last executing test programs:

20m1.144155935s ago: executing program 1 (id=110):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000005000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

20m0.988021747s ago: executing program 1 (id=113):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x15, 0x0, 0x0) (async)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x15, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x66, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x2b, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @broadcast=0xac1414bb, {[@rr={0x7, 0x1b, 0xaa, [@dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @multicast1, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}]}}}}}}}, 0x0)

19m57.830266688s ago: executing program 1 (id=130):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x400, <r1=>r0, 'id0\x00'})
r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1, 0x4000000}, 0x20)
write$hidraw(r1, &(0x7f0000000240)="6e5e51fb562bafb96a9bab47b7919edc1eb63a5f699c8f78b756bb07cb204bb1400e4a2b1542c39568232d658a2f5d27526dcdeb0ac55a34df156168353a7f07228c29c8ccafb593bf4d3aa1dae2aa137eda3ae024977a54061716ccc4b80b", 0x5f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
r5 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r7})
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7}}}]}, 0x3c}}, 0x4000010)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="400000001400190126bd7000f5dbdf250a0819fe", @ANYRES32=r9, @ANYBLOB="1400010000000000000000fdaf8b159835e52100006067de416581d7ca33c16c06000000000000011400060000000000ffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r10, &(0x7f0000004200)='t', 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, <r11=>0xffffffffffffffff})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x21, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x7, 0x9, 0x9, 0x400, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @ldst={0x2, 0x3, 0x3, 0x7, 0x7, 0x18, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x700000}, @alu={0x7, 0x1, 0x1, 0x5, 0x1, 0x1, 0x8}, @map_val={0x18, 0x4, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x10000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x4a, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xb, 0x0, 0xffff}, 0x10, 0x2056d, r5, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r1, r1, r5, r5, r11], 0x0, 0x10, 0x3}, 0x94)
r12 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r12, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r12, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r12, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x2449, 0x2, 0x1})
syz_emit_ethernet(0xb4, &(0x7f0000000a40)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@x25={0x805, {0x1, 0x80, 0x27, "a5fd9f7d7db5f33359bb8b9d5b6a65eef89d4dc0a8770ed9c071f42ada6cc9c6c9480e985ec98ebecfeb9f8901fedc65cd6c69ff7b88826f4bc5d75a96fc5c34649ed86174ba1b947719e95d63455dbb01e69b6fef6f7a920dfe8a79d5a0a0ac9563788c5113c046a4a0a6ca48853793c61ae8d8c7decd6d59dcdd2be5d3d559b9afdec8ff39ac86d90e3b2d794f183b93b3493ebb08b51e67a00d72c00c1dac84ce9f"}}}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

19m57.614564031s ago: executing program 1 (id=132):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndpcmc(0x0, 0x3, 0x8800)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000100))
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0xffffffffffffbfff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x4}}}, 0xa)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r3)
r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x51, 0xa, 0x2, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x52424752})
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xa8, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffe01}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000001}, 0x40880)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)=@dellink={0x28, 0x11, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0xb41d, 0x10}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x8001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)

19m54.894207472s ago: executing program 1 (id=144):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004400)=@newtfilter={0x186c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x88, 0x2, [@TCA_MATCHALL_ACT={0x84, 0x2, [@m_simple={0x80, 0x1, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x409, 0x6, 0xb, 0x7}}, @TCA_DEF_DATA={0x37, 0x3, '|\xf7\xffic\x00\xeb^\xb9\xac6\xdb\xe6\x84\xdb\xc8\x98\xcad\x1a\x89\x04\x8b<\x88\xd1\x05rR\xb4s\xcc\x82k\f#\xe6`\xd9\xba\xa2\x18\xed\xaf\x8f\a\xf6?\x8f\xded'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1798, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x5}}, @TCA_MATCHALL_ACT={0x1784, 0x2, [@m_simple={0x78, 0x13, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, '/dev/ptmx\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x2, 0x7, 0xdfa5}}, @TCA_DEF_PARMS={0x0, 0x2, {0x9, 0xef, 0x1, 0xe, 0x8}}]}, {0x1b, 0x6, "412d634e5ad7af3bb99a040fc73db47f8dc636605f046f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x1064, 0x1f, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x406}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x7b, 0x20000000, 0xbdc, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x1004, 0x6, "da158969fcda5e5d1268cb9784a033b7c947370b19e55fdd909fa16e7f5d9868e7f112632995f860d6a059550219a48dbffe9c7ced8419bf8983394d19442041c7dfee3fe8acdbe8922162198468e7ab928de21dfe6681c7064a6ca5cd50988f15fc60f3f561481fd5c085d69b566ef40383a8f4b80d1edab82b30eac5024db866ea6a5c31fd76e5eb93e8a3fce871d165469ec02302acb38e2317f8a4c0c3475988b6ad8d13371bea66664e76b7c7c3e2f3eba35e4fcc639233ab626a5d7008348fef70370388643aeebea684521caa270ab56d37f496d5bda859f21e42f9fa13daee7f7f3de7922747105c60af0c7ca5a94142eb26847274435b008b81464082ef95fb7777fc55d8cb4783fc0105a2203d7bc6ea1dd690e3de49bde7aa7747150aa93eb16549b2921153b5055115d1bdab888111cb7b4d4c355a058bdeff2969879766e0080d1e4bc60b0b538c96d5b59362594b0b923bc14cc47b0634f8eea1d21cc08131e0eaeeab05ea55f1f832d90016c3984844152ab8b5bd2f3552dc155034351d593c60e2676f59d9481deb8c4d87a6e67dbb3168be2228203910c4e85aab4ee4f01ee1716058c676798adbe40416c78dfc0408a45bbeabed2b654763057fb7df84fb475cc7a93d36fe0c705c4694fa1c4e44b5c888489555c00cb6af37d1f321b7825c0b1e085e613a8ba18ab704e448f7266ecaec5af81cc1e9dd3f6da72b170d42a417ab79f71076fbd2705706a1b62100d124ba463dccdc978648f5f7bb9d3eb038095d622c360aeb150f4c62e729da5dcd07d8c43eeba88196f9d32932bf73afeecf08aa4eed43a4200a01e965d0457621f7dceaad56a74370ea3ffd5e33aa68a5a38de4481b3aebc236d8de35a6e10e708a901a8448ee5ae024ec643f5890a81bb6830db8d7d4c211dbb2cd22ba3719c5e31bb4889dfa8ae5cb7b8d7052c1654e52cbd7a69008e5a352ca77a9b565b7242cde0526160f08a0d745f70c28d51bd9c8293259015b1f68ca0bf938c4fe5eb3738cb26f4083b7735ac7a2c6f893343049b02b447ec79271fd4df7f5f6ce6a11802317ac1e2582e529406491f7801210d5313bd1b0e485cbd02a10067ae470d5d7c20ee354817e306260c73da53e853abfe260cb90e987be90fd632eb034146ee1634f816e2f05ffeffecbe224116c8514183524eef725263f3a15155943e623322b0936d03384270fa0fd61ddcc9b4fec3e60e7ae5c4964ad6605e77b0a3a4c83ec4bcbf2938101cce0178f9bef93a182de4520d65ebf178bac6e750ad3def45010899896d6fd2c997219ae2ac755648bee27081433cf40782dd4d87be5fc279b1746deda89f786766e8af8da9550a5d031c95b170f41e2a0ee0990546ceb46917ee7628e543735b9ff411792015e411be2e68cb85d6f44c1e26d8943b4c59def6bd84c7e8f8c7acba89cdce514afdc71d9e98e26a90067e94007f28dfb88b76c93dc29fd152be9d150e2ef8a762bcc9d810045e261f1da77f65be48ceaf44ec20877b68b9c9f36f662f185e63291208de9c1b0bcfad08fb6f4e314da4b7f37726f1151e6d7d56494e7662d229ce7fecfac2219accb06f47e1542b382dd9ebf09337c2dc345e39159a522a3262c4243a9e61981d5dea8914d2ec74169f9bd9b79461c30c857f4b8eab5df2de9bac2adfdfa5e76dc3af6082d82d8e9f3a1e84c41759c7eaf58a4ba7f758b0882e48aa0b57f606218c64b2d5f54a431dae906db35eab6114971ef65ce052d6220fc87a1ca9f36be37516512e88621fb4eabc6425dd06a838642433abf4e52c04aa9021868c61269546333de44435251419c38dbba77ffff9d2e49d7ade14c30c8a9d550e19fecde841d7ef5f4cb88a7ede92a9e5850f040c99ad44ca119bd5378c01a3efeee4df67d1d0e9c84ee58e75351431243a496e0d53fe0facf1b85da94ed5c5468ae40c1356ba3a68fa4ede1119271bfc1de90769b2afc68544653e7f208185ea16afe0c164a04748fbcd4d2d83b9b24a6f86888b0dbde98901911ec52d57fd2b3af6a0b28ee7e34f300ca3870cfdef5d806312faa606105a82ae4b6b68ef1d58aa15c4adaf8bc5220855d0712bc310d8d004b52f59ac7170d76e340206d8b88b97b0a8c6f09897b123c7a3836fff1d7b15337cc95357eff8502354cc3a310523184d87fb75683bb689427cea547d09e2fafa4ecf34be9a94dcf3c2de69242090d83d2170fdf10e9c5b771a09db3f067cec9027b32bb5237f436e21ba84c2a45813edca89e38df962e0fa200073d5d09a9d73acb850a97da4520ca3dfb022db5eb2d32bc89d6a7c93bd70d13d61ca4c8e845d73dd7605474f6719378573d5f0e40c12373d78c05735faf2bdfd1e756da66192089a8b681fbd68041ba05695b280e68a92582816a958c732deb38d20cf141c40051e2fd53121c592dedd458ceada2fb20ddfbb054e01beade6793544efb0907cf2090bd8a16f7422983335500daf4a68121319e2b1446d5b84c39de0805cfd6abd3e364c17330f26964f2f9acefd210ca14078b3dab825dec28edacf051c8cd0288d85c100231f39ca9b32fe7861d8f11bdb33e7849fdf1001617ed6d77f4c3951c88fe45dfeef319929d2455ba06058839cd98ce3bbe163230c66e8f8716ecc263ebe2739ee581cfeda90a56c6d0bc408f2fb8e9dc1d97710cda34dee82ceb2cd0ebd2ae54ab8708d5bcab6d8668d4235b5a5556493f7f18816182dbb85e3102ec0eacd8a78d1c03a3a0ec2555c9b4109ea6b75305e92e67950c497c9fcca4487f64627b3ab0124dc2d89427759f828636bc85a4e2b60a3b3f8045188f8c3371bc08f719a9266ed1d070abb2ef650713e56b95311ad3cb1501bece79a6d35c2e32fc1036bc2e57c20a22b8b0bcb43ae1d4c26198b574fa2ada34d0ef85f6033f75746891e5d66613a2b7de827bf32518dc8194ae31888efbaf66e43d748669e207577a5686c0e1312184a27527f2ff500425127a571c692b4f918ffc060e3ed11d6e4b97533df362f5d4d6c1c10cee6b7ab96e9ddb330c4f75357aa8857575a933da196236ab5ac5589e1c3deb6bfe023caffcbc740b1d28a588ac133c4f6a4f5617ad8d4a80229ac0ce8cc75cf73bd9a125ed4207b6301c0ae1fef6cf2c047f95a93e919825b36c629739fe67ccff61d2550b2cb612bd2524df7c5c0fba76c05d9711fa9a534a82937cdf545851afa648480d6a7859514ea3b8c78619098691bc9cec90089a15851b6b1af6870f7d81b1b366a5c32f5c42fadd2eaaf180b58bc4d21574b50ea2e7ff33027e918017e13a25c949acd0b5cea7f705da8b82c245a99a0baba573b1122f0567bf311b088a14a5828f9c5c782e6bff8da845fd9ed33469e786aa4a85ce1e493e7ecf17d952d8a9abf619b1291b50a2c528898f0e7643d6ca70cfcfd0b602a41d00c61587325c7253626028ac71dc450c9432af011b8b3bf4dbab6725afc5cadd671941d8a41cefe5e84b61b253612e5e14dd48ba9fc483988b2788861dc61437c5c68b6d93ae4e921aaf3097bf469776222a53f9cf4ca40360d73e1a92e2d04c03c5e3ded21ab3ed5a3a1a6bcce3155897b389539cb4f521b5f7945cf5ee8fdd1c4fcd19243873eff2793702aa9164e7b9c32c58fde6132fa155d57d1e1b8e04a3497406eb484a76f72abf4ae168454b910ac5f2d3ea323e736f1ba2853f53a9f53f9395a8b13ecc257f7089b2d1fe7e0e938e493a8624db3fbef41f835024b0495c7fdf729596029cfaa5746002ef38c474d3574ec7413a91cd80c5ccd32e24401baea7ebf7d884fbf95dca7f1ce7e291872ff88e89d7c8da22415acef57ebb338731ff05409db54cf71493744154c6e4755813f512688639263ec3a82838f01f20ccb43458322173bf33d7fb5340bdbd3a3b34a16dc7b1c9c509f5ef5e63d4618e2955357e4961776bf467bf1b8fe38952303334eac84038da5cb52b9b70ddb48fef63f5c1a237286b28b167d7ed85ac49534daecd760588182da36542cb634f86c28d2a53f140e6b312fba1fd97eb135ec03464825945114a7441dd5d4799a4e3ba6c3b1bf89db7ccc169453d06dac3fec52452449dcfd4c094f6a41debf5061d110ffaeeedc99f6e1a3719607fcea2ca110ba445aa0ab7ab9c8d7394056eca458bb59273908ae761824f6cc3d908b0c2ddf451850384296faa70fa8483a714ad8fb90c340c6665379b70c6cd822700312604346f282360967de3b2be80d396fb4eaaec9ebe5fa0eb505a134aed6179ae2e43f80b22a3f0438fe9daa0704183d3c26e9014c12a11f2727ad2356af706118f45e17073250cdf90a42c89f9f6fdcb2ad45023d0b18b998db0175af984bbfd498e2879592d5fb0f146787c0fb24b37b7e6fcfd6090b4b8afedeafcb8ee8da27f92dacf56511825cda5dd724a9bb1f73c934f176fb37f2cb64025f2b5df4d2e375621303cad954c28b758d41b23299117ea5cc53490480cc33e880804a5b832750ef60e1d8e1e74ec3852a864231816d0fd53efbba13476f57ef5b9e097788f375e9fc4b203fa0203088ec06dce48435886a58f5229039af85d41f803913aa2f6ca40310f4b2459561ec1ea7ecb8380109899ca71c51e060adee5a1f6444769529c712dd9502c21b01c2d426f2d7c2856193ad0901e9c4e0d0f06c18202c8b2cb51f867dc9b4d534c407051f09e7f381195867f26bf1c217205e58150dd6c55de20e7b8aa09d8c95c35d84f4a19a487b27ee65a9acded9388ed99b939cced876c5954c4af2a56beae9f4b4dd11a7cb7f8b5112330cebd0d8c8cc06c55d4ede12b707d1757a78edce1e1dc95cf6a6e3c912c17c3676518bdfe8f8e4659c86d7ddec6b8d3cbbca876af2880546c542b7bbf9f61e84e0441316f8e36ea947881d94a357fac34cdeca9b7d3dc3d52847a32fc727a97616ad0bc6c4946959a30cd0e68aaca435e27e997909d7a2ced09af4bb2f0b82dfaafba3e90707f40b92095958cb5de44d42870bb937e72eb0fc189d31ee41002b8c0b2af701ddf074b20f05a1ca79f3e55b98d47be07948a6996af586cd88504ce41d3e8c4120ef278f1cfa53c4504aea286559a0425c36555e6d9bbffcbbfa6174bf428237080c5b0c4c7d2caaa8909fe8b107c7d628d09fabc9fb0f6fc6d16eec01cc83980d4b645d82b0bfcd92584483dae4db1b915ba63529f18b57b944dc9e3401b8cf83cd51a8b68b7cbbaa671f1c7150a03760b9df9a5ff2464dbc41863807558639a243942faf6aa0e996fb83967290ed64d008185456fbd6d994cef60b4f9a2eaddc5921ca0b3b1891da2b744f6b6f973c51d62b8c4c2e4f8c570ffd3a733acd618a67fd2a63c245aa8ffd6bb1923a777e318e363d1366692dfa499e6099e6639893752828850c132bda9c306b2c3b6b8fedd4cd6936448e0c137f167585386a40000971ca339a522ac099550f29b290785fd8cbefb72e03ed6107573c18c6079eac6baaa9c502c5871f898f6446ca54451b2f0f32dec1eec057b19279bda1e8b8324100bc36f6b01ee6449b13b146808a9d1c554c4103da082584b43655f2053973b6697d0a77e399d343f57a1ac9d51644887eebe121b35b115403ede5a9df79c2f456ae62d6b7db99f7342ba3e24f7afe7f654beb1ee601fbda087f774b69b97ba565573269b2eeab1a497ef90da84c67395fd8bdd45dea0e00a1c5cb3b589010c772a2542a1abb0983bbb7b1de3d5576c12d3fd21fbc4bc904ddafc4b9335aecdad5ce5ab819b128cd866d2b356"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x130, 0x20, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "312c9986c5b6ac5490fe951c1be59de4"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x27}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x11}}]}, {0xd7, 0x6, "b5e29826200e8da6ba1bdc4387f2328b8424d87b169c49b624694d82a531fbd29800634517fd904c718ca749f8434b8a4cc9d00dd22af94bb691ddc6bfbb13cc4f5bd70084a52a010a962368eacf8e345e8278a4cc652cce80caaec885a305dd3545266fb1511ea8f58bdc16c3387b87d70b1dd3c09b8d206643a8ff8412d2d23267b62c959f051d2a4aa77c6fc9fcbb31d4817dfa90ae0ccaa82f953374cab5040b22e1363053f2cba2181be801ed8c5f759d33ffa8e32b8aae446ad6649900e4cfe2f61d614c3d3f87999263aad83d4cfdc5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x144, 0x3, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x78a, 0xfffffff3, 0x6, 0x5, 0xed3c}, 0x70}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x0, 0x4402, 0xc0000000}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc819, 0x7, 0x10000000, 0x3, 0x100}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x80, 0x7, 0x6, 0xe8}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7fffffff, 0x3, 0x5, 0xd}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x45, 0x10000000, 0x2e1a, 0x5400000}, 0x8}}]}, {0x69, 0x6, "545b2fd31c68dc72fcb5d9b50625e38b9269fce758dd5fc60e336456356a121cd4a29285cc71a216541a19295082c45a50d24d5eaa6f18edd232412012cf9295fb180b5fa6c61459f621ccf6176250604e565448b1232f4fafd62799c33f78b889397fd865"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x1ec, 0x4, 0x0, 0x0, {{0xb}, {0x188, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd9, 0x3, 'matchall\x00\x99\x13RT\x94n\xbf<s\xe2\xc3\xbeg\xe0\x12\xad\xe5\xd9ub\xf4\xb2P\r~\xe2:?\bW,!\xb7\x9b\x88\x17\xc2\xd0#\xad\xc5pj\xac\xa6aL\x18\xb7\x1dT>\xb1\x01\xef4\xc2Z+\x12\fs\x9d&F\xec\xad\xad\x13\xdcs\xb14gn\xef?UK\xce\t\xafr\xa2\xc6\xef`\xc0$\x9e\x1d\xc2\x16\t\x9b\xafK\x89\x8f\x87\xab\xdaybo\xe4\x032\xab\xe6\x1az\x17\x8b\xf1.\x98Zd8TG\x7ft4\xdbP\xb1\xa9\r\x028&F\xa8\x88\xe9F\xac\x03\xea\xe8K\x9c\xc0\x19&\xfb\x98\xde\xf2\x9c=,\a\xb3j8\xea\x80\x9e3\xa4v\x9a\n\xe3}hNt>2\xebC\xcd\xcbl\xbd\xa0\x01\xd6E\xe4\xe6\xfb\\0\xe3\x9f~\xa7\xc4\xa0\xa8\xc7*\xda\xd8\x87H\xc0[\x06\xc7L\x86\f\xc5fh\xf6\xf8\x9c\xaf$_\x0f\xaa\xac9\xd2\xd81\x1b\x06;\x96\x9c\xe2e\r\xe3\x9b\xfb\x8a\x19~\xb9\x06z\x10\xe9\x1f\x01\xb3.>`Y\x17\xb9--\xd9j'}, @TCA_DEF_DATA={0x37, 0x3, '|\xf7\xffic\x00\xeb^\xb9\xac6\xdb\xe6\x84\xdb\xc8\x98\xcad\x1a\x89\x04\x8b<\x88\xd1\x05rR\xb4s\xcc\x82k\f#\xe6`\xd9\xba\xa2\x18\xed\xaf\x8f\a\xf6?\x8f\xded'}, @TCA_DEF_DATA={0x9, 0x3, '#(,[\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x100, 0x20000000, 0xfffffeff, 0x2}}, @TCA_DEF_DATA={0xd, 0x3, 'connmark\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x7, 0x7, 0x200, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x18\xd8\xd1\\\xcdY'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}]}, {0x3b, 0x6, "589f7c493fc6847455cda1025e8300b41bc53f20b5447b0bbc562d5accd484bda8d0e1f9de072945c5a836e76b608bc8f76ec9000064fa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_nat={0x198, 0x16, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x8, 0x6}, @empty, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x5, 0x3, 0x2}, @multicast2, @rand_addr=0x64010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa472, 0xa, 0xffffffffffffffff, 0xb7, 0x9}, @multicast1, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x16, 0x1, {{0xf6, 0x10000, 0x1, 0xffffffff, 0x5}, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff9, 0x2, 0x7, 0x501, 0x6}, @rand_addr=0x64010102, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x8, 0x5, 0x4}, @dev={0xac, 0x14, 0x14, 0x12}, @local, 0xff}}]}, {0x7e, 0x6, "3bfccba2eb95c9dc977dc4904be3911382504a128cce3f060ca7ad9df538dbab588225a3ffc4cded0daf651b9bbd916a77a3fac8a8b2147c9b423a86caa6b86281756654317130dcca62b300c003582f8f244fc70fd24f247eafd42b6024a94a4e6873684195cb5df9d463200c68e8d9e4559eb7a8a5a0766c49"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0xac, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xff}]}, {0x60, 0x6, "d3bbb6fb45d6f31577df991ce6dcc3bbd74d5ed4e684fafdc732e75c0565774f7370484c2631c566967b9ff7e7efa3c833d69d503ed2b2d76603ab3fee8ecfe71146441028a34c3f1ddb08d7c64e4d0cfd041a46ebecd6916684505e"}, {0xc}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x186c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

