
[  605.583132][T23200] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  605.602150][T23200] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  605.615562][T23200] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  605.625363][T23200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.634065][T23200] usb 5-1: Product: syz
[  605.638873][T23200] usb 5-1: Manufacturer: syz
[  605.643917][T23200] usb 5-1: SerialNumber: syz
[  605.689238][T23200] usb 5-1: config 0 descriptor??
[  605.700176][T23999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  605.725077][T23999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  605.751538][T24092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  605.768132][T24092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  605.795582][T23876] team0: Port device team_slave_0 added
[  605.827723][T23876] team0: Port device team_slave_1 added
[  605.950358][T23999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  605.985578][T23999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  606.049058][T23876] batman_adv: batadv0: Adding interface: batadv_slave_0
[  606.056523][T23876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  606.087350][T24101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'.
[  606.108424][T23876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  606.130392][T23876] batman_adv: batadv0: Adding interface: batadv_slave_1
[  606.138894][T23876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  606.172443][T23876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  606.238968][T23200] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  606.252052][T23200] asix 5-1:0.34: probe with driver asix failed with error -61
[  606.286580][ T9651] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  606.410713][T23876] hsr_slave_0: entered promiscuous mode
[  606.428185][T23876] hsr_slave_1: entered promiscuous mode
[  606.440985][T23876] debugfs: 'hsr0' already exists in 'hsr'
[  606.448105][T23876] Cannot create hsr debugfs directory
[  606.467864][ T9651] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  606.499279][ T9651] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  606.528762][ T9651] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  606.554215][ T9651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.594664][ T9651] usb 4-1: Product: syz
[  606.609877][ T9651] usb 4-1: Manufacturer: syz
[  606.623428][ T9651] usb 4-1: SerialNumber: syz
[  606.644232][T24155] bond1: (slave bond_slave_1): Device is not our slave
[  606.663842][T24155] bond1: option active_slave: invalid value (bond_slave_1)
[  606.676282][ T9651] usb 4-1: config 0 descriptor??
[  606.714415][T24155] bond1 (unregistering): Released all slaves
[  606.920405][ T9651] usb 4-1: USB disconnect, device number 58
[  607.652499][T16811] Bluetooth: hci8: command tx timeout
[  607.787676][T24290] ptrace attach of ""[24303] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[24290]
[  607.967872][ T9635] usb 5-1: USB disconnect, device number 121
[  608.156735][T24320] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1240'.
[  608.195518][T24320] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1240'.
[  608.520479][ T9635] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  608.638151][T24341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.707159][T24341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.739632][T24340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.755054][ T9635] usb 5-1: Using ep0 maxpacket: 8
[  608.798511][T24340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.800070][ T9635] usb 5-1: config 0 has no interfaces?
[  608.865705][ T9635] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  608.911907][ T9635] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.975432][ T9635] usb 5-1: config 0 descriptor??
[  608.993433][T24340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  609.036902][T24340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.252895][T24364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1244'.
[  609.430852][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'.
[  609.550719][T24364] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1244'.
[  609.721249][T16811] Bluetooth: hci8: command tx timeout
[  609.962882][T24378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  609.988776][T24378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.031382][T24387] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1246'.
[  611.031691][T24419] program syz.5.1250 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  611.228388][   T29] audit: type=1326 audit(1784318751.627:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24401 comm="syz.3.1248" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8c099de99 code=0x0
[  611.322030][T24406] xt_CT: No such helper "netbios-ns"
[  611.397998][ T9647] usb 5-1: USB disconnect, device number 122
[  611.455642][T24435] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776
[  611.509161][T24435] PKCS7: Only support pkcs7_signedData type
[  611.796255][T16811] Bluetooth: hci8: command tx timeout
[  611.829534][T23200] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  611.873508][T24456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.932544][ T9670] hid_parser_main: 466 callbacks suppressed
[  611.932572][ T9670] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  611.972440][T24456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.039059][ T9670] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  612.046303][ T9647] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[  612.060844][T23200] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  612.101949][T23200] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  612.145591][T23200] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  612.182670][T23876] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  612.249764][T23200] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  612.267945][ T9647] usb 5-1: Using ep0 maxpacket: 16
[  612.275549][T23876] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  612.292411][T23200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  612.303651][T23876] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  612.318274][ T9647] usb 5-1: unable to get BOS descriptor or descriptor too short
[  612.328170][T23200] usb 4-1: Product: syz
[  612.337397][ T9647] usb 5-1: config 5 has an invalid interface number: 21 but max is 0
[  612.351925][T23200] usb 4-1: Manufacturer: syz
[  612.379799][ T9647] usb 5-1: config 5 has no interface number 0
[  612.388899][T23200] usb 4-1: SerialNumber: syz
[  612.397329][T23876] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  612.415367][ T9647] usb 5-1: config 5 interface 21 has no altsetting 0
[  612.430086][T23876] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  612.455599][ T9647] usb 5-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=93.d3
[  612.480408][ T9647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.495459][T23876] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  612.521585][ T9647] usb 5-1: Product: syz
[  612.535690][T23876] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  612.542757][ T9647] usb 5-1: Manufacturer: syz
[  612.558908][ T9647] usb 5-1: SerialNumber: syz
[  612.602655][T23876] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  612.855387][ T9647] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  612.946932][ T9647] usb 5-1: USB disconnect, device number 123
[  613.312137][T23876] 8021q: adding VLAN 0 to HW filter on device bond0
[  613.388782][T24503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1257'.
