last executing test programs:

18m10.21094045s ago: executing program 4 (id=143):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

18m9.973326626s ago: executing program 4 (id=144):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
fallocate(r1, 0x0, 0x1, 0x3)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000080)=0xffffffff)

18m9.535354565s ago: executing program 4 (id=148):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[])

18m9.3788283s ago: executing program 1 (id=150):
r0 = syz_usb_connect(0x5, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mknod$loop(0x0, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000000) (async)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000000)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={r6, 0x7}, &(0x7f0000000080)=0x8)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20111a00000040db4e7cbed75418ccc34df3334902cf3dc7e639613c857b8a81a4625f5a7c6c5994cf1a179cfdd1b7a2cdf3bc0a8c84231946d90aff1fc9ddc63d33969c12f508d047b1b7cfe87a9622922f18261fa896f9b8ddb19588d9170c2e91affa5be713dfd24c175b29de714ce2fa75f8dcb8cd600870aff1a0350a84d7e41160355525bb04e72ce4795ff3f13f70bbafbd5e1da747bd39e5539cbd9dd0b019b558217a7ff85ee95397b3ab7444c235b4fe99b1de37df4da5e81ac8ede8984f2aac2ad9dc42830111d4f199"], 0x0, 0x0})
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x700, 0xfdef)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x4, 0x44, 0x10, 0x20, 0x13d8, 0x11, 0x36f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x7f, 0x0, 0x4, [{{0x9, 0x4, 0x9e, 0x1, 0x0, 0x68, 0xf9, 0x47, 0x8f}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})

18m9.152198338s ago: executing program 4 (id=151):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x74, 0xd, 0xcf, 0x40, 0xbda, 0x140, 0xda29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0xff, 0xf0, 0x8, [{{0x9, 0x4, 0x9e, 0x8, 0x1, 0xce, 0xe0, 0xa7, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x25, 0x0})
pwrite64(r0, &(0x7f00000002c0)="5b8a3d9af377bebb9cdd3cf502c40c6a9b782d0fb81aa7f156f23a897734d556835ed3557e0e0f84f5338fec275ac2938562b47ab7260a893c00f3728cbc323eda2ca00b0367396bb1534e37044dcd5b58d5f220351f80b25ba3b62fc94dddc2d6b84ffe13bc6e5457739958efe66fc64fdaa1dca8556feacdd04abfdb77bf347cef4a2e0dfcc681abc857faa9d06b0a2338098fca33ebf32ab37c9d8a88083f322786cd830d4147eac1643cbcf96fc899ee15f5f0c2b16d0f1d279f49960b579c94c457a37db92f8f", 0xc9, 0x1000)
syz_usb_ep_read(r2, 0x1, 0x0, 0x0)
syz_usb_control_io$printer(r2, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}}, 0x0)
syz_usb_control_io$printer(r2, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c"], 0xfdef)

18m7.701715958s ago: executing program 3 (id=155):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0)
write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x9, 0x101, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0)
ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40})
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r9, r9, 0x0, 0x200000)

18m6.138457492s ago: executing program 1 (id=156):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

18m6.006836734s ago: executing program 3 (id=159):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

18m5.821317124s ago: executing program 1 (id=160):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18, 0x48d5}, 0x8050)

18m5.651916659s ago: executing program 3 (id=162):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

18m5.405279982s ago: executing program 1 (id=163):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket(0x200000000000011, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'sit0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000080)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

18m5.297490916s ago: executing program 3 (id=165):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16, @ANYRES16], 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x84)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x1f}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x63}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x3}]}}]}, 0x4c}}, 0x2000400c)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x9)
setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000fddbdf252e00000008000300", @ANYRES32=r8, @ANYBLOB="0a003400020200020202020008004a0004ac0f08"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="68000000b795d019a93f16802d7c73d59e9f8f52fe361c5139cad52db23dcff8734355df09f64c9b18ccade5daf5ebca1c713511a7fae3970efb133b2e31e79aa917454f17fc3a9e07503d2104922c63381809784252069c205ce7b6f4d61f29c489e1f781910c3e3acc3363251e1486cdef7b35be1197189c86a4055103df63fadb3ab2ef74eb1936186278c739608909507dcb1098397c1fab73651120332bea9db23c8e0f4f6d4e9d289e953dad994289d17695fbbdcd989c21cf9d18598d8dc559cf8e86df78abb1eff69c", @ANYRES16=0x0, @ANYBLOB="000305000000fcdbdf250a00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900050000000a00000005000800050000000800370001000000050008000100000028006e80040001000400010004000200040002000400020004000100040002000400020004000100"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r9=>0x0})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000e683000040"])
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000011000500000000000003000100000000", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4c840)

18m4.763986612s ago: executing program 1 (id=166):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0)
write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x9, 0x101, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0)
ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40})
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r9, r9, 0x0, 0x200000)

18m4.696882445s ago: executing program 4 (id=167):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000001000)=ANY=[@ANYBLOB="440f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000d00)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40203, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r3 = dup(r2)
syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
socket$key(0xf, 0x3, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000180)={0x6, 0x7})
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r1, @ANYBLOB="71e69fd800000000140012800c0001006d616376746170001400028008291f78", @ANYRES32=r7], 0x3c}}, 0x20000000)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x2c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xffe0}, {}, {0x4, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x2}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x4004000)

18m4.312026118s ago: executing program 0 (id=168):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@printk={@p, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x0, 0x700}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x850}}]}, &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x90ffffff}, 0x94)

18m4.080590768s ago: executing program 0 (id=169):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x1, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0xb70}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x1, 0x3}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @window={0x3, 0x1, 0x1}, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)

18m2.911014427s ago: executing program 0 (id=172):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

18m2.476225221s ago: executing program 0 (id=174):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[])

18m2.429563572s ago: executing program 3 (id=175):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

18m2.236874008s ago: executing program 0 (id=177):
r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x4}})
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='LINE1 \aMaster Capture!Switch\' '], 0x33)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044815}, 0x0)
close(r1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700002108000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c00038068000080080003"], 0x164}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)

18m2.010826981s ago: executing program 3 (id=178):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x8, 0x3}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000005c0)={'tunl0\x00', <r4=>0x0, 0x700, 0x7, 0x9, 0xd3c, {{0xa, 0x4, 0x3, 0x15, 0x28, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x6, 0x0}, @multicast1, {[@generic={0x7, 0xe, "407224cd03fe516e3522deb4"}, @timestamp_prespec={0x44, 0x4, 0x24}, @end]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xa, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xe], 0x0, [0x8, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x98}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000120000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a300000"], 0x122}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x2, 0xffffffffffffffff, 0x7ff})
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
r8 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x14b200)
write$char_usb(r7, &(0x7f0000000040)="e2", 0x918)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x1c, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000500)={0x0, 0xe, 0x81, "c318a8c52ddee94fd6b22121cd454f13e20f4f6c2443a46b7669507256a770ffb2c30e49ecb9f7207e45669624fb8cda074aa45fab27bee85230b7cb28b47d319ba7490cde0c89ac4cac0f39303864433d6ad46e98787facca381f5fb9594f0539aa4394b8f02e0fda01efec66b08d31d7b5f898bd16cab483ec51286ac6d086b3"}, 0x89)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000380))
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

18m1.35455552s ago: executing program 1 (id=179):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="0d00000024680400", 0x8}], 0x1)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
unshare(0x20000400)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40082102, 0x0)

18m1.227708294s ago: executing program 4 (id=180):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@printk={@p, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x0, 0x700}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x850}}]}, &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0xd0ffffff}, 0x94)

17m58.759559643s ago: executing program 0 (id=181):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x240008c1}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000)

17m41.690985519s ago: executing program 32 (id=176):
socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x80, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
unshare(0x28000600)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xeb, {[@generic={0x8, 0x2}]}}}}}}}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
socket(0x80000000000000a, 0x2, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)

17m29.373321014s ago: executing program 33 (id=181):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x240008c1}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000)

17m9.452299341s ago: executing program 34 (id=179):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="0d00000024680400", 0x8}], 0x1)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
unshare(0x20000400)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40082102, 0x0)

16m41.382330307s ago: executing program 35 (id=178):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x8, 0x3}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000005c0)={'tunl0\x00', <r4=>0x0, 0x700, 0x7, 0x9, 0xd3c, {{0xa, 0x4, 0x3, 0x15, 0x28, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x6, 0x0}, @multicast1, {[@generic={0x7, 0xe, "407224cd03fe516e3522deb4"}, @timestamp_prespec={0x44, 0x4, 0x24}, @end]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xa, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xe], 0x0, [0x8, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x98}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000120000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a300000"], 0x122}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x2, 0xffffffffffffffff, 0x7ff})
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
r8 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x14b200)
write$char_usb(r7, &(0x7f0000000040)="e2", 0x918)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x1c, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000500)={0x0, 0xe, 0x81, "c318a8c52ddee94fd6b22121cd454f13e20f4f6c2443a46b7669507256a770ffb2c30e49ecb9f7207e45669624fb8cda074aa45fab27bee85230b7cb28b47d319ba7490cde0c89ac4cac0f39303864433d6ad46e98787facca381f5fb9594f0539aa4394b8f02e0fda01efec66b08d31d7b5f898bd16cab483ec51286ac6d086b3"}, 0x89)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000380))
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

16m11.024382678s ago: executing program 36 (id=180):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@printk={@p, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x0, 0x700}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x850}}]}, &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0xd0ffffff}, 0x94)

3m4.74344314s ago: executing program 8 (id=1510):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2fc}}, 0x8000)

3m4.567696131s ago: executing program 8 (id=1511):
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {0x2}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x40004080)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x104, 0x2, 0xffff}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newtfilter={0x1bec, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1ba0, 0x2, [@TCA_CGROUP_POLICE={0x460, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3ff, 0x7, 0x7ff, 0x6, 0x9, 0x2, 0xd2fe, 0x7672e384, 0x3, 0x7fff, 0xffffff90, 0x2, 0x54c3fb87, 0xfffff000, 0x1, 0x3, 0x0, 0x1, 0x1, 0x5, 0x8d, 0x80000000, 0x1ff, 0x6, 0x4, 0x4000000, 0xc24, 0x92, 0x5, 0x8, 0x80000000, 0x2, 0x200, 0x0, 0x1, 0x6, 0x4, 0xdab, 0x1, 0xfff, 0x3, 0xfffffffb, 0xff, 0x7, 0x6, 0xa706, 0x4, 0x1, 0x7, 0x4c9b, 0x2000000, 0x6, 0x1, 0x6, 0x2, 0x2, 0x4, 0x7, 0x5, 0x5, 0x6, 0x4c, 0x8001, 0xce9e, 0x0, 0x1, 0x80000000, 0x1, 0x9, 0xfffffffc, 0x101, 0x2, 0x1, 0x9, 0x7, 0x59b1, 0x2, 0xd, 0x7fffffff, 0xe, 0xfff, 0x9, 0x52, 0x18864b0, 0x5, 0xedf2, 0x1, 0xe, 0x2, 0xfffffffc, 0xd, 0x9, 0x400, 0x0, 0x3, 0xca, 0x8, 0x7, 0xfffffffe, 0x9, 0x6, 0x814, 0x4, 0x42, 0x6, 0x4, 0x40, 0xffffffff, 0x53, 0xe10, 0x5, 0xfffffffe, 0x3, 0x9, 0xfffffff7, 0x7, 0x0, 0x1ff, 0x10000, 0x4, 0xffff8001, 0x5e0, 0xfffffc31, 0x9, 0x6, 0xfffff42b, 0x9243, 0x5, 0x9, 0x0, 0x93, 0x3, 0x28, 0x0, 0x8, 0x9, 0x2, 0x1000, 0x5, 0xcb4, 0x8, 0x6, 0x8, 0x3, 0xffffffff, 0x200, 0x4, 0xa4, 0x8001, 0x2f40, 0x3, 0xe84, 0x5, 0xb, 0xe, 0xa4f, 0x3, 0x2, 0x9, 0x8, 0x9, 0xa, 0x2, 0x577e, 0x0, 0x0, 0x20e9a13d, 0x1, 0x9, 0x9, 0x32, 0x9, 0x400, 0x2, 0x900, 0x2, 0xffffffff, 0x40, 0x7, 0x0, 0x6, 0x0, 0x7fff, 0x81, 0x4, 0x5, 0x3, 0x1, 0x2399a971, 0x0, 0x6, 0x9, 0x7, 0x9c2, 0x7f, 0xd1, 0x8, 0x5ca7, 0xc, 0x8, 0xfffffffb, 0x4, 0x6, 0x0, 0x0, 0xc9, 0x1, 0x3, 0x9, 0x0, 0xffffffff, 0x9, 0x8, 0xe, 0x8000, 0x80000000, 0x8001, 0x40, 0x976, 0x1ac0, 0xffff, 0x4, 0xd, 0x0, 0xba4, 0x0, 0x9, 0x50, 0x8, 0xbcdd, 0x3, 0x489, 0x3ff, 0x0, 0x2, 0x6, 0x10000, 0x3, 0x9, 0x7fff, 0x1000, 0x0, 0x1, 0x9, 0x80000, 0x9, 0x3, 0x4, 0x5, 0x6, 0x1, 0xfffffffc, 0x10, 0x0, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x4, 0x200, 0x4, {0x44, 0x2, 0x2, 0xb, 0x5, 0x4}, {0x7, 0x1, 0x4a, 0x3, 0xc, 0xfffff42f}, 0x7, 0x7, 0x3}}]}, @TCA_CGROUP_ACT={0x173c, 0x1, [@m_sample={0x6c, 0x9, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xc, 0x6, 0x20000005, 0x6, 0x3}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xaa}]}, {0xf, 0x6, "2e2990cf8ab56b58dd0504"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xc4, 0x13, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4a, 0x6, "657ecc924bf77bcd9cbdb41aee64931f39d9ce682fad5848876e37d42a89448f5450dbc4cc8f78211e2eb1494ebf86d3a54dec83fa588d32476ca2a75383a96109ff74a85b09"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x194, 0x16, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xec4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x14}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10, 0x0, 0x8, 0x7, 0x2}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xd69a, 0x1, 0x6, 0x200}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0xf5, 0x6, "a0ed3cd680325a9d26010af87937c2bb141499ebc0ff59fcfc1ca36b318133ba5c86316364e15fbe96f254a15a1ff67aa854363711b8b5f0015ccdbf9a600a9fb749d7463fb86fd917b413af1a6782f00675b9b74e66fefbcf7e2de939a2f74944fae498de6fb9cf24b3f7e74e58012d1edf841deeaa1eb99e32543832b3086f266f6da78bfe60a32400fa6114b717f551f22da1c536e97113b94ec64de52bd14aaf8917bb0ea7c6bbc8007af23149976207c5a06c8a65e6d3622691244e87585049ad4f71602f62551f44b61e0cde3b57ac88a51ecf24f6b3fa648d15f83a8e9dce95a757298bce9cbf6a07ad1fd0d490"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x178, 0x20, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x9e5, 0x8, 0x8, 0x8}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x180e, 0x7ff, 0x20000000, 0x3, 0x4000000}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x56, 0x5, 0x58, 0x6}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x800, 0x10000000, 0x4, 0x4}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x374, 0x40, 0x10000000, 0x65, 0xe}, 0x3}}]}, {0xa9, 0x6, "5fbdceddff5c1a4ccff2f9a54acc07f4036e8db2f653ffb555b21b609aa7d257be0be093949a0dea2f099ae90f6a62e45770f7a5b0bc06e534328d63d11f1c9078310284fc8a04a7e6684f832bba9a96b30678247d80589aede7e77294720a59266ef2daa50fad1fd0d7e4e92a75ac1704217212568ef36d2a39c7adbe738a7d8523acd6c22fcdfccbc68ef0b31a5ff2a19690ce85741fee1d2d6b015a031aa2c6ccc3df79"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xb0, 0xc, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x97, 0x8000, 0x2, 0x4, 0x2}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xb, 0x6, 0x0, 0x200020, 0x7}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xb, 0x5, 0x9, 0x2}, {0x3, 0x3, 0xc2, 0xe98c}, {0x9, 0x85, 0xfb}, {0x8, 0xde, 0x3, 0x131}, {0x707c, 0x9, 0x0, 0x8}]}]}, {0x10, 0x6, "97f4b335fc0c662b5586a6d8"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x128, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x400, 0x5}}]}, {0xda, 0x6, "e9bd3a9671657e85888c9fc909dcef9f7afe13272f7504998f681c667b84415ee8c0112961a9dd838345ff595c4fdcabff1500f2b10bf36c606c1305b4c00a821a45f76cb20d02aec5ae43ab7bf3e27e2dfa302bc0d8dbe106272697b9a72884c306dbc313e22e577d0d08833a063c824467172e549fa90ebb10805a954ef5d2c6fa65e36b62804b9513a68cda2d9d0378c92d4fa54850c1ccc3e51927c482f8c328a9cdf39edf5527b5df3610cb4a953306e78dda0cba86fc2d6a90038b9c1024a2a79b74f99c319139a7b669eb402bc94d9c380c5c"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x10a4, 0x1a, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x20000000, 0x600, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x8001, 0x2, 0xfffffff9, 0x3}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0x1, 0x20000000, 0x5, 0xbf}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x23d5, 0x0, 0x5, 0x568}, 0x8}}]}, {0x1004, 0x6, "85eebd32c03ab7841a46d34637fc95c63b424b553da03b52a6cccec6ec28fe98c06c6db34e22f1fa267e625d4e15da597d4aba42b437dcead95594f659832742b5bda3876e5ac97dd93fabb836489fc200d0757539fea3b4cfdd2389f30de9e05298fecdae557834b716d515e28ee564f4c9ea10930efbe32fb849ed4beacf87e532898fba4b2d2019160aeae92bc5f2ce876d1d6fd6b113669d085853f7ae434458c84e863501d2117c8cfa05eeed0c24af8415ba145c47236ace1debe5faf399654c07f2ba43420526804b497bd2fb31eaae236806a4f4813f1249265c01dd2bd43c8f71930437cc30b8317bb03dfbbaf331e581d5b3b5e996e818b93920703c5d00445de63e3227d495f14b82ec1b84ad1554ec68623b472122965a192aed43484bce9044dcbe970ee4fd1b8cd10d53d0edc8499d18c3c020e446c9b09526ee91f1471ce1d5e063a382e49ca2d3e90e78a2bcae33dcc14101e879acd528f5eab5afac85044838e8d5c4b16300c770dd80028ed039f1885859be7089dc2a16f52e70a0797e4f26ac7d5481f9a744f6957097fbf628023c235c2ecbcf715d9ea4c7682b84180d9a83ba9509db08f4c19b39f02dcf9a6ae31e09f5731b02e2d7ee8accdc62591a252fc6882bc3310657fc75cb4019b128d25a90fc9927a67fe4ab41b4688ed1e50edcd09228add1645bff11235685830cd053facf754a1efe3f8433010118f20f6049701068942849f91e7a46de990071669f4bee9bbfad246eae409a97b88200e13c67e7d5bab4c1b92a785e8ff61c10f776d5d88947a9e5582c339d02717c6c68b56c2810658b2745e28774e4a2d0dcaf45292e2cf5d62059d7ccab63f666b8f70814472075429b6337360bed4cc156ef04b69cb1da629887dc4b3451b1c2331807bbb70c866436a861b07025d85569287b4174ae0421eaf9b438f70656bfa6db7cce1565146e345d6e1a3ca12927cddd77a7448816c5e9465999069e8347cf21faf31fd7010066d7a1d89a60eb5d3c4ade78b3d31693b9ec8a8604868b47d142e8657ae6c5ed984d6b195e243e3fe44cace529e5205c15a9b4c860a98b86561e4de0f5d464382b23ef0948bc15753a33ca178efc4d8f1be35f6b823899dc43778c2097371792a855585d64029e5d7682204fb00e32bb91ec8d6608cf23fa53dd282e07543985a5a04b5d191fd8243156fe9d84e14985fc64a3e2ccd2cbe0020384da1b79afe2f2a406ec2098cb59a2ff192baba23a9f30deac83059b31287fedfee9b3b73eab70eb57c9137defc985f338ec0180bd1b8a253a52f78d06ad35cccbfe261150d80af87257f4a63a3381e7dd6447c23a3c641f131dc6c2a6725fb5b23c58a789dd36c6c75c27d7d874d0277bb964a8b42c175c05117914df3a83e9c732f9ad7b5a8a4e5c2282fbaf8e84f49f16314958228b3c15d344e33c4cd9680741ee05ed141db0e3a5f62f44f66a7427425310d7471019adbce6ab15309a6af95242522d54e618582bab9beac1ae9d0789b9bfde967654960dc5f2d3846b5352b3775edf971791fdb0bc8d5330cba6d7f7a4517238c529d34d5f3211e8857ac70f051909937f1adee9c165d23d46a24f7276da27d351a0e5a084d91bcc3adf6701016656fb585a570a12fbb74220f6c3d672fb6124049c1ff5cc85fa5c313a6060fc660ce5606dacae379a5ee25c7bf6f92a1ce87131e2c41ebaeb0cf22a89fc2585bd04d5a09b551e0b1284fd62646b4eed320a21651211fbadd8990b8dd8e233c6ea0dead5790c753752694862ff2b3ce1fece65543e865328d8ba556a00c3b47b46b88d80fa5652756e0a0a2951104bca05cbd65b7649ea44797713186568461a55113d1eb1f2481cd108527a78e2ac2658e5e741719e5db137e2bb039603816f7eac77e4e26df5320332b8d117387b9897baf540cb595e5a4814a94e1887cccb098a9e5bb5331b0974a74c1b4f91550b53a82576df8660225a4116b4d3c2e7aa8d6dcf28aafe49a32236914e5b2e170f3321e8e7e6c15fd936f60b1f4824ca2aac8106c450f93914a4a92bb22fd8e44246ec084903507980027a61e6e1551173d9ffda1537cfe5b68545aff244b5a8c7bf5c34b44c1f5ab93c3b03eb604d1f062cde7a0dbddc25799ca11fffc6c4e4b48406970f10cb04033dff9f152efd524d32d6d95ec7957bfa630b3b3d48650b77b6821cac93171d141ce16abfdc8d68f353e2019d22d371c11cee473b941fccefce82299a23c36c5cfb0c8c3b41abdc59a2b36f359d93205860c666b0a3ad35cbc7a138b4f9b6b2d86e500b21d859278086abd8a523714f8d9f3e7f1e765adadda2509ab7097119c61fa542b615a2d4a739a88f3ece0a32fc0c1bf0b4bc5c7ca68823e424bfb8c33c77a7a1e5a00ea675efca3979e5967ded2d66c1b2f73fc91c9de44630979d586b268d2fa6793edefe4cd96c2328ed11de5340c1033553cbec9aac517bfbd853bed1517f8f5945b60e1dbab58f0c563156717f5bfaaf37c01a6750e3162db2a9aa73f9d25a5f27c14bc0696705bcbe039e61205c1b0b27286f35a307bb22e54f67075536c53a6deac87c8c22b802b12230981a43cf2b2b7b9bfd754814ae1e80495b287b201ec7e5b6fcb857a2a799fabec6446f8b677e8dda280808aebcf1bcf912b630667458287b835421320b4b2b21e3787a5d3124232c4c5d074fef0db6c904b356e486bd752fefe06e4baa518eeacf721fbb99c2c82d8d20e901dc2bbc69dec81f87b73ecbfa530008c692b5eac76e2f78b91d1ca73d30e40b05d343f1c501d7b5d939c40bd2a63b40fc63b2a7cd1372a87e37cf4a32a772504baa88106b206af595c51cfd595a6ad5fb79457c76f5639fdbbd7155e93005a29b506c30684c7c9ea31e7a616c9b6e14330f66c74d549fab023344690838c9b26b55353f0619c2063d701d9a016e10b93f8a089bd5acb6487a7ae334a925b0406fd75d6b5f6b9c05a41c4a31a77a778205f0d4971dea7b2841e5037c69bd94c8676eac9d38bd66599d89b9cbc0b10166cf4337ec1f044ef478cb7fcfdefd9f01b54a286048024e3856ea9a17760f4dfa292260cfd2b74ceeea0352ac43b1187b920f16ae8af65bae6066751c6be1fc558794fd831c2f4579c234ec09939c8bb4017c458d59177a515012459d2de9088a2f7623d0900481f52b3413a2ae2240f3496e7c79c7725529be200c7783db37b01f56dc851d87101eb1f141c3867d3e8e95b33d81f31d974840ea63e644b4697f8732ce595ece0d2e96e3e896ff51e29eabd068d2eddb834524411142b6e1a5eddb5866139346dbc53c903c0a35aec08bb418ddc76d262c45a1c031f15264db404dc609b3dddfc796b5dbdc6599f75d8db0b8997e0b16bdd58868a74f3cd324998426724bfe581a8165c4b1280163b9bc89b5939ff3753b132fe6b6484b6b205804676d58f862461d6381663615eb5761a947a2a92bfb326c0db2e909a9fc09bb222c0ad574ce65e715dff4504473e9aa127950f796d360aced1a5d678de7bdbebf4da86671d292d782753671e98bf057793d2cecd5435a657be8a943918f918c9e9bfc6748399110c280e93904a4c5388c4a124563e6a697d5efbc3c16868505204a9d04ef239551665d91a11629c06e52ca23945b3583e7685aeeba3c3a91de025e7836e55f84017df48c44ea2832f1976369d234fd3b708b598e96649f84bb05f99454bcd0c6070312151b2258077691baf67100597d6bb52f3d4901070b909d177fe7d2aac2c009ccd2af8806868fefb9667864c05f57f2835fb397111df8479150684baabdb58e121a606dfcac902f61d2cdc39568ea39aeb30db08c6e5d527edfc094a6247352112e53c63ec4712acec94292da280371ceaab40146dab9ee4a6570fce4c8d9776de93b652de97308e7adf069c00ae8c11d8dac8137861979d90cffa322324569ce95edf5aa0a249cb449875ea4e7f277379c551a01fa4ccc8ace2f75a85f68cbc2f950d8a23a878265d7f61c6974e663abfbbf8a1fb3efe4769bb498dc2aaf1c7cfd9ddd7d2edb4c7ed740a93b894222896b0f1f21d8514774e88659441bed61cd1c1413a32e196e427b8871531807f267f95acf8bd78ea85f14553f0e88144e9dc53c9ae3a6b76106e96cc355f0e7021b0f88912df461e856cdf9bf40869be82f8e9562579dd2112559be8f78f05f76bf046dc4483cf9563814afac8b2b1dc616134c050d1a1e15ecfcead7527bacdcf9606b26ead848989c19c79bad5c8ec823f7ab18ba03636e82e959e537f8f7bf2eb534a78685edda7540a653b0dd6d6a2853a298d99830611c8338fbd68f40f753d83fe9ff662c51a68abd55c48cfdd16c88e0c804ab0cc61d816502d5554d83282a86389660fad42acc49c8ae40f75b9a1de44b7b762c2c116271f8f242a697c5c08e2c6f0acc7649e620793a4c4bc20cc36fb3e459659b59b94c6cffdcf1dd1e0a339b99a84f630c476aab07a47f65830810838ffa2a59ccf36f8ac3f5f16f3d5702772cc2a815da3ccfcc47576ddb8e5ff9b0c31e8bc5512801f7fab111f576c5f334e712a2cca679158e5680f3718bda26c5cbbfcdb34da914092af6e04c035f1553119eb83694d4ce9499128578aea8e872ac7ac702fe157e88fa044e1127d78ebc35b34af5bfeb3503a2ed8609da8e22315316b44ead43043bbb9a171c1e35032e0736eaae40dc17de1f4ae15126a69e7eae7090fb1be81d987ec7fdcb7c208927a3bd9a562c8e7d49cbaeccba6c6490b3210969e2811b3609d3970214e9469e1cd195ef06391106932b37ac742db2b6393693a681bfd044c4612dc3825e61de70ae3126ef6a882ff5cc68a8b3d66ee2d5d6202ab43b0363d41fed082a6043932f377fdfa0f5818b4cb572116d6cda3580a6070f27ed1ae60a558979f7469e7f1a881465ffadd7814513e813de118bd996630081e5472eea69a75e725a6be5aab19d5a682dc7a2e922923e447e1240f9f9f9c800be1f019724848014a088363a15660d621dcff8d4bf0e96ec7e9fbd39e55a07c56f4f7d7badf30163460e47536b6d4c6ced635def8f66d8612d2f6a3b1149264cd7aa2ab4695acb26dbb291cc8956f6082d15e284caf40c8f20c32838442a072b1c3f8573b542c36efa6fa10b16380fe4df22286ee6e740012a678bdf77b401f60c89710cdc226b2f004c6c9cb59f63e54d0b7d2608515fff2f0b3f2ae21cbaf84371d08b054a19ebd1de5da67936d0f4558185cb11141749a247458e0ea564acf00366797e8f5b0ad72dfb07a48b727d590d0e942056a04b86bbb6516373edb0bfb9fa44812204c531e84527723eb2648e2db1d9f10d26c3f6637b693aabc7b43421372cad1883ad82d615b725bba2dedafbefcede7cf25ca3ff81e6fd34f2d2b346d0efcf70208c634392f120f8fdd46be8640cd22ee773ee21340d1e2a3b00ba97786619854725648c45be4caf015ce1ab79bf4e7cdf44d5839b0379031ef90742946b7fce431eb7f751e56ef875fcea08758916a2c9cd488991d25f2ded5d912226632981fe5d1f606bbae6ae9fb037e8a1502b2703bd55a6ebea4a26305f00362915a4cf4e2b7c509466cd9fb71024d1ee1957b317d358366e10c8839fb27670b78e9ea9172b32e9e56160a3956ae60109faa4b63cd0378ae3343e3832f43c2951d3f64e1a23aae79927ff9599dd1b47e8f010e9cab89ca0cb1afd9369669f919085f9df1651243af6aaa0ba8b68a9b6ac84e2202af11a5d0b965d2ccbc9ccf5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x80, 0x14, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfff, 0x40, 0x7, 0x8001}}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xda}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2be60149ab6bb2b0, 0x2}}}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0x6}}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xfff3}}]}}]}, 0x1bec}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2)
execveat(r3, &(0x7f0000000380)='./file0\x00', &(0x7f00000006c0)={[&(0x7f0000000480)='^%(\x00', &(0x7f0000000540)='syzkaller0\x00', &(0x7f0000000580)='{\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='omfs\x00', &(0x7f0000000640)='omfs\x00', &(0x7f0000000680)='\x00']}, &(0x7f0000000740)={[&(0x7f0000000700)='\x00']}, 0x1000)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000ffdbdf250b00000008000400080000002c0001800a00000008000300ffffffff08000300ac14141508000300ac14143c04000680"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4b23})
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x242, 0x0)
close(r10)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
fsopen(&(0x7f00000003c0)='omfs\x00', 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0)