19m54.658934704s ago: executing program 1 (id=146):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
pread64(r0, &(0x7f0000019240)=""/102351, 0xfffffffffffffcb9, 0x1ff)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = syz_io_uring_setup(0x613a, &(0x7f00000003c0)={0x0, 0x6109, 0x10000, 0x3, 0x1a4}, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0xb, 0x2000, @fd_index, 0x5, &(0x7f0000000200)="721b70e654d6a3359bfbb8e47f1c3d83216bc05dd032f78987f934d6df732751127be9e1a8f7e7444157ef5798a9bd671a0658b8c87a9b57676fad6cf46610", 0x3f, 0xb, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000000)=0x20ffb, 0x0, 0x4)
io_uring_enter(r2, 0x807aa, 0x555a, 0x68, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
accept4(r0, 0x0, 0x0, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0)
read$watch_queue(r5, &(0x7f0000000300)=""/184, 0xb8)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)

19m39.566621839s ago: executing program 32 (id=146):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
pread64(r0, &(0x7f0000019240)=""/102351, 0xfffffffffffffcb9, 0x1ff)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = syz_io_uring_setup(0x613a, &(0x7f00000003c0)={0x0, 0x6109, 0x10000, 0x3, 0x1a4}, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0xb, 0x2000, @fd_index, 0x5, &(0x7f0000000200)="721b70e654d6a3359bfbb8e47f1c3d83216bc05dd032f78987f934d6df732751127be9e1a8f7e7444157ef5798a9bd671a0658b8c87a9b57676fad6cf46610", 0x3f, 0xb, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000000)=0x20ffb, 0x0, 0x4)
io_uring_enter(r2, 0x807aa, 0x555a, 0x68, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
accept4(r0, 0x0, 0x0, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0)
read$watch_queue(r5, &(0x7f0000000300)=""/184, 0xb8)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)

8.238117819s ago: executing program 5 (id=4652):
r0 = socket$kcm(0x2, 0x5, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff78, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000010000800000000000000000000000005ef100000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000c0900000000000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d33c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0xfc, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x1020000}, 0x3e8)

8.045639242s ago: executing program 5 (id=4653):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00')
fchdir(r0)
close(r0)
rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)='./file0/file0\x00')
setxattr$incfs_metadata(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080)="5ee10a81cff0ae7a5e228a995b58dad4e98fcd7dff02165d89891079467b08e0745678bc3747fc9ec75031c6f5c1199c3df603002a04d581e3b395ae548ab42c42dfce51d0824defb0415323addb2713b0dc9328", 0x54, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x31, 0x90, 0x8b, 0x8, 0x55f, 0xd004, 0x2d11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, "", [{{0x9, 0x4, 0x1f, 0x6, 0x0, 0xa0, 0x50, 0x82, 0x5}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async)
symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') (async)
fchdir(r0) (async)
close(r0) (async)
rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)='./file0/file0\x00') (async)
setxattr$incfs_metadata(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080)="5ee10a81cff0ae7a5e228a995b58dad4e98fcd7dff02165d89891079467b08e0745678bc3747fc9ec75031c6f5c1199c3df603002a04d581e3b395ae548ab42c42dfce51d0824defb0415323addb2713b0dc9328", 0x54, 0x0) (async)
syz_usb_connect(0x1, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x31, 0x90, 0x8b, 0x8, 0x55f, 0xd004, 0x2d11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, "", [{{0x9, 0x4, 0x1f, 0x6, 0x0, 0xa0, 0x50, 0x82, 0x5}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)

8.04328513s ago: executing program 0 (id=4654):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

7.865808911s ago: executing program 0 (id=4656):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000004c0)=0x2)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000000c0)={"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"})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x1000000000007, 0x200000000006b, 0x9, 0x1001, 0xfffffffffffffffe, 0x1000, 0x0, 0x7fff, 0x1, 0xffff, 0xffffffffffffffe3, 0x2, 0x3ff, 0x8, 0xe89, 0x8000000000000000], 0x8000000, 0xa64caa9dc5e57732})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r3, 0x1000002, 0x13, r6, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet(0xa, 0x1, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x3, 0x40000333}, 0x0, &(0x7f00000001c0))
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x7f)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000bf005f928395d1e9000000000000ffffffff0000000000000000000000000000000000000000000000fffffff9000000000000000000000000254e3872f2038d43ff0000000000000000000000000000000000000000000000000000000000feffffff00"/144]}, 0x108)

6.79057506s ago: executing program 5 (id=4663):
syz_emit_ethernet(0x206, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1d0, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8fffff", 0x40, 0x11, 0x0, @local, @empty, [@fragment={0xff}, @hopopts={0x0, 0x32, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x0, [0xfffffffffffffffe, 0x2, 0x5, 0x9, 0x18a7, 0x73, 0x2]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8a, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871f"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x8000000000000001, 0x0]}}]}]}}}}}}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={<r1=>0x0, @in6={{0xa, 0x4e24, 0x9, @mcast2, 0xc}}}, &(0x7f0000000340)=0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={r1, 0xf, 0x7, 0x401}, &(0x7f00000003c0)=0x10)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x0)
syz_emit_ethernet(0x206, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1d0, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8fffff", 0x40, 0x11, 0x0, @local, @empty, [@fragment={0xff}, @hopopts={0x0, 0x32, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x0, [0xfffffffffffffffe, 0x2, 0x5, 0x9, 0x18a7, 0x73, 0x2]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8a, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871f"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x8000000000000001, 0x0]}}]}]}}}}}}}, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x9, @mcast2, 0xc}}}, &(0x7f0000000340)=0x84) (async)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={r1, 0xf, 0x7, 0x401}, &(0x7f00000003c0)=0x10) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x0) (async)

6.563643082s ago: executing program 0 (id=4664):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0xfff5, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)

6.378745443s ago: executing program 0 (id=4665):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x2c)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
epoll_create1(0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0xfeffffffffffffff)

6.28312864s ago: executing program 0 (id=4666):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
rt_sigqueueinfo(r0, 0x1d, &(0x7f0000000040)={0xf, 0x0, 0x2})
syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x245, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x50, 0x2, "", [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0xf, 0x4, 0x1, {0x22, 0x4ad}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf, 0x3, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x8, 0x1}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xff, 0x40, 0x2, 0x8, 0x8}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x0, 0x7700, 0x4, [0x0, 0xff6f]}]}, 0x6, [{0x32, &(0x7f0000000180)=@string={0x32, 0x3, "04e56ad3891b76617abaa58e4700cd34c36b4cc71159094b7fa74e22583d2f76aeeb2be913b8ae51c9d69e1eb8f1ba6c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100a}}, {0xfd, &(0x7f0000000240)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x436}}, {0xb5, &(0x7f0000000380)=@string={0xb5, 0x3, "67cea3d1187086eb3c350e1c5be0dadd1ec3477d6e44917f78998e39c6e7af6fe6168e6873a4bbdb501cbf956a4ac67a3b56f3cee258606139a99fafd1b9d982c2677aebba82be0977ecfcf63254cbe32b9436cd4287d45dfbe05752d21808f8c103e5360a80b0d47ff27ba09750fafde455e673f7b08dbc1b5acf049c8fadd38969c03d957fc7a7933902bcd1c195afa059d88d7f07850161ed3977567524b63b0ed7d2a289ec738747d2cc0a8b10ea230f80"}}]})
syz_clone3(&(0x7f00000007c0)={0x308a08000, &(0x7f00000004c0)=<r1=>0xffffffffffffffff, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540), {0x5}, &(0x7f0000000580)=""/226, 0xe2, &(0x7f0000000680)=""/243, &(0x7f0000000780)=[r0, r0, 0x0, r0], 0x4}, 0x58)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000840), 0x1000012, &(0x7f00000008c0))
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x18}, 0x18)
r4 = pidfd_getfd(r1, r3, 0x0)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x7, 0x1, 0x3, 0xfd, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x3, 0xc0}}}}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x510, 0x8, 0xd, 0x5, 0xff, 0xf}, 0x260, &(0x7f0000000a80)={0x5, 0xf, 0x260, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xd9, 0x2, 0x2, 0x0, 0x0, [0xc000, 0x0]}, @generic={0xcb, 0x10, 0x1, "aeae6fb6fde24c5b2075099ca561483aac73504df2adeb0b8e06900e8f4b731b0c77f841ece6f1b66d0b4458897a85549ee6c3e304b4ff0a77cd069b9813f3067830dc5111116021fe4bf7a8e69783b6ce982365b6c7ca0bbcdafa9385c85c6ff70b4eadd8e0792b6f2a13abc94965f2fc0ee0fa06e5a1e7a8a38a052df5e29108155fdd5acd200d645a47ad5d1aad3957bdb15ae1ee85e81a4f26c859fc703a3892d2f071496b99dda9f4be98c45b39881f8ba80148ba00d6a6b8832d96a595dedae4eec1a370cc"}, @generic={0x9a, 0x10, 0x2, "d913181dd7a45e0c7e4fff5a2e34daf4e12e705660ab3d22f70f090a2c3fa7a398929b703b71a5d00235260cf62aa08bf64f8e14c1324a9ac44c166c4549a0a4dc4e0847447dead15d81624213fbd66cf0e781271f9536d77e154d62da9ad683052f867900f27d34d41f763f886b3c0e2e7aa670b3713fa1e1d819eeea49a409614d26ee898da4772299ecd9eeda9c60215655951aad09"}, @ssp_cap={0x18, 0x10, 0xa, 0x81, 0x3, 0x0, 0xf, 0xfffe, [0xff0000, 0x3f00, 0xffc0c0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x1, 0x7}, @generic={0xc3, 0x10, 0x4, "8eddb678a086bcf424cdec77985e2e3f3599b86f35e3b9fd86b04338451e3eae96faf712631b9e4d8bd74dc500d2dbe612dfe7b4ebf7b285b8076a257702ce400a8f81b35e9c583f8828c3586a1d7c9e3ff1605ec30400e444d9621123e490b9c6ef0da2f6b9833585ca90f6016d423896001011034f668e033382fe433a858ef87f4b6291cdf97653b8d00423d0d5e9c4ec2b36913b371449d372a3474205b89812709a3c457bc857c2b418935b6a8efa7b1501c6860702fcc6c0e96e294eef"}]}, 0x3, [{0x73, &(0x7f0000000d00)=@string={0x73, 0x3, "8d9c1ba885c892244c206ef80159f8cde5be8b2604cf56a7b8312afd7e7acc30032514a167ccffb523ee3ff116b68d30813fe3a69a6a0b28ac8dcd91e41c50ab3560bf6785f5bc67bf5581e92463d5ba33f64be27e465887e4175a84c081c83254f435188333aa8e8ad78b3feeb5ab2777"}}, {0xeb, &(0x7f0000000d80)=@string={0xeb, 0x3, "c6488cdcbdb8986be1819c486393ec59e61a729a5841713a11d92136189b40e0300f7b881c8ef0bb8cf7dff4c67349b972cf22b3b0d6f818ce356027cd186500317212133bcc261d082df0f28452c297bf75841f524595b7a8db6e9e53a2c01848a0bba746464e6d4a8d12a30531559ac2dd79dd37ae5fd375d61cffce87492d1985d89f621af1548a32c31531776d319cdf68efd11dddc7ce445396fe69cf735120c9c34208e4db48d36a45dfe17b9ae903b0c412b7a979827a7c4ee0eb48dc45d74293bfe82f22373b8e613de80f0fb8f0f5a36015f47fb6e64fae0935e898e1bbd66c6032fb5bc5"}}, {0x8, &(0x7f0000000e80)=@string={0x8, 0x3, "825f347ff507"}}]})
ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000000f00)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
waitid(0x1, r2, &(0x7f0000000f40), 0x4, &(0x7f0000000fc0))
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001080)={<r5=>0x0}, &(0x7f00000010c0)=0xc)
ptrace$setsig(0x4203, r5, 0x1, &(0x7f0000001100)={0x39, 0x6, 0x1})
write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000001180)={0x2, 0xff}, 0x2)
syz_usb_connect$printer(0x1, 0x36, &(0x7f00000011c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x10, 0x3, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x8, 0xe}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb, 0x0, 0xb}}]}}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x110, 0x1, 0xc, 0x2, 0x20, 0x5}, 0xc, &(0x7f0000001240)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0xc, 0x401}]}, 0x6, [{0xc9, &(0x7f0000001280)=@string={0xc9, 0x3, "055338f1b42dafbbcdaefa3b0b19f02bfaf410f756f472b2ecb783b9ea9d718fccf5c31927824a6b602375a936e256c758f23b2a7e283c551e618809f79c5d9482ab4558976110a3af5ee917dd8b8e6194b103173ce6485d540c280ed0200e0ace7536329207f72b39b14d5c8989623109503f38c9c520b547a0064616c55e1f8bed20d9b92f5eafbdad6ff93bc690342294e345190b4b3526f042c0a704d4274a04660e490fe6b69300ce50d4fedb89032923ece46eec48a056ccf4f73655c8bcdafd115b5ac1"}}, {0xe8, &(0x7f0000001380)=@string={0xe8, 0x3, "57002a73286d546f03952e6e5ca1f7b2574401c73482da81d426034f9b87f11e4d4a3dd5c793ef7de564776ddcb7b2c3d8ae933d13d479834ed452661650951c86731484cb94b575dac43d68acc3515a51ff99a61249a21a2d3f8d536ec324e4ebe6f8366e44b69bcfa9e17fea562a11ea020b7e45a7dc487ebe801ac37cb363a0fa722f8c91bad89d470612101dd91eebb9da4d12cca07193326c408c8c0ea01c8b32cfd89cba3a36a4e0368988636f3187af0078feb6e4417555f865c558b4eeff21928c0ed91ef4979531bc16d3621cbbd8a5efd63edd349145e6c2dc7ff193a1f9282764"}}, {0x56, &(0x7f0000001480)=@string={0x56, 0x3, "1c7bd2fa66f778104dd47680a05427e66a9b3696993a478ce2c1c87cc770d8a45d791f80ef3a84f5ce64e9339e2379459a90ca0366cfd6b3978ff029295042184876a415a08c8cc05455af4708cf6a27545c99ff"}}, {0x30, &(0x7f0000001500)=@string={0x30, 0x3, "3b57a88a1753b08a167c8ea4f17069bdc3091fdd73ac42756f8dfdb8944aefc8ea95b4f9aa2bba4b814a09894678"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x43f}}, {0x5, &(0x7f0000001580)=@string={0x5, 0x3, "9b772f"}}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000001640)=0x2, 0x4)
r6 = syz_open_dev$evdev(&(0x7f0000001680), 0x8, 0x2c6e40)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x8000, 0x0)
renameat2(r4, &(0x7f00000016c0)='./file0/file0\x00', r7, &(0x7f0000001740)='./file0\x00', 0x1)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f0000001780)={0x18, 0x0, 0x1, 0x0, 0x0, 0x480be779})
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000017c0), 0x240, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000001800)=0x3)
bind$inet6(r4, &(0x7f0000001840)={0xa, 0x4e22, 0x4c3b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xac10}, 0x1c)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001880), 0x80c2)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612)
syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f00000018c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x6, 0xa0, 0x3a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b23ca16a6972"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2a63, 0x7ff, 0xd}, {0x6, 0x24, 0x1a, 0xf, 0x34}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xe0, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x39f, 0xd8, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xc2, 0x6, 0x2}}}}}}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x110, 0x7, 0x6, 0x5, 0x8, 0xf9}, 0x4c, &(0x7f0000001980)={0x5, 0xf, 0x4c, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x8000, 0x8700, 0xfff, [0xf, 0x0, 0xc000, 0xf]}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x6, 0xf, 0x7f, [0x3f0f, 0x3fcf, 0xffc00f]}, @generic={0x13, 0x10, 0x3, "b052bc5ad756ba4efcf44e9c3a53fded"}]}, 0x3, [{0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x42a}}, {0x5f, &(0x7f0000001a40)=@string={0x5f, 0x3, "36201a3b574f4156adf92eca89e95aa64fd44188046e8b2ec72fc1b5a7b73f2368c58e1b819c09d191eaa68e39df94fac699dc1ceae1cd89485c325cd6c0f82c6a85f823574027e7223daec79a470bca53fde9488065308a31f17bef21"}}, {0x1d, &(0x7f0000001ac0)=@string={0x1d, 0x3, "bce0f6a865eb41d44ad70a4a22b34e91aaac600b4923c97ef4c537"}}]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001b40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000001d40)=<r11=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000001d80)={"f859571cec294e124af2ef488596683f", r10, r11, {0x8000, 0xec}, {0x101, 0xfffff967}, 0x79a, [0x1, 0x2, 0x8, 0x4, 0xfff, 0x1, 0x401, 0x7f, 0x9, 0x9, 0x8, 0x9a, 0x9, 0x1000, 0x61e, 0x2]})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000001e80))
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001f00))

5.291211532s ago: executing program 2 (id=4675):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000180)=0x10000005)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x0, 0x80, 0x20203443, 0x2, [0x2], [0x80ffdc], [0xffffffff, 0x0, 0x3], [0x3ffffffffffffff, 0x0, 0x1000000]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r6=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x258})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x2, 0xff}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')

4.947016808s ago: executing program 3 (id=4677):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000100000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

4.926835888s ago: executing program 2 (id=4678):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
r1 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$TIOCSBRK(r4, 0x5427)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
unshare(0x20000400)
syz_io_uring_submit(r2, r3, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x1733, 0x6323, 0x20, 0x0, 0x0)

4.913353179s ago: executing program 3 (id=4679):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000440)={[&(0x7f00000001c0)='\xff\xa2P\x00\xfa(fG\xc3\x91\xf9\xf9\x90\x98s\x1c6?\x0f\x02\x9a\x18\xf9$\x1dl\xd0T\xdeW\xd3!\xf5\x97,b\x1f\xa9f\x8d\x9f\x1f\xc9(\xcc\xd2\xa3\xb4\xcb\x87\xeb\xc1Emy\x1a\xdb\x89\xac\xff\xd9p\xd1\x12\xd4^\x1f\xc2\b\x18\f\xd2\xfe\x19=\'!K\xee\x04\xd9\x14y\x02\xf5\\a)\xeak\xec\x13\xa3\x98\x8f\vb(\xceJ;\xee:\xd2\x05\xd5J\x92\xf5\xbf\xd8\b\xf2\x18\xca\x88\bmJ\x02\x1c\x0f\x95\x0f\x96\xce\tFc\x9fB{-\n\xc2i\xc5\xe0\xcf\xdfJ&+i\xc2\a\xb8G\xa2\xdb\xf0\xce\xd3\xb3#\xb7?\xeb\xae\x96\xb7\x8c\xaa\xc2\x12\n\xd49\xd8\x9d{o66\v\xe4\x192F3\'\xa2\xa0\xa8\xfb+\xb7\x82\xec\x94'], 0xb00}, 0x0, 0x1000)

4.798825281s ago: executing program 3 (id=4680):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x4}, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x52b01) (rerun: 64)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000440)) (rerun: 64)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x6080, 0x0)
r5 = add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000300)="cf2ae5242d1f0414fe9d60ed3ece90ef8127fa9495e0374f2d2e813615dc3b0663015a859622cc5c50748c73b11ac24ff0358916c6d458663f82ef789a32563e92b6761200"/79, 0x4f, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async, rerun: 64)
r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738494bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd110f31ba5ae65e31f00e641832d29e01000000349b801b8b0d2de59d006ce210a0351b6bbd066daa00007b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126fceb6cca68972ac02bc7d9b0aa6453cbca85e30a02db8f48b9eb170ec826465726fb78c4c5c15b2b0accc91819448c47db98cf04ba3c2a18f2fb9319513475a8d02aa982f43adc7275cf628880d83ec1ec3f1f408d21a04e388b2460a6f33071ba190c3538bcc29d16bb0119570263af15bd2ae5f09c5d3177c3bf98da9b729d76aa92467ea00d4a5c1791881390e1aaaa1afaa6babf2598c7427fa29529c23b76d599f39c57e79a15d27d92289c1fc2b8c3ad7aac902c44dcedda161e66f0000000000000063d4d055b99561a2e498135cf51b7401001d4db6ff64f810dcb6ce6173a9a88cb5b243277e4ce46d679eda7a94e8eb8c13f3d2a0872b54f8f206f768b03fb5cec04593663dbb0c282e9c912a183471ccf155b025495357a02e277be10b6c", 0x25c, 0xfffffffffffffffe) (rerun: 64)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}})
io_uring_setup(0x744b, &(0x7f00000000c0)={0x0, 0xfbd5, 0x100, 0x2, 0xb0})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 64)
ioctl$FBIOGETCMAP(r9, 0x4604, 0x0) (async, rerun: 32)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (rerun: 32)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)