[  613.428501][T23876] 8021q: adding VLAN 0 to HW filter on device team0
[  613.501134][T23399] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.508796][T23399] bridge0: port 1(bridge_slave_0) entered forwarding state
[  613.858085][T24513] program syz.4.1258 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  614.330668][   T91] bridge0: port 2(bridge_slave_1) entered blocking state
[  614.337971][   T91] bridge0: port 2(bridge_slave_1) entered forwarding state
[  615.360561][T23876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  615.502908][ T5723] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  615.709013][ T5723] usb 2-1: Using ep0 maxpacket: 8
[  615.746647][ T5723] usb 2-1: config 0 has no interfaces?
[  615.777670][ T5723] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  615.830555][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.881736][T23876] veth0_vlan: entered promiscuous mode
[  615.921691][ T5723] usb 2-1: config 0 descriptor??
[  616.017662][T23876] veth1_vlan: entered promiscuous mode
[  616.038810][T23200] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  616.122418][T23200] usb 4-1: USB disconnect, device number 59
[  616.191991][T23200] usblp0: removed
[  616.241807][T23876] veth0_macvtap: entered promiscuous mode
[  616.302801][T23876] veth1_macvtap: entered promiscuous mode
[  616.382909][T23876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  616.438615][T23876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  616.495887][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  616.523064][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  616.555650][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  616.597688][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  616.638400][T24577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.677767][T24577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.919201][T24585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.930313][T24584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1267'.
[  616.980639][T24577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.022286][T24585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.043991][T24577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.057721][T24585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.087234][T24584] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1267'.
[  617.102372][T24585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.102860][T24597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.150386][T24597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.216281][   T29] audit: type=1326 audit(1784318757.627:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24576 comm="syz.5.1266" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  617.343379][   T29] audit: type=1326 audit(1784318757.627:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24576 comm="syz.5.1266" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  617.456144][T23399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.478461][T23399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.481505][   T29] audit: type=1326 audit(1784318757.677:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24576 comm="syz.5.1266" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  617.670640][   T29] audit: type=1326 audit(1784318757.687:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24576 comm="syz.5.1266" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  617.790755][   T29] audit: type=1326 audit(1784318757.687:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24576 comm="syz.5.1266" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  617.862998][T23402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.894318][   T29] audit: type=1326 audit(1784318757.687:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24576 comm="syz.5.1266" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  617.925641][T23402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.990762][   T29] audit: type=1326 audit(1784318757.737:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24576 comm="syz.5.1266" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa9a0b9de99 code=0x7ffc0000
[  618.253050][T23200] usb 2-1: USB disconnect, device number 44
[  618.325951][ T9651] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[  618.568143][ T9651] usb 5-1: Using ep0 maxpacket: 32
[  618.599789][ T9651] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  618.639232][ T9651] usb 5-1: config 0 interface 0 has no altsetting 0
[  618.667134][ T9651] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  618.714489][ T9651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.762467][ T9651] usb 5-1: Product: syz
[  618.785268][ T9651] usb 5-1: Manufacturer: syz
[  618.812040][ T9651] usb 5-1: SerialNumber: syz
[  618.867693][ T9651] usb 5-1: config 0 descriptor??
[  618.939001][ T9651] gs_usb 5-1:0.0: Required endpoints not found
[  619.135966][ T9672] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  619.335918][ T9672] usb 3-1: device descriptor read/64, error -71
[  619.355985][ T5723] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  619.610232][ T5723] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  619.658823][ T9672] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  619.706789][ T5723] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  619.745550][T24680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  619.759020][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  619.798584][ T5723] usb 2-1: Product: syz
[  619.809945][ T5723] usb 2-1: Manufacturer: syz
[  619.834747][ T5723] usb 2-1: SerialNumber: syz
[  619.856808][T24680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  619.866828][ T9672] usb 3-1: device descriptor read/64, error -71
[  619.879171][T24681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  619.939768][T24681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.006522][ T9672] usb usb3-port1: attempt power cycle
[  620.050097][T24680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.085643][T24680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.168917][ T5723] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  620.386874][ T9672] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  620.443012][ T9672] usb 3-1: device descriptor read/8, error -71
[  620.716259][ T9672] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  620.761936][ T9672] usb 3-1: device descriptor read/8, error -71
[  620.910910][ T9672] usb usb3-port1: unable to enumerate USB device
[  621.489870][T24729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.533581][T24729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  622.048826][T23200] usb 5-1: USB disconnect, device number 124
[  622.211607][T24744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  622.295326][T24744] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1279'.
[  622.878399][T23200] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  623.068487][T23200] usb 3-1: Using ep0 maxpacket: 8
[  623.088136][T23200] usb 3-1: config 0 has no interfaces?
[  623.106035][T23200] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  623.179022][T23200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.234638][T23200] usb 3-1: config 0 descriptor??
