last executing test programs:

34m3.463532122s ago: executing program 32 (id=6013):
unshare(0x2c020400)
r0 = syz_open_procfs(0x0, &(0x7f0000000b80)='ns\x00')
move_mount(r0, &(0x7f0000000bc0)='./mnt\x00', r0, 0x0, 0x177)
r1 = msgget$private(0x0, 0x408)
r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x27c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x1, 0x9c, 0x1, {0x22, 0xbc6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x17, 0x8, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x2, 0xb}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x1, 0x7, 0x1b, 0x20, 0xa1}, 0x54, &(0x7f0000000400)={0x5, 0xf, 0x54, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x80, 0x4, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x84, 0xfd, 0x9, 0xfff8, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0x53}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "08ac1445236585178aeeeb5a5969e94c"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "26fbd7e68528e6ba0c45b1bf6411d3ac"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x0, 0x7}]}, 0x3, [{0x8a, &(0x7f0000000480)=@string={0x8a, 0x3, "ea5e5e660ff32ab47641186fdeec19b9d9ac210efe3dc217a4fb637968fa6803fc5fd8e35b80f9b4a5460ef39c20fd9182741e705f19ba3cb61021fc3fdfbdd4e5113a9a8860b21e5de37414b960c9127fc9f57e446055b2221f54ac03f76cb49d113bd3709ff41acc5702147c2f47cfabf8e24bf41452cced89e9c6d2d4dc07ad99dbe3e6f04913"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42b}}, {0xf1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}]})
syz_usb_control_io$hid(r2, &(0x7f0000000840)={0x24, &(0x7f00000006c0)={0x40, 0xe, 0x4e, {0x4e, 0x21, "39d9aae450515f92466e37a4b7e57f5e0b1fc56bb7d69cb8a5f0caac3a73ed34bf2f12459531bc69a931d9503679b37251fa1234882ef5794f7ce97fbb214fb45ca90aadc62054d009ef12be"}}, &(0x7f0000000740)=ANY=[@ANYBLOB="00000400800004030708"], &(0x7f0000000780)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x2, "ab43e331"}, @global=@item_4={0x3, 0x1, 0x6, "8259920e"}, @main=@item_4={0x3, 0x0, 0x9, "a48af0ec"}, @local=@item_4={0x3, 0x2, 0x8, "50ee4f49"}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x2c5}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000880)={0x0, 0x759c51525bae0421, 0xc0, "9ee22f105b857bc7f9ec893c858ca8a83431d3056c5a010ea5f2e178881260853c26b730be931d7a85b8a356f97b744d75327b91f7b7e91ffcfed5d18515d34cd67d52ea2b4b518721abb6b6cbff067d19d9465e0664e514380c727e3085b8dd87db752cdebfd83371b6b2a0c13a5d03ae35d4a6ffcf01b736ae74dd50801b1edaf5f064a9e73660d88528072fcf06606188bf7e25612120e17195be450e640175b8de402251c68769bb2a98439a53c14b1ceb863d793ffdabc6f31fccae6bdc"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xc5}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x42}, &(0x7f0000000a00)={0x20, 0x1, 0x84, "2bb1de13b744f9302435aa205c64acc5bd8d60bf35696f65b792f54399be74d69152ffb8647630ff94bfef6b648147dbffb8275863769c440cf755e6c0353bd2c96ab930c226dc9ef3823e6f2dcc606a845e905a32b0b3e2d493dd4a4abb31feb3242eaf318fb480fb2017f069954e000e61f1f256943122c58e4fa3a83a6bb4284f53b0"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x6}})
msgsnd(0x0, &(0x7f00000007c0)=ANY=[@ANYRESHEX], 0x2000, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000002c0)="0f20d86635080000000f22d8f30f09dcecf266360f202367660f381ead00000080baf80c66b8d8867c8c66efbafc0c66ed0fe7ba0000baf80c66b82c4f358c66efbafc0cecf30f013c6764f30fc7b45c01000000", 0x54}], 0x1, 0x61, &(0x7f0000000380), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000140)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xeb, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x7, 0x4, 0x9, '\x00', 0x3ff})
ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000b40)=0xbb1)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x9, 0xa08, 0x7, 0xfff, 0x20004, 0xe8bf, 0x2000000000007e, 0x2, 0x400, 0xb, 0x20040000004, 0xfffffffffffff94c, 0x7f, 0xd, 0x3, 0x4], 0x70000, 0x160851})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, 0x0)
msgctl$IPC_RMID(r1, 0x0)

28m2.186817811s ago: executing program 33 (id=7529):
r0 = syz_usb_connect$midi(0x1, 0x92, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x133e, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x1, 0x1, 0x6, 0x80, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x3, [@midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x8, 0x4, [{0x9, 0x9}, {0x40, 0x5}, {0x10, 0x5}, {0x4, 0x3}], 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x6, 0x5}], [{{0x9, 0x5, 0xd, 0x2, 0x40, 0x6, 0x5d, 0x8, {0x4}}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x5, 0x9, 0x6, {0xf, 0x25, 0x1, 0xb, "8c18db2d0d9b0ccd5e6906"}}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0xc0, 0x7f, 0x38, {0x14, 0x25, 0x1, 0x10, "cfcb72539987dbccce33a200dec5d5a5"}}}, {{0x9, 0x5, 0x9, 0x4, 0x0, 0x6, 0x2, 0x8, {0xe, 0x25, 0x1, 0xa, "6f1cd0a016cc5543f36f"}}}]}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xe2, 0xc, 0x8d, 0x20, 0x1}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x29, 0x2, 0x6}]}, 0x4, [{0x80, &(0x7f0000000200)=@string={0x80, 0x3, "96328f15702d3d1075d1525d9cecd8a7dcff769793178d1578fcfe7d4869250078e4a7a0265a8ce18c11f78c2a82091332d67be6aa66c4b370f227b454d339f88409d493ae5b73cb24f4206c160b6c86ec45c314a1ee2950369715a992ba851501dc2bba7a079678e14fad509860ea33f35a4cc994075bd8f2181c5cb3c4"}}, {0x20, &(0x7f0000000280)=@string={0x20, 0x3, "a7a0fae397739cd1af80824e7d91455f8b447c1c4e7ad1d1638d6559278e"}}, {0x74, &(0x7f00000002c0)=@string={0x74, 0x3, "1e43e0b08cad29c6f101eba9b8b6544086ffd9e12a0229193d7a7fa60ed27f570d3cef9b79907784be9fa6a6122fa3afe97c45089bf8babde81643a421caa0da3329219fba109213f2cadee885e7e10754654efe7e9a8d9ce60ad0265d1ef41a80aa4a6859c387385b87be9f97dd7bf6ad80"}}, {0xab, &(0x7f0000000340)=@string={0xab, 0x3, "984e7e3aaba8f4767ae25a41515aae67f39b8306620b64e514a458e40d483c7ac5e31707e252e5d39e1981640c98787ad266ddb5467597b511f7c2bbc34d1f4d075be9ed382f2b2714864ac62353e34e89f9d289d112de6c403982bce16e6ab71dd31507317c19f4ce4932a3c64c8587cf94bfd02a4f73562861bf9275446b6691d6a601af21a3f49d45e39f6df3c0b2d5a6d2a39bfdcd4903d1170030e858363941a11e0e87b68514"}}]})
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x40241, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000880)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
eventfd(0x80)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000900)={'syzkaller1\x00', 0x1000})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x848000000015, 0x805, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000940), 0x0, 0x181)
ioctl$HDIO_GETGEO(r3, 0x301, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x40805, &(0x7f0000000980)={0xa, 0x4e20, 0x4002, @empty, 0x6}, 0x1c)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup.cpu/test\x00', 0x777)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
syz_clone(0x80511, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r5, &(0x7f0000000ac0)='1', 0x1)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8)
write(r6, &(0x7f0000000b40)='1', 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r7, &(0x7f0000000bc0)='0', 0x1)
open_tree(0xffffffffffffff9c, &(0x7f0000000c00)='\x00', 0x1902)
syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f0000000480)={0x0, 0x11, 0x31, {0x31, 0x22, "d6c6e69a9b041f13d6f938f2ca328dd835847add901a9b0f4d8cb489963ea9a66da967cc217e7fe5389e29550adf52"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000000500)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x3, "ef7ff0c7"}, @main=@item_4={0x3, 0x0, 0x19, "95546b17"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0xe6e}}}}, &(0x7f0000000800)={0x2c, &(0x7f00000005c0)={0x20, 0xe, 0xe8, "15322542e6cb65eaf9f1838d05afdca827ca8224ffcb381e71aba348c294142ea2bfa79dd8dc9b50e1ccd163f7894af6860c66940f9d6e7f614448551f1b645294da78aff656373fad3b2367f8c8ae5947ead6bd325d9a388cd3a7e213879c6766093e330cf0a48bd55b686057b89cd9f9047dd8ad7812380687d1a18b5202e1024fa9c5a220e0fa910c5fd12ab5d692428fb9b95e5a376cb3a0962476ca372abdd15552d3f4ae617e2875a7b342462e93f2c4b0891759cea745d6398ad30dc1349390430ae5c29e799b9c78e9a1de3e5e870e2c6f8b40aa80f34f7b22f508e932c393c70bf01328"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x1, 0x4f, "1253a79be5cf837f76c27cb7a06f6ddf19fa88a6c36e2e682c50eb30b2d08c4f242971324c0a4ba446ba241d780372389209b7c029def36a888ba88419e9ef338a03437d4fd7c502ee2f0a2b644ba1"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x2}})
r8 = socket(0xa, 0x3, 0xff)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x100000f}]}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @remote, @local, {[@hopopts={0xff}]}}}}}, 0x0)

23m50.803321513s ago: executing program 34 (id=8664):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f00000006c0)={0x0, 0xfffffffe, 0x100, 0x2, 0x1e5}, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0))
close(0x3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0)
pselect6(0x40, &(0x7f0000000640)={0x1, 0x0, 0x7, 0xffffffffffffffff, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000680)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x2, 0x0, 0xffffffeffffffffc}, 0x0, 0x0)

23m14.701347962s ago: executing program 35 (id=8739):
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x408102, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f00000001c0)={0x0, 0x7a22, 0xc000, 0x2, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x404c000)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0)
sched_setattr(0x0, &(0x7f0000000580)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x42, 0x8)
fallocate(r2, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000023000/0x4000)=nil, 0x4000, 0x200000c, 0x13, r2, 0x2000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x15eb, &(0x7f00000006c0)={0x0, 0x8ab5, 0x200, 0x9, 0x800c1, 0x0, r0})
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioprio_set$pid(0x2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000800)={0x38, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x8, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
io_uring_enter(r0, 0x14dc, 0x7721, 0x16, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)

19m58.467280544s ago: executing program 36 (id=9493):
socket$inet6(0xa, 0x80000, 0xff)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0)
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000340)={0x0, 0xebb7, 0x80000, 0x3, 0x56}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_team\x00'})
write$nci(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="71050307010301000c12b8e28898d81dde77237cccfb7f06d6248ffff73c4ed89ab6ccde2ed34a73d60200b4c2f46d066422bdb0eea38c2f4fe5df59033598e33be663c769a81b29adc672a9c094a3da19aa68b6d27bd2ef4079ea64173e9e9637e2958afcb320de6a50d49627012638a7467df7c532a5bfb5fb1f1ec68f18e968656c6131f1e810b8f91cfd5ee2d41ea4560842bc51451804ffa376de402dd81b7c8763d705cc78528ecac684c8c5ad89bcb148843eb6d008b4f510c5ef717094b224f50c0a02ea7638a8eb31dd5e0b997526872e2567aa1f9aef3d122a1262b36fa7dbad98f38075ede7f33311b422a74c6502bd78564925c27ce9a08d1089f9b2f8d3631fa2e0ed5f9da012ae2a85ac4950f12bdc27276e5d2a833f3d02889ec26a674b6c7d903e35ceb335b9f1fb5935d43dc6ab23d2ef3a742b47bbb08ce8f30c44263e0c63e60963c81a833ebe7f2668200bb28f9b39a1685b0f121dfca7ebe78511e8571f60e7bb82053641a5f835669c939edfaeb5d25c8be4ae24f6f6859ee81ae02143227fe09bcff5282112f861ee0e3306aeb4eaa9294fe4fd519345b08f"], 0x1b2)
socket$nl_route(0x10, 0x3, 0x0)
add_key(0x0, 0x0, &(0x7f0000000900)="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", 0x18a, 0x0)
io_uring_enter(r0, 0x101, 0x11, 0x5, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="08f64fd5250200b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4000000010000305000000000007000000000013", @ANYRES32=0x0, @ANYBLOB="00000000061005001800128008000100767469000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r5 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r5, &(0x7f0000000e00)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e40)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000002c0)=@getchain={0x3c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x3}, {0xe, 0x9}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
shutdown(r4, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000f80)=ANY=[], 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000fc0)={0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)

18m43.130123726s ago: executing program 37 (id=9746):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0)
unshare(0x6010600)
syz_open_dev$loop(&(0x7f0000000180), 0x4, 0xc0981)
r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x882)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'vlan1\x00'})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x2002c094)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x0, 0x2c, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x6}, 0x0)
syz_clone(0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000380)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0)
syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x3, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0x6, 0x7}, @as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0xfc, 0xa, {0x7, 0x25, 0x1, 0x0, 0xe, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0xbf, 0x8, {0x7, 0x25, 0x1, 0x8, 0x5, 0x6}}}}}}}}]}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r1)
r2 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x4}, 0x94)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680))
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f00000006c0)={'wlan0\x00', @local})
fstat(r1, &(0x7f0000000700))
r3 = syz_io_uring_setup(0x111, &(0x7f0000000080)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200))
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000240)='n', 0x1)

11m3.781722226s ago: executing program 38 (id=11920):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x0, 0x0, 0x10000000, 0x0, 0x6, 0x4, 0x1, 0x0, 0xff}, 0x0)
syz_clone(0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0)
syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000800)={0xa, 0x4e20, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000880)="d6", 0x1}], 0x1}}, {{&(0x7f00000008c0)={0xa, 0x4e23, 0x3, @local, 0x3}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000940)='l', 0x1}], 0x1}}, {{&(0x7f0000000980)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000580)="78a5", 0x2}], 0x1}}], 0x3, 0x4004851)
setsockopt(r4, 0x84, 0x14, &(0x7f0000000a40)="020000000980ffff", 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a80), 0x123e00, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14)
gettid()
timer_create(0x0, &(0x7f0000000b40)={0x0, 0x25, 0x1, @thr={&(0x7f00000003c0)="9e9501f7d7bd9477461a0f3a76b1b1f82e53b533dd2e40b7fb87503d7678400f5a1c2989643dbd270b45a29b6040a590d503e8109fc0e60f1e50b06e6375124ac6509fbd24c2b39901643ea81a132a8a54eb04", &(0x7f0000000440)="a31ec057f3fa3237774fd6ffcd9890ca02a41172e1ee8c68f4dee4d8e8514beb4010cd80218bdad3feb6"}}, &(0x7f0000000380)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000bc0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETSW2(r5, 0x5408, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast})
syz_open_dev$radio(&(0x7f0000000600), 0xffffffffffffffff, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r9 = syz_io_uring_setup(0x1f97, &(0x7f00000001c0)={0x0, 0x7f97, 0x13581, 0x0, 0x1ff}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500))
io_uring_enter(r9, 0x55, 0x84a23, 0xf, 0x0, 0x18)

10m6.621560915s ago: executing program 0 (id=12231):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
dup(r0)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0)
r3 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xb, {"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", 0x1000}}, 0x1006)
rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000000840)={0x2, 0xffffffff, 0x7})
shmdt(r3)
syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000000)={0x18, r5, 0x1, 0x0, &(0x7f00000001c0)=[{0x1, 0xffffffffdfffffff}]})
syz_open_dev$usbfs(0x0, 0x775, 0x8000)
munlockall()
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020204020c00000000000000000000000200080008000000fd00000000000000020001000000000000000503000000a003000600ff00000002000000ac1414aa00000000000000000300050000000000020000000000000000000000000000005954ec59ebe83830e47f"], 0x60}, 0x1, 0x7}, 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, 0x0, 0x0, 0xfffffffffffffffc, 0x1541})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000200)={0x4, &(0x7f0000000400)=[{0x40, 0x3, 0x7, 0x103}, {0x83, 0x2, 0x6, 0x372}, {0x7ff, 0x5, 0x5, 0x6}, {0xb9e, 0x80, 0x9, 0x6}]})
close_range(r8, 0xffffffffffffffff, 0x0)

10m6.602965777s ago: executing program 8 (id=12232):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000000000000000aacc0000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000006000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa000000000000002d000000000600000004"], 0xfc}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1], [0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x11}]}]}]}}]}, 0xa4}}, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901)
fspick(r5, &(0x7f0000000280)='.\x00', 0x0)
r6 = syz_open_dev$ndb(&(0x7f0000000640), 0x0, 0x2)
ioctl$BLKOPENZONE(r6, 0x40101286, &(0x7f0000000680)={0x8, 0x3})
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x40084}, 0x4000)
connect$inet6(r4, &(0x7f0000000500)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x34, r8, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x80)

10m6.527769749s ago: executing program 4 (id=12233):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="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", 0x17e}, {&(0x7f0000000680)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4)
writev(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb9df7231e2e643ecb223f032a1ae299327d7156236f0edc44c4c268168596acd7c225338921f9e7b97e55fd594eaa95067216139cad3915f76f9cf17d61", 0xb2}, {&(0x7f0000000880)="135c15194fad5248c52ac1fc08d8399a", 0x10}], 0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x482, 0x0)
r2 = epoll_create1(0x80000)
write$binfmt_aout(r1, &(0x7f00000008c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000900)={0x0, 0x7, 0x44, 0x0, 0x83, "00000000000000000000ffff00"})
r3 = syz_open_pts(r1, 0x0)
r4 = dup3(r3, r1, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000940)={0x80000001})
ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f0000000980))
r5 = syz_clone3(&(0x7f0000000a00)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r5, r5, 0x21)
write(r0, &(0x7f0000000000)="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", 0x2bd)

10m6.092852245s ago: executing program 8 (id=12236):
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x503942, 0x70)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0x9}, 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x6, 0x8, 0x3, 0x0, 0x800009, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r1, r1, 0x0, 0x20000005)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000380))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x42, 0x3}}]}}}]}, 0x40}}, 0x8080)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x4a000000)
syz_open_procfs(0x0, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x101000)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1000004, 0xfffffffd, 0x49, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000004c0)=0xf1ff)
openat$nullb(0xffffffffffffff9c, 0x0, 0x40441, 0x0)
sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x2040400)
symlink(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file0\x00')
name_to_handle_at(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x3, 0x7, "81850cfdd65e9f6fee9f011d77c94c1f"}}}, &(0x7f0000000640), 0x600)

10m5.447863122s ago: executing program 4 (id=12239):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xfffffe0000000001, 0x1, 0xffffffff}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000500)={0x1, 0x2, {<r0=>0xffffffffffffffff}, {}, 0x9})
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000540))
syz_clone(0x20000, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r1, 0x0, r1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000005c0)={0xe0002004})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000600)={0x10000014})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x11, r4, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRESOCT=r4, @ANYRESOCT=r3, @ANYRES32=r3], 0x0)
r5 = syz_open_dev$I2C(&(0x7f00000006c0), 0x1, 0x2603)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000700)={&(0x7f0000000740)=[{0x1e, 0x8801, 0x0, 0x0}, {0xfe01, 0x0, 0x0, 0x0}], 0x2})
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)
process_madvise(r3, &(0x7f0000001b00)=[{&(0x7f0000000b00)="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", 0x1000}], 0x1, 0x64, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0xe8, 0x80000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880)
openat$random(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff8d)
r7 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r7, 0x40246f4c, &(0x7f0000000a40)={0x1c40aa80, 0x0, @ofdm={0x0, 0x0, 0x0, 0x2}})
r8 = syz_open_dev$dvb_demux(&(0x7f0000000a80), 0x0, 0x2)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000ac0)={0x0, {}, 0x0, 0x4})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee5, 0x8031, 0xffffffffffffffff, 0x1ab55000)

10m3.989004126s ago: executing program 9 (id=12244):
r0 = socket$netlink(0x10, 0x3, 0x0)
write(r0, &(0x7f00000000c0), 0x0)
write(r0, &(0x7f0000000380)="6c0000002c0001060200000000000000380000000100000000000000f1ffffff000301000c000100666c6f77657200003c0002801c0054801800058005000100010000000c00020000000000000000011c0055801800058005000100ff0000000c000200ffffffffffffffff", 0x6c)

10m3.649558562s ago: executing program 9 (id=12246):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000540)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000580)=0x2, 0x4)
connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm, @mss={0x2, 0xb}, @mss, @window={0x3, 0x6, 0xff81}, @timestamp, @timestamp, @sack_perm, @window={0x3, 0x8000, 0x5}], 0x8)
sendto$inet(r0, &(0x7f0000000640)="b8", 0x1, 0x2400a044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000680), 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'})
syz_io_uring_setup(0xec4, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0))
sendto$inet(r0, &(0x7f00000006c0)='x', 0x1, 0x480c1, 0x0, 0x0)

10m3.119246209s ago: executing program 9 (id=12247):
r0 = syz_usb_connect$cdc_ncm(0x6, 0xd1, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x48, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x2, 0x1, 0xb, 0x20, 0xb, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x2da, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x4, 0x3, 0x4}, @country_functional={0x12, 0x24, 0x7, 0x7, 0xe01, [0x0, 0x8, 0xfff, 0xfffb, 0x9, 0x6e87]}, @country_functional={0x8, 0x24, 0x7, 0x4, 0x8fb5, [0x9]}, @mdlm_detail={0x42, 0x24, 0x13, 0x2, "cc2589f5bc43980ce92383ea5a41f0de30b7aa6eff70452164dd6bc0996589e28ef68227350fb8123726d47b84a2c31380baad64dbe6eb496830b9f87b73"}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xa0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x0, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0xa2, 0x6}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0xc, 0x6, 0x1, 0xff, 0x6}, 0x3a, &(0x7f0000000280)={0x5, 0xf, 0x3a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x7, 0x40}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc6, 0x2, 0x0, 0xd, 0xb}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x0, 0xa7, 0xa1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x3, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x8, 0x5, 0xf7e}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0xa, 0x6}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x409}}, {0xf8, &(0x7f0000000380)=ANY=[@ANYBLOB="f80379dab2cdf2cc2da871799c2e19ca3d4d112386522b8db6745223cc82291991e70c9049e763469bd2c9d9644fde5fb2597350154486f4a0a2ca1b20541010f1ad68401d9dc8a967c97a90ac895f43c621b7c1835bb780be8ee1b3b6058e869f175a557f21b5b774c24c30bf7147b7d188a508e7a23e8fce6fbf185308a6ec3f1404536d4ebf276cec3f69205c59581571e95127a5b87c8316014351d37aafc8e1e92cfbd88eddce029f21784cd96b3bf5ab6cffffffff7bf20826c9cf15b10d6297f33570b3ae88a58b40be734080418e07f02a4ea59f6d96c0fb19220ce9fd06d1323c157de84b6baf93b5804969fd4a5fceaae9ff37"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xc0a}}]})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000540)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x8}]})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'hsr0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000f80)={r5, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x300, 0x4b, 0x4a, 0x4d, 0x8, 0x13d8, 0x11, 0xa573, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x0, 0x0, "", [{{0x9, 0x4, 0xe5, 0x7f, 0x0, 0x4, 0x64, 0x98, 0xc}}]}}]}}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x44}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000980)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="201132ae00040088109232540892b140004c06245aac26a712583766a3872f8df477d355f879a05bc10e2da001fe3c051f0d54a49721eb7f6bf231445dce35e67bd675d46fdb0ae40a85d2ec69616dc949e1bd374648adf4da046f5004812bfdd16dea18955926740b"], &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}, &(0x7f00000008c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x7, 0x2, 0x3}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x0, 0x9, "2b816933", 'G>t~'}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x3, 0x0, 0x9, 0xff7f}}}, &(0x7f0000000e80)={0x84, &(0x7f00000009c0)={0x40, 0xd, 0xe3, "fb16e468954959c62f58368f3862bb541678429dc8bedb8ffe262606f45a2254ebc5728446dc280d7c832b8fc662e97aa9fa663ca4d77f28383261092e12174c37caa5ce744b1419550ce4491cc42a9dbf8540f75679ac960f1e105bb6dd974bec655a1ec023118a77a6601705309fac291c0791d7fd7920d6bfec1664e750d730b08524ebd396a054f4d635bcc97748b29ac52036d038877be359c055244ce239d709ad1371b38008bb2e86fcf4117d01e60fccb39ddcb6e22efdce90ce334e6602fad2d49a7982dd321500c856ef0b59c43590076c98f9f0294c647245347d898257"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x54}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x80, 0x80}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x58}, &(0x7f0000000c40)={0x40, 0xb, 0x2, 'w\r'}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "d2ec"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x85}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0xfa}})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000001300000000000000000000181100002bacc41a248f3e759da797ccc911c6eeda0efc24761c482f428e12647e6685ce63f66ab98263b25e2bb14e4e1b259d1e9b7e4d1447e6f9c8a4eab6ac4cdf541c1578a1e5007ecf6aa5d998b54115ced5bfcdfe71"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000001080)={0x2, 0x0, @ioapic={0xfec00000, 0x1, 0x10000401, 0x7fffffff, 0x0, [{0x7, 0xac, 0x3, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0xb, 0x80, 0x0, '\x00', 0x6}, {0x0, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x1, 0x3, '\x00', 0x9}, {0x40, 0x6, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x7e}, {0x6, 0xb, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x4}, {0x8, 0x2, 0xf6, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0xa, 0x0, 0xfa, '\x00', 0x5}, {0x5, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x21, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7b}, {0x16, 0x83, 0x4, '\x00', 0xff}]}})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

