last executing test programs:

22m57.849061602s ago: executing program 3 (id=105):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (fail_nth: 7)

22m57.642196946s ago: executing program 3 (id=106):
r0 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='sourCe', &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x0) (fail_nth: 1)

22m57.470247436s ago: executing program 3 (id=109):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={<r1=>0x0, 0x1}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x0, 0x7, 0x6, r1}, &(0x7f00000000c0)=0x10) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) (async)
bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0xfffffffd}}, 0x10) (async)
bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) (async)
sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122)
fcntl$notify(r4, 0x402, 0x8000003d) (async)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010007000009058dff86"], 0x0) (async)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r5, &(0x7f0000000ac0)=[{&(0x7f0000000400)=""/123, 0x7b}, {0x0}], 0x2, 0xab65, 0x80000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
syz_usb_connect$uac1(0x3, 0xa1, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x81, 0x80, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0xaa}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0xc, 'B'}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x206, 0x4, 0xf, 0xffff, 0x8, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xf, 0x1, 0x1, 0x1, "aad104"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x1, 0x3, "d3d004"}, @as_header={0x7, 0x24, 0x1, 0x5, 0xd0, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x9, 0x9, {0x7, 0x25, 0x1, 0x82, 0xd, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x80, 0x4, {0x7, 0x25, 0x1, 0x3, 0xc, 0x1}}}}}}}]}}, 0x0)

22m55.427316775s ago: executing program 3 (id=117):
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00')
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = socket(0x10, 0x3, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0xc00)
ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000340)={0x1, 0x100, 0xffff, 0x4, 0xc, 0x3a2e, 0x17e, 0x1, 0x9, 0xddc, 0xd1d2, 0x0, 0xeb, 0xfffffff7})
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={<r6=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4f24, 0x0, @empty, 0xf}, r6}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r6, 0x9dffffff}}, 0x48)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000100)={0x3, 0x5, 0x1, 0xd, 0x6, 0x8, 0x100})
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x4008}, 0x18)
write$sequencer(r2, &(0x7f00000003c0)=[@x={0x94, 0xd, "464931d3c690"}, @x={0x94, 0x3, "3ba7d7d6b7ce"}, @n={0xfc5084813998afe8, 0x3, @SEQ_NOTEON=@special, 0x3}, @echo=0x3, @raw={0xfe, 0x3, "9907807e50c6"}], 0x20)
r8 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r7], 0x48)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)={0x10000001})
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000000)='hpfs\x00', 0x1)

22m55.089573565s ago: executing program 3 (id=119):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mlock(&(0x7f0000fed000/0x11000)=nil, 0x11000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x24, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x985}]}, 0x38}}, 0x0)

22m54.820263269s ago: executing program 3 (id=122):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000200)={0x8, 0x30, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0)

22m54.11066158s ago: executing program 32 (id=122):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000200)={0x8, 0x30, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0)

18m25.027784588s ago: executing program 1 (id=1102):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0)
read$nci(r0, &(0x7f0000000100)=""/107, 0x6b)
write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="042ffd0200"], 0x200)
write$snapshot(r0, &(0x7f0000000180)="912e96623c5bf0120e8d26d86e33147b74e5563e996672498bcd85d6d3513b2684df1185028a19a9af1ca4efe554a6", 0x2f)
syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}})

18m24.941338826s ago: executing program 1 (id=1103):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f00000003c0)="ea000001", 0x4)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100), 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40080)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x601, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)

18m23.304957254s ago: executing program 1 (id=1113):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0)
read$nci(r0, &(0x7f0000000100)=""/107, 0x6b)
write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="042ffd0200"], 0x200)
write$snapshot(r0, &(0x7f0000000180)="912e96623c5bf0120e8d26d86e33147b74e5563e996672498bcd85d6d3513b2684df1185028a19a9af1ca4efe554a6", 0x2f)
syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}})

18m23.210290526s ago: executing program 1 (id=1114):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]})
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000200)={0xa, 0x0, 0x4, @local, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="3a81", 0x2}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @private=0x8a010102}, 0x4}, 0x18, &(0x7f0000000580)=[{&(0x7f0000000400)='<', 0x1}], 0x1}}], 0x2, 0x88d5)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x112)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)

18m23.106176817s ago: executing program 1 (id=1115):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x20004000)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000540)={0x8, [0x9, 0x0, 0x7, 0x4, 0x1, 0x8, 0x3ab1, 0x5, 0x3, 0x7ff, 0x0, 0x3, 0x7, 0x31, 0x89da, 0x2, 0x7, 0x3, 0x1, 0x4, 0x6, 0xa, 0xc, 0x814, 0x81, 0x459, 0x15d1, 0x2, 0x1, 0xc6, 0x3, 0x9, 0xf6, 0x84, 0xc, 0x0, 0x7e, 0x4, 0x6, 0x0, 0x7, 0x8, 0x400, 0x9, 0x46e5, 0x0, 0x16dc, 0x5], 0x7})
r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x180000)
r6 = syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x5867, 0x800, 0x0, 0x1bd}, &(0x7f0000000040), &(0x7f00000001c0))
io_uring_enter(r6, 0x100847c0, 0x0, 0x1, 0x0, 0x0)
sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)="ab1da213e8ffd130f1d7fa9f9c8aca713cc48b30fde0", 0x16}, {&(0x7f0000000200)="c3448adf81a92ee7131a56283524f96b8fa1be821db60e8d307ba37f23dd58a75c6b28518936c021f46743a513cb76f5c0a405e4a2114ae27f70009e580236f5189b627615e412ea116bf2a5460f7b66679df826d991097ecfe3eb65aa57c5f69a5bd0444eb5", 0x66}, {&(0x7f0000000300)="b716edbe", 0x4}, {&(0x7f0000000340)="5d032766255176c8cd383f057b1cee979d19c711ac34d67d5d29967e682b928e8ef1472d827b83ea693b67f9d6d50e961413a2a393e58660b3b774d4222e35865da4435d2fa58bd02ca420471a54ce2f1754451156f1d4d5339abac237cb09249a2ec0dfd118dadfa46e", 0x6a}], 0x4, &(0x7f00000004c0)=[@rights={{0x28, 0x1, 0x1, [r1, r2, r1, r0, r3, r5]}}, @rights={{0x18, 0x1, 0x1, [r1, r4]}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x58, 0x40040}, 0x4000)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0))
prctl$PR_SVE_GET_VL(0x33, 0x87e2)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open(0x0, 0x0, 0x0)
unshare(0xc040400)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00'})

18m22.778125973s ago: executing program 1 (id=1116):
socket$unix(0x1, 0x2, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x8000000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xe, 0xffffffff}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0xf)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000540)={{}, {0xc5}, 0x22, 0x0, 0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='./cgroup\x00', &(0x7f00000003c0)="7e13750ab80320fc64480ef4917c86105d7f9f9da1c3898da30fe14c8bb33afd12d6d99a8a56c86656566c9e462487db8a2b2f0b0575988b00413191868db89272050b2c3e6b3326f6f04f54983ec54c71b54717a1d867acfdbd9ab920d5f90f20fc9b7b3882005c122998e32dd96ba21cfc135b9530313b4d03a6b59f3bda5b8916145548dc8b3d53a88311ac9fe894adddb5f761abe1a88a73c49387cfd5b9f0c5fa243cd590cb6d0dde9107857f55e00a865736db0cc603ba550f6abc", 0xbe, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="02000000d10e0000010000000c04000000e96ee50ec00e00004a7869f503e4fbee7e3a90381a16b4f138a8b31242fe98517c6eb110a4afa27de136cce2c8a63980290fe0d8e52136ddd0fcf3152d27c4cf8e01daf7853c1870eeafcd55a842ddb3a32fb669626747cb446655cc10c35d5e296e904036718faeeff3f80bbbf4398014162c9959e08a32792a23e65ede1fc1735359e647677f433da851fb45617da8fd35213c4bad5e336ac252d8cdb2d9fc7f3d6ef8e9e9291d05170f63a57d90f3d5711e63552b2bd70baa3cde20a7ad56fe7f6ad0c90be496a4d9427a467846cb8f257f83e8e288afd57218455e75200ed0c5ff7de0fadbc482a449d1e0561fd749c97cf10a786c5751777591c2372a2242b2f38ffc52000e842f8266660c4053151890e9af179f63c8020bdcfa0e103a59b2608629696a4c30fef524c889153a29e41aaece3e69c352db46edde63217203296cf3017e0463b63c9f0f1241825affbf3d28fb2cf1b8abc80a576cbd98268f2e6c0911e579f46a2cfa03a9c6babe0a0b171ab4fb04177ec4ade8d0b6187656a5e29aa6387291b7f97f03f0e436569c7f1a5ca19c76ea00f0b09c9e5d8a1888fd0db52b2cb7cb4111913ed2e2fcc883655bfd95b6534d69fa912a7a720ece083c21bb16b1bac727793fd7cd26189f53626a8f4adb07036484965ea93459014ac036b8fe5b243798ae3006e352cf18eec971739f55c3234a2c9dc92664275f7ab76b3748151e209d1dc32e85ba1aff7cd91289387ede6eb3cfae9ec8160e59058c456ec8e1fb1b588f4d0bf250dbb53c724a4c6e5b708985a45eaca6fd10552977dfb1ce99dca53ad1c7a57d764e0bfe3ccf5155c9ddac0a92777c4460e0025fe82e2336d8683c3115bd0e3c67ab166020668620c5d7b29c1d3f3d014118372dbb1cbbca5678e64e4aa7758f09374285367ec8bbdd15438daa0ead2ab5b4c45877779f98b90d6499ce4659df7c112d473f666f1d72f8fb3297dda1012f40253614a6916e2564424061054c1eb4f323e535d57b9ca0e334f14a5f9db6ede78cf3ac48b2f6c91f44abb57fdcbf27dc56366cfd82655d8f8ff9eb87fdb9bc4f4e555dc25a5dc973c93b59904346b758fdd0991bc16373ec2acadafbe4d53310197fe6a9db941d148347f54af5160ee29d7f840f2e505090d18d71d4ac81125eab7a3bef2a47491ff22dcf753e02c6d4591ea569e9293bf12e1caf638adca79891bef1cccca355d762dc8cf8dd8985b4f51befd1dd3ad63b303f3cf1b81d4ca205c9c1a68ff08a1207b0924207c7167b411b486aeafa3419cac1953785d8b07b3a6bf1298046c040cc7f2dba21eead10b384959f72cb8a72b82da426b21678a2a15cb3497755976763282d9a8668bcee4b304e2f5a8c733ce307ed4ad603372a49c9c7cf7cb30e329a2d714e5082ed43840c0d09e94e6cb31f355c521d3a4a406553432128af1c29d1a18a2959e0b584d2b4b05a5710b116dcc4cc830ab555856039f15531731d3a14a40ab2c80aeed2637be976f3b79c207907de54f32970102c5eb63d0e897587297fbe77b7fe502b4d75ebaf8e800b6d691fcb989ba229254f118adcb1fe485b8e4be0dde944f6a7146ad07b054a82c38b318b2bc1f497deb981605d99bf36f294c08c48e408f802df77130e14eb601498ab0f3ee904d76ba4b9faf93884d6d9549c883ab5fb27bc7a773b437e49246c4b5ef7a9fe82ceb06f9bb2b8d64a33c6a3ceeab3621ac28f03c1c33a693d2c4a0381676a9bc880f41c074c09f9b1045a8b2eae62d9df3a79af8047908a59c851c0453c1f790536b19bfb83aca2a35bd14dee7bb6329a4b7888a4bab33f9aa7185b687e2c2b8921dabbe75a42c97c75f3563eca19a2bfa8786a950f6df1d156522c5f03a868b6f27ac610c39b6cbdd6e0cc2f87bb141b06c646985b38a26c1904801406bc30744d9f80aa37460d58f3d4a8c3af0edf52fb27f5e82c4b4025eb73266846c4b31d551026fb14ac0f225f050b817c8042d0d7355e3e918eadea50077f069439caf666a47c1b663e565e0a524267214e40afd9318a4922e423737505f6030013165c94b87a6b4407e6d4218648d757d4328336c4cb5e6d90f3ac866405e0c0a3d0afbcc758c568522af44f34fa96c36e32b243c210647136032dcbcf1b2065343b8a5b75e5a1a9c7d64a9a95d0edff5d0d2615e935319bf6782c1514fef2142ecdaa3cedd43cee3108d7020a4088020594e8786c0b0916b5cf3cb958fb4488a01cdae9f14131658c21ff03f17f9dad532a55f97787d319adead971f6152982a5f55e5c6b1a8aba83e7bf95eaa50b3d609ce5f8205331048f57be6ed0987547bac334d85b61e73d5dbe5e5fff17301a0fcfa1f0b98c10710763ac43d80dead570aab2e00393147ba018227179873e7d4c381a21b31968caf5be61cb74710d00bdf16ad528421426d4e26cce0351d6e1e9570d04a8234ae649526998acb8d30319c9ca62f0462cbb074f299e1b259228a4abc8b19b3f6bd37c3e8a08e7e00ad4ac730a1ee87b0b5ea9bada071f6ba45b1a306347d5ec20e42810fab7e6f4c796fedfdcd78585e8ea7240acf2b8e3e9a576498f3940ae9776576f3521058ba8f39ece14dc957357120f66d4964487aaa7627f5354997188c2efe6ea50c337bcbc2659600795730b80bb5046aabfe491dfb43f41d6e410d43efa1e8ed7f152243769eabdc0b307ae74cd0cccb2c50f628eea796bad42f170552e2f15b08c5e1bd883c6c11cb6c94facdec53a8c0f0894a5e98bb079279cef4d1e0c3127f28e8efaaec086baa25e51aed84db2357438211be010ec92cb116e6066f9cee0f46c979b9407ac1d2ba437f7f66cb16ea42d355445e9a000c12fd7ba68f29f311e21b9cbf29b126c2db6a5aa2adb49dd4a4f0158155c4c3ba8319eef821d30e0fd226bb77177c41bc1403027cbfd318100bd4b9cc98216a0a3e3f378dd1fc711f898a48c75260657920516eaa14bbe6a1b9c4f17255111d7ecf9e48e163d31a3b265ecdfe2eddbcc393a1b50983a817f21b03619ca4d6f4a3dc70e01f8e8665ba9b1f8c0ac5f7b2faa20ff0647d12099187a552acc51632acbbc1d63430ac625ad0a9802abc4625dee7456fd762e3207302a0b6f03d8c038a489e3fd96b73630a2388a399b48e71c93b1567234dda21bcdfdccef9694b9a60ed462e10696bc83cee97fdbde15e848f3b34ecc1fc559cdf82586a76a36f765a93b153f5aa2b08a7c8e03a5fff7caa494d6ab77d28b6319b95d9f06040dbdc68696819b688ca6bd4f5750be498031757dbd5873d2efec3331d404550f7f7c6d3f0c277a793496de3ad3c0656693e407e6cf9efbc807bee2368ac149373ed7a196fed993282c54a64a2670fc8a2f6ff952f7588e49f145510e56c0070f4535b0b95a1e446193f26773e94735f9a624f4d025b18142a5da1f3f92566f093c99bbdd429756757df22625c06df4f8e02ef89d23cf2dc917a10aac58b1fa820319fcce773646e3607ef63eece732c963e055abaf099f4edd62f51434183f78dd1ecc2d68f05190c3b5936ef13535da54556daebc4830edd3488192307869554ac22a3964087dfb3475e52b13fe0a6e2c53ae2ff9e7f304942fbf921033ed31b070f1408323ca8404b256a747574dc78ac75f24d74559e81bc21bf6707230ce3612fc86ec1dbf6da0cfe19fc970985cbb9da71176031de72ba23a0c6f28064f0694a636be8907ed6739dd03f056b3e44aaa05583ca8036e71099ef64c7e8658d76b182bf1e7dbab79d142737a0e327fd361f6f1ea82e9429314f225bf8610b70f47c7d8c49e8fa009b7d3b8e31ecb960f932bc1f42d38a234e70ec274d893450ab71af282b1e66bfbbb5370993794e85dcf5336eac8ce8165dfa0a67505b18038ae1d1cbab00287b4390ba60df4c49ef40cc9ed2d6f3722b15dce0dc31c01873d7e2129cb1f8c3bb3f8f68b2a32242eb8a7b19e90617eab2e3ca50f378301e32e65f73712f77eab3bc5d1f81d49cf3518cd04a397f658a8261f7f537437eee28030d53487b84befa49e9004754c5145b77e05afd4b93c84c66dc7062670dacf542147e226b55ec097b51fc80f1427fd19aa287ce2355c925181f23aa2f75ac1a110319bdad81190152f59f6460bc8068a4ce9d58364b9ca98ac021778cf1db2fb40a0031865fc1dd8714fc6e624eca49b162d9776bf66965eeced5d792c56096db12a2a9a875564f6db3234337162c3b5030a124b11fbd7b04ccaaa30a146d91d0d89ad542e296273cc528aeeaafe58a52d7f43ce3bf2a862d3789dfd7dfd0138afea0c8483e5b414d7828f7ab715e2b5361c44f9f9e8a3ddbea54e3d25b42748b47529d5d745df2a247b92f66a4c64c38310a641b2455b0d31da06105cc2ac54e5fb6d93e8861c5db98d7189a9114337edde917cb8a61e382631c17ddfa19b08e1b869b852b471f9ac99db0430de0722025141ca1abaf3ef57482ffcfd45d86e0beaac9facb96045a7293a92f0bee488013508e034c02c523025c96877d9ff1986d3d5f342d15a9a794ccb87112cd94fa3521707364c27c0127dbeeeec73f238424dec207eadcdd03bf0deb42d11a0b4730a67d29ef6c76e95d17eb3bac93a2ecd2ffcfa26bd74a8f3c044b963211a3b14fe73303e70bc7765f21210fe620e9f6d0543e15ddcfc60358b5bbcc8130d946370de39bc26199b229af7670efd1f9acf299ff6df64e35f302f3f85d10d11f79bea5ff1a458aabecbcbf098a8ea8513e1a0cb574439f99419d8e7fad5fbb6b91ed228dcca0b38792bc7518e8a314fc15817aab008f359172eb25bf3a10e5942b98049ca36fee3ad9fbcd15e05130c6c1a3a643848c6f1b9c14f6579cb335ea573ae82a2f854e080c5fb9d7181d23f155e36bcc12c2465cbe3359b16b9bd907d1e36a88f30c698c8627f733c62e080fb978579cc66f6e3dddfda8dd316ea8c9d61be30217d11fe4fc37693d50feeb3b1e50fe43fe32e0bf7c78b18897cc1538717a3b260b3f15521ab0a3814d6151d5bdc1817d82c5b482ec62bd836fda3fe25cd047c0347f43ae94d93048812d280bebf8e0b668f211cf5ce57cd69cad1b223a4e274b0f1b7152f29db5fe1ccab2b1f80493f8e1b06cb771155b99b97018fb393246e0749ed9bcd0db7d564f8d63366a32a56abc17e1f10fcbb4209a36ce685de9c11a399acd018bc7cf081a8c8560eb8e35620101529072832b33bab6ad7907cc07c167ea4d42693c760c23b788743a0e0426a2914b2990d36844782c4092cf4f0b274674a5c8cfca4b27ab755c5723688eefa43a1c044623d83a41b6903834cd850938759e53a260fd78bbe000000abfc4626c085430932fc353a5931af368c3dfea3dba20caf6487ec6d0157204d646c04ae6643d7674e573ddfd78749868c18240501908dc3870b1328816bd92042c35735cca5d94706445c425a635afbca6e0035da4dbf1e309b645df18670f8c42a25e2e8f335eed0e999785dec22b9e6ab98232d85a81eac34dda7ddcf6dbada3f3b38a6f0004432e64a8cb4615cb5e311dd9f4f61aeeb4546a4d4e0ba0bf157d4d06c737d8c95718b99a368677b5f5764ff55423a6839d91e082fd940"], 0xf9b})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[<r5=>0x0], 0x1})
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f0000000040)=r7, 0x4)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280), 0x0, 0x0, r5, 0xc0c0c0c0})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000480)=@arm64)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_KEYBIT(r10, 0x40045565, 0x3b)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000340)={&(0x7f00000005c0)="f14d60fffdc69e1716669af2d70823325f0213672f81fffdc0697c0f382cd286cd5e2d44f8d596ba47df2943580b0cc5721f09ce144a5c80b77f6356dd85f4f0954b97024a5af4c7665359a36ae8306f3b022360e605bcfa339f1991f681", 0x5e, <r11=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000640)={r11})
sendfile(r9, r9, 0x0, 0x200000)

18m22.603693115s ago: executing program 33 (id=1116):
socket$unix(0x1, 0x2, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x8000000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xe, 0xffffffff}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0xf)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000540)={{}, {0xc5}, 0x22, 0x0, 0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='./cgroup\x00', &(0x7f00000003c0)="7e13750ab80320fc64480ef4917c86105d7f9f9da1c3898da30fe14c8bb33afd12d6d99a8a56c86656566c9e462487db8a2b2f0b0575988b00413191868db89272050b2c3e6b3326f6f04f54983ec54c71b54717a1d867acfdbd9ab920d5f90f20fc9b7b3882005c122998e32dd96ba21cfc135b9530313b4d03a6b59f3bda5b8916145548dc8b3d53a88311ac9fe894adddb5f761abe1a88a73c49387cfd5b9f0c5fa243cd590cb6d0dde9107857f55e00a865736db0cc603ba550f6abc", 0xbe, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0xf9b})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[<r5=>0x0], 0x1})
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f0000000040)=r7, 0x4)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280), 0x0, 0x0, r5, 0xc0c0c0c0})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000480)=@arm64)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_KEYBIT(r10, 0x40045565, 0x3b)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000340)={&(0x7f00000005c0)="f14d60fffdc69e1716669af2d70823325f0213672f81fffdc0697c0f382cd286cd5e2d44f8d596ba47df2943580b0cc5721f09ce144a5c80b77f6356dd85f4f0954b97024a5af4c7665359a36ae8306f3b022360e605bcfa339f1991f681", 0x5e, <r11=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000640)={r11})
sendfile(r9, r9, 0x0, 0x200000)

16m36.674678352s ago: executing program 4 (id=1424):
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0xfffff975, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x7, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ba"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4004850}, 0x4000881)

16m36.453854161s ago: executing program 4 (id=1425):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0)
socket(0xa, 0x3, 0x3a)
socket(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000840), 0x80000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r5 = fsopen(0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)

16m33.073494349s ago: executing program 4 (id=1436):
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x1100})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000c00000029000000000b01000000000000"], 0x28}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r5, 0x0, 0x0, 0x80000001, 0xd55)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x1f3, 0x4)
sendmmsg$inet(r6, 0x0, 0x0, 0x4000800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000})
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680))
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00')
dup3(r4, r8, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000000c0)={0x0, r8})
syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[], 0x0)
r9 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x13, r9, 0x2000)
bpf$PROG_LOAD(0x2, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d})

16m32.215614968s ago: executing program 4 (id=1440):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000003c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={<r3=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3, 0x1}}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'veth0_macvtap\x00', &(0x7f0000000340)=@ethtool_stats={0x1d, 0xa, [0x7, 0x7fffffffffffffff, 0x300000000, 0xfffffffffffffff8, 0x100, 0x4, 0x2bd, 0x4, 0x4, 0x7d3]}})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226)
r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000400)=""/184, &(0x7f0000000240)=0xb8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="26c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

16m29.179745741s ago: executing program 4 (id=1446):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0)
socket(0xa, 0x3, 0x3a)
socket(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000840), 0x80000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r5 = fsopen(0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)

16m29.016380146s ago: executing program 4 (id=1449):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000f80)}}], 0x1, 0x84)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, 0x0, 0x0, 0x40800)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x36, 0x57, 0x1a, 0x20, 0xccd, 0x80, 0x67fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x76, 0xe3}}]}}]}}, 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)={0x0, 0x10, 0x8, "eb2a3b809be47af0"}, 0x0, 0x0, 0x0, 0x0, 0x0})
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r6, r5, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
wait4(0x0, 0x0, 0x40000000, 0xffffffffffffffff)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

16m28.562287193s ago: executing program 34 (id=1449):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000f80)}}], 0x1, 0x84)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, 0x0, 0x0, 0x40800)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x36, 0x57, 0x1a, 0x20, 0xccd, 0x80, 0x67fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x76, 0xe3}}]}}]}}, 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)={0x0, 0x10, 0x8, "eb2a3b809be47af0"}, 0x0, 0x0, 0x0, 0x0, 0x0})
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r6, r5, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
wait4(0x0, 0x0, 0x40000000, 0xffffffffffffffff)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