[  623.302545][T23200] usb 2-1: USB disconnect, device number 45
[  623.354347][T23200] usblp0: removed
[  624.612368][T24802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'.
[  624.726615][T24803] input: syz0 as /devices/virtual/input/input35
[  624.846442][T24798] loop6: detected capacity change from 0 to 524288000
[  625.087790][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  625.100601][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  625.746292][ T9676] usb 3-1: USB disconnect, device number 62
[  626.003230][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'.
[  626.014946][T24848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.059851][T24846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'.
[  626.078324][T24848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.327253][ T9676] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  626.545041][ T9676] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  626.563749][ T9676] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  626.576077][ T9676] usb 3-1: Product: syz
[  626.580549][ T9676] usb 3-1: Manufacturer: syz
[  626.586663][ T9676] usb 3-1: SerialNumber: syz
[  626.633315][ T9676] usb 3-1: config 0 descriptor??
[  626.680829][ T9676] ch341 3-1:0.0: ch341-uart converter detected
[  626.881936][ T9676] usb 3-1: failed to receive control message: -32
[  626.905438][ T9676] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32
[  627.311438][T24898] fuse: Bad value for 'fd'
[  627.616761][T24905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.658090][T24905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.828670][T24926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1298'.
[  628.924630][T24928] netlink: 'syz.4.1298': attribute type 10 has an invalid length.
[  629.066750][ T9651] usb 3-1: USB disconnect, device number 63
[  629.151217][ T9651] ch341 3-1:0.0: device disconnected
[  629.215416][T24880] A link change request failed with some changes committed already. Interface szkaller0 may have been left with an inconsistent configuration, please check.
[  629.475521][   T29] audit: type=1326 audit(1784318769.867:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.2.1299" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f577179de99 code=0x0
[  630.267732][T24928] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  630.332502][T24928] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  631.747789][ T9676] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  631.912289][T24990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  631.943158][   T29] audit: type=1326 audit(1784318772.347:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24989 comm="syz.5.1303" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9a0b9de99 code=0x0
[  631.976557][T24990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  631.986542][ T9676] usb 5-1: Using ep0 maxpacket: 8
[  632.014893][ T9676] usb 5-1: config 0 has no interfaces?
[  632.026112][ T9676] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  632.065441][ T9676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.179191][ T9676] usb 5-1: config 0 descriptor??
[  632.466126][ T9641] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  632.565172][T25014] loop6: detected capacity change from 0 to 524288000
[  632.682761][ T9641] usb 4-1: Using ep0 maxpacket: 16
[  632.716497][ T9641] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  632.749723][ T9641] usb 4-1: config 0 has no interface number 0
[  632.776116][ T9641] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  632.808700][ T9641] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  632.870737][ T9641] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  632.885944][ T5633] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  632.923145][ T9641] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  632.965016][ T9641] usb 4-1: Product: syz
[  632.980759][ T9641] usb 4-1: SerialNumber: syz
[  633.008495][ T9641] usb 4-1: config 0 descriptor??
[  633.042997][T25010] Invalid logical block size (255)
[  633.055006][ T9641] cm109 4-1:0.8: invalid payload size 0, expected 4
[  633.079417][ T9641] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input36
[  633.099084][ T5633] usb 3-1: Using ep0 maxpacket: 8
[  633.136162][ T5633] usb 3-1: unable to get BOS descriptor or descriptor too short
[  633.162015][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  633.179852][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  633.208579][   T29] audit: type=1800 audit(1784318773.607:1854): pid=25033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1309" name="/" dev="fuse" ino=1 res=0 errno=0
[  633.242597][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  633.281696][ T5633] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  633.302889][   T29] audit: type=1800 audit(1784318773.687:1855): pid=25033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1309" name="/" dev="fuse" ino=1 res=0 errno=0
[  633.339538][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  633.353918][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  633.367302][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  633.374963][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  633.382349][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  633.390113][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  633.398262][ T9641] usb 4-1: USB disconnect, device number 60
[  633.405209][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  633.405342][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  633.415504][ T5633] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44
[  633.474288][ T9641] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  633.542260][ T5633] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  633.553554][ T5633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.592798][ T5633] usb 3-1: Product: syz
[  633.615454][ T5633] usb 3-1: Manufacturer: syz
[  633.640381][ T5633] usb 3-1: SerialNumber: syz
[  633.669586][ T5633] usb 3-1: config 0 descriptor??
[  633.698540][T25019] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22
[  633.723782][T25019] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22
[  633.770904][ T5633] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  634.033511][   T29] audit: type=1326 audit(1784318774.437:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25018 comm="syz.2.1308" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f577179de99 code=0x0
[  634.131279][T25079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'.
[  634.159025][T25081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'.
[  634.428964][ T9641] usb 5-1: USB disconnect, device number 125
[  634.901948][T25126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.940770][T25126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  635.872305][ T9672] usb 3-1: USB disconnect, device number 64
[  635.876287][ T9641] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[  636.246025][ T5633] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  636.448416][ T9641] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  636.493161][ T9641] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  636.564075][ T9641] usb 2-1: config 0 interface 0 has no altsetting 0
[  636.641599][ T9641] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  636.695327][ T9641] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  636.725555][ T9641] usb 2-1: Product: syz
[  636.763095][ T9641] usb 2-1: Manufacturer: syz
[  636.897411][ T9641] usb 2-1: SerialNumber: syz
[  636.911222][ T9641] usb 2-1: config 0 descriptor??