4.798533814s ago: executing program 4 (id=4681):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x8000000, 0x800}, 0x20004000)
r2 = socket(0x22, 0x2, 0x2)
setsockopt(r2, 0x107, 0x1, &(0x7f0000000000)="11000000", 0x4)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x430, 0x3f4, 0x20, 0x70bd2b, 0x25dfdbfb, {0x5, 0x1, 0x39, [0xf, 0xa816, 0x5, 0x80000000, 0x10, 0xeb, 0x100, 0x1, 0x3, 0x5400, 0x8, 0x10000, 0x400, 0x200, 0x4, 0x7, 0x1, 0x0, 0x5, 0x7, 0x6, 0x3, 0x4, 0x2, 0x8, 0x8, 0x6870, 0x7fff, 0x80000000, 0x0, 0x5, 0x1, 0x9, 0x7, 0x5, 0xfffffffa, 0x6, 0x8, 0x5, 0xfffffffb, 0xf4, 0x10001, 0xb, 0x10000, 0x5, 0x10001, 0x1, 0x0, 0x8000, 0xffff, 0x1, 0xb8, 0xfffffffb, 0x1, 0x0, 0xa77, 0x8e, 0x0, 0x401, 0xfffffffc, 0xed3, 0xc0ad, 0x5], [0x7, 0x9, 0x3ff, 0x7fff, 0x4, 0x6, 0x68d, 0xd70, 0x8, 0x4, 0x7, 0x4, 0xfffffffe, 0xa08, 0x0, 0xfffff149, 0x400000, 0x875, 0x3, 0xffff7aa9, 0x44c9, 0x2, 0x5, 0x3, 0x5, 0xea, 0x5, 0x9, 0x2, 0x2, 0xffffffff, 0x6, 0x1, 0x0, 0x8, 0xea49, 0x1, 0xd8cb, 0x5, 0x1, 0xfffffffc, 0x4, 0x9, 0x8, 0x0, 0x6, 0x9, 0x5, 0x5, 0x0, 0xffffff1c, 0x7ff, 0xfffffff8, 0x7, 0x9, 0x0, 0xffff, 0x416c, 0x80000001, 0x1, 0x608d, 0x1000, 0x1], [0x9, 0x26ac07e5, 0x10, 0x5, 0x2, 0x1ff, 0x27ef, 0x1, 0x80000000, 0x9, 0xc, 0xb, 0xa5c, 0xff, 0x0, 0x0, 0x4, 0x4, 0x5, 0x49, 0xa57, 0x82, 0x3, 0x8, 0x10000, 0x7f, 0x2, 0x7, 0x9c0, 0x7, 0x6c, 0x9, 0x4a0b, 0xa, 0x8, 0x5, 0x10, 0x3, 0xfffffffe, 0x4b, 0x3, 0x2, 0x784, 0x8, 0xbacf, 0x1f59, 0x3, 0x9, 0x7, 0x15aa, 0x7fffffff, 0x1, 0x7, 0xfffff012, 0x4, 0x8, 0x20000, 0x6, 0x0, 0x100, 0xca9b, 0x0, 0x0, 0x6], [0x3, 0x2, 0x6, 0x0, 0x27, 0x3, 0x6, 0xb6, 0x0, 0x831, 0x0, 0x5, 0x0, 0x80c, 0x9, 0x40, 0x7, 0x8, 0xfff, 0x5, 0x6, 0x9, 0x4, 0x6, 0x2, 0xffffffd8, 0x1, 0x5, 0x10, 0x1a8, 0x3, 0x5, 0x3, 0xb, 0x1, 0x3ff, 0x49, 0x0, 0x7aa, 0x3, 0x4, 0x7, 0x8, 0x0, 0x9, 0x7, 0x91c, 0x80000000, 0x0, 0xf45, 0x8, 0x3, 0x101, 0xffff, 0x0, 0x1, 0x80000000, 0x100, 0x3, 0x6, 0x7, 0x92, 0x9, 0x4], 0xd, ['hash:net,net\x00']}, ["", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x3, 0x1, 0x0, "ee4f6da8d2cf4011ac7b00", 0x32314742})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002400000000000010000020a0500000000000000000000000004090001"], 0x190}}, 0x0)

4.798257521s ago: executing program 2 (id=4682):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$qrtr(0x2a, 0x2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x10b402)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, 0x0, 0x0)
syz_io_uring_setup(0x4a32, &(0x7f00000000c0)={0x0, 0x78a9, 0x8, 0x0, 0x87}, 0x0, 0x0)
close(0x4)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0)

4.713429157s ago: executing program 4 (id=4683):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x62000)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffc, 0xf3, 0xb4, @scatter={0x3, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000000100)=""/129, 0x81}]}, &(0x7f0000000000)="a70a6a766d2f74829380a62775c801c34f701c09ce2d9347fc912598576c616b5f8c5fad917cc610a2bb168dacccdf0266036287e9289e397139e9ad1774d9f612ba2fc558b030ed32837c3464670c3fa4b89df8f191f46f2f31b9c060c494173de70b506eb36fa7d583b9c216f888e6292bea8eb78efdd56b4477c0bb9d0053d1a2cac80bad477a3683e63acd7aa11768f510ba4bdd4cdbe5745fcf9484f5340f1db7c1aaade21a5f84e019df144279c6620edb93a5be8392cbe63bf30c3ccd6c88e31012b0cd47f1381196c99aca4e93fe9d54437a47d0b62efa5a39b6d9b60eb238da69db13018ea26f6100000000000000", 0x0, 0xfffffffa, 0x0, 0x0, 0x0})
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)

4.701792059s ago: executing program 2 (id=4684):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8001, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x41, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
fcntl$setstatus(r2, 0x4, 0x40800)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000002c0))
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x0, @remote}}, 0x3, 0x1}, 0x90)
r10 = landlock_create_ruleset(&(0x7f0000000140)={0x8000, 0x1, 0x1}, 0x18, 0x6)
landlock_restrict_self(r10, 0x6)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)

4.655181293s ago: executing program 4 (id=4685):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, 0x14)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xa, &(0x7f0000000700)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYRES64=r7], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x28, 0x3, 0xff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x110}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000300000e7000000000000000094000100fffff7ff95"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x4000000, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

3.632714132s ago: executing program 3 (id=4686):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b)
r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94)
syz_usb_control_io$uac2(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x40, 0x8, 0x4f, "3a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a9330088ac3796add0c009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"}, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200161000000627ef1902ebfb2621bef4473a0c6e742e3d7c1a18625c9a1488ee33453c98223f55b9b15befe76ec06ba7847f6090192f8b0525be72bfc6827f34a3d0ce68bd2dc9d7fa19d72545b396850603090d93ddb251154d521d35b8dc0255500000000006c21e54af4484730622c1b8d05e4aa70ed5093ea73f1c921d725f752004f6068d4384fe9baeda6c331f0b66051619e1ca28c9c2db6ec249a74234c6bcca949575a74a5242f433331a099f4347f2ee2fee3a35c95acbcaf0606171df70a0980d44c284c0d61d691ffe245891448f3f4441386cfdea1879e0f208addc69330cd225de732345a203ee301"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}})
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = dup(r4)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x20, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0xbd, [0x100000000, 0x5, 0x6, 0x890, 0x4d0, 0x100], 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000180)=""/189}, &(0x7f00000000c0)=0x78)
r7 = eventfd2(0x7fffffff, 0x84b260709321933b)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r7, 0x7, 0x2})
write$eventfd(r7, &(0x7f0000000040), 0x8)

3.522250786s ago: executing program 5 (id=4687):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000f40f00010000000000000000000300000a58000000060a010400000000000020000a0000040900010073797a31000000002c0004802800018007000100637400001c0002800800014000000001050003000100000008000240000000030900020073797a32000000000000000000000a00000a00"/128], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000))
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6)
r3 = syz_io_uring_setup(0x75d6, &(0x7f0000000240)={0x0, 0x6093, 0x400, 0x1, 0x20000000}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffefffd, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x80}})
io_uring_enter(r3, 0x6c1a, 0xa25d, 0x1, 0x0, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)={0x1, 0x101, 0x4, 0x8, 0x10, "f8fe9b8a9eb00dc84aa20d84f6b83ec926c978"})

2.935200878s ago: executing program 0 (id=4688):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x6}, 0x4)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

2.512161523s ago: executing program 4 (id=4689):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x89ff, 0x0, 0x0, 0x0, @loopback, @empty, {[@cipso={0x86, 0x6, 0x3}]}}}}})

2.350207589s ago: executing program 5 (id=4690):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000}, 0x40004)

2.317743852s ago: executing program 4 (id=4691):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40240, 0x0)
ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000040)={0xb})
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r2, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xa4cc6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x12)

1.605525353s ago: executing program 4 (id=4692):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="780000000206030000000000000000000000fffd14000780080011400000000005001500ee0000000900020073797a320000000005000400030000001c0007800800094000000009050003000800000008001340fffffeff0900020073797a30000000001300030032e7840d3a6e65742c696661636500"], 0x78}}, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x6, 0x7f}}]})
mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0xc3, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='A', 0x1}], 0x1}, 0x400c0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x2f000000, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x208800, 0x0)
syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2)
write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2)

1.406956474s ago: executing program 5 (id=4693):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x37, 0x107, 0x70bd2b, 0x25dfdbfe, {0x10, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}, @typed={0xff76, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0x2000c000)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001100)={{r1}, "575e3c5ca066b379b35f1fdec8ed39d36663a10c9ae21bbb711b2d5eedfa65219ea4619a28787dd8eac1f3564528bffab2f1a94e8fc335a24945bb0f0b6e997b7225f2f5480e103418c3c3725a45aa01e2fa47a137729fc19b6e9109d02d7aefb0301448def015ba4bfd1db7eff5dc0b5e3514352f1f8c10b0f2c6e0ff2a25f9a45087ca9de10429f5e233248bfba93902d21e0737f51e176a223b49ffb9ba41e489c7e30cade4d5c10864f8ae8eb473e2b72ec99773ef80a5d01b66c76a2c04a087d2a10299dfe59330aee2d0a96794cc7d491a0fce7fb79090fd7d8de2089588330406f9c493f4b38af37be17c7bf5377e51116105bb708c652d6dd37912ca2f40f23e5a1fd4e2015eb56162c88d4cd2d1c49285ae84b2d6b687ad7a258ab2427b9f2b46b0d4b591d04f3a122a986aff80454f3a08376471a622b805156b5c28605e398a0ab215b18b44707bb5bc7e9cd9516d8be004f2e4118343e5954e4867672aa6de7f2b61237995e72335aadfe313c17da4a37ac26c7f7e56d2111606139d54f4494aaf9632726ce8fd327071cd519bbebcb7602ec0a1d1a61f5f4a554ccb8f16f13d584d3e8ef894e5ff94fd6f77894c076f1942ca731e89fea590ee916c12cbce96609d233848401022375ca30c38f83b4f55d3cfae57e21b053aaec00391e6337a0d2ec89c08a5d5f972eb3b5da2cecf791141a31a20267cbddf18763d046c8567245b9a5ea04d83cc8ee92e8133e66666b9c192b90f2ff70f609484ada22a9afe555cd822072e08404bffe090652380074b780f1322a0292aef25a30523b687be52ee92b31328c842fa3bf0f4e903892e49971bf2227da177f413ddd936f1d33f5ab85103ef4c301e68b5ac0873c589f93a9c7d51d782e18856498445aee9f5217c648360d5c37f910bc9f7bcebe4b77fecf8dbed82775696aee397bf46e4cdcdeb78f184142cecca602c50946cc78891fff3bbd097c9c160ee452e84bf673d1c2a6540e82a0d7fdab0ee23a5a142ea5ba6108fe919486b351bdbad2bd6d5da40794bb502d3e2dec53f3d81df0bc8db5292785104e6075e903b56750340ae7bb34fd2490713cfb43031c2d0a5079cdf74e7c92bb6c467b7b0d12e7100223580454c4df1419ce0d95ea42c11cec7b2f919b6e6ecd6a0951111d6d433e4965ee713fbff03038f041ca41f27a4f41784bb432fde54c021e7a1db0d297be23243235e114af5d05384452fc4c6e4a16bbb9f58f1316fd9b16a71bbd0ab304c34b9765dafcb6dcc8beaad7af355c9ca95e8f12d86ee0ba518dbd9eaee342956f676ef6a949d84205efd2d12154abce82cd1c5d1bfcf8a75c8f9c13b13c8937b3a4b46b3f3226c51b7bbfe6c3fd258ef01640bb7de96e4be3efd1f96e1c38b779aea8c9af1d882fbd2167adba7e92c49e9938c3b6e3aed87a9f342281b8c0810f5fc06339fd1064a98cb06f38eabcdfe50471d95f5194668911174441fc22ee370d5323f120b0273f6d58aef0c743ba9f95e85d6191bfb4923b8e5130d6430a3b4fa2d06487f83f47c768e83fc1232d5b365d8f8549e1924290bc2fbbd9664a9609dece09eca3cf40da5b330c43babafc999aadc1fa30405004b94a6c3497487cb06baf5b5ca537707b9abbdbbb13b966fb4c0c2d6bfdf906cb4149da0965aec801ca7431c18a21ecde01dd425df28135980a53802b08fa69d00752126f224f3da00111f8a11d379c1f8172af0bfd00641c4448150707344d4994354b5c41707d8f786881c62f6ba82bd8f2a5fd980775c516a7893cdc6047329ad28be3ea8722eb66078b460bf01b395bda3546b2075d77e8d05275ba19e13592bf538bc2f8d668e6447fa3601717610ec24334268cf255b30d84fa1f41bbb610aa6cab99f127fd39fff21ce1dcf2c017d25518e443c6b904cbf7f9a8369fcdb06c9da711672832e1927cb9ea62cf3de3cf3bd8e3b6b454011d3aaca80015cc555845f353bcee54adff62911e4a0e5d9a938d3d5183b39c42071dba1a1f40c18cb8192ee96d1f556c7bcc1d9c26e94895933c4448a72713c60d72271d9c4056fbb2bfea1c25b567ddeb683f880e32ae2303ae80b938fae7a580250f9ea84e432b4e8d5200b04c0b821f44cbe3dff2f811336a97e8eacefc9250c7727080e955ba87d5e892f76ee4bbcff1617ed2502a03cc2737b26d544f38820483ed587fa75d0d06be7e75bc01e31812894ac595912c56bc791ab30f2724643dedff5406e95a7cde8bfba02bab1f622b1d29dc732363db18ff70289a60b0e0e390e55c6c26e2a98b2599e393872c4ec9085e51b3503ce9474a77067baa1c30f401106373e67225bb5ec71ac41787f24deac3d76d6e6b561f99bdf342c6a20f811255a0859cbedb69d0378cd3666cb68f05f961d6a9a9cc794c4c34937cd4f1c5adbfdec7a568516ca29eeeb0f5d1dffa15f65e769b9a08066a9518cf40159fe5a87fd802ebe89f3835c925f9569700dcda470f23e8ff06f9a10b67bb9807af8b32c4ea9b3431fb3cd046a0ec9970d41251946d5eeb330ce5d879c89f69483beafa5bd8a2577c262b4986e01d5551312311bb79680129fc1903bed281f049f82f19cd980f29d667a2fdf98842778fa63a5d49977fefebf06a768371654242989ef77d710f0df5ffbef376a313f0784c26ef810095c80117e04d2ce76b7c678eb473224f97561f80750a335d7f51ee9be4542837c482a8c569e1dbb97077251cfc6d3c8f9d8e18c7f1b99ae5e08cc6a41c62ff5870ad6f03e44e13fe45d82254a0373c893f870647639aa36477750f51aba0007f1cab74942a50594342b2131c7c92160c1acbe3effb5a17736d6d3f8830f3e28e25ad8f75cc99c98cb24b5da4baf6e987d0b0910825e30e2abd1803d3cd1769be2330d77e3f85777dc4b296e30b2fedd4c45aade2e701fe2f306d54a06b63089e86d55b1ab6e48281d7b2e58640b1ca09bc934fa74e19b40aee141f8ec402e9b080206d410f8bd8b884e4c85728bade22fd3a67b1e8fd6df256110233fa0dc9cd9b12ca2d377160dae25c727cc01437f0a7e2d507c65eb2d8e94e947a080f38c7e0b3accbf98fcd427493b61c79d3a82f212eff8751558207548fd9402a2639afa2f15921b761e22546a17daa3501cf6b7f5346ea297e31b7857216fb6d0e98efe96c704d91eaa11f0e83b5f362cc1384659ed13ff2f16b1d5acab451074079837a8611f389b95d6a4a1f6cc09a96a4681ad478e945f4269ce32ef1ecbab468b0317a7d1a44621791a79219d9718cf621639b824420ce643863968280f8f18e54606e52a44d7c1abd7f460d3a48eb4b0b8a7f649350800a7be86eb3c25097c0fdf2ab9a494859816f92e5c39ac198fd84f4c21b9a11463cc551f5c8eaa8bd183d1e20375d9a52c5fd6bae5cfd2e55e67c251748f576be518e30438da59e7b8daff1c1deee1b853144c93346c393c59747e1b71b5fc9f3081fba0449f079b36b280f0d1f69fdd4c6f74997287837979748bda8f118253e04f625befda499c6025533706b273756559d33fcf0cb6e9f4e2045f8ece557c5481070fd1f9a578af3e8170e543b11ceaadb948fd7a0be43c00711835e13bd149f4df700b3893399ef150589e85d3759f27c651583a223e73da84737c1d0a4f7c69f16a6f3b58971fc12dcd83fbc947a11a6ea76b30f231f0da920544e5e0e64ff882abece4e3e3b7960a909e5313d1a0cccb746137ec94a2f91ae83b3b02c56844e87a6b980b22b4720b5cc405b2f88c40187e8e8c41a8691ec87cc132e6f8881f66ab04ec86026f46d518021ffe9f940294115d9de5758854a3341792cf7df801f68e8c20ad67d8617685ef82aeba2ab9cf4825b62ab57e6585276cf08676bc72d185bdb22760165325b87c628899618f742983bbdb8d1c6ba3808882185fa2f4eebd86708caa7572ed3e2c4e6652507bca43709997dffba15070695a590a3d60f6b7dc001c6f7e363087aa505859f39e5ef74baf89af3056e784c7411cb690187ee7c00e0a0bcd71704b78553cb5606d512dcaa5671ad0661a1be1822adff977c71aed7ba4f9c92782f4257c8075bdf49a7878f68d4e293944521f32b3553a6ffebb932ce2331fa511c1bae081233e82be091703b1db85cbabc3800612983c127a80a79d1c598eb024aea6050aa8a46013c67fa97b3ab327edcc613727fe4752897f4e83a76284677f5cd8ac186894f23052c839393c3f27ae983f9097128780d82bd6cf42fc384f48899d4596b2d5922cb7558f9886c8d8a49948d3ce6eb14494ad03dca394671c87c16e6a3b6b73ef882229c0ade61ef48e5ff428ed97d34c1c0fe27834cd917c9122670838a57ab2fa683e607a96e30a10bf982da439a955f94dd1944ce9d5838eed373ab6821064574ef477f8ffeed1d1ff19cdd29036687c23276f1e175851d6005f939f158db2bfc594f95fe0fa3a40b7d6604eca699d64a5b10b302c3f7a91e2d7f2a7527d00c056f5b56b560da3188ddfc52ffd8d30ed2d45709bd09cb3992fbe4a4db3b3abbae5b09acf0c3320b5699387ec59a0260c00aa628c32d1beb78b1f7508c8cb13c6ebb73b17495c9f50bb98da7180ad7c6d9cebd35beeaf4b84729df18923529fff67b81878ac1a01cb09bc833d1fd13c3e31a3db9107cc9df1a7b9467362714556f24be9522be80b509e543ee7336d697e1442d727854895797de1a2e21850a29541c60c2db23317a3fd13ed7ff5184c37b71b65c190e908c28d2121c605c91d7f7c09ad216855790317704f995877fe21debf81216d72dc10fd4d7f20220c01abecbdbe4f19b9a9c23f5bb89edc7584699bc5b168de172ac2ea082eba4268c894b0553abb608326ff5823f4a9386afbe8816500c139c87eef91e31c7a906bdf5db7d2ad8a6b37b7cf7ab1e82a472a7bc5a86154939834b615dae614fdaa4e3a9f84f738b0b66b1510d7bed2cb4337c9cf59189a6e36ef6d610a9b19feaf036b86859f9cafe1b95b0e0579b08ac535cc1fa705d471075c3faf720fc62be280e502bdda1f16452fba6953dee044bbb4fac5a475f24cd6936868294a6ca67b269dbc464d7c1467adf62db80e78b56a9829ce6b11080965027ca14042a99f548844038d47b3ec89698ea20a60f08f78495ecb8358ac418984dc3a7281abbb0d48ff204b9e6c673f62003b05253b17f36f28108d64f18be1954acc2948935e188e70eca8fc3f474be827e95a18ad68639862166645a12490e412143692d976ba9dc14addf85dffaf0b997d085eb5acb0f8e7038427f0c4e3bc0db72e0d51fdb7f9e94059a1c0358ed3746deb3b35df6647b3e051902765f031fcf7e7c966244844f820c40f84f17cda08fb40cfcb178bdff098ccf53b6d4c95528acc4fc7633e71f0b1d041d4e0a52812a943f9fc20cb098ce6ad1f6751e703e74688c8e7a910ce7ae57ddf8c3ca876e3230004bced54f8933aa719a96ac3b23168cba9979b07099890868489b42366cd855ec380c97190c676a768d9bbb8265a355b50d45201bda050166dabd82a94d57b8fb068df2877c6146322c5f2afd5db7e1da8085467960469d69a92a4bff83948e017c7897764c628080dbdd03154abb50b7cdeb2318018de1f13670a7909e82985862c32edb8be9f095e1acb728c1c97ca887ed8b8b1a4d4c042760a7e8c7e4d13e7ab2e733b6385060b099f4cb8955f761af577472fdb63368b4b88e81730551bdb739f8f432c7a85c5d0bdbafac999de5c495c826b3ca76b797fa6a403"})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a000100000000040000000002000000000000000000000008001e80"], 0x2c}}, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000140)='1', 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r4 = socket$netlink(0x10, 0x3, 0xf)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x5, 0x0, &(0x7f0000000280)="5c2053a401", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000005}, 0x50)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, 0x0, &(0x7f0000000080))
r6 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0xb1c1, 0x8, 0x3, 0x350, 0x0, r2}, &(0x7f0000000100)=<r7=>0x0, &(0x7f00000001c0))
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r4)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x70, r8, 0x800, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r9 = openat$null(0xffffffffffffff9c, &(0x7f00000010c0), 0x6c2881, 0x0)
fdatasync(r9)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0xc}}, './file0\x00'})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
shmctl$IPC_RMID(0x0, 0xb00)
writev(r6, &(0x7f0000000740)=[{&(0x7f0000000440)="1c18fe463553834a568fddc8b9d7c18a26df6ffad698f51ace1a856b6cfef6c1d3fe7c63f4e40c4d9e11569e558253a43812b0ea0557faf31112332b3df61011be37abea59321d09c645ba54530b8945d2c6484aab16b516bff849c7f6838bd9b122882272706e9ac8073dd89ff69f7dd930bbfe2e9e6ce0abdd1d8283a66f3bd79d17d65b86c9f8863a13e0ab10884da72789ce8a547a3a2ae00ff4bcac75a0e38f7122547b53ed90babfc5897b3dbabcd3bb84b0", 0xb5}, {&(0x7f0000000400)="9abb77f50200772a05816ba70c3b00000000f51dde92785882338f3108c68a6aaa", 0x21}, {&(0x7f0000000500)="719ea0bb7f2b84cab8a9579f71eafbfbdfe92373bc8bed2314c05954d90e8fdb0b92125cf3385bafcbb667c0e2f444cbb0a0c7e9c4cfe112e2f75b226b792b60056b897f11af37eb2e3f45f39d8230a5c0da02436de2281e37a6798f2eb5de952b0e82bae711719419250eeb4d30f3586d937473b13d631256c36f4feadba7344b40d075abd6035ee80ff04997", 0x8d}, {&(0x7f00000002c0)="90d961fd2f5a106abd1e3ba8a7408ac976d67fc747e65f7a2457fbdfdb5b2f4aa2e915056fbaec30d85f43bb075506ed3fb00f4b0df8fd0dd3fcbb1d0fc5875ceb28e60062b5f92dbd70342c8e0a53392d9d6883b91907daed0671685d", 0x5d}, {&(0x7f00000005c0)="8bdf9e9dbfead7381e03f62b1034b6db98f4c311fa1a2867edf83e2c51a5a8d830bab3877b35ea2fd0278b477e88a303974cae382fa09c676203652bad2832e6130fbe57a3893cb58c62d1267bd6ac1ffc8a8d7900db3d218c7799efde06e885505b9db38c52810373c85c9851a48e6d261af6205a6a1e47827bc0f41395467a4f3c436ed17bdfd99fdd5032ab64d835b340189f2d02e77a24c40e341e2c09e1931bc8addf191c602f9e2b0847de45abe1db30f0dbf813e82b48451a18a21623bf91a49a4cb2535d71e52af95b3f4f1357f0", 0xd2}, {&(0x7f00000006c0)="0d0f6f847c97556bf15a5de733c1217e3936f31ee4baf3c9f91eb97af4ee2bbab60805b60343fb74d9b669ef445c60cd81108a66c7b893f07ff0784026a8a6da9789cdd79bdc27e70e625447799fa12f7c9ecfd728d0db4428012f", 0x5b}, {&(0x7f0000000240)="ee9a5be1fab71eceb2d04d12f87dd2778f47235c49dc02e6f59cd07dad3a00a079176913b8f3461ea5e1ff86d3f4064448f187c83380445e15b268945a23f117", 0x40}], 0x7)
io_uring_enter(r9, 0x47b8, 0x10000, 0x2, 0x0, 0x0)