3m1.393279159s ago: executing program 8 (id=1522):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$swradio(0x0, 0x1, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20044800)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffff6176, 0x80000)
read$usbmon(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
prctl$PR_SET_FP_MODE(0x2d, 0x2)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0)
fallocate(r4, 0x0, 0x1000000, 0x3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x7, 0x2, {{0x1, 0x0, 0x20000001, 0x96, 0x2}, 0x1, r8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x4000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0)
fanotify_init(0x202, 0x1000)
syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)

2m58.073206241s ago: executing program 8 (id=1533):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
r0 = syz_io_uring_setup(0x73c5, &(0x7f0000000180)={0x0, 0x9108, 0x4000, 0x1, 0x1ab}, &(0x7f0000000200), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000980)={0x8, 0x1, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000400)=""/153, 0x99}, {&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/167, 0xa7}, {&(0x7f0000000700)=""/97, 0x61}, {&(0x7f00000004c0)=""/41, 0x29}, {&(0x7f0000000780)=""/194, 0xc2}, {&(0x7f0000000880)=""/62, 0x3e}], &(0x7f0000000940)=[0x26ef, 0x7f, 0xffffffffffffffff, 0x789, 0xfffffffffffffff3, 0x4]}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r3)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000100)={0x2, 0xc, [0x9, 0x7, 0x7ff]})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
write$cgroup_int(r4, &(0x7f0000000000)=0x2b00, 0x12)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r5, &(0x7f0000000040), 0x0, 0x4000800)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
lseek(r7, 0x4, 0x2)
getdents(r7, 0x0, 0x48)

2m56.673871624s ago: executing program 8 (id=1539):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = mq_open(&(0x7f00000001c0)='batadv_s\x8e(\x85ZL\x7f\x89%\x85fRTZ\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x5, 0x8, 0x1, 0xc05})
mq_timedreceive(r3, &(0x7f0000000300)=""/120, 0x78, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x2)
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f0000000040)={0xc5, 0x0, r5})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100))
r8 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x8000000000000000, 0xa2c66)
sched_setattr(0x0, 0x0, 0x0)
r9 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_deladdr={0x18, 0x15, 0x900, 0x70bd27, 0x25dfdbfd, {0xa, 0x38, 0x112, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0xc080)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)

2m54.658752457s ago: executing program 8 (id=1545):
syz_io_uring_setup(0x1104, &(0x7f0000000900)={0x0, 0x6a5f, 0x20, 0x22, 0x311}, &(0x7f00000001c0)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001"], 0x148}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000b80)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000000440)="c49c35c57873d9a94d0f472f3f1bc9c066c383ac647f66c4ed9b2776d1508c66ec1f4fe65e52a22f30505ac9536e463009a3492682c8e0bfd8886bb6d85541061fc5cfb2fbd379ef7babb72018010c13f143f47c9cd2cb228c3d45f278f6b7afdbad40f46eb9ace0ff746f1d51e8b06937e976690192633c0537ccff05b261cd8c8945771440986695e21459bbb6550e2d55be6e9f9c08376616289656021a1f7d", 0xa1}, {&(0x7f0000002700)="83eba29eceb8362c7ab5ab792675ed2d1b991cb19f486bc4a23d0bb46db5827dd2dfecd33102ea3b68bcb411809d79542cb76a8df51a019c25a87b2f3104c7046589b218974c74c4a81916c302636e91803cc5b69bbc47a84fc00500fb50fc68f690ee17f7d51c6ec686f85c216ca69b30fe74d0", 0x74}, {&(0x7f0000000e40)="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", 0xbea}, {&(0x7f00000005c0)="0b06e5b6d1368b931f7fa026e545d1194ecf06ef4a0cd0ed70e0a34471d10892718089b6d9b44792ef18ea32d008e0ddf6f5a5b828aad38fde0c9959fa0a56085653d4d1347ef11e5302a34fe97b43474c9edb8e8eedebba29902d3467c54f950e3c097a9c8c68bc96e4af0a83913f910d7fbef10e25ed3b8ecadd04a4e329aac4e4415a4f016e18dbbadab0ad0b7d9a4b78f6abc27000a5ccde684075fcb0659d0dd21f5346f3e15df84e2fd8fe24f019ec2752db9b077abab2ec1ebfc7b478d969c7b6f8337527172fb15b4b2c8223c4604616a69a842ce3057fad4d400c77a6231b2faa3ddb4b033061eb", 0xec}, {&(0x7f00000007c0)="d712f2052bd28cedbc09354c520cb5f971d89a7c87543bc6aa24a6f995bd05e8be54168919e0b96d04df106e2b97b92faccb451220eb9565", 0x38}, {&(0x7f0000000800)="ae0e15c68033ff1fa64b6df7bcf4f61b52b2ef8bf6ca7d225c0ea6837edbacab591f119a1c1efec0ac1717b4723902eea0268a1f2d12e9547fecf9541d289ccb096c8c81a3842e3a4063a0eb7651df53179cee128ce440d3c5b392b1c82d5653434848d450dc766b851043bf8947fb319e2e9dc9951b8b1469b77b21a0035e", 0x7f}], 0x6, &(0x7f0000002940)=ANY=[@ANYBLOB="1000000000000000010000008240d9f397adde04cf4719dee8010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0000e806e9fe3b45b747dcee3795205a161fe149", @ANYRES8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x8000}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000000a00), 0x1, &(0x7f0000000a40)=""/72, 0x48}, 0x40}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000bc0)=""/139, 0x8b}], 0x1}, 0xbc5f}, {{&(0x7f0000000c80)=@phonet, 0x80, &(0x7f0000000980)=[{&(0x7f0000000d00)=""/60, 0x3c}, {&(0x7f0000000d40)=""/75, 0x4b}, {&(0x7f0000002200)=""/107, 0x6b}, {&(0x7f0000002280)=""/204, 0xcc}, {&(0x7f0000002380)=""/89, 0x59}], 0x5, &(0x7f0000002a00)=""/199, 0xbb}, 0x9}, {{&(0x7f0000002540)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000dc0)=[{&(0x7f00000025c0)=""/214, 0xd6}], 0x2a, &(0x7f00000026c0)=""/23, 0x17}, 0x9ee1}, {{&(0x7f00000050c0)=@qipcrtr, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b80)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/97, 0x61}, {&(0x7f0000002800)=""/162, 0xa2}, {&(0x7f0000004cc0)=""/228, 0xe4}, {&(0x7f0000004dc0)=""/59, 0x3b}, {&(0x7f0000004e00)=""/58, 0x3a}], 0x6, &(0x7f0000004ec0)=""/123, 0x7b}, 0xb}], 0x6, 0x2142, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800009500000000000000"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}, 0x40002002)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000200)={r7, r6})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r8, 0x802c550a, &(0x7f0000001e40)=@urb_type_iso={0x0, {0x6}, 0x6, 0x40, &(0x7f00000003c0)="09f2d3a57f8a229a4f87f219ede9b63375d89a1a3188628437a227029ff3538b6e5b0cafc422e6847fd00129638b948621ee1b5e32913af98eb89c8adb", 0x3d, 0x80000000, 0x5af7, 0x4b, 0xc8c1, 0x2, &(0x7f0000000400)="da9e7f91c3b941971edfa2", [{0x3, 0x7ff}, {0xd, 0x6, 0x3}, {0x4, 0x6a0fc203, 0x80000001}, {0x8475, 0x80000000, 0x7}, {0x80, 0x82c1, 0x4}, {0x3, 0xe}, {0x8, 0x3, 0x2}, {0x81, 0x0, 0x1ff}, {0x3, 0x7fffffff, 0x6}, {0x0, 0x1c2, 0x268}, {0x0, 0x7, 0x2}, {0x2, 0x7, 0xa5}, {0xbb03, 0x6, 0x80000000}, {0x9, 0x6, 0x9}, {0xa078, 0x81, 0x101}, {0xf1, 0x2, 0x80000000}, {0x8000, 0x9a, 0x3}, {0x3, 0x9, 0x8dd}, {0x4, 0xffff, 0x10001}, {0x5, 0x886d, 0x7}, {0xff, 0x368d7351, 0x1}, {0xbf15, 0x1, 0x2}, {0xa, 0x80000000, 0x6}, {0xc8, 0xffffffff, 0x6}, {0x559, 0x5, 0x1}, {0x1e, 0xc7d6, 0x2}, {0x3, 0xfe9, 0xb}, {0x400, 0x8, 0x6}, {0x9, 0xfd, 0x15}, {0x53db, 0x988, 0x8}, {0x1, 0xdd07, 0xfffff000}, {0xe97, 0x7, 0x8}, {0x0, 0x924, 0x8000000}, {0x81, 0x81, 0x5}, {0x1000, 0x4, 0xc4}, {0x2, 0x7fff, 0xc8f1}, {0xfffffffa, 0x6, 0x4}, {0x0, 0x200, 0x1}, {0x9, 0x9}, {0x5, 0x1, 0x800}, {0x38, 0x6}, {0x81, 0xa, 0xff}, {0x7f, 0x2, 0x3}, {0xe, 0x9, 0x8}, {0x0, 0x60, 0x7fffffff}, {0x3, 0x7, 0x3}, {0x2, 0x4, 0x6}, {0x2, 0x40, 0x6}, {0x0, 0x5, 0x80}, {0x6, 0xc, 0x6a06}, {0x825b, 0x0, 0x76}, {0x33c, 0x10, 0x742af1e}, {0x68e3, 0x280000, 0x4}, {0x7ff, 0xe58d, 0x9}, {0x8, 0x3, 0x5}, {0x80000001, 0x5, 0x7f}, {0x1, 0x101, 0x9}, {0x7, 0x7, 0x400}, {0x0, 0x10001, 0x7}, {0x32, 0x401, 0x1800000}, {0x401, 0xa37, 0x67a7}, {0x6, 0x9, 0x5}, {0xf, 0x400, 0x9}, {0x6, 0x2, 0xe0f5}, {0x0, 0x5, 0xffff}, {0x0, 0x0, 0x5}, {0xa, 0x324, 0x7}, {0x1, 0x401, 0xb}, {0x5, 0x1, 0x40}, {0x803, 0x8, 0x286577d1}, {0xfffffff8, 0x80000, 0x6}, {0x2, 0x6, 0x10001}, {0x40, 0xffff7fff, 0x6}, {0xa, 0x5, 0x5}, {0x401, 0x4, 0x9}]})
r9 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x50, &(0x7f0000000100), 0x48)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r10 = userfaultfd(0x800)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r10, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000a78000/0x3000)=nil, 0x3000}, 0x0, 0x2})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
r11 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r11, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}})

2m38.982350327s ago: executing program 37 (id=1545):
syz_io_uring_setup(0x1104, &(0x7f0000000900)={0x0, 0x6a5f, 0x20, 0x22, 0x311}, &(0x7f00000001c0)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001"], 0x148}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000b80)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000000440)="c49c35c57873d9a94d0f472f3f1bc9c066c383ac647f66c4ed9b2776d1508c66ec1f4fe65e52a22f30505ac9536e463009a3492682c8e0bfd8886bb6d85541061fc5cfb2fbd379ef7babb72018010c13f143f47c9cd2cb228c3d45f278f6b7afdbad40f46eb9ace0ff746f1d51e8b06937e976690192633c0537ccff05b261cd8c8945771440986695e21459bbb6550e2d55be6e9f9c08376616289656021a1f7d", 0xa1}, {&(0x7f0000002700)="83eba29eceb8362c7ab5ab792675ed2d1b991cb19f486bc4a23d0bb46db5827dd2dfecd33102ea3b68bcb411809d79542cb76a8df51a019c25a87b2f3104c7046589b218974c74c4a81916c302636e91803cc5b69bbc47a84fc00500fb50fc68f690ee17f7d51c6ec686f85c216ca69b30fe74d0", 0x74}, {&(0x7f0000000e40)="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", 0xbea}, {&(0x7f00000005c0)="0b06e5b6d1368b931f7fa026e545d1194ecf06ef4a0cd0ed70e0a34471d10892718089b6d9b44792ef18ea32d008e0ddf6f5a5b828aad38fde0c9959fa0a56085653d4d1347ef11e5302a34fe97b43474c9edb8e8eedebba29902d3467c54f950e3c097a9c8c68bc96e4af0a83913f910d7fbef10e25ed3b8ecadd04a4e329aac4e4415a4f016e18dbbadab0ad0b7d9a4b78f6abc27000a5ccde684075fcb0659d0dd21f5346f3e15df84e2fd8fe24f019ec2752db9b077abab2ec1ebfc7b478d969c7b6f8337527172fb15b4b2c8223c4604616a69a842ce3057fad4d400c77a6231b2faa3ddb4b033061eb", 0xec}, {&(0x7f00000007c0)="d712f2052bd28cedbc09354c520cb5f971d89a7c87543bc6aa24a6f995bd05e8be54168919e0b96d04df106e2b97b92faccb451220eb9565", 0x38}, {&(0x7f0000000800)="ae0e15c68033ff1fa64b6df7bcf4f61b52b2ef8bf6ca7d225c0ea6837edbacab591f119a1c1efec0ac1717b4723902eea0268a1f2d12e9547fecf9541d289ccb096c8c81a3842e3a4063a0eb7651df53179cee128ce440d3c5b392b1c82d5653434848d450dc766b851043bf8947fb319e2e9dc9951b8b1469b77b21a0035e", 0x7f}], 0x6, &(0x7f0000002940)=ANY=[@ANYBLOB="1000000000000000010000008240d9f397adde04cf4719dee8010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0000e806e9fe3b45b747dcee3795205a161fe149", @ANYRES8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x8000}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000000a00), 0x1, &(0x7f0000000a40)=""/72, 0x48}, 0x40}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000bc0)=""/139, 0x8b}], 0x1}, 0xbc5f}, {{&(0x7f0000000c80)=@phonet, 0x80, &(0x7f0000000980)=[{&(0x7f0000000d00)=""/60, 0x3c}, {&(0x7f0000000d40)=""/75, 0x4b}, {&(0x7f0000002200)=""/107, 0x6b}, {&(0x7f0000002280)=""/204, 0xcc}, {&(0x7f0000002380)=""/89, 0x59}], 0x5, &(0x7f0000002a00)=""/199, 0xbb}, 0x9}, {{&(0x7f0000002540)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000dc0)=[{&(0x7f00000025c0)=""/214, 0xd6}], 0x2a, &(0x7f00000026c0)=""/23, 0x17}, 0x9ee1}, {{&(0x7f00000050c0)=@qipcrtr, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b80)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/97, 0x61}, {&(0x7f0000002800)=""/162, 0xa2}, {&(0x7f0000004cc0)=""/228, 0xe4}, {&(0x7f0000004dc0)=""/59, 0x3b}, {&(0x7f0000004e00)=""/58, 0x3a}], 0x6, &(0x7f0000004ec0)=""/123, 0x7b}, 0xb}], 0x6, 0x2142, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800009500000000000000"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}, 0x40002002)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000200)={r7, r6})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r8, 0x802c550a, &(0x7f0000001e40)=@urb_type_iso={0x0, {0x6}, 0x6, 0x40, &(0x7f00000003c0)="09f2d3a57f8a229a4f87f219ede9b63375d89a1a3188628437a227029ff3538b6e5b0cafc422e6847fd00129638b948621ee1b5e32913af98eb89c8adb", 0x3d, 0x80000000, 0x5af7, 0x4b, 0xc8c1, 0x2, &(0x7f0000000400)="da9e7f91c3b941971edfa2", [{0x3, 0x7ff}, {0xd, 0x6, 0x3}, {0x4, 0x6a0fc203, 0x80000001}, {0x8475, 0x80000000, 0x7}, {0x80, 0x82c1, 0x4}, {0x3, 0xe}, {0x8, 0x3, 0x2}, {0x81, 0x0, 0x1ff}, {0x3, 0x7fffffff, 0x6}, {0x0, 0x1c2, 0x268}, {0x0, 0x7, 0x2}, {0x2, 0x7, 0xa5}, {0xbb03, 0x6, 0x80000000}, {0x9, 0x6, 0x9}, {0xa078, 0x81, 0x101}, {0xf1, 0x2, 0x80000000}, {0x8000, 0x9a, 0x3}, {0x3, 0x9, 0x8dd}, {0x4, 0xffff, 0x10001}, {0x5, 0x886d, 0x7}, {0xff, 0x368d7351, 0x1}, {0xbf15, 0x1, 0x2}, {0xa, 0x80000000, 0x6}, {0xc8, 0xffffffff, 0x6}, {0x559, 0x5, 0x1}, {0x1e, 0xc7d6, 0x2}, {0x3, 0xfe9, 0xb}, {0x400, 0x8, 0x6}, {0x9, 0xfd, 0x15}, {0x53db, 0x988, 0x8}, {0x1, 0xdd07, 0xfffff000}, {0xe97, 0x7, 0x8}, {0x0, 0x924, 0x8000000}, {0x81, 0x81, 0x5}, {0x1000, 0x4, 0xc4}, {0x2, 0x7fff, 0xc8f1}, {0xfffffffa, 0x6, 0x4}, {0x0, 0x200, 0x1}, {0x9, 0x9}, {0x5, 0x1, 0x800}, {0x38, 0x6}, {0x81, 0xa, 0xff}, {0x7f, 0x2, 0x3}, {0xe, 0x9, 0x8}, {0x0, 0x60, 0x7fffffff}, {0x3, 0x7, 0x3}, {0x2, 0x4, 0x6}, {0x2, 0x40, 0x6}, {0x0, 0x5, 0x80}, {0x6, 0xc, 0x6a06}, {0x825b, 0x0, 0x76}, {0x33c, 0x10, 0x742af1e}, {0x68e3, 0x280000, 0x4}, {0x7ff, 0xe58d, 0x9}, {0x8, 0x3, 0x5}, {0x80000001, 0x5, 0x7f}, {0x1, 0x101, 0x9}, {0x7, 0x7, 0x400}, {0x0, 0x10001, 0x7}, {0x32, 0x401, 0x1800000}, {0x401, 0xa37, 0x67a7}, {0x6, 0x9, 0x5}, {0xf, 0x400, 0x9}, {0x6, 0x2, 0xe0f5}, {0x0, 0x5, 0xffff}, {0x0, 0x0, 0x5}, {0xa, 0x324, 0x7}, {0x1, 0x401, 0xb}, {0x5, 0x1, 0x40}, {0x803, 0x8, 0x286577d1}, {0xfffffff8, 0x80000, 0x6}, {0x2, 0x6, 0x10001}, {0x40, 0xffff7fff, 0x6}, {0xa, 0x5, 0x5}, {0x401, 0x4, 0x9}]})
r9 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x50, &(0x7f0000000100), 0x48)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r10 = userfaultfd(0x800)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r10, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000a78000/0x3000)=nil, 0x3000}, 0x0, 0x2})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
r11 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r11, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}})