[  636.945921][ T5633] usb 4-1: Using ep0 maxpacket: 8
[  637.043041][ T9641] usb 2-1: selecting invalid altsetting 0
[  637.050742][ T5633] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  637.106762][ T5633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.115279][ T5633] usb 4-1: Product: syz
[  637.119872][ T5633] usb 4-1: Manufacturer: syz
[  637.124648][ T5633] usb 4-1: SerialNumber: syz
[  637.133092][ T5633] usb 4-1: config 0 descriptor??
[  637.142850][ T5633] gspca_main: se401-2.14.0 probing 047d:5003
[  637.374652][ T5633] gspca_se401: Bayer format not supported!
[  637.392821][T25187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.445221][T25187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.465499][T25136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.553313][T25136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.581236][ T5723] usb 4-1: USB disconnect, device number 61
[  638.048054][T25191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  638.100472][T25191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  638.198203][T25136] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow!
[  638.238391][ T9641] usb 2-1: USB disconnect, device number 46
[  650.662070][ T9648] usb 6-1: USB disconnect, device number 38
[  652.761198][T16811] Bluetooth: hci3: command 0x0406 tx timeout
[  663.477448][   T30] INFO: task kworker/1:17:9652 blocked for more than 143 seconds.
[  663.487405][   T30]       Tainted: G             L      syzkaller #0
[  663.493953][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  663.502858][   T30] task:kworker/1:17    state:D stack:20608 pid:9652  tgid:9652  ppid:2      task_flags:0x4208060 flags:0x00080000
[  663.516955][   T30] Workqueue: usb_hub_wq hub_event
[  663.523164][   T30] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  663.526685][   T30]  <TASK>
[  663.529932][   T30]  __schedule+0x17d9/0x56c0
[  663.535260][   T30]  ? __lock_acquire+0x683/0x2cf0
[  663.541826][   T30]  ? register_lock_class+0x31/0x2e0
[  663.547374][   T30]  ? __pfx___schedule+0x10/0x10
[  663.552311][   T30]  ? schedule+0x90/0x2b0
[  663.556998][   T30]  schedule+0x164/0x2b0
[  663.561791][   T30]  schedule_timeout+0xc0/0x2c0
[  663.567878][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  663.573364][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  663.579218][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  663.584617][   T30]  ? wait_for_completion+0x272/0x5e0
[  663.591265][   T30]  wait_for_completion+0x2ca/0x5e0
[  663.597559][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[  663.603408][   T30]  ? kobject_put+0x50f/0x550
[  663.611194][   T30]  i2c_del_adapter+0x281/0x430
[  663.639660][   T30]  ? __pfx_i2c_del_adapter+0x10/0x10
[  663.681047][   T30]  ? dvb_usbv2_exit+0x94d/0xb80
[  663.719834][   T30]  dvb_usbv2_probe+0x4bb/0x3950
[  663.735312][   T30]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[  663.748284][   T30]  ? __pm_runtime_set_status+0x994/0xc80
[  663.777705][   T30]  usb_probe_interface+0x653/0xc60
[  663.785967][   T30]  ? __pfx_usb_probe_interface+0x10/0x10
[  663.804260][   T30]  really_probe+0x254/0xae0
[  663.809393][   T30]  __driver_probe_device+0x1e8/0x360
[  663.818759][   T30]  driver_probe_device+0x4f/0x240
[  663.824158][   T30]  __device_attach_driver+0x270/0x410
[  663.829939][   T30]  bus_for_each_drv+0x258/0x2f0
[  663.835640][   T30]  ? __pfx___device_attach_driver+0x10/0x10
[  663.841728][   T30]  ? __pfx_bus_for_each_drv+0x10/0x10
[  663.847465][   T30]  ? lockdep_hardirqs_on+0x7a/0x110
[  663.852877][   T30]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  663.859041][   T30]  __device_attach+0x2c4/0x450
[  663.865264][   T30]  ? __pfx___device_attach+0x10/0x10
[  663.870871][   T30]  ? do_raw_spin_unlock+0xf5/0x210
[  663.884132][   T30]  ? _raw_spin_unlock+0x28/0x50
[  663.890608][   T30]  device_initial_probe+0xa1/0xd0
[  663.897943][   T30]  bus_probe_device+0x12a/0x220
[  663.902998][   T30]  device_add+0x7d7/0xb80
[  663.907955][   T30]  usb_set_configuration+0x1ad8/0x2180
[  663.913519][   T30]  usb_generic_driver_probe+0x8d/0x150
[  663.922000][   T30]  usb_probe_device+0x1c3/0x3b0
[  663.928555][   T30]  ? __pfx_usb_probe_device+0x10/0x10
[  663.934046][   T30]  really_probe+0x254/0xae0
[  663.938718][   T30]  __driver_probe_device+0x1e8/0x360
[  663.944221][   T30]  driver_probe_device+0x4f/0x240
[  663.949481][   T30]  __device_attach_driver+0x270/0x410
[  663.954953][   T30]  bus_for_each_drv+0x258/0x2f0