10m2.989076527s ago: executing program 0 (id=12248):
syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18ffbf00068a000000000000bfffffff1801000020696c2500000000002020207b1ad8ff000000007ba1000000000000040100000400ffffb70200000800ff80b703000002000000850000002e00000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0xfef, &(0x7f0000000640)=""/4079, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)

10m2.755792326s ago: executing program 8 (id=12249):
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000800)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000840)={0x3ff, 0x0, 0x8, 0x4, 0x4, 0x0, 0x7fffffff, 0xa000000}, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000940)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000b00)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000b80)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000bc0)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000c80)="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", 0xcb3}], 0x5, &(0x7f0000001940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)

10m2.231542508s ago: executing program 0 (id=12252):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x803, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010001fff000000009cc7000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r8, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r5)
getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={<r10=>0xffffffffffffffff})
setsockopt$TIPC_MCAST_REPLICAST(r10, 0x10f, 0x86)
gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0x35}, 0x48)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000001080)=r13, 0x4)
write$cgroup_subtree(r12, &(0x7f00000010c0)=ANY=[], 0x9)
semtimedop(0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
timer_delete(0x0)
sendmsg$inet(r4, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x2b, &(0x7f0000000700), &(0x7f0000000740)=0x4)

10m1.677398624s ago: executing program 8 (id=12253):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x204a9, 0x4c801}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x3}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xb}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x2d1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008046}, 0x2004c804)

10m1.490429712s ago: executing program 8 (id=12255):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xfffffe0000000001, 0x1, 0xffffffff}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000500)={0x1, 0x2, {<r0=>0xffffffffffffffff}, {}, 0x9})
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000540))
syz_clone(0x20000, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r1, 0x0, r1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000005c0)={0xe0002004})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000600)={0x10000014})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x11, r4, 0xbe01)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
r5 = syz_open_dev$I2C(&(0x7f00000006c0), 0x1, 0x2603)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000700)={&(0x7f0000000740)=[{0x1e, 0x8801, 0x0, 0x0}, {0xfe01, 0x0, 0x0, 0x0}], 0x2})
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0xe8, 0x80000)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000003010103000000000000000082000008f0963dbbdf2a37684a08a1f0ffffffe5000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880)
openat$random(0xffffffffffffff9c, &(0x7f00000009c0), 0x20000, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff8d)
r6 = syz_open_dev$dvb_frontend(&(0x7f0000000a00), 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000a40)={0x1c40aa80, 0x0, @ofdm={0x0, 0x0, 0x0, 0x2}})
r7 = syz_open_dev$dvb_demux(&(0x7f0000000a80), 0x0, 0x2)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000ac0)={0x0, {}, 0x0, 0x4})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee5, 0x8031, 0xffffffffffffffff, 0x1ab55000)

10m1.325130854s ago: executing program 4 (id=12257):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000540)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000580)=0x2, 0x4)
connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm, @mss={0x2, 0xb}, @mss, @window={0x3, 0x6, 0xff81}, @timestamp, @timestamp, @sack_perm, @window={0x3, 0x8000, 0x5}], 0x8)
sendto$inet(r0, &(0x7f0000000640)="b8", 0x1, 0x2400a044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000680), 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'})
syz_io_uring_setup(0xec4, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0))
sendto$inet(r0, &(0x7f00000006c0)='x', 0x1, 0x480c1, 0x0, 0x0)

10m1.163511172s ago: executing program 0 (id=12258):
ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
syz_usb_connect(0x6, 0x36, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000180)=0x4, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}, 0x1000000}], 0x300, 0xf1c)
sendmsg$nl_route(r0, 0x0, 0x0)

10m1.058849374s ago: executing program 4 (id=12260):
syz_open_dev$vim2m(&(0x7f0000000100), 0x400003, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x83, 0x20000a2e, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}}) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x83, 0x20000a2e, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}})
syz_open_dev$dvb_frontend(&(0x7f0000000400), 0x0, 0x20000) (async)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000400), 0x0, 0x20000)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000440)={0x4, 0x0}) (async)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000440)={0x4, 0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)) (async)
r1 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f00000005c0)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000700), 0x318, 0x0) (async)
sendmmsg$unix(r5, &(0x7f0000000700), 0x318, 0x0)
recvmmsg(r4, &(0x7f0000000740), 0x10106, 0x2, 0x0)
r6 = syz_ublk_setup_io_uring(0x1a3b, &(0x7f0000000780)={0x0, 0xbe8, 0x400, 0x7, 0x2af, 0x0, r1}, &(0x7f0000000800), &(0x7f0000000840), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000880)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000880)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f00000008c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@new_dev={0x2, 0x3ce, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x81}}}, 0x0) (async)
syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f00000008c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@new_dev={0x2, 0x3ce, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x81}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000a40)={0x29, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22, 0x3, 'wlc\x00', 0x6e, 0x9, 0x28}, 0x2c)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
migrate_pages(0x0, 0x5, &(0x7f0000000a80)=0x5, &(0x7f0000000ac0)=0x272)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x20004800)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

10m0.830923937s ago: executing program 9 (id=12261):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xa, &(0x7f0000000040)=0x100, 0x4)

9m58.452983854s ago: executing program 4 (id=12264):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x1, 0x8, 0x3, 0xfd7c}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback={0x100000}, 0x280020}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)

9m58.167186454s ago: executing program 4 (id=12265):
r0 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x10, 0x700, 0x0, 0x10000200, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x60, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @local, {[@lsrr={0x83, 0x7, 0xab, [@empty]}, @end, @generic={0x94, 0x12, "0000000007ffffdd495c9eb0844771dc"}]}}}}})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/image_size', 0x20000, 0x38)
lseek(r2, 0x0, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf256a00000008000300", @ANYRES32=r5, @ANYBLOB="e3b16464866891ea2bd6244bfb260811baa076adf004bdb617ed245d75cb00c4e06440e2eabcabcae7db0462e4b25d81a44d024722ce3a906a2202f7eedf0122364a0aa1edddb934aa24d6e5ae70e1544377560f4e3e6da3ac83f0bab8a3a707288bdce3d4d1b96c6b3b9a61d4bfd19f55a9fe0db212f1fe2410d23cf3cde24fd54f3f640430bef2d45efbcd4ff3ff3cb2a51830735fba21cf6756226fc7470f61d96f1dfde43be9f3d5755e404ef163acff3d5e04d79b7da13cd465cec5f46e0d947826fe49a6e010"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000010)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, r4, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040}, 0x4000)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x7f00, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={<r7=>0x2, 0x7ff}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r0, 0x84, 0x81, &(0x7f0000000080)={r7, 0x2}, 0x8)

9m57.914677461s ago: executing program 9 (id=12266):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a40)=ANY=[@ANYBLOB="7c01000019000100ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000200202008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x60004004}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = creat(&(0x7f0000000f00)='./file0\x00', 0xecf86c37d53049cc)
close(r2)
sendmsg$nl_route(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="6c0000004300000826bd7000fedbdf2502000000080004010100008008000200090000001800068008000b00fbffffff0c000700010000000000000008000200050000000800040001000000150001002f6465762f76686f73742d76736f636b000000000800030009000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4040)
syz_usb_connect(0x6, 0x950, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e80)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x110, 0x5, 0x7, 0x1, 0x10, 0xd6}, 0x37, &(0x7f0000000c80)=ANY=[@ANYBLOB="050f3734576e9320c000040710020079000003100b1410049b38aaf7153d12f7bbc28ce4363e00e821141004070fcd3c65e0d61a193a4f"], 0x5, [{0xa5, &(0x7f0000000cc0)=@string={0xa5, 0x3, "edfa94c769e07633df93959766120004eb0fbd97b3e99d2662b7efe3390389c761309e56639892e8f46bd9e7c0a42172d8c24482d32dd22348410cb8c2aaf1f57bfb8e2b1a0e6c21041ccbdbfc8fc0461bcfebbc4aa7116b862c300a4b2e4b03aa4a15d1fb6775690272cc1d422ef5da09884f766053be96a6c15b62e404d6247eda3724990ed2a42b41048990a0a33093eacf6dec195fa0cb1999a5e701b5be4c9073"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x2812}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x3801}}]})
dup(r1)
r3 = semget$private(0x0, 0x4000, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000001080))
syz_open_dev$vbi(&(0x7f00000010c0), 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000001100)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000011c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4)
sched_setattr(0x0, &(0x7f0000001200)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0x3ff, 0xffffffc0, 0xc3d}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000001240)=""/215)
sendmsg$sock(r4, &(0x7f0000001340)={&(0x7f0000001380)=@qipcrtr, 0x80, &(0x7f0000001400), 0x0, &(0x7f0000001440), 0xfffffd2e}, 0x40000)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001480)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x110, 0x2c8, 0xfeffffff, 0x2c8, 0x2c8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7, 0x1}}, @common=@inet=@multiport={{0x50}, {0x1, 0x7, [0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4f24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e1f], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x0, 0x0, 0x0, 0x3]}}}, @common=@ttl={{0x28}, {0x3, 0xb}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @gre_key=0x9}}}}, {{@ip={@local, @remote, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000001900)=ANY=[])
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000001980)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000001a00)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9})

9m57.896809968s ago: executing program 8 (id=12267):
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
syz_clone3(&(0x7f0000000000)={0x61024000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r1, 0x21, 0x0, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r3, 0xb01, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x8000)
listen(r2, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x4}, 0x8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[], 0x8)

9m57.357466124s ago: executing program 0 (id=12268):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000140000190000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x0)

9m57.240012495s ago: executing program 0 (id=12269):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000004c0)=0x401, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x3, 0x390, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000005f00000086dd76657468315f746f5f62617461647600687372300000000000000000000000006c6f000000000000000000000000000073797a6b616c6c65723000000000000000000000000000000000ff000180c200000200000000ff000000e8000000e8000000300100006970360000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000001fc0200000000000000000000000000015ebae0f300000000ff000000ffffff00ff00000080000080ffffffff000000ff0962e84a4e224e234e214e23000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000f90400000000000004000000000000000500000005000000001a6c6f000000000000000000000000000074756e6c3000000000000000000000006970766c616e3000000000000000000076657468305f746f5f7465616d000000000000000000ffff0000ffffbbbbbbbbbbbb000000ff00ff00007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000fcffffff010000000500000036000000600670696d7265670000000000000000000064766d7270300000000000000000000076657468315f746f5f6261746164760073697430000000000000000000000000000000000000ff000000ff00ffffffffffffff00000000ff000000010000000100003001000068656c70657200000000000000000000000000000000000000000000000000002800000000000000000000006972632d3230303030000000000000000000000000000000000000000000000000000000636f6e6e627974657300000000000000000000efffffffffffffff000000000018000000000000000000000000000000351b00000000000002020000000000004e4651554555450000000000000000000000000000000000000000000000000008000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000ffffffff00000000"]}, 0x408)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xa, &(0x7f0000000040)=0x100, 0x4)

9m56.953039789s ago: executing program 9 (id=12270):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000540)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000580)=0x2, 0x4)
connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm, @mss={0x2, 0xb}, @mss, @window={0x3, 0x6, 0xff81}, @timestamp, @timestamp, @sack_perm, @window={0x3, 0x8000, 0x5}], 0x8)
sendto$inet(r0, &(0x7f0000000640)="b8", 0x1, 0x2400a044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000680), 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
sendto$inet(r0, &(0x7f00000006c0)='x', 0x1, 0x480c1, 0x0, 0x0)

9m44.902499779s ago: executing program 39 (id=12263):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
lseek(r1, 0x3ff, 0x4)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x25dfdbfe}, 0x14}}, 0x10000000)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@deltfilter={0x0, 0x2d, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x6, 0xfff1}, {0x7, 0xd}, {0xb, 0x7}}, [@filter_kind_options=@f_bpf={{}, {0x0, 0x2, [@TCA_BPF_POLICE={0x0, 0x2, [@TCA_POLICE_RESULT={0x0, 0x5, 0x5}, @TCA_POLICE_TBF={0x0, 0x1, {0xc, 0xffffffffeffffffe, 0x2, 0xffffffff, 0x1ff, {0x8, 0x0, 0x2, 0x2, 0x1, 0x8001}, {0x0, 0x2431911ec41563fa, 0x3, 0xff, 0x6, 0x9}, 0xed, 0x1, 0x2}}, @TCA_POLICE_RESULT={0x0, 0x5, 0x81}]}, @TCA_BPF_OPS={{}, {0x0, 0x5, [{0x0, 0x9, 0x76, 0x2cb}, {0xcae4, 0x6, 0xfa, 0x1}]}}]}}, @filter_kind_options=@f_u32={{0xfffffffffffffde9}, {0x0, 0x2, [@TCA_U32_INDEV={0x0, 0x8, 'syzkaller1\x00'}, @TCA_U32_CLASSID={0x0, 0x1, {0xa, 0xfff3}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x24040894}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r8 = io_uring_setup(0x14cf, &(0x7f00000005c0)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0x3, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1600100004"], 0x50)
sendmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x2d, &(0x7f0000000800)=[{&(0x7f0000000840)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
syz_emit_ethernet(0xb4, &(0x7f0000000880)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x7e, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x22, 0x1, "683059d2c59b"}, {0x18, 0xb, "3abf189b34d9214399949fde8ff461f19a81868b6dff77cc5ea8ef0a54f64fb6a28c1faef2875f53a6d7bfcfb735276728f030f53a0a4311faafed9f1a8145a47a27511e17bc610d2f7bc4a497f4fe68e6d7089e9dc036a5af3640cd"}]}}}}}}, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4)

9m42.857147243s ago: executing program 40 (id=12265):
r0 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x10, 0x700, 0x0, 0x10000200, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x60, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @local, {[@lsrr={0x83, 0x7, 0xab, [@empty]}, @end, @generic={0x94, 0x12, "0000000007ffffdd495c9eb0844771dc"}]}}}}})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/image_size', 0x20000, 0x38)
lseek(r2, 0x0, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf256a00000008000300", @ANYRES32=r5, @ANYBLOB="e3b16464866891ea2bd6244bfb260811baa076adf004bdb617ed245d75cb00c4e06440e2eabcabcae7db0462e4b25d81a44d024722ce3a906a2202f7eedf0122364a0aa1edddb934aa24d6e5ae70e1544377560f4e3e6da3ac83f0bab8a3a707288bdce3d4d1b96c6b3b9a61d4bfd19f55a9fe0db212f1fe2410d23cf3cde24fd54f3f640430bef2d45efbcd4ff3ff3cb2a51830735fba21cf6756226fc7470f61d96f1dfde43be9f3d5755e404ef163acff3d5e04d79b7da13cd465cec5f46e0d947826fe49a6e010"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000010)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, r4, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040}, 0x4000)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x7f00, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={<r7=>0x2, 0x7ff}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r0, 0x84, 0x81, &(0x7f0000000080)={r7, 0x2}, 0x8)

9m42.38563287s ago: executing program 41 (id=12267):
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
syz_clone3(&(0x7f0000000000)={0x61024000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r1, 0x21, 0x0, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r3, 0xb01, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x8000)
listen(r2, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x4}, 0x8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[], 0x8)

9m41.310166406s ago: executing program 42 (id=12269):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000004c0)=0x401, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x3, 0x390, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x408)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xa, &(0x7f0000000040)=0x100, 0x4)

9m41.195789502s ago: executing program 43 (id=12270):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000540)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000580)=0x2, 0x4)
connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm, @mss={0x2, 0xb}, @mss, @window={0x3, 0x6, 0xff81}, @timestamp, @timestamp, @sack_perm, @window={0x3, 0x8000, 0x5}], 0x8)
sendto$inet(r0, &(0x7f0000000640)="b8", 0x1, 0x2400a044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000680), 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
sendto$inet(r0, &(0x7f00000006c0)='x', 0x1, 0x480c1, 0x0, 0x0)

2m40.597081183s ago: executing program 5 (id=13718):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xfffffffe, 0x12c}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x800, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {0x2000}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x3d})
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000300)=""/54, &(0x7f0000000340)=0x36)

2m39.019719586s ago: executing program 5 (id=13725):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x100}) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, &(0x7f0000000140)) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x104}}, 0x0)

2m37.268113852s ago: executing program 5 (id=13734):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300))
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpu.stat\x00', 0x275a, 0x0)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101c00, 0x0)
ftruncate(r0, 0x46)
set_mempolicy(0x4005, &(0x7f0000000640)=0x7e, 0x6)
setsockopt(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000680), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x7c, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600110000000a600e41b0000900ac00060411000000040012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
syz_open_dev$vim2m(&(0x7f00000006c0), 0x5, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xc6100, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000280)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090c, 0x7fffffff, '\x00', @value64=0x10000000000000}})
ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000200)={0x1, 0x0, [{0x80000008, 0xd4, 0x1, 0x2, 0x1, 0x0, 0xffff}]})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/resume', 0xa82, 0x0)
add_key(&(0x7f0000000340)='rxrpc\x00', 0x0, &(0x7f0000000380)="00000000000000400c69000000000401000000c000000006039200001f744b8a", 0x20, 0xffffffffffffffff)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000980), 0x2, 0x143102)
writev(r3, &(0x7f00000009c0)=[{&(0x7f0000000a00)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

2m34.215728367s ago: executing program 5 (id=13752):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e9320", 0x17d}, {&(0x7f0000000680)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4)
writev(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb9df7231e2e643ecb223f032a1ae299327d7156236f0edc44c4c268168596acd7c225338921f9e7b97e55fd594eaa95067216139cad3915f76f9cf17d61", 0xb2}, {&(0x7f0000000880)="135c15194fad5248c52ac1fc08d8399a", 0x10}], 0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x482, 0x0)
write$binfmt_aout(r1, &(0x7f00000008c0)=ANY=[], 0xff2e)
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000940)={0x80000001})
ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f0000000980))
syz_clone3(&(0x7f0000000a00)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write(r0, &(0x7f0000000000)="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", 0x2bd)

2m31.961601032s ago: executing program 5 (id=13760):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000001900)={0xa, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="020300020f000000000000000000200003000600000000000200000000000000000000000000000002000100000000000000090000000040030005"], 0x78}, 0x1, 0x7}, 0x0)

2m31.888157373s ago: executing program 5 (id=13761):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r1, 0x0, 0x0, 0x80000000000000)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000192c0)={&(0x7f0000019300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000019340)={&(0x7f0000019380)={0x24, 0x0, 0x27d24e37c6fca91e, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3a}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x8050)
sendmsg$nl_route(r0, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019400)={&(0x7f0000019440)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fcdbdf250a808000a6"], 0x1c}}, 0x20000050)
syz_usb_connect(0x0, 0x62, &(0x7f0000019480)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000019500)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00002ec000/0x4000)=nil, 0x0}, 0x68)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={&(0x7f0000019600)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000019640)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB="280000001000010025bd619cf9dbdf2500050000", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
ptrace$cont(0x9, 0x0, 0xfc7, 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019700)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000019900)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
mount$fuse(0x0, &(0x7f0000019940)='./file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000019980)='\x00', 0x89901)
open_tree(0xffffffffffffff9c, &(0x7f00000199c0)='./file0\x00', 0x81101)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000019740)=0x9, 0x8, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000019800)='./file0\x00', &(0x7f0000019a00), 0x800)
timer_create(0x0, &(0x7f0000019780)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000197c0))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ppoll(&(0x7f0000019840)=[{r1}, {r1, 0x80}, {0xffffffffffffffff, 0x9}, {r1, 0x2441}, {r3, 0x80}], 0x5, &(0x7f0000019880)={0x77359400}, &(0x7f00000198c0)={[0x8]}, 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0)

2m16.718037905s ago: executing program 44 (id=13761):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r1, 0x0, 0x0, 0x80000000000000)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000192c0)={&(0x7f0000019300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000019340)={&(0x7f0000019380)={0x24, 0x0, 0x27d24e37c6fca91e, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3a}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x8050)
sendmsg$nl_route(r0, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019400)={&(0x7f0000019440)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fcdbdf250a808000a6"], 0x1c}}, 0x20000050)
syz_usb_connect(0x0, 0x62, &(0x7f0000019480)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000019500)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00002ec000/0x4000)=nil, 0x0}, 0x68)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={&(0x7f0000019600)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000019640)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB="280000001000010025bd619cf9dbdf2500050000", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
ptrace$cont(0x9, 0x0, 0xfc7, 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019700)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000019900)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
mount$fuse(0x0, &(0x7f0000019940)='./file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000019980)='\x00', 0x89901)
open_tree(0xffffffffffffff9c, &(0x7f00000199c0)='./file0\x00', 0x81101)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000019740)=0x9, 0x8, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000019800)='./file0\x00', &(0x7f0000019a00), 0x800)
timer_create(0x0, &(0x7f0000019780)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000197c0))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ppoll(&(0x7f0000019840)=[{r1}, {r1, 0x80}, {0xffffffffffffffff, 0x9}, {r1, 0x2441}, {r3, 0x80}], 0x5, &(0x7f0000019880)={0x77359400}, &(0x7f00000198c0)={[0x8]}, 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0)

11.222734387s ago: executing program 2 (id=14305):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xfffffe0000000001, 0x1, 0xffffffff}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000500)={0x1, 0x2, {<r0=>0xffffffffffffffff}, {}, 0x9})
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000540))
syz_clone(0x20000, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r1, 0x0, r1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000005c0)={0xe0002004})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000600)={0x10000014})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x11, r4, 0xf000000000000000)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
r5 = syz_open_dev$I2C(&(0x7f00000006c0), 0x1, 0x2603)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000700)={&(0x7f0000000740)=[{0x1e, 0x8801, 0x0, 0x0}, {0xfe01, 0x0, 0x0, 0x0}], 0x2})
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0xe8, 0x80000)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000003010103000000000000000082000008f0963dbbdf2a37684a08a1f0ffffffe5000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880)
openat$random(0xffffffffffffff9c, &(0x7f00000009c0), 0x20000, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff8d)
r6 = syz_open_dev$dvb_frontend(&(0x7f0000000a00), 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000a40)={0x1c40aa80, 0x0, @ofdm={0x0, 0x0, 0x0, 0x2}})
r7 = syz_open_dev$dvb_demux(&(0x7f0000000a80), 0x0, 0x2)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000ac0)={0x0, {}, 0x0, 0x4})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee5, 0x8031, 0xffffffffffffffff, 0x1ab55000)