13.905699698s ago: executing program 6 (id=1988):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async)
r1 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1ac, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x160, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x148, 0x1, [@m_simple={0x10c, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x20000000, 0x2, 0xd}}]}, {0x7d, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fce993992ec472fc2cf0229c29df9308275aa845e17dc1e479ef3bdaac2b22173aa0db0c5c17daa5d8bfdc1952fbe903567065fbecf72fa157c3aaac70e46ef54a9edbaa0fa0c723674743dac2"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) (async)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) (async)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2302c4d849346f819f47ab95f021ec4546c903c9bacb67c5b9fb3287ac231159cc14419bb", @ANYRES32=0x0, @ANYRES32=0x0], 0xc4}}, 0x8044) (async)
sendto$inet6(r7, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x45}, 0x80, 0x0}, 0x20000080) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)="ca6ab07b5b"}, 0x20)

13.284887953s ago: executing program 5 (id=1992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000010c0)=@abs, 0x38)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0)
close(r3)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001240)=ANY=[], 0xfc}}, 0x4000005)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r7, &(0x7f00000000c0)=""/4096, 0x1000)
getdents(r7, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

11.413195898s ago: executing program 9 (id=1994):
socket$nl_route(0x10, 0x3, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2)
vmsplice(r0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r7 = accept4(r6, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300080001000000000014000000450000161400e89fcfd12a0000000190780a010100ac1414aa0400907800001400450000000000000000110000"], 0xfdef)

10.761385175s ago: executing program 6 (id=1997):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x6, 0x10000, {{0x2e, 0x4, 0x0, 0x1b, 0xb8, 0x68, 0x0, 0xf6, 0x2f, 0x0, @loopback, @empty, {[@lsrr={0x83, 0xb, 0xb1, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x4f, 0x1, [{0x1, 0xe, "2168f3c6d416bfbf684a0438"}, {0x7, 0x11, "4000339423e63aa1f82946b2655559"}, {0x0, 0x2}, {0x0, 0x3, "fc"}, {0x5, 0x2}, {0x5, 0x12, "048814648444dd0c6daff4e6881d895d"}, {0x1, 0xa, "6bef76409573034c"}, {0x0, 0x7, "98ec25ce77"}]}, @timestamp_addr={0x44, 0x44, 0x9a, 0x1, 0x9, [{@loopback, 0x7}, {@private=0xa010101, 0x540c}, {@remote, 0x3}, {@private=0xa010100}, {@loopback, 0x1}, {@multicast1, 0x5}, {@loopback, 0x5}, {@loopback, 0xffff8000}]}, @ra={0x94, 0x4}, @noop]}}}}}) (async)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$batadv(0x0, r0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71)
r3 = fsopen(0x0, 0x0) (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async, rerun: 32)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async, rerun: 32)
readlinkat(r4, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) (async, rerun: 64)
fsmount(r3, 0x0, 0x0) (rerun: 64)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) (rerun: 64)
close_range(r5, r5, 0x0) (async, rerun: 32)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 32)
close_range(r6, 0xffffffffffffffff, 0x200000000000000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000400)=[@enter_looper], 0x0, 0x0, 0x0}) (async)
r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000640))
io_uring_enter(r7, 0x22d2, 0x20, 0x0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=r8], 0x0)

10.657348598s ago: executing program 5 (id=1998):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x273, 0xec3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x2}, {0x9, 0xfff1}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x800)
sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)=""/44, 0x2c}], 0x1, 0x0, 0x0, 0x8000}, 0x4048800)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0x5b02, 0x0)
ioctl$EVIOCRMFF(r4, 0x40015b13, 0x0)
syz_usb_disconnect(r0)

9.449062214s ago: executing program 9 (id=2002):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='&\x00\x00', 0x3)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r2, 0x0, 0x0)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000300)=0x8)
sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0)
sendmsg$can_j1939(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)="f4e78d4837b4c64b7bce30d85066e820619c9624346344714b2b454ea8f4eef1584fbfa34491c5c24c7b75198d6f0f7b69933483ee784106987e85d5f2a77f21d1c0cb9eb183e1a76d856e5ebd44bf761e52cefa49f6232ab391b4625ed815a87d9eed921d95eaf0cfb3eb3a921c34394f5fe05b9effc5", 0x77}, 0x1, 0x0, 0x0, 0x20048000}, 0x810)
socket(0x400000000010, 0x3, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
poll(&(0x7f0000000340), 0x0, 0x400001)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x80ffffd, 0x0, 0x1, 0xa, 0x7f, 0xb0}, 0x20)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}})
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)

8.902202462s ago: executing program 6 (id=2004):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x200068c0, 0x0, 0x0)
recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0)
capset(0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$inet_smc(0x2b, 0x1, 0x0)
connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket(0x2, 0x80805, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x40)
socket$inet(0x2, 0x4000000000000001, 0x0)
listen(r4, 0x3)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x1000000000000000, 0x9, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'})

7.960385231s ago: executing program 7 (id=2005):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) (async)
syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x6, 0x6b, 0x0, 0x1ff, 0x6}) (async)
syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async)
close(r3) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
listen(r0, 0xfffffff8) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
socket(0x11, 0x800000003, 0x0) (async)
socket(0x10, 0x3, 0x0)

7.457489911s ago: executing program 7 (id=2006):
r0 = socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r0, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010125})
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000001f)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4)
fcntl$notify(r2, 0x402, 0x8000003d)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffe5b, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x40, 0x30}, &(0x7f00000000c0)=0xc)
close_range(r1, r2, 0x0)

7.366989714s ago: executing program 5 (id=2007):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc02000010000104feffffff000000000000", @ANYRES32=r1, @ANYBLOB="8249000000000000dc02168028000180100006"], 0x2fc}}, 0x8000)

7.123443052s ago: executing program 5 (id=2009):
chdir(&(0x7f0000000000)='./cgroup\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x30, 0x18, 0x0, 0x0, @binary="05ac0f0002ac0f000dac0f0001ac0f00869c1eba340c8e5349c00de3bf542907da861ef4bbab00d0043522c1"}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
mkdirat(r0, &(0x7f0000000080)='./control\x00', 0x0)
unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200)
rmdir(&(0x7f0000000040)='./control\x00')
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r0], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x48, 0x0, 0x8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @local, 0x3ff}, 0x1c)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10)
close(r5)

6.945503527s ago: executing program 7 (id=2010):
r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x101, 0x2501)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0405626, &(0x7f0000000000)={0x1, 0x0, {0x9, 0x2000004, 0x100e, 0x7, 0x4, 0x1, 0x1, 0x5}}) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00')
getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) (async)
mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x100, 0x3)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000013c0)={0x14fc, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x95, 0xfa, "8f7de4548dcdf0fc897a5d81751b0a36f6a09a2239d11e0d4988a1c5e8544ffe9dd983119b6b8df7f23b614631ecb63f5580b18fe907f9ab4c6a5240afb6d19c9fab4ea892b0668cd38ab7f9b3f8da06d17392ba76850df2a00e0ceac45eda19d62ce6f1956f6a992c98f10cd30db5d79fe736324d6eecb8e320c5a1b1242da1d42031faca4b6e544cc994793e4ba72bc8"}, @NL80211_ATTR_FILS_ERP_RRK={0x6f, 0xfc, "cf7ba6da6aab34f1489c58a23495da05dda3a360814007c0de7c5b5468b41881c43bdb4e4a70e08adf045cc32c0e0c7475068a28028b5afb30f284f208a35c1127fd663ebe4217df64441b0d21b35d692c349ba1cc77d3b70a84dce647706f2894b5533d4413e7c5f3a5c6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x20, 0xfc, "1d4b7f0553363d25ab351fa8569d0db08eaee8deb18d4d546be6cd79"}], @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE={0xf4, 0x2a, [@perr={0x84, 0xee, {0xfa, 0xe, [{{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x19}, {{}, @device_a, 0xdcc4, @void, 0x12}, {{}, @device_a, 0x7, @void, 0x2f}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x3}, {{}, @device_a, 0x8, @void, 0x3a}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x38}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x27}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x3c}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x20}, {{}, @device_a, 0x8, @void, 0x15}, {{}, @broadcast, 0x9, @void, 0x11}, {{0x0, 0x1}, @device_b, 0x10001, @value, 0x23}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast}, {{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0xe}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x49, 0xfa, "2a57ec4b7f7d9819d35a552f32f4dfd8edf6087f4b6e3c4cd14af9e17485f60ad4fb7faae5fa3b4104f914d1248fa25da222e460379f339c7c6e203f22b14654e1759a8672"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x81}, @NL80211_ATTR_FILS_ERP_REALM={0x57, 0xfa, "61df9ae56686b903d9c0f27726c96e625d8a635e71df5c22eb4bea28a76061e5d3b45985b1da7655336ad71f920cb8cedb10d597ddbe5a7b64aa83a17aa60f1e1e429590da7366d920d2b58037b1e4fefc4b5f"}, @NL80211_ATTR_FILS_ERP_REALM={0x2d, 0xfa, "3261684df3c3623d57949a1e6b33ef82b4739120ec9115a8cdb3f06fb3df2cfa058100ffa5887a2323"}, @NL80211_ATTR_FILS_ERP_REALM={0x2e, 0xfa, "e130dc04c084c5366bdb93973e64da25316efa4a897c0d37a1b89cc110afb58c25b63f18c91681731672"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "6c28aa551e6285984898"}, @NL80211_ATTR_FILS_ERP_RRK={0x102, 0xfc, "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"}], @NL80211_ATTR_IE={0x8, 0x2a, [@supported_rates={0x1, 0x2, [{0x24}, {0x6c}]}]}, @NL80211_ATTR_IE={0x8e, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x28}}, @gcr_ga={0xbd, 0x6, @device_b}, @ibss={0x6, 0x2, 0x7fff}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @fast_bss_trans={0x37, 0x64, {0x8, 0x1, "661e734eb22027308089c036594ef304", "f3bcd59fbf03001f833c897caac5f9b83d852b1cb6d58dd90c214f2a87de46a5", "eea77a1dc5681f7ebdbd7504c152a0175358a70e5939c20b626259d6a8f3fafa", [{0x4, 0x10, "f28bf84870993cc9351a96c09cf93118"}]}}, @supported_rates={0x1, 0x1, [{0xb, 0x1}]}]}]}, 0x14fc}, 0x1, 0x0, 0x0, 0x20004880}, 0x20000004)

6.791788609s ago: executing program 2 (id=2011):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
socket$l2tp(0x2, 0x2, 0x73)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x206182, 0x0)
ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x3, 0x7f, 0xd7, 0x1}, {0x5, 0x41, 0xc5, 0x6}, {0xe, 0xfc, 0x8, 0x101}]})
r7 = socket(0x10, 0x3, 0x0)
r8 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}})
sendto$inet6(r7, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf)
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r9 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x80081)
ioctl$VIDIOC_G_CROP(r9, 0xc014563b, &(0x7f0000000300)={0x1, {0x80800, 0x73, 0x40000008, 0x4}})
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6)
dup3(r1, r3, 0x80000)
capget(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000180)={0x7, 0x8, 0x6, 0x8, 0x1, 0xffffffff})
read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="1684232dfefd76765000afca0056", @ANYRES8=r2, @ANYBLOB="b21e28bd7000fcdbdf250400899678dbba74de933ba06aa20000060001000700000006000e00"], 0x2c}}, 0x4c804)

6.76103306s ago: executing program 7 (id=2012):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, <r3=>0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}, {}], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x4, 0x4, 0x5})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)={r3})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r2, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0xfffffffd, 0x2, [<r5=>0x0], [0x0, 0x7], [0x80000, 0x80000002, 0x2], [0x0, 0x0, 0x10001, 0xbb3]})
r6 = gettid()
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)
readv(r7, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2)
tkill(r6, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x2, 0x2, 0x806})
syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, <r8=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8})

6.669734954s ago: executing program 9 (id=2013):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
socket$l2tp(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x3, 0x7f, 0xd7, 0x1}, {0x5, 0x41, 0xc5, 0x6}, {0xe, 0xfc, 0x8, 0x101}]})
r5 = socket(0x10, 0x3, 0x0)
ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}})
sendto$inet6(r5, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf)
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x80081)
ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000300)={0x1, {0x80800, 0x73, 0x40000008, 0x4}})
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6)
dup3(r1, 0xffffffffffffffff, 0x80000)
capget(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000180)={0x7, 0x8, 0x6, 0x8, 0x1, 0xffffffff})
read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="1684232dfefd76765000afca0056", @ANYRES8=r2, @ANYBLOB="b21e28bd7000fcdbdf250400899678dbba74de933ba06aa20000060001000700000006000e00"], 0x2c}}, 0x4c804)

6.666610882s ago: executing program 6 (id=2014):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$FUSE_STATX(r1, &(0x7f0000002200)={0x130, 0x0, 0x0, {0x3, 0x7, 0x0, '\x00', {0x4, 0x6, 0x80000001, 0xacdb, 0x0, 0x0, 0x4000, '\x00', 0x8000000000000000, 0x1, 0x4, 0x81, {0xffffffffc01879b1, 0x80000000}, {0xe61, 0x2}, {0x0, 0x1290d668}, {0x0, 0xfffffffa}, 0x7362, 0x7fc, 0x7fff, 0x7}}}, 0x130)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, 0x4080)
ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f00000002c0)={'veth0\x00', @random="bc1a091f2845"})
r4 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000002340)={{0x1, 0x1, 0x18, r0}, './file1\x00'})
syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xbe, 0xc6, 0x31, 0x8, 0x15c2, 0x44, 0xc450, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xdb, 0x4, 0xc0, 0xe6, [{{0x9, 0x4, 0x6d, 0x4, 0x0, 0x49, 0x3, 0x18, 0x5}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

5.087271046s ago: executing program 9 (id=2015):
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r4=>0x0})
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
eventfd(0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000140), 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1})
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)

4.95088337s ago: executing program 2 (id=2016):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
read$FUSE(r1, &(0x7f0000003a40)={0x2020}, 0x2020)
setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
fanotify_init(0x200, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x115440)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil)
listen(0xffffffffffffffff, 0x3)
memfd_create(0x0, 0x6)
set_mempolicy(0x2, &(0x7f0000000100)=0x4, 0x3)
memfd_create(&(0x7f0000000380)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)

4.766700244s ago: executing program 7 (id=2017):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x273, 0xec3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x2}, {0x9, 0xfff1}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x800)
sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)=""/44, 0x2c}], 0x1, 0x0, 0x0, 0x8000}, 0x4048800)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0x5b02, 0x0)
ioctl$EVIOCRMFF(r4, 0x40015b13, 0x0)
syz_usb_disconnect(r0)

3.945128005s ago: executing program 5 (id=2018):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r2 = socket(0x2b, 0x80801, 0x1)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}, r4}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r4}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4}}, 0x20)
unshare(0x2a020480)
r6 = socket$netlink(0x10, 0x3, 0x0)
preadv2(r6, 0x0, 0x0, 0xd, 0x100, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

3.87434991s ago: executing program 2 (id=2019):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x808c03, &(0x7f0000002880)=ANY=[@ANYBLOB="f8a900", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) (async)
pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x110) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x1, 0x4, 0x7, 0x4, 0x4], 0x0, 0x4}, {0x0, [0x6, 0x2, 0x2, 0x0, 0x6, 0x4], 0x0, 0x6}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x1, "c77f", 0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "205ee7524f4d06aa6a1764d2a94a802dff3566c833c53449ba9c5eec60b1"}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x6, 0x1, 0x7fff, 0x136a, 0x8, 0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) (async)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000080)=0x5d6aff9e) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async)
r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x71})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r7, 0x1, 0x7, 0x0, 0x16)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
setsockopt(r0, 0xb, 0x3, &(0x7f0000000200)="82d454adcb998cc7eb69f82bf13369b1f5c31e9fb25cded0e35b11109a9737f961f6aadacf2840e52b5b258bfc4d8e403ca1d781838173da2cc800a9a71618dc75a1535a33d9d6dca5caa17a3871e9aeff62a1bb69939f0fe2381262dbb8887b05fb199696e4c9d2ff751e965727e6eb244f1a2285928e1ed8904a5d733f730b478ff991a9712c2f2be1ccd3e2107f55e166507860418dd3c460279b2c9d2dda87ee318a3546df1d6545ca681e98787e56f7a5725b4451310c04d20a2d7453", 0xbf) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4020084}, 0x40) (async)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000280), &(0x7f0000000300)=0x4) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0xffff, 0x80000003, 0x108, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r5, 0x8}, 0x8)

3.825836122s ago: executing program 9 (id=2020):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000000, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48)
socket(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$mouse(0x0, 0xe046, 0x202000)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x9, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x1, 0xf8, 0x4d, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)
sendfile(0xffffffffffffffff, r5, &(0x7f00000000c0)=0xfffffffffffffffa, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
io_setup(0x2cf, &(0x7f0000000280)=<r7=>0x0)
io_cancel(r7, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x6, 0x7, r6, 0x0, 0x0, 0xcf, 0x0, 0x1}, &(0x7f0000000f00))
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
getresgid(&(0x7f0000001fc0), &(0x7f0000002000), &(0x7f0000002040))
ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000140)={0x12, 0x5, 0x7})

3.688382291s ago: executing program 2 (id=2021):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c8183070400", 0xd)
sendto$inet(r1, 0x0, 0x0, 0x20000090, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd(0x8c66)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r6, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340))
r7 = dup(r5)
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r7})
ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000100), 0x2, 0x0, &(0x7f0000000140)=[{}, {}], 0x6, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}]})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x3, 0x0, 0x4, r4, 0x8})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r4, 0x1})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r4, 0x5})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x20000, 0x1, {0x0}})

2.675242556s ago: executing program 2 (id=2022):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x33, 0x1, 0x0, "a900000080df48324305f700004840080000000000008300", 0x50313459})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ea, 0x75}})
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x2, "9bc8"}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000005000000ec0b000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000280), 0x105, r2}, 0x38)
io_uring_setup(0x2c49, &(0x7f0000000400))
socket(0x10, 0x803, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
munlockall()
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c001780080001800400", @ANYRES64=r3], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000d40)=""/4096}, 0x20)
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0)={[0xfffffffffffff000]}, 0x8)
syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x33, 0x1, 0x0, "a900000080df48324305f700004840080000000000008300", 0x50313459}) (async)
socket(0x10, 0x803, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ea, 0x75}}) (async)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x2, "9bc8"}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000005000000ec0b000007"], 0x48) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000280), 0x105, r2}, 0x38) (async)
io_uring_setup(0x2c49, &(0x7f0000000400)) (async)
socket(0x10, 0x803, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
munlockall() (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c001780080001800400", @ANYRES64=r3], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000d40)=""/4096}, 0x20) (async)
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0)={[0xfffffffffffff000]}, 0x8) (async)
syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)