9m45.550260601s ago: executing program 2 (id=2971):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x20000, 0x380}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xf}]}}}]}, 0x3c}}, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/133]}, 0xfd)
r5 = socket(0x1d, 0x2, 0x6)
recvmmsg(r1, &(0x7f00000049c0)=[{{&(0x7f0000000540)=@can, 0x80, &(0x7f0000000e40)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f0000000780)=""/10, 0xa}, {&(0x7f0000000840)=""/222, 0xde}, {&(0x7f0000000940)=""/239, 0xef}, {&(0x7f0000000a40)=""/229, 0xe5}, {0x0}, {&(0x7f0000000c00)=""/165, 0xa5}, {0x0}], 0x9}, 0x8}, {{&(0x7f0000000f00)=@hci, 0x80, &(0x7f0000001100)=[{&(0x7f0000000dc0)=""/8, 0x8}, {&(0x7f0000000f80)=""/103, 0x67}], 0x2}, 0x1}, {{&(0x7f0000001140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001280)=""/27, 0x1b}, {&(0x7f00000012c0)=""/182, 0xb6}], 0x2, &(0x7f00000013c0)=""/127, 0x7f}, 0xff}, {{&(0x7f0000001440)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/96, 0x60}, {0x0}, {&(0x7f00000015c0)=""/81, 0x51}, {&(0x7f0000001640)=""/43, 0x2b}], 0x4}, 0x4}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000001d40)=""/30, 0x1e}, {&(0x7f0000003e80)=""/80, 0x50}, {&(0x7f0000004000)=""/15, 0xf}, {&(0x7f0000004040)=""/237, 0xed}, {0x0}], 0x5, &(0x7f0000004280)=""/209, 0xd1}, 0x6}, {{&(0x7f0000004400)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004380)=""/53, 0x35}, {&(0x7f0000004480)=""/87, 0x57}, {&(0x7f0000004500)=""/74, 0x4a}, {&(0x7f0000004580)=""/73, 0x49}, {&(0x7f0000004600)=""/40, 0x28}, {&(0x7f0000004640)=""/214, 0xd6}, {&(0x7f0000004740)=""/28, 0x1c}, {&(0x7f0000004780)=""/42, 0x2a}, {&(0x7f00000047c0)=""/248, 0xf8}], 0x9, &(0x7f0000004980)=""/45, 0x2d}, 0x8}], 0x6, 0x40000000, &(0x7f0000004b80))
bind$inet(r5, &(0x7f00000000c0)={0x1d, 0x4e20, @remote}, 0x10)
sendmmsg(r3, &(0x7f00000094c0)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000001c0)="f3", 0x1}], 0x1}}, {{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000001240)="1f3e", 0x2}], 0x1, &(0x7f0000000640)=[{0xd8, 0x1, 0x5, "cc7b9d439af1d025ffc3f1690d936a12d75eef4a329126811beffd8550a33819168f9e91bcf3c795aec6b9c1ca6d73460c71e9240d30effa88c80d7c2378261ea7177e0dc574a01d0a21d6222d0b883fe9feda750354aa0489623ecbd2bcc91ec82ec222a134fad453638422df5b86548ead6c49f2aa97d2b1b6bfd998331f060a1f4d329e7cb066d9dffc0621497913fb051aceda0627b24b0d1551d3a8f32235be077f3c0b2239a97dcccca3415f3ed4b869c0770d8a6c3ea991e71a9f0e0e94cfd0a0eba35e"}], 0xd8}}], 0x2, 0x10)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x8000000000000})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x0, 0x2, 0x132ad5bf, 0x1})
unshare(0x22020600)
preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000005c0)={0x20, 0xe, 0x41, "1ec8646db9d3cb75dd3f7289950500007c18a2fa8a942a19d72511c82c986dc8ac69ff12abe737e1f80b97323f828735329ccea4dd7a00"/65}, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xf9}, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000280)={0x20, 0xa, 0xdf, {0xdf, 0x21, "fb04f57f2062b816adf0e089573635ee2a3b12d158f249d046da80c02c5670a3baef884fe21de20d6157096bb8d9ba94e23c642c034a612f6aaced76f68414594ec4736e008065f9d23427c06975e5a89c109b65551729baf07656b46342abc7428a23e69d0d546831c497a33becc9382ed94f1e5ed53c69cfffad8ec878282f3fb9b5d0ae063dc79a44fbcb081eda1f11dc8761d079a22cbdc215cb7b0378271db8919796fab5f0ecf40e16ed3c6f1009f9bbfcb44ff359dcbf3abe39ca885bda47ab6b3ad23a77210437e308e967126197cd14efaf2a02b0adc48565"}}, &(0x7f0000000100)={0x0, 0x3, 0x59, @string={0x59, 0x3, "fcda2714009f5d8b8aa45769ad9e321bf61a531f3c71f1b4e80b9e4a8d7a499533974f587549f8de84a8c75bebb34027f4078569f607f650f07fa4bc6af6c907ae346343f27e811b7360d1e72c1284321e7b7d5b604438"}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000400)={0x0, 0x16, 0x6a, "f2724afba3dba47b72129d099710c63640ff1a5c43d4d8dfc60f09d5e7852d1bb9c19d07d987aa8213a4dacb953d4f831f7ebe76708ff39b80674db24d99446c862fb59ee18a327b5e42e58a6b5e7fe521811fe4d0dbbb3eadf83bfe549847b2656e0ff7e8840cce41d6"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x40}, 0x0, &(0x7f0000000480), &(0x7f00000004c0)})
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000380))
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/5, 0xfffffffffffffd34)

9m42.29306047s ago: executing program 2 (id=2981):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x4008094)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) (fail_nth: 13)

9m39.24163333s ago: executing program 2 (id=3007):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, 0x0, 0x0)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100), 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40080)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x601, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)

9m37.642547693s ago: executing program 2 (id=3009):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000440)={0x0, 0x0, 0x0})
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x10800}, 0x50)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf2505000000200001"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='htcp', 0x4)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r6=>r0, {0x0, 0xee00}}, './file0\x00'})
ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000200)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}]})
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x260)
waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000300))
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r7 = memfd_secret(0x80000)
write$sndseq(r7, &(0x7f0000000500)=[{0xfd, 0x5, 0x6, 0xf6, @tick, {0x6, 0x9}, {0x3, 0xec}, @connect={{0x8, 0x7}, {0x1, 0x7f}}}, {0x9, 0x1, 0xf, 0x6, @time={0xcbb, 0x7}, {0x1, 0x9}, {0xff, 0x58}, @control={0x6, 0x6}}, {0xf5, 0x8, 0x6, 0x40, @time={0x6}, {0x7, 0xc}, {0x6, 0x4}, @raw32={[0x1, 0x9a9, 0x6]}}, {0x2, 0x2, 0xf9, 0xa, @time={0x8, 0x5}, {0x4, 0x81}, {0x9, 0x7}, @result={0x0, 0xffff}}, {0x6b, 0x10, 0xa4, 0x3, @time={0x1000, 0x8}, {0x4, 0x40}, {0x8, 0x8}, @addr={0xe, 0x8}}, {0x7, 0x3, 0x2, 0x9, @tick=0x7, {0x6, 0x1}, {0xc0, 0x7}, @connect={{0xb, 0x10}, {0x8, 0x1}}}, {0xf, 0x5, 0x7, 0x9, @time={0x7}, {0x0, 0x10}, {0xdd, 0xf3}, @quote={{0x0, 0x6}, 0x7f, &(0x7f0000000240)={0x47, 0x1, 0x8, 0x3f, @time={0x2, 0x2}, {0x64, 0x6}, {0x8, 0x1}, @addr={0xd}}}}], 0xc4)

9m36.723924305s ago: executing program 2 (id=3014):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f00000000c0)=[{0x8138}], 0x1, 0x3, 0x20, 0x0, 0x0, 0x3f})
syz_io_uring_setup(0x437d, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0xfffffffe, 0x304}, &(0x7f0000000240), &(0x7f0000001880))

9m36.42623546s ago: executing program 2 (id=3015):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460104028d0400000000000000030006000800000019000000380000005e020000080400000400200003"], 0x98)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (fail_nth: 9)

9m35.972805555s ago: executing program 35 (id=3015):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460104028d0400000000000000030006000800000019000000380000005e020000080400000400200003"], 0x98)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (fail_nth: 9)

12.694794613s ago: executing program 6 (id=4520):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000540)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = gettid()
r2 = getpid()
rt_tgsigqueueinfo(r2, r1, 0xb, &(0x7f00000019c0)={0x0, 0x3, 0x4})
r3 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8)
read(r3, &(0x7f0000000740)=""/384, 0x200008ca)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
syz_open_dev$audion(&(0x7f0000000440), 0x8, 0x48940)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x484, 0x0, 0x800000000000000d}]})
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000080)={0x10000000})
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200))
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x200}]}, &(0x7f0000000140)=0x10)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff8000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0)
r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000000500), 0x1f1580)
sendmsg$nl_route(r10, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000690002002cbd7000fddbdf2500000000000000000800010002000000080001000000000008000100000000000800010001000000080001000000000008000100000000000800010001000300262d9a9bbb68"], 0x50}, 0x1, 0x0, 0x0, 0x200480c0}, 0x20040001)
clock_settime(0xfffffffb, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8)

9.529733158s ago: executing program 7 (id=4532):
r0 = socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000002240)=""/4109, 0x2})
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382)
io_setup(0x4, &(0x7f0000000000))
ioctl$LOOP_SET_STATUS(r1, 0x80081270, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x7fffffff, 0x0, 0x11, 0x8, "fa44f7de56ebc599f0b6c6fd8ee55f9a63ae552c42057c81efd234555563ffca1d8ec0d2754ae5ecd09251c832f2b867d79d1458abb63a5263f3e90f36769b73", "b12ccc8ee4e4a503f67f4c07570fbdf66fe4f0e094c3a47349a5ff8bfe551c87", [0xfffffffffffffffc, 0xf8b6]})
syz_usb_connect$cdc_ecm(0x3, 0x1d2, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c0, 0x1, 0x1, 0xd, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0xb5, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "ab232cee34"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x9, 0xb, 0x83}, [@acm={0x3, 0x24, 0x2, 0x8}, @mdlm_detail={0x101, 0x24, 0x13, 0x5, "ab51fcc2be9d6bb59ec602ea07082aa20b5a4a1e5f2fe211d0e56c2fcca7717906ca6d95828f793f047e0cd7acf28c85ea75b2ae9647845581a5feaf2d60c7a57d99def1b83764d787379ab19f016923c47fdb07b3449e7f81d6cb75dd804e2e920df53147d7956843e1888ac56a8f9d7758cee3afb707ac9e4a9a76c5fe0dcbd6c1f2a4e491d662d8e1add8d091e5e8da92b9c8126af10cbc60085e4c491278adcd04fe425db4c47d86105374bc15fbff79c00056800dbf2d1e0964d230571af584c061eaf88a612db13ece73293123c58c4babe1872848d7c4ec2eb10e80b47f6d4ae45095abc7f388df551c4a3e92f60833c84dd754efe258261e6e"}, @network_terminal={0x7, 0x24, 0xa, 0xe1, 0x1, 0xa, 0x1}, @mdlm_detail={0x56, 0x24, 0x13, 0xaa, "7a450ecef41888fe8f1718607a5694a74b2e6c1b03fc7fb0518fa0dd572920ac14262295844dbbbb8f1d97b209978269a0a22c719862bf04dcaf1acfc218d8135462d4c8d572a7bd9c14bf1aa28ce1a53b48"}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe5, 0xe8, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x12, 0x80, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x6, 0xc}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x61, 0x7, 0xca, 0x40, 0x6}, 0x16, &(0x7f0000000100)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x4, 0x6b}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0x4, 0x3e0e}]}, 0x3, [{0x65, &(0x7f0000000440)=ANY=[@ANYBLOB="650345fe0c35e83be7beda6879a800067a02274644de5f617eec2a9e32c8eff392fac2e575e9a223d7cb81298db531d0d38b57c1c0d89b2f562eba9c65eb0e03175ecbde9921d7edbb9f8033f7b78378a308440000"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x8f, &(0x7f0000000640)=@string={0x8f, 0x3, "dd0292614634200cc63d564e8b48d6b476f9889c0846ec82d33ff6e0139290a25c073f31a621cc88a18373a270ed8654a57e78329e5fb40ba78b7fac142a934e6db284c580c24b841d4957bebf999837b7d1e86c3468ab4ed725e7253158e8a4e0e48f83f7859e288cd865b3d5fba2c8b8b5b1674ad82f56a6b5756467fea5ac109207172c498aea39e3336fff"}}]})

7.712368023s ago: executing program 8 (id=4541):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000)
syz_pidfd_open(r1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x2, 0x0, 0x2, 0x7fffffffffffffff})
wait4(r1, 0x0, 0x8, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0xc040ff0b, &(0x7f0000000040))

7.340978554s ago: executing program 8 (id=4542):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@multicast, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffc}}}}}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67)

7.307541786s ago: executing program 8 (id=4543):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005340)=@newtfilter={0x14b0, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1474, 0x2, [@TCA_MATCHALL_ACT={0x11b0, 0x2, [@m_pedit={0xfac, 0x11, 0x0, 0x0, {{0xa}, {0xefc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x3c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x101, 0x1, 0x10000000, 0x81, 0x7f}, 0x1, 0x10, [{0x7, 0x4, 0x100, 0x4, 0x7fffffff, 0x2}, {0x5000, 0x3, 0x8, 0x1, 0x3, 0x6}]}, [{0x2, 0xf, 0x874f, 0x23bd, 0xfff, 0x3}, {0x3, 0xc, 0x5, 0xe, 0x4, 0x5}, {0x5, 0x8, 0x101, 0x47ff, 0x1, 0x401}, {0x7fffffff, 0x7, 0x1ff, 0xb, 0xe, 0x100}, {0x4, 0x7, 0x3, 0x6, 0x0, 0x8}, {0x80000000, 0xffff, 0xc79f, 0x7fffffff, 0x2, 0x2}, {0xb, 0x8, 0x8, 0x6ce4, 0x5, 0x7}, {0x3, 0x10001, 0x4, 0x6, 0xfffffffc, 0x7fffffff}, {0x59dc, 0x3, 0xffffffff, 0x2, 0x15, 0x8}, {0x0, 0xa131, 0x4, 0x8, 0x5, 0x2}, {0x400, 0x7fffffff, 0x2, 0x5, 0x2, 0x81}, {0x7, 0x7, 0x58aa, 0xfffffffb, 0x8001, 0x3}, {0x3ff, 0x4, 0xfffffffc, 0x800, 0xadc3946, 0x406}, {0x11cc, 0x7, 0xbfa, 0x0, 0x9, 0x7f}, {0x10, 0x7, 0x7, 0x1, 0x212, 0x4}, {0x9, 0x5, 0x5, 0x5, 0x3}, {0x9, 0x9, 0x7, 0x5, 0xd23d, 0x46}, {0x7fffffff, 0x3, 0xe, 0x10, 0xb8}, {0x387f, 0x1, 0x9, 0x6, 0x4, 0x800}, {0x4b, 0xab, 0x3, 0x7, 0x7, 0x5}, {0xc2, 0x8, 0xf70, 0x7f, 0x8, 0x10000}, {0x400, 0x4, 0x8, 0x8001, 0x800, 0xff}, {0x366, 0x0, 0x8, 0x5, 0x80000000, 0x6}, {0x1, 0x1000, 0x7, 0x2, 0x92ea, 0x2}, {0xf, 0x2c5, 0xb24, 0x200, 0x4, 0x9}, {0x0, 0x7, 0x8020000, 0xa, 0x62a, 0xd}, {0x4, 0x7, 0x1ff, 0xfffffffa, 0x2, 0x4}, {0xfff, 0x9, 0x3, 0x3, 0x6, 0x401}, {0x8000, 0x1, 0x4, 0x7, 0x9, 0x8000}, {0x6, 0xc, 0x1, 0x7, 0x10000, 0x6}, {0x0, 0x7, 0x3ff, 0xff, 0x1fd, 0x8}, {0x9, 0x5, 0x0, 0x8562, 0x6, 0x200}, {0xffffffff, 0x5, 0x6, 0x8001, 0x9, 0x4}, {0x9, 0x6, 0x4, 0x7, 0x0, 0x59}, {0x9, 0x8, 0x2, 0x8001, 0x0, 0x6}, {0x0, 0x3, 0x80000000, 0x4, 0x579c0000, 0x6}, {0x80, 0x298f, 0x3, 0x2, 0x8}, {0x1, 0x7, 0x6, 0x5, 0x74, 0x42}, {0xfffffff7, 0x6, 0x81, 0x0, 0x7, 0x1}, {0xe, 0x6, 0xfffeffff, 0x95, 0x5, 0x456}, {0x342, 0x0, 0x3ff, 0x6, 0x7, 0xe}, {0x7, 0x527d, 0x1ff, 0x4, 0x2, 0x7}, {0x7, 0x8, 0x0, 0x4, 0xbe, 0x3}, {0x1, 0x1, 0x8, 0x5, 0x4, 0x8}, {0x9, 0x6, 0x3, 0x2, 0x8}, {0xb, 0x3, 0x2, 0x8, 0x9, 0x5}, {0x4, 0x9, 0xc, 0x80000001, 0x4, 0x2}, {0x2, 0x6, 0x9, 0x9, 0x2, 0x930b}, {0x1ff, 0x0, 0x7, 0xffff, 0xed3e, 0x2}, {0x36c, 0x3, 0x3, 0x1, 0xf8, 0x82}, {0x2, 0x7f, 0x7, 0x8, 0x9, 0xa}, {0x9, 0x2, 0x6, 0xd, 0xf6a, 0x9}, {0xffff, 0x3, 0x100, 0x0, 0x199a5a74, 0x2}, {0x5a, 0x8000, 0x7fffffff, 0x3, 0x8000, 0x6}, {0x7fff, 0x6, 0x6, 0x7, 0x100, 0x7}, {0x401, 0xdd, 0x0, 0x3, 0x6e1, 0xe00000}, {0x3, 0x8, 0x7, 0x10000, 0x8, 0x7b6ca3de}, {0xe, 0x80000001, 0x100, 0x8, 0x6, 0x3}, {0x1000, 0x0, 0xcb5, 0xff, 0x81, 0xc50}, {0x6, 0x8, 0x3, 0xb, 0x19, 0x8}, {0x8, 0x3, 0xc, 0x80, 0x5, 0x401}, {0x6, 0x3, 0x6, 0x890, 0x5, 0x5031}, {0x2, 0x7b2, 0x81, 0x1, 0x8}, {0x24a, 0xffff, 0x99d4, 0xffffffff, 0x7fff, 0x6}, {0x3ff, 0xfff, 0x3, 0xfffffff9, 0x8, 0x15aa}, {0x9, 0x8, 0x4a, 0x8ac3, 0x5, 0x3}, {0x3, 0x319, 0x8, 0x2, 0x0, 0x4}, {0x80000001, 0x7, 0x9, 0x2, 0x77, 0x28}, {0x3, 0x616, 0x9, 0x0, 0x1ac, 0x6}, {0xf5, 0xe1c, 0x4, 0x741, 0x5, 0xfffffff5}, {0x0, 0x10001, 0x0, 0x0, 0x7, 0x9}, {0x8, 0xfffffff8, 0x8, 0x2, 0x7fffffff, 0xfc0}, {0x8, 0x8, 0x6, 0x6, 0x4, 0x2}, {0x8000, 0x80000001, 0x5, 0xffffffff, 0x5, 0x7ff}, {0x0, 0x35, 0x3, 0xe0, 0x8001, 0x8000}, {0x2, 0x7, 0x9, 0x7, 0x3ff, 0x3}, {0x6, 0x0, 0x83, 0x38800, 0xfffffffb, 0x6}, {0xb1, 0x20, 0x80000001, 0x5, 0x0, 0x6}, {0x9, 0x9, 0x2, 0x200, 0x0, 0x2}, {0xa2, 0x1000, 0x10, 0x6, 0x6, 0xffff0000}, {0x6, 0x100, 0x3, 0x3, 0x200, 0x5}, {0xfff, 0x0, 0xffffffff, 0x400, 0x989, 0x5}, {0x0, 0x6, 0x3ff, 0x7, 0x2, 0xc}, {0xffffffff, 0x200, 0x2, 0x3, 0x30, 0x9}, {0x7ff, 0x2, 0x71, 0xc000, 0x1, 0xfff}, {0x2, 0x1, 0x9, 0x80000001, 0xffff2f32, 0x3}, {0x2, 0xc64, 0x80, 0x0, 0xf}, {0x9, 0x7, 0x6, 0x35, 0x4, 0x6}, {0x81, 0x5, 0x9, 0xc, 0xffff7fff, 0x101}, {0x2, 0xb, 0x5, 0x5, 0xb, 0x3ff}, {0x800, 0x69cded44, 0x7, 0xacd, 0x75a, 0xa}, {0x0, 0x6, 0x6, 0x6, 0x4}, {0xffff, 0x8, 0x6ae, 0x9}, {0x401, 0x2, 0x4, 0xea, 0xfffffff9, 0xc2}, {0x8, 0x800, 0x0, 0x7, 0x77, 0x9}, {0x2, 0x8, 0x3, 0x454d89ed, 0x401, 0x5}, {0x5, 0x7ff, 0x4, 0x80000001, 0x2, 0x9}, {0x4, 0x1, 0x1, 0x80000001, 0x3, 0x101}, {0x4, 0x81, 0x6, 0x800, 0x356e5b77, 0x10000}, {0x8, 0x4076, 0x9, 0xa, 0x2, 0x7}, {0x3, 0x0, 0xfffffffa, 0xfffffffc, 0x9, 0x6}, {0x80, 0x1ff, 0x287, 0x4, 0xffffffff, 0x2}, {0x80, 0x81, 0xb, 0x9, 0x8000, 0x2}, {0x81, 0x7, 0x7b4, 0xb7e9, 0x7, 0x3}, {0x9, 0x401, 0xfff, 0x62e, 0x4, 0xd1b}, {0x2, 0x2, 0xccc, 0xf, 0x165f, 0xfffffff7}, {0xbe, 0x81, 0x650f6bb9, 0xe, 0xfef7, 0x7}, {0x85b, 0xaa, 0x1, 0x1, 0xe, 0xac50}, {0x2, 0x4a469e9f, 0xcbbd, 0xfffffffc, 0x3, 0x3}, {0xfffffff9, 0x9, 0x7, 0x5, 0xffff0000, 0x5}, {0x6, 0x2, 0xa1, 0x5, 0x9, 0xb}, {0x2e0, 0x5, 0x9, 0x9, 0x2, 0xdb9b8b8}, {0x10001, 0x9, 0x9, 0x6, 0x4c, 0x80}, {0x3, 0x3a, 0x401, 0xe5, 0xf, 0x8}, {0x7fff, 0xff, 0x1, 0x8001, 0x743, 0xe}, {0x5, 0x4, 0x2, 0x5, 0x8, 0x8}, {0xffffff01, 0x5d2fa6c1, 0x10001, 0x7, 0x1ff, 0x268536da}, {0x200000, 0x7, 0x3f, 0x9, 0x1, 0x7}, {0xe, 0x7, 0x4, 0xab, 0x2, 0xd}, {0x3, 0x7fffffff, 0x1, 0x8001, 0x1000, 0x3}, {0x92, 0x3, 0x5, 0x7, 0x10001, 0xb}, {0xf, 0xe, 0x800, 0x4f20, 0x8001}, {0x3, 0x6, 0x6, 0x4, 0x1383, 0x100}, {0x4, 0x5, 0x6, 0x3, 0x4, 0x4}, {0x2, 0xfffffffe, 0x3, 0x2, 0x9, 0x6}, {0x356, 0x4e3, 0x630, 0x2, 0x2e, 0x4}, {0x10000, 0x5a8a, 0xfff, 0x0, 0x8, 0x2}, {0x8, 0x515, 0x2, 0x15, 0x0, 0x7}], [{0x2}, {0x5}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x5}, {0x4}, {0x4}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x0, 0xcdba517898f8997b}, {0x2}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x5}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x9271e110655ffdc8}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {}, {0x3, 0x141442aa0588389d}, {0x3}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x86, 0x6, "2edfdb0a9f846732fbcc51f98e99a6dbdd3906aae85eb5cf04a030f3ac71c95a55800ac291bdcc6f446a2a07472a90815d9f669fa94675ef21ea6cc88bad3ce83b791ad7f2b69efef32c45bc6208dbff7c1c4a6dc3dc9cf1e2434902dd1ac45de55d7eba6d78766a9b38cf42814508399a0e4539ee1ed8c01b14469120d716fbd26b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x5c, 0x20, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x98, 0x1a, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x800}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x110}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x10}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x10}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xffe0}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x8}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x1a, 0x6, "a65c27378874d42f62e0adec577b2a8a2d5f03f06b97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x70, 0x12, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_PARMS={0x18, 0x1, {0x100, 0x10000, 0x3, 0x1, 0x40}}, @TCA_CT_LABELS={0x14, 0x7, "c2c3f3aefa43dd3a1a219217c228c7ef"}, @TCA_CT_ACTION={0x6, 0x3, 0x13}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x9c, 0xb, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1c6d}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}]}, {0x5f, 0x6, "676ee03e13e66dabfe0ef95a4696e9220ad5435aa2dd0039c83679af3726b3a4bf41f23e7d9ecf9bc42d68482461d6c8160d885ac6ecbdc3e314dac1816c0c70adbf307a6395293aa9854eea4db8b53fbc20c8fc968cb6c315b8c7"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xffff}}, @TCA_MATCHALL_ACT={0x290, 0x2, [@m_gact={0x12c, 0x1b, 0x0, 0x0, {{0x9}, {0x4}, {0xff, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0xfc, 0x15, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x6, 0x10000003, 0x4, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x5, 0xffffffffeffffff1, 0x3785efa8, 0x6}, 0x7c6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x5, 0xa69b, 0x3}, 0x4f8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x5, 0x4, 0x91}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x60, 0x5, 0x5, 0x8}, 0x2df3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x5, 0x9, 0x80000000}, 0xb170}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x2, 0x1, 0x7, 0x97}, 0xfffc}}]}, {0x5, 0x6, '\"'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x34, 0x10, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x30, 0x12, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x6}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x25, 0x9}}]}, 0x14b0}, 0x1, 0x0, 0x0, 0x8848}, 0x4080)