631.236514ms ago: executing program 3 (id=4694):
unshare(0x22020400)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$qrtr(0x2a, 0x2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x10b402)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, 0x0, 0x0)
syz_io_uring_setup(0x4a32, &(0x7f00000000c0)={0x0, 0x78a9, 0x8, 0x0, 0x87}, 0x0, 0x0)
close(0x4)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0)

417.181128ms ago: executing program 3 (id=4695):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8)
sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="8ca10e91", 0x4}], 0x1}}], 0x1, 0x84)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f00000000c0))
unshare(0x6a040000)
syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006c0449a2b42a9f494b8b81ca7575908c2b20711f0633231b01e49362ded83d4ac600fde0002b0e9dfea8a3393298217b875e41407be9ccec082755a4a4542f596e97cce1d9b9edcd958004a9b91873c3ee02faef50cb9faa4ad5e1a5da5ab31443e550ff"], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000300)={0x0, 0xc9, 0x5a35})
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20})
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0)
ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7})

293.986865ms ago: executing program 2 (id=4696):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[], 0x0, 0xe2, 0x0, 0x1, 0x8000}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[], 0x0, 0xe2, 0x0, 0x1, 0x8000}, 0x28)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000004c0)={0x0, 0x6, [@local, @empty, @random="e51813f09873", @multicast, @empty, @local]})
syz_emit_ethernet(0x66, &(0x7f0000000540)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x9, 0x33, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x66, &(0x7f0000000540)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x9, 0x33, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty}}}}}}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000100)={0x8, @output={0x0, 0x1, {0xd731c000, 0x7}, 0x3, 0x2}}) (async)
ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000100)={0x8, @output={0x0, 0x1, {0xd731c000, 0x7}, 0x3, 0x2}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

0s ago: executing program 2 (id=4697):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x4000000000002e6, 0x20004800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x3, 0x29, 0x7fffffff, 0x0, 0x2000000000000006, 0x9, 0xffffffffffffffff, 0x4, 0xffffffff}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0xffffffffffffffff}})
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000001100)=""/4079, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x2)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x23, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = gettid()
sendmsg$AUDIT_SET(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0xc84, 0x70bd2d, 0x25dfdbff, {0x10, 0xffffffff, 0x0, r4, 0x5, 0x5, 0x20000004, 0x9, 0x0, 0x4, 0x1}, ["", "", "", "", "", ""]}, 0x3c}}, 0x4004000)
sendmsg$nl_route(r3, 0x0, 0x4000050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000)
r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x928a, 0x3, 0x2}, 0x18, 0x7)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x5001, r3}, 0x0)
r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x758e, 0x80, 0x0, 0x34f}, &(0x7f0000000400), &(0x7f0000000080))
io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r7 = eventfd2(0x80000001, 0x80801)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f00000003c0)=r7, 0x1)
ioprio_set$pid(0x1, 0x0, 0x2004)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0xba42f000)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