2.318852517s ago: executing program 2 (id=2023):
r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100090400010000000000", @ANYRES32=0x0], 0x0)
syz_usb_connect(0x5, 0x2e6, &(0x7f0000000640)={{0x12, 0x1, 0x89fb6d09a3083fce, 0x6, 0x28, 0x8d, 0x40, 0x5ac, 0x30b, 0x935b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d4, 0x2, 0x80, 0x8, 0xd0, 0x6, [{{0x9, 0x4, 0xef, 0x4, 0x5, 0x3, 0xdd, 0x2, 0x7, [@uac_as, @hid_hid={0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0xcea}}], [{{0x9, 0x5, 0x5, 0x0, 0x40, 0x40, 0xe4, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x9}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x6, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc8, 0x6}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x7, 0x0, 0x28, [@generic={0xd7, 0x3, "268bbe93be6116205b8d30e3483282ae4c1481633978ba8b867e0f814210bcb1d43683f2c832f9c387568356068680145fd5522a82b5cd3e65492482d59f04a366f2182f877ffee2962aefbdfed679674199e8408db5a16cde07e662f65a3601e55f12f84ddae58d9efcdccea72c1a819a56a544cb537c99166dfa58af86e9956d8e06f0a8fbc82e71ef4ca53368ad97fd51d9a852363dbda1938e805a98d702fd37f6ba8c69a66e08dcb9b01d987d9817495c86e65e0b7e01410ce298f37dc49ceb9538a95ee659f739bb77f5edce35885ad9213d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x4, 0x0, 0x8}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x4, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x44, 0x1}]}}]}}, {{0x9, 0x4, 0xf7, 0xba, 0x9, 0xd7, 0xb6, 0xd, 0x9, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "109f2ae0"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x5e, 0x81, 0xc}, {0x6, 0x24, 0x1a, 0x80, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xa, 0x2259, 0x4, 0xed, 0x64bb, 0x2}]}], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x6, 0xfc, 0xfb}}, {{0x9, 0x5, 0xa, 0x1, 0x3ff, 0x3, 0x5, 0x7, [@generic={0x2a, 0x5, "8f01b9a1e36aa0217add25a0a87807d93b25e32b59c87df1f0925d01961d2a4718d4bb16754d02b6"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x1, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x3}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x9, 0xea, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xf4, 0x1, 0x8, [@generic={0x39, 0x30, "6556fdb2d3b56a6368c9ae3df65fe395bf7202060e0f55785a4abcc3a072ab7b10f313bd02cac967950acb376dd79e19fdbe339c592cc3"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x0, 0x9, 0x45, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xdd42}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x373}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x7, 0x0, 0x3, [@generic={0x8c, 0x30, "0f9a05fc703541a065da819a54553103a179f88e61d0f2d1d2de744c2949e9914cc516e9d9214860ce12095ea76c87899f8a7f7a72f14c15b18105909ea812357667af1c97471748bae244e1924d11a51269f44750e7a49977056eda4ca2ccb2db70dcf6e23fa594afe3c95de19cb1427b4d85a2de15b22e98a6a1a4be856f8cf29bbe6bb30d442569bf"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x7, 0x4, 0x5}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x7f, 0xc, 0x1, 0x20, 0x6}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x96e78ec838a3cb91}}, {0x32, &(0x7f00000009c0)=@string={0x32, 0x3, "c2bbc79f51bf15c6a46c1134e133b6196c0dc7632cbddd2c79c3c917b4eb077f080c82e6526e4c2e2a82275bad74e41b"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x6f, &(0x7f0000000a40)=@string={0x6f, 0x3, "29acf6d4ea24974a7040ce049e93f2e6ba33338d36932c90136e84a3bb868ba3ec92e47adbc72dad1b59f46ee6cc9bfbdd9bdad20926ad7f964f0b53f6fea9ce47bfffd5fe2055e33305ac48234a112b481f5a946f66addfb64f501c0b11122e6614a7c5937ee16bf5082876ae"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x43f}}, {0x34, &(0x7f0000000b40)=@string={0x34, 0x3, "d8efbd11ecad24e32ab66c035d757652d6582089d28afa6cf83e1d7d8a6d59e9dbbc7f76862f460f703e859febe95886dec2"}}, {0xc5, &(0x7f0000000b80)=@string={0xc5, 0x3, "f3fc386631f47f99cec95a7a9019ec45f87d3289acc4e17b78fca972716f54458ad16c1c60db18d32668dd240e580aa781eca5269a576ea66455d503afa2ce26ae18082fed16d415f649ec45b7fa8c2b856453c6ce607531a3cc72264a4419e838bc0ecd60234617e64be129deef9e04e0cc11351cdfe7f1379b885533c93781eb6232aa8c8e350f4ba61d9532f10bd5aa9fa50df720fe25c8dd1e1b7108e9664be66bcd0d27f5a8f15c1a89ef8be21e0ff12d5a29409d31bd9218bf05bdb9fa09e691"}}]})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x91, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0x0, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0xd, 0x23}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0xc, 0x36, 0x20, 0xa}, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x82, 0x37, 0x0, 0x850, 0x14}]}, 0x7, [{0xe4, &(0x7f00000000c0)=@string={0xe4, 0x3, "510cb9e2e443238ecfda1d11bf6a14ec63cb23f7e1515b40133f5c59a5003d3dfa8ade9c9f09ca5f9e38d5c721645a743a60018fbe08a0170e4467e04098d34d08361475d221034f7e5b23d0adffeb52ddbdc2df221434ca6ca97adf14ec2a12e395f8740d808027affa81b316bf301a45db1bfc766e12f28500a60c81638a068272596bc7eaa40b3416a0a674d9fa96f93b6199c7c1f53dd027069ab55ccccad4d9c9190f4f91d8898e5a608be443f0515e12a6b529feb4bb314de8da909d4d68869a7f51c0794710b525db2cc61f09f032132e9581cea87b9aa6de558ac3e49821"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x449}}, {0xac, &(0x7f0000000240)=@string={0xac, 0x3, "1e1bd133f7a5c9801dac20c8932f1e48c0caede899b745674b185f18e4837d6202badb632c272236dc873eb3cd3da435698429ca9dcbf270ec5506b3ec5502d0f2a5b4995f5599ef4ad7bed2badf0422a4c1890320b58cc063d2e3a94bd0eabe69318c1daab73a3866109e2bf8370b4b675cfa80d0cbb0299e00efb7726d23f581592067dc83c612e11b32417b3c45e2e3fb313b739c8f76a6216fc2acef37a7a7b4efa0a1780413e714"}}, {0x55, &(0x7f0000000300)=@string={0x55, 0x3, "e046c8110f4767ba5200a74c4cf220483f12fb0410dc329e450644506f0a307947a21fa4533649cf60b4705d7d22bd81dc033ad65eac7942fe2ae2930e8ac5a503e873780e0290d548b4c7fb41f2a2ec2dad74"}}, {0x22, &(0x7f0000000380)=@string={0x22, 0x3, "1041eb88933fa530e03d42f7623c332f23cb6032cd40a505844ecfc6a6434a85"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}]})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4)
bpf$MAP_CREATE(0x1101000000000000, &(0x7f00000005c0)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
sendmsg$nl_generic(r1, 0x0, 0xc000)
syz_usb_control_io$printer(r0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0)

1.832846848s ago: executing program 5 (id=2024):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400400000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500000c0002800500090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x3df, 0x83, 0x65, 0x81}, {0x9, 0x5, 0xb, 0x2, 0x20, 0x0, 0x2, 0x9}, {0x9, 0x5, 0x4, 0x3, 0x8, 0x2, 0xea, 0x1}}}}}}]}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000002080)=[{{&(0x7f0000002100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000580)=""/125, 0x7d}, {&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000700)=""/78, 0x4e}, {&(0x7f0000000780)=""/249, 0xf9}, {&(0x7f0000000600)=""/51, 0x33}], 0x6}}, {{&(0x7f0000000900)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000980)=""/126, 0x7e}, {&(0x7f0000000a00)=""/226, 0xe2}, {&(0x7f0000000b00)=""/241, 0xf1}, {&(0x7f0000000c00)=""/246, 0xf6}, {&(0x7f0000000d00)=""/57, 0x39}, {&(0x7f0000000d40)}, {&(0x7f0000000d80)=""/203, 0xcb}, {&(0x7f0000000d40)=""/42, 0x2a}, {&(0x7f0000000ec0)=""/62, 0x3e}, {&(0x7f0000000f00)=""/141, 0x8d}], 0xa, &(0x7f0000001080)=""/4096, 0x1000}, 0xfff}], 0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec23, 0x80, 0x1, 0x80}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f0000000240)=<r6=>0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d3, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000280)=""/97, 0x61}], 0x2})
io_uring_enter(r4, 0x847ba, 0x79c, 0xe, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r9 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0)
syz_open_dev$sg(&(0x7f00000001c0), 0x7, 0x18a01)
close_range(r9, 0xffffffffffffffff, 0x0)

1.631461745s ago: executing program 7 (id=2025):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
socket$l2tp(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x3, 0x7f, 0xd7, 0x1}, {0x5, 0x41, 0xc5, 0x6}, {0xe, 0xfc, 0x8, 0x101}]})
r5 = socket(0x10, 0x3, 0x0)
ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}})
sendto$inet6(r5, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf)
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x80081)
ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000300)={0x1, {0x80800, 0x73, 0x40000008, 0x4}})
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6)
dup3(r1, 0xffffffffffffffff, 0x80000)
capget(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000180)={0x7, 0x8, 0x6, 0x8, 0x1, 0xffffffff})
read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="1684232dfefd76765000afca0056", @ANYRES8=r2, @ANYBLOB="b21e28bd7000fcdbdf250400899678dbba74de933ba06aa20000060001000700000006000e00"], 0x2c}}, 0x4c804)

1.522941394s ago: executing program 9 (id=2026):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
quotactl_fd$Q_GETFMT(r1, 0xffffffff80000400, r2, &(0x7f00000001c0))
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
munlockall()
symlink(&(0x7f0000000480)='.\x00', &(0x7f0000000040)='./file0\x00')
rmdir(&(0x7f0000000200)='./file0/file0/..\x00')
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x2, 0x45, 0x0, "00000000000000000000000000000000000000f300000000000000000000000000000000350d0000000000000000000083c0d55760b2d13d000c00cbcd00800000000000000000080000008000"}, 0xd8)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000000c0)=""/111)
syz_usb_connect$uac1(0x0, 0x9c, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xf, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x6}, [@feature_unit={0x13, 0x24, 0x6, 0x1, 0x3, 0x6, [0x8, 0x8, 0x1, 0x0, 0xa, 0xa], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xfd, 0x1, 0xff, 0xad}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x2, 0x3d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0xb0, 0x5, {0x7, 0x25, 0x1, 0x2, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x40, 0xfb, {0x7, 0x25, 0x1, 0x0, 0xed, 0x1}}}}}}}]}}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008"], 0x92fc}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

1.249082798s ago: executing program 6 (id=2027):
socket$nl_route(0x10, 0x3, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2)
vmsplice(r0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r6 = accept4(r5, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300080001000000000014000000450000161400e89fcfd12a0000000190780a010100ac1414aa0400907800001400450000000000000000110000"], 0xfdef)

0s ago: executing program 6 (id=2028):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x80047437, &(0x7f0000000100))
socket$inet6(0x10, 0x80000, 0x3)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES8=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@empty, @rand_addr, <r4=>0x0}, &(0x7f0000000240)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8000000000000000})
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440))
unshare(0x6c049f00)
r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r5, 0x0, 0x400000000000000, 0x7)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000"], 0xd4}}, 0x4000010)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x4f, 0x1, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x480c0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
syz_usb_connect(0x1, 0x17a, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x49, 0x15, 0x45, 0x40, 0x13d3, 0x3349, 0x6b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x168, 0x1, 0x68, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb5, 0x7, 0x8, 0x25, 0x77, 0x51, 0x0, [], [{{0x9, 0x5, 0x5, 0xc, 0x400, 0x7, 0x1e, 0x94, [@generic={0x100, 0x11, "7aac28c67edbf12c33f7cf95f19755fb3df98ba2ef4a612547b09882537512d8b1b8c08dbfebd0d2a1cb83eb289c43c7699099f236964eb12653c15317349e6829889c0a9539aa1829beef5663eb1cd9220959c3c359f7ddc0e836d9f5a1a2ee872b588bdcda1b0253c080ca62c91478ad4cfb87cffb4b66fc98236e3f9a9bdcd7c9f385215f1cb68624453af4d45d337f08808898e20848c1f6a7502384f0e9adcb15a709dc6cbf4d19a04e590745cb000ea276479537f8c1ff7b22e20bb8d37c2a95dc9b94d5fd674abf8e8b66f5ba4f6831bea3652c057da53c4106351fb5ec7f74a9f7a72299e0b4060cfe5c1e08bfd3debb34414fd00d341425e506"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfffa}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x18, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x9, 0x1, 0x81}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x10, 0xb, 0x25}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x6, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xc, 0x7f, 0x7}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x5, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x7f, 0xff, 0x1}}]}}]}}]}}, 0x0)

kernel console output (not intermixed with test programs):

 1007.239514][T12093] usb 10-1: config 0 has no interface number 0
[ 1007.259661][T12093] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1007.294998][T12093] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.320265][T12093] usb 10-1: Product: syz
[ 1007.328753][T12093] usb 10-1: Manufacturer: syz
[ 1007.339214][T12093] usb 10-1: SerialNumber: syz
[ 1007.364351][T12093] usb 10-1: config 0 descriptor??
[ 1007.384141][T12093] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1007.410145][T12093] usb 10-1: selecting invalid altsetting 1
[ 1007.419696][T12093] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1007.485113][T12093] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1007.529883][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1424'.
[ 1007.552819][T12093] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1007.569390][T12093] usb 10-1: media controller created
[ 1007.608411][T12217] futex_wake_op: syz.7.1424 tries to shift op by 36; fix this program
[ 1007.635401][T12214] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1007.760128][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1007.777313][T12093] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1008.102459][ T5957] pwc: Failed to set LED on/off time (-71)
[ 1008.165546][ T5957] pwc: send_video_command error -71
[ 1008.193377][ T5957] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1008.252345][ T5957] Philips webcam 6-1:127.0: probe with driver Philips webcam failed with error -71
[ 1008.306687][ T5957] usb 6-1: USB disconnect, device number 57
[ 1008.481694][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1426'.
[ 1008.512157][T12219] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1426'.
[ 1008.591106][ T5946] usb 9-1: USB disconnect, device number 40
[ 1008.621240][T12205] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1008.730594][T12093] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1008.768741][T12093] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1008.784214][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1008.833690][T12093] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1009.063551][T12093] usb 10-1: USB disconnect, device number 44
[ 1009.261041][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1009.824387][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.472074][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.769858][T12250] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1432'.
[ 1010.875325][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.882562][T12244] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1010.994317][T12245] netlink: 'syz.7.1433': attribute type 3 has an invalid length.
[ 1011.010250][T12254] trusted_key: syz.6.1434 sent an empty control message without MSG_MORE.
[ 1011.020216][T12245] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1433'.
[ 1011.111211][T12244] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1011.224132][T12254] sctp: [Deprecated]: syz.6.1434 (pid 12254) Use of int in max_burst socket option deprecated.
[ 1011.224132][T12254] Use struct sctp_assoc_value instead
[ 1011.268888][T12258] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1435'.
[ 1011.282743][T12244] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1011.336586][T12244] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1011.388410][T12244] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1011.537762][T12244] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1011.913970][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1012.046443][T12281] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1439'.
[ 1012.300677][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1012.452050][T12287] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1012.557431][   T43] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1012.964875][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1012.985880][   T43] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[ 1013.002190][   T43] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1013.053127][   T43] usb 6-1: config 220 has no interface number 2
[ 1013.059514][   T43] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1013.159787][   T43] usb 6-1: config 220 interface 0 has no altsetting 0
[ 1013.186371][   T43] usb 6-1: config 220 interface 76 has no altsetting 0
[ 1013.210518][   T43] usb 6-1: config 220 interface 1 has no altsetting 0
[ 1013.260897][   T43] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1013.286627][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1013.303606][   T43] usb 6-1: Product: syz
[ 1013.309031][   T43] usb 6-1: Manufacturer: syz
[ 1013.317816][   T43] usb 6-1: SerialNumber: syz
[ 1013.375645][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1444'.
[ 1013.410998][T12298] futex_wake_op: syz.7.1444 tries to shift op by 36; fix this program
[ 1013.550337][   T43] usb 6-1: selecting invalid altsetting 0
[ 1013.564781][   T43] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[ 1013.594740][   T43] usb 6-1: No valid video chain found.
[ 1013.605523][   T43] usb 6-1: selecting invalid altsetting 0
[ 1013.622275][   T43] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[ 1013.643537][T12303] netlink: 'syz.9.1443': attribute type 15 has an invalid length.
[ 1013.653111][T12303] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1443'.
[ 1013.821011][   T43] usb 6-1: USB disconnect, device number 58
[ 1013.894281][T12304] sit1: entered allmulticast mode
[ 1014.175828][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1014.606094][T12310] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1447'.
[ 1015.226285][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.340777][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.651804][   T43] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 1015.738977][T12325] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1452'.
[ 1015.890686][   T43] usb 9-1: Using ep0 maxpacket: 8
[ 1015.964675][   T43] usb 9-1: config 1 interface 0 altsetting 84 bulk endpoint 0x1 has invalid maxpacket 1023
[ 1015.976209][   T43] usb 9-1: config 1 interface 0 altsetting 84 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1015.999457][   T43] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1016.030716][   T43] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1016.052075][   T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1016.097565][   T43] usb 9-1: Product: ᠉
[ 1016.119187][   T43] usb 9-1: Manufacturer: 턊遟见淍ފ鋕⴯큒䕻ꗣ뿄蠁≃蔋솃崷趭굊鄘ᥙ
[ 1016.147547][   T43] usb 9-1: SerialNumber: 鈱⚋ㄥ訚㣳苡쀒颺ᩭ䘛圕춣䕘Ꮲ跺⓲ଠ體꥜䮾) 雄쒤놀ꗝ⊘ꪸ쩠㵋ᵟ栽䕚퀔᭬퇹㼲吋࿰ﾢ띎㡽矽箓楝隣Ῠ蝍扼䬌捵ㅽ袈㶴㊯ࢮ祓쐝
[ 1016.314035][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1016.356087][T12322] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1016.364296][T12322] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1016.405801][T12337] fuse: Bad value for 'user_id'
[ 1016.413445][T12337] fuse: Bad value for 'user_id'
[ 1016.427322][T12337] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1456'.
[ 1016.644732][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1016.661779][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1016.705531][T12347] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1459'.
[ 1016.748757][T12322] binder: 12321:12322 ioctl 5413 200000000940 returned -22
[ 1016.846686][   T43] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 84 proto 3 vid 0x04B8 pid 0x0202
[ 1016.925738][   T43] usb 9-1: USB disconnect, device number 41
[ 1016.947636][   T43] usblp0: removed
[ 1016.960813][ T5920] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[ 1017.114345][ T5920] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1017.133273][ T5920] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1017.173877][ T5920] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1017.184957][ T5920] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.205377][ T5920] usb 10-1: Product: syz
[ 1017.220678][ T5920] usb 10-1: Manufacturer: syz
[ 1017.354128][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1017.362664][ T5920] usb 10-1: SerialNumber: syz
[ 1017.411892][ T5920] usb 10-1: config 0 descriptor??
[ 1017.780541][   T43] usb 8-1: new full-speed USB device number 60 using dummy_hcd
[ 1017.953500][   T43] usb 8-1: device descriptor read/64, error -71
[ 1018.200983][   T43] usb 8-1: new full-speed USB device number 61 using dummy_hcd
[ 1018.330561][   T43] usb 8-1: device descriptor read/64, error -71
[ 1018.384641][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1018.392853][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1018.441117][   T43] usb usb8-port1: attempt power cycle
[ 1018.770622][ T5945] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 1018.800662][   T43] usb 8-1: new full-speed USB device number 62 using dummy_hcd
[ 1018.877833][   T43] usb 8-1: device descriptor read/8, error -71
[ 1018.931094][ T5945] usb 9-1: device descriptor read/64, error -71
[ 1018.976790][T12391] input: syz1 as /devices/virtual/input/input26
[ 1019.160600][   T43] usb 8-1: new full-speed USB device number 63 using dummy_hcd
[ 1019.223228][   T43] usb 8-1: device descriptor read/8, error -71
[ 1019.232810][ T5945] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 1019.330987][   T43] usb usb8-port1: unable to enumerate USB device
[ 1019.427522][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1019.460571][ T5945] usb 9-1: device descriptor read/64, error -71
[ 1019.571186][ T5945] usb usb9-port1: attempt power cycle
[ 1019.851661][ T5920] usb 10-1: USB disconnect, device number 45
[ 1020.010707][ T5945] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 1020.061645][ T5945] usb 9-1: device descriptor read/8, error -71
[ 1020.081014][T12396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.134676][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1471'.
[ 1020.310563][ T5945] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 1020.420690][ T5945] usb 9-1: device descriptor read/8, error -71
[ 1020.575182][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.578196][ T5945] usb usb9-port1: unable to enumerate USB device
[ 1020.723956][ T5920] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[ 1020.974580][ T5920] usb 10-1: Using ep0 maxpacket: 32
[ 1021.033624][ T5920] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1021.046769][ T5920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.115279][ T5920] usb 10-1: config 0 descriptor??
[ 1021.250710][   T43] usb 8-1: new full-speed USB device number 64 using dummy_hcd
[ 1021.344744][ T5920] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1021.369241][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1021.390612][   T43] usb 8-1: device descriptor read/64, error -71
[ 1021.401816][ T5920] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1021.409813][ T5920] usb 10-1: media controller created
[ 1021.431108][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.472526][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1021.581912][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.640887][   T43] usb 8-1: new full-speed USB device number 65 using dummy_hcd
[ 1021.911407][   T43] usb 8-1: device descriptor read/64, error -71
[ 1022.078669][   T43] usb usb8-port1: attempt power cycle
[ 1022.470788][   T43] usb 8-1: new full-speed USB device number 66 using dummy_hcd
[ 1022.646592][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1022.672644][   T43] usb 8-1: device descriptor read/8, error -71
[ 1022.920688][   T43] usb 8-1: new full-speed USB device number 67 using dummy_hcd
[ 1022.951869][   T43] usb 8-1: device descriptor read/8, error -71
[ 1023.093947][   T43] usb usb8-port1: unable to enumerate USB device
[ 1023.462612][ T5920] az6027: usb out operation failed. (-71)
[ 1023.495606][ T5920] az6027: usb out operation failed. (-71)
[ 1023.513477][ T5920] stb0899_attach: Driver disabled by Kconfig
[ 1023.520266][ T5920] az6027: no front-end attached
[ 1023.520266][ T5920] 
[ 1023.586553][ T5920] az6027: usb out operation failed. (-71)
[ 1023.670414][T10260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1023.791094][ T5920] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1023.861886][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input27
[ 1023.947346][ T5920] dvb-usb: schedule remote query interval to 400 msecs.
[ 1023.979748][ T5920] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1024.018847][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1483'.
[ 1024.157901][ T5920] usb 10-1: USB disconnect, device number 46
[ 1024.371200][T12452] netlink: 'syz.8.1482': attribute type 15 has an invalid length.
[ 1024.379600][T12452] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1482'.
[ 1024.463225][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.767099][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.801842][ T5920] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1025.672920][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1488'.
[ 1025.736621][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1488'.
[ 1025.824718][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1026.034799][T12475] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1026.095362][T12475] vlan0: entered promiscuous mode
[ 1026.100870][T12475] bond0: entered promiscuous mode
[ 1026.109548][T12475] bond_slave_0: entered promiscuous mode
[ 1026.116841][T12475] bond_slave_1: entered promiscuous mode
[ 1026.130244][T12475] bond0: (slave vlan0): Opening slave failed
[ 1026.907050][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1027.523561][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1027.792481][   T43] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 1027.984425][T10260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1028.001359][   T43] usb 9-1: Using ep0 maxpacket: 8
[ 1028.010624][ T5957] usb 8-1: new high-speed USB device number 68 using dummy_hcd
[ 1028.023437][   T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1028.036599][   T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1028.063310][   T43] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1028.105315][   T43] usb 9-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[ 1028.138711][   T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.169457][   T43] usb 9-1: config 0 descriptor??
[ 1028.174676][ T5957] usb 8-1: Using ep0 maxpacket: 32
[ 1028.188155][ T5957] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1028.229016][ T5957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.307157][ T5957] usb 8-1: config 0 descriptor??
[ 1028.547795][ T5957] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1028.625048][   T43] logitech 0003:046D:C293.001A: unknown main item tag 0x0
[ 1028.650642][   T43] logitech 0003:046D:C293.001A: unknown main item tag 0x0
[ 1028.686823][ T5957] usb 8-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 1028.697339][   T43] logitech 0003:046D:C293.001A: unknown main item tag 0x0
[ 1028.718900][   T43] logitech 0003:046D:C293.001A: unknown main item tag 0x0
[ 1028.730688][ T5957] usb 8-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 1028.776401][   T43] logitech 0003:046D:C293.001A: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.8-1/input0
[ 1028.838024][   T30] kauditd_printk_skb: 16 callbacks suppressed
[ 1028.838044][   T30] audit: type=1326 audit(1757301006.252:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.6.1493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75b098ebe9 code=0x0
[ 1028.877367][   T43] logitech 0003:046D:C293.001A: no inputs found
[ 1028.998257][T12483] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[ 1029.047796][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1029.377569][T12497] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1494'.
[ 1029.566689][T12482] pimreg3: entered allmulticast mode
[ 1029.582914][T12503] program syz.9.1495 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1029.608385][T12499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1029.627705][T12499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1029.666911][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1029.675588][ T5920] usb 6-1: new full-speed USB device number 59 using dummy_hcd
[ 1030.066358][T10260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1030.500081][   T43] usb 9-1: USB disconnect, device number 46
[ 1030.542468][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1031.103366][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1031.178026][T12526] syzkaller1: entered promiscuous mode
[ 1031.183896][T12526] syzkaller1: entered allmulticast mode
[ 1031.720967][T12533] block nbd0: Attempted send on invalid socket
[ 1031.727326][T12533] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1031.812439][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1032.142512][T10260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1032.681811][ T5920] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0
[ 1032.721578][ T5920] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0
[ 1032.749780][ T5920] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0
[ 1032.777995][ T5920] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0
[ 1032.789084][ T5920] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0
[ 1032.834712][ T5920] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0
[ 1032.900567][ T5920] hid-generic 0003:0004:0000.001B: hidraw0: USB HID v0.00 Device [syz0] on syz1
[ 1033.035030][T12544] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1504'.
[ 1033.139710][T12545] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[ 1033.185189][T10260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1033.230275][T12542] fido_id[12542]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1033.253083][T12545] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1033.602566][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1033.967508][T12567] netlink: 'syz.8.1511': attribute type 6 has an invalid length.
[ 1034.232092][ T5946] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 1034.460785][T12579] netlink: 'syz.6.1516': attribute type 13 has an invalid length.
[ 1034.687667][ T5945] syz_tun: tun_net_xmit 110
[ 1034.829304][ T5946] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1034.847546][ T5946] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1034.859121][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.883314][ T5946] usb 9-1: Product: syz
[ 1034.896601][ T5946] usb 9-1: Manufacturer: syz
[ 1034.904586][ T5946] usb 9-1: SerialNumber: syz
[ 1035.121185][ T5945] syz_tun: tun_net_xmit 110
[ 1035.288039][ T5946] usb 9-1: config 0 descriptor??
[ 1035.468968][T12584] syzkaller1: entered promiscuous mode
[ 1035.482243][T12584] syzkaller1: entered allmulticast mode
[ 1036.912435][ T5946] usb 9-1: USB disconnect, device number 47
[ 1037.048038][T11275] udevd[11275]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1037.441961][ T5945] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1039.012870][ T5945] usb 6-1: Using ep0 maxpacket: 16
[ 1039.022133][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1039.056266][T12611] wireguard0: entered promiscuous mode
[ 1039.062132][T12611] wireguard0: entered allmulticast mode
[ 1039.077144][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1039.098280][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1039.112628][ T5945] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1039.121997][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.141239][ T5945] usb 6-1: config 0 descriptor??
[ 1039.576146][T12600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.576683][T12600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.658493][ T5945] usbhid 6-1:0.0: can't add hid device: -71
[ 1039.658662][ T5945] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1039.688050][ T5945] usb 6-1: USB disconnect, device number 60
[ 1039.935180][T12625] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.1528'.
[ 1040.312970][T12639] ptrace attach of "./syz-executor exec"[9155] was attempted by " ��      ��      �      ��      ��      ��      ��              ��      ��      ��                 ����                                                                                                                                                        ��������������\x0a �   J  < �  2��\x0a