7.214893276s ago: executing program 8 (id=4544):
syz_open_dev$vbi(0x0, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x12, 0x2, "8ed4"}, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(0x0, 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x3, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}})

6.517114147s ago: executing program 0 (id=4547):
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000d80)='\x00\x00', 0x2}], 0x1, &(0x7f00000001c0)=ANY=[], 0xb0}})
r0 = syz_io_uring_setup(0x81b, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000540)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0)

6.428976291s ago: executing program 0 (id=4548):
r0 = fsopen(&(0x7f00000006c0)='ocfs2\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20)
listen(r2, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
listen(r1, 0x7)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42020281}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004150)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x18, r7, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10)
syz_usb_connect$cdc_ecm(0x2, 0x8d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0xf1, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x6, 0x8000, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xff, 0x0, 0x3, 0x4, 0x4, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xc}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x15}, @mdlm={0x15, 0x24, 0x12, 0x80}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x10, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf7, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x8, 0xfd, 0xfd, 0x20, 0x4a}, 0x1d5, &(0x7f0000000800)={0x5, 0xf, 0xfffffffffffffec1, 0x6, [@ptm_cap={0x3}, @generic={0x100, 0x10, 0xa, "eb593c3228444e2be3629a5840c1f57dcfce682b9dabfc6d29daa8a8b027f14e3a5aeb892e79d7738bb6c061fdadecfa48b7e79227884d797f3a3268be1db1fa6ff6f9cf7c309153300117d80e72dc82211d0157846ce081f63a50769abbc3624ca1851d4d658472e2e6721eacacf3dd0470a6aa297d67496c4c249db7ca76d315dbfaf93a72332fd1cf92d0f1eb50594eb872a156bdb6feaabdbc67c2b6789fe688edfb540db0b7d8cfe02cbcef6feaed679578c99e7b8781c6a22dd8a919169ea4781f46bdded8b199b8e682118c9f467967b2d2c9b8ae91a07a9b6ce1ae72bf056c1ea0cd4f597aef028d8831279f58fe5041cf7f2097ef594927d9"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x7fff, 0xf, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x0, 0x9, 0x25, 0x6f}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x8000, 0x0, 0x81, [0xff0037, 0xff3f00, 0xffff6f, 0xc00f]}, @generic={0x9a, 0x10, 0x3, "7d3ac5fd3e0e433bd876e9ce49d5508e92b3bf5f0ed1008480cb22964a64e49886431e9e335a5cd3efba9ee1f7a751c94c1d5319505a6fa21c2e5703da981a4a8b9f908882d0e374154c9d3b6b5cf327ba6411c0b814ec4e2ff2437d6ff5d1400a8fcb9b66dc7561aa5cdfd618926da47a868825a987e8de900a726ade336185e5f5451f6c4fe0854cc1321a14bf7625b6918509a7b8c3"}]}, 0x6, [{0x7e, &(0x7f0000000240)=@string={0x7e, 0x3, "3f4ab84071fa104511c1866d589db850c1fcaf823a605831365797e3c9c51230d329140cd481db1de43593a5d8bfa3ddc7ac65c5c83ee9a1239cadcf0f998c47514d2cef5ee431622da6022ba3cc9496791caa6a5d155d187dbb131db88f8c5be22bbf77558f1e3920e7eecb7864909849e436d224e5ee7ba557b088"}}, {0x2e, &(0x7f00000001c0)=@string={0x2e, 0x3, "a965698cacfad14201d153139c14829abd3251f9e5745be9580790ac226198704738523a18a72601124771fc"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x810}}, {0x1f, &(0x7f0000000ac0)=@string={0x1f, 0x3, "fd58643bb87975e4857291cb3384577e96ed9ee7e8d9c68efb9418b971"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4001}}, {0x17, &(0x7f0000000b00)=ANY=[@ANYBLOB="1703aae6a528f3f9e063cd9298fb9b05d2b9843537159e0eb3573cff0016661b037945641ebb02beb6e21b2552153881f4d75fa8c705386347a4329713762deedf25e44f478786dc307fc13f42b4c245370bd85df9e23a34e05627b4f355b90e7a1fbf484da26b8cc5d93738af0ae71af02aa682af78ccc021824c402a0b4616a9230eb51c3267188d55e8b01a24ac0143771f56686a3931da2586c34b34140b448b9292297e1a6e"]}]})
r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000080)={&(0x7f0000000200)=[{0xe4, 0x2200, 0x0, 0x0}, {0xfff, 0x1c11, 0x0, 0x0}], 0x2})

6.365246871s ago: executing program 7 (id=4549):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timerfd_create(0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
read$char_usb(r2, &(0x7f00000002c0)=""/151, 0x97)
syz_usb_disconnect(r1)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x404000}}], 0x18}, 0xe900)

4.288101217s ago: executing program 0 (id=4554):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005340)=@newtfilter={0x14b0, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1474, 0x2, [@TCA_MATCHALL_ACT={0x11b0, 0x2, [@m_pedit={0xfac, 0x11, 0x0, 0x0, {{0xa}, {0xefc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x3c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x101, 0x1, 0x10000000, 0x81, 0x7f}, 0x1, 0x10, [{0x7, 0x4, 0x100, 0x4, 0x7fffffff, 0x2}, {0x5000, 0x3, 0x8, 0x1, 0x3, 0x6}]}, [{0x2, 0xf, 0x874f, 0x23bd, 0xfff, 0x3}, {0x3, 0xc, 0x5, 0xe, 0x4, 0x5}, {0x5, 0x8, 0x101, 0x47ff, 0x1, 0x401}, {0x7fffffff, 0x7, 0x1ff, 0xb, 0xe, 0x100}, {0x4, 0x7, 0x3, 0x6, 0x0, 0x8}, {0x80000000, 0xffff, 0xc79f, 0x7fffffff, 0x2, 0x2}, {0xb, 0x8, 0x8, 0x6ce4, 0x5, 0x7}, {0x3, 0x10001, 0x4, 0x6, 0xfffffffc, 0x7fffffff}, {0x59dc, 0x3, 0xffffffff, 0x2, 0x15, 0x8}, {0x0, 0xa131, 0x4, 0x8, 0x5, 0x2}, {0x400, 0x7fffffff, 0x2, 0x5, 0x2, 0x81}, {0x7, 0x7, 0x58aa, 0xfffffffb, 0x8001, 0x3}, {0x3ff, 0x4, 0xfffffffc, 0x800, 0xadc3946, 0x406}, {0x11cc, 0x7, 0xbfa, 0x0, 0x9, 0x7f}, {0x10, 0x7, 0x7, 0x1, 0x212, 0x4}, {0x9, 0x5, 0x5, 0x5, 0x3}, {0x9, 0x9, 0x7, 0x5, 0xd23d, 0x46}, {0x7fffffff, 0x3, 0xe, 0x10, 0xb8}, {0x387f, 0x1, 0x9, 0x6, 0x4, 0x800}, {0x4b, 0xab, 0x3, 0x7, 0x7, 0x5}, {0xc2, 0x8, 0xf70, 0x7f, 0x8, 0x10000}, {0x400, 0x4, 0x8, 0x8001, 0x800, 0xff}, {0x366, 0x0, 0x8, 0x5, 0x80000000, 0x6}, {0x1, 0x1000, 0x7, 0x2, 0x92ea, 0x2}, {0xf, 0x2c5, 0xb24, 0x200, 0x4, 0x9}, {0x0, 0x7, 0x8020000, 0xa, 0x62a, 0xd}, {0x4, 0x7, 0x1ff, 0xfffffffa, 0x2, 0x4}, {0xfff, 0x9, 0x3, 0x3, 0x6, 0x401}, {0x8000, 0x1, 0x4, 0x7, 0x9, 0x8000}, {0x6, 0xc, 0x1, 0x7, 0x10000, 0x6}, {0x0, 0x7, 0x3ff, 0xff, 0x1fd, 0x8}, {0x9, 0x5, 0x0, 0x8562, 0x6, 0x200}, {0xffffffff, 0x5, 0x6, 0x8001, 0x9, 0x4}, {0x9, 0x6, 0x4, 0x7, 0x0, 0x59}, {0x9, 0x8, 0x2, 0x8001, 0x0, 0x6}, {0x0, 0x3, 0x80000000, 0x4, 0x579c0000, 0x6}, {0x80, 0x298f, 0x3, 0x2, 0x8}, {0x1, 0x7, 0x6, 0x5, 0x74, 0x42}, {0xfffffff7, 0x6, 0x81, 0x0, 0x7, 0x1}, {0xe, 0x6, 0xfffeffff, 0x95, 0x5, 0x456}, {0x342, 0x0, 0x3ff, 0x6, 0x7, 0xe}, {0x7, 0x527d, 0x1ff, 0x4, 0x2, 0x7}, {0x7, 0x8, 0x0, 0x4, 0xbe, 0x3}, {0x1, 0x1, 0x8, 0x5, 0x4, 0x8}, {0x9, 0x6, 0x3, 0x2, 0x8}, {0xb, 0x3, 0x2, 0x8, 0x9, 0x5}, {0x4, 0x9, 0xc, 0x80000001, 0x4, 0x2}, {0x2, 0x6, 0x9, 0x9, 0x2, 0x930b}, {0x1ff, 0x0, 0x7, 0xffff, 0xed3e, 0x2}, {0x36c, 0x3, 0x3, 0x1, 0xf8, 0x82}, {0x2, 0x7f, 0x7, 0x8, 0x9, 0xa}, {0x9, 0x2, 0x6, 0xd, 0xf6a, 0x9}, {0xffff, 0x3, 0x100, 0x0, 0x199a5a74, 0x2}, {0x5a, 0x8000, 0x7fffffff, 0x3, 0x8000, 0x6}, {0x7fff, 0x6, 0x6, 0x7, 0x100, 0x7}, {0x401, 0xdd, 0x0, 0x3, 0x6e1, 0xe00000}, {0x3, 0x8, 0x7, 0x10000, 0x8, 0x7b6ca3de}, {0xe, 0x80000001, 0x100, 0x8, 0x6, 0x3}, {0x1000, 0x0, 0xcb5, 0xff, 0x81, 0xc50}, {0x6, 0x8, 0x3, 0xb, 0x19, 0x8}, {0x8, 0x3, 0xc, 0x80, 0x5, 0x401}, {0x6, 0x3, 0x6, 0x890, 0x5, 0x5031}, {0x2, 0x7b2, 0x81, 0x1, 0x8}, {0x24a, 0xffff, 0x99d4, 0xffffffff, 0x7fff, 0x6}, {0x3ff, 0xfff, 0x3, 0xfffffff9, 0x8, 0x15aa}, {0x9, 0x8, 0x4a, 0x8ac3, 0x5, 0x3}, {0x3, 0x319, 0x8, 0x2, 0x0, 0x4}, {0x80000001, 0x7, 0x9, 0x2, 0x77, 0x28}, {0x3, 0x616, 0x9, 0x0, 0x1ac, 0x6}, {0xf5, 0xe1c, 0x4, 0x741, 0x5, 0xfffffff5}, {0x0, 0x10001, 0x0, 0x0, 0x7, 0x9}, {0x8, 0xfffffff8, 0x8, 0x2, 0x7fffffff, 0xfc0}, {0x8, 0x8, 0x6, 0x6, 0x4, 0x2}, {0x8000, 0x80000001, 0x5, 0xffffffff, 0x5, 0x7ff}, {0x0, 0x35, 0x3, 0xe0, 0x8001, 0x8000}, {0x2, 0x7, 0x9, 0x7, 0x3ff, 0x3}, {0x6, 0x0, 0x83, 0x38800, 0xfffffffb, 0x6}, {0xb1, 0x20, 0x80000001, 0x5, 0x0, 0x6}, {0x9, 0x9, 0x2, 0x200, 0x0, 0x2}, {0xa2, 0x1000, 0x10, 0x6, 0x6, 0xffff0000}, {0x6, 0x100, 0x3, 0x3, 0x200, 0x5}, {0xfff, 0x0, 0xffffffff, 0x400, 0x989, 0x5}, {0x0, 0x6, 0x3ff, 0x7, 0x2, 0xc}, {0xffffffff, 0x200, 0x2, 0x3, 0x30, 0x9}, {0x7ff, 0x2, 0x71, 0xc000, 0x1, 0xfff}, {0x2, 0x1, 0x9, 0x80000001, 0xffff2f32, 0x3}, {0x2, 0xc64, 0x80, 0x0, 0xf}, {0x9, 0x7, 0x6, 0x35, 0x4, 0x6}, {0x81, 0x5, 0x9, 0xc, 0xffff7fff, 0x101}, {0x2, 0xb, 0x5, 0x5, 0xb, 0x3ff}, {0x800, 0x69cded44, 0x7, 0xacd, 0x75a, 0xa}, {0x0, 0x6, 0x6, 0x6, 0x4}, {0xffff, 0x8, 0x6ae, 0x9}, {0x401, 0x2, 0x4, 0xea, 0xfffffff9, 0xc2}, {0x8, 0x800, 0x0, 0x7, 0x77, 0x9}, {0x2, 0x8, 0x3, 0x454d89ed, 0x401, 0x5}, {0x5, 0x7ff, 0x4, 0x80000001, 0x2, 0x9}, {0x4, 0x1, 0x1, 0x80000001, 0x3, 0x101}, {0x4, 0x81, 0x6, 0x800, 0x356e5b77, 0x10000}, {0x8, 0x4076, 0x9, 0xa, 0x2, 0x7}, {0x3, 0x0, 0xfffffffa, 0xfffffffc, 0x9, 0x6}, {0x80, 0x1ff, 0x287, 0x4, 0xffffffff, 0x2}, {0x80, 0x81, 0xb, 0x9, 0x8000, 0x2}, {0x81, 0x7, 0x7b4, 0xb7e9, 0x7, 0x3}, {0x9, 0x401, 0xfff, 0x62e, 0x4, 0xd1b}, {0x2, 0x2, 0xccc, 0xf, 0x165f, 0xfffffff7}, {0xbe, 0x81, 0x650f6bb9, 0xe, 0xfef7, 0x7}, {0x85b, 0xaa, 0x1, 0x1, 0xe, 0xac50}, {0x2, 0x4a469e9f, 0xcbbd, 0xfffffffc, 0x3, 0x3}, {0xfffffff9, 0x9, 0x7, 0x5, 0xffff0000, 0x5}, {0x6, 0x2, 0xa1, 0x5, 0x9, 0xb}, {0x2e0, 0x5, 0x9, 0x9, 0x2, 0xdb9b8b8}, {0x10001, 0x9, 0x9, 0x6, 0x4c, 0x80}, {0x3, 0x3a, 0x401, 0xe5, 0xf, 0x8}, {0x7fff, 0xff, 0x1, 0x8001, 0x743, 0xe}, {0x5, 0x4, 0x2, 0x5, 0x8, 0x8}, {0xffffff01, 0x5d2fa6c1, 0x10001, 0x7, 0x1ff, 0x268536da}, {0x200000, 0x7, 0x3f, 0x9, 0x1, 0x7}, {0xe, 0x7, 0x4, 0xab, 0x2, 0xd}, {0x3, 0x7fffffff, 0x1, 0x8001, 0x1000, 0x3}, {0x92, 0x3, 0x5, 0x7, 0x10001, 0xb}, {0xf, 0xe, 0x800, 0x4f20, 0x8001}, {0x3, 0x6, 0x6, 0x4, 0x1383, 0x100}, {0x4, 0x5, 0x6, 0x3, 0x4, 0x4}, {0x2, 0xfffffffe, 0x3, 0x2, 0x9, 0x6}, {0x356, 0x4e3, 0x630, 0x2, 0x2e, 0x4}, {0x10000, 0x5a8a, 0xfff, 0x0, 0x8, 0x2}, {0x8, 0x515, 0x2, 0x15, 0x0, 0x7}], [{0x2}, {0x5}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x5}, {0x4}, {0x4}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x0, 0xcdba517898f8997b}, {0x2}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x5}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x9271e110655ffdc8}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {}, {0x3, 0x141442aa0588389d}, {0x3}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x86, 0x6, "2edfdb0a9f846732fbcc51f98e99a6dbdd3906aae85eb5cf04a030f3ac71c95a55800ac291bdcc6f446a2a07472a90815d9f669fa94675ef21ea6cc88bad3ce83b791ad7f2b69efef32c45bc6208dbff7c1c4a6dc3dc9cf1e2434902dd1ac45de55d7eba6d78766a9b38cf42814508399a0e4539ee1ed8c01b14469120d716fbd26b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x5c, 0x20, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x98, 0x1a, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x800}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x110}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x10}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x10}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xffe0}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x8}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x1a, 0x6, "a65c27378874d42f62e0adec577b2a8a2d5f03f06b97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x70, 0x12, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_PARMS={0x18, 0x1, {0x100, 0x10000, 0x3, 0x1, 0x40}}, @TCA_CT_LABELS={0x14, 0x7, "c2c3f3aefa43dd3a1a219217c228c7ef"}, @TCA_CT_ACTION={0x6, 0x3, 0x13}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x9c, 0xb, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1c6d}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}]}, {0x5f, 0x6, "676ee03e13e66dabfe0ef95a4696e9220ad5435aa2dd0039c83679af3726b3a4bf41f23e7d9ecf9bc42d68482461d6c8160d885ac6ecbdc3e314dac1816c0c70adbf307a6395293aa9854eea4db8b53fbc20c8fc968cb6c315b8c7"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xffff}}, @TCA_MATCHALL_ACT={0x290, 0x2, [@m_gact={0x12c, 0x1b, 0x0, 0x0, {{0x9}, {0x4}, {0xff, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0xfc, 0x15, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x6, 0x10000003, 0x4, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x5, 0xffffffffeffffff1, 0x3785efa8, 0x6}, 0x7c6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x5, 0xa69b, 0x3}, 0x4f8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x5, 0x4, 0x91}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x60, 0x5, 0x5, 0x8}, 0x2df3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x5, 0x9, 0x80000000}, 0xb170}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x2, 0x1, 0x7, 0x97}, 0xfffc}}]}, {0x5, 0x6, '\"'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x34, 0x10, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x30, 0x12, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x6}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x25, 0x9}}]}, 0x14b0}, 0x1, 0x0, 0x0, 0x8848}, 0x4080)

4.248737529s ago: executing program 0 (id=4555):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f00000003c0)="ea00000100000000", 0x8)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100), 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40080)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000)
sendmsg$NFT_BATCH(r6, 0x0, 0x24000840)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)

4.101219857s ago: executing program 6 (id=4556):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4)

4.100670698s ago: executing program 8 (id=4557):
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x18)
ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0xd84c, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={&(0x7f00000007c0)="acac17b52bf426aec101dc702aeb18e6bc677c3d48990a52908b2924733e4fe341cc21db0f864229d23b11c590967c02b8ca4d2e03f7efeb8353abd1283209831e6230376018961bec7c34e96f0f64588c90d0112265e1af112b260bad61fb4b555b2976e417301eca5c1fa63b4b2e8f2c32e7c32e31dc6cd3607b2508879e16aa1e4ff983e311b065f4eb91e1b2b335530b60e4e8209bfdbcc96e82c8d617917d1fad437e32061c77a227e018928c49bdef0ffc4eaec2e84ad9", &(0x7f0000000880)=""/218, &(0x7f0000000480)="4d5dc7d0bde5ae1852809483e20162f581d68686706fc609e5b58e7c814b07f0a99559a9988e37ad7a77edc07c45910cf6f02d2d7073995cdfb991", &(0x7f0000000980)="db2b5b2debcebf57387a0df730c63f23dbbcee626e681c0aadd528d3e3f52a535ddd1bfbbd1d13c3bbc0b9de2c569c56e1b041d937ec2f176420ce01cf1478bbd019e5c6ed17277bebbf0d390e8cf1dc9b6f71edd7067f4476f04cc08f187c9ac2442cb3e13c65ca69c58b6b55ca243e5ed9fc0a6a82e6152bb98071a9a8b9d250380c4b2f8e3cd9ec993d50dd1fda723ca440497c5f6266c821762651b79a0c22676e27bcde66820b6f974e6d256699fbe4e15e05849ac49fa6c1c539dbff3fa602", 0x0, r8, 0x4}, 0x38)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000001010000040003000000400001802c0004001400010002004e227f00000100000000000000001400020002000000e000000200000000000010000d0001007564703a73797a320000000069b6e7f56cfbc9bbfd40c9f0e75c607900a5f243c4fb689000ea58f514246e395e06191a4383a8505f8c0f2c4204bd18f50ebbdfc372c10db66c7d7d53cc1ba656de427c3ae40b1809c7c688dcb19ee8159017ad36c04d83d9c83f5f12a5817ceeacda5215442ef6504cb446786b00f6d942b42117c5ce8acc82022268b55e0845b3443fb3c08ac90c5b514b8e03534de51f86f5c99b56bca086259c472733f4b6f7ccfbe6d5a5b4"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r7)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={0xfc, r10, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xae9}, {0x6, 0x11, 0xe131}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x197d}, {0x6, 0x11, 0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040001)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000140)=@generic={0x2, 0x8a7, 0x2f8d666a})