nfig 0 descriptor??
[ 1162.914847][  T980] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1162.937921][  T980] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1162.957615][    T9] usb 3-1: USB disconnect, device number 110
[ 1163.063527][ T5910] gspca_stv06xx: I2C: Read error writing address: -71
[ 1163.259205][ T5910] usb 6-1: USB disconnect, device number 4
[ 1163.320509][  T980] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1163.337099][  T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1163.370871][  T980] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1163.417999][  T980] usb 4-1: media controller created
[ 1163.463198][  T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1163.714966][  T980] DVB: Unable to find symbol dib7000p_attach()
[ 1163.725407][  T980] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1163.899019][  T980] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1163.906551][  T980] Registered IR keymap rc-empty
[ 1163.919525][  T980] dvb-usb: could not initialize remote control.
[ 1163.938482][  T980] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1163.978459][ T5877] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 1164.151133][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1164.171399][T20486] netlink: 'syz.5.3986': attribute type 4 has an invalid length.
[ 1164.223587][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1164.245390][ T5877] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[ 1164.256320][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1164.272112][T20454] i2c i2c-1: Invalid block size returned: 58
[ 1164.297820][ T5877] usb 3-1: config 0 descriptor??
[ 1164.481250][ T5910] usb 4-1: USB disconnect, device number 120
[ 1164.655020][ T5910] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1164.782308][T20478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3984'.
[ 1164.834719][  T980] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1164.999543][ T5877] hid-led 0003:1D34:000A.0026: probe with driver hid-led failed with error -71
[ 1165.054090][  T980] usb 5-1: Using ep0 maxpacket: 8
[ 1165.127088][  T980] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1165.140194][ T5877] usb 3-1: USB disconnect, device number 111
[ 1165.146778][T20493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1165.215055][  T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1165.260409][  T980] usb 5-1: Product: syz
[ 1165.264661][  T980] usb 5-1: Manufacturer: syz
[ 1165.303914][  T980] usb 5-1: SerialNumber: syz
[ 1165.319047][  T980] usb 5-1: config 0 descriptor??
[ 1165.327282][  T980] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1165.444418][T20497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3989'.
[ 1166.718111][  T980] gspca_sq930x: ucbus_write failed -110
[ 1166.844674][T20529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3994'.
[ 1166.937551][  T980] gspca_sq930x: Sensor ov9630 not yet treated
[ 1167.057662][  T980] sq930x 5-1:0.0: probe with driver sq930x failed with error -22
[ 1167.442161][T20541] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4000'.
[ 1167.859888][    T9] usb 5-1: USB disconnect, device number 22
[ 1168.669040][T20555] usb usb1: usbfs: process 20555 (syz.4.4003) did not claim interface 0 before use
[ 1169.656963][ T5877] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1169.719414][T20562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4007'.
[ 1169.797817][ T5877] usb 5-1: device descriptor read/64, error -71
[ 1169.867644][T20562] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[ 1169.943352][T20562] bond2 (unregistering): Released all slaves
[ 1170.087775][ T5877] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1170.237467][ T5877] usb 5-1: device descriptor read/64, error -71
[ 1170.327581][T20578] x_tables: duplicate underflow at hook 4
[ 1170.349587][T20578] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1170.382404][ T5877] usb usb5-port1: attempt power cycle
[ 1170.569465][T20584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4014'.
[ 1170.897474][ T5877] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1170.947034][ T5877] usb 5-1: device descriptor read/8, error -71
[ 1171.357533][ T5877] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1171.378698][ T5877] usb 5-1: device descriptor read/8, error -71
[ 1171.487961][ T5877] usb usb5-port1: unable to enumerate USB device
[ 1172.281458][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1172.957475][   T29] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1172.957483][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1173.131661][   T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[ 1173.179273][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4030'.
[ 1173.186629][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1173.206247][T20636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1173.210101][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1173.232430][    T9] usb 6-1: config 6 has an invalid interface number: 20 but max is 0
[ 1173.232461][    T9] usb 6-1: config 6 has no interface number 0
[ 1173.232492][    T9] usb 6-1: config 6 interface 20 has no altsetting 0
[ 1173.250888][    T9] usb 6-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=21.86
[ 1173.323690][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1173.340665][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1173.360080][    T9] usb 6-1: Product: syz
[ 1173.371111][    T9] usb 6-1: Manufacturer: syz
[ 1173.385287][    T9] usb 6-1: SerialNumber: syz
[ 1173.397719][   T29] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 1173.434252][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1173.509786][   T29] usb 5-1: Product: syz
[ 1173.527209][   T29] usb 5-1: Manufacturer: syz
[ 1173.567604][   T29] usb 5-1: SerialNumber: syz
[ 1173.681133][T20641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1173.693142][T20641] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1173.714813][T20642] x_tables: duplicate underflow at hook 4
[ 1173.722051][T20642] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1173.784602][   T29] usb 5-1: config 0 descriptor??
[ 1173.808149][   T29] iguanair 5-1:0.0: failed to get version
[ 1173.818198][   T29] iguanair 5-1:0.0: probe with driver iguanair failed with error -90
[ 1173.844874][    T9] usb 6-1: Could not find all expected endpoints
[ 1174.014117][T20629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1174.094525][    T9] usb 6-1: USB disconnect, device number 5
[ 1174.124837][T20629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1174.158397][   T29] usb 5-1: USB disconnect, device number 27
[ 1174.542550][T20644] binder: 20643:20644 ioctl c0306201 200000000140 returned -14
[ 1175.177222][T20653] bond2: entered allmulticast mode
[ 1175.275183][T20657] macvlan2: entered promiscuous mode
[ 1175.330807][T20657] macvlan2: entered allmulticast mode
[ 1175.376456][T20657] bond2: entered promiscuous mode
[ 1175.431818][T20657] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1175.503366][T20657] bond2: left promiscuous mode
[ 1176.379391][T20677] binder: 20675:20677 ioctl c0306201 200000000140 returned -14
[ 1177.405098][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.413218][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.700493][T20686] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1177.706923][T20686] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1177.719202][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1177.738851][T20686] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1177.744997][T20686] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1177.757571][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.759087][T20686] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1177.907052][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1177.927733][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1178.122153][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1178.157514][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1178.430379][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1178.441090][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1178.458057][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1178.478601][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1178.493000][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1178.522546][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1178.533213][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1178.878887][ T5877] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1179.074896][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1179.087146][ T5831] Bluetooth: hci0: command 0x0406 tx timeout
[ 1179.094069][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1179.108914][ T5877] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1179.119277][ T5877] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1179.132722][ T5877] usb 5-1: Manufacturer: syz
[ 1179.180153][ T5877] usb 5-1: config 0 descriptor??
[ 1179.203255][ T5941] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 1179.387789][ T5941] usb 3-1: Using ep0 maxpacket: 8
[ 1179.461260][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1179.501448][ T5941] usb 3-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6
[ 1179.530617][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.549083][   T49] bridge_slave_1: left allmulticast mode
[ 1179.602055][   T49] bridge_slave_1: left promiscuous mode
[ 1179.607881][ T5941] usb 3-1: Product: syz
[ 1179.708003][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1179.717904][ T5941] usb 3-1: Manufacturer: syz
[ 1179.727571][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1179.734014][ T5941] usb 3-1: SerialNumber: syz
[ 1179.755168][ T5941] usb 3-1: config 0 descriptor??
[ 1179.775309][   T49] bridge_slave_0: left allmulticast mode
[ 1179.790711][ T5941] gspca_main: t613-2.14.0 probing 17a1:0128
[ 1179.797544][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1179.797640][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1179.815982][   T49] bridge_slave_0: left promiscuous mode
[ 1179.912979][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1179.991822][ T5941] gspca_t613: unknown sensor 0000
[ 1179.996994][ T5941] t613 3-1:0.0: probe with driver t613 failed with error -22
[ 1180.057760][ T5877] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0027/input/input117
[ 1180.068640][ T5941] usb 3-1: USB disconnect, device number 112
[ 1180.183192][ T5877] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0027/input/input118
[ 1180.244073][ T5877] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0027/input/input119
[ 1180.288875][ T5877] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0027/input/input120
[ 1180.400180][ T5877] uclogic 0003:256C:006D.0027: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0
[ 1180.597784][T15641] Bluetooth: hci4: command tx timeout
[ 1180.660735][ T5877] usb 5-1: USB disconnect, device number 28
[ 1180.770887][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1180.886348][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1180.989452][   T49] bond0 (unregistering): Released all slaves
[ 1181.011952][   T49] bond1 (unregistering): Released all slaves
[ 1181.049723][T20733] fido_id[20733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[ 1181.083833][T20718] chnl_net:caif_netlink_parms(): no params data found
[ 1181.293259][   T49] tipc: Left network mode
[ 1181.837902][T20718] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1181.866964][T20718] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1181.886013][T20718] bridge_slave_0: entered allmulticast mode
[ 1181.907658][T20718] bridge_slave_0: entered promiscuous mode
[ 1181.976479][T20718] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1181.996452][T20718] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1182.020384][T20718] bridge_slave_1: entered allmulticast mode
[ 1182.031664][T20767] ip6t_srh: unknown srh match flags  4000
[ 1182.049378][T20718] bridge_slave_1: entered promiscuous mode
[ 1182.140978][   T49] hsr_slave_0: left promiscuous mode
[ 1182.257527][   T49] hsr_slave_1: left promiscuous mode
[ 1182.284466][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1182.325057][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1182.391488][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1182.420463][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1182.516680][   T49] veth1_macvtap: left promiscuous mode
[ 1182.547487][   T49] veth0_macvtap: left promiscuous mode
[ 1182.560493][   T49] veth1_vlan: left promiscuous mode
[ 1182.582687][   T49] veth0_vlan: left promiscuous mode
[ 1182.677846][ T5831] Bluetooth: hci4: command tx timeout
[ 1183.289034][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1183.314419][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1183.618130][T20718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1183.782111][T20718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1183.957744][T20718] team0: Port device team_slave_0 added
[ 1184.019477][T20718] team0: Port device team_slave_1 added
[ 1184.206458][T20718] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1184.261400][T20718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1184.554949][T20718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1184.697144][T20718] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1184.757568][ T5831] Bluetooth: hci4: command tx timeout
[ 1184.774446][T20718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1184.807533][T20718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1184.982765][   T49] IPVS: stop unused estimator thread 0...
[ 1185.061876][T20718] hsr_slave_0: entered promiscuous mode
[ 1185.076256][T20718] hsr_slave_1: entered promiscuous mode
[ 1185.096367][T20718] debugfs: 'hsr0' already exists in 'hsr'
[ 1185.115797][T20718] Cannot create hsr debugfs directory
[ 1185.387589][ T5877] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1185.562191][ T5877] usb 6-1: Using ep0 maxpacket: 8
[ 1185.569644][ T5877] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1185.578190][ T5877] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[ 1185.593659][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1185.751082][ T5877] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1185.767473][ T5877] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1185.841744][ T5877] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[ 1185.852231][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1185.875277][ T5877] usb 6-1: Product: syz
[ 1185.881692][ T5877] usb 6-1: Manufacturer: syz
[ 1185.886478][ T5877] usb 6-1: SerialNumber: syz
[ 1186.442075][ T5877] usb 6-1: config 0 descriptor??
[ 1186.498557][ T5877] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1186.504633][ T5877] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1186.837573][ T5831] Bluetooth: hci4: command tx timeout
[ 1187.086545][T20853] netlink: 'syz.3.4087': attribute type 3 has an invalid length.
[ 1187.431013][ T5831] Bluetooth: hci3: unexpected subevent 0x06 length: 18 > 10
[ 1188.115991][T20718] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1188.207547][ T5941] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1188.247771][ T5877] usb 6-1: USB disconnect, device number 6
[ 1188.361657][T20718] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1188.390588][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1188.433736][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1188.450246][T20718] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1188.463169][T20718] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1188.504428][ T5941] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1188.737527][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1188.760512][ T5941] usb 5-1: config 0 descriptor??
[ 1189.030223][T20718] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1189.135517][T20718] 8021q: adding VLAN 0 to HW filter on device team0
[ 1189.192791][ T5941] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0
[ 1189.204452][ T5941] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0
[ 1189.218217][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1189.225486][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1189.257714][ T5941] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0
[ 1189.275817][ T5941] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0
[ 1189.294189][ T5941] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0
[ 1189.319866][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1189.327110][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1189.348480][ T5941] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0
[ 1189.366046][ T5941] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0
[ 1189.415281][ T5941] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[ 1189.477624][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1189.548577][ T5941] cp2112 0003:10C4:EA90.0028: Part Number: 0x00 Device Version: 0x00
[ 1189.768064][T20718] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1189.915832][T20718] veth0_vlan: entered promiscuous mode
[ 1189.960463][T20718] veth1_vlan: entered promiscuous mode
[ 1189.994766][T20913] ip6gretap0: entered promiscuous mode
[ 1190.049839][T20718] veth0_macvtap: entered promiscuous mode
[ 1190.105684][T20718] veth1_macvtap: entered promiscuous mode
[ 1190.143424][T20868] cp2112 0003:10C4:EA90.0028: Error starting transaction: -38
[ 1190.159957][T20718] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1190.176718][ T5941] cp2112 0003:10C4:EA90.0028: error reading lock byte: -71
[ 1190.187527][ T5910] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1190.216960][ T5941] usb 5-1: USB disconnect, device number 29
[ 1190.243299][T20718] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1190.490396][ T5910] usb 6-1: Using ep0 maxpacket: 16
[ 1190.504651][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1190.513901][ T5910] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1190.524445][ T5910] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1190.566180][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1190.581795][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1190.596383][ T5910] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[ 1190.634135][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1190.647614][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1190.682316][ T5910] usb 6-1: Product: syz
[ 1190.725573][ T5910] usb 6-1: Manufacturer: syz
[ 1190.732208][ T5910] usb 6-1: SerialNumber: syz
[ 1190.945638][T20905] ip6gretap0: left promiscuous mode
[ 1190.960538][ T5910] usb 6-1: Audio class v2/v3 interfaces need an interface association
[ 1191.002676][ T5910] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1191.318522][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1191.346864][ T5910] usb 6-1: 2:1 : invalid Cluster Descriptor size
[ 1191.363657][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1191.495088][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1191.512816][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1191.956653][T20941] x_tables: duplicate underflow at hook 4
[ 1192.008880][T20941] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1192.471099][T20947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4100'.
[ 1193.017506][ T5877] usb 6-1: USB disconnect, device number 7
[ 1193.277590][T20966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4105'.
[ 1193.468771][ T6217] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1193.528738][T20967] hub 1-0:1.0: USB hub found
[ 1193.537624][T20967] hub 1-0:1.0: 1 port detected
[ 1194.060463][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4107'.
[ 1194.267670][T20972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4107'.
[ 1195.028674][T20978] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1195.911368][ T5877] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 1196.127579][ T5877] usb 1-1: Using ep0 maxpacket: 8
[ 1196.149269][ T5877] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1196.158033][ T5877] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1196.185357][ T5877] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1196.227493][  T980] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1196.354164][ T5877] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1196.412774][ T5877] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1196.527560][  T980] usb 4-1: Using ep0 maxpacket: 32
[ 1196.537909][   T30] kauditd_printk_skb: 58 callbacks suppressed
[ 1196.537932][   T30] audit: type=1326 audit(1774597926.904:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.5.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2b39c799 code=0x7ffc0000
[ 1196.582818][  T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1196.949353][  T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1196.960233][   T30] audit: type=1326 audit(1774597927.144:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.5.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fca2b39c799 code=0x7ffc0000
[ 1196.993103][  T980] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[ 1197.006864][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1197.015344][  T980] usb 4-1: Product: syz
[ 1197.019730][ T5877] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1197.020649][   T30] audit: type=1326 audit(1774597927.144:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.5.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2b39c799 code=0x7ffc0000
[ 1197.052786][  T980] usb 4-1: Manufacturer: syz
[ 1197.059790][  T980] usb 4-1: SerialNumber: syz
[ 1197.065822][   T30] audit: type=1326 audit(1774597927.144:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20997 comm="syz.5.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2b39c799 code=0x7ffc0000
[ 1197.089512][  T980] usb 4-1: config 0 descriptor??
[ 1197.102590][  T980] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input121
[ 1197.120220][  T980] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90
[ 1197.146796][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1197.148092][  T980] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90
[ 1197.258499][ T5877] usbtmc 1-1:16.0: bulk endpoints not found
[ 1197.316599][  T980] usb 4-1: USB disconnect, device number 121
[ 1197.444849][ T5877] usb 1-1: USB disconnect, device number 67
[ 1197.617923][T21007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1197.728570][T21009] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.4118' sets config #0
[ 1197.787555][ T5877] usb 1-1: new low-speed USB device number 68 using dummy_hcd
[ 1197.965657][ T5877] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1197.985366][ T5877] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[ 1198.097498][ T5877] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1198.127438][ T5877] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1198.292655][ T5877] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1198.320834][T21020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4122'.
[ 1198.335047][ T5877] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=61.23
[ 1198.383693][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1198.417572][T16213] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1198.426095][ T5877] usbtmc 1-1:16.0: bulk endpoints not found
[ 1198.487886][T21024] x_tables: duplicate underflow at hook 4
[ 1198.496207][T21024] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1198.566859][ T5877] ati_remote 1-1:16.0: ati_remote_probe: Unexpected endpoint_in
[ 1198.582644][ T5877] usb 1-1: USB disconnect, device number 68
[ 1198.619017][T16213] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[ 1198.743359][T16213] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253
[ 1198.777906][T16213] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[ 1198.790466][T16213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1198.805214][T16213] usb 6-1: Product: syz
[ 1198.811243][T16213] usb 6-1: Manufacturer: syz
[ 1198.849417][T21028] syzkaller1: entered promiscuous mode
[ 1198.856539][T16213] usb 6-1: SerialNumber: syz
[ 1198.866664][T21028] syzkaller1: entered allmulticast mode
[ 1198.879324][T16213] usb 6-1: config 0 descriptor??
[ 1198.899670][T16213] gspca_main: sunplus-2.14.0 probing 055f:c630
[ 1199.017799][T16214] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 1199.098191][T21016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1199.109458][T21016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1199.128737][T21016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1199.139867][T21016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1199.155044][T21016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1199.167482][T16214] usb 4-1: Using ep0 maxpacket: 16
[ 1199.180570][T16214] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1199.197500][T16214] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1199.226989][T21016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1199.235257][ T5877] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1199.246044][T21016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1199.261960][T16214] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1199.276340][T21016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1199.286559][T16214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1199.295382][T16214] usb 4-1: Product: syz
[ 1199.300230][T16214] usb 4-1: Manufacturer: syz
[ 1199.314468][T16214] usb 4-1: SerialNumber: syz
[ 1199.321017][T21016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1199.368358][T21016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1199.407581][ T5877] usb 1-1: Using ep0 maxpacket: 16
[ 1199.408169][T16213] gspca_sunplus: reg_r err -110
[ 1199.418260][ T5877] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[ 1199.418517][T16213] sunplus 6-1:0.0: probe with driver sunplus failed with error -110
[ 1199.426741][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1199.477635][ T5877] usb 1-1: config 0 has no interface number 0
[ 1199.505535][ T5877] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 1199.527610][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1199.556862][ T5877] usb 1-1: Product: syz
[ 1199.565176][T16214] usb 4-1: 0:2 : does not exist
[ 1199.574369][ T5877] usb 1-1: Manufacturer: syz
[ 1199.610452][T16214] usb 4-1: unit 9 not found!
[ 1199.617521][ T5877] usb 1-1: SerialNumber: syz
[ 1199.632242][T16214] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4)
[ 1199.648108][ T5877] usb 1-1: config 0 descriptor??
[ 1199.676254][ T5877] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22
[ 1199.693049][T16214] usb 4-1: 4:0: cannot get min/max values for control 9 (id 4)
[ 1199.822507][T16214] usb 4-1: USB disconnect, device number 122
[ 1199.872115][    T9] usb 1-1: USB disconnect, device number 69
[ 1200.087941][T21033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4127'.
[ 1200.224317][    T9] usb 6-1: USB disconnect, device number 8
[ 1201.244821][T16213] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[ 1201.477576][T16213] usb 1-1: device descriptor read/64, error -71
[ 1201.757532][T16213] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[ 1201.899303][T16213] usb 1-1: device descriptor read/64, error -71
[ 1201.949076][T21065] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1201.982108][T21065] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1202.004605][T21065] Invalid logical block size (12)
[ 1202.019355][T16213] usb usb1-port1: attempt power cycle
[ 1202.407467][T16213] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[ 1202.438125][T16213] usb 1-1: device descriptor read/8, error -71
[ 1202.595765][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4136'.
[ 1202.619853][T21075] sctp: [Deprecated]: syz.5.4139 (pid 21075) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1202.619853][T21075] Use struct sctp_sack_info instead
[ 1202.697531][T16213] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[ 1202.744052][T16213] usb 1-1: device descriptor read/8, error -71
[ 1202.784730][T21077] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4139'.
[ 1202.858070][T16213] usb usb1-port1: unable to enumerate USB device
[ 1203.379079][T21075] can: request_module (can-proto-0) failed.
[ 1203.398627][T21083] syzkaller0: entered promiscuous mode
[ 1203.404978][T21083] syzkaller0: entered allmulticast mode
[ 1203.789862][T21091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4145'.
[ 1203.809435][   T30] audit: type=1326 audit(1774597934.214:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21088 comm="syz.3.4144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4df99c799 code=0x0
[ 1203.897869][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4145'.
[ 1204.254905][ T5877] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1204.473100][ T5877] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1204.484050][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1204.563514][ T5877] usb 4-1: config 0 descriptor??
[ 1204.606147][ T5877] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1205.185949][ T5877] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[ 1206.616232][ T5877] gspca_cpia1: usb_control_msg 05, error -110
[ 1206.622581][ T5877] cpia1 4-1:0.0: unexpected systemstate: 00
[ 1206.825255][ T5877] usb 4-1: USB disconnect, device number 123
[ 1209.050013][T21171] netlink: 392 bytes leftover after parsing attributes in process `syz.5.4167'.
[ 1209.657613][  T980] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1209.857606][  T980] usb 6-1: Using ep0 maxpacket: 32
[ 1210.037624][  T980] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1210.108762][T21185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4170'.
[ 1210.158529][  T980] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1210.167856][  T980] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1210.176065][  T980] usb 6-1: Product: syz
[ 1210.181230][  T980] usb 6-1: Manufacturer: syz
[ 1210.185850][  T980] usb 6-1: SerialNumber: syz
[ 1210.210767][  T980] usb 6-1: config 0 descriptor??