 D}b�G^`�x��(��=   
N\x22DCBADCBA\x5c   ����                                              �      
"[12639]
[ 1040.957374][ T5945] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1041.142847][T12647] block nbd0: Attempted send on invalid socket
[ 1041.149451][T12647] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1041.170574][ T5945] usb 6-1: Using ep0 maxpacket: 32
[ 1041.179156][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1041.191271][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1041.210351][ T5945] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1041.250570][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1041.303504][ T5945] usb 6-1: config 0 descriptor??
[ 1041.720660][   T10] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[ 1041.731794][ T5945] usbhid 6-1:0.0: can't add hid device: -71
[ 1041.738479][ T5945] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1041.816912][ T5945] usb 6-1: USB disconnect, device number 61
[ 1041.890532][   T10] usb 10-1: Using ep0 maxpacket: 8
[ 1041.905548][   T10] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[ 1041.929675][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.945777][   T10] usb 10-1: Product: syz
[ 1041.957805][   T10] usb 10-1: Manufacturer: syz
[ 1041.968589][   T10] usb 10-1: SerialNumber: syz
[ 1041.994481][   T10] usb 10-1: config 0 descriptor??
[ 1042.013339][   T10] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244)
[ 1042.273860][T12653] input: syz1 as /devices/virtual/input/input29
[ 1042.665190][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1540'.
[ 1042.777328][T12665] netlink: 'syz.5.1540': attribute type 10 has an invalid length.
[ 1042.787214][T12665] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1042.831070][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1540'.
[ 1042.867221][T12664] netlink: 'syz.5.1540': attribute type 7 has an invalid length.
[ 1042.899619][T12665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1043.169004][   T10] radio-usb-si4713 10-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[ 1043.191043][   T10] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1043.261079][   T10] usb 10-1: USB disconnect, device number 47
[ 1043.883108][T12685] netlink: 'syz.8.1545': attribute type 3 has an invalid length.
[ 1043.940924][T12685] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.1545'.
[ 1044.310697][T12093] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 1044.470838][T12093] usb 10-1: Using ep0 maxpacket: 32
[ 1044.479630][T12093] usb 10-1: config 0 has an invalid interface number: 83 but max is 0
[ 1044.490657][T12093] usb 10-1: config 0 has no interface number 0
[ 1044.500579][T12093] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7
[ 1044.510254][T12093] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.519675][T12093] usb 10-1: Product: syz
[ 1044.527841][T12093] usb 10-1: Manufacturer: syz
[ 1044.538359][T12093] usb 10-1: SerialNumber: syz
[ 1044.557502][T12093] usb 10-1: config 0 descriptor??
[ 1044.780323][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1548'.
[ 1044.812271][T12691] team0: Device macsec1 is already an upper device of the team interface
[ 1044.947782][T12693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1549'.
[ 1044.991365][T12688] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1547'.
[ 1045.034996][T12688] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1045.077394][T12093] peak_usb 10-1:0.83 can0: unable to request usb[type=0 value=0] err=-71
[ 1045.097299][T12093] peak_usb 10-1:0.83: unable to read PCAN-USB Pro bootloader info (err -71)
[ 1045.221940][T12093] peak_usb 10-1:0.83: probe with driver peak_usb failed with error -71
[ 1045.238858][T12093] usb 10-1: USB disconnect, device number 48
[ 1045.488607][T12704] kvm: pic: single mode not supported
[ 1045.488779][T12704] kvm: pic: level sensitive irq not supported
[ 1046.140972][T12396] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 1046.356109][T12396] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1046.367236][T12396] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.386834][T12396] usb 10-1: Product: syz
[ 1046.400487][T12396] usb 10-1: Manufacturer: syz
[ 1046.405688][T12396] usb 10-1: SerialNumber: syz
[ 1046.437328][T12396] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1046.477423][ T5945] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1047.503107][T12732] futex_wake_op: syz.9.1553 tries to shift op by 36; fix this program
[ 1047.592824][ T5945] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[ 1047.609881][ T5945] ath9k_htc: Failed to initialize the device
[ 1047.661578][ T5945] usb 10-1: ath9k_htc: USB layer deinitialized
[ 1048.313630][T12093] usb 10-1: USB disconnect, device number 49
[ 1048.740541][T12716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1049.015606][T12748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1049.028807][T12748] syzkaller0: entered promiscuous mode
[ 1049.037309][T12748] syzkaller0: entered allmulticast mode
[ 1049.062495][T12748] tipc: Resetting bearer <eth:syzkaller0>
[ 1049.069934][T12746] tipc: Resetting bearer <eth:syzkaller0>
[ 1049.098489][T12746] tipc: Disabling bearer <eth:syzkaller0>
[ 1049.205385][T12750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1561'.
[ 1049.240995][T10260] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[ 1049.411073][T10260] usb 10-1: Using ep0 maxpacket: 32
[ 1049.428745][T10260] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1049.452474][   T30] audit: type=1326 audit(1757301026.872:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.5.1562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd80af8ebe9 code=0x0
[ 1049.461184][T10260] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1049.486441][T10260] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1049.500021][T10260] usb 10-1: string descriptor 0 read error: -22
[ 1049.518293][T10260] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1049.529124][T10260] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1049.558691][T12760] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1562'.
[ 1049.748038][T12768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1049.768458][T12768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1049.798185][   T10] usb 10-1: USB disconnect, device number 50
[ 1050.467554][T12780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1050.485369][ T5945] syz_tun: tun_net_xmit 110
[ 1050.665593][T12785] sctp: [Deprecated]: syz.5.1570 (pid 12785) Use of int in maxseg socket option.
[ 1050.665593][T12785] Use struct sctp_assoc_value instead
[ 1050.767703][   T10] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[ 1050.920821][   T10] usb 10-1: Using ep0 maxpacket: 32
[ 1050.954302][T12780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1050.974936][ T5945] syz_tun: tun_net_xmit 110
[ 1051.022616][   T10] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1051.057214][   T10] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1051.068258][   T10] usb 10-1: can't read configurations, error -71
[ 1051.141666][ T5945] syz_tun: tun_net_xmit 110
[ 1051.774138][T12794] syzkaller1: entered promiscuous mode
[ 1051.779935][T12794] syzkaller1: entered allmulticast mode
[ 1051.853354][T12793] netlink: 'syz.5.1571': attribute type 15 has an invalid length.
[ 1051.862542][T12793] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1571'.
[ 1053.390596][T12093] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1053.562834][T12093] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1053.608130][T12093] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1053.629400][T12093] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1053.639613][T12093] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.652580][T12093] usb 6-1: config 0 descriptor??
[ 1053.904695][T12819] netlink: 732 bytes leftover after parsing attributes in process `syz.9.1580'.
[ 1054.101667][T12093] hid_parser_main: 12 callbacks suppressed
[ 1054.101688][T12093] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x2
[ 1054.140072][T12093] pyra 0003:1E7D:2CF6.001C: item fetching failed at offset 3/7
[ 1054.164041][T12093] pyra 0003:1E7D:2CF6.001C: parse failed
[ 1054.175189][T12093] pyra 0003:1E7D:2CF6.001C: probe with driver pyra failed with error -22
[ 1054.193240][T10260] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[ 1054.286160][T10260] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1054.641599][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.648154][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.373101][T12840] netlink: 'syz.9.1584': attribute type 15 has an invalid length.
[ 1055.381459][T12840] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1584'.
[ 1057.033289][T12396] usb 6-1: USB disconnect, device number 62
[ 1057.228665][T12858] syzkaller1: entered promiscuous mode
[ 1057.234387][T12858] syzkaller1: entered allmulticast mode
[ 1057.342004][T12857] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1589'.
[ 1061.145883][ T9154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1061.166932][ T9154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1061.176736][ T9154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1061.189267][ T9154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1061.201643][ T9154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1061.238751][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1061.259082][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1061.268988][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1061.294846][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1061.303540][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1062.004343][T12902] netlink: 'syz.5.1597': attribute type 15 has an invalid length.
[ 1062.012553][T12902] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1597'.
[ 1062.613128][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1601'.
[ 1062.721671][T12888] chnl_net:caif_netlink_parms(): no params data found
[ 1063.282797][T12888] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1063.331802][T12888] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1063.350590][ T9154] Bluetooth: hci4: command tx timeout
[ 1063.371549][T12888] bridge_slave_0: entered allmulticast mode
[ 1063.410395][T12888] bridge_slave_0: entered promiscuous mode
[ 1063.448836][T12888] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1063.482513][T12888] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1063.511063][T12888] bridge_slave_1: entered allmulticast mode
[ 1063.519548][T12888] bridge_slave_1: entered promiscuous mode
[ 1063.712975][T12888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1063.748385][T12888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1064.760683][T12932] trusted_key: encrypted_key: master key parameter 'u000000004093' is invalid
[ 1064.816991][T12888] team0: Port device team_slave_0 added
[ 1064.845791][T12888] team0: Port device team_slave_1 added
[ 1065.094301][T12888] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1065.117506][T12888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1065.313793][T12888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1065.353855][T12888] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1065.365448][T12888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1065.410238][T12888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1065.430737][ T9154] Bluetooth: hci4: command tx timeout
[ 1065.603874][T12888] hsr_slave_0: entered promiscuous mode
[ 1065.630017][T12888] hsr_slave_1: entered promiscuous mode
[ 1065.655853][T12888] debugfs: 'hsr0' already exists in 'hsr'
[ 1065.690492][T12888] Cannot create hsr debugfs directory
[ 1065.819878][T12941] gtp0: entered promiscuous mode
[ 1065.825495][T12941] gtp0: entered allmulticast mode
[ 1066.200963][T12396] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[ 1066.249389][T12950] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[ 1066.255990][T12950] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1066.295548][T12950] vhci_hcd vhci_hcd.0: Device attached
[ 1066.360873][T12396] usb 10-1: Using ep0 maxpacket: 16
[ 1066.371916][T12396] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1066.387453][T12396] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1066.401455][T12396] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1066.425788][T12396] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.471814][T10260] vhci_hcd: vhci_device speed not set
[ 1066.478169][T12396] usb 10-1: Product: syz
[ 1066.494142][T12396] usb 10-1: Manufacturer: syz
[ 1066.498988][T12396] usb 10-1: SerialNumber: syz
[ 1066.544366][T12952] vhci_hcd: connection closed
[ 1066.550798][T10260] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[ 1066.572410][ T1139] vhci_hcd: stop threads
[ 1066.585042][ T1139] vhci_hcd: release socket
[ 1066.593164][ T1139] vhci_hcd: disconnect device
[ 1066.979231][T12396] usb 10-1: 0:2 : does not exist
[ 1067.541701][ T5865] Bluetooth: hci4: command tx timeout
[ 1067.749882][   T43] usb 10-1: USB disconnect, device number 53
[ 1067.932565][T12888] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1067.993887][T12888] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1068.086935][T12888] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1068.211620][T12888] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1068.429517][T12989] netlink: 'syz.5.1613': attribute type 15 has an invalid length.
[ 1068.437895][T12989] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1613'.
[ 1068.781935][T12888] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1069.063834][T12888] 8021q: adding VLAN 0 to HW filter on device team0
[ 1069.120229][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1069.127439][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1069.157514][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1069.166676][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1069.388699][T12888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1069.615673][ T5865] Bluetooth: hci4: command 0x0419 tx timeout
[ 1069.860580][   T30] audit: type=1326 audit(1757301047.242:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13006 comm="syz.9.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0d78ebe9 code=0x7ffc0000
[ 1069.902011][T12888] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1070.016475][   T30] audit: type=1326 audit(1757301047.242:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13006 comm="syz.9.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0d78ebe9 code=0x7ffc0000
[ 1070.130575][   T30] audit: type=1326 audit(1757301047.272:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13006 comm="syz.9.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7efd0d78ebe9 code=0x7ffc0000
[ 1070.377050][   T30] audit: type=1326 audit(1757301047.272:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13006 comm="syz.9.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0d78ebe9 code=0x7ffc0000
[ 1070.415434][T12888] veth0_vlan: entered promiscuous mode
[ 1070.513736][T12888] veth1_vlan: entered promiscuous mode
[ 1070.530913][   T30] audit: type=1326 audit(1757301047.272:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13006 comm="syz.9.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0d78ebe9 code=0x7ffc0000
[ 1070.641670][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1070.642642][   T30] audit: type=1326 audit(1757301047.272:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13006 comm="syz.9.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd0d78ebe9 code=0x7ffc0000
[ 1070.649666][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1070.712518][T13022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1070.734779][T12888] veth0_macvtap: entered promiscuous mode
[ 1070.830638][T12971] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[ 1070.857584][T12888] veth1_macvtap: entered promiscuous mode
[ 1070.895195][   T30] audit: type=1326 audit(1757301047.272:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13006 comm="syz.9.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0d78ebe9 code=0x7ffc0000
[ 1071.045764][T12971] usb 10-1: Using ep0 maxpacket: 8
[ 1071.077110][T12888] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1071.223620][T12971] usb 10-1: config 0 has an invalid interface number: 124 but max is 0
[ 1071.268019][T12971] usb 10-1: config 0 has no interface number 0
[ 1071.275014][   T30] audit: type=1326 audit(1757301047.272:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13006 comm="syz.9.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0d78ebe9 code=0x7ffc0000
[ 1071.422411][T12971] usb 10-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01
[ 1071.434895][T12888] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1071.520544][T12971] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1071.529092][T12971] usb 10-1: Product: syz
[ 1071.583585][ T8763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.595907][   T30] audit: type=1326 audit(1757301047.272:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13006 comm="syz.9.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7efd0d78ebe9 code=0x7ffc0000
[ 1071.630859][T12971] usb 10-1: Manufacturer: syz
[ 1071.635870][T12971] usb 10-1: SerialNumber: syz
[ 1071.655489][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.693519][T12971] usb 10-1: config 0 descriptor??
[ 1071.700690][ T5865] Bluetooth: hci4: command 0x0419 tx timeout
[ 1071.842793][T10260] vhci_hcd: vhci_device speed not set
[ 1071.849069][   T30] audit: type=1326 audit(1757301047.272:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13006 comm="syz.9.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0d78ebe9 code=0x7ffc0000
[ 1071.892979][ T8765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1072.045502][ T8765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1072.117745][T13021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1072.261385][T13021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1072.273687][ T5945] usb 10-1: USB disconnect, device number 54
[ 1072.517228][ T8765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1072.544890][ T8763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1072.569875][ T8765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1072.602252][ T8763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1073.749164][ T9154] Bluetooth: hci4: command 0x0419 tx timeout
[ 1073.975466][T13080] netlink: 'syz.6.1629': attribute type 15 has an invalid length.
[ 1073.984132][T13080] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1629'.
[ 1074.126820][ T5946] usb 10-1: new high-speed USB device number 55 using dummy_hcd
[ 1074.344801][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1074.438659][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1074.532458][ T5946] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1074.701002][ T5946] usb 10-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[ 1074.758633][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.032076][ T5946] usb 10-1: config 0 descriptor??
[ 1075.473043][ T5946] itetech 0003:048D:8595.001E: item fetching failed at offset 3/7
[ 1075.522624][ T5946] itetech 0003:048D:8595.001E: probe with driver itetech failed with error -22
[ 1075.597466][T13099] xfrm1: entered promiscuous mode
[ 1075.617228][T13099] xfrm1: entered allmulticast mode
[ 1075.629060][T13099] team0: Device xfrm1 is of different type
[ 1075.660166][ T5946] usb 10-1: USB disconnect, device number 55
[ 1075.731861][T13100] syzkaller1: entered promiscuous mode
[ 1075.738040][T13100] syzkaller1: entered allmulticast mode
[ 1077.616760][T10260] IPVS: starting estimator thread 0...
[ 1077.751304][T13142] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1078.810779][   T43] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1078.925831][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'.
[ 1078.956659][T13159] netlink: 'syz.9.1642': attribute type 1 has an invalid length.
[ 1078.975650][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'.
[ 1079.024003][   T43] usb 6-1: config index 0 descriptor too short (expected 3133, got 61)
[ 1079.040605][   T43] usb 6-1: config 0 has an invalid interface number: 156 but max is 1
[ 1079.216209][   T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.228480][   T43] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1079.254565][   T43] usb 6-1: config 0 has no interface number 0
[ 1079.278183][   T43] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1079.293775][   T43] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1079.316255][   T43] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1079.348096][   T43] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1079.385774][   T43] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1079.407571][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.438976][   T43] usb 6-1: config 0 descriptor??
[ 1079.451743][   T43] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1079.581113][T13033] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1079.706194][   T43] spca561 6-1:0.156: probe with driver spca561 failed with error -22
[ 1079.732199][   T43] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1079.759071][   T43] usb 6-1: MIDIStreaming interface descriptor not found
[ 1079.818166][T13033] usb 3-1: Using ep0 maxpacket: 8
[ 1079.839502][T13033] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1079.893554][T13033] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1079.930686][T13033] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1079.990935][T13033] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1080.011166][   T43] usb 6-1: USB disconnect, device number 63
[ 1080.067558][T13033] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1080.148916][T13033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.447518][T13033] usb 3-1: GET_CAPABILITIES returned 0
[ 1080.465842][T13033] usbtmc 3-1:16.0: can't read capabilities
[ 1080.502063][T13185] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1646'.
[ 1080.578745][T13187] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1646'.
[ 1080.910381][T12971] usb 3-1: USB disconnect, device number 4
[ 1081.270623][T13033] usb 6-1: new full-speed USB device number 64 using dummy_hcd
[ 1081.311584][T13202] netlink: 'syz.2.1649': attribute type 21 has an invalid length.
[ 1081.361159][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'.
[ 1081.487901][T13033] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1081.508519][T13033] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1081.603541][T13033] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1081.613343][T13033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.651375][T13033] usb 6-1: Product: syz
[ 1081.665913][T13033] usb 6-1: Manufacturer: syz
[ 1081.684541][T13212] syzkaller1: entered promiscuous mode
[ 1081.686207][T13033] usb 6-1: SerialNumber: syz
[ 1081.770606][T13212] syzkaller1: entered allmulticast mode
[ 1082.650825][T13219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1082.811566][T13219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1082.900743][T13033] usb 6-1: cannot find UAC_HEADER
[ 1083.041729][T13033] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1083.168243][T11439] udevd[11439]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1084.150081][T12971] usb 6-1: USB disconnect, device number 64
[ 1084.487570][T13238] binder: 13233:13238 ioctl c0306201 200000000100 returned -11
[ 1084.629156][T13248] delete_channel: no stack
[ 1084.680013][T13244] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1654'.
[ 1085.817656][T13264] macvlan0: entered promiscuous mode
[ 1086.053986][T13272] netem: incorrect ge model size
[ 1086.059466][T13272] netem: change failed
[ 1086.113710][T13270] loop5: detected capacity change from 0 to 524287999
[ 1086.227153][T13281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1658'.
[ 1086.336395][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1658'.
[ 1086.500787][ T5920] usb 10-1: new high-speed USB device number 56 using dummy_hcd
[ 1087.067854][ T5920] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1087.099459][ T5920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1087.189802][ T5920] usb 10-1: config 0 descriptor??
[ 1087.314939][T13300] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1663'.
[ 1087.534467][ T5920] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1087.643106][T13303] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1664'.
[ 1087.723880][T13303] tc_dump_action: action bad kind
[ 1087.804077][T13304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1087.854653][T13304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.033287][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1665'.
[ 1088.035875][ T5920] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2
[ 1088.105918][ T5920] [drm] Initialized udl on minor 2
[ 1088.169619][ T5920] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[ 1088.227670][ T5920] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[ 1088.640648][T12971] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1088.800624][T12971] usb 6-1: Using ep0 maxpacket: 16
[ 1088.809926][T12971] usb 6-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1088.827559][T12971] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1088.839864][T12971] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[ 1088.856260][T12971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1088.891536][T12971] usb 6-1: config 0 descriptor??
[ 1088.928516][T12971] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1089.419780][T13033] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1089.496864][T13033] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1089.519417][ T5920] usb 10-1: USB disconnect, device number 56