3.949440115s ago: executing program 5 (id=4558):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4001088)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d4005000c0000003400070001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a0deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a4dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f064f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737371cdf8f681dd7a2685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52d9870cdfb950b139625fa88f5c9088fc9032a5ea07415029c74354f54e37427a4b26e559cd240b7950630d7d4da9cb8d256356bee8c827db43313e75da9c36d0f7bef4fcf23469d8c9104a917959c3bc791a54d1882f532d2597ff50d4a10fe3b80a3d67d3c3dca0dfe0e4eb039df7480542f841313ad2ec26fe7d03829f80c6f3e028d2f4495c3c523929b203048ac9ba20b012c005e36b93eb5a02768503c6c41f50d2a04999bba560f86c7c9a78e4b337983cbdb5d71be3090208a1f7eaa3edc840ea0da5f4cc01f3e87c7566176981a738bcd4dd8b8a137e7a15e57054ebf1d9ba227361be11a7d1c6d7b8d64364041468e6268ea23e74eacbb5200e2d8f8919402ca20794a29dd986c6593d47b47d5cd70153908a77039a995a44e960ad037f4d2569751eea3ae70fc49f32c30d6be0594bfda189f0be84d1eaf70e0e90223a3c97ade9973e9219c5a2e1c68efe6adf744710eb0ad8e555be26855496bc6b5e13078380230728b1862f0d93397b88ebf5197b61d27b6c555502aed27d2f2b127aeeae41dd4324fad2e7a96292a556c936481f668d18cf20fc36d68e566ea49c5ecf962eb24f6efe0a32f6cac21ed2aa1a657c0ac8ad2bac77f2ad12cb16006dbed24bcb"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) (async)
fcntl$setstatus(r0, 0x4, 0x42000) (async)
read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async)
write$char_usb(0xffffffffffffffff, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4001088) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) (async)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) (async)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) (async)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d4005000c0000003400070001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a0deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a4dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f064f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737371cdf8f681dd7a2685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52d9870cdfb950b139625fa88f5c9088fc9032a5ea07415029c74354f54e37427a4b26e559cd240b7950630d7d4da9cb8d256356bee8c827db43313e75da9c36d0f7bef4fcf23469d8c9104a917959c3bc791a54d1882f532d2597ff50d4a10fe3b80a3d67d3c3dca0dfe0e4eb039df7480542f841313ad2ec26fe7d03829f80c6f3e028d2f4495c3c523929b203048ac9ba20b012c005e36b93eb5a02768503c6c41f50d2a04999bba560f86c7c9a78e4b337983cbdb5d71be3090208a1f7eaa3edc840ea0da5f4cc01f3e87c7566176981a738bcd4dd8b8a137e7a15e57054ebf1d9ba227361be11a7d1c6d7b8d64364041468e6268ea23e74eacbb5200e2d8f8919402ca20794a29dd986c6593d47b47d5cd70153908a77039a995a44e960ad037f4d2569751eea3ae70fc49f32c30d6be0594bfda189f0be84d1eaf70e0e90223a3c97ade9973e9219c5a2e1c68efe6adf744710eb0ad8e555be26855496bc6b5e13078380230728b1862f0d93397b88ebf5197b61d27b6c555502aed27d2f2b127aeeae41dd4324fad2e7a96292a556c936481f668d18cf20fc36d68e566ea49c5ecf962eb24f6efe0a32f6cac21ed2aa1a657c0ac8ad2bac77f2ad12cb16006dbed24bcb"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) (async)
write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) (async)

3.413371845s ago: executing program 5 (id=4559):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 3)

3.265359727s ago: executing program 7 (id=4560):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f00000003c0)="ea00000100000000", 0x8)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100), 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40080)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x601, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)

3.181655559s ago: executing program 5 (id=4561):
writev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, 0x25, 0x301, 0x70bd26, 0x8000, {0x1}, [@nested={0xc, 0x12e, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4844}, 0x44004)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = syz_open_dev$dvb_dvr(&(0x7f0000000080), 0x1, 0x8c000)
r9 = socket$pptp(0x18, 0x1, 0x2)
ioctl$DVB_DVR_DMX_EXPBUF(r8, 0xc00c6f3e, &(0x7f00000005c0)={0x2, 0x80000, r9})
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa00100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r11, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet(0x2, 0x3, 0x9)

3.181394395s ago: executing program 6 (id=4562):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000600)}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x7})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000035c0)="660f38811605500f32baf80c66b81826bf8366efbafc0cec66b9800000c00f326635010000000f30f30f09da67f6d9cf3e2e660f38811cf2ab0fc798ea00", 0x3e}], 0x1, 0xe, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000640))
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x40a}, 0x10)
sendmsg$NFT_BATCH(r5, 0x0, 0x20000000)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000600c00f000014000000450a0fc0006600000b2f", @ANYRESDEC], 0xfce)
syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="0380c2000002bbbbbbbbbbbb88a8080081000a00080045000030000000000001"], 0x0)

2.790343225s ago: executing program 6 (id=4563):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000160a010400dbfa0000000000020000040900020073797a30000000000900010073797a300000000014000000117d667ffad3e2ba662ac79000010000000000000000000100000a32a755852a36d87f1e2a75bce6169c58a787f373270aaa346a12a870b071ac393706dcda388d5d8eb21e889ca4ccfc8ee4135c31388aa248"], 0x54}}, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x2100, &(0x7f0000000400)={0x2, 0x4e22, @private=0xa010102}, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x4001)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-neon\x00'}, 0x58)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="21050000"], 0x14}}, 0x0)
io_uring_enter(r3, 0x80002219, 0x7721, 0x16, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf0, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000001c0)=0x4)

2.643495363s ago: executing program 5 (id=4564):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0)

2.565157602s ago: executing program 6 (id=4565):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$inet6(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)=""/127, 0x7f}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cef", 0x5f, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000000080500000000000000000003000005050003008008000a40000000020900010073797a3000"/60], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x30004893}, 0x80)

2.564014713s ago: executing program 5 (id=4566):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r1, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) (async)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r1}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r1, r1, 0x1000, 0xb6, 0x3fff}) (async)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabe9689ce9f88080045b4005c0000000000019078ac1e0101ac1414aa05019078ac1414aa402200020067144206330007ac1414aa0a01010086290000000301031d000af72d95551ef68f4901105d7923f880c66fae940c4981c5b40506d53be383000000756c85f65fc79e05f9179ce6f417b0e4503371454b05f12f3a7655eb91ec4b7013af03d09c90e01a5b2e7077e79f4a28d42b7eccbbecff2104dfe9fe7e0c84c926d958b0df55096d38d989249dcd60959300788c136653bb1fb272e99537daa298b8ee702b39f5a686c817a091be7521b9be7c1d3eaf643db246f3c9"], 0x0)

2.266125956s ago: executing program 5 (id=4567):
syz_open_dev$vbi(0x0, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x12, 0x2, "8ed4"}, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(0x0, 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x3, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}})

2.228988575s ago: executing program 0 (id=4568):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host, 0x1})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@my=0x0, 0xfffff7fe})
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0))
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x310, 0x2a8, 0x2a8, 0x310, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0xffffffff, 'wg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x190, 0x1f0, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@recent0={{0xf8}, {0xfffffffa, 0x40e151, 0x2, 0x0, 'syz0\x00', 0xfa}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0xff000000, 0xffffffff, 0x87fdedd74ac825a6], 0x4e23, 0x4e23, 0x4e24, 0x4e24, 0x2, 0x6, 0xfffff000, 0x1}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x6c}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x2, 0x7, [0x8, 0x2b, 0xe, 0x9, 0x40, 0x16, 0x1a, 0x25, 0x16, 0x28, 0x30, 0x26, 0x23, 0x8022, 0x401a, 0x19], 0x0, 0x1000, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x408)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000280)=0x8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r0, r5)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r8 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={r6, 0x1, {0x2a12, 0x80010000, 0x0, 0x0, 0x280000000000000, 0x0, 0x9, 0x5, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ab7eea6d191d4eb89bdb22d0000b438a1a93c7540f4767f9e01177d3dd4060000006149f041334dfb005700", "907f000055f900000000b3bcda61000000000000002585b18e00", [0x500000000000, 0x7]}})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYBLOB="02"], 0x9)
sendto$inet6(r0, &(0x7f0000000180)="8611c1", 0x3, 0x20000100, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8)

1.693007358s ago: executing program 7 (id=4569):
socket(0xa, 0x3, 0x3a)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x8, 0x5, 0x0, 0x3, 0xfffffffffffffffd, 0xffff, 0xfa11, 0x409}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}}, 0x40000c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0xfffffffd, 0x2a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCGETA(r5, 0x5405, &(0x7f0000000000))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000001c7d7ea68548faf18b31f64370bbd04bf3adf3"], 0x1c}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x2)

1.598123048s ago: executing program 6 (id=4570):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0xe5c7a000)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000000)={0x40, 0x10, 0x4, '\f{\fK'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.213452377s ago: executing program 0 (id=4571):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x400aee2, 0x2, 0x1, 0x317}, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000100))
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
umount2(&(0x7f0000000080)='./file0\x00', 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000001c0)={&(0x7f0000000000)=[{0x1, 0x0, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}], 0x2})

965.68657ms ago: executing program 8 (id=4572):
r0 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x2, 0x88001)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)="9c959fcb909b0c30639a447c3627d61ae506c2f39152b18811e0aa2f3ab35140f8620492231fda9ff5d5a8a81b9fc2b303362da7bebcf08392729090ec7a520b61d679b715ac818cbeaefc2502f511302a79f23dbe059873dede23c20a7e48368b0f8da97a682960d24def580203aaba65a946e358b4f71d8c259a9c34dd740e6d2bd219bad9881e2a35c232902f48c2823437333d9ba255dba19c2cec30b592b9c61ddd26900d1fd98267c1be77fcc077c4f0666a865d83e1d55c71610821e3d7faedadf01e3122017baf4349f9bcbc2433", 0xd2, r1)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x2, 0x5, 0x1, 0x4})
syz_open_dev$ttys(0xc, 0x2, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
socket(0x840000000002, 0x3, 0xff)
r4 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r5 = fsopen(&(0x7f0000000300)='hpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\x9c\x00\x00\x00\x00\x00\x00\x00&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc50\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\x05\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1oO\xe4\x99\xd6\xed\x83\xb0\x18q\xb9\xda\xf1kk\xb0N\xe69D\x12\x1f\x96\x85y\xe1\xf6\x83\x81\xc1\xcb\x169\xa5A%\xcb\n\xaby\x9f\x97\xde\xcf\x14\x0f\xffl\xb0e\xa2m\xb3\x8fsI\xc8v<\x8a\\7\xbaA\xef\x92\x98K\xfd\xaa\xdb', 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, 0x0)
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x82, 0x69, @scatter={0x8, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/53, 0x35}, {&(0x7f00000004c0)=""/50, 0x32}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/132, 0x84}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000001700)=""/173, 0xad}, {&(0x7f0000000540)}]}, &(0x7f0000000280)="99d3a24738682d0c1c1cd66fd35b568856fc3a45500836a494b5fd5fc07adfed31556cc6a593978da7f96e3891556ee93d06070912cf42085046e03a2e546dd83779aad39639307fb9b955470e5febf3b8588357c48644e2ce292d12dcee0ff0323b3dae269b7434357c167b58384e358bed021a1a8be956337955db3ca276a6b5c8", &(0x7f0000000340)=""/166, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000180)})
syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0)
write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2)

321.546783ms ago: executing program 7 (id=4573):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000600)}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x7})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000035c0)="660f38811605500f32baf80c66b81826bf8366efbafc0cec66b9800000c00f326635010000000f30f30f09da67f6d9cf3e2e660f38811cf2ab0fc798ea00", 0x3e}], 0x1, 0xe, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000640))
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x40a}, 0x10)
sendmsg$NFT_BATCH(r5, 0x0, 0x20000000)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000600c00f000014000000450a0fc0006600000b2f", @ANYRESDEC], 0xfce)
syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="0380c2000002bbbbbbbbbbbb88a8080081000a00080045000030000000000001"], 0x0)

0s ago: executing program 7 (id=4574):
writev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, 0x25, 0x301, 0x70bd26, 0x8000, {0x1}, [@nested={0xc, 0x12e, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4844}, 0x44004)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = syz_open_dev$dvb_dvr(&(0x7f0000000080), 0x1, 0x8c000)
r9 = socket$pptp(0x18, 0x1, 0x2)
ioctl$DVB_DVR_DMX_EXPBUF(r8, 0xc00c6f3e, &(0x7f00000005c0)={0x2, 0x80000, r9})
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa00100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r11, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet(0x2, 0x3, 0x9)

kernel console output (not intermixed with test programs):