[  663.960393][   T30]  ? __pfx___device_attach_driver+0x10/0x10
[  663.966619][   T30]  ? __pfx_bus_for_each_drv+0x10/0x10
[  663.972536][   T30]  ? lockdep_hardirqs_on+0x7a/0x110
[  663.977950][   T30]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  663.983922][   T30]  __device_attach+0x2c4/0x450
[  663.989023][   T30]  ? __pfx___device_attach+0x10/0x10
[  663.994509][   T30]  ? do_raw_spin_unlock+0xf5/0x210
[  663.999967][   T30]  ? _raw_spin_unlock+0x28/0x50
[  664.004903][   T30]  device_initial_probe+0xa1/0xd0
[  664.010273][   T30]  bus_probe_device+0x12a/0x220
[  664.016239][   T30]  device_add+0x7d7/0xb80
[  664.022288][   T30]  usb_new_device+0x99d/0x1620
[  664.027555][   T30]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  664.033666][   T30]  ? __pfx_usb_new_device+0x10/0x10
[  664.039294][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  664.044588][   T30]  hub_event+0x28e8/0x4d30
[  664.049304][   T30]  ? do_raw_spin_unlock+0xf5/0x210
[  664.054651][   T30]  ? __pfx_hub_event+0x10/0x10
[  664.059556][   T30]  ? process_scheduled_works+0xa20/0x14e0
[  664.065468][   T30]  ? rcu_is_watching+0x15/0xb0
[  664.070466][   T30]  ? process_scheduled_works+0xa20/0x14e0
[  664.077082][   T30]  process_scheduled_works+0xa8e/0x14e0
[  664.082796][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  664.088996][   T30]  ? assign_work+0x3cf/0x5d0
[  664.093934][   T30]  worker_thread+0xa47/0xfb0
[  664.098667][   T30]  ? __kthread_parkme+0x71/0x1f0
[  664.103845][   T30]  kthread+0x388/0x470
[  664.108127][   T30]  ? __pfx_worker_thread+0x10/0x10
[  664.113323][   T30]  ? __pfx_kthread+0x10/0x10
[  664.118235][   T30]  ret_from_fork+0x514/0xb70
[  664.124712][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  664.130185][   T30]  ? __switch_to+0xc89/0x1420
[  664.135054][   T30]  ? __pfx_kthread+0x10/0x10
[  664.141397][   T30]  ret_from_fork_asm+0x1a/0x30
[  664.146389][   T30]  </TASK>
[  664.149635][   T30] INFO: task syz.7.997:19389 blocked for more than 144 seconds.
[  664.157589][   T30]       Tainted: G             L      syzkaller #0
[  664.164127][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  664.175642][   T30] task:syz.7.997       state:D stack:27184 pid:19389 tgid:19386 ppid:14943  task_flags:0x400040 flags:0x00080002
[  664.205817][   T30] Call Trace:
[  664.209401][   T30]  <TASK>
[  664.212462][   T30]  __schedule+0x17d9/0x56c0
[  664.225871][   T30]  ? __lock_acquire+0x683/0x2cf0
[  664.235874][   T30]  ? __lock_acquire+0x683/0x2cf0
[  664.246071][   T30]  ? __lock_acquire+0x683/0x2cf0
[  664.255862][   T30]  ? __pfx___schedule+0x10/0x10
[  664.265852][   T30]  ? schedule+0x90/0x2b0
[  664.270226][   T30]  schedule+0x164/0x2b0
[  664.274560][   T30]  schedule_preempt_disabled+0x13/0x30
[  664.280367][   T30]  __mutex_lock+0x7bf/0x1550
[  664.285405][   T30]  ? __mutex_lock+0x5d4/0x1550
[  664.290342][   T30]  ? usbdev_open+0x151/0x770
[  664.295009][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  664.300224][   T30]  ? bus_find_device+0x27d/0x2d0
[  664.305829][   T30]  ? __pfx_bus_find_device+0x10/0x10
[  664.311387][   T30]  ? usbdev_open+0xa7/0x770
[  664.316249][   T30]  ? usbdev_open+0xa7/0x770
[  664.320946][   T30]  usbdev_open+0x151/0x770
[  664.328475][   T30]  ? __pfx_usbdev_open+0x10/0x10
[  664.333564][   T30]  ? do_raw_spin_unlock+0xf5/0x210
[  664.338840][   T30]  chrdev_open+0x4d9/0x600
[  664.343330][   T30]  ? __pfx_chrdev_open+0x10/0x10
[  664.348720][   T30]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  664.355170][   T30]  ? __pfx_chrdev_open+0x10/0x10
[  664.360591][   T30]  do_dentry_open+0x816/0x1380
[  664.365478][   T30]  vfs_open+0x3b/0x340
[  664.369731][   T30]  ? path_openat+0x2e2d/0x3830
[  664.374967][   T30]  path_openat+0x2e44/0x3830
[  664.379745][   T30]  ? kasan_save_track+0x3e/0x80
[  664.384662][   T30]  ? do_sys_openat2+0xcc/0x200
[  664.389619][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.395931][   T30]  do_file_open+0x23e/0x4a0
[  664.400534][   T30]  ? __pfx_do_file_open+0x10/0x10
[  664.405906][   T30]  ? _raw_spin_unlock+0x28/0x50
[  664.425848][   T30]  ? alloc_fd+0x651/0x6c0
[  664.431873][   T30]  do_sys_openat2+0x115/0x200
[  664.436767][   T30]  ? __se_sys_futex+0x3a8/0x450
[  664.441895][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[  664.466031][   T30]  ? rcu_is_watching+0x15/0xb0
[  664.471013][   T30]  __x64_sys_openat+0x138/0x170
[  664.485830][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.492024][   T30]  do_syscall_64+0x174/0x580