9.204867755s ago: executing program 1 (id=14308):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x200030b8, 0x0, 0x2, 0x30f}, &(0x7f0000000000), 0x0, &(0x7f0000000140))
r1 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000780))
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x91, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0xc4}}, 0x4c050)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000480)={0x3, 0x1}, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0xfff}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800)
pselect6(0x40, &(0x7f0000000700)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
sendmmsg$inet6(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000480), 0x171}}], 0x400000000000172, 0x4001c00)
r6 = socket$inet(0x2, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000980)={'syz_tun\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000009c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000001f00)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001f40)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB="3c0000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000580)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae0000016800400002200e2f90000000101000001ef0101010a000001", @ANYBLOB="6d7f0a33606d365adf31e5c7c2f26d3e9975d275152799d68cab770971bc1f65d40cd373d72468ea9f47e791849afa8692edfaca8e59f8a4b4fedbe213a418870a474281b0a54621a1f24aa33e9d3705e91fc73b876b02cdd190d668053d625bc64406c88ef2f37462153786d755aaac5dce", @ANYBLOB="1d4e53266617cbe9fa879270f4a355b0a23c739225f38661772bce30051369fb2b9c332ad40e98170f6b0a5efd9c687ce83ef9c22367b5e75e103a8bdb4fc1e0f29988fc8e390a718b28f36d6c13730aca76298f6192e7424dc471edde9705"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

9.105771573s ago: executing program 3 (id=14310):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$I2C(0x0, 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000140)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000001c0), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000240)={0x3, 0x4, 0x1, 0x0, 0xf})
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000380)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x5b)
read$watch_queue(r7, &(0x7f00000003c0)=""/1, 0x1)
keyctl$revoke(0x3, r6)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_io_uring_setup(0x2d9, 0x0, 0x0, 0x0, &(0x7f0000000480))
r10 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0)
syz_usb_control_io$printer(r10, 0x0, 0x0)
r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev2(r11, &(0x7f0000000500)=[{&(0x7f0000000540)}], 0x1, 0xfffff, 0x0, 0x0)
ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x4108}, {r5, 0x4004}, {r2, 0x4000}, {0xffffffffffffffff, 0x200}], 0x5, 0x0, 0x0, 0x0)
r12 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r12, 0xc02c564a, &(0x7f0000000600)={0x81, 0x3234564e, 0x1, @discrete={0xfffffff8, 0x7e}})
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, 0x0, 0x0)
close_range(r9, r3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

8.044384206s ago: executing program 1 (id=14316):
r0 = io_uring_setup(0x1006557, &(0x7f0000000700)={0x0, 0xcb71, 0x200, 0x0, 0x8e})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x2000007, 0x4010, r0, 0x0)
unshare(0x20040400)
unshare(0x4000000)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_usb_connect(0x0, 0x45, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000000080))
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x88002, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x1)
io_uring_enter(r0, 0x7040, 0x1598b, 0x40, &(0x7f00000001c0)={[0x3]}, 0xfffffffffffffd04)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x32, &(0x7f00000000c0), 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000040)=0xdea, 0x4)
r6 = open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0xc0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r8=>0x0})
r9 = syz_io_uring_setup(0xf04, &(0x7f00000004c0)={0x0, 0x595f, 0x80, 0x0, 0x10000051}, &(0x7f0000000540)=<r10=>0x0, &(0x7f0000000580)=<r11=>0x0, &(0x7f0000000640)=<r12=>0x0)
syz_io_uring_submit(r10, r11, r12, &(0x7f0000000680)=@IORING_OP_FILES_UPDATE={0x14, 0x8, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r9, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x4b0, 0x5, 0x4})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000005c0)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1})
sendfile(r3, r6, 0x0, 0x1000000201002)

7.257353935s ago: executing program 2 (id=14318):
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x503942, 0x70)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0x9}, 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x6, 0x8, 0x3, 0x0, 0x800009, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r1, r1, 0x0, 0x20000005)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x42, 0x3}}]}}}]}, 0x40}}, 0x8080)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x4a000000)
r2 = syz_open_procfs(0x0, 0x0)
fsmount(r2, 0x1, 0x2)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x101000)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1000004, 0xfffffffd, 0x49, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000004c0)=0xf1ff)
openat$nullb(0xffffffffffffff9c, 0x0, 0x40441, 0x0)
sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x2040400)
symlink(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file0\x00')
name_to_handle_at(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x3, 0x7, "81850cfdd65e9f6fee9f011d77c94c1f"}}}, &(0x7f0000000640), 0x6f2)

7.20858553s ago: executing program 6 (id=14319):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000001380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={0x0}}, 0x80)

7.141349991s ago: executing program 6 (id=14320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x1, 0x168, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000001c0], 0x700, 0x0, &(0x7f00000008c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x1, 0xeeb263aa66f41dcc, 'syz_tun\x00', 'dummy0\x00', 'nr0\x00', 'wlan0\x00', @multicast, [0xff, 0x0, 0x0, 0x0, 0xff], @random="a68146ce6ba5", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0xa0, 0xd8, [], [@common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffe}}}}]}]}, 0x1e0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3dde, 0x100, 0x1, 0x227}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9206, 0x40, 0x2, 0x307}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a86, 0x100, 0x0, 0xa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe72, 0x1, 0x2, 0x8000304}}], 0x4, &(0x7f00000020c0)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x0, 0x736, 0x0, &(0x7f00000010c0)=@buf_4k="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"}}, 0x0)
pipe(0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x0, 0x48)
r3 = socket(0xa, 0x5, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4)
sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000480)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000500)="a6", 0x1}], 0x1, &(0x7f0000000580)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}], 0x18, 0x4855}, 0x24000052)
accept4$vsock_stream(r3, &(0x7f00000005c0)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101000, 0x63)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r4, r4, 0x0, 0x20000005)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0)

6.713388663s ago: executing program 1 (id=14321):
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x50183, 0x18e)
ftruncate(r0, 0x200002)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x6800, 0xa0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000016, 0x12, r1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="8b4f0f38d8f27d85", @ANYRES64=r0], 0x8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x102100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0x40000072, 0x0, 0x4}]})
write(r2, &(0x7f0000000300)="3d4cd0f499b731adba564363029dad0efce2194700e31fb39d1881e93bc5622ff71be0287c7b369a2a3ba57a5a89431d43f02e8af75d8160baf96abd586203e85eb6a489f3e8a9", 0x47)
sendmmsg$sock(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x4, 0x8, 0x0, 0xb49, 0x0, 0x7, 0x8, 0x3}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x103902, 0x0)
pipe2(&(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80000)
splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x6, 0x0)

5.355138678s ago: executing program 3 (id=14322):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000440)={0x8, 0x0, r0}) (async)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000440)={0x8, 0x0, <r1=>r0})
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001000)={<r3=>0x0, 0x10, &(0x7f0000001040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001080)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f00000010c0)={r3, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000001180)=0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000011c0)={0x0, 0x10, &(0x7f0000001200)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001240)=0x10)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000740)={'\x00', 0x0, 0x6, 0x2, 0x3, 0x8, <r4=>0x0})
sendmsg$nl_netfilter(r1, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f00000007c0)={0x298, 0x0, 0x0, 0x801, 0x70bd28, 0x25dfdbfd, {0x3, 0x0, 0x1}, [@nested={0xdb, 0x120, 0x0, 0x1, [@generic="f304a76c2cef7c08d08a8d45e7bb93f127f923d0fb23ea170c880e965f435a59be1cd4b27a1604221b3e915c7f5fe8b9b18e6d57e3b5bc81bc391622e0eab1858f32fed3172a8792a8035deea9e4588494f2c2a8adbf1e4aa110118ee53db042b1595fe5665d8cf2fc1f101ea1362914875973af45efbd0fde33037d4920356d2dff58b243d9ad082b5ef3d0846c69772941ac3ed229d7a68dcb539a63337ddf01e953a6d181ab4c65bf28d2d279812cb1e57e5d662174ee15f7de2dc5cbee3204e79feed923727c55b77e", @typed={0x8, 0x136, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x9e}]}, @nested={0x55, 0x90, 0x0, 0x1, [@typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@local}, @generic="1817c93fe9e80bfe749f7b21cb39c9d7aea76f03a3411efcad1142db887cfc1ba72bdb9b8c3f93c5fe58928dda8a89c5d88fb1dfbb10408f90da2274dd"]}, @typed={0xc, 0x37, 0x0, 0x0, @u64}, @typed={0x14, 0x14f, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x130, 0x5b, 0x0, 0x1, [@typed={0x51, 0x139, 0x0, 0x0, @binary="f3b693ca527ae3234caf4070da9950e6adec4414ed3deebf7ad51c7f0a088b317bfb24650313fc680a8649f24dbc9c71fbb900c9321dedbedc6ee5455c3b08f51f6e44d4848feeef4b071a6e47"}, @generic="9f9cc2357111214680a0393d2092c43e42e5fb919e089f7911625c0ac18e455b541752c560c7db71344fca8a746f4d3286ac35ccaf96ce0ad1423c31aa65c1dedeb9244401dfa75e050b420d2376fc4028a955a541a7308d8c5d2cfa0851bd950630fd37f2c5f020a810b618b080accdef91f15c3afa077a06cea81a3f25a2cbd480b7d44644d89081f5fbc765d63cc041f07296ea65388e2893c24d1f4cbcac87f037c626b385aa52277f6697d123f455edd6bbab570516a398ae21583b9c9aeb4ee66ca5cbfa6f5fbb7ca96175922af4569e964da5e133"]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20040044}, 0x20040000) (async)
sendmsg$nl_netfilter(r1, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f00000007c0)={0x298, 0x0, 0x0, 0x801, 0x70bd28, 0x25dfdbfd, {0x3, 0x0, 0x1}, [@nested={0xdb, 0x120, 0x0, 0x1, [@generic="f304a76c2cef7c08d08a8d45e7bb93f127f923d0fb23ea170c880e965f435a59be1cd4b27a1604221b3e915c7f5fe8b9b18e6d57e3b5bc81bc391622e0eab1858f32fed3172a8792a8035deea9e4588494f2c2a8adbf1e4aa110118ee53db042b1595fe5665d8cf2fc1f101ea1362914875973af45efbd0fde33037d4920356d2dff58b243d9ad082b5ef3d0846c69772941ac3ed229d7a68dcb539a63337ddf01e953a6d181ab4c65bf28d2d279812cb1e57e5d662174ee15f7de2dc5cbee3204e79feed923727c55b77e", @typed={0x8, 0x136, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x9e}]}, @nested={0x55, 0x90, 0x0, 0x1, [@typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@local}, @generic="1817c93fe9e80bfe749f7b21cb39c9d7aea76f03a3411efcad1142db887cfc1ba72bdb9b8c3f93c5fe58928dda8a89c5d88fb1dfbb10408f90da2274dd"]}, @typed={0xc, 0x37, 0x0, 0x0, @u64}, @typed={0x14, 0x14f, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x130, 0x5b, 0x0, 0x1, [@typed={0x51, 0x139, 0x0, 0x0, @binary="f3b693ca527ae3234caf4070da9950e6adec4414ed3deebf7ad51c7f0a088b317bfb24650313fc680a8649f24dbc9c71fbb900c9321dedbedc6ee5455c3b08f51f6e44d4848feeef4b071a6e47"}, @generic="9f9cc2357111214680a0393d2092c43e42e5fb919e089f7911625c0ac18e455b541752c560c7db71344fca8a746f4d3286ac35ccaf96ce0ad1423c31aa65c1dedeb9244401dfa75e050b420d2376fc4028a955a541a7308d8c5d2cfa0851bd950630fd37f2c5f020a810b618b080accdef91f15c3afa077a06cea81a3f25a2cbd480b7d44644d89081f5fbc765d63cc041f07296ea65388e2893c24d1f4cbcac87f037c626b385aa52277f6697d123f455edd6bbab570516a398ae21583b9c9aeb4ee66ca5cbfa6f5fbb7ca96175922af4569e964da5e133"]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20040044}, 0x20040000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/bus/input/devices\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
r5 = socket$inet6(0xa, 0xa, 0x8)
connect$inet6(r5, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000380)={@private0, 0xe})
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000012ea2a400a0900128724000000010902120001000000000904"], 0x0) (async)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000012ea2a400a0900128724000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r7, &(0x7f00000003c0)={0x14, &(0x7f00000000c0)={0x20, 0x4, 0x24, {0x24, 0xb, "71982ee5cf95c56d207ad95505fce9e5dd79fe848a33b93114f7394722410f4cd3cc"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, &(0x7f00000006c0)={0x34, &(0x7f00000004c0)={0x20, 0xe, 0xb6, "42eb5b1742f42db13261da749f31442163af65175d98a34de864afc17d4e298829fa0fa438f26e59de522971e414a70dfea78bb5aeae081e37b7b351e5ab829ee0ebaaef2f2e200d9dcc6b58b175c9d30164183e0a49829bf31e3c80944f0ea3d34882e660d36f71d10e06261e26533e55ed926ac12c70f32194c3c345e6106bfa0a03029eb1c1a958e199a9b1b9bf0ebd908276ae895c3ecbbcd252928992cfb72408eb8c2c48ae5c04dad303672ebbbaf4cff76b38"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x0, 0x13, {0x11, "1ae0565ad336285f90b8faf683d49fc46a"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x5}}) (async)
syz_usb_control_io$printer(r7, &(0x7f00000003c0)={0x14, &(0x7f00000000c0)={0x20, 0x4, 0x24, {0x24, 0xb, "71982ee5cf95c56d207ad95505fce9e5dd79fe848a33b93114f7394722410f4cd3cc"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, &(0x7f00000006c0)={0x34, &(0x7f00000004c0)={0x20, 0xe, 0xb6, "42eb5b1742f42db13261da749f31442163af65175d98a34de864afc17d4e298829fa0fa438f26e59de522971e414a70dfea78bb5aeae081e37b7b351e5ab829ee0ebaaef2f2e200d9dcc6b58b175c9d30164183e0a49829bf31e3c80944f0ea3d34882e660d36f71d10e06261e26533e55ed926ac12c70f32194c3c345e6106bfa0a03029eb1c1a958e199a9b1b9bf0ebd908276ae895c3ecbbcd252928992cfb72408eb8c2c48ae5c04dad303672ebbbaf4cff76b38"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x0, 0x13, {0x11, "1ae0565ad336285f90b8faf683d49fc46a"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x5}})
r8 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "ee541149861c3a654fa1fee3b0a48108b99fff1269922b5e8384568ff05cfb5b4ddcfe105b313fe272c0832e65b75fd3b31ea7c72b23cb70754d10baa5e7a735", 0x3d}, 0x48, 0xfffffffffffffffd)
r9 = add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @desc3}, &(0x7f0000000c80)={0x0, "a30b5a8521b8c52d15a899be3ab14ee23a35e16b9362242e103ccf03c5f0606ab8599933124fa2b0a1527e021af2d664e8f2ae7f649635e0cbee334a8ddd697c", 0x12}, 0x48, 0xfffffffffffffffe)
r10 = request_key(&(0x7f0000000d00)='id_resolver\x00', &(0x7f0000000d40)={'syz', 0x0}, &(0x7f0000000d80)=')\x00', 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f0000000dc0)={r8, r9, r10}, &(0x7f0000000e00)=""/191, 0xbf, &(0x7f0000000fc0)={&(0x7f0000000ec0)={'md5\x00'}, &(0x7f0000000f00)="49d48db2596e2e282fd11d4a6e8f0b8a65bb183f4f901f936d5d265e3461adfa5837736217ca40d36affeb9645610faa9ce94fa1ef1d446674db17d434e65b1fb99aa077fe7383a1588277669df29e2ff0cd145a257c9ad290a25004b8402367a3d7f197f1608cc2bcc2d310ef5e7316afa9367be2d2683b395048f145f89ec6269c756205c045f0c3321d387df9ab96e5147e3d2e345d2f9e860060243321eaa6e1b1ad8f0ae38a87ad3b93b1bb6d69", 0xb0}) (async)
keyctl$dh_compute(0x17, &(0x7f0000000dc0)={r8, r9, r10}, &(0x7f0000000e00)=""/191, 0xbf, &(0x7f0000000fc0)={&(0x7f0000000ec0)={'md5\x00'}, &(0x7f0000000f00)="49d48db2596e2e282fd11d4a6e8f0b8a65bb183f4f901f936d5d265e3461adfa5837736217ca40d36affeb9645610faa9ce94fa1ef1d446674db17d434e65b1fb99aa077fe7383a1588277669df29e2ff0cd145a257c9ad290a25004b8402367a3d7f197f1608cc2bcc2d310ef5e7316afa9367be2d2683b395048f145f89ec6269c756205c045f0c3321d387df9ab96e5147e3d2e345d2f9e860060243321eaa6e1b1ad8f0ae38a87ad3b93b1bb6d69", 0xb0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2262c341259e88d1}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20040004) (async)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2262c341259e88d1}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20040004)
syz_open_dev$dri(&(0x7f0000000000), 0xb, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000000), 0xb, 0x0)

5.308522173s ago: executing program 6 (id=14323):
syz_clone(0x648c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x5b, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000202020040dd04058000000102030109024900010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f55437072413010001000905830308000800000905810240000000000905020240"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x4000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000d80)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0), 0x0, 0x10, &(0x7f0000000e00), 0xfffffffffffffd00}, 0x48)
r2 = gettid()
timer_create(0x1, &(0x7f0000000280)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f00000002c0))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000300)={0x0, 0x0, 0x10001, 0x5, r2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, r1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r3, &(0x7f0000000f00)=""/55, 0x37)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xc)
r4 = syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, &(0x7f0000000f40))
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119)
r5 = syz_open_dev$hidraw(&(0x7f0000001040), 0x0, 0x14a042)
io_uring_enter(r4, 0x6242, 0xfffffffd, 0xa0, 0x0, 0x0)
read(r5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0x58, &(0x7f0000000e80)}, 0x10)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000500), 0x0)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x400000000000000)
accept$alg(r6, 0x0, 0x0)

4.783263391s ago: executing program 1 (id=14325):
socket$netlink(0x10, 0x3, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
unshare(0x6a040000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x2000001, 0x110, 0xffffffffffffffff, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mlock(&(0x7f0000a51000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000a51000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000a56000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000a51000/0x3000)=nil)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x20, 0x1, 0x7fff)
socket(0x39, 0x2, 0x0)
ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000001c0)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
listen(r3, 0x8)
close_range(r2, 0xffffffffffffffff, 0x0)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)

3.476292643s ago: executing program 3 (id=14327):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
sendto$inet6(r0, &(0x7f0000001280)="60000002000a334058cb331e26ca79f80000000000000000070000000000000000010000010000009415436e462203c09df3d9b05f6c1c93e4157d573aed127bbf0b7c1c5ed2860d429bb1c21fa861b60aeb3d08736e5233f1f8a4c31f8cba1f676b4e55fab2402f5b53380171f38be4a003023c684c8d589b858c5c1f8a4d4ec3998040", 0x84, 0x0, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @loopback, 0xff}, 0x1c)

3.222746944s ago: executing program 3 (id=14328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x2000000}, 0x0)

3.048033426s ago: executing program 2 (id=14329):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x7, 0x80000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x1a}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0)

2.851377817s ago: executing program 3 (id=14331):
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
r1 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000300)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x30}, 0x1, 0x0)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, 0x0, &(0x7f0000000480)='./file0\x00')
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'\x00', <r4=>0x0})
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000100)={@mcast2, r4}, 0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x74, r4, {0x4, 0xa}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24008804)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000001040)={0x9b, {"a2e3ad09ed0d09f91a5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f360768030890e0879b0a72c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffebd}}, 0x1006)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r8, 0x29, 0x39, &(0x7f0000000500)=ANY=[@ANYBLOB="3b07040000080000fe80000000000000000000000000000105"], 0x40)
sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40)

2.640974051s ago: executing program 2 (id=14332):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a80)={0x0, &(0x7f0000000940)=[@nested_create_vm={0x12d, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x100, 0x5}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18}, @code={0xa, 0x4f, {"66baa000ec6746f43e360fc73ff36726f2450f01dfb8010000000f01c10f20e035000400000f22e0c4e1d1e0d9362ef2f727400f57c42e66470f388269d4"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro64=0x2400, 0x1ff, 0x101, 0x3}}, @out_dx={0x6a, 0x28, {0x6146, 0x1, 0x5}}], 0x107})
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) (async)
r2 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="be1c40114d26f4f247484a000000003d47b6b86c2dcc558d647f", 0x1a}, {&(0x7f0000000840)="ac919954b692ec62753398417f05640cd459c1fa67626a6687af74571270bd3683e9f81b49c3a07114e796e89ee88c85379bc1c60081ed1759f747ac7d8217e7591bf521cae172ca9164c613eb569f3097c7ceffdd1eef738b9d544e137bd77301bbf6132320d10879231cb98d5e6b53fa4a5cbdfd9ee514a44823b14bedb7d15af6c56cdd63d416b73db80d7b467771b3233ab205000000ce63169b3b10dc8f5802abd91c10b200000000", 0xab}, {&(0x7f0000000680)="e4b99a90d67c024c34b46d85e5bca9f6adb96aa9102f68a531c8cbf225cbb7535ca4474ca6b37d5d93f1dfa4ac90200892a907e167d17cceedd693bb86fcbff1bcafc7b377aef1c6e2cf42a435875b51ab373779215d4faa5dc41d2935884324fe8eb38ccfd3aaf16f8c77a2967897d8f9351a65168d62cf44c0f35b9c9ee9cd680060baf1b17a442a05cb15acaf7b7a9801ac6f6f101cdd9a8898d1d45d0b094b95e4c34c3c6b3d573f2a6f5573d56aed8a197009bf16994b27b3dc9eff41d06d942ccd49", 0xc5}, {&(0x7f0000000780)="4cb983b9b6732765cc85cfc40604caa48afd40a2c3e8879c36d22c5ec8bd4583aac6a83836c3e9242228ddfede1cf79a9e3a6f51ee8da84e7c695133e70846de4f5224cefcaec3db1f044c96210dfa53e5aa9c87b3526f74be0c6d37e70ab158401d394213a2afa10842cbded7a72458881a04f4664cb8", 0x77}], 0x4, &(0x7f00000003c0)=[@op={0x18}], 0x18, 0x408d0}], 0x1, 0xc0001) (async)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/25, 0x19}, {&(0x7f0000000540)=""/111, 0x6f}], 0x2}, 0x8dff) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, 0x0, &(0x7f0000000d80)) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='8\x00'/20, @ANYRES32=r9, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r9, @ANYBLOB], 0x38}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100039040000000000000040000003e4", @ANYRES32=r9, @ANYBLOB="000000000000000018001280080001fd726974000c0002800800140007000000373c541e00d7c6ef7a595f1bb937105b561d91cb3155d7bd1bc61d72ee4a16d50a843e6168bf8be4ae13ece2091a94dfebd2d451f49157b22e1a9287a8b5d7ebeb35bf1c29582ea129c1e487"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x200080d0)