ng for an remote control event.
[ 1381.151551][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1381.157547][ T5941] dvb-usb: error while querying for an remote control event.
[ 1381.322061][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1381.327901][ T5941] dvb-usb: error while querying for an remote control event.
[ 1381.491570][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1381.497480][ T5941] dvb-usb: error while querying for an remote control event.
[ 1381.661586][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1381.667698][ T5941] dvb-usb: error while querying for an remote control event.
[ 1381.831952][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1381.838511][ T5941] dvb-usb: error while querying for an remote control event.
[ 1382.002250][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1382.008037][ T5941] dvb-usb: error while querying for an remote control event.
[ 1382.171678][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1382.177561][ T5941] dvb-usb: error while querying for an remote control event.
[ 1382.342601][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1382.348572][ T5941] dvb-usb: error while querying for an remote control event.
[ 1382.484281][ T5941] usb 7-1: USB disconnect, device number 118
[ 1382.538188][ T5941] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1382.641617][T18241] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1382.801533][T18241] usb 1-1: Using ep0 maxpacket: 8
[ 1382.982328][T18241] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1382.998176][T18241] usb 1-1: config 4 interface 0 has no altsetting 0
[ 1383.013982][T18241] usb 1-1: string descriptor 0 read error: -22
[ 1383.024530][T18241] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1383.039895][T18241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1383.066125][T18241] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1383.095134][T18241] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1383.110875][T18241] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1383.118321][T18241] usb 1-1: media controller created
[ 1383.135267][T18241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1383.271022][T18241] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1383.331024][T18241] usb 1-1: USB disconnect, device number 42
[ 1383.391204][T18232] gspca_zc3xx: reg_w_i err -71
[ 1383.421610][T18232] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1383.434470][T18232] usb 6-1: USB disconnect, device number 39
[ 1383.841608][ T5922] usb 7-1: new full-speed USB device number 119 using dummy_hcd
[ 1383.974521][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4177'.
[ 1383.988288][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4177'.
[ 1383.997776][T20935] netlink: 'syz.5.4177': attribute type 11 has an invalid length.
[ 1383.999484][ T5922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1384.005993][T20935] netlink: 'syz.5.4177': attribute type 12 has an invalid length.
[ 1384.031794][ T5922] usb 7-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00
[ 1384.040867][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1384.067303][ T5922] usb 7-1: config 0 descriptor??
[ 1384.288328][T20927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1384.312392][T20927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1384.688492][ T5922] acrux 0003:1A34:F705.0034: unexpected long global item
[ 1384.697621][ T5922] acrux 0003:1A34:F705.0034: parse failed
[ 1384.703837][ T5922] acrux 0003:1A34:F705.0034: probe with driver acrux failed with error -22
[ 1384.910269][T20927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1384.941608][T20927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1385.007858][T18232] usb 7-1: USB disconnect, device number 119
[ 1385.173554][T20945] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4179'.
[ 1385.183969][T20945] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4179'.
[ 1385.312038][ T5942] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1385.465311][ T5942] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1385.474583][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1385.482953][ T5942] usb 6-1: Product: syz
[ 1385.487243][ T5942] usb 6-1: Manufacturer: syz
[ 1385.491886][ T5942] usb 6-1: SerialNumber: syz
[ 1385.502711][ T5942] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1385.518706][T18232] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1385.731299][T20943] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4178'.
[ 1385.831680][ T5922] usb 7-1: new full-speed USB device number 120 using dummy_hcd
[ 1385.955746][T20943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1385.969210][T20943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1386.014837][ T5922] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1386.026052][ T5922] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1386.035820][ T5922] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1386.045677][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1386.068447][ T5922] usb 7-1: config 0 descriptor??
[ 1386.083591][ T5922] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1386.090629][ T5922] dvb-usb: bulk message failed: -22 (3/0)
[ 1386.102392][ T5922] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1386.112557][ T5922] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1386.119629][ T5922] usb 7-1: media controller created
[ 1386.127012][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1386.140200][ T5922] dvb-usb: bulk message failed: -22 (6/0)
[ 1386.147289][ T5922] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1386.158417][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input138
[ 1386.171393][ T5922] dvb-usb: schedule remote query interval to 150 msecs.
[ 1386.178593][ T5922] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1386.205835][T18234] usb 6-1: USB disconnect, device number 40
[ 1386.279452][T20951] dvb-usb: bulk message failed: -22 (2/0)
[ 1386.331583][T18241] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[ 1386.331886][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 1386.346074][ T5922] dvb-usb: error while querying for an remote control event.
[ 1386.511606][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 1386.513304][T18241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1386.517501][ T5922] dvb-usb: error while querying for an remote control event.
[ 1386.527575][T18241] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[ 1386.544169][T18241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1386.555246][T18241] usb 1-1: config 0 descriptor??
[ 1386.692196][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 1386.703589][ T5922] dvb-usb: error while querying for an remote control event.
[ 1386.738692][T20965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4184'.
[ 1386.772524][T18241] usbhid 1-1:0.0: can't add hid device: -71
[ 1386.781128][T18241] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1386.809057][T18241] usb 1-1: USB disconnect, device number 43
[ 1386.872577][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 1386.878731][ T5922] dvb-usb: error while querying for an remote control event.
[ 1386.981664][T18232] usb 6-1: Service connection timeout for: 257
[ 1386.991630][T18232] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1387.334423][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 1387.340283][ T5922] dvb-usb: error while querying for an remote control event.
[ 1387.370495][T18232] ath9k_htc: Failed to initialize the device
[ 1387.520175][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 1387.546793][T18234] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1387.555651][ T5922] dvb-usb: error while querying for an remote control event.
[ 1387.743045][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 1387.776914][ T5922] dvb-usb: error while querying for an remote control event.
[ 1387.881618][T18234] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1387.937991][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4188'.
[ 1387.941630][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 1387.953084][ T5922] dvb-usb: error while querying for an remote control event.
[ 1388.031544][T18234] usb 6-1: Using ep0 maxpacket: 16
[ 1388.040955][T18234] usb 6-1: config 0 has an invalid interface number: 216 but max is 0
[ 1388.060927][T18234] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1388.089925][T18234] usb 6-1: config 0 has no interface number 0
[ 1388.099361][T18234] usb 6-1: config 0 interface 216 altsetting 0 endpoint 0xA has invalid maxpacket 4098, setting to 1024
[ 1388.111866][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 1388.117607][ T5922] dvb-usb: error while querying for an remote control event.
[ 1388.145682][T18234] usb 6-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024
[ 1388.169111][T18234] usb 6-1: config 0 interface 216 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1388.194293][T18234] usb 6-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74
[ 1388.209268][T18234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1388.225487][T18234] usb 6-1: Product: syz
[ 1388.232361][T18234] usb 6-1: Manufacturer: syz
[ 1388.240148][T18234] usb 6-1: SerialNumber: syz
[ 1388.257209][T18234] usb 6-1: config 0 descriptor??
[ 1388.266800][T20972] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1388.285742][T18234] usb-storage 6-1:0.216: USB Mass Storage device detected
[ 1388.293652][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 1388.299375][ T5922] dvb-usb: error while querying for an remote control event.
[ 1388.451575][T18241] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1388.471575][T18234] dvb-usb: bulk message failed: -22 (1/0)
[ 1388.479720][T18234] dvb-usb: error while querying for an remote control event.
[ 1388.626415][T18234] usb 7-1: USB disconnect, device number 120
[ 1388.677487][T18234] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1388.710319][T18241] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1388.723130][T18241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1388.881600][T18241] usb 1-1: Product: syz
[ 1388.885875][T18241] usb 1-1: Manufacturer: syz
[ 1388.890534][T18241] usb 1-1: SerialNumber: syz
[ 1388.944132][T18241] usb 1-1: config 0 descriptor??
[ 1390.123569][T18241] usb 1-1: Firmware version (0.0) predates our first public release.
[ 1390.135278][T18241] usb 1-1: Please update to version 0.2 or newer
[ 1390.240117][T18241] usb 1-1: USB disconnect, device number 44
[ 1390.463016][T21007] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1391.002743][T21016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4197'.
[ 1391.199728][T18241] usb 6-1: USB disconnect, device number 41
[ 1392.321596][T18232] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[ 1392.451969][T18232] usb 1-1: device descriptor read/64, error -71
[ 1392.512283][T18241] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[ 1392.676803][T18241] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1392.688853][T18241] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1392.698338][T18241] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1392.701645][T18232] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[ 1392.709090][T18241] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1392.773415][T18241] usb 6-1: config 0 descriptor??
[ 1392.781053][T18241] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1392.793112][T18241] dvb-usb: bulk message failed: -22 (3/0)
[ 1392.813432][T18241] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1392.825571][T18241] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1392.837338][T18241] usb 6-1: media controller created
[ 1392.861962][T18232] usb 1-1: device descriptor read/64, error -71
[ 1392.863116][T18241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1392.917634][T18241] dvb-usb: bulk message failed: -22 (6/0)
[ 1392.927743][T18241] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1392.945189][T18241] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input139
[ 1392.967689][T18241] dvb-usb: schedule remote query interval to 150 msecs.
[ 1392.985622][T18241] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1392.985664][T18232] usb usb1-port1: attempt power cycle
[ 1393.000433][T21027] dvb-usb: bulk message failed: -22 (2/0)
[ 1393.141669][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1393.147547][ T5941] dvb-usb: error while querying for an remote control event.
[ 1393.321538][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1393.331741][T18232] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[ 1393.333409][ T5941] dvb-usb: error while querying for an remote control event.
[ 1393.353745][T18232] usb 1-1: device descriptor read/8, error -71
[ 1393.531609][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1393.543626][ T5941] dvb-usb: error while querying for an remote control event.
[ 1393.611602][T18232] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[ 1393.652446][T18232] usb 1-1: device descriptor read/8, error -71
[ 1393.741857][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1393.748016][ T5941] dvb-usb: error while querying for an remote control event.
[ 1393.774856][T18232] usb usb1-port1: unable to enumerate USB device
[ 1393.951924][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1393.958341][ T5941] dvb-usb: error while querying for an remote control event.
[ 1393.971409][T21059] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4208'.
[ 1394.122065][ T5941] dvb-usb: bulk message failed: -22 (1/0)
[ 1394.127920][ T5941] dvb-usb: error while querying for an remote control event.
[ 1394.292106][T18241] dvb-usb: bulk message failed: -22 (1/0)
[ 1394.298016][T18241] dvb-usb: error while querying for an remote control event.
[ 1394.471591][T18241] dvb-usb: bulk message failed: -22 (1/0)
[ 1394.477455][T18241] dvb-usb: error while querying for an remote control event.
[ 1394.646198][T18241] dvb-usb: bulk message failed: -22 (1/0)
[ 1394.652127][T18241] dvb-usb: error while querying for an remote control event.
[ 1394.931666][T18241] dvb-usb: bulk message failed: -22 (1/0)
[ 1394.937548][T18241] dvb-usb: error while querying for an remote control event.
[ 1395.111573][T18241] dvb-usb: bulk message failed: -22 (1/0)
[ 1395.117877][T18241] dvb-usb: error while querying for an remote control event.
[ 1395.127870][T21064] tipc: Started in network mode
[ 1395.134786][T21064] tipc: Node identity , cluster identity 4711
[ 1395.141144][T21064] tipc: Failed to obtain node identity
[ 1395.147077][T21064] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1395.281615][T18241] dvb-usb: bulk message failed: -22 (1/0)
[ 1395.287497][T18241] dvb-usb: error while querying for an remote control event.
[ 1395.320757][T18241] usb 6-1: USB disconnect, device number 42
[ 1395.388190][T18241] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1395.696951][T21074] fuse: Bad value for 'fd'
[ 1395.925112][T21078] xt_hashlimit: size too large, truncated to 1048576
[ 1395.998046][T21080] netlink: 'syz.8.4213': attribute type 25 has an invalid length.
[ 1397.416700][T21066] syzkaller0: mtu greater than device maximum
[ 1397.811728][T18241] usb 7-1: new high-speed USB device number 121 using dummy_hcd
[ 1397.876579][T21061] delete_channel: no stack
[ 1398.203948][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4218'.
[ 1398.443007][ T5922] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[ 1398.501643][T18232] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[ 1398.592968][ T5922] usb 6-1: config 252 has an invalid interface number: 251 but max is 0
[ 1398.601707][ T5922] usb 6-1: config 252 has no interface number 0
[ 1398.608005][ T5922] usb 6-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc
[ 1398.618220][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1398.633062][ T5922] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280
[ 1398.651614][T18241] usb 7-1: device descriptor read/64, error -71
[ 1398.664552][T18232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1398.674892][T18232] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1398.684135][T18232] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1398.694092][T18232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1398.705240][T18232] usb 1-1: config 0 descriptor??
[ 1398.715486][T18232] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1398.723008][T18232] dvb-usb: bulk message failed: -22 (3/0)
[ 1398.730982][T18232] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1398.740341][T18232] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1398.748186][T18232] usb 1-1: media controller created
[ 1398.755299][T18232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1398.768032][T18232] dvb-usb: bulk message failed: -22 (6/0)
[ 1398.775393][T18232] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1398.784643][T18232] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input140
[ 1398.797731][T18232] dvb-usb: schedule remote query interval to 150 msecs.
[ 1398.806570][T18232] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1398.901914][T18241] usb 7-1: new high-speed USB device number 122 using dummy_hcd
[ 1398.918494][T21109] dvb-usb: bulk message failed: -22 (2/0)
[ 1398.963455][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1398.970808][T18232] dvb-usb: error while querying for an remote control event.
[ 1399.032939][ T5922] gspca_sn9c20x: Write register 1001 failed -71
[ 1399.045708][ T5922] gspca_sn9c20x: Device initialization failed
[ 1399.054815][ T5922] gspca_sn9c20x 6-1:252.251: probe with driver gspca_sn9c20x failed with error -71
[ 1399.069006][ T5922] usb 6-1: USB disconnect, device number 43
[ 1399.071574][T18241] usb 7-1: Using ep0 maxpacket: 16
[ 1399.089011][T18241] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1399.100331][T18241] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1399.110421][T18241] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1399.119654][T18241] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1399.127935][T18241] usb 7-1: Product: syz
[ 1399.132352][T18241] usb 7-1: Manufacturer: syz
[ 1399.136985][T18241] usb 7-1: SerialNumber: syz
[ 1399.148836][T18241] usb 7-1: config 0 descriptor??
[ 1399.151648][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1399.162963][T18232] dvb-usb: error while querying for an remote control event.
[ 1399.321626][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1399.327666][T18232] dvb-usb: error while querying for an remote control event.
[ 1399.422370][   T30] audit: type=1326 audit(1770928175.446:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4e19bf79 code=0x7ffc0000
[ 1399.446904][   T30] audit: type=1326 audit(1770928175.446:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4e19bf79 code=0x7ffc0000
[ 1399.479525][   T30] audit: type=1326 audit(1770928175.466:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1f4e19bf79 code=0x7ffc0000
[ 1399.502209][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1399.508038][T18232] dvb-usb: error while querying for an remote control event.
[ 1399.515860][   T30] audit: type=1326 audit(1770928175.466:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4e19bf79 code=0x7ffc0000
[ 1399.539996][   T30] audit: type=1326 audit(1770928175.466:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4e19bf79 code=0x7ffc0000
[ 1399.562912][   T30] audit: type=1326 audit(1770928175.466:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f1f4e19bf79 code=0x7ffc0000
[ 1399.586268][   T30] audit: type=1326 audit(1770928175.466:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4e19bf79 code=0x7ffc0000
[ 1399.637501][   T30] audit: type=1326 audit(1770928175.466:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4e19bf79 code=0x7ffc0000
[ 1399.671683][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1399.678688][T18232] dvb-usb: error while querying for an remote control event.
[ 1399.721510][   T30] audit: type=1326 audit(1770928175.466:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1f4e19bf79 code=0x7ffc0000
[ 1399.781788][   T30] audit: type=1326 audit(1770928175.466:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4e19bf79 code=0x7ffc0000
[ 1399.851971][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1399.857789][T18232] dvb-usb: error while querying for an remote control event.
[ 1400.031765][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1400.037776][T18232] dvb-usb: error while querying for an remote control event.
[ 1400.051673][ T5941] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1400.201542][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1400.206804][ T5941] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1400.207339][T18232] dvb-usb: error while querying for an remote control event.
[ 1400.225418][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1400.233703][ T5941] usb 6-1: Product: syz
[ 1400.238031][ T5941] usb 6-1: Manufacturer: syz
[ 1400.242779][ T5941] usb 6-1: SerialNumber: syz
[ 1400.250069][ T5941] usb 6-1: config 0 descriptor??
[ 1400.257301][ T5941] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1400.264028][ T5941] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1400.381837][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1400.389098][T18232] dvb-usb: error while querying for an remote control event.
[ 1400.460139][ T5941] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1400.471301][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1400.481425][ T5941] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1400.490131][ T5941] usb 6-1: media controller created
[ 1400.505555][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1400.552820][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1400.562327][ T5941] DVB: Unable to find symbol dib7000p_attach()
[ 1400.568806][T18232] dvb-usb: error while querying for an remote control event.
[ 1400.568886][ T5941] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1400.682087][ T5941] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1400.688511][ T5941] Registered IR keymap rc-empty
[ 1400.694420][ T5941] dvb-usb: could not initialize remote control.
[ 1400.700855][ T5941] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1400.741735][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1400.748283][T18232] dvb-usb: error while querying for an remote control event.
[ 1400.912573][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1400.918419][T18232] dvb-usb: error while querying for an remote control event.
[ 1401.071328][T21123] dvb-usb: bulk message failed: -22 (5/0)
[ 1401.081565][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1401.087576][T18232] dvb-usb: error while querying for an remote control event.
[ 1401.251618][T18232] dvb-usb: bulk message failed: -22 (1/0)
[ 1401.264824][T18232] dvb-usb: error while querying for an remote control event.
[ 1401.272845][ T5922] usb 1-1: USB disconnect, device number 49
[ 1401.423385][    C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1401.444708][T18241] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input142
[ 1401.482762][T18241] imon:send_packet: packet tx failed (-71)
[ 1401.501699][T18241] imon 7-1:0.0: panel buttons/knobs setup failed
[ 1401.540787][T21132] netlink: 'syz.0.4228': attribute type 72 has an invalid length.
[ 1401.571523][T18241] rc_core: IR keymap rc-imon-pad not found
[ 1401.577453][T18241] Registered IR keymap rc-empty
[ 1401.583782][T18241] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1401.598640][T18241] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1401.608567][T18241] imon:send_packet: packet tx failed (-71)
[ 1401.642440][T18241] imon 7-1:0.0: remote input dev register failed
[ 1401.654281][T18241] imon 7-1:0.0: imon_init_intf0: rc device setup failed
[ 1401.682937][T18241] imon 7-1:0.0: unable to initialize intf0, err 0
[ 1401.689993][T18241] imon:imon_probe: failed to initialize context!
[ 1401.696737][T18241] imon 7-1:0.0: unable to register, err -19
[ 1401.711263][T18241] usb 7-1: USB disconnect, device number 122
[ 1402.662343][T18234] usb 7-1: new high-speed USB device number 123 using dummy_hcd
[ 1402.811542][T18234] usb 7-1: Using ep0 maxpacket: 16
[ 1402.820875][T18234] usb 7-1: config 10 has an invalid interface number: 102 but max is 2
[ 1402.829846][T18234] usb 7-1: config 10 has an invalid interface number: 87 but max is 2
[ 1402.838282][T18234] usb 7-1: config 10 has an invalid interface number: 195 but max is 2
[ 1402.846875][T18234] usb 7-1: config 10 has an invalid interface number: 4 but max is 2
[ 1402.850669][T18241] usb 6-1: USB disconnect, device number 44
[ 1402.855164][ T5922] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1402.869594][T18234] usb 7-1: config 10 contains an unexpected descriptor of type 0x1, skipping
[ 1402.891305][T18234] usb 7-1: config 10 has 4 interfaces, different from the descriptor's value: 3
[ 1402.906188][T18234] usb 7-1: config 10 has no interface number 0
[ 1402.913486][T18234] usb 7-1: config 10 has no interface number 1
[ 1402.919758][T18234] usb 7-1: config 10 has no interface number 2
[ 1402.926214][T18234] usb 7-1: config 10 has no interface number 3
[ 1402.928582][T18241] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1402.932762][T18234] usb 7-1: config 10 interface 102 altsetting 5 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[ 1402.932793][T18234] usb 7-1: config 10 interface 102 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 1402.970597][T18234] usb 7-1: config 10 interface 102 altsetting 5 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1402.987897][T18234] usb 7-1: config 10 interface 102 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1402.999347][T18234] usb 7-1: config 10 interface 102 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[ 1403.010649][T18234] usb 7-1: config 10 interface 102 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 15
[ 1403.024217][T18234] usb 7-1: config 10 interface 87 altsetting 188 has a duplicate endpoint with address 0x7, skipping
[ 1403.035555][T18234] usb 7-1: config 10 interface 87 altsetting 188 has a duplicate endpoint with address 0xC, skipping
[ 1403.049027][T18234] usb 7-1: config 10 interface 87 altsetting 188 bulk endpoint 0xB has invalid maxpacket 1023
[ 1403.059437][T18234] usb 7-1: config 10 interface 87 altsetting 188 endpoint 0x8 has invalid maxpacket 544, setting to 64
[ 1403.111710][T18234] usb 7-1: config 10 interface 87 altsetting 188 has a duplicate endpoint with address 0x6, skipping
[ 1403.129711][T18234] usb 7-1: config 10 interface 87 altsetting 188 has 9 endpoint descriptors, different from the interface descriptor's value: 16
[ 1403.144889][T18234] usb 7-1: config 10 interface 195 altsetting 7 has a duplicate endpoint with address 0x1, skipping
[ 1403.157632][T18234] usb 7-1: config 10 interface 195 altsetting 7 has a duplicate endpoint with address 0xB, skipping
[ 1403.169161][T18234] usb 7-1: config 10 interface 195 altsetting 7 endpoint 0x3 has an invalid bInterval 24, changing to 7
[ 1403.221693][ T5922] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1403.229836][T18234] usb 7-1: config 10 interface 195 altsetting 7 has a duplicate endpoint with address 0xE, skipping
[ 1403.250948][T18234] usb 7-1: config 10 interface 195 altsetting 7 has a duplicate endpoint with address 0x1, skipping
[ 1403.278016][T18234] usb 7-1: config 10 interface 195 altsetting 7 has a duplicate endpoint with address 0xC, skipping
[ 1403.338804][T18234] usb 7-1: config 10 interface 195 altsetting 7 has a duplicate endpoint with address 0xB, skipping
[ 1403.350010][T18234] usb 7-1: config 10 interface 195 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[ 1403.364181][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0xE, skipping
[ 1403.409107][T21160] FAULT_INJECTION: forcing a failure.
[ 1403.409107][T21160] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1403.424219][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0x1, skipping
[ 1403.438343][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1403.448945][T21160] CPU: 1 UID: 0 PID: 21160 Comm: syz.5.4237 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1403.448963][T21160] Tainted: [L]=SOFTLOCKUP
[ 1403.448967][T21160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1403.448974][T21160] Call Trace:
[ 1403.448979][T21160]  <TASK>
[ 1403.448983][T21160]  dump_stack_lvl+0xe8/0x150
[ 1403.449002][T21160]  should_fail_ex+0x412/0x560
[ 1403.449019][T21160]  _copy_from_iter+0x1d3/0x1670
[ 1403.449046][T21160]  ? rcu_is_watching+0x15/0xb0
[ 1403.449059][T21160]  ? __pfx__copy_from_iter+0x10/0x10
[ 1403.449077][T21160]  ? netlink_sendmsg+0x650/0xb40
[ 1403.449087][T21160]  ? skb_put+0x11b/0x210
[ 1403.449101][T21160]  netlink_sendmsg+0x6c0/0xb40
[ 1403.449115][T21160]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1403.449126][T21160]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1403.449142][T21160]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1403.449157][T21160]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1403.449166][T21160]  ____sys_sendmsg+0xa68/0xad0
[ 1403.449179][T21160]  ? __might_fault+0xaf/0x130
[ 1403.449194][T21160]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1403.449210][T21160]  ? import_iovec+0x73/0xa0
[ 1403.449223][T21160]  ___sys_sendmsg+0x2a5/0x360
[ 1403.449234][T21160]  ? __lock_acquire+0x6b5/0x2cf0
[ 1403.449247][T21160]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1403.449275][T21160]  ? __fget_files+0x2a/0x420
[ 1403.449287][T21160]  ? __fget_files+0x3a0/0x420
[ 1403.449301][T21160]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1403.449315][T21160]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1403.449332][T21160]  ? __pfx_ksys_write+0x10/0x10
[ 1403.449349][T21160]  do_syscall_64+0x14d/0xf80
[ 1403.449362][T21160]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1403.449371][T21160]  ? trace_irq_disable+0x37/0x100
[ 1403.449383][T21160]  ? clear_bhb_loop+0x40/0x90
[ 1403.449395][T21160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1403.449404][T21160] RIP: 0033:0x7feae7d9bf79
[ 1403.449414][T21160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1403.449423][T21160] RSP: 002b:00007feae8c8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1403.449435][T21160] RAX: ffffffffffffffda RBX: 00007feae8015fa0 RCX: 00007feae7d9bf79
[ 1403.449442][T21160] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000004
[ 1403.449449][T21160] RBP: 00007feae8c8c090 R08: 0000000000000000 R09: 0000000000000000
[ 1403.449455][T21160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1403.449461][T21160] R13: 00007feae8016038 R14: 00007feae8015fa0 R15: 00007feae813fa48
[ 1403.449475][T21160]  </TASK>
[ 1403.451039][ T5922] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1403.714648][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0xD, skipping
[ 1403.730459][T18234] usb 7-1: config 10 interface 4 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[ 1403.741749][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0x5, skipping
[ 1403.752522][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0x6, skipping
[ 1403.763294][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0xD, skipping
[ 1403.774002][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0xE, skipping
[ 1403.784734][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0xC, skipping
[ 1403.795501][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0x9, skipping
[ 1403.806198][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0x83, skipping
[ 1403.816987][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0x8, skipping
[ 1403.827890][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0x2, skipping
[ 1403.854092][T18234] usb 7-1: config 10 interface 4 altsetting 15 has a duplicate endpoint with address 0x7, skipping
[ 1403.865879][T18234] usb 7-1: config 10 interface 102 has no altsetting 0
[ 1403.872786][T18234] usb 7-1: config 10 interface 87 has no altsetting 0
[ 1403.899936][T18234] usb 7-1: config 10 interface 195 has no altsetting 0
[ 1403.919887][T18234] usb 7-1: config 10 interface 4 has no altsetting 0
[ 1403.947871][T18234] usb 7-1: New USB device found, idVendor=0411, idProduct=00f4, bcdDevice=65.dc
[ 1403.957197][T18234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1403.968076][T18234] usb 7-1: Product: syz
[ 1403.975412][T18234] usb 7-1: Manufacturer: ᯯ鄄鞇읰똕ꕐ䂜评圛寬䴽겫雙㩘㫻邜杔ブ禤ຝ諍勖䖂攎댂端영
[ 1403.987311][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1404.001774][T18234] usb 7-1: SerialNumber: syz
[ 1404.016395][ T5922] usb 1-1: config 0 descriptor??
[ 1404.026959][T18234] usb 7-1: Interface #195 referenced by multiple IADs
[ 1404.034750][ T5922] pwc: Askey VC010 type 2 USB webcam detected.
[ 1404.048860][T21164] netlink: 'syz.8.4239': attribute type 72 has an invalid length.
[ 1404.467257][ T5922] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1404.475742][ T5922] pwc: recv_control_msg error -32 req 02 val 2700
[ 1404.498480][ T5922] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1404.509931][T18234] usb 7-1: USB disconnect, device number 123
[ 1404.549744][ T5922] pwc: recv_control_msg error -32 req 04 val 1000
[ 1404.701737][ T5922] pwc: recv_control_msg error -32 req 04 val 1300
[ 1404.723832][ T5922] pwc: recv_control_msg error -32 req 04 val 1400
[ 1404.736098][ T5922] pwc: recv_control_msg error -32 req 02 val 2000
[ 1404.754031][ T5922] pwc: recv_control_msg error -32 req 02 val 2100
[ 1404.976982][ T5922] pwc: recv_control_msg error -71 req 02 val 2500
[ 1404.985293][ T5922] pwc: recv_control_msg error -71 req 02 val 2400
[ 1404.995543][ T5922] pwc: recv_control_msg error -71 req 02 val 2600
[ 1405.014504][ T5922] pwc: recv_control_msg error -71 req 02 val 2900
[ 1405.035210][ T5922] pwc: recv_control_msg error -71 req 02 val 2800
[ 1405.075660][ T5922] pwc: recv_control_msg error -71 req 04 val 1100
[ 1405.111935][ T5922] pwc: recv_control_msg error -71 req 04 val 1200
[ 1405.144699][ T5922] pwc: Registered as video103.
[ 1405.174459][ T5922] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input144
[ 1405.214823][ T5922] usb 1-1: USB disconnect, device number 50
[ 1405.631999][T18232] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1405.791861][T18232] usb 6-1: Using ep0 maxpacket: 16
[ 1405.834669][T18232] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1405.846116][T18232] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1405.866477][T18232] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1405.889414][T18232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1405.903375][T18232] usb 6-1: Product: syz
[ 1405.907616][T18232] usb 6-1: Manufacturer: syz
[ 1405.917556][T18232] usb 6-1: SerialNumber: syz
[ 1405.935109][ T5941] usb 7-1: new high-speed USB device number 124 using dummy_hcd
[ 1406.139157][T18232] usb 6-1: 0:2 : does not exist
[ 1406.209538][T21194] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4247'.
[ 1406.330406][ T5941] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1406.335360][T18232] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1406.340533][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1406.475834][T18232] usb 6-1: USB disconnect, device number 45