[ 1089.535142][T13033] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[ 1089.630104][T13340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1089.639978][T13340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1089.662979][T13335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1089.672862][T13335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1089.929991][T13343] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1671'.
[ 1089.959394][T13343] bond_slave_0: entered promiscuous mode
[ 1089.965598][T13343] bond_slave_1: entered promiscuous mode
[ 1090.061955][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1671'.
[ 1090.141466][ T5920] usb 10-1: new full-speed USB device number 57 using dummy_hcd
[ 1090.267785][T13343] bond0: (slave bond_slave_1): Releasing backup interface
[ 1090.478041][ T5920] usb 10-1: config 8 has an invalid interface number: 80 but max is 0
[ 1090.494021][ T5920] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1090.530140][ T5957] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1090.546952][ T5920] usb 10-1: config 8 has no interface number 0
[ 1090.609757][ T5920] usb 10-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1090.638592][ T5957] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 1090.660680][T13349] loop2: detected capacity change from 0 to 7
[ 1090.700967][T11439]  loop2:
[ 1090.709565][ T5920] usb 10-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[ 1090.740828][T11439] loop2: partition table partially beyond EOD, truncated
[ 1090.755759][ T5957] usb 8-1: USB disconnect, device number 68
[ 1090.814219][ T5920] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[ 1090.826834][T13349]  loop2:
[ 1090.834772][T13349] loop2: partition table partially beyond EOD, truncated
[ 1090.862294][ T5920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1090.987844][T13339] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22
[ 1091.016747][ T5920] usb 10-1: NFC: intf ffff88802f2b6000 id ffffffff8eb54ae0
[ 1091.246860][ T5920] usb 10-1: USB disconnect, device number 57
[ 1091.618645][T13358] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1674'.
[ 1092.979546][ T8763] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1093.153037][ T5920] usb 8-1: new high-speed USB device number 69 using dummy_hcd
[ 1093.310529][   T43] usb 6-1: USB disconnect, device number 65
[ 1093.344250][ T5920] usb 8-1: Using ep0 maxpacket: 16
[ 1093.374489][ T5920] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1093.419628][ T5920] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1093.439395][ T8763] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1093.466499][ T5920] usb 8-1: Product: syz
[ 1093.475511][ T5920] usb 8-1: Manufacturer: syz
[ 1093.491903][ T5920] usb 8-1: SerialNumber: syz
[ 1093.583005][ T5920] usb 8-1: config 0 descriptor??
[ 1093.631737][ T5920] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1093.754549][ T8763] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1094.020989][ T8763] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1094.024806][ T5920] ssu100 8-1:0.0: probe with driver ssu100 failed with error -71
[ 1094.086991][ T5920] usb 8-1: USB disconnect, device number 69
[ 1094.682905][ T8763] macsec0: left allmulticast mode
[ 1094.703318][ T8763] veth1_macvtap: left allmulticast mode
[ 1094.709479][ T8763] macsec0: left promiscuous mode
[ 1094.771935][ T8763] bridge0: port 3(macsec0) entered disabled state
[ 1094.841273][ T5920] usb 10-1: new high-speed USB device number 58 using dummy_hcd
[ 1094.924557][ T8763] bridge_slave_1: left allmulticast mode
[ 1095.001005][ T5920] usb 10-1: Using ep0 maxpacket: 16
[ 1095.012615][ T5920] usb 10-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[ 1095.110340][ T5920] usb 10-1: config 1 interface 0 altsetting 121 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1095.110522][ T8763] bridge_slave_1: left promiscuous mode
[ 1095.377485][ T5920] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1095.657556][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1095.668728][ T5920] usb 10-1: New USB device found, idVendor=0525, idProduct=99a1, bcdDevice= 0.40
[ 1095.704123][ T5920] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1095.720257][ T8763] 
: left allmulticast mode
[ 1095.766704][ T8763] 
: left promiscuous mode
[ 1095.783064][ T5920] usb 10-1: Product: syz
[ 1095.792577][ T5920] usb 10-1: Manufacturer: syz
[ 1095.797409][ T5920] usb 10-1: SerialNumber: syz
[ 1095.798525][ T8763] bridge0: port 1(
) entered disabled state
[ 1096.054707][ T8763] batman_adv: batadv0: Interface deactivated: ip6gretap1
[ 1096.092085][ T5920] cdc_ether 10-1:1.0: skipping garbage
[ 1096.097806][ T5920] cdc_ether 10-1:1.0: skipping garbage
[ 1096.128743][ T5920] cdc_ether 10-1:1.0: skipping garbage
[ 1096.143919][ T5920] usb 10-1: bad CDC descriptors
[ 1096.195048][T13439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1096.212150][ T5920] usb 10-1: USB disconnect, device number 58
[ 1096.241460][T13439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1096.932265][ T8763] batman_adv: batadv0: Removing interface: ip6gretap1
[ 1098.790914][ T5945] usb 10-1: new high-speed USB device number 59 using dummy_hcd
[ 1098.985466][ T5945] usb 10-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[ 1099.034067][ T5945] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1099.070512][ T5945] usb 10-1: Product: syz
[ 1099.141639][ T5945] usb 10-1: Manufacturer: syz
[ 1099.166007][ T5945] usb 10-1: SerialNumber: syz
[ 1099.262814][ T5945] usb 10-1: config 0 descriptor??
[ 1100.216282][T13498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1695'.
[ 1100.306559][ T8763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1100.595483][ T8763] bond_slave_0: left promiscuous mode
[ 1101.259581][ T8763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1101.407808][ T8763] bond_slave_1: left promiscuous mode
[ 1101.472335][ T8763] bond0 (unregistering): Released all slaves
[ 1102.336713][ T8763] bond1 (unregistering): Released all slaves
[ 1102.388696][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1693'.
[ 1102.589381][T13497] dvmrp0: entered allmulticast mode
[ 1102.634214][ T8763] tipc: Left network mode
[ 1102.719602][T13508] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1697'.
[ 1102.823218][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'.
[ 1103.444373][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1702'.
[ 1103.697236][T13521] hsr_slave_0: left promiscuous mode
[ 1103.707068][T13521] hsr_slave_1: left promiscuous mode
[ 1104.196006][T13539] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1707'.
[ 1104.498394][T13541] syzkaller1: entered promiscuous mode
[ 1104.508954][T13541] syzkaller1: entered allmulticast mode
[ 1104.901349][ T5945] mos7840 10-1:0.0: required endpoints missing
[ 1105.253761][T13559] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[ 1105.331135][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1709'.
[ 1105.403157][ T8763] hsr_slave_0: left promiscuous mode
[ 1105.450768][ T8763] hsr_slave_1: left promiscuous mode
[ 1105.467402][ T8763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1105.505797][ T8763] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1105.572698][ T8763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1105.680617][T13033] usb 8-1: new high-speed USB device number 70 using dummy_hcd
[ 1105.946844][ T8763] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1105.962359][T13033] usb 8-1: Using ep0 maxpacket: 16
[ 1105.971554][T13033] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8
[ 1105.994531][T13033] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1106.014136][T13033] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1106.058293][T13033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1106.374880][T13033] usb 8-1: config 0 descriptor??
[ 1106.441369][ T8763] veth1_macvtap: left promiscuous mode
[ 1106.470588][ T8763] veth0_macvtap: left promiscuous mode
[ 1106.491914][ T8763] veth1_vlan: left promiscuous mode
[ 1106.510695][ T8763] veth0_vlan: left promiscuous mode
[ 1106.867043][T13033] microsoft 0003:045E:07DA.001F: unknown main item tag 0x2
[ 1106.915713][T13033] microsoft 0003:045E:07DA.001F: unknown main item tag 0x6
[ 1106.968649][T13033] microsoft 0003:045E:07DA.001F: unknown main item tag 0x6
[ 1106.987654][T13033] microsoft 0003:045E:07DA.001F: unknown main item tag 0x6
[ 1107.039207][T13033] microsoft 0003:045E:07DA.001F: unknown main item tag 0x6
[ 1107.119735][T13033] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[ 1107.210580][T13033] microsoft 0003:045E:07DA.001F: no inputs found
[ 1107.246029][T13033] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway
[ 1107.289299][ T8763] batadv1 (unregistering): left promiscuous mode
[ 1107.304675][ T8763] team0 (unregistering): Port device batadv1 removed
[ 1108.326312][ T8763] team_slave_1 (unregistering): left promiscuous mode
[ 1108.358918][ T8763] team0 (unregistering): Port device team_slave_1 removed
[ 1108.543908][ T8763] team_slave_0 (unregistering): left promiscuous mode
[ 1108.577787][ T8763] team0 (unregistering): Port device team_slave_0 removed
[ 1109.327551][T13033] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1109.469709][T13572] bridge4: entered promiscuous mode
[ 1109.484323][T13033] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1109.516146][T13033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1109.528656][ T5945] usb 8-1: USB disconnect, device number 70
[ 1109.599437][T13033] usb 3-1: config 0 descriptor??
[ 1109.642056][T13033] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1110.656948][T13591] sctp: [Deprecated]: syz.2.1718 (pid 13591) Use of int in max_burst socket option.
[ 1110.656948][T13591] Use struct sctp_assoc_value instead
[ 1110.724311][ T5920] usb 10-1: USB disconnect, device number 59
[ 1111.173729][T13033] gspca_cpia1: usb_control_msg 03, error -110
[ 1111.367264][T13033] gspca_cpia1: usb_control_msg 01, error -32
[ 1111.401077][T13033] gspca_cpia1: usb_control_msg 01, error -32
[ 1111.419437][T13033] gspca_cpia1: usb_control_msg 01, error -32
[ 1111.443310][T13033] gspca_cpia1: usb_control_msg 01, error -32
[ 1111.456064][T13033] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0)
[ 1111.696894][ T8763] IPVS: stop unused estimator thread 0...
[ 1112.173079][T13033] usb 3-1: USB disconnect, device number 5
[ 1112.837460][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1728'.
[ 1112.943243][T13644] capability: warning: `syz.2.1728' uses deprecated v2 capabilities in a way that may be insecure
[ 1113.273998][T13655] netlink: 'syz.7.1729': attribute type 15 has an invalid length.
[ 1113.283120][T13655] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1729'.
[ 1113.366659][T13661] syz_tun: tun_net_xmit 86
[ 1114.380863][    C0] syz_tun: tun_net_xmit 86
[ 1115.420705][    C0] syz_tun: tun_net_xmit 86
[ 1115.453172][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1737'.
[ 1116.075970][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.087998][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.570576][ T5920] usb 10-1: new high-speed USB device number 60 using dummy_hcd
[ 1116.754963][ T5920] usb 10-1: Using ep0 maxpacket: 16
[ 1116.769558][ T5920] usb 10-1: config 0 has an invalid interface number: 223 but max is 0
[ 1116.787585][ T5920] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1116.858562][ T5920] usb 10-1: config 0 has no interface number 0
[ 1116.998296][ T5920] usb 10-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7
[ 1117.046353][ T5920] usb 10-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1117.137605][ T5920] usb 10-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1117.220580][ T5920] usb 10-1: config 0 interface 223 has no altsetting 0
[ 1117.276315][ T5920] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1117.297087][ T5920] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1117.350636][ T5920] usb 10-1: Product: syz
[ 1117.450463][ T5920] usb 10-1: Manufacturer: syz
[ 1117.490626][ T5920] usb 10-1: SerialNumber: syz
[ 1117.492879][T13713] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1117.592609][ T5920] usb 10-1: config 0 descriptor??
[ 1119.130982][ T5920] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1119.294020][ T5920] usb 6-1: Using ep0 maxpacket: 16
[ 1119.311939][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1119.413865][ T5920] usb 6-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35
[ 1119.444624][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1119.487297][ T5920] usb 6-1: Product: syz
[ 1119.501378][ T5920] usb 6-1: Manufacturer: syz
[ 1119.537801][ T5920] usb 6-1: SerialNumber: syz
[ 1119.761026][ T5920] usb 6-1: config 0 descriptor??
[ 1120.071122][T13033] usb 8-1: new high-speed USB device number 71 using dummy_hcd
[ 1120.261206][T13033] usb 8-1: Using ep0 maxpacket: 8
[ 1120.388216][T13033] usb 8-1: config 0 has an invalid interface number: 31 but max is 0
[ 1120.564056][T13033] usb 8-1: config 0 has no interface number 0
[ 1120.800035][T13033] usb 8-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68
[ 1120.820346][T13033] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.987799][T13033] usb 8-1: Product: syz
[ 1121.004566][T13033] usb 8-1: Manufacturer: syz
[ 1121.026982][T13033] usb 8-1: SerialNumber: syz
[ 1121.050281][T13033] usb 8-1: config 0 descriptor??
[ 1121.080815][T13033] redrat3 8-1:0.31: Couldn't find all endpoints
[ 1121.250963][T13033] usb 10-1: USB disconnect, device number 60
[ 1121.720630][T13033] usb 10-1: new full-speed USB device number 61 using dummy_hcd
[ 1121.851074][T13033] usb 10-1: device descriptor read/64, error -71
[ 1122.090649][T13033] usb 10-1: new full-speed USB device number 62 using dummy_hcd
[ 1122.197962][T13755] team0: Port device vlan0 added
[ 1122.250708][T13033] usb 10-1: device descriptor read/64, error -71
[ 1122.361277][T13033] usb usb10-port1: attempt power cycle
[ 1122.685294][ T5920] usb 6-1: USB disconnect, device number 66
[ 1122.720580][T13033] usb 10-1: new full-speed USB device number 63 using dummy_hcd
[ 1122.772940][T13033] usb 10-1: device descriptor read/8, error -71
[ 1123.028376][ T5920] usb 8-1: USB disconnect, device number 71
[ 1123.034565][T13033] usb 10-1: new full-speed USB device number 64 using dummy_hcd
[ 1123.082558][T13033] usb 10-1: device descriptor read/8, error -71
[ 1123.231168][T13033] usb usb10-port1: unable to enumerate USB device
[ 1124.200617][   T43] usb 8-1: new high-speed USB device number 72 using dummy_hcd
[ 1124.267200][T13802] netlink: 'syz.2.1758': attribute type 15 has an invalid length.
[ 1124.275515][T13802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1758'.
[ 1124.410583][   T43] usb 8-1: Using ep0 maxpacket: 16
[ 1124.438843][   T43] usb 8-1: config 0 has an invalid interface number: 223 but max is 0
[ 1124.454594][   T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1124.526277][   T43] usb 8-1: config 0 has no interface number 0
[ 1124.560720][   T43] usb 8-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7
[ 1124.679670][   T43] usb 8-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1124.785948][   T43] usb 8-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1124.880572][   T43] usb 8-1: config 0 interface 223 has no altsetting 0
[ 1124.914936][   T43] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1124.930601][   T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1124.952159][   T43] usb 8-1: Product: syz
[ 1124.956446][   T43] usb 8-1: Manufacturer: syz
[ 1125.000459][   T43] usb 8-1: SerialNumber: syz
[ 1125.036398][   T43] usb 8-1: config 0 descriptor??
[ 1125.068289][T13807] loop8: detected capacity change from 0 to 8
[ 1125.170647][T13807] Dev loop8: unable to read RDB block 8
[ 1125.249730][T13807]  loop8: unable to read partition table
[ 1125.287708][T13807] loop8: partition table beyond EOD, truncated
[ 1125.299285][T13807] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1125.696146][T13812] syzkaller1: entered promiscuous mode
[ 1125.715697][T13812] syzkaller1: entered allmulticast mode
[ 1127.461114][T10260] usb 8-1: USB disconnect, device number 72
[ 1127.730792][   T43] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[ 1127.893134][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1127.903945][   T43] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[ 1127.913729][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.928901][   T43] usb 3-1: config 0 descriptor??
[ 1128.203995][T13844] input: syz0 as /devices/virtual/input/input31
[ 1130.713791][   T43] usbhid 3-1:0.0: can't add hid device: -71
[ 1130.773932][   T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1130.860065][   T43] usb 3-1: USB disconnect, device number 6
[ 1133.052145][T13886] syzkaller1: entered promiscuous mode
[ 1133.160681][T13886] syzkaller1: entered allmulticast mode
[ 1133.240645][   T43] usb 10-1: new high-speed USB device number 65 using dummy_hcd
[ 1133.450780][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 1133.450801][   T30] audit: type=1326 audit(1757301110.842:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13870 comm="syz.2.1777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb58398ebe9 code=0x0
[ 1133.785669][   T43] usb 10-1: Using ep0 maxpacket: 8
[ 1133.839613][T13901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1133.876650][T13897] tipc: Resetting bearer <eth:syzkaller0>
[ 1133.884730][   T43] usb 10-1: config 0 has an invalid interface number: 124 but max is 0
[ 1133.887246][T13902] syzkaller0: entered promiscuous mode
[ 1133.923477][T13902] syzkaller0: entered allmulticast mode
[ 1133.963581][T13896] tipc: Resetting bearer <eth:syzkaller0>
[ 1133.983345][   T43] usb 10-1: config 0 has no interface number 0
[ 1134.053216][   T43] usb 10-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01
[ 1134.116771][   T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1134.117477][T13896] tipc: Disabling bearer <eth:syzkaller0>
[ 1134.223326][   T43] usb 10-1: Product: syz
[ 1134.295889][   T43] usb 10-1: Manufacturer: syz
[ 1134.320454][   T43] usb 10-1: SerialNumber: syz
[ 1134.386573][   T43] usb 10-1: config 0 descriptor??
[ 1134.980536][ T5920] usb 8-1: new high-speed USB device number 73 using dummy_hcd
[ 1135.062699][T13923] syz.5.1786 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1135.097265][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1779'.
[ 1135.208933][ T5920] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1135.243638][ T5920] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.287617][ T5920] usb 8-1: Product: syz
[ 1135.304491][ T5920] usb 8-1: Manufacturer: syz
[ 1135.326077][ T5920] usb 8-1: SerialNumber: syz
[ 1135.381656][   T43] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1135.594460][   T43] usb 3-1: Using ep0 maxpacket: 32
[ 1135.656470][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1135.708960][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1135.740165][   T43] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[ 1135.768881][T13936] sctp: [Deprecated]: syz.6.1789 (pid 13936) Use of int in maxseg socket option.
[ 1135.768881][T13936] Use struct sctp_assoc_value instead
[ 1135.787204][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1135.807118][   T43] usb 3-1: config 0 descriptor??
[ 1135.824945][T13936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1136.302923][   T43] glorious 0003:258A:0033.0020: unknown main item tag 0x1
[ 1136.327686][   T43] glorious 0003:258A:0033.0020: unknown main item tag 0x2
[ 1136.359889][ T5920] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 1136.369029][ T5920] cdc_ncm 8-1:1.0: setting tx_max = 184
[ 1136.388692][   T43] glorious 0003:258A:0033.0020: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.2-1/input0
[ 1136.509882][   T43] usb 3-1: USB disconnect, device number 7
[ 1136.831636][T13944] fido_id[13944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1136.880225][ T5920] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 1136.886939][ T5957] usb 10-1: USB disconnect, device number 65
[ 1137.168807][T13918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1137.182195][T13918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1137.368272][ T5920] usb 8-1: USB disconnect, device number 73
[ 1137.394956][ T5920] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP)
[ 1138.163091][T13971] netlink: 676 bytes leftover after parsing attributes in process `syz.9.1795'.
[ 1138.641035][   T43] usb 10-1: new high-speed USB device number 66 using dummy_hcd
[ 1138.883736][   T43] usb 10-1: Using ep0 maxpacket: 8
[ 1138.938686][   T43] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1138.948771][   T43] usb 10-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 16
[ 1139.039572][   T43] usb 10-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1023
[ 1139.143182][   T43] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1139.165698][   T43] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1139.192573][   T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1139.330113][   T43] usb 10-1: Product: syz
[ 1139.349853][   T43] usb 10-1: Manufacturer: syz
[ 1139.360629][   T43] usb 10-1: SerialNumber: syz
[ 1139.442820][T13971] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1139.532927][T13971] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1139.711013][T13995] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1798'.
[ 1139.978909][   T43] usb 10-1: bad CDC descriptors
[ 1140.160987][T13995] unsupported nlmsg_type 40
[ 1140.169270][   T43] usb 10-1: USB disconnect, device number 66
[ 1141.640680][   T43] usb 8-1: new high-speed USB device number 74 using dummy_hcd
[ 1141.887860][   T43] usb 8-1: Using ep0 maxpacket: 8
[ 1141.929766][   T43] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1141.971194][   T43] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1142.065292][   T43] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[ 1142.100485][   T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1142.172963][   T43] usb 8-1: Product: syz
[ 1142.190620][T10260] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1142.200347][   T43] usb 8-1: Manufacturer: syz
[ 1142.224316][   T43] usb 8-1: SerialNumber: syz
[ 1142.257344][   T43] usb 8-1: config 0 descriptor??
[ 1142.295157][   T43] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found
[ 1142.411235][T10260] usb 3-1: Using ep0 maxpacket: 32
[ 1142.419338][T10260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1142.437779][T10260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1142.511111][T10260] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1142.692052][T14036] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1142.741339][   T43] snd_usb_toneport 8-1:0.0: cannot get proper max packet size
[ 1142.754895][T10260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1142.776658][   T43] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1142.801663][T10260] usb 3-1: config 0 descriptor??
[ 1142.908950][   T43] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1143.608793][T10260] savu 0003:1E7D:2D5A.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[ 1144.294639][T13763] usb 3-1: USB disconnect, device number 8
[ 1144.724943][T14069] trusted_key: encrypted_key: key user:syz not found
[ 1147.280767][   T10] usb 8-1: USB disconnect, device number 74
[ 1148.261511][   T30] audit: type=1326 audit(1757301125.682:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58398ebe9 code=0x7ffc0000
[ 1149.127984][   T30] audit: type=1326 audit(1757301125.682:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb58398ebe9 code=0x7ffc0000
[ 1149.904762][   T30] audit: type=1326 audit(1757301125.682:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58398ebe9 code=0x7ffc0000
[ 1149.982812][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'.
[ 1150.001091][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'.
[ 1150.014172][   T30] audit: type=1326 audit(1757301125.682:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fb58398ebe9 code=0x7ffc0000
[ 1150.040807][T14111] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1821'.
[ 1150.106403][   T30] audit: type=1326 audit(1757301125.682:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58398ebe9 code=0x7ffc0000
[ 1150.163446][   T30] audit: type=1326 audit(1757301125.682:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb58398ebe9 code=0x7ffc0000
[ 1150.244940][   T30] audit: type=1326 audit(1757301125.682:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58398ebe9 code=0x7ffc0000
[ 1150.330671][T13763] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1150.371954][   T30] audit: type=1326 audit(1757301125.682:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb58398d5fc code=0x7ffc0000
[ 1150.460700][   T30] audit: type=1326 audit(1757301125.682:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58398ebe9 code=0x7ffc0000
[ 1150.591345][   T30] audit: type=1326 audit(1757301125.682:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb58398d5fc code=0x7ffc0000
[ 1150.629678][T13763] usb 3-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[ 1150.659365][T13763] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 1150.681515][T13763] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1150.712564][T13763] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0
[ 1150.730752][T13763] usb 3-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1150.760502][T13763] usb 3-1: config 48 interface 0 has no altsetting 0
[ 1150.782997][T13763] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f
[ 1150.792646][T13763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.810776][T13763] usb 3-1: Product: syz