[  664.505863][   T30]  ? trace_irq_disable+0x3b/0x140
[  664.511046][   T30]  ? clear_bhb_loop+0x40/0x90
[  664.525830][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.544258][   T30] RIP: 0033:0x7ff0a3b5e6ce
[  664.555812][   T30] RSP: 002b:00007ff0a4a09b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  664.564408][   T30] RAX: ffffffffffffffda RBX: 00007ff0a4a0a6c0 RCX: 00007ff0a3b5e6ce
[  664.572711][   T30] RDX: 000000000010b481 RSI: 00007ff0a4a09c00 RDI: ffffffffffffff9c
[  664.581298][   T30] RBP: 00007ff0a4a09c00 R08: 0000000000000000 R09: 0000000000000000
[  664.589512][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  664.597807][   T30] R13: 00007ff0a3e26038 R14: 00007ff0a3e25fa0 R15: 00007ff0a3f4fa48
[  664.605911][   T30]  </TASK>
[  664.610142][   T30] INFO: task syz.7.997:19449 blocked for more than 144 seconds.
[  664.635931][   T30]       Tainted: G             L      syzkaller #0
[  664.655858][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  664.664785][   T30] task:syz.7.997       state:D stack:28384 pid:19449 tgid:19386 ppid:14943  task_flags:0x400040 flags:0x00080002
[  664.705903][   T30] Call Trace:
[  664.715951][   T30]  <TASK>
[  664.719002][   T30]  __schedule+0x17d9/0x56c0
[  664.723712][   T30]  ? __lock_acquire+0x683/0x2cf0
[  664.765825][   T30]  ? __lock_acquire+0x683/0x2cf0
[  664.775907][   T30]  ? __lock_acquire+0x683/0x2cf0
[  664.785825][   T30]  ? __pfx___schedule+0x10/0x10
[  664.799581][   T30]  ? schedule+0x90/0x2b0
[  664.817406][   T30]  schedule+0x164/0x2b0
[  664.821788][   T30]  schedule_preempt_disabled+0x13/0x30
[  664.842933][   T30]  __mutex_lock+0x7bf/0x1550
[  664.853656][   T30]  ? __mutex_lock+0x5d4/0x1550
[  664.866068][   T30]  ? usbdev_open+0x151/0x770
[  664.876020][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  664.885785][   T30]  ? bus_find_device+0x27d/0x2d0
[  664.897660][   T30]  ? __pfx_bus_find_device+0x10/0x10
[  664.922829][   T30]  ? usbdev_open+0xa7/0x770
[  664.929357][   T30]  ? usbdev_open+0xa7/0x770
[  664.935386][   T30]  usbdev_open+0x151/0x770
[  664.958534][   T30]  ? __pfx_usbdev_open+0x10/0x10
[  664.967610][   T30]  ? do_raw_spin_unlock+0xf5/0x210
[  664.986327][   T30]  chrdev_open+0x4d9/0x600
[  664.990930][   T30]  ? __pfx_chrdev_open+0x10/0x10
[  665.005795][   T30]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  665.024871][   T30]  ? __pfx_chrdev_open+0x10/0x10
[  665.047427][   T30]  do_dentry_open+0x816/0x1380
[  665.062684][   T30]  vfs_open+0x3b/0x340
[  665.075203][   T30]  ? path_openat+0x2e2d/0x3830
[  665.089563][   T30]  path_openat+0x2e44/0x3830
[  665.100035][   T30]  ? kasan_save_track+0x3e/0x80
[  665.116248][   T30]  ? do_sys_openat2+0xcc/0x200
[  665.121634][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.137077][   T30]  do_file_open+0x23e/0x4a0
[  665.160119][   T30]  ? __pfx_do_file_open+0x10/0x10
[  665.191325][   T30]  ? _raw_spin_unlock+0x28/0x50
[  665.197234][   T30]  ? alloc_fd+0x651/0x6c0
[  665.202031][   T30]  do_sys_openat2+0x115/0x200
[  665.208220][   T30]  ? __se_sys_futex+0x3a8/0x450
[  665.213720][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[  665.219569][   T30]  ? rcu_is_watching+0x15/0xb0
[  665.224801][   T30]  __x64_sys_openat+0x138/0x170
[  665.230329][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.237227][   T30]  do_syscall_64+0x174/0x580
[  665.241917][   T30]  ? trace_irq_disable+0x3b/0x140
[  665.253168][   T30]  ? clear_bhb_loop+0x40/0x90
[  665.262862][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.270252][   T30] RIP: 0033:0x7ff0a3b5e6ce
[  665.274774][   T30] RSP: 002b:00007ff0a49e8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  665.284265][   T30] RAX: ffffffffffffffda RBX: 00007ff0a49e96c0 RCX: 00007ff0a3b5e6ce
[  665.292740][   T30] RDX: 000000000010b481 RSI: 00007ff0a49e8c00 RDI: ffffffffffffff9c
[  665.305654][   T30] RBP: 00007ff0a49e8c00 R08: 0000000000000000 R09: 0000000000000000
[  665.316468][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  665.324548][   T30] R13: 00007ff0a3e26128 R14: 00007ff0a3e26090 R15: 00007ff0a3f4fa48
[  665.333386][   T30]  </TASK>
[  665.337494][   T30] 
[  665.337494][   T30] Showing all locks held in the system:
[  665.345604][   T30] 1 lock held by khungtaskd/30:
[  665.370652][   T30]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  665.397978][   T30] 3 locks held by dhcpcd/5287:
[  665.405377][   T30]  #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160