[ 1210.242979][T21176] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1210.353684][  T980] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1210.396387][  T980] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1210.560963][T21187] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1211.057612][T16214] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1211.120741][ T5877] usb 6-1: USB disconnect, device number 9
[ 1211.277672][T16214] usb 4-1: Using ep0 maxpacket: 8
[ 1211.294102][T16214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1211.333822][T16214] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1211.431243][T16214] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1211.441946][T16214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1211.451813][T16214] usb 4-1: Product: syz
[ 1211.456024][T16214] usb 4-1: Manufacturer: syz
[ 1211.567450][T21201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4176'.
[ 1211.718041][T16214] usb 4-1: SerialNumber: syz
[ 1211.732555][T16214] usb 4-1: config 0 descriptor??
[ 1211.741953][T16214] iowarrior 4-1:0.0: no interrupt-in endpoint found
[ 1211.891014][T21210] x_tables: duplicate underflow at hook 4
[ 1211.899465][T21210] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1211.956402][  T980] usb 4-1: USB disconnect, device number 124
[ 1215.232148][T16213] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1215.383968][T21250] FAULT_INJECTION: forcing a failure.
[ 1215.383968][T21250] name failslab, interval 1, probability 0, space 0, times 0
[ 1215.572295][T21250] CPU: 0 UID: 0 PID: 21250 Comm: syz.0.4192 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1215.572331][T21250] Tainted: [L]=SOFTLOCKUP
[ 1215.572339][T21250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1215.572352][T21250] Call Trace:
[ 1215.572360][T21250]  <TASK>
[ 1215.572371][T21250]  dump_stack_lvl+0xe8/0x150
[ 1215.572405][T21250]  should_fail_ex+0x412/0x560
[ 1215.572441][T21250]  should_failslab+0xa8/0x100
[ 1215.572471][T21250]  __kmalloc_noprof+0xe8/0x760
[ 1215.572497][T21250]  ? tomoyo_encode+0x28b/0x550
[ 1215.572524][T21250]  tomoyo_encode+0x28b/0x550
[ 1215.572551][T21250]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1215.572584][T21250]  ? tomoyo_path_number_perm+0x219/0x630
[ 1215.572611][T21250]  tomoyo_path_number_perm+0x246/0x630
[ 1215.572642][T21250]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1215.572673][T21250]  ? __lock_acquire+0x6b5/0x2cf0
[ 1215.572713][T21250]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1215.572764][T21250]  ? __fget_files+0x2a/0x420
[ 1215.572798][T21250]  ? __fget_files+0x2a/0x420
[ 1215.572828][T21250]  ? __fget_files+0x3a0/0x420
[ 1215.572858][T21250]  ? __fget_files+0x2a/0x420
[ 1215.572892][T21250]  security_file_ioctl+0xc3/0x2a0
[ 1215.572923][T21250]  __se_sys_ioctl+0x47/0x170
[ 1215.572952][T21250]  do_syscall_64+0x14d/0xf80
[ 1215.572976][T21250]  ? trace_irq_disable+0x3b/0x150
[ 1215.572995][T21250]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1215.573017][T21250]  ? clear_bhb_loop+0x40/0x90
[ 1215.573044][T21250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1215.573066][T21250] RIP: 0033:0x7f7f4859c799
[ 1215.573086][T21250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1215.573105][T21250] RSP: 002b:00007f7f4949b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1215.573128][T21250] RAX: ffffffffffffffda RBX: 00007f7f48815fa0 RCX: 00007f7f4859c799
[ 1215.573143][T21250] RDX: 00002000000002c0 RSI: 00000000c01c64ae RDI: 0000000000000003
[ 1215.573157][T21250] RBP: 00007f7f4949b090 R08: 0000000000000000 R09: 0000000000000000
[ 1215.573171][T21250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1215.573183][T21250] R13: 00007f7f48816038 R14: 00007f7f48815fa0 R15: 00007f7f4893fa48
[ 1215.573225][T21250]  </TASK>
[ 1215.573260][T21250] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1215.810252][  T980] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1215.824976][T16213] usb 6-1: Using ep0 maxpacket: 8
[ 1215.896484][T16213] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1215.907965][T16213] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1215.938957][T16213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1215.973986][T16213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1215.986369][T21253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4194'.
[ 1215.997674][  T980] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[ 1216.010551][T16213] usb 6-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1216.025246][  T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1216.056658][  T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1216.073007][T16213] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1216.083371][T16213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1216.092259][  T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1216.105430][T16213] usb 6-1: Product: syz
[ 1216.112339][T16213] usb 6-1: Manufacturer: syz
[ 1216.203627][T16213] usb 6-1: SerialNumber: syz
[ 1216.211952][T16213] usb 6-1: config 0 descriptor??
[ 1216.218193][  T980] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 1216.231460][  T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1216.241353][  T980] usb 3-1: Product: syz
[ 1216.245655][  T980] usb 3-1: Manufacturer: syz
[ 1216.254838][  T980] usb 3-1: SerialNumber: syz
[ 1216.312186][  T980] usb 3-1: config 0 descriptor??
[ 1216.341613][  T980] iguanair 3-1:0.0: failed to get version
[ 1216.348575][  T980] iguanair 3-1:0.0: probe with driver iguanair failed with error -90
[ 1216.623414][T21243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1216.656484][T21243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1216.964156][    T9] usb 3-1: USB disconnect, device number 113
[ 1218.218225][T16213] iowarrior 6-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0
[ 1218.332986][T16213] usb 6-1: USB disconnect, device number 10
[ 1218.366629][T21286] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4202'.
[ 1218.377446][    T9] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1218.441758][T21280] nvme_fabrics: missing parameter 'transport=%s'
[ 1218.528840][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 1218.536038][    T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1218.545549][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1218.566359][T21280] nvme_fabrics: missing parameter 'nqn=%s'
[ 1218.573528][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1218.667522][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1218.684119][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1218.713971][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1218.734453][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1218.960222][    T9] usb 4-1: usb_control_msg returned -32
[ 1218.965989][    T9] usbtmc 4-1:16.0: can't read capabilities
[ 1219.305864][    T9] usb 4-1: USB disconnect, device number 125
[ 1219.568203][T21307] sctp: [Deprecated]: syz.0.4207 (pid 21307) Use of int in max_burst socket option deprecated.
[ 1219.568203][T21307] Use struct sctp_assoc_value instead
[ 1219.710839][T21309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4208'.
[ 1219.728406][T21309] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[ 1221.000962][T21330] netlink: 'syz.0.4215': attribute type 1 has an invalid length.
[ 1222.056744][T21346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4220'.
[ 1222.120426][T21346] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4220'.
[ 1222.165709][T21349] netlink: 'syz.4.4221': attribute type 1 has an invalid length.
[ 1222.429109][T21361] FAULT_INJECTION: forcing a failure.
[ 1222.429109][T21361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1222.511942][T21361] CPU: 0 UID: 0 PID: 21361 Comm: syz.3.4225 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1222.511976][T21361] Tainted: [L]=SOFTLOCKUP
[ 1222.511984][T21361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1222.511997][T21361] Call Trace:
[ 1222.512007][T21361]  <TASK>
[ 1222.512017][T21361]  dump_stack_lvl+0xe8/0x150
[ 1222.512057][T21361]  should_fail_ex+0x412/0x560
[ 1222.512094][T21361]  _copy_from_user+0x2d/0xb0
[ 1222.512127][T21361]  input_event_from_user+0xb1/0x290
[ 1222.512155][T21361]  ? __pfx_input_event_from_user+0x10/0x10
[ 1222.512190][T21361]  evdev_write+0x2c7/0x4c0
[ 1222.512218][T21361]  ? __pfx_evdev_write+0x10/0x10
[ 1222.512241][T21361]  ? bpf_lsm_file_permission+0x9/0x20
[ 1222.512267][T21361]  ? security_file_permission+0x75/0x260
[ 1222.512296][T21361]  ? rw_verify_area+0x255/0x4d0
[ 1222.512319][T21361]  ? __pfx_evdev_write+0x10/0x10
[ 1222.512341][T21361]  vfs_write+0x29a/0xb90
[ 1222.512373][T21361]  ? __pfx_vfs_write+0x10/0x10
[ 1222.512398][T21361]  ? __fget_files+0x2a/0x420
[ 1222.512432][T21361]  ? __fget_files+0x2a/0x420
[ 1222.512461][T21361]  ? __fget_files+0x3a0/0x420
[ 1222.512491][T21361]  ? __fget_files+0x2a/0x420
[ 1222.512531][T21361]  ksys_write+0x150/0x270
[ 1222.512557][T21361]  ? __pfx_ksys_write+0x10/0x10
[ 1222.512593][T21361]  do_syscall_64+0x14d/0xf80
[ 1222.512620][T21361]  ? trace_irq_disable+0x3b/0x150
[ 1222.512638][T21361]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1222.512660][T21361]  ? clear_bhb_loop+0x40/0x90
[ 1222.512687][T21361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1222.512708][T21361] RIP: 0033:0x7fb4df99c799
[ 1222.512728][T21361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1222.512746][T21361] RSP: 002b:00007fb4ddbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1222.512769][T21361] RAX: ffffffffffffffda RBX: 00007fb4dfc15fa0 RCX: 00007fb4df99c799
[ 1222.512785][T21361] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003
[ 1222.512798][T21361] RBP: 00007fb4ddbf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1222.512811][T21361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1222.512823][T21361] R13: 00007fb4dfc16038 R14: 00007fb4dfc15fa0 R15: 00007fb4dfd3fa48
[ 1222.512856][T21361]  </TASK>
[ 1222.857637][T16214] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1223.078889][T16214] usb 3-1: Using ep0 maxpacket: 32
[ 1223.088384][T16214] usb 3-1: config 4 has an invalid interface number: 228 but max is 0
[ 1223.140279][T16214] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1223.164862][T16214] usb 3-1: config 4 has no interface number 0
[ 1223.177432][T16214] usb 3-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30
[ 1223.197437][T16214] usb 3-1: config 4 interface 228 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 129
[ 1223.215915][T16214] usb 3-1: config 4 interface 228 has no altsetting 0
[ 1223.253726][T16214] usb 3-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[ 1223.267410][T16214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1223.280183][T16214] usb 3-1: Product: syz
[ 1223.284445][T16214] usb 3-1: Manufacturer: syz
[ 1223.290058][T16214] usb 3-1: SerialNumber: syz
[ 1223.383324][T21383] xt_socket: unknown flags 0xc
[ 1223.404710][T21384] fuse: Bad value for 'user_id'
[ 1223.431026][T21384] fuse: Bad value for 'user_id'
[ 1223.520346][T21391] input: syz1 as /devices/virtual/input/input124
[ 1223.627003][T21391] FAULT_INJECTION: forcing a failure.
[ 1223.627003][T21391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1223.667668][T21391] CPU: 0 UID: 0 PID: 21391 Comm: syz.3.4236 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1223.667704][T21391] Tainted: [L]=SOFTLOCKUP
[ 1223.667712][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1223.667725][T21391] Call Trace:
[ 1223.667734][T21391]  <TASK>
[ 1223.667744][T21391]  dump_stack_lvl+0xe8/0x150
[ 1223.667782][T21391]  should_fail_ex+0x412/0x560
[ 1223.667819][T21391]  _copy_from_user+0x2d/0xb0
[ 1223.667845][T21391]  input_event_from_user+0xb1/0x290
[ 1223.667871][T21391]  ? __pfx_input_event_from_user+0x10/0x10
[ 1223.667906][T21391]  uinput_write+0x281/0xfe0
[ 1223.668061][T21391]  ? __pfx_uinput_write+0x10/0x10
[ 1223.668088][T21391]  ? bpf_lsm_file_permission+0x9/0x20
[ 1223.668116][T21391]  ? security_file_permission+0x75/0x260
[ 1223.668145][T21391]  ? rw_verify_area+0x255/0x4d0
[ 1223.668170][T21391]  ? __pfx_uinput_write+0x10/0x10
[ 1223.668195][T21391]  vfs_write+0x29a/0xb90
[ 1223.668227][T21391]  ? __pfx_vfs_write+0x10/0x10
[ 1223.668251][T21391]  ? __fget_files+0x2a/0x420
[ 1223.668285][T21391]  ? __fget_files+0x2a/0x420
[ 1223.668313][T21391]  ? __fget_files+0x3a0/0x420
[ 1223.668342][T21391]  ? __fget_files+0x2a/0x420
[ 1223.668382][T21391]  ksys_write+0x150/0x270
[ 1223.668408][T21391]  ? __pfx_ksys_write+0x10/0x10
[ 1223.668444][T21391]  do_syscall_64+0x14d/0xf80
[ 1223.668469][T21391]  ? trace_irq_disable+0x3b/0x150
[ 1223.668488][T21391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1223.668510][T21391]  ? clear_bhb_loop+0x40/0x90
[ 1223.668545][T21391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1223.668566][T21391] RIP: 0033:0x7fb4df99c799
[ 1223.668587][T21391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1223.668605][T21391] RSP: 002b:00007fb4ddbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1223.668629][T21391] RAX: ffffffffffffffda RBX: 00007fb4dfc15fa0 RCX: 00007fb4df99c799
[ 1223.668644][T21391] RDX: 000000000000fe4f RSI: 0000200000000000 RDI: 0000000000000005
[ 1223.668658][T21391] RBP: 00007fb4ddbf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1223.668671][T21391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1223.668687][T21391] R13: 00007fb4dfc16038 R14: 00007fb4dfc15fa0 R15: 00007fb4dfd3fa48
[ 1223.668721][T21391]  </TASK>
[ 1223.838487][T16214] usb 3-1: USB disconnect, device number 114
[ 1224.013507][T20754] udevd[20754]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1224.862010][T21407] fuse: Bad value for 'fd'
[ 1225.064377][T21419] fuse: Invalid uid '00000000000000000003'
[ 1225.398895][ T6217] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1225.762012][T21431] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4247'.
[ 1226.661484][    T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1226.942724][    T9] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1226.982600][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1226.991687][    T9] usb 3-1: Product: syz
[ 1226.996033][    T9] usb 3-1: Manufacturer: syz
[ 1227.069253][    T9] usb 3-1: SerialNumber: syz
[ 1227.079251][    T9] usb 3-1: config 0 descriptor??
[ 1227.108906][    T9] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1227.114916][    T9] hub 3-1:0.0: probe with driver hub failed with error -5
[ 1227.314249][    T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1227.361177][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1227.381128][    T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1227.437510][    T9] usb 3-1: media controller created
[ 1227.461576][T21460] x_tables: duplicate underflow at hook 4
[ 1227.470193][T21460] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1227.509003][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1227.965130][    T9] DVB: Unable to find symbol dib7000p_attach()
[ 1227.975048][    T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1228.507518][    T9] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1228.513816][    T9] Registered IR keymap rc-empty
[ 1228.559412][    T9] dvb-usb: could not initialize remote control.
[ 1228.588691][    T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1228.820803][T16214] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1228.892465][    T9] usb 3-1: USB disconnect, device number 115
[ 1228.981755][    T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1229.412470][T21487] xt_hashlimit: size too large, truncated to 1048576
[ 1230.067445][ T5877] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1230.268805][ T5877] usb 3-1: Using ep0 maxpacket: 16
[ 1230.291495][ T5877] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255
[ 1230.315560][ T5877] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1230.333988][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1230.357143][ T5877] usb 3-1: Product: syz
[ 1230.398420][ T5877] usb 3-1: Manufacturer: syz
[ 1230.410951][ T5877] usb 3-1: SerialNumber: syz
[ 1230.422701][ T5877] usb 3-1: config 0 descriptor??
[ 1230.429499][T21495] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1230.465479][T21498] netlink: 'syz.5.4266': attribute type 10 has an invalid length.
[ 1230.484715][ T5877] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected
[ 1230.502663][T21498] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4266'.
[ 1230.702431][    C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71)
[ 1230.708726][    C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71)
[ 1230.716112][ T5910] usb 3-1: USB disconnect, device number 116
[ 1230.724348][ T5910] mcba_usb 3-1:0.0 can0: device disconnected
[ 1232.097584][   T30] audit: type=1326 audit(1774597962.484:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21522 comm="syz.2.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1232.097653][   T30] audit: type=1326 audit(1774597962.484:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21522 comm="syz.2.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1232.097699][   T30] audit: type=1326 audit(1774597962.484:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21522 comm="syz.2.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1232.097742][   T30] audit: type=1326 audit(1774597962.484:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21522 comm="syz.2.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1232.097788][   T30] audit: type=1326 audit(1774597962.504:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21522 comm="syz.2.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1232.097833][   T30] audit: type=1326 audit(1774597962.504:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21522 comm="syz.2.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1232.097878][   T30] audit: type=1326 audit(1774597962.504:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.2.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96ad15cfce code=0x7ffc0000
[ 1232.155284][   T30] audit: type=1326 audit(1774597962.564:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21522 comm="syz.2.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1232.155343][   T30] audit: type=1326 audit(1774597962.564:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21522 comm="syz.2.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1232.155383][   T30] audit: type=1326 audit(1774597962.564:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21522 comm="syz.2.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1232.298838][T21525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4274'.
[ 1232.907491][T16213] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1233.105323][T16213] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1233.130595][T16213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1233.187862][T16213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1233.208847][T16213] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1233.267902][T16214] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1233.328197][T16213] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1233.352788][T16213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1233.442910][T16213] usb 4-1: config 0 descriptor??
[ 1233.487543][T16214] usb 3-1: Using ep0 maxpacket: 32
[ 1233.508468][T16214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1233.520018][T16214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1233.540786][T16214] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1233.575589][T16214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1233.625697][T16214] usb 3-1: config 0 descriptor??
[ 1233.846822][T21546] netlink: 'syz.2.4278': attribute type 89 has an invalid length.
[ 1233.949336][T16213] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1234.066372][T21546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1234.088897][T21546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1234.204891][T16214] usbhid 3-1:0.0: can't add hid device: -71
[ 1234.224981][T16214] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1234.284287][T16214] usb 3-1: USB disconnect, device number 117
[ 1235.061061][T16214] usb 4-1: USB disconnect, device number 126
[ 1235.297462][   T29] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[ 1235.362553][T21582] syzkaller0: entered promiscuous mode
[ 1235.552007][   T29] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[ 1235.561380][   T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1235.573464][   T29] usb 5-1: config 0 has no interface number 0
[ 1235.584794][   T29] usb 5-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1235.598749][   T29] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1235.694359][   T29] usb 5-1: config 0 interface 41 has no altsetting 0
[ 1235.720092][   T29] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1235.738231][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.764652][   T29] usb 5-1: Product: syz
[ 1235.780076][   T29] usb 5-1: Manufacturer: syz
[ 1235.806090][   T29] usb 5-1: SerialNumber: syz
[ 1235.846360][   T29] usb 5-1: config 0 descriptor??
[ 1235.873533][   T29] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22
[ 1235.971754][T21605] FAULT_INJECTION: forcing a failure.
[ 1235.971754][T21605] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1235.996821][T21605] CPU: 0 UID: 0 PID: 21605 Comm: syz.0.4288 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1235.996857][T21605] Tainted: [L]=SOFTLOCKUP
[ 1235.996866][T21605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1235.996880][T21605] Call Trace:
[ 1235.996890][T21605]  <TASK>
[ 1235.996901][T21605]  dump_stack_lvl+0xe8/0x150
[ 1235.996941][T21605]  should_fail_ex+0x412/0x560
[ 1235.996980][T21605]  _copy_to_user+0x31/0xb0
[ 1235.997007][T21605]  simple_read_from_buffer+0xe1/0x170
[ 1235.997045][T21605]  proc_fail_nth_read+0x1bb/0x230
[ 1235.997079][T21605]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1235.997115][T21605]  ? rw_verify_area+0x2a6/0x4d0
[ 1235.997138][T21605]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1235.997174][T21605]  vfs_read+0x20c/0xa70
[ 1235.997196][T21605]  ? fdget_pos+0x246/0x320
[ 1235.997220][T21605]  ? __pfx___mutex_lock+0x10/0x10
[ 1235.997252][T21605]  ? __pfx_vfs_read+0x10/0x10
[ 1235.997277][T21605]  ? __fget_files+0x2a/0x420
[ 1235.997313][T21605]  ? __fget_files+0x3a0/0x420
[ 1235.997343][T21605]  ? __fget_files+0x2a/0x420
[ 1235.997382][T21605]  ksys_read+0x150/0x270
[ 1235.997408][T21605]  ? __pfx_ksys_read+0x10/0x10
[ 1235.997443][T21605]  do_syscall_64+0x14d/0xf80
[ 1235.997469][T21605]  ? trace_irq_disable+0x3b/0x150
[ 1235.997489][T21605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1235.997512][T21605]  ? clear_bhb_loop+0x40/0x90
[ 1235.997539][T21605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1235.997561][T21605] RIP: 0033:0x7f7f4855cfce
[ 1235.997582][T21605] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1235.997601][T21605] RSP: 002b:00007f7f4949afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1235.997623][T21605] RAX: ffffffffffffffda RBX: 00007f7f4949b6c0 RCX: 00007f7f4855cfce
[ 1235.997639][T21605] RDX: 000000000000000f RSI: 00007f7f4949b0a0 RDI: 0000000000000004
[ 1235.997652][T21605] RBP: 00007f7f4949b090 R08: 0000000000000000 R09: 0000000000000000
[ 1235.997666][T21605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1235.997679][T21605] R13: 00007f7f48816038 R14: 00007f7f48815fa0 R15: 00007f7f4893fa48
[ 1235.997732][T21605]  </TASK>
[ 1236.640910][T21615] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4284'.
[ 1237.224703][T21621] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1237.295665][T21621] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1237.427810][T21628] syzkaller0: entered promiscuous mode
[ 1237.433351][T21628] syzkaller0: entered allmulticast mode
[ 1237.550410][T21628] TC_ACT_REPEAT abuse ?
[ 1238.075537][T21639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4298'.
[ 1238.117590][   T29] usb 5-1: USB disconnect, device number 31
[ 1238.250505][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4298'.
[ 1238.561949][T21648] binder: BINDER_SET_CONTEXT_MGR already set
[ 1238.568478][T21648] binder: 21645:21648 ioctl 4018620d 200000004a80 returned -16
[ 1238.902331][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.910305][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.212304][T21658] netdevsim netdevsim5 
: renamed from netdevsim0 (while UP)
[ 1239.356572][T21667] x_tables: duplicate underflow at hook 4
[ 1239.364936][T21667] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1239.584810][T21672] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[ 1239.593415][ T5910] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1239.603226][T21672] syzkaller0: entered promiscuous mode
[ 1239.610543][T21672] syzkaller0: entered allmulticast mode
[ 1239.847469][ T5910] usb 4-1: Using ep0 maxpacket: 32
[ 1239.861211][ T5910] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1239.871291][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1239.885680][ T5910] usb 4-1: config 0 descriptor??
[ 1239.913009][ T5910] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1240.166201][T21665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1240.185310][T21665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1240.231823][T21665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1240.265024][T21665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1240.278519][T21680] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1240.329748][T21665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1240.361221][T21665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1240.471049][ T5910] gspca_nw80x: reg_w err -110
[ 1240.481117][ T5910] nw80x 4-1:0.0: probe with driver nw80x failed with error -110
[ 1241.046951][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 1241.046966][   T30] audit: type=1326 audit(1774597971.454:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21700 comm="syz.2.4318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96ad19c799 code=0x0
[ 1242.236199][ T5910] usb 4-1: USB disconnect, device number 127
[ 1242.497895][T13905] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1242.661579][T13905] usb 3-1: Using ep0 maxpacket: 16
[ 1242.687129][T13905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1242.715080][T13905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1242.733147][T13905] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[ 1242.785058][T13905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1242.875236][T13905] usb 3-1: config 0 descriptor??
[ 1243.177449][   T30] audit: type=1326 audit(1774597973.554:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21733 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4df99c799 code=0x50000
[ 1243.265153][   T30] audit: type=1326 audit(1774597973.554:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21733 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4df99c799 code=0x50000
[ 1243.348222][   T30] audit: type=1326 audit(1774597973.554:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21733 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4df99c799 code=0x50000
[ 1243.457564][   T30] audit: type=1326 audit(1774597973.554:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21733 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4df99c799 code=0x50000
[ 1243.563901][   T30] audit: type=1326 audit(1774597973.554:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21733 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4df99c799 code=0x50000
[ 1243.705333][   T30] audit: type=1326 audit(1774597973.554:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21733 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4df99c799 code=0x50000
[ 1243.827475][T13905] razer 0003:1532:011B.002A: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.2-1/input0
[ 1243.829945][   T30] audit: type=1326 audit(1774597973.554:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21733 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4df99c799 code=0x50000
[ 1243.862978][T13905] usb 3-1: USB disconnect, device number 118
[ 1243.969636][   T30] audit: type=1326 audit(1774597973.554:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21733 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4df99c799 code=0x50000
[ 1244.045674][   T30] audit: type=1326 audit(1774597973.554:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21733 comm="syz.3.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4df99c799 code=0x50000
[ 1244.093156][T21746] fido_id[21746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1244.812393][T21760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4337'.
[ 1245.720613][T21771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4341'.
[ 1246.122985][T21783] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4344'.
[ 1246.304046][T21787] batadv0: entered promiscuous mode
[ 1246.327201][T21787] vlan0: entered promiscuous mode
[ 1246.438245][ T5941] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1246.607783][ T5941] usb 5-1: Using ep0 maxpacket: 8
[ 1246.619609][ T5941] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed
[ 1246.629255][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1246.641019][ T5941] usb 5-1: Product: syz
[ 1246.646216][ T5941] usb 5-1: Manufacturer: syz
[ 1246.666443][ T5941] usb 5-1: SerialNumber: syz
[ 1246.701205][ T5941] usb 5-1: config 0 descriptor??
[ 1246.773098][T21795] loop5: detected capacity change from 0 to 7
[ 1246.800006][T21795]  loop5:
[ 1246.807519][T21795] loop5: partition table partially beyond EOD, truncated
[ 1246.863111][T13905] hid-generic 00A0:0006:0003.002B: item fetching failed at offset 14/15
[ 1246.900122][T13905] hid-generic 00A0:0006:0003.002B: probe with driver hid-generic failed with error -22
[ 1246.939233][ T5941] usbserial_generic 5-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[ 1246.963595][ T5941] usbserial_generic 5-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[ 1247.027469][ T5941] usbserial_generic 5-1:0.0: device has no bulk endpoints
[ 1247.076641][ T5941] usb 5-1: USB disconnect, device number 32
[ 1247.557905][T21800] syzkaller0: entered promiscuous mode
[ 1247.563455][T21800] syzkaller0: entered allmulticast mode
[ 1247.903136][T21805] netdevsim netdevsim3: Direct firmware load for /
[ 1247.903136][T21805]  failed with error -2
[ 1247.913854][T21805] netdevsim netdevsim3: Falling back to sysfs fallback for: /
[ 1247.913854][T21805] 