2.591496353s ago: executing program 1 (id=14333):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1000"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000560000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2.293491308s ago: executing program 1 (id=14335):
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x50183, 0x18e)
ftruncate(r0, 0x200002)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x6800, 0xa0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000016, 0x12, r1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="8b4f0f38d8f27d85", @ANYRES64=r0], 0x8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x102100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0x40000072, 0x0, 0x4}]})
write(r2, &(0x7f0000000300)="3d4cd0f499b731adba564363029dad0efce2194700e31fb39d1881e93bc5622ff71be0287c7b369a2a3ba57a5a89431d43f02e8af75d8160baf96abd586203e85eb6a489f3e8a9", 0x47)
sendmmsg$sock(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x4, 0x8, 0x0, 0xb49, 0x0, 0x7, 0x8, 0x3}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe2(&(0x7f0000000480)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80000)
splice(r6, 0x0, r7, 0x0, 0x6, 0x0)

2.044136207s ago: executing program 2 (id=14336):
r0 = syz_open_dev$cec(&(0x7f0000000580), 0x0, 0x80)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000640)={"bd4568df", 0x8003, 0x5, 0x4, 0x100, 0x803, "000000ffff0600fdff090000000800", '\x00', "05030400", '\x00', ["00fbff010000c1f48100", "6cb8fffffd00", "f0ffffffffebffff00000010"]})
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0xffe000000000000, 0x692a42)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/resume', 0x149a82, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0x1)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000440)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0)
openat$full(0xffffff9c, &(0x7f00000004c0), 0x248200, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000700)=""/67, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000000780)=0x8, 0x4)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000007c0)={0x1, 0x1, &(0x7f0000000ec0)=""/247, &(0x7f0000000fc0)=""/87, &(0x7f0000001040)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000010c0)={0x1, 0x0, [{0x0, 0xf3, &(0x7f0000001100)=""/243}]})
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000001200)={0x1, r4})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000001240)=0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001280)={'team0\x00', <r6=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)

1.690946263s ago: executing program 2 (id=14337):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000001380), 0xffffffffffffffff)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000004c0)=0x10000b, 0x4)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20044800}, 0x8001)
sendmmsg$alg(r2, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000640)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000006c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f00000007c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800)
recvmsg(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/81, 0x7ffff000}, {&(0x7f0000000900)=""/83, 0x20000253}], 0x2}, 0x0)
recvmsg$can_raw(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/196, 0xc4}], 0x1}, 0x10040)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, 0x0)
r6 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x800)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980001, 0x0, '\x00', @string=0x0}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050125bd7000fbdbdf251c00002700"/24], 0x2c}}, 0x40006)
r10 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r10, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f5, 0x100, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000015}, 0x40800)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x80)

1.630465271s ago: executing program 3 (id=14338):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="40000000310009002abd700000600000040000002c0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

1.475160982s ago: executing program 6 (id=14339):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x108843, 0x98)
fsopen(&(0x7f0000000280)='bpf\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x10103c, 0x140)
syz_open_dev$radio(&(0x7f0000000440), 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000540)={0x0, 0x30b5, 0x80, 0x0, 0x158}, &(0x7f00000005c0)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0, &(0x7f0000000640)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000680)={0x2e, 0x5e, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000740)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10000001, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x40000, 0x2, 0x2100ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5008, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x3e3}}], 0x1, &(0x7f0000000a80)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) (fail_nth: 3)
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000100)=ANY=[], 0xfc}}, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x300000f, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$usbmon(&(0x7f0000000380), 0x10, 0x101000)
syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="fffffff89e3b35ffffff0180c200000e86dd6000000800283afffe8000000000000000000000000000aaff0000000000002000000000018700907800000000ff02000000000000000000000000000187"], 0x0)
r10 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
socket(0x10, 0x803, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000200)={"2370491d", 0x0, 0xd, 0x2, 0x101, 0x0, "000064640000001503fe00", '\x00', "0f00", "00000002", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000001b40), 0x50400, 0x0)
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r8}, './file0\x00'})
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x2d)

1.176966807s ago: executing program 7 (id=14340):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x200030b8, 0x0, 0x2, 0x30f}, &(0x7f0000000000), 0x0, &(0x7f0000000140))
r1 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000780))
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x91, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0xc4}}, 0x4c050)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000480)={0x3, 0x1}, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0xfff}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800)
pselect6(0x40, &(0x7f0000000700)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5, 0xfffffffffffffffe}, &(0x7f0000000740)={0x1c, 0x26d7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x9}, 0x0, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
sendmmsg$inet6(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000480), 0x171}}], 0x400000000000172, 0x4001c00)
r6 = socket$inet(0x2, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000980)={'syz_tun\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000009c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000001f00)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001f40)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB="3c0000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000580)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae0000016800400002200e2f90000000101000001ef0101010a000001", @ANYBLOB="6d7f0a33606d365adf31e5c7c2f26d3e9975d275152799d68cab770971bc1f65d40cd373d72468ea9f47e791849afa8692edfaca8e59f8a4b4fedbe213a418870a474281b0a54621a1f24aa33e9d3705e91fc73b876b02cdd190d668053d625bc64406c88ef2f37462153786d755aaac5dce", @ANYBLOB="1d4e53266617cbe9fa879270f4a355b0a23c739225f38661772bce30051369fb2b9c332ad40e98170f6b0a5efd9c687ce83ef9c22367b5e75e103a8bdb4fc1e0f29988fc8e390a718b28f36d6c13730aca76298f6192e7424dc471edde9705"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

991.092411ms ago: executing program 7 (id=14341):
io_setup(0x6, &(0x7f0000000140)=<r0=>0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x62081, 0x0)
io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x8002, 0x0)
write$P9_RSTATu(r2, &(0x7f0000000280)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0xfffffffc, {0x2, 0x0, 0xfeffffff}, 0x0, 0x0, 0x2, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x13\xf6\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xffffffffffffffff}}, 0x23b)

742.805304ms ago: executing program 7 (id=14342):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100000ffe0000000000fe80000000000000000000000000002b86dd"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)

561.273912ms ago: executing program 7 (id=14343):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x4, 0x480, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000340], 0x0, 0x0, &(0x7f00000015c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x14, 0x8808, 'veth1_to_batadv\x00', 'bond_slave_1\x00', 'bond0\x00', 'wlan1\x00', @empty, [0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff, 0xff, 0xff, 0x1fe], 0x0, 0xb0, 0xb0, 0xf8, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x8000000000000001, 0x0, 0x1, 0x4}}}], [], @common=@ERROR={'ERROR\x00', 0x20, {"b3fd85ca80b65ef434a839a1e2a9f16766136fc8244ecbc59582d5891ac5"}}}, {0x9, 0x59, 0xf8, 'bridge_slave_1\x00', 'batadv0\x00', '\x00', 'veth0\x00', @multicast, [0x0, 0x7f, 0xff, 0x0, 0x0, 0xff], @remote, [0x3a6d0b14389b7a08], 0x0, 0x70, 0x70, 0xb8, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"d2d0f74676a0909d2c4d656527affb4679724c9bd10fc1f7a15239b8e587"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x40, 0x7, 'syzkaller1\x00', 'gretap0\x00', 'team_slave_0\x00', 'wlan0\x00', @multicast, [0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0xd2010979b3d37dd9, 0xff], 0x0, 0x70, 0x70, 0x1a0, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xffffffff, 'system_u:object_r:setrans_exec_t:s0\x00'}}}}, {0x5, 0x51, 0x9200, 'veth1_virt_wifi\x00', 'syz_tun\x00', 'ip6gre0\x00', 'veth0_vlan\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0x0, 0xf97e56d584b1aa5c, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@STANDARD={'\x00', 0x8}}]}]}, 0x4f8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) (async)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
dup2(r1, r1)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0xad82, 0x0)
write$sndseq(r5, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x0, @time={0x2001ff, 0x8}, {0x1, 0x1}, {0x0, 0x1}, @control={0x0, 0x4}}, {0x0, 0x0, 0xff, 0x0, @tick, {}, {}, @queue={0x0, {0x1, 0x40}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7b7f}, {}, {0x0, 0x8}, @control={0x0, 0xfffffffd}}, {}], 0x70)
write$tun(r1, &(0x7f00000005c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="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"}}}, 0xfce)

513.155195ms ago: executing program 6 (id=14344):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpu.stat\x00', 0x275a, 0x0)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101c00, 0x0)
ftruncate(r0, 0x46)
set_mempolicy(0x4005, &(0x7f0000000640)=0x7e, 0x6)
setsockopt(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000680), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x7c, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600110000000a600e41b0000900ac00060411000000040012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
syz_open_dev$vim2m(&(0x7f00000006c0), 0x5, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xc6100, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000240), 0x3, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000280)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090c, 0x7fffffff, '\x00', @value64=0x10000000000000}})
ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000200)={0x1, 0x0, [{0x80000008, 0xd4, 0x1, 0x2, 0x1, 0x0, 0xffff}]})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/resume', 0xa82, 0x0)
add_key(&(0x7f0000000340)='rxrpc\x00', 0x0, &(0x7f0000000380)="00000000000000400c69000000000401000000c000000006039200001f744b8a", 0x20, 0xffffffffffffffff)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x100008b}, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000980), 0x2, 0x143102)
writev(r4, &(0x7f00000009c0)=[{&(0x7f0000000a00)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

191.3684ms ago: executing program 7 (id=14345):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000e0000001000300000000000000000000ac1414bb0000000000000000000000000000ffff000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x4010)

13.298815ms ago: executing program 7 (id=14346):
fcntl$addseals(0xffffffffffffffff, 0x409, 0xb)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x4000009d, 0x0, 0x10000}]})
connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$unix(0x1, 0x1, 0x0)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_int(r9, &(0x7f00000001c0)=0x1, 0x12)
write$cgroup_pid(r9, &(0x7f0000000200), 0x12)
connect$unix(r7, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e)
landlock_restrict_self(r0, 0x2)

0s ago: executing program 6 (id=14347):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x973, &(0x7f0000000600))
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002d40)={0xaa, 0x7c8})
io_setup(0x8, &(0x7f0000002dc0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000002e00)=[&(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000002e80)="981aaeff4f42d41c9400617b9559da4d5628d8d69af9f2160aed559a5ab7d2c8", 0x20, 0x7, 0x0, 0x4}])
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
add_key(&(0x7f00000001c0)='rxrpc\x00', 0x0, &(0x7f0000000200)="0000fe000000000463656c6c0000000200000044000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000040000000000000014a300000200"/112, 0x70, 0xffffffffffffffff)
r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x20, 0x0, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x20, &(0x7f00000002c0)="9266b709b6a124c788f903c38e5f6f0102c2de5d1cb867eb", 0x0, 0x18)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000300)="721dd8ada01ef51999e5582979ef65da4937fe7ca70fc97b72dee4c912b70ff26d3509d5005ec18eec98201fca2e648f923f9c45d5b59aa1da6ffb0823581f8fc5c5f179f3a4f4f9", 0x0, 0x48)
close_range(r4, r4, 0x2)
r7 = eventfd(0x5f0)
syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x20, 0x7, 0x41, {0x41, 0x31, "e887ad115eac2c2fa0a701eec0e6082347b3cb8fcb5a715967ae9b9e26b071529f51b092d24e776ade1e8a5d67eced15445f9b168df44308f93b8b1b943c7e"}}, 0x0, &(0x7f0000000580)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x4a, 0xbc, 0xa, 0x1, 0x38}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "e1b8feb72e767e75c499d863084cf4ed"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x2, 0xf00f, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x2, 0xf000, 0x5}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x0, 0x1, 0x1, "77b97f30", "05f261ab"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x8, 0xe, 0x9, 0x8, 0x5, 0x7fff}}}, 0x0)
ioctl$KVM_IOEVENTFD(r5, 0x40a0ae49, &(0x7f0000000140)={0x2, 0xb000, 0x0, r7})
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x400200, 0x110)
ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000440)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x23, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000c80)={0x2020}, 0x2020)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002cc0)={0x1b, 0x0, 0x0, 0x0, 0x0, r8, 0x255e, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50)

kernel console output (not intermixed with test programs):