[ 1406.515105][ T5941] usb 7-1: Product: syz
[ 1406.613013][ T5941] usb 7-1: Manufacturer: syz
[ 1406.628080][ T5941] usb 7-1: SerialNumber: syz
[ 1406.635982][T17645] udevd[17645]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1406.680227][ T5941] usb 7-1: config 0 descriptor??
[ 1406.698490][ T5941] hub 7-1:0.0: bad descriptor, ignoring hub
[ 1406.712048][ T5941] hub 7-1:0.0: probe with driver hub failed with error -5
[ 1406.900647][ T5941] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1406.957753][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4249'.
[ 1407.209915][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1407.227751][ T5941] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1407.243964][ T5941] usb 7-1: media controller created
[ 1407.274931][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1407.399167][ T5941] DVB: Unable to find symbol dib7000p_attach()
[ 1407.417528][T21203] netlink: 'syz.0.4250': attribute type 72 has an invalid length.
[ 1407.450028][ T5941] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1407.571806][ T5941] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1407.578312][ T5941] Registered IR keymap rc-empty
[ 1407.619754][ T5941] dvb-usb: could not initialize remote control.
[ 1407.797318][ T5941] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1407.905480][ T5941] usb 7-1: USB disconnect, device number 124
[ 1408.023018][ T5941] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1408.264206][T21224] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4254'.
[ 1408.722194][ T5942] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1408.791569][ T5922] usb 7-1: new high-speed USB device number 125 using dummy_hcd
[ 1408.911568][ T5942] usb 1-1: Using ep0 maxpacket: 16
[ 1408.922370][ T5942] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1408.934921][ T5942] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1408.947263][ T5942] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1408.956698][ T5922] usb 7-1: Using ep0 maxpacket: 8
[ 1408.971779][ T5922] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 1408.980982][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1408.992906][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1409.004902][ T5922] usb 7-1: Product: syz
[ 1409.107805][ T5922] usb 7-1: Manufacturer: syz
[ 1409.147145][ T5922] usb 7-1: SerialNumber: syz
[ 1409.167518][ T5942] usb 1-1: config 0 descriptor??
[ 1409.176159][ T5922] usb 7-1: config 0 descriptor??
[ 1409.196111][ T5922] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 1409.917653][T21243] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4261'.
[ 1409.921630][T18241] usb 7-1: USB disconnect, device number 125
[ 1410.020316][ T5942] nzxt-smart2 0003:1E71:2009.0035: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[ 1410.601572][T18241] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1410.762188][T18241] usb 6-1: Using ep0 maxpacket: 8
[ 1410.792937][T18241] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[ 1410.817152][T18241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1410.837347][T18241] usb 6-1: Product: syz
[ 1410.844352][T18241] usb 6-1: Manufacturer: syz
[ 1410.852125][T18241] usb 6-1: SerialNumber: syz
[ 1410.869976][T18241] usb 6-1: config 0 descriptor??
[ 1411.094665][T18241] gspca_main: sunplus-2.14.0 probing 04a5:3003
[ 1411.888112][T18238] usb 1-1: USB disconnect, device number 51
[ 1412.011750][T18241] gspca_sunplus: reg_w_riv err -110
[ 1412.019877][T18241] sunplus 6-1:0.0: probe with driver sunplus failed with error -110
[ 1412.247209][T21276] vivid-003: disconnect
[ 1412.262649][T21276] vivid-003: reconnect
[ 1413.164445][ T5942] usb 6-1: USB disconnect, device number 46
[ 1413.423047][T21291] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4275'.
[ 1413.521715][ T5942] usb 6-1: new low-speed USB device number 47 using dummy_hcd
[ 1413.752634][ T5942] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1413.763918][ T5942] usb 6-1: config 0 has no interface number 0
[ 1413.775798][ T5942] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1413.797681][ T5942] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1413.819426][ T5942] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1413.873540][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1413.903141][ T5942] usb 6-1: config 0 descriptor??
[ 1413.941880][T21286] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1413.966752][ T5942] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1414.205702][T21301] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4279'.
[ 1414.227307][T18238] usb 6-1: USB disconnect, device number 47
[ 1414.287962][T21301] bond1: Unable to set peer notification delay as MII monitoring is disabled
[ 1414.319444][T21305] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4279'.
[ 1414.334115][T21301] bond1 (unregistering): Released all slaves
[ 1414.404190][T21305] bond1: Unable to set peer notification delay as MII monitoring is disabled
[ 1414.431051][T21305] bond1 (unregistering): Released all slaves
[ 1415.351579][T18241] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1415.511587][T18241] usb 6-1: Using ep0 maxpacket: 8
[ 1415.523261][T18241] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1415.544314][T18241] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1415.571541][T18241] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1415.579666][T18241] usb 6-1: Product: syz
[ 1415.591606][T18241] usb 6-1: Manufacturer: syz
[ 1415.596273][T18241] usb 6-1: SerialNumber: syz
[ 1415.918762][T18241] usb 6-1: Handspring Visor / Palm OS: No valid connect info available
[ 1415.927554][T18241] usb 6-1: Handspring Visor / Palm OS: port 109, is for unknown use
[ 1415.935897][T18241] usb 6-1: Handspring Visor / Palm OS: port 211, is for unknown use
[ 1415.944488][T18241] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2
[ 1416.129980][T18241] visor 6-1:1.0: Handspring Visor / Palm OS converter detected
[ 1416.139688][T18241] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1416.151288][T18241] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1416.461566][ T5942] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1416.615408][ T5942] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1416.624723][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1416.633729][ T5942] usb 1-1: Product: syz
[ 1416.638034][ T5942] usb 1-1: Manufacturer: syz
[ 1416.642718][ T5942] usb 1-1: SerialNumber: syz
[ 1416.649303][ T5942] usb 1-1: config 0 descriptor??
[ 1416.658634][ T5942] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1416.664643][ T5942] hub 1-1:0.0: probe with driver hub failed with error -5
[ 1416.837859][ T5941] usb 6-1: USB disconnect, device number 48
[ 1416.856966][ T5941] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1416.873414][ T5942] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1416.879974][ T5941] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1416.896547][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1416.900069][ T5941] visor 6-1:1.0: device disconnected
[ 1416.923257][ T5942] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1416.933822][ T5942] usb 1-1: media controller created
[ 1416.953511][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1417.017689][ T5942] DVB: Unable to find symbol dib7000p_attach()
[ 1417.036565][ T5942] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1417.121570][ T5942] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1417.127924][ T5942] Registered IR keymap rc-empty
[ 1417.133602][ T5942] dvb-usb: could not initialize remote control.
[ 1417.140088][ T5942] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1417.231936][ T5941] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1417.460929][T21348] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4293'.
[ 1417.470112][ T5941] usb 6-1: Using ep0 maxpacket: 32
[ 1417.583353][ T5941] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1417.594333][ T5941] usb 6-1: config 0 has no interface number 0
[ 1417.604559][ T5941] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1417.618432][ T5941] usb 6-1: config 0 interface 1 has no altsetting 0
[ 1417.686111][ T5941] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1417.701652][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1417.710117][ T5941] usb 6-1: Product: syz
[ 1417.714763][ T5941] usb 6-1: Manufacturer: syz
[ 1417.719451][ T5941] usb 6-1: SerialNumber: syz
[ 1417.769303][ T5941] usb 6-1: config 0 descriptor??
[ 1417.818298][ T5922] usb 1-1: USB disconnect, device number 52
[ 1417.852925][ T5922] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1417.981038][ T5941] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1418.018961][ T5941] cx231xx 6-1:0.1: Failed to read PCB config
[ 1418.027012][ T5941] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71
[ 1418.046887][ T5941] usb 6-1: USB disconnect, device number 49
[ 1418.418179][T21355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1418.442713][T21355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1418.671665][ T5922] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1418.851819][ T5922] usb 1-1: Using ep0 maxpacket: 32
[ 1418.860286][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1418.869476][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1418.885022][ T5922] usb 1-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec
[ 1418.896986][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1418.911555][ T5922] usb 1-1: Product: syz
[ 1418.920164][ T5922] usb 1-1: Manufacturer: syz
[ 1418.930310][ T5922] usb 1-1: SerialNumber: syz
[ 1418.957475][ T5922] usb 1-1: config 0 descriptor??
[ 1419.131562][ T5941] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1419.166161][ T5942] usb 1-1: USB disconnect, device number 53
[ 1419.281592][ T5941] usb 6-1: Using ep0 maxpacket: 8
[ 1419.291883][ T5941] usb 6-1: config 0 has an invalid interface number: 239 but max is 0
[ 1419.341517][ T5941] usb 6-1: config 0 has no interface number 0
[ 1419.347814][ T5941] usb 6-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[ 1419.372947][ T5941] usb 6-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[ 1419.393766][ T5941] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[ 1419.403011][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1419.411033][ T5941] usb 6-1: Product: syz
[ 1419.431611][ T5941] usb 6-1: Manufacturer: syz
[ 1419.436256][ T5941] usb 6-1: SerialNumber: syz
[ 1419.443441][ T5941] usb 6-1: config 0 descriptor??
[ 1419.461008][T21364] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1419.568128][T21372] binder: 21371:21372 unknown command 0
[ 1419.574154][T21372] binder: 21371:21372 ioctl c0306201 200000000080 returned -22
[ 1419.743493][T21377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1419.752415][T21377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1419.774709][T21379] netlink: 'syz.0.4303': attribute type 5 has an invalid length.
[ 1420.101673][ T5825] Bluetooth: hci3: command 0x0406 tx timeout
[ 1420.119202][ T5937] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1420.285946][ T5937] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1420.297967][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1420.310824][ T5937] usb 1-1: Product: syz
[ 1420.317819][ T5937] usb 1-1: Manufacturer: syz
[ 1420.327014][ T5937] usb 1-1: SerialNumber: syz
[ 1420.338597][ T5937] usb 1-1: config 0 descriptor??
[ 1420.357377][ T5937] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1420.367585][ T5937] hub 1-1:0.0: probe with driver hub failed with error -5
[ 1420.501863][ T5941] ath6kl: Failed to submit usb control message: -110
[ 1420.514797][ T5941] ath6kl: unable to send the bmi data to the device: -110
[ 1420.527996][ T5941] ath6kl: Unable to send get target info: -110
[ 1420.536464][ T5941] ath6kl: Failed to init ath6kl core: -110
[ 1420.752288][ T5937] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1420.772233][ T5941] ath6kl_usb 6-1:0.239: probe with driver ath6kl_usb failed with error -110
[ 1420.821967][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1420.868828][ T5937] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1420.889577][ T5937] usb 1-1: media controller created
[ 1420.929175][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1421.077310][ T5937] DVB: Unable to find symbol dib7000p_attach()
[ 1421.151228][ T5937] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1421.236311][ T5937] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1421.251496][ T5937] Registered IR keymap rc-empty
[ 1421.348888][ T5937] dvb-usb: could not initialize remote control.
[ 1421.355368][ T5937] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1421.631569][ T5941] usb 7-1: new full-speed USB device number 126 using dummy_hcd
[ 1421.730173][ T5942] usb 1-1: USB disconnect, device number 54
[ 1421.759227][ T5942] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1421.761600][ T5941] usb 7-1: device descriptor read/64, error -71
[ 1421.886881][ T5937] usb 6-1: USB disconnect, device number 50
[ 1422.007749][T21406] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4308'.
[ 1422.042574][ T5941] usb 7-1: new full-speed USB device number 127 using dummy_hcd
[ 1422.181711][ T5941] usb 7-1: device descriptor read/64, error -71
[ 1422.292002][ T5941] usb usb7-port1: attempt power cycle
[ 1422.561710][T18238] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 1422.631585][ T5941] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[ 1422.652154][ T5941] usb 7-1: device descriptor read/8, error -71
[ 1422.730782][T18238] usb 1-1: Using ep0 maxpacket: 16
[ 1422.740016][T18238] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17408, setting to 1024
[ 1422.751578][T18238] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024
[ 1422.876914][T18238] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1422.891555][ T5941] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[ 1422.920256][ T5941] usb 7-1: device descriptor read/8, error -71
[ 1422.931673][T18238] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 37004, setting to 1024
[ 1422.965038][T18238] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1422.992065][T18238] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1423.032114][ T5941] usb usb7-port1: unable to enumerate USB device
[ 1423.041724][T18238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1423.071056][T18238] usb 1-1: SerialNumber: syz
[ 1423.091566][T21410] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1423.098827][T21410] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1423.121277][T21410] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1423.149050][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.155556][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.256251][T21421] binder: transaction release 62 bad handle 1, ret = -22
[ 1423.419267][T18238] usb 1-1: USB disconnect, device number 55
[ 1423.648433][T19617] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[ 1424.016963][T21442] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4322'.
[ 1424.491585][ T5942] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1424.641726][ T5942] usb 1-1: Using ep0 maxpacket: 8
[ 1424.653799][ T5942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1424.669612][ T5942] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1424.679470][ T5942] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1424.695194][ T5942] usb 1-1: Product: syz
[ 1424.699410][ T5942] usb 1-1: Manufacturer: syz
[ 1424.710627][ T5942] usb 1-1: SerialNumber: syz
[ 1424.731649][T18238] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1424.921568][T18238] usb 7-1: Using ep0 maxpacket: 32
[ 1424.941137][T18238] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[ 1424.961681][T18238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1424.969714][T18238] usb 7-1: Product: syz
[ 1424.990647][T18238] usb 7-1: Manufacturer: syz
[ 1424.996296][T18238] usb 7-1: SerialNumber: syz
[ 1425.017911][T18238] usb 7-1: config 0 descriptor??
[ 1425.031950][ T5942] usb 1-1: palm_os_3_probe - error -110 getting connection information
[ 1425.045792][ T5942] visor 1-1:1.0: probe with driver visor failed with error -110
[ 1425.047169][T18238] snd-usb-6fire 7-1:0.0: too many cards registered.
[ 1425.205801][T21465] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4328'.
[ 1426.851580][ T5941] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1427.025182][ T5941] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1427.033652][ T5941] usb 6-1: no configurations
[ 1427.038572][ T5941] usb 6-1: can't read configurations, error -22
[ 1427.171747][ T5941] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1427.254141][T18238] usb 1-1: USB disconnect, device number 56
[ 1427.288959][T21483] FAULT_INJECTION: forcing a failure.
[ 1427.288959][T21483] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1427.302363][T21483] CPU: 1 UID: 0 PID: 21483 Comm: syz.0.4334 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1427.302382][T21483] Tainted: [L]=SOFTLOCKUP
[ 1427.302385][T21483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1427.302392][T21483] Call Trace:
[ 1427.302396][T21483]  <TASK>
[ 1427.302400][T21483]  dump_stack_lvl+0xe8/0x150
[ 1427.302419][T21483]  should_fail_ex+0x412/0x560
[ 1427.302436][T21483]  _copy_from_user+0x2d/0xb0
[ 1427.302447][T21483]  ___sys_sendmsg+0x1c6/0x360
[ 1427.302459][T21483]  ? __lock_acquire+0x6b5/0x2cf0
[ 1427.302472][T21483]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1427.302500][T21483]  ? __fget_files+0x2a/0x420
[ 1427.302510][T21483]  ? __fget_files+0x3a0/0x420
[ 1427.302524][T21483]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1427.302538][T21483]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1427.302555][T21483]  ? __pfx_ksys_write+0x10/0x10
[ 1427.302573][T21483]  do_syscall_64+0x14d/0xf80
[ 1427.302586][T21483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.302596][T21483]  ? trace_irq_disable+0x37/0x100
[ 1427.302608][T21483]  ? clear_bhb_loop+0x40/0x90
[ 1427.302620][T21483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.302629][T21483] RIP: 0033:0x7f32e559bf79
[ 1427.302639][T21483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1427.302648][T21483] RSP: 002b:00007f32e6403028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1427.302659][T21483] RAX: ffffffffffffffda RBX: 00007f32e5815fa0 RCX: 00007f32e559bf79
[ 1427.302667][T21483] RDX: 0000000004041080 RSI: 00002000000001c0 RDI: 0000000000000005
[ 1427.302676][T21483] RBP: 00007f32e6403090 R08: 0000000000000000 R09: 0000000000000000
[ 1427.302686][T21483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1427.302696][T21483] R13: 00007f32e5816038 R14: 00007f32e5815fa0 R15: 00007f32e593fa48
[ 1427.302722][T21483]  </TASK>
[ 1427.503653][ T5937] usb 7-1: USB disconnect, device number 4
[ 1427.517631][ T5941] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1427.531566][ T5941] usb 6-1: no configurations
[ 1427.536180][ T5941] usb 6-1: can't read configurations, error -22
[ 1427.546533][ T5941] usb usb6-port1: attempt power cycle
[ 1427.565261][T21485] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4335'.
[ 1427.891593][ T5941] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1427.914291][ T5941] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1427.922118][ T5941] usb 6-1: no configurations
[ 1427.926725][ T5941] usb 6-1: can't read configurations, error -22
[ 1428.171611][ T5941] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1428.215454][ T5941] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1428.228334][ T5941] usb 6-1: no configurations
[ 1428.237964][ T5941] usb 6-1: can't read configurations, error -22
[ 1428.249232][ T5941] usb usb6-port1: unable to enumerate USB device
[ 1428.493982][T21495] FAULT_INJECTION: forcing a failure.
[ 1428.493982][T21495] name failslab, interval 1, probability 0, space 0, times 0
[ 1428.541557][T21495] CPU: 0 UID: 0 PID: 21495 Comm: syz.6.4338 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1428.541578][T21495] Tainted: [L]=SOFTLOCKUP
[ 1428.541582][T21495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1428.541588][T21495] Call Trace:
[ 1428.541593][T21495]  <TASK>
[ 1428.541599][T21495]  dump_stack_lvl+0xe8/0x150
[ 1428.541617][T21495]  should_fail_ex+0x412/0x560
[ 1428.541635][T21495]  should_failslab+0xa8/0x100
[ 1428.541650][T21495]  ? skb_clone+0x212/0x3a0
[ 1428.541663][T21495]  kmem_cache_alloc_noprof+0x87/0x650
[ 1428.541676][T21495]  ? __netlink_lookup+0xc6/0x8b0
[ 1428.541690][T21495]  skb_clone+0x212/0x3a0
[ 1428.541705][T21495]  __netlink_deliver_tap+0x404/0x850
[ 1428.541720][T21495]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1428.541731][T21495]  netlink_deliver_tap+0x19c/0x1b0
[ 1428.541741][T21495]  netlink_unicast+0x7e3/0x9b0
[ 1428.541760][T21495]  ? __pfx_netlink_unicast+0x10/0x10
[ 1428.541776][T21495]  ? netlink_sendmsg+0x650/0xb40
[ 1428.541785][T21495]  ? skb_put+0x11b/0x210
[ 1428.541798][T21495]  netlink_sendmsg+0x813/0xb40
[ 1428.541812][T21495]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1428.541824][T21495]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1428.541839][T21495]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1428.541854][T21495]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1428.541864][T21495]  ____sys_sendmsg+0xa68/0xad0
[ 1428.541877][T21495]  ? __might_fault+0xaf/0x130
[ 1428.541891][T21495]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1428.541908][T21495]  ? import_iovec+0x73/0xa0
[ 1428.541926][T21495]  ___sys_sendmsg+0x2a5/0x360
[ 1428.541938][T21495]  ? __lock_acquire+0x6b5/0x2cf0
[ 1428.541951][T21495]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1428.541980][T21495]  ? __fget_files+0x2a/0x420
[ 1428.541990][T21495]  ? __fget_files+0x3a0/0x420
[ 1428.542004][T21495]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1428.542018][T21495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1428.542035][T21495]  ? __pfx_ksys_write+0x10/0x10
[ 1428.542053][T21495]  do_syscall_64+0x14d/0xf80
[ 1428.542067][T21495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1428.542076][T21495]  ? trace_irq_disable+0x37/0x100
[ 1428.542088][T21495]  ? clear_bhb_loop+0x40/0x90
[ 1428.542100][T21495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1428.542110][T21495] RIP: 0033:0x7f1f4e19bf79
[ 1428.542120][T21495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1428.542129][T21495] RSP: 002b:00007f1f4f084028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1428.542140][T21495] RAX: ffffffffffffffda RBX: 00007f1f4e415fa0 RCX: 00007f1f4e19bf79
[ 1428.542147][T21495] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[ 1428.542154][T21495] RBP: 00007f1f4f084090 R08: 0000000000000000 R09: 0000000000000000
[ 1428.542160][T21495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1428.542166][T21495] R13: 00007f1f4e416038 R14: 00007f1f4e415fa0 R15: 00007f1f4e53fa48
[ 1428.542186][T21495]  </TASK>
[ 1431.095479][T21539] netlink: 'syz.5.4351': attribute type 10 has an invalid length.
[ 1431.154016][T21539] team0: Port device dummy0 added
[ 1431.222749][T21543] netlink: 'syz.5.4351': attribute type 10 has an invalid length.
[ 1431.253074][T21543] team0: Port device dummy0 removed
[ 1431.367717][T21543] .`: (slave dummy0): Enslaving as an active interface with an up link
[ 1431.808923][T21548] kvm: user requested TSC rate below hardware speed
[ 1432.384791][T21554] FAULT_INJECTION: forcing a failure.
[ 1432.384791][T21554] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1432.402380][T21554] CPU: 0 UID: 0 PID: 21554 Comm: syz.0.4354 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1432.402410][T21554] Tainted: [L]=SOFTLOCKUP
[ 1432.402418][T21554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1432.402429][T21554] Call Trace:
[ 1432.402437][T21554]  <TASK>
[ 1432.402445][T21554]  dump_stack_lvl+0xe8/0x150
[ 1432.402472][T21554]  should_fail_ex+0x412/0x560
[ 1432.402500][T21554]  _copy_from_user+0x2d/0xb0
[ 1432.402520][T21554]  snd_seq_oss_write+0x5b1/0x8e0
[ 1432.402538][T21554]  ? kstrtoull+0x12f/0x1d0
[ 1432.402570][T21554]  ? __pfx_snd_seq_oss_write+0x10/0x10
[ 1432.402590][T21554]  ? apparmor_file_permission+0x17f/0x1f0
[ 1432.402613][T21554]  ? security_file_permission+0x75/0x260
[ 1432.402634][T21554]  odev_write+0x5a/0x80
[ 1432.402656][T21554]  vfs_writev+0x4bd/0x990
[ 1432.402680][T21554]  ? __pfx_odev_write+0x10/0x10
[ 1432.402710][T21554]  ? __pfx_vfs_writev+0x10/0x10
[ 1432.402746][T21554]  ? __fget_files+0x2a/0x420
[ 1432.402767][T21554]  ? __fget_files+0x3a0/0x420
[ 1432.402783][T21554]  ? __fget_files+0x2a/0x420
[ 1432.402816][T21554]  do_writev+0x154/0x2e0
[ 1432.402841][T21554]  ? __pfx_do_writev+0x10/0x10
[ 1432.402874][T21554]  do_syscall_64+0x14d/0xf80
[ 1432.402897][T21554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1432.402914][T21554]  ? trace_irq_disable+0x37/0x100
[ 1432.402933][T21554]  ? clear_bhb_loop+0x40/0x90
[ 1432.402953][T21554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1432.402969][T21554] RIP: 0033:0x7f32e559bf79
[ 1432.402986][T21554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1432.403001][T21554] RSP: 002b:00007f32e6403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1432.403021][T21554] RAX: ffffffffffffffda RBX: 00007f32e5815fa0 RCX: 00007f32e559bf79
[ 1432.403035][T21554] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000003
[ 1432.403046][T21554] RBP: 00007f32e6403090 R08: 0000000000000000 R09: 0000000000000000
[ 1432.403058][T21554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1432.403069][T21554] R13: 00007f32e5816038 R14: 00007f32e5815fa0 R15: 00007f32e593fa48
[ 1432.403097][T21554]  </TASK>
[ 1433.170074][T21569] FAULT_INJECTION: forcing a failure.
[ 1433.170074][T21569] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1433.281910][T21569] CPU: 1 UID: 0 PID: 21569 Comm: syz.8.4359 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1433.281940][T21569] Tainted: [L]=SOFTLOCKUP
[ 1433.281947][T21569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1433.281958][T21569] Call Trace:
[ 1433.281966][T21569]  <TASK>
[ 1433.281974][T21569]  dump_stack_lvl+0xe8/0x150
[ 1433.282001][T21569]  should_fail_ex+0x412/0x560
[ 1433.282029][T21569]  _copy_to_user+0x31/0xb0
[ 1433.282050][T21569]  simple_read_from_buffer+0xe1/0x170
[ 1433.282079][T21569]  proc_fail_nth_read+0x1bb/0x230
[ 1433.282103][T21569]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1433.282128][T21569]  ? rw_verify_area+0x2a6/0x4d0
[ 1433.282147][T21569]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1433.282169][T21569]  vfs_read+0x20c/0xa70
[ 1433.282188][T21569]  ? fdget_pos+0x246/0x320
[ 1433.282209][T21569]  ? __pfx___mutex_lock+0x10/0x10
[ 1433.282232][T21569]  ? __pfx_vfs_read+0x10/0x10
[ 1433.282253][T21569]  ? __fget_files+0x2a/0x420
[ 1433.282274][T21569]  ? __fget_files+0x3a0/0x420
[ 1433.282289][T21569]  ? __fget_files+0x2a/0x420
[ 1433.282314][T21569]  ksys_read+0x150/0x270
[ 1433.282336][T21569]  ? __pfx_ksys_read+0x10/0x10
[ 1433.282366][T21569]  do_syscall_64+0x14d/0xf80
[ 1433.282387][T21569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1433.282404][T21569]  ? trace_irq_disable+0x37/0x100
[ 1433.282422][T21569]  ? clear_bhb_loop+0x40/0x90
[ 1433.282443][T21569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1433.282459][T21569] RIP: 0033:0x7fef9155c84e
[ 1433.282475][T21569] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1433.282490][T21569] RSP: 002b:00007fef9239afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1433.282509][T21569] RAX: ffffffffffffffda RBX: 00007fef9239b6c0 RCX: 00007fef9155c84e
[ 1433.282522][T21569] RDX: 000000000000000f RSI: 00007fef9239b0a0 RDI: 0000000000000004
[ 1433.282533][T21569] RBP: 00007fef9239b090 R08: 0000000000000000 R09: 0000000000000000
[ 1433.282544][T21569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1433.282555][T21569] R13: 00007fef91816038 R14: 00007fef91815fa0 R15: 00007fef9193fa48
[ 1433.282584][T21569]  </TASK>
[ 1433.771770][ T5937] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1433.951657][ T5937] usb 7-1: Using ep0 maxpacket: 8
[ 1433.967953][ T5937] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 1433.996403][ T5937] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 1434.005771][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1434.030093][ T5937] usb 7-1: Product: syz
[ 1434.040860][ T5937] usb 7-1: Manufacturer: syz
[ 1434.053141][ T5937] usb 7-1: SerialNumber: syz
[ 1434.072781][ T5937] usb 7-1: config 0 descriptor??
[ 1434.081247][ T5937] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 1434.400821][T21578] tipc: Started in network mode
[ 1434.408551][T21578] tipc: Node identity 20010000000000000000000000000002, cluster identity 4711
[ 1434.419462][T21578] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1436.121634][T18241] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1436.273312][T18241] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1436.285207][T18241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1436.296444][T18241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1436.306597][T18241] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1436.320179][T18241] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1436.329544][T18241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1436.340349][T18241] usb 1-1: config 0 descriptor??
[ 1436.995851][T21625] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4379'.
[ 1437.005332][T21625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4379'.
[ 1437.048469][   T30] kauditd_printk_skb: 32 callbacks suppressed
[ 1437.048487][   T30] audit: type=1326 audit(1770928213.046:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21622 comm="syz.8.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1437.079914][   T30] audit: type=1326 audit(1770928213.046:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21622 comm="syz.8.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1437.115455][   T30] audit: type=1326 audit(1770928213.046:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21622 comm="syz.8.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1437.140476][   T30] audit: type=1326 audit(1770928213.046:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21622 comm="syz.8.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1437.164037][   T30] audit: type=1326 audit(1770928213.046:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21622 comm="syz.8.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1437.168199][ T5937] gspca_zc3xx: reg_r err -32
[ 1437.222419][   T30] audit: type=1326 audit(1770928213.046:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21622 comm="syz.8.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1437.248796][   T30] audit: type=1326 audit(1770928213.046:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21622 comm="syz.8.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1437.274075][   T30] audit: type=1326 audit(1770928213.046:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21622 comm="syz.8.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1437.282524][ T5937] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -32
[ 1437.298913][   T30] audit: type=1326 audit(1770928213.046:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21622 comm="syz.8.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1437.334063][   T30] audit: type=1326 audit(1770928213.046:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21622 comm="syz.8.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1437.611779][ T5942] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1437.763140][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1437.774179][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1437.784111][ T5942] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1437.793234][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1437.803835][ T5942] usb 6-1: config 0 descriptor??
[ 1438.192114][   T24] usb 7-1: USB disconnect, device number 5
[ 1438.213400][T21630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1438.215964][ T5942] hid_parser_main: 1 callbacks suppressed
[ 1438.215984][ T5942] playstation 0003:054C:0DF2.0036: unknown main item tag 0x0
[ 1438.247759][ T5942] playstation 0003:054C:0DF2.0036: unknown main item tag 0x0
[ 1438.249438][T21630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1438.268681][ T5942] playstation 0003:054C:0DF2.0036: unknown main item tag 0x0
[ 1438.278469][ T5942] playstation 0003:054C:0DF2.0036: unknown main item tag 0x0
[ 1438.286663][ T5942] playstation 0003:054C:0DF2.0036: unknown main item tag 0x0
[ 1438.299961][ T5942] playstation 0003:054C:0DF2.0036: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0
[ 1438.602052][T18241] usbhid 1-1:0.0: can't add hid device: -71
[ 1438.613868][ T5942] playstation 0003:054C:0DF2.0036: Failed to retrieve feature with reportID 32: -71
[ 1438.621651][T18241] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1438.638951][ T5942] playstation 0003:054C:0DF2.0036: Failed to retrieve DualSense firmware info: -71
[ 1438.651201][T18241] usb 1-1: USB disconnect, device number 57
[ 1438.657266][ T5942] playstation 0003:054C:0DF2.0036: Failed to get firmware info from DualSense
[ 1438.657298][ T5942] playstation 0003:054C:0DF2.0036: Failed to create dualsense.
[ 1438.659818][ T5942] playstation 0003:054C:0DF2.0036: probe with driver playstation failed with error -71
[ 1438.707430][ T5942] usb 6-1: USB disconnect, device number 55
[ 1439.337912][T21654] kvm: user requested TSC rate below hardware speed
[ 1440.856536][T21685] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4397'.
[ 1441.590284][T19617] Bluetooth: hci5: unexpected event for opcode 0x0c0d
[ 1442.327815][T21712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1442.395160][T21712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1442.754919][ T5922] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1442.871645][   T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1442.930114][ T5922] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1442.939422][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1442.948629][ T5922] usb 1-1: Product: syz
[ 1442.952937][ T5922] usb 1-1: Manufacturer: syz
[ 1442.957541][ T5922] usb 1-1: SerialNumber: syz
[ 1442.968935][ T5922] usb 1-1: config 0 descriptor??
[ 1443.046056][   T24] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1443.061620][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1443.069749][   T24] usb 7-1: Product: syz
[ 1443.074126][   T24] usb 7-1: Manufacturer: syz
[ 1443.101639][   T24] usb 7-1: SerialNumber: syz
[ 1443.108466][   T24] usb 7-1: config 0 descriptor??
[ 1443.435145][ T5922] usb 1-1: Firmware version (0.0) predates our first public release.
[ 1443.451630][ T5922] usb 1-1: Please update to version 0.2 or newer
[ 1443.464817][ T5922] usb 1-1: Firmware: build �f�Ţ�nA�ZuM=�̬�ilyC�O^�O�5o��~��V6^q�g�GP����
[ 1443.464817][ T5922] 1�7��x6��i'��xo��;�s�ll��0���&1iZ��q��f�K