[ 1248.133397][T21809] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4354'.
[ 1248.760852][T21823] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4359'.
[ 1249.485484][T21829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4361'.
[ 1249.787468][T16213] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1250.064800][T16213] usb 4-1: config index 0 descriptor too short (expected 8192, got 18)
[ 1250.087441][T16213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1250.131367][T16213] usb 4-1: config 0 has no interfaces?
[ 1250.172344][T16213] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1250.181808][T16213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1250.197589][T16213] usb 4-1: Product: syz
[ 1250.207701][T16213] usb 4-1: Manufacturer: syz
[ 1250.212361][T16213] usb 4-1: SerialNumber: syz
[ 1250.235398][T16213] usb 4-1: config 0 descriptor??
[ 1250.848153][T21837] syzkaller0: entered promiscuous mode
[ 1250.869169][T21837] syzkaller0: entered allmulticast mode
[ 1252.076324][T21854] trusted_key: syz.5.4371 sent an empty control message without MSG_MORE.
[ 1252.188532][T21854] xt_hashlimit: max too large, truncated to 1048576
[ 1252.317006][T16213] usb 4-1: USB disconnect, device number 2
[ 1252.626210][T21864] netlink: 'syz.2.4374': attribute type 1 has an invalid length.
[ 1253.004606][T21864] bond2: entered promiscuous mode
[ 1253.012484][T21864] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1253.037858][T21872] bond2: (slave bridge3): making interface the new active one
[ 1253.045489][T21872] bridge3: entered promiscuous mode
[ 1253.063409][T21872] bond2: (slave bridge3): Enslaving as an active interface with an up link
[ 1253.180114][T21874] syzkaller0: entered promiscuous mode
[ 1253.194496][T21874] syzkaller0: entered allmulticast mode
[ 1253.677098][T21882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4379'.
[ 1253.771316][T13905] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1254.047463][T13905] usb 4-1: Using ep0 maxpacket: 32
[ 1254.057026][T13905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[ 1254.372171][T13905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[ 1254.415477][T13905] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 1254.438586][T13905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1254.477448][T13905] usb 4-1: Product: syz
[ 1254.487468][T13905] usb 4-1: Manufacturer: syz
[ 1254.549353][T13905] usb 4-1: SerialNumber: syz
[ 1254.573507][T13905] usb 4-1: config 0 descriptor??
[ 1254.677282][T13905] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1254.994181][   T30] kauditd_printk_skb: 57 callbacks suppressed
[ 1254.994200][   T30] audit: type=1326 audit(1774597985.404:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.0.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4859c799 code=0x7ffc0000
[ 1255.089581][   T30] audit: type=1326 audit(1774597985.444:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.0.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4859c799 code=0x7ffc0000
[ 1255.166310][   T30] audit: type=1326 audit(1774597985.444:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.0.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7f4859c799 code=0x7ffc0000
[ 1255.236731][   T30] audit: type=1326 audit(1774597985.444:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.0.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4859c799 code=0x7ffc0000
[ 1255.335540][   T30] audit: type=1326 audit(1774597985.454:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.0.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f7f4859c799 code=0x7ffc0000
[ 1255.453576][   T30] audit: type=1326 audit(1774597985.454:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.0.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4859c799 code=0x7ffc0000
[ 1255.524319][   T30] audit: type=1326 audit(1774597985.454:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.0.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4859c799 code=0x7ffc0000
[ 1255.584930][T21908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4384'.
[ 1255.661441][   T30] audit: type=1326 audit(1774597985.464:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.0.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4859c799 code=0x7ffc0000
[ 1255.727044][ T6208] usb 4-1: Failed to submit usb control message: -110
[ 1255.768755][ T6208] usb 4-1: unable to send the bmi data to the device: -110
[ 1255.791813][   T30] audit: type=1326 audit(1774597985.464:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.0.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4859c799 code=0x7ffc0000
[ 1255.814569][ T6208] usb 4-1: unable to get target info from device
[ 1255.854343][ T6208] usb 4-1: could not get target info (-110)
[ 1255.889559][ T6208] usb 4-1: could not probe fw (-110)
[ 1255.919005][   T30] audit: type=1326 audit(1774597985.464:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21895 comm="syz.0.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f4855cfce code=0x7ffc0000
[ 1256.319794][T13905] usb 4-1: USB disconnect, device number 3
[ 1256.424155][T21916] syzkaller0: entered promiscuous mode
[ 1256.451676][T21916] syzkaller0: entered allmulticast mode
[ 1256.674856][T21921] syzkaller0: entered promiscuous mode
[ 1256.680707][T21921] syzkaller0: entered allmulticast mode
[ 1256.898445][T21929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4390'.
[ 1256.987583][ T5910] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 1257.168499][ T5910] usb 3-1: Using ep0 maxpacket: 32
[ 1257.182301][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1257.193557][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1257.229891][T21933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4394'.
[ 1257.447584][ T5910] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1257.458822][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1257.467660][  T178] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1257.478730][ T5910] usb 3-1: config 0 descriptor??
[ 1257.496765][ T5910] hub 3-1:0.0: USB hub found
[ 1257.699496][ T5910] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1258.106497][ T5910] hid-generic 0003:046D:C31C.002C: unknown main item tag 0x0
[ 1258.150488][ T5910] hid-generic 0003:046D:C31C.002C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0
[ 1258.417841][T13905] usb 3-1: USB disconnect, device number 119
[ 1258.759557][T13905] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 1258.778852][T21954] usb usb8: usbfs: process 21954 (syz.3.4402) did not claim interface 0 before use
[ 1258.871801][T21958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1258.920886][T13905] usb 3-1: Using ep0 maxpacket: 32
[ 1258.929696][T13905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1258.940940][T13905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1258.952372][T13905] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1258.962830][T13905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1258.987547][T13905] usb 3-1: config 0 descriptor??
[ 1259.002679][T13905] hub 3-1:0.0: USB hub found
[ 1259.197225][T13905] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1259.412289][T13905] usbhid 3-1:0.0: can't add hid device: -71
[ 1259.419422][T13905] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1259.489785][T13905] usb 3-1: USB disconnect, device number 120
[ 1261.186207][T21984] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4413'.
[ 1261.200943][T21984] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4413'.
[ 1261.320827][T21991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1261.447663][T16213] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[ 1261.947572][T22001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4418'.
[ 1261.961737][T16213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1261.976659][T16213] usb 4-1: config 0 has no interfaces?
[ 1262.111738][T16213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1262.138277][T16213] usb 4-1: config 0 has no interfaces?
[ 1262.178189][T22001] team0: Port device team_slave_0 removed
[ 1262.321773][T16213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1262.343925][T16213] usb 4-1: config 0 has no interfaces?
[ 1262.607151][T16213] usb 4-1: string descriptor 0 read error: -22
[ 1262.625301][T16213] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1262.658364][T16213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1262.717070][T16213] usb 4-1: config 0 descriptor??
[ 1262.936872][T16214] usb 4-1: USB disconnect, device number 4
[ 1263.695546][T22015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4421'.
[ 1264.385856][T22017] SET target dimension over the limit!
[ 1264.672944][T22043] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4431'.
[ 1265.525095][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 1265.525121][   T30] audit: type=1326 audit(1774597995.934:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22052 comm="syz.4.4436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc02bb9c799 code=0x0
[ 1265.564376][T22056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4435'.
[ 1266.430007][T22079] CIFS: VFS: Malformed UNC in devname
[ 1266.714516][T22085] syzkaller0: entered promiscuous mode
[ 1266.867466][T22085] syzkaller0: entered allmulticast mode
[ 1267.086351][T22101] FAULT_INJECTION: forcing a failure.
[ 1267.086351][T22101] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1267.157259][T22101] CPU: 0 UID: 0 PID: 22101 Comm: syz.5.4450 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1267.157296][T22101] Tainted: [L]=SOFTLOCKUP
[ 1267.157304][T22101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1267.157322][T22101] Call Trace:
[ 1267.157330][T22101]  <TASK>
[ 1267.157339][T22101]  dump_stack_lvl+0xe8/0x150
[ 1267.157375][T22101]  should_fail_ex+0x412/0x560
[ 1267.157411][T22101]  _copy_from_user+0x2d/0xb0
[ 1267.157435][T22101]  input_event_from_user+0xb1/0x290
[ 1267.157463][T22101]  ? __pfx_input_event_from_user+0x10/0x10
[ 1267.157496][T22101]  evdev_write+0x2c7/0x4c0
[ 1267.157524][T22101]  ? __pfx_evdev_write+0x10/0x10
[ 1267.157547][T22101]  ? bpf_lsm_file_permission+0x9/0x20
[ 1267.157574][T22101]  ? security_file_permission+0x75/0x260
[ 1267.157604][T22101]  ? rw_verify_area+0x255/0x4d0
[ 1267.157627][T22101]  ? __pfx_evdev_write+0x10/0x10
[ 1267.157651][T22101]  vfs_write+0x29a/0xb90
[ 1267.157682][T22101]  ? __pfx_vfs_write+0x10/0x10
[ 1267.157708][T22101]  ? __fget_files+0x2a/0x420
[ 1267.157743][T22101]  ? __fget_files+0x2a/0x420
[ 1267.157773][T22101]  ? __fget_files+0x3a0/0x420
[ 1267.157803][T22101]  ? __fget_files+0x2a/0x420
[ 1267.157842][T22101]  ksys_write+0x150/0x270
[ 1267.157869][T22101]  ? __pfx_ksys_write+0x10/0x10
[ 1267.157904][T22101]  do_syscall_64+0x14d/0xf80
[ 1267.157930][T22101]  ? trace_irq_disable+0x3b/0x150
[ 1267.157949][T22101]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.157970][T22101]  ? clear_bhb_loop+0x40/0x90
[ 1267.157997][T22101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.158018][T22101] RIP: 0033:0x7fca2b39c799
[ 1267.158038][T22101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1267.158058][T22101] RSP: 002b:00007fca2c21a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1267.158081][T22101] RAX: ffffffffffffffda RBX: 00007fca2b615fa0 RCX: 00007fca2b39c799
[ 1267.158096][T22101] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003
[ 1267.158110][T22101] RBP: 00007fca2c21a090 R08: 0000000000000000 R09: 0000000000000000
[ 1267.158123][T22101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1267.158135][T22101] R13: 00007fca2b616038 R14: 00007fca2b615fa0 R15: 00007fca2b73fa48
[ 1267.158176][T22101]  </TASK>
[ 1267.753213][T16213] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1267.920541][T16213] usb 4-1: Using ep0 maxpacket: 16
[ 1267.931961][T16213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1267.944873][T16213] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1267.965196][T16213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1267.994409][T16213] usb 4-1: config 0 descriptor??
[ 1268.022776][T16213] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input130
[ 1268.266235][T22113] input: syz0 as /devices/virtual/input/input131
[ 1269.224915][T22130] xt_socket: unknown flags 0xc
[ 1269.363586][T22134] syzkaller0: entered promiscuous mode
[ 1269.395583][T22134] syzkaller0: entered allmulticast mode
[ 1269.637174][T22140] input: syz1 as /devices/virtual/input/input132
[ 1270.596790][ T5178] bcm5974 4-1:0.0: could not read from device
[ 1270.657749][T16213] usb 4-1: USB disconnect, device number 5
[ 1270.668723][ T5178] bcm5974 4-1:0.0: could not read from device
[ 1270.860894][T22173] syzkaller0: entered promiscuous mode
[ 1270.867656][T22173] syzkaller0: entered allmulticast mode
[ 1271.237454][T16213] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1271.450406][T16213] usb 6-1: Using ep0 maxpacket: 8
[ 1271.482258][T16213] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1271.496573][T16213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1271.510562][T16213] usb 6-1: Product: syz
[ 1271.514906][T16213] usb 6-1: Manufacturer: syz
[ 1271.522595][T16213] usb 6-1: SerialNumber: syz
[ 1271.563480][T16213] usb 6-1: config 0 descriptor??
[ 1271.991894][T16213] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1272.232508][T22198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4482'.
[ 1272.246220][T22198] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[ 1272.604407][T22206] dummy0: entered promiscuous mode
[ 1272.617621][T22206] dummy0: entered allmulticast mode
[ 1272.662432][T16213] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1272.680366][T16213] usb 6-1: USB disconnect, device number 11
[ 1273.897448][ T5910] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1273.907421][   T29] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1274.048427][ T5910] usb 4-1: Using ep0 maxpacket: 16
[ 1274.056272][ T5910] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[ 1274.065262][ T5910] usb 4-1: config 0 has no interface number 0
[ 1274.072017][ T5910] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1274.086900][   T29] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1274.100044][ T5910] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1274.111134][   T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3
[ 1274.124080][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1274.132600][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12390, setting to 1024
[ 1274.145444][   T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1274.157686][ T5910] usb 4-1: config 0 descriptor??
[ 1274.188833][   T29] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1274.201883][   T29] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1274.214402][   T29] usb 5-1: Manufacturer: syz
[ 1274.232501][   T29] usb 5-1: config 0 descriptor??
[ 1274.242915][T22235] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1274.260676][   T29] igorplugusb 5-1:0.0: endpoint incorrect
[ 1274.483271][T16213] usb 5-1: USB disconnect, device number 33
[ 1274.525700][T22243] netlink: 'syz.0.4498': attribute type 10 has an invalid length.
[ 1274.563288][T22243] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4498'.
[ 1274.593987][ T5910] mcp2221 0003:04D8:00DD.002D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input2
[ 1275.037623][ T5910] usb 4-1: USB disconnect, device number 6
[ 1276.019934][T22276] syzkaller0: entered promiscuous mode
[ 1276.072864][T22276] syzkaller0: entered allmulticast mode
[ 1276.662159][T22287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1276.690999][T22282] dvmrp1: entered allmulticast mode
[ 1276.854553][T22286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1276.980116][T22287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1277.236785][T22278] dvmrp1: left allmulticast mode
[ 1277.281215][   T29] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1277.320570][T22305] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1277.451276][   T29] usb 3-1: Using ep0 maxpacket: 16
[ 1277.480956][T22305] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1277.489320][   T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1277.500710][   T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1277.577285][   T29] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[ 1277.640894][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1277.686643][   T29] usb 3-1: config 0 descriptor??
[ 1278.177558][   T29] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0
[ 1278.205130][   T29] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0
[ 1278.237453][   T29] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0
[ 1278.244775][   T29] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0
[ 1278.317567][   T29] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0
[ 1278.447489][   T29] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0
[ 1278.479693][   T29] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x3
[ 1278.520367][   T29] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x2
[ 1278.568263][T22322] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4521'.
[ 1278.655330][T22323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4522'.
[ 1278.664521][   T29] zeroplus 0003:0C12:0030.002E: unbalanced collection at end of report description
[ 1278.715313][   T29] zeroplus 0003:0C12:0030.002E: parse failed
[ 1278.728499][T22325] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1278.745111][   T29] zeroplus 0003:0C12:0030.002E: probe with driver zeroplus failed with error -22
[ 1279.108016][   T29] usb 3-1: USB disconnect, device number 121
[ 1279.474917][T22331] syzkaller0: entered promiscuous mode
[ 1279.482423][T22330] IPv6: Can't replace route, no match found
[ 1280.007575][ T5941] usb 3-1: new full-speed USB device number 122 using dummy_hcd
[ 1280.147476][ T5941] usb 3-1: device descriptor read/64, error -71
[ 1280.387477][ T5941] usb 3-1: new full-speed USB device number 123 using dummy_hcd
[ 1280.547631][ T5941] usb 3-1: device descriptor read/64, error -71
[ 1280.606638][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4529'.
[ 1280.615810][T22342] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4529'.
[ 1280.651056][T22342] vlan0: entered allmulticast mode
[ 1280.656366][T22342] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1280.676977][ T5941] usb usb3-port1: attempt power cycle
[ 1281.028310][T22347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4531'.
[ 1281.037592][ T5941] usb 3-1: new full-speed USB device number 124 using dummy_hcd
[ 1281.070874][ T5941] usb 3-1: device descriptor read/8, error -71
[ 1281.424250][ T5941] usb 3-1: new full-speed USB device number 125 using dummy_hcd
[ 1281.448266][ T5941] usb 3-1: device descriptor read/8, error -71
[ 1281.568617][ T5941] usb usb3-port1: unable to enumerate USB device
[ 1281.779297][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4535'.
[ 1281.995571][T22363] syzkaller0: entered promiscuous mode
[ 1282.009479][T22363] syzkaller0: entered allmulticast mode
[ 1282.314840][T22376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4540'.
[ 1283.154484][T22386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4543'.
[ 1284.867509][   T29] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1284.917444][T13905] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1285.027560][   T29] usb 5-1: Using ep0 maxpacket: 16
[ 1285.057181][   T29] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 25959, setting to 1024
[ 1285.127937][T13905] usb 3-1: Using ep0 maxpacket: 8
[ 1285.146546][T13905] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[ 1285.159169][T13905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1285.159192][   T29] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1285.184077][   T29] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1285.197699][   T29] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1285.210264][T13905] usb 3-1: config 0 descriptor??
[ 1285.284519][   T29] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[ 1285.294612][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1285.315996][   T29] usb 5-1: Product: syz
[ 1285.320913][   T29] usb 5-1: Manufacturer: syz
[ 1285.325831][   T29] usb 5-1: SerialNumber: syz
[ 1285.357940][T22397] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1285.455064][T13905] usb 3-1: string descriptor 0 read error: -71
[ 1285.472555][T13905] uvcvideo 3-1:0.0: Found multiple Units with ID 1
[ 1285.494079][T13905] uvcvideo 3-1:0.0: Found UVC 0.00 device <unnamed> (2833:0201)
[ 1285.527747][T13905] uvcvideo 3-1:0.0: No valid video chain found.
[ 1285.544510][T13905] usb 3-1: USB disconnect, device number 126
[ 1285.613123][   T29] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[ 1285.851780][T22397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4545'.
[ 1287.463792][T13905] IPVS: starting estimator thread 0...
[ 1287.609490][T22439] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1288.356607][T22369] syzkaller0: entered promiscuous mode
[ 1288.370497][T22369] syzkaller0: entered allmulticast mode
[ 1289.198118][T22459] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4554'.
[ 1289.490985][   T29] usb 5-1: USB disconnect, device number 34
[ 1289.500472][   T29] usblp0: removed
[ 1289.991050][T22465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4556'.
[ 1290.873282][T22481] syzkaller0: entered promiscuous mode
[ 1290.903434][T22481] syzkaller0: entered allmulticast mode
[ 1291.193015][T22488] bridge0: entered promiscuous mode
[ 1291.237531][T22488] vlan2: entered promiscuous mode
[ 1291.244286][T22486] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4563'.
[ 1291.322381][T22490] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4565'.
[ 1291.516814][T22494] program syz.2.4567 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1291.529968][T22495] program syz.2.4567 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1291.987498][T16213] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1292.159134][T16213] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1292.182693][T16213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1292.212071][T16213] usb 3-1: config 0 descriptor??
[ 1292.263104][T16213] cp210x 3-1:0.0: cp210x converter detected
[ 1292.398043][T22511] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1292.477809][T16213] usb 3-1: cp210x converter now attached to ttyUSB0
[ 1292.791723][T22522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4574'.
[ 1293.046995][T16214] usb 3-1: USB disconnect, device number 127
[ 1293.082823][T16214] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1293.121587][T16214] cp210x 3-1:0.0: device disconnected
[ 1293.666260][   T30] audit: type=1326 audit(1774598024.024:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22529 comm="syz.2.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1293.790879][   T30] audit: type=1326 audit(1774598024.024:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22529 comm="syz.2.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1293.821373][T22539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4577'.
[ 1293.943880][   T30] audit: type=1326 audit(1774598024.024:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22529 comm="syz.2.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1294.383254][   T30] audit: type=1326 audit(1774598024.024:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22529 comm="syz.2.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f96ad19c799 code=0x7ffc0000
[ 1295.840736][T22562] fuse: Unknown parameter 'g‰†rhp_id'
[ 1296.055352][T22574] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4589'.
[ 1298.608676][T22596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4594'.
[ 1299.228581][T22610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4597'.
[ 1299.446785][T22613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4598'.
[ 1299.645636][T22616] kAFS: unable to lookup cell 'ÿ'
[ 1300.281509][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.294133][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.570114][T22624] usb usb1: usbfs: process 22624 (syz.4.4603) did not claim interface 0 before use
[ 1300.732670][T22628] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4604'.
[ 1300.827975][T16214] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1300.851004][T22628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4604'.
[ 1300.992913][T16214] usb 6-1: config 0 has an invalid interface number: 120 but max is 0
[ 1301.006127][T16214] usb 6-1: config 0 has no interface number 0
[ 1301.057469][T16214] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1301.069573][T16214] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1301.103934][T16214] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1301.119639][T16214] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[ 1301.144735][T22638] usb usb8: usbfs: process 22638 (syz.4.4608) did not claim interface 0 before use
[ 1301.155323][T16214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1301.163849][   T29] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1301.178223][T16214] usb 6-1: config 0 descriptor??
[ 1301.184898][T22622] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1301.206014][T16214] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input133
[ 1301.328274][   T29] usb 4-1: Using ep0 maxpacket: 8
[ 1301.335817][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1301.347610][   T29] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1301.357010][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1301.411413][   T29] usb 4-1: config 0 descriptor??
[ 1301.689298][T22642] netlink: 'syz.5.4602': attribute type 21 has an invalid length.
[ 1301.697533][T22642] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4602'.
[ 1301.708463][T22642] netlink: 'syz.5.4602': attribute type 21 has an invalid length.
[ 1301.716584][T22642] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4602'.
[ 1301.848309][   T29] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1302.277265][   T29] usb 4-1: USB disconnect, device number 7
[ 1302.346855][T22654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4611'.
[ 1302.371748][T15641] Bluetooth: hci4: command 0x0406 tx timeout
[ 1302.692430][T22658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4613'.
[ 1304.139301][T13905] usb 6-1: USB disconnect, device number 12
[ 1304.300052][   T29] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 1304.531453][   T29] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1304.551117][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1304.573735][   T29] usb 5-1: Product: syz
[ 1304.591901][   T29] usb 5-1: Manufacturer: syz
[ 1304.596621][   T29] usb 5-1: SerialNumber: syz
[ 1304.637419][   T29] usb 5-1: config 0 descriptor??
[ 1304.657525][   T29] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1304.690743][   T29] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1304.858644][   T29] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1304.885963][   T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1304.908097][   T29] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1304.917637][   T29] usb 5-1: media controller created
[ 1304.943101][T22675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1304.969492][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1304.979114][T22675] FAULT_INJECTION: forcing a failure.
[ 1304.979114][T22675] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1304.994929][T22679] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1305.005909][T22675] CPU: 0 UID: 0 PID: 22675 Comm: syz.3.4619 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1305.005944][T22675] Tainted: [L]=SOFTLOCKUP
[ 1305.005952][T22675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1305.005966][T22675] Call Trace:
[ 1305.005975][T22675]  <TASK>
[ 1305.005984][T22675]  dump_stack_lvl+0xe8/0x150
[ 1305.006021][T22675]  should_fail_ex+0x412/0x560
[ 1305.006057][T22675]  _copy_from_iter+0x1d3/0x1670
[ 1305.006095][T22675]  ? rcu_is_watching+0x15/0xb0
[ 1305.006132][T22675]  ? __pfx__copy_from_iter+0x10/0x10
[ 1305.006173][T22675]  ? netlink_sendmsg+0x650/0xb40
[ 1305.006195][T22675]  ? skb_put+0x11b/0x210
[ 1305.006224][T22675]  netlink_sendmsg+0x6c0/0xb40
[ 1305.006254][T22675]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1305.006278][T22675]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1305.006312][T22675]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1305.006336][T22675]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1305.006357][T22675]  __sys_sendto+0x672/0x710
[ 1305.006383][T22675]  ? __pfx___sys_sendto+0x10/0x10
[ 1305.006444][T22675]  __x64_sys_sendto+0xde/0x100
[ 1305.006471][T22675]  do_syscall_64+0x14d/0xf80
[ 1305.006496][T22675]  ? trace_irq_disable+0x3b/0x150
[ 1305.006515][T22675]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1305.006544][T22675]  ? clear_bhb_loop+0x40/0x90
[ 1305.006570][T22675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1305.006592][T22675] RIP: 0033:0x7fb4df95cfce
[ 1305.006611][T22675] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1305.006630][T22675] RSP: 002b:00007fb4ddbf4e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1305.006652][T22675] RAX: ffffffffffffffda RBX: 00007fb4ddbf66c0 RCX: 00007fb4df95cfce
[ 1305.006669][T22675] RDX: 0000000000000028 RSI: 00007fb4ddbf4fe0 RDI: 0000000000000007
[ 1305.006682][T22675] RBP: 0000000000000000 R08: 00007fb4ddbf4ed4 R09: 000000000000000c
[ 1305.006696][T22675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[ 1305.006709][T22675] R13: 00007fb4ddbf4f28 R14: 00007fb4ddbf4fe0 R15: 0000000000000000
[ 1305.006741][T22675]  </TASK>
[ 1305.296897][T22683] netlink: 'syz.5.4620': attribute type 6 has an invalid length.
[ 1305.313910][T22683] QAT: failed to copy from user cfg_data.
[ 1305.468563][T22683] IPv6: sit1: Disabled Multicast RS
[ 1305.533521][   T29] DVB: Unable to find symbol dib7000p_attach()
[ 1305.541784][   T29] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1305.681207][   T29] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1305.694334][   T29] Registered IR keymap rc-empty
[ 1305.701555][   T29] dvb-usb: could not initialize remote control.
[ 1305.716755][   T29] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1305.934225][T22680] i2c i2c-1: Invalid block size returned: 58