uid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18307 comm="syz.2.13886" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89fed9f559 code=0x0
[ 3135.575128][T15600] usb 4-1: new full-speed USB device number 112 using dummy_hcd
[ 3135.714994][T15600] usb 4-1: device descriptor read/64, error -71
[ 3135.715414][ T1855] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3135.825680][T15600] usb usb4-port1: attempt power cycle
[ 3136.227210][ T1855] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3136.227786][T15600] usb 4-1: new full-speed USB device number 113 using dummy_hcd
[ 3136.255307][T15600] usb 4-1: device descriptor read/8, error -71
[ 3136.494846][T15600] usb 4-1: new full-speed USB device number 114 using dummy_hcd
[ 3136.515460][T15600] usb 4-1: device descriptor read/8, error -71
[ 3136.625535][T15600] usb usb4-port1: unable to enumerate USB device
[ 3136.966837][T18325] FAULT_INJECTION: forcing a failure.
[ 3136.966837][T18325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3136.966872][T18325] CPU: 1 UID: 0 PID: 18325 Comm: syz.7.13890 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 3136.966901][T18325] Tainted: [L]=SOFTLOCKUP
[ 3136.966909][T18325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 3136.966920][T18325] Call Trace:
[ 3136.966929][T18325]  <TASK>
[ 3136.966937][T18325]  dump_stack_lvl+0xe8/0x150
[ 3136.966981][T18325]  should_fail_ex+0x3eb/0x540
[ 3136.967009][T18325]  _copy_from_user+0x2d/0xb0
[ 3136.967035][T18325]  csum_and_copy_from_iter_full+0x71c/0x2000
[ 3136.967056][T18325]  ? alloc_skb_with_frags+0x6b3/0x760
[ 3136.967089][T18325]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[ 3136.967124][T18325]  ip_generic_getfrag+0x149/0x2d0
[ 3136.967147][T18325]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 3136.967169][T18325]  ? __lock_acquire+0x747/0x2de0
[ 3136.967191][T18325]  ? skb_put+0x112/0x210
[ 3136.967211][T18325]  __ip_append_data+0x2f45/0x3cf0
[ 3136.967249][T18325]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 3136.967281][T18325]  ? ipv4_mtu+0x23/0x670
[ 3136.967308][T18325]  ? __pfx___ip_append_data+0x10/0x10
[ 3136.967326][T18325]  ? ipv4_mtu+0x561/0x670
[ 3136.967353][T18325]  ? ip_setup_cork+0x512/0x920
[ 3136.967374][T18325]  ip_make_skb+0x22e/0x440
[ 3136.967397][T18325]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 3136.967418][T18325]  ? __pfx_ip_make_skb+0x10/0x10
[ 3136.967456][T18325]  udp_sendmsg+0x1937/0x2140
[ 3136.967497][T18325]  ? __pfx_udp_sendmsg+0x10/0x10
[ 3136.967535][T18325]  ? current_check_autobind_udp_socket+0x210/0x4b0
[ 3136.967572][T18325]  ? aa_sock_msg_perm+0xfc/0x210
[ 3136.967589][T18325]  ? sock_rps_record_flow+0x19/0x350
[ 3136.967611][T18325]  ? inet_sendmsg+0x23e/0x320
[ 3136.967628][T18325]  ? apparmor_socket_sendmsg+0x98/0x360
[ 3136.967655][T18325]  ? __pfx_inet_sendmsg+0x10/0x10
[ 3136.967672][T18325]  sock_sendmsg_nosec+0x10f/0x190
[ 3136.967698][T18325]  ____sys_sendmsg+0x54e/0x850
[ 3136.967724][T18325]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 3136.967752][T18325]  ? import_iovec+0x73/0xa0
[ 3136.967778][T18325]  ___sys_sendmsg+0x2a5/0x360
[ 3136.967795][T18325]  ? __lock_acquire+0x747/0x2de0
[ 3136.967823][T18325]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3136.967848][T18325]  ? kstrtouint+0x6e/0xe0
[ 3136.967886][T18325]  ? __fget_files+0x3a2/0x420
[ 3136.967898][T18325]  ? __fget_files+0x2a/0x420
[ 3136.967915][T18325]  __sys_sendmmsg+0x273/0x4e0
[ 3136.967928][T18325]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 3136.967944][T18325]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3136.967972][T18325]  ? rcu_is_watching+0x16/0xb0
[ 3136.967992][T18325]  __x64_sys_sendmmsg+0xa0/0xc0
[ 3136.968004][T18325]  do_syscall_64+0x166/0x520
[ 3136.968015][T18325]  ? trace_irq_disable+0x3b/0x140
[ 3136.968030][T18325]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3136.968040][T18325]  ? clear_bhb_loop+0x70/0xc0
[ 3136.968053][T18325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3136.968063][T18325] RIP: 0033:0x7f58fff9f559
[ 3136.968074][T18325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3136.968083][T18325] RSP: 002b:00007f5900d85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 3136.968096][T18325] RAX: ffffffffffffffda RBX: 00007f5900226090 RCX: 00007f58fff9f559
[ 3136.968103][T18325] RDX: 0000000000000001 RSI: 0000200000002ac0 RDI: 000000000000000a
[ 3136.968110][T18325] RBP: 00007f5900d85090 R08: 0000000000000000 R09: 0000000000000000
[ 3136.968117][T18325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3136.968123][T18325] R13: 00007f5900226128 R14: 00007f5900226090 R15: 00007f590034fa48
[ 3136.968139][T18325]  </TASK>
[ 3137.891073][T18328] netlink: 'syz.2.13891': attribute type 6 has an invalid length.
[ 3138.400376][T18334] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13893'.
[ 3138.644182][T18340] batadv_slave_1: entered promiscuous mode
[ 3138.654509][T18339] batadv_slave_1: left promiscuous mode
[ 3139.104565][T18345] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13899'.
[ 3139.154002][   T30] audit: type=1326 audit(1793255855.573:23676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18344 comm="syz.3.13899" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3287d9f559 code=0x0
[ 3139.184897][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3139.981068][T18360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3139.981545][T18360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3140.230752][T18364] bridge0: port 3(syz_tun) entered blocking state
[ 3140.231924][T18364] bridge0: port 3(syz_tun) entered disabled state
[ 3140.232071][T18364] syz_tun: entered allmulticast mode
[ 3140.256939][T18364] syz_tun: entered promiscuous mode
[ 3140.257402][T18364] bridge0: port 3(syz_tun) entered blocking state
[ 3140.257469][T18364] bridge0: port 3(syz_tun) entered forwarding state
[ 3140.289653][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13905'.
[ 3140.365048][ T9413] usb 3-1: new low-speed USB device number 102 using dummy_hcd
[ 3140.515642][ T9413] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 3140.517003][ T9413] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3140.517019][ T9413] usb 3-1: config 0 has no interfaces?
[ 3140.517037][ T9413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3140.521013][T18366] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3140.521950][ T9413] usb 3-1: config 0 descriptor??
[ 3140.576958][T18366] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 3140.583568][T18366] iommufd_mock iommufd_mock2: Adding to iommu group 2
[ 3140.744049][T18362] netlink: 'syz.2.13906': attribute type 10 has an invalid length.
[ 3140.758700][ T9409] usb 3-1: USB disconnect, device number 102
[ 3140.895861][T18374] netlink: 56 bytes leftover after parsing attributes in process `syz.6.13909'.
[ 3140.928716][T18374] ip6gre1: entered promiscuous mode
[ 3140.928732][T18374] ip6gre1: entered allmulticast mode
[ 3142.187730][T18399] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13917'.
[ 3142.280760][   T30] audit: type=1326 audit(1793255858.703:23677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.2.13917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89fed9f559 code=0x0
[ 3142.586779][T18404] xt_cgroup: path and classid specified
[ 3142.611113][T18402] netlink: 'syz.6.13918': attribute type 6 has an invalid length.
[ 3142.652919][T18404] input: syz1 as /devices/virtual/input/input181
[ 3143.417609][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 3143.417667][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 3143.508474][ T6086] nvmet: connect request for invalid subsystem t!
[ 3143.514713][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13923'.
[ 3143.515300][T18415] netlink: 'syz.2.13923': attribute type 11 has an invalid length.
[ 3143.515318][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13923'.
[ 3143.540095][T18404] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t"
[ 3143.648185][T12192] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 3143.648216][T12192] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 3143.648235][T12192] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 3143.655751][T12192] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 3144.034755][ T9413] usb 7-1: new high-speed USB device number 126 using dummy_hcd
[ 3144.187052][ T9413] usb 7-1: New USB device found: idVendor=2a39, idProduct=3fd4, bcdDevice=0.40
[ 3144.188167][ T9413] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3144.188213][ T9413] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3144.190229][ T9413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3144.190252][ T9413] usb 7-1: Product: syz
[ 3144.190266][ T9413] usb 7-1: Manufacturer: syz
[ 3144.190279][ T9413] usb 7-1: SerialNumber: syz
[ 3144.285314][ T9413] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 3144.404799][ T9409] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 3144.479512][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13924'.
[ 3144.555477][ T9409] usb 3-1: New USB device found: idVendor=045e, idProduct=0775, bcdDevice=1.00
[ 3144.556837][ T9409] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3144.558288][ T9409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 3144.558311][ T9409] usb 3-1: Product: syz
[ 3144.558325][ T9409] usb 3-1: Manufacturer: syz
[ 3144.813008][T18429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3144.828196][ T8208] usb 3-1: USB disconnect, device number 103
[ 3146.162882][ T8208] usb 7-1: USB disconnect, device number 126
[ 3146.173568][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13932'.
[ 3146.265649][T18448] batadv0: entered promiscuous mode
[ 3146.267778][T18448] macsec1: entered promiscuous mode
[ 3146.267973][T18448] macsec1: entered allmulticast mode
[ 3146.267987][T18448] batadv0: entered allmulticast mode
[ 3146.299218][T18448] 8021q: adding VLAN 0 to HW filter on device macsec1
[ 3146.347915][T18448] batadv0: left allmulticast mode
[ 3146.348056][T18448] batadv0: left promiscuous mode
[ 3146.398496][   T30] audit: type=1326 audit(1793255862.823:23678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18447 comm="syz.1.13933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafb519f559 code=0x0
[ 3146.499384][T18449] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13933'.
[ 3146.750656][T18458] vlan2: entered promiscuous mode
[ 3146.757540][T18458] macvlan0: entered promiscuous mode
[ 3147.264821][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3148.982253][T18481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3148.996945][T18481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3149.018006][T18482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3149.018277][T18482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3150.819316][T18481] netlink: 112 bytes leftover after parsing attributes in process `syz.1.13941'.
[ 3150.864684][T18482] Scaler: =================  START STATUS  =================
[ 3150.864700][T18482] Scaler: ==================  END STATUS  ==================
[ 3150.869343][T18481] Scaler: =================  START STATUS  =================
[ 3150.869355][T18481] Scaler: ==================  END STATUS  ==================
[ 3152.859633][T18516] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13950'.
[ 3152.890408][   T30] audit: type=1326 audit(1793255869.313:23679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18515 comm="syz.1.13950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafb519f559 code=0x0
[ 3153.587750][ T8208] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 3153.754797][ T8208] usb 4-1: Using ep0 maxpacket: 32
[ 3153.772263][ T8208] usb 4-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 3153.799161][ T8208] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 3153.799191][ T8208] usb 4-1: config 0 has no interface number 0
[ 3153.834332][ T8208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3153.834350][ T8208] usb 4-1: Product: syz
[ 3153.834358][ T8208] usb 4-1: Manufacturer: syz
[ 3153.834366][ T8208] usb 4-1: SerialNumber: syz
[ 3153.871827][ T8208] usb 4-1: config 0 descriptor??
[ 3153.885837][ T8208] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 3153.885865][ T8208] usb 4-1: selecting invalid altsetting 1
[ 3153.885880][ T8208] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 3153.918656][ T8208] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 3153.918843][ T8208] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 3153.918872][ T8208] usb 4-1: media controller created
[ 3153.959043][ T8208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3154.277915][T18529] CIFS: VFS: UNC: path must begin with // or \\
[ 3154.278084][T18529] CIFS: VFS: Malformed UNC in devname
[ 3154.415099][T18531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13955'.
[ 3154.415153][T18531] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13955'.
[ 3154.844178][T18535] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13956'.
[ 3154.940636][T18535] netlink: 'syz.1.13956': attribute type 10 has an invalid length.
[ 3154.940670][T18535] netlink: 55 bytes leftover after parsing attributes in process `syz.1.13956'.
[ 3155.102348][ T8208] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 3155.102393][ T8208] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 3155.367553][ T8208] usb 4-1: USB disconnect, device number 115
[ 3155.760664][   T30] audit: type=1326 audit(1793255872.183:23680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.2.13958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89fed9f559 code=0x0
[ 3155.940261][T18546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3155.940549][T18546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3156.717681][T18555] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 3156.833598][T18558] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13965'.
[ 3156.849350][   T30] audit: type=1326 audit(1793255873.273:23681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18557 comm="syz.1.13965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafb519f559 code=0x0
[ 3158.758787][T18590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13974'.
[ 3158.860533][T18590] ip6gre1: entered promiscuous mode
[ 3158.860548][T18590] ip6gre1: entered allmulticast mode
[ 3158.892737][T18582] gre0: entered promiscuous mode
[ 3158.892752][T18582] gre0: entered allmulticast mode
[ 3159.156157][T12192] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3159.156310][T12192] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3159.188124][ T9409] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3159.257823][T18602] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 3159.275188][T18603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13978'.
[ 3159.307112][T18602] netlink: 64 bytes leftover after parsing attributes in process `syz.7.13979'.
[ 3159.312112][   T30] audit: type=1326 audit(1793255875.733:23682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18600 comm="syz.7.13979" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58fff9f559 code=0x0
[ 3159.474954][ T9409] usb 7-1: new high-speed USB device number 127 using dummy_hcd
[ 3159.539273][T18615] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3159.542271][T18615] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 3159.566691][T18615] iommufd_mock iommufd_mock2: Adding to iommu group 2
[ 3159.568000][T18615] FAULT_INJECTION: forcing a failure.
[ 3159.568000][T18615] name fail_iommufd, interval 1, probability 0, space 0, times 1
[ 3159.568020][T18615] CPU: 1 UID: 0 PID: 18615 Comm: syz.3.13984 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 3159.568034][T18615] Tainted: [L]=SOFTLOCKUP
[ 3159.568038][T18615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 3159.568045][T18615] Call Trace:
[ 3159.568049][T18615]  <TASK>
[ 3159.568055][T18615]  dump_stack_lvl+0xe8/0x150
[ 3159.568077][T18615]  should_fail_ex+0x3eb/0x540
[ 3159.568092][T18615]  iommufd_get_object+0x78/0x4b0
[ 3159.568108][T18615]  ? __pfx_iommufd_get_object+0x10/0x10
[ 3159.568126][T18615]  iommufd_device_change_pt+0x72/0xaf0
[ 3159.568145][T18615]  ? __pfx_iommufd_device_do_replace+0x10/0x10
[ 3159.568161][T18615]  iommufd_test+0x2867/0x6360
[ 3159.568179][T18615]  ? __lock_acquire+0x747/0x2de0
[ 3159.568193][T18615]  ? __pfx_iommufd_test+0x10/0x10
[ 3159.568210][T18615]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 3159.568226][T18615]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 3159.568242][T18615]  ? lock_acquire+0x115/0x350
[ 3159.568266][T18615]  ? __might_fault+0xaf/0x130
[ 3159.568281][T18615]  iommufd_fops_ioctl+0x465/0x600
[ 3159.568297][T18615]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[ 3159.568312][T18615]  ? __fget_files+0x2a/0x420
[ 3159.568338][T18615]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 3159.568353][T18615]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[ 3159.568366][T18615]  __se_sys_ioctl+0xfc/0x170
[ 3159.568388][T18615]  do_syscall_64+0x166/0x520
[ 3159.568401][T18615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3159.568411][T18615]  ? clear_bhb_loop+0x70/0xc0
[ 3159.568427][T18615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3159.568444][T18615] RIP: 0033:0x7f3287d9f559
[ 3159.568461][T18615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3159.568477][T18615] RSP: 002b:00007f3288d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3159.568496][T18615] RAX: ffffffffffffffda RBX: 00007f3288025fa0 RCX: 00007f3287d9f559
[ 3159.568509][T18615] RDX: 0000200000000340 RSI: 0000000000003ba0 RDI: 0000000000000004
[ 3159.568521][T18615] RBP: 00007f3288d0f090 R08: 0000000000000000 R09: 0000000000000000
[ 3159.568539][T18615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3159.568551][T18615] R13: 00007f3288026038 R14: 00007f3288025fa0 R15: 00007f328814fa48
[ 3159.568582][T18615]  </TASK>
[ 3159.625583][ T9413] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3159.682333][ T9409] usb 7-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 3159.712010][ T9409] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3159.798645][ T9409] usb 7-1: config 0 descriptor??
[ 3159.908002][T18617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3159.914328][T18617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3160.135098][ T8208] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3160.257807][T18625] IPVS: ip_vs_edit_dest(): server weight less than zero
[ 3160.260946][ T6086] IPVS: starting estimator thread 0...
[ 3160.344868][T18629] IPVS: using max 31 ests per chain, 74400 per kthread
[ 3160.408913][ T9409] usb 7-1: Cannot read MAC address
[ 3160.409062][ T9409] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 3160.441653][ T9409] usb 7-1: USB disconnect, device number 127
[ 3160.708942][T18633] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 3160.810395][T18636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3160.810692][T18636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3160.832735][T18636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13989'.
[ 3160.859205][T18636] netlink: 'syz.1.13989': attribute type 4 has an invalid length.
[ 3160.859297][T18636] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13989'.
[ 3161.685753][T18649] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13997'.
[ 3161.706449][   T30] audit: type=1326 audit(1793255878.133:23683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18648 comm="syz.3.13997" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3287d9f559 code=0x0
[ 3161.865727][T18658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3161.868505][T18658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3161.882994][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13998'.
[ 3162.085863][T15600] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 3162.298654][T15600] usb 7-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 3162.300247][T15600] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 3162.300273][T15600] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 3162.300294][T15600] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 3162.300313][T15600] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 3162.300346][T15600] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3162.336100][T15600] usb 7-1: config 0 descriptor??
[ 3162.540281][T15600] hdpvr 7-1:0.0: firmware version 0x81 dated óº…þýÌ_’ã$YÂwÑ—zÿÚÄr�/“ľj)7Ý›t˜-û-ðá 
[ 3162.540306][T15600] hdpvr 7-1:0.0: untested firmware, the driver might not work.
[ 3162.934844][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3163.264828][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3163.278801][ T6083] IPVS: starting estimator thread 0...
[ 3163.367672][T18668] IPVS: using max 51 ests per chain, 122400 per kthread
[ 3163.971125][T18674] netlink: 'syz.2.14002': attribute type 11 has an invalid length.
[ 3164.367708][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3164.588133][T10961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3164.917630][T18688] netlink: 'syz.2.14006': attribute type 16 has an invalid length.
[ 3164.917646][T18688] netlink: 'syz.2.14006': attribute type 17 has an invalid length.
[ 3165.157502][T18696] netlink: 'syz.7.14009': attribute type 21 has an invalid length.
[ 3165.181275][ T9413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3165.241823][T18701] netlink: 'syz.7.14009': attribute type 21 has an invalid length.
[ 3165.351554][T15600] hdpvr 7-1:0.0: Could not setup controls
[ 3165.393809][T15600] hdpvr 7-1:0.0: registering videodev failed
[ 3165.475875][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3165.497648][T15600] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -71
[ 3165.518997][T15600] usb 7-1: USB disconnect, device number 2
[ 3165.562265][T18688] bridge0: port 3(syz_tun) entered blocking state
[ 3165.562460][T18688] bridge0: port 3(syz_tun) entered listening state
[ 3165.562618][T18688] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3165.562709][T18688] bridge0: port 1(bridge_slave_0) entered listening state
[ 3165.681311][T10961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3165.695417][ T8197] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 3165.767919][T18688] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[ 3165.778835][T18688] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 3165.811032][T18706] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14011'.
[ 3165.838230][T18688] 8021q: adding VLAN 0 to HW filter on device bond1
[ 3165.866507][ T8197] usb 4-1: New USB device found: idVendor=2a39, idProduct=3fd4, bcdDevice=0.40
[ 3165.868834][ T8197] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3165.868881][ T8197] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3165.876019][T18688] 8021q: adding VLAN 0 to HW filter on device bond2
[ 3165.896069][T15600] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[ 3165.903330][ T8197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3165.903357][ T8197] usb 4-1: Product: syz
[ 3165.903370][ T8197] usb 4-1: Manufacturer: syz
[ 3165.903384][ T8197] usb 4-1: SerialNumber: syz
[ 3165.948135][T18688] 8021q: adding VLAN 0 to HW filter on device bond3
[ 3165.956230][ T8197] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 3165.963058][T18688] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[ 3166.008921][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3166.009044][ T6083] bridge0: port 2(bridge_slave_1) entered listening state
[ 3166.075699][T15600] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 3166.077804][T15600] usb 7-1: config 0 has an invalid interface number: 4 but max is 0
[ 3166.077829][T15600] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3166.077845][T15600] usb 7-1: config 0 has no interface number 0
[ 3166.077871][T15600] usb 7-1: too many endpoints for config 0 interface 4 altsetting 123: 169, using maximum allowed: 30
[ 3166.077906][T15600] usb 7-1: config 0 interface 4 altsetting 123 has 0 endpoint descriptors, different from the interface descriptor's value: 169
[ 3166.077929][T15600] usb 7-1: config 0 interface 4 has no altsetting 0
[ 3166.106651][T15600] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 3166.106680][T15600] usb 7-1: Product: syz
[ 3166.106694][T15600] usb 7-1: Manufacturer: syz
[ 3166.106707][T15600] usb 7-1: SerialNumber: syz
[ 3166.142903][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14010'.
[ 3166.205195][T15600] usb 7-1: config 0 descriptor??
[ 3166.436577][T18693] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14008'.
[ 3166.458678][T18693] netlink: 'syz.6.14008': attribute type 4 has an invalid length.
[ 3166.458701][T18693] netlink: 17 bytes leftover after parsing attributes in process `syz.6.14008'.
[ 3166.518125][T15600] usb 7-1: USB disconnect, device number 3
[ 3166.616334][ T9410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3166.637682][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3166.731449][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3167.186308][T18725] fuse: Bad value for 'group_id'
[ 3167.186327][T18725] fuse: Bad value for 'group_id'
[ 3167.326606][T15600] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 3167.496983][T15600] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[ 3167.498923][T15600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3167.498971][T15600] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3167.499013][T15600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3167.506601][T15600] usb 3-1: config 0 descriptor??
[ 3167.518970][T15600] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3167.713526][T15600] usb 3-1: USB disconnect, device number 104
[ 3167.750421][T23684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3167.876339][T18736] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14023'.
[ 3168.077881][ T9410] usb 4-1: USB disconnect, device number 116
[ 3168.155542][T18569] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 3168.316104][T18569] usb 3-1: New USB device found: idVendor=04d8, idProduct=f002, bcdDevice=0.00
[ 3168.316976][T18569] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3168.316995][T18569] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3168.317009][T18569] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3168.317027][T18569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3168.318714][T18569] usb 3-1: config 0 descriptor??
[ 3168.638904][T18743] loop8: detected capacity change from 0 to 16384
[ 3168.744869][T18747] loop8: detected capacity change from 16384 to 16383
[ 3168.748121][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14025'.
[ 3168.785545][T18751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3168.786082][T18751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3168.806738][T18569] hid-picolcd 0003:04D8:F002.008B: No report with id 0xf3 found
[ 3168.806763][T18569] hid-picolcd 0003:04D8:F002.008B: No report with id 0xf4 found
[ 3168.849620][T18754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14029'.
[ 3168.849808][T18754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14029'.
[ 3168.850023][T18754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14029'.
[ 3168.851061][T18754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14029'.
[ 3168.911378][T18751] sctp: [Deprecated]: syz.1.14029 (pid 18751) Use of int in max_burst socket option.
[ 3168.911378][T18751] Use struct sctp_assoc_value instead
[ 3168.912881][T18751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3168.919897][T18751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3168.936294][T18722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3168.936996][T18722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3168.983116][T18758] fuse: Unknown parameter 'max_re'
[ 3168.984507][T18722] netlink: 'syz.2.14017': attribute type 15 has an invalid length.
[ 3169.008949][T18722] vxlan2: entered promiscuous mode
[ 3169.008975][T18722] vxlan2: entered allmulticast mode
[ 3169.037492][T12192] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 31488 - 0
[ 3169.039823][T12192] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 31488 - 0
[ 3169.039882][T12192] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 31488 - 0
[ 3169.039915][T12192] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 31488 - 0
[ 3169.055714][T23684] usb 3-1: USB disconnect, device number 105
[ 3169.644923][T23684] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 3169.657446][ T9410] net_ratelimit: 5 callbacks suppressed
[ 3169.657465][ T9410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3169.796641][T23684] usb 7-1: New USB device found: idVendor=2a39, idProduct=3fd4, bcdDevice=0.40
[ 3169.797786][T23684] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3169.797832][T23684] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3169.801365][T23684] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3169.801391][T23684] usb 7-1: Product: syz
[ 3169.801405][T23684] usb 7-1: Manufacturer: syz
[ 3169.801418][T23684] usb 7-1: SerialNumber: syz
[ 3169.819327][T23684] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 3169.871917][T15600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3169.915088][T18569] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 3170.015319][  T284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3170.077960][T18569] usb 4-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01
[ 3170.078960][T18569] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 3170.078988][T18569] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 3170.081466][T18569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3170.081490][T18569] usb 4-1: Product: syz
[ 3170.081504][T18569] usb 4-1: Manufacturer: syz
[ 3170.081518][T18569] usb 4-1: SerialNumber: syz
[ 3170.089081][T18569] ums-onetouch 4-1:1.0: USB Mass Storage device detected
[ 3170.100532][T18569] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input182
[ 3170.100732][T18569] input input182: usb_submit_urb failed
[ 3170.122482][T18569] input: failed to attach handler kbd to device input182, error: -5
[ 3170.124213][ T4987] input input182: usb_submit_urb failed
[ 3170.125953][T18569] scsi host1: usb-storage 4-1:1.0
[ 3170.131117][ T4987] input input182: usb_submit_urb failed
[ 3170.291010][T18569] usb 4-1: USB disconnect, device number 117
[ 3170.450174][T18788] fuse: Unknown parameter 'max_re'
[ 3170.454298][T18788] ip_tables: iptables: counters copy to user failed while replacing table