[ 1443.472507][T21730] FAULT_INJECTION: forcing a failure.
[ 1443.472507][T21730] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1443.498754][T21730] CPU: 1 UID: 0 PID: 21730 Comm: syz.5.4412 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1443.498782][T21730] Tainted: [L]=SOFTLOCKUP
[ 1443.498792][T21730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1443.498803][T21730] Call Trace:
[ 1443.498811][T21730]  <TASK>
[ 1443.498819][T21730]  dump_stack_lvl+0xe8/0x150
[ 1443.498845][T21730]  should_fail_ex+0x412/0x560
[ 1443.498867][T21730]  _copy_from_user+0x2d/0xb0
[ 1443.498882][T21730]  do_ipv6_setsockopt+0x264/0x31c0
[ 1443.498898][T21730]  ? get_pid_task+0x20/0x1f0
[ 1443.498922][T21730]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 1443.498937][T21730]  ? get_pid_task+0x20/0x1f0
[ 1443.498952][T21730]  ? get_pid_task+0x20/0x1f0
[ 1443.498967][T21730]  ? get_pid_task+0x20/0x1f0
[ 1443.498988][T21730]  ? __lock_acquire+0x6b5/0x2cf0
[ 1443.499012][T21730]  ? aa_sk_perm+0x15a/0x960
[ 1443.499030][T21730]  ? aa_sk_perm+0x82d/0x960
[ 1443.499046][T21730]  ? __fget_files+0x2a/0x420
[ 1443.499067][T21730]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1443.499084][T21730]  ? __fget_files+0x2a/0x420
[ 1443.499095][T21730]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1443.499114][T21730]  ipv6_setsockopt+0x59/0x170
[ 1443.499129][T21730]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1443.499144][T21730]  do_sock_setsockopt+0x17c/0x1b0
[ 1443.499163][T21730]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1443.499181][T21730]  do_syscall_64+0x14d/0xf80
[ 1443.499198][T21730]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1443.499210][T21730]  ? trace_irq_disable+0x37/0x100
[ 1443.499225][T21730]  ? clear_bhb_loop+0x40/0x90
[ 1443.499240][T21730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1443.499253][T21730] RIP: 0033:0x7feae7d9bf79
[ 1443.499265][T21730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1443.499276][T21730] RSP: 002b:00007feae8c8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1443.499291][T21730] RAX: ffffffffffffffda RBX: 00007feae8015fa0 RCX: 00007feae7d9bf79
[ 1443.499301][T21730] RDX: 0000000000000048 RSI: 0000000000000029 RDI: 0000000000000003
[ 1443.499309][T21730] RBP: 00007feae8c8c090 R08: 0000000000000008 R09: 0000000000000000
[ 1443.499317][T21730] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[ 1443.499326][T21730] R13: 00007feae8016038 R14: 00007feae8015fa0 R15: 00007feae813fa48
[ 1443.499347][T21730]  </TASK>
[ 1443.753717][   T24] usb 7-1: Firmware version (0.0) predates our first public release.
[ 1443.761931][   T24] usb 7-1: Please update to version 0.2 or newer
[ 1443.769969][   T24] usb 7-1: Firmware: build �f�Ţ�nA�ZuM=�̬�ilyC�O^�O�5o��~��V6^q�g�GP����
[ 1443.769969][   T24] 1�7��x6��i'��xo��;�s�ll��0���&1iZ��q��f�K