[ 1150.815170][T13763] usb 3-1: Manufacturer: syz
[ 1150.820150][T13763] usb 3-1: SerialNumber: syz
[ 1151.078540][T13763] usb 3-1: USB disconnect, device number 9
[ 1152.630639][ T5957] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[ 1152.816749][ T5957] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[ 1152.825193][ T5957] usb 3-1: config 0 has no interface number 0
[ 1152.840955][ T5957] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1152.860926][ T5957] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1152.882120][ T5957] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1152.910465][ T5957] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1152.936729][ T5957] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1152.958244][ T5957] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1152.990518][ T5957] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1153.009837][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1153.045272][ T5957] usb 3-1: config 0 descriptor??
[ 1153.056977][T14136] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1153.065190][T14136] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1153.164566][ T5957] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1153.390144][T14136] ldusb 3-1:0.55: Write buffer overflow, 1 bytes dropped
[ 1154.054329][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1833'.
[ 1154.089858][T14151] binder: 14137:14151 ioctl c0306201 200000000040 returned -22
[ 1154.101272][T14151] binder: 14137:14151 ioctl c0306201 200000000640 returned -22
[ 1154.302709][T14150] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1154.385056][T14152] bond1: (slave batadv1): Opening slave failed
[ 1154.451952][T13763] usb 3-1: USB disconnect, device number 10
[ 1154.483031][T13763] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[ 1155.170970][T12396] usb 10-1: new high-speed USB device number 67 using dummy_hcd
[ 1155.320524][T13763] usb 6-1: new full-speed USB device number 67 using dummy_hcd
[ 1155.336790][T12396] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1155.359071][T12396] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1155.370652][T12396] usb 10-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[ 1155.385741][T12396] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1155.398892][T12396] usb 10-1: config 0 descriptor??
[ 1155.476908][T13763] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1155.503102][T13763] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1155.580714][T13763] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[ 1155.610712][T13763] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 1155.629846][T13763] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1155.653511][T13763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1155.687194][T13763] usb 6-1: Product: syz
[ 1155.702115][T13763] usb 6-1: Manufacturer: syz
[ 1155.717127][T13763] usb 6-1: SerialNumber: syz
[ 1155.765347][T14162] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1155.784411][T13763] cdc_mbim 6-1:1.0: skipping garbage
[ 1155.991577][T14162] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1155.999229][T14162] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1156.138364][T14160] kvm: pic: non byte write
[ 1156.199755][T12396] usbhid 10-1:0.0: can't add hid device: -71
[ 1156.207895][T12396] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1156.659771][T14162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1156.680353][T14189] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1842'.
[ 1156.708160][T14162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1156.710254][T12396] usb 10-1: USB disconnect, device number 67
[ 1157.112592][T13763] cdc_mbim 6-1:1.0: bind() failure
[ 1157.152680][T13763] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[ 1157.175848][T13763] cdc_ncm 6-1:1.1: bind() failure
[ 1157.217226][T13763] usb 6-1: USB disconnect, device number 67
[ 1159.323366][T14238] binder: 14198:14238 ioctl c0306201 200000000040 returned -22
[ 1159.371889][T14238] binder: 14198:14238 ioctl c0306201 200000000640 returned -22
[ 1159.781336][T13763] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1159.878777][T14245] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1856'.
[ 1159.944225][T13763] usb 3-1: Using ep0 maxpacket: 32
[ 1159.956322][T13763] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[ 1159.975540][T13763] usb 3-1: config 0 has no interface number 0
[ 1160.006580][T13763] usb 3-1: config 0 interface 184 has no altsetting 0
[ 1160.033773][T13763] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1160.060733][T13763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.140077][T13763] usb 3-1: Product: syz
[ 1160.164690][T13763] usb 3-1: Manufacturer: syz
[ 1160.186465][T13763] usb 3-1: SerialNumber: syz
[ 1160.202751][T13763] usb 3-1: config 0 descriptor??
[ 1160.221997][T13763] smsc75xx v1.0.0
[ 1160.600974][ T5920] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1160.718740][T14255] syzkaller1: entered promiscuous mode
[ 1160.783588][ T5920] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1160.806533][T14255] syzkaller1: entered allmulticast mode
[ 1160.837306][ T5920] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1160.885874][ T5920] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1160.950215][ T5920] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1161.014538][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1161.091766][ T5920] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1161.101670][ T5920] usb 6-1: invalid MIDI out EP 0
[ 1161.569853][ T5920] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1161.659254][T11277] udevd[11277]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1161.862775][T13763] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[ 1161.889952][T13763] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[ 1161.928964][T13763] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1161.954141][T13763] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1162.002761][T13763] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1162.017327][T13763] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1162.044843][T13763] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[ 1162.106374][T13763] usb 3-1: USB disconnect, device number 11
[ 1162.571846][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1864'.
[ 1163.107643][T13763] usb 6-1: USB disconnect, device number 68
[ 1163.158626][T14247] delete_channel: no stack
[ 1163.290487][ T5957] usb 10-1: new low-speed USB device number 68 using dummy_hcd
[ 1163.493272][ T5957] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[ 1163.510460][ T5957] usb 10-1: config 0 has no interface number 0
[ 1163.527405][ T5957] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1163.555113][ T5957] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1163.590802][ T5957] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1163.637822][ T5957] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1163.650480][T13763] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1163.669735][ T5957] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1163.696926][ T5957] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1163.726903][ T5957] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1163.760975][ T5957] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1163.765901][T12396] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1163.773960][ T5957] usb 10-1: config 0 descriptor??
[ 1163.800799][T14270] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1163.808414][T14270] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1163.828154][T13763] usb 3-1: Using ep0 maxpacket: 16
[ 1163.835666][T13763] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1163.846461][T13763] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1163.868609][T13763] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1163.872628][ T5957] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1163.890478][T13763] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1163.912588][T13763] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1163.928901][T13763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.938074][T13763] usb 3-1: Product: syz
[ 1163.945361][T12396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1163.956925][T12396] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[ 1163.966358][T13763] usb 3-1: Manufacturer: syz
[ 1163.971856][T12396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1163.982016][T13763] usb 3-1: SerialNumber: syz
[ 1163.992214][T13763] usb 3-1: config 0 descriptor??
[ 1164.007048][T12396] usb 6-1: config 0 descriptor??
[ 1164.094018][T14270] ldusb 10-1:0.55: Write buffer overflow, 1 bytes dropped
[ 1164.203776][T14289] netlink: 360 bytes leftover after parsing attributes in process `syz.9.1865'.
[ 1164.231153][T14287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1164.244216][T13763] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input32
[ 1164.277319][ T5218] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[ 1164.291670][T14287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1164.299915][T14290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1164.327553][ T5218] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[ 1164.372246][T14290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1164.384284][ T5218] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[ 1164.425510][T13763] usb 3-1: USB disconnect, device number 12
[ 1164.430143][T14292] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1871'.
[ 1164.448343][ T5218] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[ 1164.586273][    C1] ldusb 10-1:0.55: usb_submit_urb failed (-1)
[ 1164.601939][   T10] usb 10-1: USB disconnect, device number 68
[ 1164.635672][   T10] ldusb 10-1:0.55: LD USB Device #0 now disconnected
[ 1164.651314][T12396] usbhid 6-1:0.0: can't add hid device: -71
[ 1164.663451][T12396] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1164.717949][T12396] usb 6-1: USB disconnect, device number 69
[ 1165.073720][T14308] input: syz1 as /devices/virtual/input/input33
[ 1165.687065][T14326] fuse: Bad value for 'fd'
[ 1165.835914][ T5957] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1166.010559][ T5957] usb 3-1: Using ep0 maxpacket: 32
[ 1166.027634][ T5957] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1166.052178][ T5957] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1166.058963][ T5957] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1166.097460][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1166.115600][ T5957] usb 3-1: config 0 descriptor??
[ 1166.209801][T14333] syzkaller1: entered promiscuous mode
[ 1166.215678][T14333] syzkaller1: entered allmulticast mode
[ 1167.321676][ T5957] corsair-cpro 0003:1B1C:0C10.0022: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0
[ 1167.455012][T14345] netlink: 212172 bytes leftover after parsing attributes in process `syz.7.1885'.
[ 1167.618976][T14324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1167.680911][T14324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1167.783343][ T5957] corsair-cpro 0003:1B1C:0C10.0022: probe with driver corsair-cpro failed with error -110
[ 1167.897936][   T10] usb 3-1: USB disconnect, device number 13
[ 1168.783810][T14352] netlink: 'syz.5.1886': attribute type 23 has an invalid length.
[ 1168.998474][T14358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1889'.
[ 1169.271253][T13763] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1169.501020][T13763] usb 3-1: Using ep0 maxpacket: 32
[ 1169.512117][T13763] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[ 1169.520659][T13763] usb 3-1: config 0 has no interface number 0
[ 1169.526873][T13763] usb 3-1: config 0 interface 184 has no altsetting 0
[ 1169.565939][T13763] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1169.575522][T13763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1169.589068][T13763] usb 3-1: Product: syz
[ 1169.601706][T13763] usb 3-1: Manufacturer: syz
[ 1169.647652][T13763] usb 3-1: SerialNumber: syz
[ 1169.659978][T13763] usb 3-1: config 0 descriptor??
[ 1169.689212][T13763] smsc75xx v1.0.0
[ 1169.693201][   T10] usb 8-1: new high-speed USB device number 75 using dummy_hcd
[ 1169.730722][T13763] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1169.758095][T13763] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[ 1169.856990][   T10] usb 8-1: config 8 has an invalid interface number: 109 but max is 2
[ 1169.869851][   T10] usb 8-1: config 8 has an invalid interface number: 222 but max is 2
[ 1169.878532][   T10] usb 8-1: config 8 has an invalid interface number: 31 but max is 2
[ 1169.970470][ T5920] usb 10-1: new high-speed USB device number 69 using dummy_hcd
[ 1169.978676][   T10] usb 8-1: config 8 has an invalid interface number: 93 but max is 2
[ 1169.988663][   T10] usb 8-1: config 8 has 4 interfaces, different from the descriptor's value: 3
[ 1169.998091][   T10] usb 8-1: config 8 has no interface number 0
[ 1170.006707][   T10] usb 8-1: config 8 has no interface number 1
[ 1170.149591][   T10] usb 8-1: config 8 has no interface number 2
[ 1170.160960][   T10] usb 8-1: config 8 has no interface number 3
[ 1170.171573][   T10] usb 8-1: config 8 interface 109 altsetting 33 has an invalid descriptor for endpoint zero, skipping
[ 1170.187878][   T10] usb 8-1: config 8 interface 109 altsetting 33 has an invalid descriptor for endpoint zero, skipping
[ 1170.208928][ T5920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[ 1170.227156][   T10] usb 8-1: config 8 interface 109 altsetting 33 bulk endpoint 0x1 has invalid maxpacket 8
[ 1170.238067][ T5920] usb 10-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00
[ 1170.264187][ T5920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1170.272576][   T10] usb 8-1: config 8 interface 109 altsetting 33 has an endpoint descriptor with address 0xEC, changing to 0x8C
[ 1170.297572][ T5920] usb 10-1: config 0 descriptor??
[ 1170.302996][   T10] usb 8-1: config 8 interface 109 altsetting 33 has a duplicate endpoint with address 0x8C, skipping
[ 1170.314683][   T10] usb 8-1: config 8 interface 109 altsetting 33 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 1170.326711][   T10] usb 8-1: config 8 interface 109 altsetting 33 endpoint 0xD has invalid maxpacket 1023, setting to 64
[ 1170.339171][   T10] usb 8-1: config 8 interface 109 altsetting 33 has 10 endpoint descriptors, different from the interface descriptor's value: 13
[ 1170.358062][   T10] usb 8-1: too many endpoints for config 8 interface 222 altsetting 249: 150, using maximum allowed: 30
[ 1170.369856][   T10] usb 8-1: config 8 interface 222 altsetting 249 has a duplicate endpoint with address 0x4, skipping
[ 1170.385254][   T10] usb 8-1: config 8 interface 222 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 150
[ 1170.446727][   T10] usb 8-1: config 8 interface 31 altsetting 133 has a duplicate endpoint with address 0x9, skipping
[ 1170.471101][   T10] usb 8-1: config 8 interface 31 altsetting 133 has a duplicate endpoint with address 0xD, skipping
[ 1170.479362][T14373] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1895'.
[ 1170.512702][   T10] usb 8-1: config 8 interface 31 altsetting 133 has an invalid descriptor for endpoint zero, skipping
[ 1170.524356][   T10] usb 8-1: config 8 interface 31 altsetting 133 has a duplicate endpoint with address 0xE, skipping
[ 1170.536671][   T10] usb 8-1: config 8 interface 31 altsetting 133 has a duplicate endpoint with address 0xA, skipping
[ 1170.548925][   T10] usb 8-1: config 8 interface 31 altsetting 133 has a duplicate endpoint with address 0xC, skipping
[ 1170.580116][   T10] usb 8-1: config 8 interface 31 altsetting 133 has a duplicate endpoint with address 0xE, skipping
[ 1170.605353][   T10] usb 8-1: config 8 interface 31 altsetting 133 endpoint 0x8B has invalid maxpacket 512, setting to 64
[ 1170.618997][   T10] usb 8-1: config 8 interface 31 altsetting 133 has a duplicate endpoint with address 0x1, skipping
[ 1170.634649][   T10] usb 8-1: config 8 interface 93 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[ 1170.648123][   T10] usb 8-1: config 8 interface 93 altsetting 15 has a duplicate endpoint with address 0x8, skipping
[ 1170.676099][   T10] usb 8-1: config 8 interface 93 altsetting 15 has a duplicate endpoint with address 0x6, skipping
[ 1170.690316][   T10] usb 8-1: config 8 interface 109 has no altsetting 0
[ 1170.700046][   T10] usb 8-1: config 8 interface 222 has no altsetting 0
[ 1170.707698][   T10] usb 8-1: config 8 interface 31 has no altsetting 0
[ 1170.716572][   T10] usb 8-1: config 8 interface 93 has no altsetting 0
[ 1170.732060][   T10] usb 8-1: New USB device found, idVendor=4113, idProduct=0400, bcdDevice=d6.bf
[ 1170.742613][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.753411][   T10] usb 8-1: Product: ࠧ
[ 1170.757759][   T10] usb 8-1: Manufacturer: ꅳ㪻㻌ㄠ訸舐髝벝掎请࠹슞笁贂璾㦮惡得ꂐꊁ፧㽬ꛅ퀞䩄螹㑟旄⧭怽纉劳׽횇䉬겡䕱䖍殎飻䇟欈뵜鈥Ⳕ襘ﷆ剪磘몾㿡搀뼩歵坃퉺ꨏ䜪ꬿ⇥珏儀ﴴḃ顛厦窼鋞이뇜䦄쮱孎䴼䳊醁ꢿ誏퇹㵚㩱嬚ﮠＨ㋔楘㤯彻ꁱ᳗ꉁ彇즃쫲輮鶇杭཭淈澓ᬰ薐耇ଊ켆⮞
[ 1170.813080][   T10] usb 8-1: SerialNumber: syz
[ 1170.828146][   T10] usb 8-1: Interface #222 referenced by multiple IADs
[ 1170.836607][   T10] usb 8-1: Interface #222 referenced by multiple IADs
[ 1170.844698][T14364] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1170.930532][T10260] usb 6-1: new low-speed USB device number 70 using dummy_hcd
[ 1171.061479][T10260] usb 6-1: device descriptor read/64, error -71
[ 1171.135371][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1894'.
[ 1171.151344][ T5920] aquacomputer_d5next 0003:0C70:F0BD.0023: unknown main item tag 0x0
[ 1171.180620][ T5920] aquacomputer_d5next 0003:0C70:F0BD.0023: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.9-1/input0
[ 1171.301111][T10260] usb 6-1: new low-speed USB device number 71 using dummy_hcd
[ 1171.352179][ T5957] usb 10-1: USB disconnect, device number 69
[ 1171.430561][T10260] usb 6-1: device descriptor read/64, error -71
[ 1171.542305][T10260] usb usb6-port1: attempt power cycle
[ 1171.887837][T10260] usb 6-1: new low-speed USB device number 72 using dummy_hcd
[ 1171.906817][ T5920] usb 3-1: USB disconnect, device number 14
[ 1171.959433][T10260] usb 6-1: device descriptor read/8, error -71
[ 1172.220662][T10260] usb 6-1: new low-speed USB device number 73 using dummy_hcd
[ 1172.289373][T10260] usb 6-1: device descriptor read/8, error -71
[ 1172.526643][T10260] usb usb6-port1: unable to enumerate USB device
[ 1172.991647][   T10] usb 8-1: USB disconnect, device number 75
[ 1174.867779][T14410] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1906'.
[ 1175.045857][T14414] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1175.920651][   T43] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1176.073617][   T43] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[ 1176.080759][   T10] usb 8-1: new high-speed USB device number 76 using dummy_hcd
[ 1176.094812][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1176.128024][   T43] usb 3-1: config 0 descriptor??
[ 1176.157890][   T43] gspca_main: sunplus-2.14.0 probing 055f:c420
[ 1176.261273][   T10] usb 8-1: Using ep0 maxpacket: 16
[ 1176.268629][   T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1176.300905][   T10] usb 8-1: config 0 has no interface number 0
[ 1176.323167][   T10] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1176.363837][   T10] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1176.384005][   T10] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1176.403772][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1176.441915][   T10] usb 8-1: config 0 descriptor??
[ 1176.480705][T10260] usb 10-1: new high-speed USB device number 70 using dummy_hcd
[ 1176.676196][T10260] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1176.690649][T10260] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1176.761398][T14428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1176.780505][T10260] usb 10-1: config 0 descriptor??
[ 1176.790865][T14428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1176.888120][   T10] uclogic 0003:28BD:0071.0024: failed retrieving string descriptor #100: -71
[ 1176.946039][   T10] uclogic 0003:28BD:0071.0024: failed retrieving pen parameters: -71
[ 1176.975270][   T10] uclogic 0003:28BD:0071.0024: pen probing failed: -71
[ 1176.976821][T14453] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1919'.
[ 1177.010673][T10260] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1177.015465][   T10] uclogic 0003:28BD:0071.0024: failed probing parameters: -71
[ 1177.039343][   T10] uclogic 0003:28BD:0071.0024: probe with driver uclogic failed with error -71
[ 1177.089901][   T10] usb 8-1: USB disconnect, device number 76
[ 1177.111336][   T43] gspca_sunplus: reg_w_riv err -71
[ 1177.116645][   T43] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[ 1177.162164][   T43] usb 3-1: USB disconnect, device number 15
[ 1177.522022][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.531037][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.924631][T10260] [drm:udl_init] *ERROR* Selecting channel failed
[ 1178.008135][T10260] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2
[ 1178.026141][T10260] [drm] Initialized udl on minor 2
[ 1178.087008][T10260] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1178.127443][T10260] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[ 1178.142928][T14466] tipc: Failed to remove unknown binding: 66,1,1/4:2083485234/2083485236
[ 1178.151739][T14466] tipc: Failed to remove unknown binding: 66,1,1/4:2083485234/2083485236
[ 1178.268748][ T5957] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1178.279957][T10260] usb 10-1: USB disconnect, device number 70
[ 1178.311774][ T5957] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[ 1178.571751][T14476] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1926'.
[ 1179.427505][T14488] netlink: 'syz.7.1928': attribute type 15 has an invalid length.
[ 1179.547037][T14488] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1928'.
[ 1179.651313][T14489] syzkaller1: entered promiscuous mode
[ 1179.671060][T14489] syzkaller1: entered allmulticast mode
[ 1180.062053][ T5957] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1180.271000][ T5957] usb 6-1: Using ep0 maxpacket: 8
[ 1180.303413][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1180.442307][T14503] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1931'.
[ 1180.479794][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1180.617579][ T5957] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1180.631763][ T5957] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[ 1180.721699][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1180.904776][ T5957] usb 6-1: config 0 descriptor??
[ 1181.542565][ T5957] usbhid 6-1:0.0: can't add hid device: -71
[ 1181.549279][ T5957] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1181.594985][ T5957] usb 6-1: USB disconnect, device number 74
[ 1182.260633][ T5920] usb 8-1: new high-speed USB device number 77 using dummy_hcd
[ 1182.422773][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1182.450040][ T5920] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1182.464911][T14525] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1937'.
[ 1182.512747][ T5920] usb 8-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[ 1182.544757][ T5920] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1182.595881][ T5920] usb 8-1: config 0 descriptor??
[ 1183.494587][ T5920] usbhid 8-1:0.0: can't add hid device: -71
[ 1183.555031][ T5920] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1183.652374][ T5920] usb 8-1: USB disconnect, device number 77
[ 1184.046508][T14540] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1184.580628][   T43] usb 8-1: new high-speed USB device number 78 using dummy_hcd
[ 1184.701169][ T5865] Bluetooth: hci4: command 0x0419 tx timeout
[ 1184.710486][   T43] usb 8-1: device descriptor read/64, error -71
[ 1184.950477][   T43] usb 8-1: new high-speed USB device number 79 using dummy_hcd
[ 1185.150449][   T43] usb 8-1: device descriptor read/64, error -71
[ 1185.268670][   T43] usb usb8-port1: attempt power cycle
[ 1185.630478][   T43] usb 8-1: new high-speed USB device number 80 using dummy_hcd
[ 1185.691270][   T43] usb 8-1: device descriptor read/8, error -71
[ 1185.930684][   T43] usb 8-1: new high-speed USB device number 81 using dummy_hcd
[ 1186.021004][   T43] usb 8-1: device descriptor read/8, error -71
[ 1186.144389][   T43] usb usb8-port1: unable to enumerate USB device
[ 1186.945387][T14564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1187.126313][T14568] syzkaller1: entered promiscuous mode
[ 1187.148295][T14568] syzkaller1: entered allmulticast mode
[ 1187.224578][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1947'.
[ 1187.953249][ T5920] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1188.010496][   T43] usb 10-1: new high-speed USB device number 71 using dummy_hcd
[ 1188.132531][ T5920] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1188.220105][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1188.283882][ T5920] usb 3-1: config 0 descriptor??
[ 1188.554321][   T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1188.741260][ T5920] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1188.755090][   T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1188.850736][   T43] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 1188.860197][   T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1188.875834][   T43] usb 10-1: config 0 descriptor??
[ 1189.153095][ T5920] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[ 1189.224794][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1949'.
[ 1189.416736][   T43] arvo 0003:1E7D:30D4.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.9-1/input0