[  665.418305][   T30]  #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  665.427897][   T30]  #2: ffff88807fe6e738 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: handle_mm_fault+0x13dc/0x3080
[  665.438888][   T30] 2 locks held by getty/5381:
[  665.443601][   T30]  #0: ffff888035bae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  665.456616][   T30]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  665.467607][   T30] 1 lock held by syz.4.88/6764:
[  665.472543][   T30]  #0: ffff88802938cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  665.483200][   T30] 5 locks held by kworker/1:17/9652:
[  665.489513][   T30]  #0: ffff888022e9e940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  665.501321][   T30]  #1: ffffc9000562fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  665.513742][   T30]  #2: ffff888029d061d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  665.523102][   T30]  #3: ffff8880203611d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  665.532601][   T30]  #4: ffff8880203c01a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  665.542001][   T30] 3 locks held by kworker/0:13/9672:
[  665.547510][   T30]  #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  665.562001][   T30]  #1: ffffc90006b97c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  665.572785][   T30]  #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  665.585003][   T30] 1 lock held by syz.7.997/19389:
[  665.590185][   T30]  #0: ffff888029d061d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770
[  665.601707][   T30] 1 lock held by syz.7.997/19449:
[  665.606827][   T30]  #0: ffff888029d061d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770
[  665.616135][   T30] 1 lock held by syz.6.1062/20691:
[  665.621264][   T30]  #0: ffff888029d061d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770
[  665.630370][   T30] 1 lock held by syz-executor/21303:
[  665.636126][   T30]  #0: ffff888051e08ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  665.646343][   T30] 1 lock held by syz.9.1129/21857:
[  665.651547][   T30]  #0: ffff888029d061d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770
[  665.663303][   T30] 4 locks held by syz-executor/22509:
[  665.669575][   T30]  #0: ffff888055c00ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  665.679932][   T30]  #1: ffff888055c000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0
[  665.690156][   T30]  #2: ffffffff901b40a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260
[  665.700407][   T30]  #3: ffff88807bea9af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520
[  665.710051][   T30] 1 lock held by syz.8.1188/23145:
[  665.715609][   T30]  #0: ffff888029d061d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770
[  665.725232][   T30] 2 locks held by kworker/u8:2/23402:
[  665.731199][   T30]  #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160
[  665.741601][   T30]  #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  665.750645][   T30] 1 lock held by syz-executor/23876:
[  665.756110][   T30]  #0: ffff888067d04ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  665.769230][   T30] 1 lock held by syz.5.1318/25135:
[  665.774587][   T30]  #0: ffff888029d061d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770
[  665.783860][   T30] 2 locks held by dhcpcd/25244:
[  665.789026][   T30]  #0: ffff888077145880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220
[  665.799912][   T30]  #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  665.811021][   T30] 1 lock held by dhcpcd/25245:
[  665.816893][   T30]  #0: ffff8880548c4260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[  665.827093][   T30] 1 lock held by dhcpcd/25246:
[  665.832068][   T30]  #0: ffff88802a29a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[  665.842008][   T30] 1 lock held by dhcpcd/25247:
[  665.846946][   T30]  #0: ffff88805549e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[  665.857300][   T30] 
[  665.866348][   T30] =============================================
[  665.866348][   T30] 
[  665.875341][   T30] NMI backtrace for cpu 1
[  665.875370][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  665.875401][   T30] Tainted: [L]=SOFTLOCKUP
[  665.875410][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  665.875424][   T30] Call Trace:
[  665.875433][   T30]  <TASK>
[  665.875444][   T30]  dump_stack_lvl+0xe8/0x150
[  665.875487][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  665.875598][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  665.875645][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  665.875676][   T30]  sys_info+0x135/0x170