[ 1443.786676][T19617] Bluetooth: hci4: Malformed LE Event: 0x0b
[ 1443.788796][ T5922] usb 1-1: USB disconnect, device number 58
[ 1443.986823][   T24] usb 7-1: USB disconnect, device number 6
[ 1444.701920][T21754] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4416'.
[ 1445.133058][T21759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4417'.
[ 1446.464018][T21777] can: request_module (can-proto-0) failed.
[ 1446.485423][T21777] gre1: entered promiscuous mode
[ 1446.490404][T21777] gre1: entered allmulticast mode
[ 1446.491597][T18241] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1446.497492][T21777] team0: Device gre1 is of different type
[ 1446.661577][T18241] usb 7-1: Using ep0 maxpacket: 8
[ 1446.668037][T18241] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1446.679515][T18241] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1446.689513][T18241] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1446.700561][T18241] usb 7-1: Product: syz
[ 1446.706844][T18241] usb 7-1: Manufacturer: syz
[ 1446.712595][T18241] usb 7-1: SerialNumber: syz
[ 1446.772443][ T5937] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1446.933024][ T5937] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1446.950873][ T5937] usb 6-1: config 0 has no interface number 0
[ 1446.960471][ T5937] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1446.975082][ T5937] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1446.991020][ T5937] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[ 1447.005468][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1447.019108][ T5937] usb 6-1: config 0 descriptor??
[ 1447.033170][T18241] usb 7-1: palm_os_3_probe - error -110 getting connection information
[ 1447.045329][T18241] visor 7-1:1.0: probe with driver visor failed with error -110
[ 1447.441418][ T5937] uclogic 0003:5543:0522.0037: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.5-1/input1
[ 1447.648500][T18236] usb 6-1: USB disconnect, device number 56
[ 1447.662485][T18232] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 1447.848272][T18232] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1447.867017][T18232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1447.877044][T18232] usb 1-1: Product: syz
[ 1447.881307][T18232] usb 1-1: Manufacturer: syz
[ 1447.887991][T18232] usb 1-1: SerialNumber: syz
[ 1447.913285][T18232] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1447.931289][ T5922] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1448.034173][T21802] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4434'.
[ 1448.145017][T21788] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4429'.
[ 1448.315806][T21804] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1448.372474][T21788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1448.381242][T21788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1448.416937][T21805] loop8: detected capacity change from 0 to 7
[ 1448.430031][T21805] Dev loop8: unable to read RDB block 7
[ 1448.436924][T21805]  loop8: unable to read partition table
[ 1448.444087][T21805] loop8: partition table beyond EOD, truncated
[ 1448.450992][T21805] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1448.598233][T18236] usb 1-1: USB disconnect, device number 59
[ 1449.281574][   T24] usb 7-1: USB disconnect, device number 7
[ 1449.468952][ T5922] usb 1-1: Service connection timeout for: 257
[ 1449.481414][ T5922] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1449.494367][ T5922] ath9k_htc: Failed to initialize the device
[ 1449.509417][T18236] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1449.650542][T21824] syzkaller0: entered promiscuous mode
[ 1449.676512][T21824] syzkaller0: entered allmulticast mode
[ 1449.845411][T18236] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[ 1449.974869][ T5937] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1450.075231][T18236] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[ 1450.083533][T18236] usb 1-1: config 0 has no interface number 0
[ 1450.094894][T18236] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 1450.104754][T18236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1450.162575][T18236] usb 1-1: Product: syz
[ 1450.171276][T18236] usb 1-1: Manufacturer: syz
[ 1450.176019][ T5937] usb 6-1: Using ep0 maxpacket: 32
[ 1450.185820][ T5937] usb 6-1: config 0 has an invalid interface number: 230 but max is 0
[ 1450.194431][ T5937] usb 6-1: config 0 has no interface number 0
[ 1450.204118][T18236] usb 1-1: SerialNumber: syz
[ 1450.208941][ T5937] usb 6-1: config 0 interface 230 has no altsetting 0
[ 1450.233561][T18236] usb 1-1: config 0 descriptor??
[ 1450.244713][ T5937] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[ 1450.254131][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1450.314281][ T5937] usb 6-1: Product: syz
[ 1450.326853][ T5937] usb 6-1: Manufacturer: syz
[ 1450.337252][ T5937] usb 6-1: SerialNumber: syz
[ 1450.361121][ T5937] usb 6-1: config 0 descriptor??
[ 1450.375541][ T5937] ums-usbat 6-1:0.230: USB Mass Storage device detected
[ 1450.564990][ T5937] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1
[ 1450.768422][T21841] FAULT_INJECTION: forcing a failure.
[ 1450.768422][T21841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1450.794036][T21841] CPU: 1 UID: 0 PID: 21841 Comm: syz.8.4446 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1450.794057][T21841] Tainted: [L]=SOFTLOCKUP
[ 1450.794063][T21841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1450.794072][T21841] Call Trace:
[ 1450.794080][T21841]  <TASK>
[ 1450.794088][T21841]  dump_stack_lvl+0xe8/0x150
[ 1450.794118][T21841]  should_fail_ex+0x412/0x560
[ 1450.794146][T21841]  _copy_to_user+0x31/0xb0
[ 1450.794163][T21841]  simple_read_from_buffer+0xe1/0x170
[ 1450.794181][T21841]  proc_fail_nth_read+0x1bb/0x230
[ 1450.794197][T21841]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1450.794212][T21841]  ? rw_verify_area+0x2a6/0x4d0
[ 1450.794229][T21841]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1450.794252][T21841]  vfs_read+0x20c/0xa70
[ 1450.794271][T21841]  ? fdget_pos+0x246/0x320
[ 1450.794292][T21841]  ? __pfx___mutex_lock+0x10/0x10
[ 1450.794313][T21841]  ? __pfx_vfs_read+0x10/0x10
[ 1450.794325][T21841]  ? __fget_files+0x2a/0x420
[ 1450.794337][T21841]  ? __fget_files+0x3a0/0x420
[ 1450.794346][T21841]  ? __fget_files+0x2a/0x420
[ 1450.794359][T21841]  ksys_read+0x150/0x270
[ 1450.794375][T21841]  ? __pfx_ksys_read+0x10/0x10
[ 1450.794405][T21841]  do_syscall_64+0x14d/0xf80
[ 1450.794426][T21841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1450.794443][T21841]  ? trace_irq_disable+0x37/0x100
[ 1450.794461][T21841]  ? clear_bhb_loop+0x40/0x90
[ 1450.794473][T21841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1450.794482][T21841] RIP: 0033:0x7fef9155c84e
[ 1450.794492][T21841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1450.794500][T21841] RSP: 002b:00007fef9239afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1450.794512][T21841] RAX: ffffffffffffffda RBX: 00007fef9239b6c0 RCX: 00007fef9155c84e
[ 1450.794520][T21841] RDX: 000000000000000f RSI: 00007fef9239b0a0 RDI: 0000000000000004
[ 1450.794531][T21841] RBP: 00007fef9239b090 R08: 0000000000000000 R09: 0000000000000000
[ 1450.794542][T21841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1450.794553][T21841] R13: 00007fef91816038 R14: 00007fef91815fa0 R15: 00007fef9193fa48
[ 1450.794583][T21841]  </TASK>
[ 1451.180799][T21845] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.4448'.
[ 1451.208524][T21845] netlink: Conntrack attr has 4 unknown bytes
[ 1451.410457][T21849] fuse: Unknown parameter ''
[ 1452.111758][T21855] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4450'.
[ 1452.716999][ T5937] ums-usbat 6-1:0.230: probe with driver ums-usbat failed with error -5
[ 1452.753452][ T5937] usb 6-1: USB disconnect, device number 57
[ 1453.192516][T18236] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[ 1453.210332][T18236] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[ 1453.218630][T18236] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[ 1453.242349][T18236] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[ 1453.259736][T18236] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1453.461965][T18236] usb 1-1: USB disconnect, device number 60
[ 1453.501161][T18236] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1453.585847][T18236] keyspan 1-1:0.133: device disconnected
[ 1453.952953][T21891] FAULT_INJECTION: forcing a failure.
[ 1453.952953][T21891] name failslab, interval 1, probability 0, space 0, times 0
[ 1453.973105][T21891] CPU: 0 UID: 0 PID: 21891 Comm: syz.6.4460 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1453.973136][T21891] Tainted: [L]=SOFTLOCKUP
[ 1453.973142][T21891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1453.973153][T21891] Call Trace:
[ 1453.973161][T21891]  <TASK>
[ 1453.973169][T21891]  dump_stack_lvl+0xe8/0x150
[ 1453.973197][T21891]  should_fail_ex+0x412/0x560
[ 1453.973225][T21891]  should_failslab+0xa8/0x100
[ 1453.973250][T21891]  __kmalloc_cache_noprof+0x88/0x660
[ 1453.973270][T21891]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1453.973290][T21891]  ? nft_trans_table_add+0x56/0x430
[ 1453.973313][T21891]  nft_trans_table_add+0x56/0x430
[ 1453.973338][T21891]  nf_tables_newtable+0xce3/0x1910
[ 1453.973375][T21891]  nfnetlink_rcv+0x1240/0x27b0
[ 1453.973424][T21891]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1453.973457][T21891]  ? ref_tracker_free+0x693/0x840
[ 1453.973506][T21891]  ? __netlink_deliver_tap+0x807/0x850
[ 1453.973522][T21891]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1453.973553][T21891]  netlink_unicast+0x80f/0x9b0
[ 1453.973579][T21891]  ? __pfx_netlink_unicast+0x10/0x10
[ 1453.973603][T21891]  ? netlink_sendmsg+0x650/0xb40
[ 1453.973618][T21891]  ? skb_put+0x11b/0x210
[ 1453.973638][T21891]  netlink_sendmsg+0x813/0xb40
[ 1453.973664][T21891]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1453.973684][T21891]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1453.973707][T21891]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1453.973731][T21891]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1453.973747][T21891]  ____sys_sendmsg+0xa68/0xad0
[ 1453.973775][T21891]  ? __might_fault+0xaf/0x130
[ 1453.973799][T21891]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1453.973827][T21891]  ? import_iovec+0x73/0xa0
[ 1453.973848][T21891]  ___sys_sendmsg+0x2a5/0x360
[ 1453.973867][T21891]  ? __lock_acquire+0x6b5/0x2cf0
[ 1453.973887][T21891]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1453.973936][T21891]  ? __fget_files+0x2a/0x420
[ 1453.973952][T21891]  ? __fget_files+0x3a0/0x420
[ 1453.973977][T21891]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1453.974000][T21891]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1453.974026][T21891]  ? __pfx_ksys_write+0x10/0x10
[ 1453.974047][T21891]  do_syscall_64+0x14d/0xf80
[ 1453.974061][T21891]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1453.974070][T21891]  ? trace_irq_disable+0x37/0x100
[ 1453.974081][T21891]  ? clear_bhb_loop+0x40/0x90
[ 1453.974093][T21891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1453.974103][T21891] RIP: 0033:0x7f1f4e19bf79
[ 1453.974113][T21891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1453.974122][T21891] RSP: 002b:00007f1f4f084028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1453.974133][T21891] RAX: ffffffffffffffda RBX: 00007f1f4e415fa0 RCX: 00007f1f4e19bf79
[ 1453.974140][T21891] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1453.974147][T21891] RBP: 00007f1f4f084090 R08: 0000000000000000 R09: 0000000000000000
[ 1453.974153][T21891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1453.974159][T21891] R13: 00007f1f4e416038 R14: 00007f1f4e415fa0 R15: 00007f1f4e53fa48
[ 1453.974174][T21891]  </TASK>
[ 1455.025313][T18236] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1455.302855][T18236] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1455.314440][T18236] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1455.333901][T18236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1455.373856][T18236] usb 6-1: config 0 descriptor??
[ 1455.376254][T18236] pwc: Askey VC010 type 2 USB webcam detected.
[ 1456.018628][T18236] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1456.045900][ T5937] IPVS: starting estimator thread 0...
[ 1456.131809][T21912] IPVS: using max 57 ests per chain, 136800 per kthread
[ 1456.254283][T18236] pwc: recv_control_msg error -71 req 02 val 2c00
[ 1456.261349][T18236] pwc: recv_control_msg error -71 req 04 val 1000
[ 1456.280264][T18236] pwc: recv_control_msg error -71 req 04 val 1300
[ 1456.296225][T18236] pwc: recv_control_msg error -71 req 04 val 1400
[ 1456.312055][T18236] pwc: recv_control_msg error -71 req 02 val 2000
[ 1456.326443][T18236] pwc: recv_control_msg error -71 req 02 val 2100
[ 1456.342878][T18236] pwc: recv_control_msg error -71 req 04 val 1500
[ 1456.357415][T18236] pwc: recv_control_msg error -71 req 02 val 2500
[ 1456.372923][T18236] pwc: recv_control_msg error -71 req 02 val 2400
[ 1456.396631][T18236] pwc: recv_control_msg error -71 req 02 val 2600
[ 1456.409156][T18236] pwc: recv_control_msg error -71 req 02 val 2900
[ 1456.439505][T18236] pwc: recv_control_msg error -71 req 02 val 2800
[ 1456.461426][T18236] pwc: recv_control_msg error -71 req 04 val 1100
[ 1456.470333][T18236] pwc: recv_control_msg error -71 req 04 val 1200
[ 1456.518910][T18236] pwc: Registered as video103.
[ 1456.544603][T18236] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input148
[ 1456.579985][T18236] usb 6-1: USB disconnect, device number 58
[ 1456.701235][T21918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4466'.
[ 1457.108528][T21931] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4470'.
[ 1458.931661][T18232] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1458.991980][T18241] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1459.054789][T21954] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4477'.
[ 1459.093047][T18232] usb 7-1: Using ep0 maxpacket: 16
[ 1459.106647][T18232] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 8849, setting to 1024
[ 1459.125200][T18232] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1459.136771][T18232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.152202][T18241] usb 6-1: Using ep0 maxpacket: 8
[ 1459.159693][T18232] usb 7-1: Product: syz
[ 1459.159709][T18241] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 1459.172262][T18232] usb 7-1: Manufacturer: syz
[ 1459.172864][T18241] usb 6-1: config 0 has no interface number 0
[ 1459.176872][T18232] usb 7-1: SerialNumber: syz
[ 1459.193877][T18232] usb 7-1: config 0 descriptor??
[ 1459.194521][T18241] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1459.251991][T18232] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1459.257444][T18241] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1459.291189][T18241] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1459.304834][T18241] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1459.311676][T18232] em28xx 7-1:0.0: DVB interface 0 found: isoc
[ 1459.318639][T18241] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1459.502821][T18241] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1459.606652][T18232] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 1459.645419][T18241] usb 6-1: config 0 descriptor??
[ 1459.676374][T18232] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1459.685240][T18232] em28xx 7-1:0.0: board has no eeprom
[ 1459.691179][T18241] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1459.761815][T18232] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1459.781964][T18232] em28xx 7-1:0.0: dvb set to isoc mode.
[ 1459.788012][   T24] em28xx 7-1:0.0: Binding DVB extension
[ 1459.839910][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4479'.
[ 1459.874426][T18232] usb 7-1: USB disconnect, device number 8
[ 1459.948417][T18232] em28xx 7-1:0.0: Disconnecting em28xx
[ 1460.031159][T18236] usb 6-1: USB disconnect, device number 59
[ 1460.037280][    C0] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[ 1460.071932][   T24] em28xx 7-1:0.0: Registering input extension
[ 1460.089371][T18232] em28xx 7-1:0.0: Closing input extension
[ 1460.132149][T18232] em28xx 7-1:0.0: Freeing device
[ 1460.400838][T21974] FAULT_INJECTION: forcing a failure.
[ 1460.400838][T21974] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1460.436583][T21974] CPU: 0 UID: 0 PID: 21974 Comm: syz.0.4483 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1460.436611][T21974] Tainted: [L]=SOFTLOCKUP
[ 1460.436617][T21974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1460.436625][T21974] Call Trace:
[ 1460.436630][T21974]  <TASK>
[ 1460.436635][T21974]  dump_stack_lvl+0xe8/0x150
[ 1460.436653][T21974]  should_fail_ex+0x412/0x560
[ 1460.436671][T21974]  _copy_to_user+0x31/0xb0
[ 1460.436683][T21974]  simple_read_from_buffer+0xe1/0x170
[ 1460.436701][T21974]  proc_fail_nth_read+0x1bb/0x230
[ 1460.436717][T21974]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1460.436731][T21974]  ? rw_verify_area+0x2a6/0x4d0
[ 1460.436743][T21974]  ? irqentry_exit+0x59e/0x620
[ 1460.436755][T21974]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1460.436768][T21974]  vfs_read+0x20c/0xa70
[ 1460.436780][T21974]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1460.436796][T21974]  ? __pfx_vfs_read+0x10/0x10
[ 1460.436810][T21974]  ? ppp_ioctl+0x169a/0x1b10
[ 1460.436831][T21974]  ksys_read+0x150/0x270
[ 1460.436844][T21974]  ? __pfx_ksys_read+0x10/0x10
[ 1460.436860][T21974]  do_syscall_64+0x14d/0xf80
[ 1460.436873][T21974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1460.436882][T21974]  ? trace_irq_disable+0x37/0x100
[ 1460.436894][T21974]  ? clear_bhb_loop+0x40/0x90
[ 1460.436906][T21974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1460.436915][T21974] RIP: 0033:0x7f32e555c84e
[ 1460.436925][T21974] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1460.436933][T21974] RSP: 002b:00007f32e6402fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1460.436946][T21974] RAX: ffffffffffffffda RBX: 00007f32e64036c0 RCX: 00007f32e555c84e
[ 1460.436953][T21974] RDX: 000000000000000f RSI: 00007f32e64030a0 RDI: 0000000000000004
[ 1460.436959][T21974] RBP: 00007f32e6403090 R08: 0000000000000000 R09: 0000000000000000
[ 1460.436965][T21974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1460.436971][T21974] R13: 00007f32e5816038 R14: 00007f32e5815fa0 R15: 00007f32e593fa48
[ 1460.436985][T21974]  </TASK>
[ 1460.898531][T21984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4486'.
[ 1461.435784][T21996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4491'.
[ 1461.589614][T21999] fuse: Invalid rootmode
[ 1461.745739][T18236] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 1461.817718][T22002] kvm: user requested TSC rate below hardware speed
[ 1461.899808][T22007] tipc: Started in network mode
[ 1461.905462][T22007] tipc: Node identity 8ea66688923f, cluster identity 4711
[ 1461.916428][T22007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1461.944201][T22007] syzkaller0: entered promiscuous mode
[ 1462.047619][T22007] syzkaller0: entered allmulticast mode
[ 1462.170274][T22007] tipc: Resetting bearer <eth:syzkaller0>
[ 1462.220332][T22003] tipc: Resetting bearer <eth:syzkaller0>
[ 1462.310245][T22003] tipc: Disabling bearer <eth:syzkaller0>
[ 1462.702239][T22018] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1462.982470][T22026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4502'.
[ 1463.021645][   T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1463.191524][   T24] usb 7-1: Using ep0 maxpacket: 32
[ 1463.201903][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1463.212263][   T24] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[ 1463.250287][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1463.287619][T22029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4503'.
[ 1463.308286][T22031] fuse: Invalid rootmode
[ 1463.318746][   T24] usb 7-1: config 0 descriptor??
[ 1463.562737][T22037] ������
: renamed from vlan0 (while UP)
[ 1463.621278][   T24] usbhid 7-1:0.0: can't add hid device: -71
[ 1463.636829][   T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1463.667416][   T24] usb 7-1: USB disconnect, device number 9
[ 1463.971543][ T5942] usb 6-1: new full-speed USB device number 60 using dummy_hcd
[ 1464.104929][   T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1464.129505][ T5942] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1464.141829][ T5942] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1464.299453][ T5942] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 1464.315615][   T24] usb 7-1: Using ep0 maxpacket: 16
[ 1464.323813][   T24] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1464.334678][ T5942] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1464.345162][   T24] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[ 1464.354954][   T24] usb 7-1: config 8 has an invalid interface number: 4 but max is 0
[ 1464.364525][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1464.375538][   T24] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1464.387218][ T5942] usb 6-1: Product: syz
[ 1464.393138][ T5942] usb 6-1: Manufacturer: syz
[ 1464.397735][ T5942] usb 6-1: SerialNumber: syz
[ 1464.405458][   T24] usb 7-1: config 8 has no interface number 0
[ 1464.418783][T22043] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1464.484010][   T24] usb 7-1: config 8 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1464.523682][   T24] usb 7-1: config 8 interface 4 has no altsetting 0
[ 1464.559213][   T24] usb 7-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=4a.45
[ 1464.569673][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1464.604513][   T24] usb 7-1: Product: syz
[ 1464.623389][   T24] usb 7-1: Manufacturer: syz
[ 1464.633328][   T24] usb 7-1: SerialNumber: syz
[ 1464.665099][T22043] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1464.674742][T22043] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1464.922687][   T24] sierra 7-1:8.4: Sierra USB modem converter detected
[ 1464.945634][   T24] usb 7-1: Sierra USB modem converter now attached to ttyUSB0
[ 1464.964570][   T24] usb 7-1: USB disconnect, device number 10
[ 1464.980935][   T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1465.002022][   T24] sierra 7-1:8.4: device disconnected
[ 1465.422616][ T5942] cdc_ncm 6-1:1.0: bind() failure
[ 1465.431910][ T5942] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[ 1465.438698][ T5942] cdc_ncm 6-1:1.1: bind() failure
[ 1465.447340][ T5942] usb 6-1: USB disconnect, device number 60
[ 1465.513732][T22053] 8021q: VLANs not supported on syzkaller0
[ 1465.551070][T22053] syzkaller0: left promiscuous mode
[ 1465.567929][T22053] syzkaller0: left allmulticast mode
[ 1465.743931][T22060] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4512'.
[ 1465.821562][ T5942] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1465.972737][ T5942] usb 7-1: Using ep0 maxpacket: 16
[ 1465.979942][ T5942] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[ 1465.990687][ T5942] usb 7-1: config 0 has no interface number 0
[ 1465.999310][ T5942] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1466.008552][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1466.016746][ T5942] usb 7-1: Product: syz
[ 1466.021077][ T5942] usb 7-1: SerialNumber: syz
[ 1466.065918][ T5942] usb 7-1: config 0 descriptor??
[ 1466.180079][ T5942] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input150
[ 1466.354675][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1466.356173][T18236] usb 7-1: USB disconnect, device number 11
[ 1466.361944][    C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1466.399961][T18236] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1466.805714][ T5942] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1466.882880][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4516'.
[ 1466.987661][ T5942] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1467.000150][ T5942] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1467.009577][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1467.235677][ T5942] usb 6-1: Product: syz
[ 1467.241667][ T5942] usb 6-1: Manufacturer: syz
[ 1467.247447][ T5942] usb 6-1: SerialNumber: syz
[ 1467.268195][ T5942] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1467.464769][ T5942] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1467.499052][ T5942] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1467.521296][ T5942] usb 6-1: media controller created
[ 1467.551953][T18241] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1467.576598][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1467.714086][T18241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1467.761535][T18241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1467.771315][T18241] usb 1-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00
[ 1467.921281][T18241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1467.942384][T18241] usb 1-1: config 0 descriptor??
[ 1468.251116][T22086] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4519'.
[ 1468.279293][ T5942] usb 6-1: USB disconnect, device number 61
[ 1468.367565][T22091] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4521'.
[ 1468.379851][T22091] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4521'.
[ 1468.410602][T18241] topre 0003:0853:0148.0038: hidraw0: USB HID v0.00 Device [HID 0853:0148] on usb-dummy_hcd.0-1/input0
[ 1468.802848][T18236] usb 1-1: USB disconnect, device number 61
[ 1468.999590][T22102] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4524'.
[ 1469.816673][ T5937] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1469.989422][ T5937] usb 1-1: Using ep0 maxpacket: 8
[ 1470.007998][ T5937] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[ 1470.025040][ T5937] usb 1-1: config 0 has no interface number 0
[ 1470.045203][ T5937] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1470.094828][T22110] kvm: user requested TSC rate below hardware speed
[ 1470.101787][ T5937] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1470.131313][ T5937] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1470.153165][ T5937] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1470.208223][ T5937] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1470.222092][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1470.265087][ T5937] usb 1-1: config 0 descriptor??
[ 1470.284446][ T5937] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1470.400457][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4528'.
[ 1470.575985][   T24] usb 1-1: USB disconnect, device number 62
[ 1470.582190][    C1] ldusb 1-1:0.55: usb_submit_urb failed (-19)
[ 1470.594959][T22118] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4529'.
[ 1472.033224][T22133] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1472.252561][T22137] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4537'.
[ 1472.509354][   T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[ 1472.926009][T22146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4540'.
[ 1472.943027][   T24] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1473.121587][   T24] usb 1-1: Using ep0 maxpacket: 32
[ 1473.130869][   T24] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1473.140383][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1473.166068][   T24] usb 1-1: Product: syz
[ 1473.170281][   T24] usb 1-1: Manufacturer: syz
[ 1473.184271][   T24] usb 1-1: SerialNumber: syz
[ 1473.200059][   T24] usb 1-1: config 0 descriptor??
[ 1473.215260][   T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1473.238543][   T24] dvb-usb: bulk message failed: -22 (4/0)
[ 1473.254053][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1473.278381][   T24] dvb-usb: bulk message failed: -22 (5/0)
[ 1473.288480][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1473.318595][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1473.337622][   T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1473.372241][   T24] usb 1-1: media controller created
[ 1473.409473][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1473.481200][   T24] usb 1-1: selecting invalid altsetting 3
[ 1473.493119][   T24] ttusb2: set interface to alts=3 failed
[ 1473.569878][   T24] DVB: Unable to find symbol tda10086_attach()
[ 1473.579227][   T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1473.597546][   T24] dvb-usb: bulk message failed: -22 (4/0)
[ 1473.608448][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1473.620425][   T24] dvb-usb: bulk message failed: -22 (5/0)
[ 1473.626773][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1473.637020][   T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1473.650919][   T24] usb 1-1: USB disconnect, device number 63
[ 1473.713585][   T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1473.757460][T22161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4545'.
[ 1474.621666][   T24] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1474.781652][   T24] usb 1-1: Using ep0 maxpacket: 32
[ 1474.789960][   T24] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1474.799244][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1474.807395][   T24] usb 1-1: Product: syz
[ 1474.811603][   T24] usb 1-1: Manufacturer: syz
[ 1474.816280][   T24] usb 1-1: SerialNumber: syz
[ 1474.823928][   T24] usb 1-1: config 0 descriptor??
[ 1474.833786][   T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1474.841389][   T24] dvb-usb: bulk message failed: -22 (4/0)
[ 1474.847614][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1474.858101][   T24] dvb-usb: bulk message failed: -22 (5/0)
[ 1474.865131][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1474.877701][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1474.887611][   T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1474.895753][   T24] usb 1-1: media controller created
[ 1474.908418][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1474.924837][   T24] usb 1-1: selecting invalid altsetting 3
[ 1474.930570][   T24] ttusb2: set interface to alts=3 failed
[ 1474.955627][   T24] DVB: Unable to find symbol tda10086_attach()
[ 1474.962104][   T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1474.974612][   T24] dvb-usb: bulk message failed: -22 (4/0)
[ 1474.981655][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1475.000716][   T24] dvb-usb: bulk message failed: -22 (5/0)
[ 1475.010785][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1475.021033][   T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1475.048491][   T24] usb 1-1: USB disconnect, device number 64
[ 1475.072586][T22167] Cannot find add_set index 2 as target
[ 1475.123581][   T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1475.451781][   T24] usb 1-1: new full-speed USB device number 65 using dummy_hcd
[ 1475.602790][   T24] usb 1-1: not running at top speed; connect to a high speed hub
[ 1475.611702][   T24] usb 1-1: config 1 interface 0 altsetting 241 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[ 1475.623564][   T24] usb 1-1: config 1 interface 0 altsetting 241 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[ 1475.634790][   T24] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1475.641710][ T5942] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1475.654570][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1475.663855][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1475.671965][   T24] usb 1-1: Product: ࠐ
[ 1475.676105][   T24] usb 1-1: Manufacturer: 斩豩窱䋑턁ፓᒜ骂㊽陋瓥ݘ겐愢炘㡇㩒ꜘĦ䜒ﱱ
[ 1475.686101][   T24] usb 1-1: SerialNumber: 壽㭤禸犅쮑萳繗軆铻뤘
[ 1475.696201][T22167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1475.703743][T22167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1475.811566][ T5942] usb 6-1: Using ep0 maxpacket: 8
[ 1475.818343][ T5942] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[ 1475.826516][ T5942] usb 6-1: config 0 has no interface number 0
[ 1475.834627][ T5942] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1475.844011][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1475.852140][ T5942] usb 6-1: Product: syz
[ 1475.856311][ T5942] usb 6-1: Manufacturer: syz
[ 1475.860894][ T5942] usb 6-1: SerialNumber: syz
[ 1475.868866][ T5942] usb 6-1: config 0 descriptor??
[ 1475.914424][   T24] usb 1-1: bad CDC descriptors
[ 1475.928111][   T24] usb 1-1: USB disconnect, device number 65
[ 1476.078346][T22179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1476.087830][T22179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1476.103785][ T5942] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22
[ 1476.117019][ T5942] usb 6-1: USB disconnect, device number 62
[ 1476.756271][T22185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4555'.
[ 1476.786514][T22191] FAULT_INJECTION: forcing a failure.
[ 1476.786514][T22191] name failslab, interval 1, probability 0, space 0, times 0
[ 1476.799649][T22191] CPU: 0 UID: 0 PID: 22191 Comm: syz.6.4556 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1476.799676][T22191] Tainted: [L]=SOFTLOCKUP
[ 1476.799683][T22191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1476.799693][T22191] Call Trace:
[ 1476.799701][T22191]  <TASK>
[ 1476.799709][T22191]  dump_stack_lvl+0xe8/0x150
[ 1476.799736][T22191]  should_fail_ex+0x412/0x560
[ 1476.799765][T22191]  should_failslab+0xa8/0x100
[ 1476.799787][T22191]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 1476.799808][T22191]  ? dup_task_struct+0x57/0x9a0
[ 1476.799830][T22191]  dup_task_struct+0x57/0x9a0
[ 1476.799862][T22191]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1476.799885][T22191]  copy_process+0x508/0x3cf0
[ 1476.799931][T22191]  ? __pfx_copy_process+0x10/0x10
[ 1476.799958][T22191]  ? mutex_init_lockep+0xf9/0x130
[ 1476.799983][T22191]  vhost_task_create+0x1f9/0x380
[ 1476.800005][T22191]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[ 1476.800029][T22191]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[ 1476.800054][T22191]  ? __pfx_vhost_task_create+0x10/0x10
[ 1476.800084][T22191]  ? __pfx_vhost_task_fn+0x10/0x10
[ 1476.800110][T22191]  ? __lock_acquire+0x6b5/0x2cf0
[ 1476.800130][T22191]  ? kasan_save_track+0x4f/0x80
[ 1476.800148][T22191]  ? kasan_save_track+0x3e/0x80
[ 1476.800164][T22191]  ? kasan_save_free_info+0x46/0x50
[ 1476.800178][T22191]  ? __kasan_slab_free+0x5c/0x80
[ 1476.800194][T22191]  ? kfree+0x1c1/0x610
[ 1476.800213][T22191]  kvm_mmu_post_init_vm+0x14c/0x300
[ 1476.800233][T22191]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[ 1476.800260][T22191]  ? __mutex_trylock_common+0x158/0x260
[ 1476.800279][T22191]  ? look_up_lock_class+0x57/0x110
[ 1476.800300][T22191]  ? register_lock_class+0x31/0x2e0
[ 1476.800316][T22191]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1476.800335][T22191]  ? __lock_acquire+0x6b5/0x2cf0
[ 1476.800353][T22191]  ? __mutex_lock+0x319/0x1300
[ 1476.800379][T22191]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1476.800409][T22191]  ? do_raw_write_lock+0x11d/0x260
[ 1476.800445][T22191]  kvm_vcpu_ioctl+0xa62/0xfd0
[ 1476.800468][T22191]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1476.800482][T22191]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1476.800523][T22191]  ? __fget_files+0x2a/0x420
[ 1476.800543][T22191]  ? __fget_files+0x2a/0x420
[ 1476.800559][T22191]  ? __fget_files+0x3a0/0x420
[ 1476.800575][T22191]  ? __fget_files+0x2a/0x420
[ 1476.800595][T22191]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1476.800611][T22191]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1476.800627][T22191]  __se_sys_ioctl+0xfc/0x170
[ 1476.800651][T22191]  do_syscall_64+0x14d/0xf80
[ 1476.800671][T22191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1476.800687][T22191]  ? trace_irq_disable+0x37/0x100
[ 1476.800705][T22191]  ? clear_bhb_loop+0x40/0x90
[ 1476.800726][T22191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1476.800743][T22191] RIP: 0033:0x7f1f4e19bf79
[ 1476.800759][T22191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1476.800774][T22191] RSP: 002b:00007f1f4f063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1476.800793][T22191] RAX: ffffffffffffffda RBX: 00007f1f4e416090 RCX: 00007f1f4e19bf79
[ 1476.800805][T22191] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1476.800815][T22191] RBP: 00007f1f4f063090 R08: 0000000000000000 R09: 0000000000000000
[ 1476.800825][T22191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1476.800843][T22191] R13: 00007f1f4e416128 R14: 00007f1f4e416090 R15: 00007f1f4e53fa48
[ 1476.800871][T22191]  </TASK>
[ 1477.147223][   T30] kauditd_printk_skb: 22 callbacks suppressed
[ 1477.147235][   T30] audit: type=1326 audit(1770928253.166:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22187 comm="syz.8.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1477.176040][   T30] audit: type=1326 audit(1770928253.196:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22187 comm="syz.8.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1477.198490][   T30] audit: type=1326 audit(1770928253.196:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22187 comm="syz.8.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1477.220776][   T30] audit: type=1326 audit(1770928253.196:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22187 comm="syz.8.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1477.248624][   T30] audit: type=1326 audit(1770928253.266:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22187 comm="syz.8.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1477.274343][T22193] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1477.345560][   T30] audit: type=1326 audit(1770928253.266:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22187 comm="syz.8.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1477.521042][   T30] audit: type=1326 audit(1770928253.266:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22187 comm="syz.8.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1477.689223][T22213] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4560'.
[ 1477.725661][   T30] audit: type=1326 audit(1770928253.266:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22187 comm="syz.8.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1477.787771][   T30] audit: type=1326 audit(1770928253.266:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22187 comm="syz.8.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9159bf79 code=0x7ffc0000
[ 1477.859209][   T30] audit: type=1326 audit(1770928253.266:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22187 comm="syz.8.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef9159d807 code=0x7ffc0000
[ 1478.348135][T22227] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4565'.
[ 1478.781562][T18236] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1478.956722][T18236] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1478.969470][T18236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.978910][T18236] usb 6-1: Product: syz
[ 1478.991540][T18236] usb 6-1: Manufacturer: syz
[ 1479.001550][T18236] usb 6-1: SerialNumber: syz
[ 1479.023773][T18236] usb 6-1: config 0 descriptor??
[ 1479.042009][T18236] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1479.047975][T18236] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1479.260286][T18236] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1479.317094][T18236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1479.428776][ T5942] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1479.516343][T18236] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1479.535840][T18236] usb 6-1: media controller created
[ 1479.580125][T18236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1479.592781][ T5942] usb 7-1: Using ep0 maxpacket: 16
[ 1479.616393][ T5942] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1479.625598][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1479.634412][ T5942] usb 7-1: Product: syz
[ 1479.639102][ T5942] usb 7-1: Manufacturer: syz
[ 1479.645385][ T5942] usb 7-1: SerialNumber: syz
[ 1479.711886][ T5942] r8152-cfgselector 7-1: Unknown version 0x0000
[ 1479.721641][ T5942] r8152-cfgselector 7-1: config 0 descriptor??
[ 1479.747697][T18236] DVB: Unable to find symbol dib7000p_attach()
[ 1479.795924][T18236] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1480.055693][T22236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1480.065421][T22236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1480.090382][T22236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1480.103335][T22236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1480.112032][T18236] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1480.141563][T18236] Registered IR keymap rc-empty
[ 1480.157256][T18236] dvb-usb: could not initialize remote control.
[ 1480.171559][T18241] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1480.195481][T18236] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1480.341667][T18241] usb 1-1: Using ep0 maxpacket: 8
[ 1480.350058][T18241] usb 1-1: config 252 has an invalid interface number: 111 but max is 0
[ 1480.359326][T18241] usb 1-1: config 252 has no interface number 0
[ 1480.375721][T18241] usb 1-1: too many endpoints for config 252 interface 111 altsetting 116: 109, using maximum allowed: 30
[ 1480.418414][T18241] usb 1-1: config 252 interface 111 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 109
[ 1480.436363][T18241] usb 1-1: config 252 interface 111 has no altsetting 0
[ 1480.468761][T18241] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1480.472005][ T5922] r8152-cfgselector 7-1: USB disconnect, device number 12
[ 1480.500175][T18241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1480.744893][T22243] ------------[ cut here ]------------
[ 1480.750462][T22243] usb 6-1: BOGUS control dir, pipe 80003f80 doesn't match bRequestType c0
[ 1480.759089][T22243] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.0.4571/22243
[ 1480.769557][T22243] Modules linked in:
[ 1480.773933][T22243] CPU: 0 UID: 0 PID: 22243 Comm: syz.0.4571 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1480.784948][T22243] Tainted: [L]=SOFTLOCKUP
[ 1480.789323][T22243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1480.799456][T22243] RIP: 0010:usb_submit_urb+0x1114/0x18b0
[ 1480.805176][T22243] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9
[ 1480.825178][T22243] RSP: 0018:ffffc90004bb7948 EFLAGS: 00010246
[ 1480.831287][T22243] RAX: 0000000000000000 RBX: ffff88805d0e6c00 RCX: 0000000080003f80
[ 1480.839550][T22243] RDX: ffff88801c2a3780 RSI: ffffffff8c7e9180 RDI: ffffffff901dbae0
[ 1480.848425][T22243] RBP: 1ffff1100ec6ec7c R08: 00000000000000c0 R09: 0000000000000000
[ 1480.858233][T22243] R10: ffffc90004bb7a40 R11: fffff52000976f54 R12: ffff88807b7a3100
[ 1480.866808][T22243] R13: ffff8880763763e0 R14: 0000000080003f80 R15: ffff88801c2a3780
[ 1480.875273][T22243] FS:  00007f32e64036c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000
[ 1480.884764][T22243] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1480.891383][T22243] CR2: 000000110c39a03f CR3: 000000005570e000 CR4: 00000000003526f0
[ 1480.899512][T22243] DR0: 0000000000000003 DR1: 00000000000001f8 DR2: 000000000000008e
[ 1480.908353][T22243] DR3: 000000000000057a DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1480.916594][T22243] Call Trace:
[ 1480.919905][T22243]  <TASK>
[ 1480.922897][T22243]  ? __init_swait_queue_head+0xa9/0x150
[ 1480.928489][T22243]  usb_start_wait_urb+0x12b/0x510
[ 1480.933600][T22243]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1480.939212][T22243]  usb_control_msg+0x232/0x3e0
[ 1480.944079][T22243]  dib0700_i2c_xfer+0xbb2/0xf80
[ 1480.948989][T22243]  __i2c_transfer+0x79a/0x1ee0
[ 1480.953854][T22243]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1480.959706][T22243]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1480.965604][T22243]  ? i2c_transfer+0xc8/0x2d0
[ 1480.970267][T22243]  i2c_transfer+0x1cc/0x2d0
[ 1480.974826][T22243]  i2cdev_ioctl_rdwr+0x460/0x740
[ 1480.979806][T22243]  i2cdev_ioctl+0x6a5/0x880
[ 1480.984578][T22243]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1480.989651][T22243]  ? __fget_files+0x3a0/0x420
[ 1480.994421][T22243]  ? __fget_files+0x2a/0x420
[ 1480.999063][T22243]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1481.004107][T22243]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1481.009171][T22243]  __se_sys_ioctl+0xfc/0x170
[ 1481.013903][T22243]  do_syscall_64+0x14d/0xf80
[ 1481.018545][T22243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.024701][T22243]  ? trace_irq_disable+0x37/0x100
[ 1481.029851][T22243]  ? clear_bhb_loop+0x40/0x90
[ 1481.034629][T22243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.040554][T22243] RIP: 0033:0x7f32e559bf79
[ 1481.045080][T22243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1481.064787][T22243] RSP: 002b:00007f32e6403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1481.073303][T22243] RAX: ffffffffffffffda RBX: 00007f32e5815fa0 RCX: 00007f32e559bf79
[ 1481.081311][T22243] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000007
[ 1481.089369][T22243] RBP: 00007f32e56327e0 R08: 0000000000000000 R09: 0000000000000000
[ 1481.097451][T22243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1481.105540][T22243] R13: 00007f32e5816038 R14: 00007f32e5815fa0 R15: 00007f32e593fa48
[ 1481.113615][T22243]  </TASK>
[ 1481.116694][T22243] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1481.123984][T22243] CPU: 0 UID: 0 PID: 22243 Comm: syz.0.4571 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1481.134907][T22243] Tainted: [L]=SOFTLOCKUP
[ 1481.139212][T22243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1481.149252][T22243] Call Trace:
[ 1481.152520][T22243]  <TASK>
[ 1481.155443][T22243]  vpanic+0x1e0/0x670
[ 1481.159422][T22243]  panic+0xc5/0xd0
[ 1481.163138][T22243]  ? __pfx_panic+0x10/0x10
[ 1481.167548][T22243]  __warn+0x315/0x4a0
[ 1481.171532][T22243]  ? usb_submit_urb+0x1052/0x18b0
[ 1481.176573][T22243]  ? usb_submit_urb+0x1052/0x18b0
[ 1481.181601][T22243]  __report_bug+0x29a/0x540
[ 1481.186104][T22243]  ? usb_submit_urb+0x1052/0x18b0
[ 1481.191126][T22243]  ? __pfx___report_bug+0x10/0x10
[ 1481.196148][T22243]  ? usb_submit_urb+0x1119/0x18b0
[ 1481.201168][T22243]  ? usb_submit_urb+0x1114/0x18b0
[ 1481.206188][T22243]  report_bug_entry+0x19a/0x290
[ 1481.211029][T22243]  ? usb_submit_urb+0x1114/0x18b0
[ 1481.216128][T22243]  ? usb_submit_urb+0x1119/0x18b0
[ 1481.221143][T22243]  handle_bug+0xca/0x200
[ 1481.225380][T22243]  exc_invalid_op+0x1a/0x50
[ 1481.229884][T22243]  asm_exc_invalid_op+0x1a/0x20
[ 1481.234722][T22243] RIP: 0010:usb_submit_urb+0x1114/0x18b0
[ 1481.240359][T22243] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9
[ 1481.259957][T22243] RSP: 0018:ffffc90004bb7948 EFLAGS: 00010246
[ 1481.266017][T22243] RAX: 0000000000000000 RBX: ffff88805d0e6c00 RCX: 0000000080003f80
[ 1481.273977][T22243] RDX: ffff88801c2a3780 RSI: ffffffff8c7e9180 RDI: ffffffff901dbae0
[ 1481.281936][T22243] RBP: 1ffff1100ec6ec7c R08: 00000000000000c0 R09: 0000000000000000
[ 1481.289896][T22243] R10: ffffc90004bb7a40 R11: fffff52000976f54 R12: ffff88807b7a3100
[ 1481.297854][T22243] R13: ffff8880763763e0 R14: 0000000080003f80 R15: ffff88801c2a3780
[ 1481.305827][T22243]  ? usb_submit_urb+0x10a3/0x18b0
[ 1481.310852][T22243]  ? __init_swait_queue_head+0xa9/0x150
[ 1481.316395][T22243]  usb_start_wait_urb+0x12b/0x510
[ 1481.321429][T22243]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1481.326993][T22243]  usb_control_msg+0x232/0x3e0
[ 1481.331761][T22243]  dib0700_i2c_xfer+0xbb2/0xf80
[ 1481.336618][T22243]  __i2c_transfer+0x79a/0x1ee0
[ 1481.341380][T22243]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1481.347179][T22243]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1481.352981][T22243]  ? i2c_transfer+0xc8/0x2d0
[ 1481.357576][T22243]  i2c_transfer+0x1cc/0x2d0
[ 1481.362072][T22243]  i2cdev_ioctl_rdwr+0x460/0x740
[ 1481.367008][T22243]  i2cdev_ioctl+0x6a5/0x880
[ 1481.371503][T22243]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1481.376525][T22243]  ? __fget_files+0x3a0/0x420
[ 1481.381188][T22243]  ? __fget_files+0x2a/0x420
[ 1481.385765][T22243]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1481.390689][T22243]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1481.395724][T22243]  __se_sys_ioctl+0xfc/0x170
[ 1481.400310][T22243]  do_syscall_64+0x14d/0xf80
[ 1481.404890][T22243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.410942][T22243]  ? trace_irq_disable+0x37/0x100
[ 1481.415956][T22243]  ? clear_bhb_loop+0x40/0x90
[ 1481.420620][T22243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.426499][T22243] RIP: 0033:0x7f32e559bf79
[ 1481.430904][T22243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1481.450504][T22243] RSP: 002b:00007f32e6403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1481.458910][T22243] RAX: ffffffffffffffda RBX: 00007f32e5815fa0 RCX: 00007f32e559bf79
[ 1481.466868][T22243] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000007
[ 1481.474827][T22243] RBP: 00007f32e56327e0 R08: 0000000000000000 R09: 0000000000000000
[ 1481.482790][T22243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1481.490746][T22243] R13: 00007f32e5816038 R14: 00007f32e5815fa0 R15: 00007f32e593fa48
[ 1481.498719][T22243]  </TASK>
[ 1481.502066][T22243] Kernel Offset: disabled
[ 1481.506374][T22243] Rebooting in 86400 seconds..