[ 3170.570018][T18793] mac80211_hwsim hwsim80 syzkaller0: entered promiscuous mode
[ 3170.570046][T18793] mac80211_hwsim hwsim80 syzkaller0: entered allmulticast mode
[ 3170.572956][T18793] tipc: Started in network mode
[ 3170.572975][T18793] tipc: Node identity 76657468115f, cluster identity 4711
[ 3170.573125][T18793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3170.743142][T18795] FAULT_INJECTION: forcing a failure.
[ 3170.743142][T18795] name failslab, interval 1, probability 0, space 0, times 0
[ 3170.743174][T18795] CPU: 0 UID: 0 PID: 18795 Comm: syz.7.14044 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 3170.743199][T18795] Tainted: [L]=SOFTLOCKUP
[ 3170.743206][T18795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 3170.743216][T18795] Call Trace:
[ 3170.743224][T18795]  <TASK>
[ 3170.743232][T18795]  dump_stack_lvl+0xe8/0x150
[ 3170.743267][T18795]  should_fail_ex+0x3eb/0x540
[ 3170.743294][T18795]  should_failslab+0xa8/0x100
[ 3170.743320][T18795]  ? dup_fd+0x59/0xbf0
[ 3170.743336][T18795]  kmem_cache_alloc_noprof+0x9c/0x600
[ 3170.743359][T18795]  ? dup_fd+0x59/0xbf0
[ 3170.743381][T18795]  dup_fd+0x59/0xbf0
[ 3170.743401][T18795]  ? __kmalloc_noprof+0x387/0x710
[ 3170.743423][T18795]  ? __kmalloc_noprof+0x1a6/0x710
[ 3170.743443][T18795]  ? security_task_alloc+0x4d/0x330
[ 3170.743465][T18795]  ? security_task_alloc+0x4d/0x330
[ 3170.743489][T18795]  ? apparmor_task_alloc+0x1ef/0x2d0
[ 3170.743518][T18795]  copy_files+0xb5/0x140
[ 3170.743544][T18795]  copy_process+0x1cfc/0x44b0
[ 3170.743581][T18795]  ? copy_process+0xd17/0x44b0
[ 3170.743623][T18795]  ? __pfx_copy_process+0x10/0x10
[ 3170.743658][T18795]  kernel_clone+0x2d7/0x940
[ 3170.743688][T18795]  ? __pfx_kernel_clone+0x10/0x10
[ 3170.743729][T18795]  __se_sys_clone3+0x33c/0x360
[ 3170.743766][T18795]  ? ksys_write+0x1e6/0x270
[ 3170.743788][T18795]  ? __pfx___se_sys_clone3+0x10/0x10
[ 3170.743826][T18795]  ? fdget+0x1ac/0x250
[ 3170.743856][T18795]  ? __pfx_ksys_write+0x10/0x10
[ 3170.743888][T18795]  do_syscall_64+0x166/0x520
[ 3170.743906][T18795]  ? trace_irq_disable+0x3b/0x140
[ 3170.743928][T18795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3170.743947][T18795]  ? clear_bhb_loop+0x70/0xc0
[ 3170.743970][T18795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3170.743987][T18795] RIP: 0033:0x7f58fff9f559
[ 3170.744005][T18795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3170.744022][T18795] RSP: 002b:00007f5900eb6ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[ 3170.744043][T18795] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f58fff9f559
[ 3170.744057][T18795] RDX: 00007f5900eb6f10 RSI: 0000000000000058 RDI: 00007f5900eb6f10
[ 3170.744070][T18795] RBP: 00007f5900eb7090 R08: 0000000000000000 R09: 0000000000000058
[ 3170.744085][T18795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3170.744097][T18795] R13: 00007f5900226038 R14: 00007f5900225fa0 R15: 00007f590034fa48
[ 3170.744128][T18795]  </TASK>
[ 3170.814829][T18569] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 3170.868840][T15600] usb 7-1: USB disconnect, device number 4
[ 3170.939159][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3170.978891][T23684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3170.998673][T18569] usb 4-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01
[ 3171.002358][T18569] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 3171.002390][T18569] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 3171.034918][T18569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3171.034947][T18569] usb 4-1: Product: syz
[ 3171.034961][T18569] usb 4-1: Manufacturer: syz
[ 3171.034983][T18569] usb 4-1: SerialNumber: syz
[ 3171.091968][T18569] ums-onetouch 4-1:1.0: USB Mass Storage device detected
[ 3171.120030][T18569] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input183
[ 3171.120085][T18569] input input183: usb_submit_urb failed
[ 3171.137280][T18569] input: failed to attach handler kbd to device input183, error: -5
[ 3171.141653][ T4987] input input183: usb_submit_urb failed
[ 3171.148278][T18569] scsi host1: usb-storage 4-1:1.0
[ 3171.166521][ T4987] input input183: usb_submit_urb failed
[ 3171.206044][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3171.395873][T18808] bridge0: port 3(syz_tun) entered disabled state
[ 3171.396166][T18808] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3171.396803][T18808] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3171.610137][T18813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3171.610588][T18813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3171.705628][T15600] tipc: Node number set to 1731884136
[ 3171.862005][T18821] __nla_validate_parse: 31 callbacks suppressed
[ 3171.862027][T18821] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14053'.
[ 3171.952087][T18825] FAULT_INJECTION: forcing a failure.
[ 3171.952087][T18825] name failslab, interval 1, probability 0, space 0, times 0
[ 3171.952109][T18825] CPU: 0 UID: 0 PID: 18825 Comm: syz.7.14055 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 3171.952124][T18825] Tainted: [L]=SOFTLOCKUP
[ 3171.952127][T18825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 3171.952134][T18825] Call Trace:
[ 3171.952139][T18825]  <TASK>
[ 3171.952144][T18825]  dump_stack_lvl+0xe8/0x150
[ 3171.952166][T18825]  should_fail_ex+0x3eb/0x540
[ 3171.952182][T18825]  should_failslab+0xa8/0x100
[ 3171.952198][T18825]  __kmalloc_noprof+0xf9/0x710
[ 3171.952219][T18825]  ? rcu_is_watching+0x16/0xb0
[ 3171.952235][T18825]  ? tomoyo_realpath_from_path+0xef/0x640
[ 3171.952246][T18825]  ? tomoyo_realpath_from_path+0xef/0x640
[ 3171.952261][T18825]  tomoyo_realpath_from_path+0xef/0x640
[ 3171.952277][T18825]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 3171.952291][T18825]  tomoyo_path_number_perm+0x246/0x5f0
[ 3171.952307][T18825]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3171.952321][T18825]  ? __lock_acquire+0x747/0x2de0
[ 3171.952353][T18825]  ? __fget_files+0x2a/0x420
[ 3171.952367][T18825]  ? __fget_files+0x2a/0x420
[ 3171.952379][T18825]  ? __fget_files+0x2a/0x420
[ 3171.952393][T18825]  security_file_ioctl+0xc3/0x2a0
[ 3171.952408][T18825]  __se_sys_ioctl+0x47/0x170
[ 3171.952425][T18825]  do_syscall_64+0x166/0x520
[ 3171.952436][T18825]  ? trace_irq_disable+0x3b/0x140
[ 3171.952450][T18825]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3171.952461][T18825]  ? clear_bhb_loop+0x70/0xc0
[ 3171.952474][T18825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3171.952484][T18825] RIP: 0033:0x7f58fff9f559
[ 3171.952495][T18825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3171.952504][T18825] RSP: 002b:00007f5900eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3171.952516][T18825] RAX: ffffffffffffffda RBX: 00007f5900225fa0 RCX: 00007f58fff9f559
[ 3171.952524][T18825] RDX: 0000200000000080 RSI: 0000000040107447 RDI: 0000000000000003
[ 3171.952530][T18825] RBP: 00007f5900eb7090 R08: 0000000000000000 R09: 0000000000000000
[ 3171.952537][T18825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3171.952544][T18825] R13: 00007f5900226038 R14: 00007f5900225fa0 R15: 00007f590034fa48
[ 3171.952560][T18825]  </TASK>
[ 3171.952565][T18825] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3171.995140][T23684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3172.226024][T15600] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 3172.269942][T18829] netlink: 9 bytes leftover after parsing attributes in process `syz.2.14056'.
[ 3172.365262][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3172.398551][T15600] usb 7-1: Using ep0 maxpacket: 8
[ 3172.402430][T15600] usb 7-1: New USB device found: idVendor=046d, idProduct=c623, bcdDevice=0.00
[ 3172.406194][T15600] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3172.406224][T15600] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3172.406245][T15600] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3172.406270][T15600] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3172.406301][T15600] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3172.411233][T15600] usb 7-1: config 0 descriptor??
[ 3172.695977][ T9410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3172.942663][T15600] input: HID 046d:c623 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:046D:C623.008C/input/input184
[ 3173.022391][T15600] logitech 0003:046D:C623.008C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.6-1/input0
[ 3173.037743][T15600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3173.274569][T18569] usb 4-1: USB disconnect, device number 118
[ 3173.288963][T18847] bridge0: port 3(syz_tun) entered disabled state
[ 3173.289184][T18847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3173.289357][T18847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3173.824811][T18569] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 3173.979974][T18569] usb 4-1: Using ep0 maxpacket: 16
[ 3173.981158][T18569] usb 4-1: New USB device found: idVendor=0644, idProduct=800e, bcdDevice=41.e6
[ 3173.984055][T18569] usb 4-1: config 0 has an invalid interface number: 63 but max is 0
[ 3173.984081][T18569] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3173.984100][T18569] usb 4-1: config 0 has no interface number 0
[ 3173.984138][T18569] usb 4-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[ 3173.984344][T18569] usb 4-1: config 0 interface 63 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3173.984387][T18569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3173.992541][T18569] usb 4-1: config 0 descriptor??
[ 3174.073788][T15600] usb 7-1: USB disconnect, device number 5
[ 3174.199129][T18569] usb 4-1: USB disconnect, device number 119
[ 3174.368579][T18861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3174.369052][T18861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3174.400207][T18861] sctp: [Deprecated]: syz.1.14067 (pid 18861) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 3174.400207][T18861] Use struct sctp_sack_info instead
[ 3174.674100][T18863] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[ 3174.778508][ T9410] net_ratelimit: 4 callbacks suppressed
[ 3174.778522][ T9410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3175.107412][T15600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3175.387270][T18882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3175.390622][T18882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3175.418805][T18884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3175.419001][T18884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3175.419336][T18884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3175.426762][T18884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3175.426943][T18884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3175.431317][T18883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3175.612972][T18888] FAULT_INJECTION: forcing a failure.
[ 3175.612972][T18888] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3175.613007][T18888] CPU: 1 UID: 0 PID: 18888 Comm: syz.2.14077 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 3175.613031][T18888] Tainted: [L]=SOFTLOCKUP
[ 3175.613038][T18888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 3175.613049][T18888] Call Trace:
[ 3175.613056][T18888]  <TASK>
[ 3175.613064][T18888]  dump_stack_lvl+0xe8/0x150
[ 3175.613098][T18888]  should_fail_ex+0x3eb/0x540
[ 3175.613124][T18888]  core_sys_select+0x8be/0xb40
[ 3175.613160][T18888]  ? __pfx_core_sys_select+0x10/0x10
[ 3175.613203][T18888]  ? __pfx_set_user_sigmask+0x10/0x10
[ 3175.613229][T18888]  ? lockdep_hardirqs_on+0x7b/0x110
[ 3175.613251][T18888]  ? ktime_get_ts64+0x45/0x300
[ 3175.613276][T18888]  ? ktime_get_ts64+0x295/0x300
[ 3175.613300][T18888]  __se_sys_pselect6+0x267/0x320
[ 3175.613325][T18888]  ? __pfx___se_sys_pselect6+0x10/0x10
[ 3175.613346][T18888]  ? __pfx_ksys_write+0x10/0x10
[ 3175.613375][T18888]  ? __x64_sys_pselect6+0x21/0xf0
[ 3175.613397][T18888]  do_syscall_64+0x166/0x520
[ 3175.613417][T18888]  ? trace_irq_disable+0x3b/0x140
[ 3175.613450][T18888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3175.613470][T18888]  ? clear_bhb_loop+0x70/0xc0
[ 3175.613496][T18888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3175.613515][T18888] RIP: 0033:0x7f89fed9f559
[ 3175.613534][T18888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3175.613550][T18888] RSP: 002b:00007f89ffc5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[ 3175.613572][T18888] RAX: ffffffffffffffda RBX: 00007f89ff025fa0 RCX: 00007f89fed9f559
[ 3175.613586][T18888] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000040
[ 3175.613598][T18888] RBP: 00007f89ffc5b090 R08: 0000200000000340 R09: 0000000000000000
[ 3175.613611][T18888] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[ 3175.613624][T18888] R13: 00007f89ff026038 R14: 00007f89ff025fa0 R15: 00007f89ff14fa48
[ 3175.613655][T18888]  </TASK>
[ 3175.744031][ T9409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3175.796215][ T6083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3175.964770][T18893] netlink: 80 bytes leftover after parsing attributes in process `syz.3.14078'.
[ 3175.967715][T18893] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14078'.
[ 3176.241976][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14081'.
[ 3176.342138][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14081'.
[ 3176.346908][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14081'.
[ 3176.395979][T18911] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 3176.774841][ T9410] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 3176.924970][ T9410] usb 4-1: Using ep0 maxpacket: 32
[ 3176.932564][ T9410] usb 4-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 3176.957448][ T9410] usb 4-1: config index 0 descriptor too short (expected 19, got 18)
[ 3176.979488][ T9410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3176.979509][ T9410] usb 4-1: Product: syz
[ 3176.979517][ T9410] usb 4-1: Manufacturer: syz
[ 3176.979524][ T9410] usb 4-1: SerialNumber: syz
[ 3176.981685][ T9410] usb 4-1: config 0 descriptor??
[ 3177.022765][ T9410] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 3177.022815][ T9410] dvb-usb: bulk message failed: -22 (2/0)
[ 3177.050145][ T9410] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3177.064519][ T9410] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 3177.064576][ T9410] usb 4-1: media controller created
[ 3177.132316][ T9410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3177.190561][ T9410] usb 4-1: selecting invalid altsetting 7
[ 3177.190575][ T9410] cxusb: set interface failed
[ 3177.190582][ T9410] dvb-usb: bulk message failed: -22 (1/0)
[ 3177.246740][T18913] cxusb: i2c wr: len=79 is too big!
[ 3177.246740][T18913] 
[ 3177.459097][ T9410] DVB: Unable to find symbol lgdt330x_attach()
[ 3177.459110][ T9410] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 3177.714814][ T9410] rc_core: IR keymap rc-dvico-portable not found
[ 3177.714835][ T9410] Registered IR keymap rc-empty
[ 3177.717733][ T9410] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[ 3177.749099][ T9410] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input185
[ 3177.776328][ T9410] dvb-usb: schedule remote query interval to 100 msecs.
[ 3177.776349][ T9410] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 3177.806091][ T9410] usb 4-1: USB disconnect, device number 120
[ 3177.960833][ T9410] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 3178.781405][T18947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14095'.
[ 3178.855193][ T9410] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 3179.011227][ T9410] usb 3-1: New USB device found: idVendor=05ac, idProduct=b301, bcdDevice=e4.00
[ 3179.039360][T18951] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 3179.055568][ T9410] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[ 3179.055585][ T9410] usb 3-1: Product: syz
[ 3179.055593][ T9410] usb 3-1: Manufacturer: syz
[ 3179.055601][ T9410] usb 3-1: SerialNumber: syz
[ 3179.083205][ T9410] usb 3-1: config 0 descriptor??
[ 3179.102794][ T9410] btusb 3-1:0.0: failed to enumerate endpoints
[ 3179.317218][T18569] usb 3-1: USB disconnect, device number 106
[ 3179.321344][T18956] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14098'.
[ 3179.832175][T18964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14100'.
[ 3180.325194][ T6083] net_ratelimit: 8 callbacks suppressed
[ 3180.325208][ T6083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3180.495219][T18978] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14107'.
[ 3180.519570][T18569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3180.644465][   T30] audit: type=1326 audit(1793255897.063:23684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.1.14105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3180.671129][   T30] audit: type=1326 audit(1793255897.093:23685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.1.14105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3180.698338][ T9410] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 3180.705914][   T30] audit: type=1326 audit(1793255897.123:23686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.1.14105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3180.706622][   T30] audit: type=1326 audit(1793255897.133:23687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.1.14105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3180.753018][   T30] audit: type=1326 audit(1793255897.153:23688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.1.14105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3180.783248][   T30] audit: type=1326 audit(1793255897.203:23689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.1.14105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3180.811690][T18984] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 3180.827342][   T30] audit: type=1326 audit(1793255897.253:23690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.1.14105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3180.827460][   T30] audit: type=1326 audit(1793255897.253:23691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.1.14105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3180.829615][   T30] audit: type=1326 audit(1793255897.253:23692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.1.14105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3180.831008][   T30] audit: type=1326 audit(1793255897.253:23693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.1.14105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3180.954170][ T9410] usb 4-1: New USB device found: idVendor=056a, idProduct=00bb, bcdDevice=0.00
[ 3180.977621][ T9410] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3180.977643][ T9410] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3180.977657][ T9410] usb 4-1: config 0 interface 0 has no altsetting 0
[ 3180.977680][ T9410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3181.028880][ T9410] usb 4-1: config 0 descriptor??
[ 3181.132152][T18991] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14109'.
[ 3181.134771][T18991] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[17911] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[18991]
[ 3181.451475][T18998] pimreg: entered allmulticast mode
[ 3181.602438][  T284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3181.626941][ T9410] wacom 0003:056A:00BB.008D: Unknown device_type for 'HID 056a:00bb'. Assuming pen.
[ 3181.629506][T18569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3181.644893][ T9410] wacom 0003:056A:00BB.008D: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.3-1/input0
[ 3181.691403][ T9410] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BB.008D/input/input187
[ 3181.817031][ T9410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3181.930224][T19006] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14113'.
[ 3182.249223][ T9409] usb 4-1: USB disconnect, device number 121
[ 3182.578995][T19022] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 3182.696226][T18569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3182.715577][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3182.788918][T19025] input: syz0 as /devices/virtual/input/input190
[ 3182.878070][T19025] syzkaller0: entered allmulticast mode
[ 3182.915158][ T8197] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 3183.093096][ T8197] usb 4-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01
[ 3183.094383][ T8197] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3183.094414][ T8197] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3183.094426][ T8197] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3183.094443][ T8197] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3183.163111][ T8197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 3183.163137][ T8197] usb 4-1: Product: syz
[ 3183.163149][ T8197] usb 4-1: Manufacturer: syz
[ 3183.210315][ T8197] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected
[ 3183.228777][ T8197] garmin_gps ttyUSB1: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90
[ 3183.228937][ T8197] garmin_gps ttyUSB1: probe with driver garmin_gps failed with error -90
[ 3183.761710][T15600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3183.851614][T19030] netlink: 'syz.1.14122': attribute type 6 has an invalid length.
[ 3183.858934][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3184.065686][T15600] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 3184.224766][T15600] usb 3-1: Using ep0 maxpacket: 16
[ 3184.225560][T15600] usb 3-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00
[ 3184.231297][T15600] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3184.231319][T15600] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3184.231331][T15600] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3184.231351][T15600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3184.243518][T15600] usb 3-1: config 0 descriptor??
[ 3184.376360][ T9413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3184.669733][T15600] nzxt-smart2 0003:1E71:2009.008E: unknown main item tag 0x0
[ 3184.669774][T15600] nzxt-smart2 0003:1E71:2009.008E: unknown main item tag 0x0
[ 3184.669810][T15600] nzxt-smart2 0003:1E71:2009.008E: unknown main item tag 0x0
[ 3184.669836][T15600] nzxt-smart2 0003:1E71:2009.008E: unknown main item tag 0x0
[ 3184.669862][T15600] nzxt-smart2 0003:1E71:2009.008E: unknown main item tag 0x0
[ 3184.724438][T19057] FAULT_INJECTION: forcing a failure.
[ 3184.724438][T19057] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3184.724472][T19057] CPU: 1 UID: 0 PID: 19057 Comm: syz.6.14129 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 3184.724498][T19057] Tainted: [L]=SOFTLOCKUP
[ 3184.724505][T19057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 3184.724518][T19057] Call Trace:
[ 3184.724526][T19057]  <TASK>
[ 3184.724535][T19057]  dump_stack_lvl+0xe8/0x150
[ 3184.724569][T19057]  should_fail_ex+0x3eb/0x540
[ 3184.724597][T19057]  _copy_from_user+0x2d/0xb0
[ 3184.724619][T19057]  csum_and_copy_from_iter_full+0x71c/0x2000
[ 3184.724639][T19057]  ? alloc_skb_with_frags+0x6b3/0x760
[ 3184.724672][T19057]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[ 3184.724705][T19057]  ip_generic_getfrag+0x149/0x2d0
[ 3184.724729][T19057]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 3184.724759][T19057]  ? skb_put+0x112/0x210
[ 3184.724779][T19057]  __ip_append_data+0x2f45/0x3cf0
[ 3184.724814][T19057]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 3184.724846][T19057]  ? ipv4_mtu+0x23/0x670
[ 3184.724876][T19057]  ? __pfx___ip_append_data+0x10/0x10
[ 3184.724894][T19057]  ? ipv4_mtu+0x561/0x670
[ 3184.724923][T19057]  ? ip_setup_cork+0x512/0x920
[ 3184.724935][T19057]  ip_make_skb+0x22e/0x440
[ 3184.724949][T19057]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 3184.724961][T19057]  ? __pfx_ip_make_skb+0x10/0x10
[ 3184.724981][T19057]  udp_sendmsg+0x1937/0x2140
[ 3184.725004][T19057]  ? __pfx_udp_sendmsg+0x10/0x10
[ 3184.725024][T19057]  ? current_check_autobind_udp_socket+0x210/0x4b0
[ 3184.725045][T19057]  ? aa_sock_msg_perm+0xfc/0x210
[ 3184.725054][T19057]  ? sock_rps_record_flow+0x19/0x350
[ 3184.725066][T19057]  ? inet_sendmsg+0x23e/0x320
[ 3184.725075][T19057]  ? apparmor_socket_sendmsg+0x98/0x360
[ 3184.725091][T19057]  ? __pfx_inet_sendmsg+0x10/0x10
[ 3184.725101][T19057]  sock_sendmsg_nosec+0x10f/0x190
[ 3184.725116][T19057]  ____sys_sendmsg+0x54e/0x850
[ 3184.725130][T19057]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 3184.725145][T19057]  ? import_iovec+0x73/0xa0
[ 3184.725160][T19057]  ___sys_sendmsg+0x2a5/0x360
[ 3184.725169][T19057]  ? __lock_acquire+0x747/0x2de0
[ 3184.725185][T19057]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3184.725199][T19057]  ? kstrtouint+0x6e/0xe0
[ 3184.725229][T19057]  ? __fget_files+0x3a2/0x420
[ 3184.725241][T19057]  ? __fget_files+0x2a/0x420
[ 3184.725260][T19057]  __sys_sendmmsg+0x273/0x4e0
[ 3184.725274][T19057]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 3184.725289][T19057]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3184.725309][T19057]  ? ksys_write+0x242/0x270
[ 3184.725324][T19057]  ? __pfx_ksys_write+0x10/0x10
[ 3184.725340][T19057]  __x64_sys_sendmmsg+0xa0/0xc0
[ 3184.725352][T19057]  do_syscall_64+0x166/0x520
[ 3184.725364][T19057]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3184.725375][T19057]  ? clear_bhb_loop+0x70/0xc0
[ 3184.725387][T19057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3184.725397][T19057] RIP: 0033:0x7fe8a779f559
[ 3184.725409][T19057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3184.725418][T19057] RSP: 002b:00007fe8a8605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 3184.725431][T19057] RAX: ffffffffffffffda RBX: 00007fe8a7a26090 RCX: 00007fe8a779f559
[ 3184.725438][T19057] RDX: 0000000000000001 RSI: 0000200000002ac0 RDI: 000000000000000a
[ 3184.725445][T19057] RBP: 00007fe8a8605090 R08: 0000000000000000 R09: 0000000000000000
[ 3184.725452][T19057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3184.725458][T19057] R13: 00007fe8a7a26128 R14: 00007fe8a7a26090 R15: 00007fe8a7b4fa48
[ 3184.725474][T19057]  </TASK>
[ 3184.795878][T15600] nzxt-smart2 0003:1E71:2009.008E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[ 3184.795987][T15600] nzxt-smart2 0003:1E71:2009.008E: init_device failed: -38
[ 3185.196190][T15600] nzxt-smart2 0003:1E71:2009.008E: probe with driver nzxt-smart2 failed with error -38
[ 3185.222600][T15600] usb 3-1: USB disconnect, device number 107
[ 3185.396569][T18569] usb 4-1: USB disconnect, device number 122
[ 3185.412129][T18569] garmin_gps 4-1:1.0: device disconnected
[ 3185.924370][T19064] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 3186.156992][T19071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3186.157263][T19071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3186.195743][ T6093] net_ratelimit: 3 callbacks suppressed
[ 3186.195763][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3186.230054][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3186.253758][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14135'.
[ 3186.934853][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3186.983060][T19094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3186.991191][T19094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3187.049218][T12702] Bluetooth: hci9: Unable to find connection with handle 0x00c8
[ 3187.050076][T19094] ip_tables: iptables: counters copy to user failed while replacing table
[ 3187.099855][T19094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14139'.
[ 3187.267274][T18569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3187.326768][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3187.348167][ T8197] usb 3-1: new full-speed USB device number 108 using dummy_hcd
[ 3187.508825][ T8197] usb 3-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3187.525348][ T8197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3187.525593][ T8197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3187.526149][T19105] ip_tables: iptables: counters copy to user failed while replacing table
[ 3187.559245][T19105] ip_tables: iptables: counters copy to user failed while replacing table
[ 3187.592435][ T8197] usb 3-1: config 0 descriptor??
[ 3187.624173][ T8197] pwc: Askey VC010 type 2 USB webcam detected.
[ 3187.824140][ T8197] pwc: recv_control_msg error -32 req 02 val 2b00
[ 3187.841817][ T8197] pwc: recv_control_msg error -32 req 02 val 2700
[ 3187.842866][T19108] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3187.861631][T19108] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 3187.916906][T19108] iommufd_mock iommufd_mock2: Adding to iommu group 2
[ 3188.109661][T19112] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 3188.215710][ T9413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3188.279073][ T8197] pwc: recv_control_msg error -71 req 04 val 1000
[ 3188.283011][ T8197] pwc: recv_control_msg error -71 req 04 val 1300
[ 3188.293559][ T8197] pwc: recv_control_msg error -71 req 04 val 1400
[ 3188.308454][ T8197] pwc: recv_control_msg error -71 req 02 val 2000
[ 3188.308892][T18569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3188.309843][ T8197] pwc: recv_control_msg error -71 req 02 val 2100
[ 3188.324898][ T8197] pwc: recv_control_msg error -71 req 04 val 1500
[ 3188.339912][ T8197] pwc: recv_control_msg error -71 req 02 val 2500
[ 3188.340815][ T8197] pwc: recv_control_msg error -71 req 02 val 2400
[ 3188.347563][ T8197] pwc: recv_control_msg error -71 req 02 val 2600
[ 3188.369477][ T8197] pwc: recv_control_msg error -71 req 02 val 2900
[ 3188.382012][ T8197] pwc: recv_control_msg error -71 req 02 val 2800
[ 3188.392829][ T8197] pwc: recv_control_msg error -71 req 04 val 1100
[ 3188.401961][ T8197] pwc: recv_control_msg error -71 req 04 val 1200
[ 3188.430950][ T8197] pwc: Registered as video103.
[ 3188.448879][ T8197] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input191
[ 3188.487944][ T8197] usb 3-1: USB disconnect, device number 108
[ 3188.515724][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3188.666725][T19122] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 3189.358089][T19138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14155'.
[ 3190.094925][ T9413] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 3190.245790][ T9413] usb 7-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00