[  665.875701][   T30]  watchdog+0xfd7/0x1030
[  665.875738][   T30]  ? watchdog+0x1c7/0x1030
[  665.875767][   T30]  kthread+0x388/0x470
[  665.875798][   T30]  ? __pfx_watchdog+0x10/0x10
[  665.875820][   T30]  ? __pfx_kthread+0x10/0x10
[  665.875850][   T30]  ret_from_fork+0x514/0xb70
[  665.875883][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  665.875912][   T30]  ? __switch_to+0xc89/0x1420
[  665.875941][   T30]  ? __pfx_kthread+0x10/0x10
[  665.875971][   T30]  ret_from_fork_asm+0x1a/0x30
[  665.876004][   T30]  </TASK>
[  665.989949][   T30] Sending NMI from CPU 1 to CPUs 0:
[  665.996313][    C0] NMI backtrace for cpu 0
[  665.996338][    C0] CPU: 0 UID: 0 PID: 9670 Comm: kworker/0:12 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  665.996366][    C0] Tainted: [L]=SOFTLOCKUP
[  665.996373][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  665.996387][    C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries
[  665.996528][    C0] RIP: 0010:lock_release+0x2d8/0x3c0
[  665.996560][    C0] Code: ca 11 00 00 00 00 eb b5 e8 c5 0d 2d 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 58 ca 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 5b <41> 5c 41 5d 41 5e 41 5f 5d e9 9a 0e 30 0a cc 48 8d 3d 72 bd b8 0e
[  665.996577][    C0] RSP: 0018:ffffc900055ffa68 EFLAGS: 00000286
[  665.996593][    C0] RAX: 168ab9c0058a7e00 RBX: ffffffff8f7754a0 RCX: 0000000080000001
[  665.996607][    C0] RDX: 0000000000000002 RSI: ffffffff8e4b03b4 RDI: ffffffff8c4bda80
[  665.996621][    C0] RBP: ffff88804a120bf0 R08: 0000000000000003 R09: 0000000000000004
[  665.996634][    C0] R10: dffffc0000000000 R11: fffff52000abff44 R12: 0000000000000002
[  665.996647][    C0] R13: 0000000000000002 R14: ffffffff8f7754b8 R15: ffff88804a120000
[  665.996662][    C0] FS:  0000000000000000(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000
[  665.996678][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  665.996691][    C0] CR2: 00007ffe055a8910 CR3: 000000007e7bc000 CR4: 00000000003526f0
[  665.996708][    C0] Call Trace:
[  665.996716][    C0]  <TASK>
[  665.996725][    C0]  _raw_spin_unlock+0x16/0x50
[  665.996753][    C0]  wg_ratelimiter_gc_entries+0x382/0x450
[  665.996777][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  665.996800][    C0]  process_scheduled_works+0xa8e/0x14e0
[  665.996836][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  665.996881][    C0]  ? assign_work+0x3cf/0x5d0
[  665.996904][    C0]  worker_thread+0xa47/0xfb0
[  665.996942][    C0]  kthread+0x388/0x470
[  665.996968][    C0]  ? __pfx_worker_thread+0x10/0x10
[  665.996989][    C0]  ? __pfx_kthread+0x10/0x10
[  665.997016][    C0]  ret_from_fork+0x514/0xb70
[  665.997047][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  665.997074][    C0]  ? __switch_to+0xc89/0x1420
[  665.997099][    C0]  ? __pfx_kthread+0x10/0x10
[  665.997125][    C0]  ret_from_fork_asm+0x1a/0x30
[  665.997153][    C0]  </TASK>
[  666.253522][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  666.260559][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  666.271292][   T30] Tainted: [L]=SOFTLOCKUP
[  666.275764][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  666.285884][   T30] Call Trace:
[  666.289219][   T30]  <TASK>
[  666.292293][   T30]  vpanic+0x56c/0xa60
[  666.296579][   T30]  ? __pfx___schedule+0x10/0x10
[  666.301518][   T30]  ? __pfx_vpanic+0x10/0x10
[  666.306278][   T30]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  666.312585][   T30]  panic+0xc5/0xd0
[  666.316485][   T30]  ? __pfx_panic+0x10/0x10
[  666.320986][   T30]  ? preempt_schedule_common+0x82/0xd0
[  666.326521][   T30]  ? preempt_schedule_thunk+0x16/0x40
[  666.332046][   T30]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  666.338293][   T30]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  666.344573][   T30]  watchdog+0x1030/0x1030
[  666.349040][   T30]  ? watchdog+0x1c7/0x1030
[  666.353558][   T30]  kthread+0x388/0x470
[  666.357808][   T30]  ? __pfx_watchdog+0x10/0x10
[  666.362657][   T30]  ? __pfx_kthread+0x10/0x10
[  666.367335][   T30]  ret_from_fork+0x514/0xb70
[  666.372096][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  666.377286][   T30]  ? __switch_to+0xc89/0x1420
[  666.382039][   T30]  ? __pfx_kthread+0x10/0x10
[  666.386796][   T30]  ret_from_fork_asm+0x1a/0x30
[  666.391769][   T30]  </TASK>
[  666.395488][   T30] Kernel Offset: disabled
[  666.399841][   T30] Rebooting in 86400 seconds..