[ 1189.618025][   T43] arvo 0003:1E7D:30D4.0025: couldn't init struct arvo_device
[ 1189.629106][   T43] arvo 0003:1E7D:30D4.0025: couldn't install keyboard
[ 1189.662780][ T5920] gspca_cpia1: usb_control_msg 05, error -71
[ 1189.669034][ T5920] cpia1 3-1:0.0: unexpected systemstate: 00
[ 1189.671347][   T43] arvo 0003:1E7D:30D4.0025: probe with driver arvo failed with error -71
[ 1189.700837][ T5920] usb 3-1: USB disconnect, device number 16
[ 1189.760793][   T43] usb 10-1: USB disconnect, device number 71
[ 1189.959691][T14587] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1952'.
[ 1191.933915][T14604] netlink: 'syz.9.1955': attribute type 15 has an invalid length.
[ 1191.941940][T14604] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1955'.
[ 1192.221355][T14608] vivid-004: =================  START STATUS  =================
[ 1192.230237][T14608] vivid-004: Radio HW Seek Mode: Bounded
[ 1192.240276][T14608] vivid-004: Radio Programmable HW Seek: false
[ 1192.246905][T14608] vivid-004: RDS Rx I/O Mode: Block I/O
[ 1192.252810][T14608] vivid-004: Generate RBDS Instead of RDS: false
[ 1192.259320][T14608] vivid-004: RDS Reception: true
[ 1192.264490][T14608] vivid-004: RDS Program Type: 0 inactive
[ 1192.270589][T14608] vivid-004: RDS PS Name:  inactive
[ 1192.287692][T14608] vivid-004: RDS Radio Text:  inactive
[ 1192.296695][T14608] vivid-004: RDS Traffic Announcement: false inactive
[ 1192.304159][T14608] vivid-004: RDS Traffic Program: false inactive
[ 1192.311571][T14608] vivid-004: RDS Music: false inactive
[ 1192.321251][T14608] vivid-004: ==================  END STATUS  ==================
[ 1192.904765][T14611] netlink: 476 bytes leftover after parsing attributes in process `syz.9.1957'.
[ 1193.940906][T10260] usb 8-1: new low-speed USB device number 82 using dummy_hcd
[ 1194.101177][T10260] usb 8-1: device descriptor read/64, error -71
[ 1194.390865][T10260] usb 8-1: new low-speed USB device number 83 using dummy_hcd
[ 1194.551704][T10260] usb 8-1: device descriptor read/64, error -71
[ 1194.675946][T10260] usb usb8-port1: attempt power cycle
[ 1195.044174][T10260] usb 8-1: new low-speed USB device number 84 using dummy_hcd
[ 1195.052114][   T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1195.077081][T14638] netlink: 'syz.5.1965': attribute type 10 has an invalid length.
[ 1195.086788][T10260] usb 8-1: device descriptor read/8, error -71
[ 1195.230542][   T43] usb 3-1: Using ep0 maxpacket: 16
[ 1195.258531][   T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1195.355755][T10260] usb 8-1: new low-speed USB device number 85 using dummy_hcd
[ 1195.365248][   T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1195.377287][   T43] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1195.384883][   T43] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1195.394307][T10260] usb 8-1: device descriptor read/8, error -71
[ 1195.410567][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.491234][   T43] usb 3-1: config 0 descriptor??
[ 1195.570986][T10260] usb usb8-port1: unable to enumerate USB device
[ 1195.584493][T14646] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1967'.
[ 1196.056251][   T10] usb 3-1: USB disconnect, device number 17
[ 1197.019161][T14647] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1967'.
[ 1197.276965][T14655] netlink: 'syz.6.1968': attribute type 15 has an invalid length.
[ 1197.320874][T14655] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1968'.
[ 1198.131465][T14671] syzkaller1: entered promiscuous mode
[ 1198.137241][T14671] syzkaller1: entered allmulticast mode
[ 1198.316456][T14679] syzkaller1: entered promiscuous mode
[ 1198.322269][T14679] syzkaller1: entered allmulticast mode
[ 1199.449557][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1977'.
[ 1199.465094][T14694] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1201.457346][T14712] trusted_key: encrypted_key: key user:syz not found
[ 1203.413232][T14729] dlm: non-version read from control device 36
[ 1204.354188][T13763] usb 8-1: new high-speed USB device number 86 using dummy_hcd
[ 1204.540684][T13763] usb 8-1: Using ep0 maxpacket: 8
[ 1204.570768][T13763] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[ 1204.589327][T13763] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1204.631086][T13763] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1204.677954][T13763] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1204.720452][T13763] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1204.760522][T13763] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1204.769727][T13763] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1204.885062][T14755] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1989'.
[ 1205.062004][T13763] usb 8-1: GET_CAPABILITIES returned 0
[ 1205.080600][T13763] usbtmc 8-1:16.0: can't read capabilities
[ 1205.191773][T14761] netlink: 'syz.2.1991': attribute type 4 has an invalid length.
[ 1205.344552][   T10] usb 8-1: USB disconnect, device number 86
[ 1205.411355][T14764] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1205.421332][T14764] team0: Device ipvlan2 is already an upper device of the team interface
[ 1205.970724][   T10] usb 8-1: new full-speed USB device number 87 using dummy_hcd
[ 1206.284590][   T10] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1206.371400][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1206.544275][   T10] usb 8-1: config 0 descriptor??
[ 1206.577256][   T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1206.763363][   T10] gp8psk: usb in 128 operation failed.
[ 1206.782891][   T10] gp8psk: usb in 137 operation failed.
[ 1206.811477][   T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1206.851729][   T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 1206.966321][   T10] usb 8-1: USB disconnect, device number 87
[ 1207.245533][T14778] syzkaller1: entered promiscuous mode
[ 1207.267285][T14778] syzkaller1: entered allmulticast mode
[ 1207.662471][T14785] fuse: Bad value for 'fd'
[ 1208.219111][   T10] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1208.390632][   T10] usb 6-1: Using ep0 maxpacket: 8
[ 1208.401001][   T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1208.409858][   T10] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1208.517990][   T10] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1208.612640][   T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1208.687956][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1208.736412][   T10] usbtmc 6-1:16.0: bulk endpoints not found
[ 1209.355315][T14809] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2003'.
[ 1209.561893][T14812] vivid-000: disconnect
[ 1209.719995][T14801] vivid-000: reconnect
[ 1210.928236][T13763] usb 6-1: USB disconnect, device number 75
[ 1210.936606][T14827] netlink: 732 bytes leftover after parsing attributes in process `syz.5.2007'.
[ 1210.986709][T14825] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2006'.
[ 1211.272052][T14831] geneve2: entered promiscuous mode
[ 1211.292637][T14831] geneve2: entered allmulticast mode
[ 1211.640673][   T10] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1211.742274][T14844] netlink: 'syz.2.2011': attribute type 15 has an invalid length.
[ 1211.750764][T14844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2011'.
[ 1211.790504][   T10] usb 6-1: device descriptor read/64, error -71
[ 1211.907639][T14851] netlink: 'syz.9.2013': attribute type 15 has an invalid length.
[ 1211.919554][T14851] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2013'.
[ 1212.040504][   T43] usb 8-1: new high-speed USB device number 88 using dummy_hcd
[ 1212.070894][   T10] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1212.246284][   T10] usb 6-1: device descriptor read/64, error -71
[ 1212.261543][   T43] usb 8-1: Using ep0 maxpacket: 32
[ 1212.278676][   T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1212.300798][   T43] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1212.314388][   T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1212.362508][   T10] usb usb6-port1: attempt power cycle
[ 1212.388689][   T43] usb 8-1: Product: syz
[ 1212.401644][   T43] usb 8-1: Manufacturer: syz
[ 1212.458219][   T43] usb 8-1: SerialNumber: syz
[ 1212.510615][   T43] usb 8-1: config 0 descriptor??
[ 1212.576538][   T43] usb 8-1: bad CDC descriptors
[ 1212.593228][   T43] usb 8-1: unsupported MDLM descriptors
[ 1212.720783][   T10] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1212.847964][   T10] usb 6-1: device descriptor read/8, error -71
[ 1212.937482][   T43] usb 8-1: USB disconnect, device number 88
[ 1213.090768][   T10] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1213.191487][   T10] usb 6-1: device descriptor read/8, error -71
[ 1213.334725][   T10] usb usb6-port1: unable to enumerate USB device
[ 1213.830560][   T10] usb 8-1: new high-speed USB device number 89 using dummy_hcd
[ 1213.991111][   T10] usb 8-1: Using ep0 maxpacket: 8
[ 1214.002012][   T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[ 1214.044455][   T10] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1214.066219][   T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1214.082859][   T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1214.098542][   T10] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1214.116353][   T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1214.126253][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1214.146058][   T10] usbtmc 8-1:16.0: bulk endpoints not found
[ 1214.495060][T14871] fuse: Unknown parameter '��'
[ 1215.717470][T14890] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1216.330660][   T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1216.502978][   T43] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1216.526022][T14899] geneve3: entered promiscuous mode
[ 1216.534260][   T43] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 9
[ 1216.543670][T14899] geneve3: entered allmulticast mode
[ 1216.552537][   T43] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[ 1216.563513][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1216.591698][T12971] usb 8-1: USB disconnect, device number 89
[ 1216.592763][ T8763] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[ 1216.604836][   T43] usb 3-1: Product: syz
[ 1216.626352][   T43] usb 3-1: Manufacturer: syz
[ 1216.643401][   T43] usb 3-1: SerialNumber: syz
[ 1216.665562][ T8763] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[ 1216.740641][ T8763] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[ 1216.749608][ T8763] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[ 1216.914899][T12396] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1216.917513][T14897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1216.966958][T14897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1217.091755][T12396] usb 6-1: Using ep0 maxpacket: 16
[ 1217.129421][T14913] netlink: 'syz.7.2025': attribute type 15 has an invalid length.
[ 1217.137587][T14913] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2025'.
[ 1217.149910][T12396] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1217.174470][T12396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1217.217944][T12396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1217.229286][T12396] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1217.547191][T14915] syzkaller1: entered promiscuous mode
[ 1217.660512][T14915] syzkaller1: entered allmulticast mode
[ 1217.860995][T12396] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1218.206996][T12396] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1218.228109][T12396] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1218.236821][   T10] usb 10-1: new high-speed USB device number 72 using dummy_hcd
[ 1218.244933][T12396] usb 6-1: Manufacturer: syz
[ 1218.265633][T12396] usb 6-1: config 0 descriptor??
[ 1218.400798][   T10] usb 10-1: Using ep0 maxpacket: 16
[ 1218.417294][   T10] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1218.427505][   T10] usb 10-1: config 1 has no interface number 1
[ 1218.442310][   T10] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1218.467072][   T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1218.477727][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1218.490206][   T10] usb 10-1: Product: syz
[ 1218.496307][   T10] usb 10-1: Manufacturer: syz
[ 1218.502795][   T10] usb 10-1: SerialNumber: syz
[ 1218.546050][T14900] ==================================================================
[ 1218.554167][T14900] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x44cd/0x5400
[ 1218.562456][T14900] Read of size 1 at addr ffff88806ad62970 by task syz.5.2024/14900
[ 1218.570575][T14900] 
[ 1218.573112][T14900] CPU: 1 UID: 0 PID: 14900 Comm: syz.5.2024 Not tainted syzkaller #0 PREEMPT(full) 
[ 1218.573139][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1218.573152][T14900] Call Trace:
[ 1218.573162][T14900]  <TASK>
[ 1218.573170][T14900]  dump_stack_lvl+0x189/0x250
[ 1218.573195][T14900]  ? __kasan_check_byte+0x12/0x40
[ 1218.573221][T14900]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1218.573234][T14900]  ? lock_release+0x4b/0x3e0
[ 1218.573251][T14900]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1218.573266][T14900]  print_report+0xca/0x240
[ 1218.573285][T14900]  ? xfrm_state_find+0x44cd/0x5400
[ 1218.573306][T14900]  kasan_report+0x118/0x150
[ 1218.573331][T14900]  ? xfrm_state_find+0x44cd/0x5400
[ 1218.573353][T14900]  xfrm_state_find+0x44cd/0x5400
[ 1218.573375][T14900]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1218.573397][T14900]  ? xfrm_state_find+0x1da/0x5400
[ 1218.573410][T14900]  ? __pfx_xfrm_state_find+0x10/0x10
[ 1218.573427][T14900]  ? trace_fib_table_lookup+0x85/0x200
[ 1218.573452][T14900]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[ 1218.573486][T14900]  ? fib_rules_lookup+0xc55/0xe90
[ 1218.573507][T14900]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[ 1218.573528][T14900]  ? __lock_acquire+0xab9/0xd20
[ 1218.573548][T14900]  ? xfrm_sk_policy_lookup+0x9d/0x750
[ 1218.573566][T14900]  ? xfrm_sk_policy_lookup+0x9d/0x750
[ 1218.573588][T14900]  ? xfrm_expand_policies+0x41f/0x6a0
[ 1218.573614][T14900]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[ 1218.573642][T14900]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[ 1218.573665][T14900]  ? rcuref_put+0x1b7/0x210
[ 1218.573684][T14900]  ? __pfx_rcuref_put+0x10/0x10
[ 1218.573698][T14900]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 1218.573715][T14900]  xfrm_lookup_route+0x3c/0x1c0
[ 1218.573731][T14900]  __ip4_datagram_connect+0x9a5/0x1270
[ 1218.573762][T14900]  __ip6_datagram_connect+0x9f0/0x1150
[ 1218.573800][T14900]  ? __pfx___ip6_datagram_connect+0x10/0x10
[ 1218.573825][T14900]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1218.573839][T14900]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1218.573851][T14900]  ip6_datagram_connect_v6_only+0x63/0xa0
[ 1218.573868][T14900]  __sys_connect+0x316/0x440
[ 1218.573879][T14900]  ? __pfx___sys_connect+0x10/0x10
[ 1218.573902][T14900]  ? rcu_is_watching+0x15/0xb0
[ 1218.573924][T14900]  __x64_sys_connect+0x7a/0x90
[ 1218.573942][T14900]  do_syscall_64+0xfa/0x3b0
[ 1218.573961][T14900]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1218.573978][T14900]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1218.573992][T14900]  ? clear_bhb_loop+0x60/0xb0
[ 1218.574003][T14900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1218.574014][T14900] RIP: 0033:0x7fd80af8ebe9
[ 1218.574026][T14900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1218.574039][T14900] RSP: 002b:00007fd80be3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1218.574059][T14900] RAX: ffffffffffffffda RBX: 00007fd80b1c6090 RCX: 00007fd80af8ebe9
[ 1218.574073][T14900] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000d
[ 1218.574085][T14900] RBP: 00007fd80b011e19 R08: 0000000000000000 R09: 0000000000000000
[ 1218.574097][T14900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1218.574108][T14900] R13: 00007fd80b1c6128 R14: 00007fd80b1c6090 R15: 00007fd80b2efa28
[ 1218.574128][T14900]  </TASK>
[ 1218.574135][T14900] 
[ 1218.899804][T14900] Allocated by task 12709:
[ 1218.904233][T14900]  kasan_save_track+0x3e/0x80
[ 1218.909010][T14900]  __kasan_slab_alloc+0x6c/0x80
[ 1218.913957][T14900]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 1218.919518][T14900]  xfrm_state_alloc+0x24/0x2f0
[ 1218.924558][T14900]  xfrm_add_sa+0x17d1/0x4070
[ 1218.929424][T14900]  xfrm_user_rcv_msg+0x7a0/0xab0
[ 1218.935079][T14900]  netlink_rcv_skb+0x205/0x470
[ 1218.939866][T14900]  xfrm_netlink_rcv+0x79/0x90
[ 1218.944733][T14900]  netlink_unicast+0x82c/0x9e0
[ 1218.949503][T14900]  netlink_sendmsg+0x805/0xb30
[ 1218.954529][T14900]  __sock_sendmsg+0x21c/0x270
[ 1218.959306][T14900]  ____sys_sendmsg+0x505/0x830
[ 1218.964680][T14900]  ___sys_sendmsg+0x21f/0x2a0
[ 1218.969809][T14900]  __x64_sys_sendmsg+0x19b/0x260
[ 1218.974846][T14900]  do_syscall_64+0xfa/0x3b0
[ 1218.979371][T14900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1218.985474][T14900] 
[ 1218.988034][T14900] Freed by task 12093:
[ 1218.992105][T14900]  kasan_save_track+0x3e/0x80
[ 1218.996876][T14900]  kasan_save_free_info+0x46/0x50
[ 1219.002519][T14900]  __kasan_slab_free+0x5b/0x80
[ 1219.007468][T14900]  kmem_cache_free+0x18f/0x400
[ 1219.012238][T14900]  xfrm_state_gc_task+0x52d/0x6b0
[ 1219.017715][T14900]  process_scheduled_works+0xae1/0x17b0
[ 1219.023444][T14900]  worker_thread+0x8a0/0xda0
[ 1219.028044][T14900]  kthread+0x70e/0x8a0
[ 1219.032253][T14900]  ret_from_fork+0x3fc/0x770
[ 1219.037053][T14900]  ret_from_fork_asm+0x1a/0x30
[ 1219.041912][T14900] 
[ 1219.044354][T14900] The buggy address belongs to the object at ffff88806ad62640
[ 1219.044354][T14900]  which belongs to the cache xfrm_state of size 928
[ 1219.058968][T14900] The buggy address is located 816 bytes inside of
[ 1219.058968][T14900]  freed 928-byte region [ffff88806ad62640, ffff88806ad629e0)
[ 1219.073139][T14900] 
[ 1219.075474][T14900] The buggy address belongs to the physical page:
[ 1219.081881][T14900] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806ad62640 pfn:0x6ad60
[ 1219.092175][T14900] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1219.100831][T14900] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1219.108590][T14900] page_type: f5(slab)
[ 1219.112850][T14900] raw: 00fff00000000040 ffff88801afdf280 dead000000000122 0000000000000000
[ 1219.121955][T14900] raw: ffff88806ad62640 00000000800f000c 00000000f5000000 0000000000000000
[ 1219.130673][T14900] head: 00fff00000000040 ffff88801afdf280 dead000000000122 0000000000000000
[ 1219.139382][T14900] head: ffff88806ad62640 00000000800f000c 00000000f5000000 0000000000000000
[ 1219.148246][T14900] head: 00fff00000000002 ffffea0001ab5801 00000000ffffffff 00000000ffffffff
[ 1219.157048][T14900] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 1219.166176][T14900] page dumped because: kasan: bad access detected
[ 1219.172780][T14900] page_owner tracks the page as allocated
[ 1219.178956][T14900] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7519, tgid 7518 (syz.8.350), ts 330117177647, free_ts 330086232405
[ 1219.200386][T14900]  post_alloc_hook+0x240/0x2a0
[ 1219.205441][T14900]  get_page_from_freelist+0x21e4/0x22c0
[ 1219.211197][T14900]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1219.217137][T14900]  alloc_pages_mpol+0x232/0x4a0
[ 1219.222080][T14900]  allocate_slab+0x8a/0x370
[ 1219.227131][T14900]  ___slab_alloc+0xbeb/0x1420
[ 1219.232100][T14900]  kmem_cache_alloc_noprof+0x283/0x3c0
[ 1219.238454][T14900]  xfrm_state_alloc+0x24/0x2f0
[ 1219.243411][T14900]  xfrm_state_find+0x37d4/0x5400
[ 1219.248383][T14900]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[ 1219.254745][T14900]  xfrm_lookup_with_ifid+0x58a/0x1a70
[ 1219.260303][T14900]  xfrm_lookup_route+0x3c/0x1c0
[ 1219.265191][T14900]  udp_sendmsg+0x142e/0x2170
[ 1219.269825][T14900]  __sock_sendmsg+0x19c/0x270
[ 1219.274550][T14900]  ____sys_sendmsg+0x52d/0x830
[ 1219.279317][T14900]  ___sys_sendmsg+0x21f/0x2a0
[ 1219.284107][T14900] page last free pid 7493 tgid 7486 stack trace:
[ 1219.290657][T14900]  __free_frozen_pages+0xbc4/0xd30
[ 1219.295893][T14900]  stack_depot_save_flags+0x436/0x860
[ 1219.301533][T14900]  kasan_save_track+0x4f/0x80
[ 1219.306244][T14900]  __kasan_slab_alloc+0x6c/0x80
[ 1219.311285][T14900]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[ 1219.317625][T14900]  kmalloc_reserve+0xbd/0x290
[ 1219.322584][T14900]  __alloc_skb+0x142/0x2d0
[ 1219.327262][T14900]  alloc_uevent_skb+0x7d/0x230
[ 1219.332067][T14900]  kobject_uevent_net_broadcast+0x2fa/0x560
[ 1219.337996][T14900]  kobject_uevent_env+0x55b/0x8c0
[ 1219.343054][T14900]  device_del+0x73a/0x8e0
[ 1219.347480][T14900]  device_unregister+0x20/0xc0
[ 1219.352345][T14900]  hci_conn_del+0xc33/0x11b0
[ 1219.356959][T14900]  hci_abort_conn_sync+0x658/0xe30
[ 1219.362084][T14900]  hci_disconnect_all_sync+0x1b5/0x350
[ 1219.367543][T14900]  hci_suspend_sync+0x3fc/0xc60
[ 1219.372486][T14900] 
[ 1219.374824][T14900] Memory state around the buggy address:
[ 1219.380538][T14900]  ffff88806ad62800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1219.389125][T14900]  ffff88806ad62880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1219.397640][T14900] >ffff88806ad62900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1219.405901][T14900]                                                              ^
[ 1219.413913][T14900]  ffff88806ad62980: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 1219.422358][T14900]  ffff88806ad62a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1219.430510][T14900] ==================================================================
[ 1219.439133][T14900] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1219.446358][T14900] CPU: 1 UID: 0 PID: 14900 Comm: syz.5.2024 Not tainted syzkaller #0 PREEMPT(full) 
[ 1219.456020][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1219.466873][T14900] Call Trace:
[ 1219.470168][T14900]  <TASK>
[ 1219.473102][T14900]  dump_stack_lvl+0x99/0x250
[ 1219.477748][T14900]  ? __asan_memcpy+0x40/0x70
[ 1219.482344][T14900]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1219.487566][T14900]  ? __pfx__printk+0x10/0x10
[ 1219.492169][T14900]  vpanic+0x281/0x750
[ 1219.496247][T14900]  ? __pfx_vpanic+0x10/0x10
[ 1219.500759][T14900]  ? irqentry_exit+0x74/0x90
[ 1219.505641][T14900]  panic+0xb9/0xc0
[ 1219.509487][T14900]  ? __pfx_panic+0x10/0x10
[ 1219.513917][T14900]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 1219.519921][T14900]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1219.525933][T14900]  ? xfrm_state_find+0x44cd/0x5400
[ 1219.531504][T14900]  check_panic_on_warn+0x89/0xb0
[ 1219.536584][T14900]  ? xfrm_state_find+0x44cd/0x5400
[ 1219.541828][T14900]  end_report+0x78/0x160
[ 1219.546097][T14900]  kasan_report+0x129/0x150
[ 1219.550796][T14900]  ? xfrm_state_find+0x44cd/0x5400
[ 1219.555945][T14900]  xfrm_state_find+0x44cd/0x5400
[ 1219.561010][T14900]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1219.567445][T14900]  ? xfrm_state_find+0x1da/0x5400
[ 1219.572676][T14900]  ? __pfx_xfrm_state_find+0x10/0x10
[ 1219.578667][T14900]  ? trace_fib_table_lookup+0x85/0x200
[ 1219.584235][T14900]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[ 1219.591044][T14900]  ? fib_rules_lookup+0xc55/0xe90
[ 1219.596471][T14900]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[ 1219.603273][T14900]  ? __lock_acquire+0xab9/0xd20
[ 1219.608154][T14900]  ? xfrm_sk_policy_lookup+0x9d/0x750
[ 1219.613620][T14900]  ? xfrm_sk_policy_lookup+0x9d/0x750
[ 1219.619005][T14900]  ? xfrm_expand_policies+0x41f/0x6a0
[ 1219.624738][T14900]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[ 1219.630122][T14900]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[ 1219.635947][T14900]  ? rcuref_put+0x1b7/0x210
[ 1219.640740][T14900]  ? __pfx_rcuref_put+0x10/0x10
[ 1219.645623][T14900]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 1219.651109][T14900]  xfrm_lookup_route+0x3c/0x1c0
[ 1219.656156][T14900]  __ip4_datagram_connect+0x9a5/0x1270
[ 1219.661897][T14900]  __ip6_datagram_connect+0x9f0/0x1150
[ 1219.667572][T14900]  ? __pfx___ip6_datagram_connect+0x10/0x10
[ 1219.673687][T14900]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1219.679154][T14900]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1219.685258][T14900]  ip6_datagram_connect_v6_only+0x63/0xa0
[ 1219.691095][T14900]  __sys_connect+0x316/0x440
[ 1219.696071][T14900]  ? __pfx___sys_connect+0x10/0x10
[ 1219.701458][T14900]  ? rcu_is_watching+0x15/0xb0
[ 1219.706227][T14900]  __x64_sys_connect+0x7a/0x90
[ 1219.711080][T14900]  do_syscall_64+0xfa/0x3b0
[ 1219.715602][T14900]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1219.720810][T14900]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1219.726878][T14900]  ? clear_bhb_loop+0x60/0xb0
[ 1219.731561][T14900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1219.737897][T14900] RIP: 0033:0x7fd80af8ebe9
[ 1219.742317][T14900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1219.762102][T14900] RSP: 002b:00007fd80be3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1219.770636][T14900] RAX: ffffffffffffffda RBX: 00007fd80b1c6090 RCX: 00007fd80af8ebe9
[ 1219.778614][T14900] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000d
[ 1219.786594][T14900] RBP: 00007fd80b011e19 R08: 0000000000000000 R09: 0000000000000000
[ 1219.794618][T14900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1219.802940][T14900] R13: 00007fd80b1c6128 R14: 00007fd80b1c6090 R15: 00007fd80b2efa28
[ 1219.811007][T14900]  </TASK>
[ 1219.814522][T14900] Kernel Offset: disabled
[ 1219.818841][T14900] Rebooting in 86400 seconds..