[ 3190.248833][ T9413] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3190.248867][ T9413] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 3190.262142][ T9413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3190.262171][ T9413] usb 7-1: Product: syz
[ 3190.262185][ T9413] usb 7-1: Manufacturer: syz
[ 3190.262199][ T9413] usb 7-1: SerialNumber: syz
[ 3190.330776][ T9413] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[ 3190.330922][ T9413] gspca_mr97310a: reg write [21] error -8
[ 3190.330998][ T9413] mr97310a 7-1:1.0: probe with driver mr97310a failed with error -8
[ 3190.457235][T19158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3190.460210][T19158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3190.523828][T19158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3190.540024][T19158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3190.559345][T19149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3190.576252][T19149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3190.580321][T19149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3190.580773][T19149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3190.583260][T19141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.623989][ T9413] usb 7-1: USB disconnect, device number 6
[ 3190.758527][T19140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.772588][T19140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3191.257820][ T9409] net_ratelimit: 7 callbacks suppressed
[ 3191.257840][ T9409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3191.409954][T19165] netlink: 'syz.6.14165': attribute type 6 has an invalid length.
[ 3191.425394][T18569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3191.444928][ T9413] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 3191.598508][ T9413] usb 4-1: Using ep0 maxpacket: 8
[ 3191.599849][ T9413] usb 4-1: New USB device found: idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[ 3191.620917][ T9413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3191.620936][ T9413] usb 4-1: Product: syz
[ 3191.620944][ T9413] usb 4-1: Manufacturer: syz
[ 3191.620951][ T9413] usb 4-1: SerialNumber: syz
[ 3191.651041][ T9413] usb 4-1: config 0 descriptor??
[ 3191.853422][ T9413] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[ 3191.873099][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3191.924901][ T8197] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 3191.927192][T19171] FAULT_INJECTION: forcing a failure.
[ 3191.927192][T19171] name failslab, interval 1, probability 0, space 0, times 0
[ 3191.927223][T19171] CPU: 1 UID: 0 PID: 19171 Comm: syz.6.14167 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 3191.927251][T19171] Tainted: [L]=SOFTLOCKUP
[ 3191.927259][T19171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 3191.927270][T19171] Call Trace:
[ 3191.927278][T19171]  <TASK>
[ 3191.927287][T19171]  dump_stack_lvl+0xe8/0x150
[ 3191.927322][T19171]  should_fail_ex+0x3eb/0x540
[ 3191.927349][T19171]  should_failslab+0xa8/0x100
[ 3191.927378][T19171]  __kmalloc_noprof+0xf9/0x710
[ 3191.927402][T19171]  ? tomoyo_encode+0x2ad/0x570
[ 3191.927420][T19171]  ? tomoyo_encode+0x2ad/0x570
[ 3191.927446][T19171]  tomoyo_encode+0x2ad/0x570
[ 3191.927471][T19171]  tomoyo_realpath_from_path+0x5fa/0x640
[ 3191.927501][T19171]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 3191.927528][T19171]  tomoyo_path_number_perm+0x246/0x5f0
[ 3191.927557][T19171]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3191.927581][T19171]  ? __lock_acquire+0x747/0x2de0
[ 3191.927641][T19171]  ? __fget_files+0x2a/0x420
[ 3191.927673][T19171]  ? __fget_files+0x2a/0x420
[ 3191.927695][T19171]  ? __fget_files+0x2a/0x420
[ 3191.927721][T19171]  security_file_ioctl+0xc3/0x2a0
[ 3191.927748][T19171]  __se_sys_ioctl+0x47/0x170
[ 3191.927776][T19171]  do_syscall_64+0x166/0x520
[ 3191.927797][T19171]  ? trace_irq_disable+0x3b/0x140
[ 3191.927822][T19171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3191.927841][T19171]  ? clear_bhb_loop+0x70/0xc0
[ 3191.927864][T19171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3191.927882][T19171] RIP: 0033:0x7fe8a779f559
[ 3191.927900][T19171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3191.927916][T19171] RSP: 002b:00007fe8a8626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3191.927937][T19171] RAX: ffffffffffffffda RBX: 00007fe8a7a25fa0 RCX: 00007fe8a779f559
[ 3191.927950][T19171] RDX: 0000200000000080 RSI: 0000000040107447 RDI: 0000000000000003
[ 3191.927963][T19171] RBP: 00007fe8a8626090 R08: 0000000000000000 R09: 0000000000000000
[ 3191.927975][T19171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3191.927988][T19171] R13: 00007fe8a7a26038 R14: 00007fe8a7a25fa0 R15: 00007fe8a7b4fa48
[ 3191.928019][T19171]  </TASK>
[ 3191.928059][T19171] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3192.203687][ T8197] usb 3-1: New USB device found: idVendor=6253, idProduct=0100, bcdDevice=0.00
[ 3192.216013][ T8197] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3192.216051][ T8197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3192.219000][ T8197] usb 3-1: config 0 descriptor??
[ 3192.463819][T15600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3192.761054][ T8197] input: HID 6253:0100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:6253:0100.008F/input/input193
[ 3192.855867][ T8197] twinhan 0003:6253:0100.008F: input,hidraw0: USB HID v80.00 Joystick [HID 6253:0100] on usb-dummy_hcd.2-1/input0
[ 3193.035784][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3193.495049][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3193.568756][T19199] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3193.631387][T19199] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 3193.650291][T19199] iommufd_mock iommufd_mock2: Adding to iommu group 2
[ 3193.976033][ T4183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3194.135639][  T284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3194.215340][T12191] IPVS: starting estimator thread 0...
[ 3194.295226][ T9410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3194.305118][T19208] IPVS: using max 51 ests per chain, 122400 per kthread
[ 3194.546194][T18569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3194.784326][ T4183] usb 3-1: USB disconnect, device number 109
[ 3194.800932][T19213] xt_NETMAP: bad rangesize 37.
[ 3194.957388][T19215] tipc: Enabled bearer <eth:hsr0>, priority 20
[ 3195.254223][T19220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14177'.
[ 3195.254273][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14177'.
[ 3195.254300][T19220] netlink: 'syz.2.14177': attribute type 6 has an invalid length.
[ 3195.255066][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 3195.346380][ T9413] usb write operation failed. (-71)
[ 3195.372566][ T9413] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 3195.373073][ T9413] dvbdev: DVB: registering new adapter (Terratec H7)
[ 3195.373120][ T9413] usb 4-1: media controller created
[ 3195.440071][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 3195.440090][   T30] audit: type=1326 audit(1793255911.863:23705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.1.14180" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3195.440328][   T30] audit: type=1326 audit(1793255911.863:23706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.1.14180" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3195.440532][   T30] audit: type=1326 audit(1793255911.863:23707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.1.14180" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3195.440725][   T30] audit: type=1326 audit(1793255911.863:23708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.1.14180" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3195.441061][   T30] audit: type=1326 audit(1793255911.863:23709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.1.14180" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3195.441285][   T30] audit: type=1326 audit(1793255911.863:23710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.1.14180" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3195.441537][   T30] audit: type=1326 audit(1793255911.863:23711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.1.14180" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3195.443961][   T30] audit: type=1326 audit(1793255911.863:23712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.1.14180" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3195.444441][   T30] audit: type=1326 audit(1793255911.863:23713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.1.14180" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3195.475802][   T30] audit: type=1326 audit(1793255911.903:23714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.1.14180" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3195.633201][ T9413] usb read operation failed. (-71)
[ 3195.653305][ T9413] usb write operation failed. (-71)
[ 3195.721483][ T9413] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[ 3195.742202][ T9413] usb 4-1: USB disconnect, device number 123
[ 3195.835996][T19222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14180'.
[ 3196.095443][ T9413] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 3196.139118][T19233] tipc: New replicast peer: 127.0.0.1
[ 3196.139624][T19233] tipc: Enabled bearer <udp:syz2>, priority 10
[ 3196.245378][ T9413] usb 4-1: Using ep0 maxpacket: 8
[ 3196.247491][ T9413] usb 4-1: New USB device found: idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 3196.269878][ T9413] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[ 3196.269906][ T9413] usb 4-1: config 0 has no interface number 0
[ 3196.294392][ T9413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3196.294422][ T9413] usb 4-1: Product: syz
[ 3196.294436][ T9413] usb 4-1: Manufacturer: syz
[ 3196.294451][ T9413] usb 4-1: SerialNumber: syz
[ 3196.344109][ T9413] usb 4-1: config 0 descriptor??
[ 3196.369245][ T9413] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22
[ 3196.425737][ T6089] net_ratelimit: 3 callbacks suppressed
[ 3196.425756][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3196.496082][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14183'.
[ 3196.496971][T19238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14183'.
[ 3196.656423][ T9413] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 3196.701388][T19219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3196.776856][T19219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3196.807413][T19219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3196.809620][ T9413] usb 3-1: New USB device found: idVendor=1b5c, idProduct=0105, bcdDevice=1.f1
[ 3196.810672][ T9413] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3196.810717][ T9413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 3196.810742][ T9413] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3196.879010][ T9413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3196.879036][ T9413] usb 3-1: Product: syz
[ 3196.879044][ T9413] usb 3-1: Manufacturer: syz
[ 3196.879051][ T9413] usb 3-1: SerialNumber: syz
[ 3196.908500][ T9413] usb 3-1: config 0 descriptor??
[ 3196.919761][ T9413] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[ 3196.939040][ T9413] usb 3-1: Detected SIO
[ 3196.939055][ T9413] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 4
[ 3196.942785][ T9413] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB1
[ 3197.117436][ T4183] usb 3-1: USB disconnect, device number 110
[ 3197.153304][ T4183] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1
[ 3197.168985][ T4183] ftdi_sio 3-1:0.0: device disconnected
[ 3197.687108][T19239] ip6gretap0: left promiscuous mode
[ 3197.707292][T19239] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3197.710810][T19239] 8021q: adding VLAN 0 to HW filter on device team0
[ 3197.753074][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3197.753347][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3197.753792][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3197.753955][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3197.805075][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3197.805587][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3197.805863][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3197.845865][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3197.846795][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3197.912226][T19239] veth1_vlan: left promiscuous mode
[ 3197.913694][T19239] veth0_vlan: left promiscuous mode
[ 3197.928304][T19239] veth0_vlan: entered promiscuous mode
[ 3197.934677][T19239] veth1_vlan: entered promiscuous mode
[ 3197.967385][T19239] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 3197.970566][T19239] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 3197.971876][T19239] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 3197.998562][T19239] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 3198.010499][T19239] vxlan0: left promiscuous mode
[ 3198.012125][T19239] ip6gretap0: entered promiscuous mode
[ 3198.051335][T15600] usb 4-1: USB disconnect, device number 124
[ 3198.276051][ T9409] tipc: Node number set to 3218804053
[ 3198.320420][T12191] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[ 3198.321002][T12191] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[ 3198.321275][T12191] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[ 3198.371359][T19252] IPv6: NLM_F_CREATE should be specified when creating new route
[ 3198.371479][T19252] IPv6: Can't replace route, no match found
[ 3198.418542][T12191] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[ 3198.895454][T19265] netlink: 'syz.3.14191': attribute type 1 has an invalid length.
[ 3199.076815][T18569] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 3199.235280][T18569] usb 3-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 3199.241954][T18569] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[ 3199.241982][T18569] usb 3-1: config 0 has no interface number 0
[ 3199.242038][T18569] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3199.289139][T18569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3199.289167][T18569] usb 3-1: Product: syz
[ 3199.289181][T18569] usb 3-1: Manufacturer: syz
[ 3199.289195][T18569] usb 3-1: SerialNumber: syz
[ 3199.319217][T18569] usb 3-1: config 0 descriptor??
[ 3199.332946][T18569] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[ 3199.431809][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14195'.
[ 3199.431865][T19277] IPv6: Can't replace route, no match found
[ 3199.531228][T19261] xt_hashlimit: invalid rate
[ 3199.580371][T19275] netlink: 'syz.1.14194': attribute type 6 has an invalid length.
[ 3200.205533][T18569] usb 3-1: USB disconnect, device number 111
[ 3200.234342][T18569] yurex 3-1:0.50: USB YUREX #0 now disconnected
[ 3201.170516][T19284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3201.212421][ T9413] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[ 3201.212439][ T9413] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3201.237824][T19284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3201.239185][T19283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3201.324798][ T6089] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 3201.434818][ T3861] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 3201.544844][ T3861] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 3201.744724][T18569] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 3201.765713][ T1855] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 3201.917285][T18569] usb 4-1: Using ep0 maxpacket: 8
[ 3201.921456][T18569] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 3201.921489][T18569] usb 4-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 3201.940192][ T1855] usb 7-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[ 3201.959766][T18569] usb 4-1: config 4 interface 0 has no altsetting 0
[ 3201.969149][ T1855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3201.969198][ T1855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3201.995241][T18569] usb 4-1: string descriptor 0 read error: -22
[ 3201.995338][T18569] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 3202.015221][ T1855] usb 7-1: config 0 descriptor??
[ 3202.030363][T18569] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 3202.048686][T18569] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 3202.049897][T18569] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 3202.049947][T18569] usb 4-1: media controller created
[ 3202.112189][T18569] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3202.191037][   T30] kauditd_printk_skb: 18 callbacks suppressed
[ 3202.191056][   T30] audit: type=1326 audit(1793255918.613:23733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.1.14206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3202.191417][   T30] audit: type=1326 audit(1793255918.613:23734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.1.14206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3202.256494][ T1855] usbhid 7-1:0.0: can't add hid device: -71
[ 3202.256779][ T1855] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 3202.258515][   T30] audit: type=1326 audit(1793255918.683:23735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.1.14206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3202.262276][ T1855] usb 7-1: USB disconnect, device number 7
[ 3202.270777][   T30] audit: type=1326 audit(1793255918.693:23736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.1.14206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3202.271211][   T30] audit: type=1326 audit(1793255918.693:23737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.1.14206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3202.279291][   T30] audit: type=1326 audit(1793255918.693:23738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.1.14206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3202.315248][   T30] audit: type=1326 audit(1793255918.733:23739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.1.14206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3202.356211][   T30] audit: type=1326 audit(1793255918.743:23740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.1.14206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3202.361055][   T30] audit: type=1326 audit(1793255918.783:23741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.1.14206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3202.361100][   T30] audit: type=1326 audit(1793255918.783:23742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.1.14206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb519f559 code=0x7ffc0000
[ 3202.615335][    C1] net_ratelimit: 16 callbacks suppressed
[ 3202.615351][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3202.736467][T18569] zl10353_read_register: readreg error (reg=127, ret==0)
[ 3202.826364][T19315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3202.837665][T19315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3202.855498][ T1855] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 3202.918676][T18569] usb 4-1: USB disconnect, device number 125
[ 3202.963972][T19315] bridge3: entered allmulticast mode
[ 3203.015429][ T1855] usb 7-1: New USB device found: idVendor=04d8, idProduct=f002, bcdDevice=0.00
[ 3203.036327][ T1855] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3203.036347][ T1855] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3203.036361][ T1855] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3203.036379][ T1855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3203.038209][ T1855] usb 7-1: config 0 descriptor??
[ 3203.556755][ T1855] hid-picolcd 0003:04D8:F002.0090: No report with id 0xf3 found
[ 3203.556773][ T1855] hid-picolcd 0003:04D8:F002.0090: No report with id 0xf4 found
[ 3203.676062][T19312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3203.699159][T19312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3203.733370][T19312] netlink: 'syz.6.14205': attribute type 15 has an invalid length.
[ 3203.756142][T19312] vxlan0: entered promiscuous mode
[ 3203.756165][T19312] vxlan0: entered allmulticast mode
[ 3203.777391][T12192] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 31488 - 0
[ 3203.777799][T12192] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 31488 - 0
[ 3203.777835][T12192] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 31488 - 0
[ 3203.777866][T12192] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 31488 - 0
[ 3203.777966][ T1855] usb 7-1: USB disconnect, device number 8
[ 3203.840866][T19326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3203.841016][T19326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3203.843636][T19326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3203.843796][T19326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3203.843899][T19326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3203.844054][T19326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3203.959646][T19325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3204.133294][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805402c800: rx timeout, send abort
[ 3204.492567][T19342] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 3204.525231][ T1855] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 3204.633345][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805402c800: abort rx timeout. Force session deactivation
[ 3204.636573][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805402e800: rx timeout, send abort
[ 3204.670838][ T1855] usb 4-1: device descriptor read/64, error -71
[ 3204.858436][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 3204.858471][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 3204.905898][ T1855] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 3204.911281][T19342] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14214'.
[ 3205.046726][ T1855] usb 4-1: device descriptor read/64, error -71
[ 3205.136642][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805402e800: abort rx timeout. Force session deactivation
[ 3205.168870][ T1855] usb usb4-port1: attempt power cycle
[ 3205.535810][ T1855] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 3205.573674][ T1855] usb 4-1: device descriptor read/8, error -71
[ 3205.624587][T19363] FAULT_INJECTION: forcing a failure.
[ 3205.624587][T19363] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3205.629039][T19363] CPU: 0 UID: 0 PID: 19363 Comm: syz.6.14219 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 3205.629068][T19363] Tainted: [L]=SOFTLOCKUP
[ 3205.629076][T19363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 3205.629095][T19363] Call Trace:
[ 3205.629103][T19363]  <TASK>
[ 3205.629111][T19363]  dump_stack_lvl+0xe8/0x150
[ 3205.629147][T19363]  should_fail_ex+0x3eb/0x540
[ 3205.629173][T19363]  _copy_from_user+0x2d/0xb0
[ 3205.629197][T19363]  ___sys_sendmsg+0x1c6/0x360
[ 3205.629214][T19363]  ? __lock_acquire+0x747/0x2de0
[ 3205.629242][T19363]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3205.629291][T19363]  ? __fget_files+0x3a2/0x420
[ 3205.629313][T19363]  ? __fget_files+0x2a/0x420
[ 3205.629342][T19363]  __x64_sys_sendmsg+0x1b1/0x290
[ 3205.629365][T19363]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3205.629406][T19363]  do_syscall_64+0x166/0x520
[ 3205.629425][T19363]  ? trace_irq_disable+0x3b/0x140
[ 3205.629450][T19363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3205.629469][T19363]  ? clear_bhb_loop+0x70/0xc0
[ 3205.629492][T19363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3205.629511][T19363] RIP: 0033:0x7fe8a779f559
[ 3205.629529][T19363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3205.629546][T19363] RSP: 002b:00007fe8a8626028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3205.629566][T19363] RAX: ffffffffffffffda RBX: 00007fe8a7a25fa0 RCX: 00007fe8a779f559
[ 3205.629581][T19363] RDX: 0000000000000840 RSI: 0000200000000500 RDI: 0000000000000003
[ 3205.629593][T19363] RBP: 00007fe8a8626090 R08: 0000000000000000 R09: 0000000000000000
[ 3205.629603][T19363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3205.629614][T19363] R13: 00007fe8a7a26038 R14: 00007fe8a7a25fa0 R15: 00007fe8a7b4fa48
[ 3205.629645][T19363]  </TASK>
[ 3205.839099][ T1855] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 3205.860397][ T1855] usb 4-1: device descriptor read/8, error -71
[ 3205.978211][ T1855] usb usb4-port1: unable to enumerate USB device
[ 3206.135244][ T1855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3207.262464][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3207.330595][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3207.371320][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3208.065363][ T4183] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 3208.153711][T19407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3208.153984][T19407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3208.215055][ T4183] usb 7-1: Using ep0 maxpacket: 32
[ 3208.216242][ T4183] usb 7-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 3208.240308][ T4183] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 3208.240325][ T4183] usb 7-1: config 0 has no interface number 0
[ 3208.271259][ T4183] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3208.271278][ T4183] usb 7-1: Product: syz
[ 3208.271285][ T4183] usb 7-1: Manufacturer: syz
[ 3208.271293][ T4183] usb 7-1: SerialNumber: syz
[ 3208.305311][ T4183] usb 7-1: config 0 descriptor??
[ 3208.330807][ T4183] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 3208.330825][ T4183] usb 7-1: selecting invalid altsetting 1
[ 3208.330833][ T4183] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 3208.423155][ T4183] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 3208.423562][ T4183] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 3208.423625][ T4183] usb 7-1: media controller created
[ 3208.502371][ T4183] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3209.541325][T19424] netlink: 196 bytes leftover after parsing attributes in process `syz.1.14233'.
[ 3209.817704][ T4183] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 3209.817759][ T4183] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 3210.047265][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14236'.
[ 3210.348732][T19429] netlink: 'syz.3.14235': attribute type 6 has an invalid length.
[ 3210.628746][T19442] syzkaller0: entered promiscuous mode
[ 3210.628762][T19442] syzkaller0: entered allmulticast mode
[ 3210.658337][T19426] tipc: Enabled bearer <eth:team_slave_0>, priority 10
[ 3210.756357][ T4183] usb 7-1: USB disconnect, device number 9
[ 3211.057328][T19447] net_ratelimit: 2 callbacks suppressed
[ 3211.057348][T19447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3211.057512][T19447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3211.057635][T19447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3211.101193][T19447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3211.101298][T19447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3211.107696][T19447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3211.107958][T19447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3211.108142][T19447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3211.108320][T19447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3211.108468][T19447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3211.309844][T19451] xt_hashlimit: size too large, truncated to 1048576
[ 3211.518354][T19460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3211.518638][T19460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3211.544812][ T4183] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 3211.604306][T19459] netlink: 'syz.7.14247': attribute type 6 has an invalid length.
[ 3211.696166][ T4183] usb 3-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 3211.698001][ T4183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3211.700620][ T4183] usb 3-1: config 0 descriptor??
[ 3211.731652][ T4183] cp210x 3-1:0.0: cp210x converter detected
[ 3212.273247][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14250'.
[ 3212.797700][T19473] netlink: 'syz.1.14251': attribute type 6 has an invalid length.
[ 3212.847447][T19484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14252'.
[ 3212.870510][ T4183] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 3213.164913][ T1855] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[ 3213.328995][ T1855] usb 4-1: New USB device found: idVendor=0409, idProduct=0063, bcdDevice=28.16
[ 3213.330430][ T1855] usb 4-1: config 7 has an invalid interface number: 105 but max is 0
[ 3213.330456][ T1855] usb 4-1: config 7 has no interface number 0
[ 3213.330483][ T1855] usb 4-1: config 7 interface 105 has no altsetting 0
[ 3213.367169][ T9409] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 3213.373506][ T1855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3213.373532][ T1855] usb 4-1: Product: syz
[ 3213.373545][ T1855] usb 4-1: Manufacturer: syz
[ 3213.373558][ T1855] usb 4-1: SerialNumber: syz
[ 3213.496637][T19490] netlink: 80 bytes leftover after parsing attributes in process `syz.1.14255'.
[ 3213.503501][T19490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14255'.
[ 3213.524550][ T9409] usb 7-1: Using ep0 maxpacket: 8
[ 3213.531035][ T9409] usb 7-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 3213.533005][ T9409] usb 7-1: config index 0 descriptor too short (expected 6427, got 27)
[ 3213.533030][ T9409] usb 7-1: config 0 has an invalid interface number: 21 but max is 0
[ 3213.533075][ T9409] usb 7-1: config 0 has no interface number 0
[ 3213.533113][ T9409] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3213.533137][ T9409] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3213.533162][ T9409] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 3213.563738][ T9409] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[ 3213.563764][ T9409] usb 7-1: Product: syz
[ 3213.620537][ T9409] usb 7-1: config 0 descriptor??
[ 3213.683115][ T1855] upd78f0730 4-1:7.105: upd78f0730 converter detected
[ 3213.708026][ T1855] usb 4-1: upd78f0730 converter now attached to ttyUSB1
[ 3213.731871][ T1855] usb 4-1: USB disconnect, device number 4
[ 3213.792371][ T1855] upd78f0730 ttyUSB1: upd78f0730 converter now disconnected from ttyUSB1
[ 3213.792902][ T1855] upd78f0730 4-1:7.105: device disconnected
[ 3214.330472][ T9409] usb 7-1: USB disconnect, device number 10
[ 3214.711581][ T4183] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71
[ 3214.711601][ T4183] cp210x 3-1:0.0: GPIO initialisation failed: -71
[ 3214.743812][ T4183] usb 3-1: cp210x converter now attached to ttyUSB1
[ 3214.781767][ T4183] usb 3-1: USB disconnect, device number 112
[ 3214.816314][ T4183] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[ 3214.816694][ T4183] cp210x 3-1:0.0: device disconnected
[ 3215.275348][ T4183] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 3215.425782][ T4183] usb 3-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 3215.435085][ T4183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3215.463471][ T4183] usb 3-1: config 0 descriptor??
[ 3215.488200][ T4183] cp210x 3-1:0.0: cp210x converter detected
[ 3215.805243][ T9413] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 3215.955860][ T9413] usb 7-1: Using ep0 maxpacket: 8
[ 3215.957448][ T9413] usb 7-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 3215.995431][ T9413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3215.995456][ T9413] usb 7-1: Product: syz
[ 3215.995491][ T9413] usb 7-1: Manufacturer: syz
[ 3215.995503][ T9413] usb 7-1: SerialNumber: syz
[ 3216.034016][ T9413] usb 7-1: config 0 descriptor??
[ 3216.254129][ T9413] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 3216.616540][ T4183] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 3216.738146][T19505] netlink: 'syz.6.14260': attribute type 15 has an invalid length.
[ 3216.738172][T19505] netlink: 'syz.6.14260': attribute type 7 has an invalid length.
[ 3216.738185][T19505] netlink: 52 bytes leftover after parsing attributes in process `syz.6.14260'.
[ 3216.773844][ T9413] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 3216.788414][ T9413] usb 7-1: USB disconnect, device number 11
[ 3216.802552][ T8208] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 3216.955582][ T8208] usb 4-1: Using ep0 maxpacket: 16
[ 3216.956350][ T8208] usb 4-1: New USB device found: idVendor=041e, idProduct=2801, bcdDevice=0.00
[ 3216.958649][ T8208] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3216.958678][ T8208] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3216.958722][ T8208] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3216.958745][ T8208] usb 4-1: config 0 interface 0 has no altsetting 0
[ 3216.958776][ T8208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3217.017201][ T9409] net_ratelimit: 5 callbacks suppressed
[ 3217.017213][ T9409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3217.025642][ T8208] usb 4-1: config 0 descriptor??
[ 3217.156043][   T30] kauditd_printk_skb: 159 callbacks suppressed
[ 3217.156062][   T30] audit: type=1804 audit(1793255933.583:23902): pid=19520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.14263" name="/newroot/480/file1" dev="tmpfs" ino=2524 res=1 errno=0
[ 3217.500863][ T8208] prodikeys 0003:041E:2801.0091: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0
[ 3217.763551][ T1855] usb 4-1: USB disconnect, device number 5
[ 3218.085304][T19533] sg_write: data in/out 544768/136 bytes for SCSI command 0x0-- guessing data in;
[ 3218.085304][T19533]    program syz.1.14267 not setting count and/or reply_len properly
[ 3218.546400][T19538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14269'.
[ 3218.598374][T19538] veth1_to_team: entered promiscuous mode
[ 3218.624484][T19538] veth1_to_team: left promiscuous mode
[ 3218.957179][ T4183] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71
[ 3218.957199][ T4183] cp210x 3-1:0.0: GPIO initialisation failed: -71
[ 3218.965352][ T4183] usb 3-1: cp210x converter now attached to ttyUSB1
[ 3219.000939][ T4183] usb 3-1: USB disconnect, device number 113
[ 3219.019512][ T4183] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[ 3219.022700][ T4183] cp210x 3-1:0.0: device disconnected
[ 3219.098456][T19542] syzkaller0: entered promiscuous mode
[ 3219.098478][T19542] syzkaller0: entered allmulticast mode
[ 3219.123620][T19542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3219.153774][T19541] tipc: Resetting bearer <eth:syzkaller0>
[ 3219.222495][T19541] tipc: Disabling bearer <eth:syzkaller0>
[ 3219.558472][T19552] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 3220.015163][ T4183] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 3220.057767][T19547] could not allocate digest TFM handle sha256-avx
[ 3220.145101][ T4183] usb 3-1: device descriptor read/64, error -71
[ 3220.216150][ T1855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3220.385512][ T4183] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 3220.517307][ T4183] usb 3-1: device descriptor read/64, error -71
[ 3220.625117][ T4183] usb usb3-port1: attempt power cycle
[ 3220.942407][T19568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3220.942702][T19568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3220.967226][ T4183] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 3220.985695][ T4183] usb 3-1: device descriptor read/8, error -71
[ 3221.089687][T19572] FAULT_INJECTION: forcing a failure.
[ 3221.089687][T19572] name fail_futex, interval 1, probability 0, space 0, times 0
[ 3221.089708][T19572] CPU: 0 UID: 0 PID: 19572 Comm: syz.7.14281 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 3221.089723][T19572] Tainted: [L]=SOFTLOCKUP
[ 3221.089728][T19572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 3221.089735][T19572] Call Trace:
[ 3221.089739][T19572]  <TASK>
[ 3221.089744][T19572]  dump_stack_lvl+0xe8/0x150
[ 3221.089766][T19572]  should_fail_ex+0x3eb/0x540
[ 3221.089782][T19572]  get_futex_key+0x893/0x1410
[ 3221.089804][T19572]  ? __pfx_get_futex_key+0x10/0x10
[ 3221.089818][T19572]  ? kstrtouint+0x6e/0xe0
[ 3221.089838][T19572]  futex_wake_op+0x15c/0xdc0
[ 3221.089855][T19572]  ? get_pid_task+0x20/0x1f0
[ 3221.089866][T19572]  ? get_pid_task+0x20/0x1f0
[ 3221.089879][T19572]  ? __pfx_futex_wake_op+0x10/0x10
[ 3221.089906][T19572]  do_futex+0x480/0x4e0
[ 3221.089928][T19572]  ? __pfx_do_futex+0x10/0x10
[ 3221.089944][T19572]  ? __fget_files+0x3a2/0x420
[ 3221.089966][T19572]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3221.089995][T19572]  __se_sys_futex+0x3a8/0x450
[ 3221.090010][T19572]  ? ksys_write+0x242/0x270
[ 3221.090022][T19572]  ? __pfx___se_sys_futex+0x10/0x10
[ 3221.090033][T19572]  ? __pfx_ksys_write+0x10/0x10
[ 3221.090048][T19572]  ? __x64_sys_futex+0x21/0xf0
[ 3221.090062][T19572]  do_syscall_64+0x166/0x520
[ 3221.090074][T19572]  ? trace_irq_disable+0x3b/0x140
[ 3221.090088][T19572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3221.090099][T19572]  ? clear_bhb_loop+0x70/0xc0
[ 3221.090112][T19572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3221.090122][T19572] RIP: 0033:0x7f58fff9f559
[ 3221.090133][T19572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3221.090142][T19572] RSP: 002b:00007f5900e96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 3221.090154][T19572] RAX: ffffffffffffffda RBX: 00007f5900226090 RCX: 00007f58fff9f559
[ 3221.090161][T19572] RDX: 0000000080000008 RSI: 0000000000000005 RDI: 00002000000003c0
[ 3221.090168][T19572] RBP: 00007f5900e96090 R08: 0000200000000000 R09: 0000000005000000
[ 3221.090175][T19572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3221.090182][T19572] R13: 00007f5900226128 R14: 00007f5900226090 R15: 00007f590034fa48
[ 3221.090198][T19572]  </TASK>
[ 3221.320877][ T4183] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 3221.366191][ T4183] usb 3-1: device descriptor read/8, error -71
[ 3221.475240][ T4183] usb usb3-port1: unable to enumerate USB device
[ 3221.739166][ T9413] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 3221.887769][ T9413] usb 7-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 3221.910290][ T9413] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3221.933250][ T9413] usb 7-1: config 0 descriptor??
[ 3222.303234][ T9413] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 3222.630766][T19589] ip_tables: iptables: counters copy to user failed while replacing table
[ 3222.679628][ T9413] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1
[ 3222.679645][ T9413] [drm] Initialized udl on minor 1
[ 3223.529258][T19599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3223.529558][T19599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3223.977494][ T4183] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 3224.105597][ T4183] usb 4-1: device descriptor read/64, error -71
[ 3224.345049][ T4183] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 3224.398987][T19606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3224.400424][T19606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3224.403759][T19606] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14293'.
[ 3224.485000][ T4183] usb 4-1: device descriptor read/64, error -71
[ 3224.596489][ T4183] usb usb4-port1: attempt power cycle
[ 3224.934844][ T4183] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 3224.955436][ T4183] usb 4-1: device descriptor read/8, error -71
[ 3224.987070][ T8208] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 3225.135621][ T8208] usb 3-1: Using ep0 maxpacket: 16
[ 3225.136542][ T8208] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[ 3225.138139][ T8208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3225.138199][ T8208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3225.138389][ T8208] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 3225.138428][ T8208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3225.141546][ T8208] usb 3-1: config 0 descriptor??
[ 3225.213762][ T4183] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 3225.227321][ T4183] usb 4-1: device descriptor read/8, error -71
[ 3225.343841][ T4183] usb usb4-port1: unable to enumerate USB device
[ 3225.388243][T19624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3225.388681][T19624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3225.583621][T19627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3225.592309][T19627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3225.593306][T19627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3225.596609][T19627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3225.988068][ T1855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3226.509095][ T8208] usbhid 3-1:0.0: can't add hid device: -71
[ 3226.509228][ T8208] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 3226.536100][ T8208] usb 3-1: USB disconnect, device number 118
[ 3226.618179][ T9409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3227.258213][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3227.427493][T12702] Bluetooth: hci3: command 0x0406 tx timeout
[ 3227.928160][ T9413] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffff92
[ 3227.928445][ T9413] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[ 3227.936323][ T9413] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[ 3227.938406][ T9413] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[ 3227.938538][ T9413] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[ 3227.988089][ T8208] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 3228.036041][ T1855] usb 7-1: USB disconnect, device number 12
[ 3228.144913][ T8208] usb 3-1: Using ep0 maxpacket: 32
[ 3228.146018][ T8208] usb 3-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 3228.149949][ T8208] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 3228.149973][ T8208] usb 3-1: config 0 has no interface number 0
[ 3228.194463][ T8208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3228.194486][ T8208] usb 3-1: Product: syz
[ 3228.194494][ T8208] usb 3-1: Manufacturer: syz
[ 3228.194502][ T8208] usb 3-1: SerialNumber: syz
[ 3228.219575][ T8208] usb 3-1: config 0 descriptor??
[ 3228.237617][ T8208] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 3228.237645][ T8208] usb 3-1: selecting invalid altsetting 1
[ 3228.237660][ T8208] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 3228.279664][ T8208] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 3228.279995][ T8208] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 3228.280039][ T8208] usb 3-1: media controller created
[ 3228.317750][ T8208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3229.097897][T19660] input: syz0 as /devices/virtual/input/input195
[ 3229.098834][ T4183] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 3229.176180][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3229.416275][ T8208] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 3229.417961][ T8208] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 3229.539518][   T30] audit: type=1326 audit(1793255945.963:23903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19666 comm="syz.6.14309" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a779f559 code=0x7ffc0000
[ 3229.539550][   T30] audit: type=1326 audit(1793255945.963:23904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19666 comm="syz.6.14309" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a779f559 code=0x7ffc0000
[ 3229.542731][   T30] audit: type=1326 audit(1793255945.963:23905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19666 comm="syz.6.14309" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8a779f559 code=0x7ffc0000
[ 3229.542778][   T30] audit: type=1326 audit(1793255945.963:23906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19666 comm="syz.6.14309" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a779f559 code=0x7ffc0000
[ 3229.551030][   T30] audit: type=1326 audit(1793255945.963:23907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19666 comm="syz.6.14309" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8a779f559 code=0x7ffc0000
[ 3229.673426][T19668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14308'.
[ 3229.693058][   T30] audit: type=1326 audit(1793255946.113:23908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19666 comm="syz.6.14309" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a779f559 code=0x7ffc0000
[ 3229.693376][   T30] audit: type=1326 audit(1793255946.113:23909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19666 comm="syz.6.14309" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a779f559 code=0x7ffc0000
[ 3229.696889][   T30] audit: type=1326 audit(1793255946.123:23910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19666 comm="syz.6.14309" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8a779f559 code=0x7ffc0000
[ 3229.699947][   T30] audit: type=1326 audit(1793255946.123:23911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19666 comm="syz.6.14309" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a779f559 code=0x7ffc0000
[ 3229.704242][   T30] audit: type=1326 audit(1793255946.123:23912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19666 comm="syz.6.14309" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a779f559 code=0x7ffc0000
[ 3230.145565][ T1855] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 3230.163525][ T8208] usb 3-1: USB disconnect, device number 119
[ 3230.298437][ T1855] usb 7-1: Using ep0 maxpacket: 16
[ 3230.320363][ T1855] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 3230.320484][ T1855] usb 7-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40
[ 3230.370919][ T1855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3230.370946][ T1855] usb 7-1: Product: syz
[ 3230.370962][ T1855] usb 7-1: Manufacturer: syz
[ 3230.370976][ T1855] usb 7-1: SerialNumber: syz
[ 3230.553065][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14315'.
[ 3230.645283][ T1855] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 3230.803347][ T1855] usb 7-1: USB disconnect, device number 13
[ 3231.025251][T18569] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 3231.187593][T18569] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41
[ 3231.198296][T18569] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3231.236978][T18569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 3231.236995][T18569] usb 4-1: Product: syz
[ 3231.237003][T18569] usb 4-1: Manufacturer: syz
[ 3231.237011][T18569] usb 4-1: SerialNumber: syz
[ 3231.415387][T15298] Bluetooth: hci9: command 0x0406 tx timeout
[ 3231.417999][ T4183] Bluetooth: hci9: Opcode 0x0c1a failed: -110
[ 3231.418015][ T4183] Bluetooth: hci9: Error when powering off device on rfkill (-110)
[ 3231.528902][T18569] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 3231.600848][T18569] usb 4-1: USB disconnect, device number 10
[ 3231.615484][T18569] usblp0: removed
[ 3232.004863][T18569] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 3232.175147][T18569] usb 4-1: Using ep0 maxpacket: 16
[ 3232.175914][T18569] usb 4-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=2.00
[ 3232.177404][T18569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3232.208664][T18569] usb 4-1: config 0 descriptor??
[ 3232.217798][T18569] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[ 3232.415247][T18569] usb 4-1: Detected FT232A
[ 3232.417032][T18569] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1
[ 3232.441139][T18569] usb 4-1: USB disconnect, device number 11
[ 3232.459295][T18569] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1
[ 3232.475822][T18569] ftdi_sio 4-1:0.0: device disconnected
[ 3233.448982][T19712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3233.449278][T19712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3233.624806][ T9413] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 3233.684750][T18569] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 3233.777732][ T9413] usb 7-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00
[ 3233.779525][ T9413] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 3233.779554][ T9413] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 3233.782972][ T9413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3233.782996][ T9413] usb 7-1: Product: syz
[ 3233.783009][ T9413] usb 7-1: Manufacturer: syz
[ 3233.783023][ T9413] usb 7-1: SerialNumber: syz
[ 3233.842317][T19711] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 3233.842398][T19711] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 3233.975189][T15298] Bluetooth: hci0: command 0x0406 tx timeout
[ 3233.975402][ T4183] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 3233.975419][ T4183] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[ 3233.995132][T18569] usb 4-1: New USB device found: idVendor=090a, idProduct=1200, bcdDevice=24.87
[ 3234.003854][T18569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3234.035454][T19721] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 3234.036985][T18569] usb 4-1: config 0 descriptor??
[ 3234.049011][T18569] usb-storage 4-1:0.0: USB Mass Storage device detected
[ 3234.070831][T19714] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 3234.103742][T19711] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 3234.103820][T19711] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 3234.200403][T19716] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 3234.311752][ T1855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3234.457606][ T9413] zaurus 7-1:1.0 usb0: register 'zaurus' at usb-dummy_hcd.6-1, pseudo-MDLM (BLAN) device, 32:05:7d:15:a5:29
[ 3234.501491][T18569] usb 4-1: USB disconnect, device number 12
[ 3234.892181][T19731] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14326'.
[ 3235.208155][T19734] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 3235.212925][T19734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3235.820434][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14331'.
[ 3235.962770][T19742] netlink: 'syz.3.14331': attribute type 10 has an invalid length.
[ 3236.242304][ T9413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3236.453053][T19753] netlink: 60 bytes leftover after parsing attributes in process `syz.7.14334'.
[ 3236.508703][   T30] kauditd_printk_skb: 90 callbacks suppressed
[ 3236.508725][   T30] audit: type=1326 audit(1793255952.903:24003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19752 comm="syz.7.14334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58fff9f559 code=0x0
[ 3236.777203][T15298] Bluetooth: hci2: command 0x0406 tx timeout
[ 3236.777656][ T4183] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[ 3236.777675][ T4183] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[ 3237.036648][ T1855] usb 7-1: USB disconnect, device number 14
[ 3237.054586][ T1855] zaurus 7-1:1.0 usb0: unregister 'zaurus' usb-dummy_hcd.6-1, pseudo-MDLM (BLAN) device
[ 3237.456824][T19772] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14340'.
[ 3238.032955][T19779] netlink: 64 bytes leftover after parsing attributes in process `syz.7.14343'.
[ 3238.082672][T19780] syzkaller1: entered promiscuous mode
[ 3238.082696][T19780] syzkaller1: entered allmulticast mode
[ 3238.300074][T19783] netlink: 'syz.6.14344': attribute type 6 has an invalid length.
[ 3238.856206][ T4183] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[ 3238.856223][ T4183] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[ 3238.864849][    C0] ------------[ cut here ]------------
[ 3238.864864][    C0] workqueue: cannot queue hci_cmd_timeout on wq hci4
[ 3238.864902][    C0] WARNING: kernel/workqueue.c:2437 at __queue_work+0xdfc/0x1360, CPU#0: swapper/0/0
[ 3238.900393][    C0] Modules linked in:
[ 3238.904312][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 3238.914920][    C0] Tainted: [L]=SOFTLOCKUP
[ 3238.919255][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 3238.929319][    C0] RIP: 0010:__queue_work+0xe1a/0x1360
[ 3238.934722][    C0] Code: 28 78 01 00 00 4c 8d 35 64 51 11 10 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 b2 f3 b0 00 49 8b 77 18 4c 89 f7 48 8b 54 24 28 <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8
[ 3238.954344][    C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010046
[ 3238.960434][    C0] RAX: 1ffff1101009294e RBX: dffffc0000000000 RCX: ffffffff8fc8efc0
[ 3238.968427][    C0] RDX: ffff88804ebb8978 RSI: ffffffff8af08c20 RDI: ffffffff91a04590
[ 3238.976531][    C0] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff233adf7
[ 3238.984554][    C0] R10: dffffc0000000000 R11: ffffffff818efd60 R12: ffff88804ebb89c0
[ 3238.992552][    C0] R13: 0000000000000008 R14: ffffffff91a04590 R15: ffff888080494a58
[ 3239.000544][    C0] FS:  0000000000000000(0000) GS:ffff888123620000(0000) knlGS:0000000000000000
[ 3239.009493][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3239.016094][    C0] CR2: 00007fe8a77ecc40 CR3: 0000000053e88000 CR4: 00000000003526f0
[ 3239.024113][    C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[ 3239.032106][    C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 3239.040097][    C0] Call Trace:
[ 3239.043474][    C0]  <IRQ>
[ 3239.046337][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3239.051738][    C0]  call_timer_fn+0x18d/0x5f0
[ 3239.056346][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 3239.062186][    C0]  ? call_timer_fn+0xd5/0x5f0
[ 3239.066885][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 3239.072035][    C0]  ? do_raw_spin_unlock+0xf5/0x200
[ 3239.077167][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 3239.083014][    C0]  __run_timer_base+0x67e/0x8b0
[ 3239.087925][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 3239.093347][    C0]  run_timer_softirq+0xb7/0x170
[ 3239.098228][    C0]  handle_softirqs+0x265/0x8d0
[ 3239.103040][    C0]  __irq_exit_rcu+0xc6/0x220
[ 3239.107663][    C0]  irq_exit_rcu+0x9/0x30
[ 3239.111933][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 3239.117605][    C0]  </IRQ>
[ 3239.120553][    C0]  <TASK>
[ 3239.123498][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3239.129502][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 3239.135162][    C0] Code: 1b 95 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3a 27 00 fb f4 <e9> 3c 17 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 3239.154789][    C0] RSP: 0018:ffffffff8fc07ca0 EFLAGS: 00000242
[ 3239.160881][    C0] RAX: 00000000039aeb97 RBX: ffffffff819ca4d0 RCX: 8000000000000001
[ 3239.168871][    C0] RDX: 0000000000000001 RSI: ffffffff8e6a2302 RDI: ffffffff8c8e8c80
[ 3239.176866][    C0] RBP: ffffffff8fc07d78 R08: ffff8880b8233d9b R09: 1ffff110170467b3
[ 3239.184860][    C0] R10: dffffc0000000000 R11: ffffed10170467b4 R12: 0000000000000000
[ 3239.192852][    C0] R13: 1ffffffff1f91df8 R14: 1ffffffff1f80f9c R15: dffffc0000000000
[ 3239.200852][    C0]  ? do_idle+0x2e0/0x540
[ 3239.205137][    C0]  default_idle+0x9/0x20
[ 3239.209405][    C0]  default_idle_call+0x72/0xb0
[ 3239.214199][    C0]  do_idle+0x2e0/0x540
[ 3239.218467][    C0]  ? __pfx_do_idle+0x10/0x10
[ 3239.223093][    C0]  ? do_idle+0x4d4/0x540
[ 3239.227370][    C0]  cpu_startup_entry+0x43/0x60
[ 3239.232161][    C0]  rest_init+0x378/0x3a0
[ 3239.236436][    C0]  ? __pfx_rest_init+0x10/0x10
[ 3239.241232][    C0]  ? __pfx_kernel_init+0x10/0x10
[ 3239.246200][    C0]  ? __pfx_acpi_hw_get_mode+0x10/0x10
[ 3239.251651][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[ 3239.256965][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[ 3239.262293][    C0]  ? acpi_enable_subsystem+0x286/0x3c0
[ 3239.267886][    C0]  start_kernel+0x392/0x3e0
[ 3239.272589][    C0]  x86_64_start_reservations+0x24/0x30
[ 3239.278148][    C0]  x86_64_start_kernel+0x137/0x1b0
[ 3239.283293][    C0]  common_startup_64+0x13e/0x157
[ 3239.288279][    C0]  </TASK>
[ 3239.291332][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 3239.298631][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 3239.309414][    C0] Tainted: [L]=SOFTLOCKUP
[ 3239.313753][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 3239.323826][    C0] Call Trace:
[ 3239.327190][    C0]  <IRQ>
[ 3239.330054][    C0]  vpanic+0x26f/0x710
[ 3239.334062][    C0]  panic+0xc5/0xd0
[ 3239.337815][    C0]  ? __pfx_panic+0x10/0x10
[ 3239.342267][    C0]  ? common_startup_64+0x13e/0x157
[ 3239.347416][    C0]  __warn+0x315/0x4c0
[ 3239.351420][    C0]  ? __queue_work+0xdfc/0x1360
[ 3239.356217][    C0]  ? __queue_work+0xdfc/0x1360
[ 3239.361025][    C0]  __report_bug+0x276/0x570
[ 3239.365564][    C0]  ? __lock_acquire+0x747/0x2de0
[ 3239.370541][    C0]  ? __queue_work+0xdfc/0x1360
[ 3239.375345][    C0]  ? __pfx___report_bug+0x10/0x10
[ 3239.380397][    C0]  ? rest_init+0x378/0x3a0
[ 3239.384844][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[ 3239.390167][    C0]  ? look_up_lock_class+0x57/0x110
[ 3239.395307][    C0]  ? register_lock_class+0x31/0x2e0
[ 3239.400539][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[ 3239.405596][    C0]  report_bug_entry+0x19b/0x290
[ 3239.410484][    C0]  ? __queue_work+0xe1a/0x1360
[ 3239.415279][    C0]  ? __queue_work+0xe1f/0x1360
[ 3239.420081][    C0]  handle_bug+0xce/0x200
[ 3239.424357][    C0]  exc_invalid_op+0x1a/0x50
[ 3239.428892][    C0]  asm_exc_invalid_op+0x1a/0x20
[ 3239.433773][    C0] RIP: 0010:__queue_work+0xe1a/0x1360
[ 3239.439190][    C0] Code: 28 78 01 00 00 4c 8d 35 64 51 11 10 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 b2 f3 b0 00 49 8b 77 18 4c 89 f7 48 8b 54 24 28 <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8
[ 3239.458815][    C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010046
[ 3239.464959][    C0] RAX: 1ffff1101009294e RBX: dffffc0000000000 RCX: ffffffff8fc8efc0
[ 3239.472956][    C0] RDX: ffff88804ebb8978 RSI: ffffffff8af08c20 RDI: ffffffff91a04590
[ 3239.480963][    C0] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff233adf7
[ 3239.488965][    C0] R10: dffffc0000000000 R11: ffffffff818efd60 R12: ffff88804ebb89c0
[ 3239.496970][    C0] R13: 0000000000000008 R14: ffffffff91a04590 R15: ffff888080494a58
[ 3239.504981][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 3239.510837][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[ 3239.516165][    C0]  ? __queue_work+0xdcf/0x1360
[ 3239.520974][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3239.526386][    C0]  call_timer_fn+0x18d/0x5f0
[ 3239.531003][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 3239.536846][    C0]  ? call_timer_fn+0xd5/0x5f0
[ 3239.541550][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 3239.546706][    C0]  ? do_raw_spin_unlock+0xf5/0x200
[ 3239.551845][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 3239.557688][    C0]  __run_timer_base+0x67e/0x8b0
[ 3239.562600][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 3239.568026][    C0]  run_timer_softirq+0xb7/0x170
[ 3239.572916][    C0]  handle_softirqs+0x265/0x8d0
[ 3239.577738][    C0]  __irq_exit_rcu+0xc6/0x220
[ 3239.582370][    C0]  irq_exit_rcu+0x9/0x30
[ 3239.586664][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 3239.592341][    C0]  </IRQ>
[ 3239.595291][    C0]  <TASK>
[ 3239.598237][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3239.604242][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 3239.609899][    C0] Code: 1b 95 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3a 27 00 fb f4 <e9> 3c 17 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 3239.629529][    C0] RSP: 0018:ffffffff8fc07ca0 EFLAGS: 00000242
[ 3239.635628][    C0] RAX: 00000000039aeb97 RBX: ffffffff819ca4d0 RCX: 8000000000000001
[ 3239.643623][    C0] RDX: 0000000000000001 RSI: ffffffff8e6a2302 RDI: ffffffff8c8e8c80
[ 3239.651617][    C0] RBP: ffffffff8fc07d78 R08: ffff8880b8233d9b R09: 1ffff110170467b3
[ 3239.659612][    C0] R10: dffffc0000000000 R11: ffffed10170467b4 R12: 0000000000000000
[ 3239.667610][    C0] R13: 1ffffffff1f91df8 R14: 1ffffffff1f80f9c R15: dffffc0000000000
[ 3239.675606][    C0]  ? do_idle+0x2e0/0x540
[ 3239.679895][    C0]  default_idle+0x9/0x20
[ 3239.684164][    C0]  default_idle_call+0x72/0xb0
[ 3239.688955][    C0]  do_idle+0x2e0/0x540
[ 3239.693051][    C0]  ? __pfx_do_idle+0x10/0x10
[ 3239.697675][    C0]  ? do_idle+0x4d4/0x540
[ 3239.701946][    C0]  cpu_startup_entry+0x43/0x60
[ 3239.706734][    C0]  rest_init+0x378/0x3a0
[ 3239.711006][    C0]  ? __pfx_rest_init+0x10/0x10
[ 3239.715804][    C0]  ? __pfx_kernel_init+0x10/0x10
[ 3239.720768][    C0]  ? __pfx_acpi_hw_get_mode+0x10/0x10
[ 3239.726168][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[ 3239.731489][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[ 3239.736815][    C0]  ? acpi_enable_subsystem+0x286/0x3c0
[ 3239.742299][    C0]  start_kernel+0x392/0x3e0
[ 3239.746831][    C0]  x86_64_start_reservations+0x24/0x30
[ 3239.752331][    C0]  x86_64_start_kernel+0x137/0x1b0
[ 3239.757488][    C0]  common_startup_64+0x13e/0x157
[ 3239.762476][    C0]  </TASK>
[ 3239.765789][    C0] Kernel Offset: disabled
[ 3239.770126][    C0] Rebooting in 86400 seconds..