[ 1306.286020][T13905] usb 5-1: USB disconnect, device number 35
[ 1306.548491][T13905] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1307.413448][T22708] syzkaller0: entered promiscuous mode
[ 1307.431139][T22708] syzkaller0: entered allmulticast mode
[ 1307.458748][T22708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1307.927911][T22708] tipc: Resetting bearer <eth:syzkaller0>
[ 1308.157764][T22718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1308.185342][T22708] tipc: Disabling bearer <eth:syzkaller0>
[ 1308.244639][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4632'.
[ 1308.380197][T22728] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4631'.
[ 1308.525472][T22731] ptrace attach of "./syz-executor exec"[16959] was attempted by "./syz-executor exec"[22731]
[ 1308.817843][T16213] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1308.957495][ T5877] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 1308.965366][   T29] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1308.967592][T16213] usb 3-1: Using ep0 maxpacket: 8
[ 1308.981267][T16213] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1308.991919][T16213] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1309.023839][T16213] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1309.087407][T16213] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1309.101435][T16213] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1309.110724][T16213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1309.127807][ T5877] usb 5-1: Using ep0 maxpacket: 32
[ 1309.138205][ T5877] usb 5-1: config 0 has no interfaces?
[ 1309.143984][ T5877] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1309.160061][   T29] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1309.173472][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1309.185666][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1309.194410][   T29] usb 4-1: Product: syz
[ 1309.201844][ T5877] usb 5-1: config 0 descriptor??
[ 1309.207055][   T29] usb 4-1: Manufacturer: syz
[ 1309.227492][   T29] usb 4-1: SerialNumber: syz
[ 1309.244930][   T29] usb 4-1: config 0 descriptor??
[ 1309.260432][   T29] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1309.270541][   T29] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1309.326880][T16213] usb 3-1: GET_CAPABILITIES returned 0
[ 1309.333690][T16213] usbtmc 3-1:16.0: can't read capabilities
[ 1309.453677][T22735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1309.477915][   T29] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1309.485860][T22735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1309.509923][   T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1309.529286][T16213] usb 3-1: USB disconnect, device number 2
[ 1309.557116][   T29] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1309.586225][   T29] usb 4-1: media controller created
[ 1309.631954][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1309.657435][    T9] usb 5-1: USB disconnect, device number 36
[ 1309.737684][   T29] DVB: Unable to find symbol dib7000p_attach()
[ 1309.743919][   T29] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1309.781653][T22746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4640'.
[ 1309.828418][   T29] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1309.834719][   T29] Registered IR keymap rc-empty
[ 1309.844853][   T29] dvb-usb: could not initialize remote control.
[ 1309.853809][   T29] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1310.097459][   T29] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[ 1310.118495][ T5877] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 1310.228257][T22750] i2c i2c-1: Invalid block size returned: 58
[ 1310.269176][   T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1310.280388][   T29] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1310.289523][   T29] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[ 1310.299012][ T5877] usb 5-1: Using ep0 maxpacket: 16
[ 1310.306507][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1310.315910][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1310.329633][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1310.341753][   T29] usb 6-1: config 0 descriptor??
[ 1310.354877][ T5877] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1310.373092][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1310.388783][ T5877] usb 5-1: Manufacturer: à ’
[ 1310.393677][ T5877] usb 5-1: SerialNumber: syz
[ 1310.401269][ T5877] usb 5-1: config 0 descriptor??
[ 1310.417110][ T5877] em28xx 5-1:0.0: New device à ’  @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1310.426532][ T5877] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[ 1310.436948][    T9] usb 4-1: USB disconnect, device number 8
[ 1310.478888][    T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1310.555643][T13905] usb 6-1: USB disconnect, device number 13
[ 1310.679219][ T5877] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1310.692510][ T5877] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[ 1310.702652][ T5877] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[ 1310.709825][ T5877] em28xx 5-1:0.0: No AC97 audio processor
[ 1310.736117][ T5877] usb 5-1: USB disconnect, device number 37
[ 1310.743808][ T5877] em28xx 5-1:0.0: Disconnecting em28xx
[ 1310.761645][ T5877] em28xx 5-1:0.0: Freeing device
[ 1311.097688][T13905] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1311.234690][T22769] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4648'.
[ 1311.280345][T13905] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[ 1311.298239][T13905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1311.326044][T13905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1311.341929][T13905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1311.364398][T13905] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 1311.376746][T13905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1311.385463][T13905] usb 3-1: Product: syz
[ 1311.391238][T13905] usb 3-1: Manufacturer: syz
[ 1311.396013][T13905] usb 3-1: SerialNumber: syz
[ 1311.407980][T13905] usb 3-1: config 0 descriptor??
[ 1311.419944][T13905] iguanair 3-1:0.0: failed to get version
[ 1311.426301][T13905] iguanair 3-1:0.0: probe with driver iguanair failed with error -90
[ 1311.541488][T22777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4650'.
[ 1311.928582][T13905] usb 3-1: USB disconnect, device number 3
[ 1312.480567][ T5877] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1312.500115][T22794] netlink: 'syz.2.4657': attribute type 1 has an invalid length.
[ 1312.508791][   T29] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[ 1312.535395][T22794] bond3: entered promiscuous mode
[ 1312.557983][T22794] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1312.591731][T22794] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1312.600045][T22794] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[ 1312.611730][T22794] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[ 1312.635873][T22794] bond3: (slave ip6gre1): making interface the new active one
[ 1312.659459][T22794] ip6gre1: entered promiscuous mode
[ 1312.671052][T22794] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[ 1312.683611][   T29] usb 6-1: config 7 has an invalid interface number: 31 but max is 0
[ 1312.698266][ T5877] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1312.707915][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1312.716014][   T29] usb 6-1: config 7 has no interface number 0
[ 1312.739261][   T29] usb 6-1: config 7 interface 31 has no altsetting 0
[ 1312.746217][ T5877] usb 4-1: Product: syz
[ 1312.755631][ T5877] usb 4-1: Manufacturer: syz
[ 1312.769584][   T29] usb 6-1: string descriptor 0 read error: -22
[ 1312.779315][ T5877] usb 4-1: SerialNumber: syz
[ 1312.784313][   T29] usb 6-1: New USB device found, idVendor=055f, idProduct=d004, bcdDevice=2d.11
[ 1312.804899][ T5877] usb 4-1: config 0 descriptor??
[ 1312.817911][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1312.832562][ T5877] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1312.844013][ T5877] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1312.885440][   T29] gspca_main: gspca_zc3xx-2.14.0 probing 055f:d004
[ 1313.037238][ T5877] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1313.067533][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1313.092810][ T5877] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1313.116358][ T5877] usb 4-1: media controller created
[ 1313.128978][T22811] FAULT_INJECTION: forcing a failure.
[ 1313.128978][T22811] name failslab, interval 1, probability 0, space 0, times 0
[ 1313.154456][   T29] gspca_zc3xx: reg_w_i err -71
[ 1313.172231][T22811] CPU: 1 UID: 0 PID: 22811 Comm: syz.2.4662 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1313.172268][T22811] Tainted: [L]=SOFTLOCKUP
[ 1313.172276][T22811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1313.172290][T22811] Call Trace:
[ 1313.172300][T22811]  <TASK>
[ 1313.172309][T22811]  dump_stack_lvl+0xe8/0x150
[ 1313.172346][T22811]  should_fail_ex+0x412/0x560
[ 1313.172384][T22811]  should_failslab+0xa8/0x100
[ 1313.172416][T22811]  __kmalloc_noprof+0xe8/0x760
[ 1313.172441][T22811]  ? kernfs_fop_write_iter+0x158/0x540
[ 1313.172473][T22811]  kernfs_fop_write_iter+0x158/0x540
[ 1313.172505][T22811]  iter_file_splice_write+0x9a1/0x10f0
[ 1313.172565][T22811]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1313.172617][T22811]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1313.172651][T22811]  direct_splice_actor+0x101/0x160
[ 1313.172688][T22811]  splice_direct_to_actor+0x53a/0xc70
[ 1313.172731][T22811]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1313.172772][T22811]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1313.172805][T22811]  ? get_pid_task+0x20/0x1f0
[ 1313.172835][T22811]  do_splice_direct+0x195/0x290
[ 1313.172879][T22811]  ? __pfx_do_splice_direct+0x10/0x10
[ 1313.172912][T22811]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1313.172941][T22811]  ? rw_verify_area+0x255/0x4d0
[ 1313.172968][T22811]  do_sendfile+0x535/0x7d0
[ 1313.173006][T22811]  ? __pfx_do_sendfile+0x10/0x10
[ 1313.173037][T22811]  ? __fget_files+0x3a0/0x420
[ 1313.173080][T22811]  __se_sys_sendfile64+0x144/0x1a0
[ 1313.173111][T22811]  ? __pfx___se_sys_sendfile64+0x10/0x10
[ 1313.173156][T22811]  do_syscall_64+0x14d/0xf80
[ 1313.173183][T22811]  ? trace_irq_disable+0x3b/0x150
[ 1313.173202][T22811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1313.173224][T22811]  ? clear_bhb_loop+0x40/0x90
[ 1313.173251][T22811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1313.173273][T22811] RIP: 0033:0x7f96ad19c799
[ 1313.173293][T22811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1313.173312][T22811] RSP: 002b:00007f96ae12e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1313.173416][T22811] RAX: ffffffffffffffda RBX: 00007f96ad415fa0 RCX: 00007f96ad19c799
[ 1313.173433][T22811] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 1313.173445][T22811] RBP: 00007f96ae12e090 R08: 0000000000000000 R09: 0000000000000000
[ 1313.173459][T22811] R10: 00000000001000a3 R11: 0000000000000246 R12: 0000000000000002
[ 1313.173472][T22811] R13: 00007f96ad416038 R14: 00007f96ad415fa0 R15: 00007f96ad53fa48
[ 1313.173506][T22811]  </TASK>
[ 1313.442362][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1313.666140][ T5877] DVB: Unable to find symbol dib7000p_attach()
[ 1313.675026][ T5877] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1313.810134][ T5877] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1313.820397][ T5877] Registered IR keymap rc-empty
[ 1313.825673][ T5877] dvb-usb: could not initialize remote control.
[ 1313.836593][ T5877] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1314.000893][   T29] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1314.021354][   T29] gspca_zc3xx 6-1:7.31: probe with driver gspca_zc3xx failed with error -71
[ 1314.041015][   T29] usb 6-1: USB disconnect, device number 14
[ 1314.167268][T22789] i2c i2c-1: Invalid block size returned: 58
[ 1314.347421][   T29] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[ 1314.376299][ T5941] usb 4-1: USB disconnect, device number 9
[ 1314.413296][ T5941] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1314.479087][   T29] usb 6-1: device descriptor read/64, error -71
[ 1314.620699][T22846] FAULT_INJECTION: forcing a failure.
[ 1314.620699][T22846] name failslab, interval 1, probability 0, space 0, times 0
[ 1314.633677][T22846] CPU: 0 UID: 0 PID: 22846 Comm: syz.2.4674 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1314.633711][T22846] Tainted: [L]=SOFTLOCKUP
[ 1314.633719][T22846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1314.633732][T22846] Call Trace:
[ 1314.633742][T22846]  <TASK>
[ 1314.633752][T22846]  dump_stack_lvl+0xe8/0x150
[ 1314.633788][T22846]  should_fail_ex+0x412/0x560
[ 1314.633825][T22846]  should_failslab+0xa8/0x100
[ 1314.633856][T22846]  __kmalloc_noprof+0xe8/0x760
[ 1314.633881][T22846]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1314.633909][T22846]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1314.633944][T22846]  tomoyo_check_open_permission+0x229/0x470
[ 1314.633974][T22846]  ? tomoyo_check_open_permission+0x1d3/0x470
[ 1314.634002][T22846]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1314.634029][T22846]  ? vfs_write+0x9bc/0xb90
[ 1314.634061][T22846]  ? __pfx_vfs_write+0x10/0x10
[ 1314.634106][T22846]  ? ksys_write+0x1fc/0x270
[ 1314.634129][T22846]  ? tomoyo_file_fcntl+0x17c/0x210
[ 1314.634230][T22846]  security_file_fcntl+0x97/0x2a0
[ 1314.634270][T22846]  __se_sys_fcntl+0x8b/0x150
[ 1314.634295][T22846]  do_syscall_64+0x14d/0xf80
[ 1314.634322][T22846]  ? trace_irq_disable+0x3b/0x150
[ 1314.634340][T22846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1314.634362][T22846]  ? clear_bhb_loop+0x40/0x90
[ 1314.634388][T22846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1314.634408][T22846] RIP: 0033:0x7f96ad19c799
[ 1314.634429][T22846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1314.634447][T22846] RSP: 002b:00007f96ae12e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[ 1314.634469][T22846] RAX: ffffffffffffffda RBX: 00007f96ad415fa0 RCX: 00007f96ad19c799
[ 1314.634485][T22846] RDX: 0000000000102800 RSI: 0000000000000004 RDI: 0000000000000004
[ 1314.634498][T22846] RBP: 00007f96ae12e090 R08: 0000000000000000 R09: 0000000000000000
[ 1314.634512][T22846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1314.634524][T22846] R13: 00007f96ad416038 R14: 00007f96ad415fa0 R15: 00007f96ad53fa48
[ 1314.634557][T22846]  </TASK>
[ 1314.634568][T22846] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1314.777507][   T29] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[ 1314.999125][   T29] usb 6-1: device descriptor read/64, error -71
[ 1315.107710][   T29] usb usb6-port1: attempt power cycle
[ 1315.413093][T22861] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4681'.
[ 1315.447537][   T29] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[ 1315.468822][   T29] usb 6-1: device descriptor read/8, error -71
[ 1315.657566][T13905] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[ 1315.709823][   T29] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[ 1315.748593][   T29] usb 6-1: device descriptor read/8, error -71
[ 1315.870736][T13905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1315.892879][T13905] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1315.985271][   T29] usb usb6-port1: unable to enumerate USB device
[ 1316.000947][T13905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1316.028248][T13905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1316.052195][T13905] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1316.090570][T13905] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1316.110497][T13905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1316.134459][T13905] usb 4-1: Product: syz
[ 1316.146807][T13905] usb 4-1: Manufacturer: syz
[ 1316.160633][T13905] usb 4-1: SerialNumber: syz
[ 1316.177690][T13905] usb 4-1: config 0 descriptor??
[ 1316.437876][T13905] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1316.444767][T13905] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1316.509860][T13905] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71
[ 1316.538075][T13905] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[ 1316.558073][T13905] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[ 1316.621742][T13905] usb 4-1: USB disconnect, device number 10
[ 1317.180345][T13905] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1317.193290][   T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1317.443039][   T29] usb 3-1: Using ep0 maxpacket: 32
[ 1317.461789][   T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1317.495635][   T29] usb 3-1: config 0 has no interfaces?
[ 1317.501935][   T29] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1317.663539][T13905] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1317.673314][T13905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1317.681491][T13905] usb 4-1: Product: syz
[ 1317.686182][T13905] usb 4-1: Manufacturer: syz
[ 1317.691068][T13905] usb 4-1: SerialNumber: syz
[ 1317.705142][T13905] usb 4-1: config 0 descriptor??
[ 1317.711059][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1317.720518][T13905] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1317.726656][T13905] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1317.738318][   T29] usb 3-1: config 0 descriptor??
[ 1317.906637][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4691'.
[ 1317.926791][T13905] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1317.938650][T13905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1317.959898][T13905] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1317.995318][T13905] usb 4-1: media controller created
[ 1318.050145][T13905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1318.147539][T13905] DVB: Unable to find symbol dib7000p_attach()
[ 1318.154509][T13905] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1318.267459][T13905] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1318.274298][T13905] Registered IR keymap rc-empty
[ 1318.283658][T13905] dvb-usb: could not initialize remote control.
[ 1318.290506][T13905] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1318.669055][T22895] i2c i2c-1: Invalid block size returned: 58
[ 1318.959524][T16213] usb 4-1: USB disconnect, device number 11
[ 1319.158768][T16213] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1319.317017][   T29] usb 3-1: string descriptor 0 read error: -71
[ 1319.355510][   T29] usb 3-1: USB disconnect, device number 4
[ 1319.617934][T16214] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1319.789207][T16214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1319.819903][T16214] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1319.857522][T16214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 1216, setting to 64
[ 1319.915143][T16214] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 1319.927547][T16214] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 1319.946142][T16214] usb 6-1: Manufacturer: syz
[ 1319.972069][T16214] usb 6-1: config 0 descriptor??
[ 1319.991362][T16214] smsusb:smsusb_probe: board id=9, interface number 0
[ 1320.057207][T16214] smsusb:siano_media_device_register: media controller created
[ 1320.099321][T16214] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
[ 1320.127537][T16214] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
[ 1320.151624][T16214] ------------[ cut here ]------------
[ 1320.157172][T16214] !PageLargeKmalloc(page)
[ 1320.157204][T16214] WARNING: mm/slub.c:6393 at free_large_kmalloc+0xa3/0x140, CPU#1: kworker/1:6/16214
[ 1320.172962][T16214] Modules linked in:
[ 1320.179066][T16214] CPU: 1 UID: 0 PID: 16214 Comm: kworker/1:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1320.191296][T16214] Tainted: [L]=SOFTLOCKUP
[ 1320.195663][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1320.206459][T16214] Workqueue: usb_hub_wq hub_event
[ 1320.213165][T16214] RIP: 0010:free_large_kmalloc+0xa3/0x140
[ 1320.218127][T16213] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1320.220930][T16214] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 1e c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 d2 3f f1 8d 5b 41 5e 5d e9 a7 c5 03 ff
[ 1320.247571][T16214] RSP: 0018:ffffc90005486b20 EFLAGS: 00010206
[ 1320.253722][T16214] RAX: 00000000ff000000 RBX: ffffea0002799880 RCX: 0000000000100001
[ 1320.263327][T16214] RDX: ffffc90019efa000 RSI: ffff88809e662000 RDI: ffffea0002799880
[ 1320.272281][T16214] RBP: 0000000000000000 R08: ffff88802afc3203 R09: 1ffff110055f8640
[ 1320.281978][T16214] R10: dffffc0000000000 R11: ffffed10055f8641 R12: 1ffff11003fdaa82
[ 1320.290784][T16214] R13: 0000000000000000 R14: ffff88802afc3260 R15: dffffc0000000000
[ 1320.299701][T16214] FS:  0000000000000000(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000
[ 1320.309584][T16214] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1320.317151][T16214] CR2: 00007f96ad05bf28 CR3: 00000000773c2000 CR4: 00000000003526f0
[ 1320.325986][T16214] Call Trace:
[ 1320.330234][T16214]  <TASK>
[ 1320.333225][T16214]  usb_free_urb+0xd0/0x120
[ 1320.338568][T16214]  smsusb_term_device+0x1d7/0x3e0
[ 1320.343738][T16214]  smsusb_probe+0x1aba/0x2280
[ 1320.349267][T16214]  ? __pfx_smsusb_probe+0x10/0x10
[ 1320.354438][T16214]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1320.360513][T16214]  ? __pfx_smsusb_sendrequest+0x10/0x10
[ 1320.366136][T16214]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1320.372797][T16214]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1320.379519][T16214]  ? __pm_runtime_set_status+0x9d4/0xcd0
[ 1320.385321][T16214]  usb_probe_interface+0x668/0xc90
[ 1320.391349][T16214]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1320.397064][T16214]  really_probe+0x267/0xaf0
[ 1320.402531][T16214]  __driver_probe_device+0x18c/0x320
[ 1320.408669][T16214]  driver_probe_device+0x4f/0x240
[ 1320.413773][T16214]  __device_attach_driver+0x279/0x430
[ 1320.419530][T16214]  bus_for_each_drv+0x258/0x2f0
[ 1320.424453][T16214]  ? __pfx___device_attach_driver+0x10/0x10
[ 1320.430488][T16214]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1320.435964][T16214]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1320.441306][T16214]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1320.447182][T16214]  __device_attach+0x2c5/0x450
[ 1320.452168][T16214]  ? __pfx___device_attach+0x10/0x10
[ 1320.457612][T16214]  ? _raw_spin_unlock+0x28/0x50
[ 1320.462521][T16214]  device_initial_probe+0xa1/0xd0
[ 1320.467705][T16214]  bus_probe_device+0x12a/0x220
[ 1320.472706][T16214]  ? device_add+0x726/0xb70
[ 1320.477454][T16214]  device_add+0x7b6/0xb70
[ 1320.481853][T16214]  usb_set_configuration+0x1a87/0x2110
[ 1320.489538][T16214]  usb_generic_driver_probe+0x8d/0x150
[ 1320.495154][T16214]  usb_probe_device+0x1c4/0x3b0
[ 1320.500152][T16214]  ? __pfx_usb_probe_device+0x10/0x10
[ 1320.505585][T16214]  really_probe+0x267/0xaf0
[ 1320.510300][T16214]  __driver_probe_device+0x18c/0x320
[ 1320.515656][T16214]  driver_probe_device+0x4f/0x240
[ 1320.520871][T16214]  __device_attach_driver+0x279/0x430
[ 1320.526312][T16214]  bus_for_each_drv+0x258/0x2f0
[ 1320.531303][T16214]  ? __pfx___device_attach_driver+0x10/0x10
[ 1320.537276][T16214]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1320.542754][T16214]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1320.547932][T16213] usb 4-1: device descriptor read/64, error -71
[ 1320.548189][T16214]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1320.560460][T16214]  __device_attach+0x2c5/0x450
[ 1320.565418][T16214]  ? __pfx___device_attach+0x10/0x10
[ 1320.570950][T16214]  ? _raw_spin_unlock+0x28/0x50
[ 1320.575905][T16214]  device_initial_probe+0xa1/0xd0
[ 1320.581081][T16214]  bus_probe_device+0x12a/0x220
[ 1320.585991][T16214]  ? device_add+0x726/0xb70
[ 1320.590653][T16214]  device_add+0x7b6/0xb70
[ 1320.595057][T16214]  usb_new_device+0xa08/0x16f0
[ 1320.600000][T16214]  ? __pfx_usb_new_device+0x10/0x10
[ 1320.605270][T16214]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1320.610613][T16214]  hub_event+0x2a1c/0x4f30
[ 1320.615118][T16214]  ? __lock_acquire+0x6b5/0x2cf0
[ 1320.620266][T16214]  ? __pfx_hub_event+0x10/0x10
[ 1320.625120][T16214]  ? process_scheduled_works+0xa8d/0x18c0
[ 1320.630970][T16214]  ? process_scheduled_works+0xa8d/0x18c0
[ 1320.636755][T16214]  process_scheduled_works+0xb6e/0x18c0
[ 1320.642467][T16214]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1320.648531][T16214]  ? assign_work+0x3d5/0x5e0
[ 1320.653158][T16214]  worker_thread+0xa53/0xfc0
[ 1320.657872][T16214]  kthread+0x388/0x470
[ 1320.662020][T16214]  ? __pfx_worker_thread+0x10/0x10
[ 1320.667189][T16214]  ? __pfx_kthread+0x10/0x10
[ 1320.671927][T16214]  ret_from_fork+0x51e/0xb90
[ 1320.676646][T16214]  ? __pfx_ret_from_fork+0x10/0x10
[ 1320.681875][T16214]  ? __switch_to+0xc7d/0x1450
[ 1320.686616][T16214]  ? __pfx_kthread+0x10/0x10
[ 1320.691277][T16214]  ret_from_fork_asm+0x1a/0x30
[ 1320.696092][T16214]  </TASK>
[ 1320.699187][T16214] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1320.706483][T16214] CPU: 1 UID: 0 PID: 16214 Comm: kworker/1:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1320.717522][T16214] Tainted: [L]=SOFTLOCKUP
[ 1320.721854][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1320.731925][T16214] Workqueue: usb_hub_wq hub_event
[ 1320.736971][T16214] Call Trace:
[ 1320.740261][T16214]  <TASK>
[ 1320.743206][T16214]  vpanic+0x56c/0xa60
[ 1320.747246][T16214]  ? __pfx__printk+0x10/0x10
[ 1320.751856][T16214]  ? __pfx_vpanic+0x10/0x10
[ 1320.756372][T16214]  ? is_bpf_text_address+0x292/0x2b0
[ 1320.761679][T16214]  ? is_bpf_text_address+0x26/0x2b0
[ 1320.766937][T16214]  panic+0xc5/0xd0
[ 1320.770713][T16214]  ? __pfx_panic+0x10/0x10
[ 1320.775207][T16214]  ? ret_from_fork_asm+0x1a/0x30
[ 1320.780213][T16214]  __warn+0x315/0x4f0
[ 1320.784251][T16214]  ? free_large_kmalloc+0xa3/0x140
[ 1320.789497][T16214]  ? free_large_kmalloc+0xa3/0x140
[ 1320.794648][T16214]  __report_bug+0x29a/0x540
[ 1320.799325][T16214]  ? device_initial_probe+0xa1/0xd0
[ 1320.804536][T16214]  ? bus_probe_device+0x12a/0x220
[ 1320.809572][T16214]  ? device_add+0x7b6/0xb70
[ 1320.814093][T16214]  ? free_large_kmalloc+0xa3/0x140
[ 1320.819216][T16214]  ? __pfx___report_bug+0x10/0x10
[ 1320.824252][T16214]  ? usb_new_device+0xa08/0x16f0
[ 1320.829204][T16214]  ? hub_event+0x2a1c/0x4f30
[ 1320.833802][T16214]  ? process_scheduled_works+0xb6e/0x18c0
[ 1320.839541][T16214]  ? smscore_unregister_device+0x651/0x780
[ 1320.845449][T16214]  ? free_large_kmalloc+0xa3/0x140
[ 1320.850585][T16214]  report_bug+0x16a/0x220
[ 1320.854934][T16214]  ? free_large_kmalloc+0xa3/0x140
[ 1320.860141][T16214]  ? free_large_kmalloc+0xa5/0x140
[ 1320.865329][T16214]  handle_bug+0x9c/0x200
[ 1320.869708][T16214]  exc_invalid_op+0x1a/0x50
[ 1320.874350][T16214]  asm_exc_invalid_op+0x1a/0x20
[ 1320.879340][T16214] RIP: 0010:free_large_kmalloc+0xa3/0x140
[ 1320.885104][T16214] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 1e c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 d2 3f f1 8d 5b 41 5e 5d e9 a7 c5 03 ff
[ 1320.904845][T16214] RSP: 0018:ffffc90005486b20 EFLAGS: 00010206
[ 1320.911054][T16214] RAX: 00000000ff000000 RBX: ffffea0002799880 RCX: 0000000000100001
[ 1320.919060][T16214] RDX: ffffc90019efa000 RSI: ffff88809e662000 RDI: ffffea0002799880
[ 1320.927060][T16214] RBP: 0000000000000000 R08: ffff88802afc3203 R09: 1ffff110055f8640
[ 1320.935062][T16214] R10: dffffc0000000000 R11: ffffed10055f8641 R12: 1ffff11003fdaa82
[ 1320.943077][T16214] R13: 0000000000000000 R14: ffff88802afc3260 R15: dffffc0000000000
[ 1320.951115][T16214]  usb_free_urb+0xd0/0x120
[ 1320.955658][T16214]  smsusb_term_device+0x1d7/0x3e0
[ 1320.960813][T16214]  smsusb_probe+0x1aba/0x2280
[ 1320.965549][T16214]  ? __pfx_smsusb_probe+0x10/0x10
[ 1320.970668][T16214]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1320.975775][T16214]  ? __pfx_smsusb_sendrequest+0x10/0x10
[ 1320.981387][T16214]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1320.987509][T16214]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1320.993375][T16214]  ? __pm_runtime_set_status+0x9d4/0xcd0
[ 1320.999082][T16214]  usb_probe_interface+0x668/0xc90
[ 1321.004282][T16214]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1321.010011][T16214]  really_probe+0x267/0xaf0
[ 1321.014574][T16214]  __driver_probe_device+0x18c/0x320
[ 1321.019998][T16214]  driver_probe_device+0x4f/0x240
[ 1321.025082][T16214]  __device_attach_driver+0x279/0x430
[ 1321.030605][T16214]  bus_for_each_drv+0x258/0x2f0
[ 1321.035505][T16214]  ? __pfx___device_attach_driver+0x10/0x10
[ 1321.041525][T16214]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1321.047303][T16214]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1321.052625][T16214]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1321.058564][T16214]  __device_attach+0x2c5/0x450
[ 1321.063373][T16214]  ? __pfx___device_attach+0x10/0x10
[ 1321.068704][T16214]  ? _raw_spin_unlock+0x28/0x50
[ 1321.073595][T16214]  device_initial_probe+0xa1/0xd0
[ 1321.078688][T16214]  bus_probe_device+0x12a/0x220
[ 1321.083876][T16214]  ? device_add+0x726/0xb70
[ 1321.088440][T16214]  device_add+0x7b6/0xb70
[ 1321.092811][T16214]  usb_set_configuration+0x1a87/0x2110
[ 1321.098370][T16214]  usb_generic_driver_probe+0x8d/0x150
[ 1321.103882][T16214]  usb_probe_device+0x1c4/0x3b0
[ 1321.108774][T16214]  ? __pfx_usb_probe_device+0x10/0x10
[ 1321.114194][T16214]  really_probe+0x267/0xaf0
[ 1321.118776][T16214]  __driver_probe_device+0x18c/0x320
[ 1321.124112][T16214]  driver_probe_device+0x4f/0x240
[ 1321.129187][T16214]  __device_attach_driver+0x279/0x430
[ 1321.134620][T16214]  bus_for_each_drv+0x258/0x2f0
[ 1321.139530][T16214]  ? __pfx___device_attach_driver+0x10/0x10
[ 1321.145463][T16214]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1321.150980][T16214]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1321.156213][T16214]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1321.162086][T16214]  __device_attach+0x2c5/0x450
[ 1321.166896][T16214]  ? __pfx___device_attach+0x10/0x10
[ 1321.172231][T16214]  ? _raw_spin_unlock+0x28/0x50
[ 1321.177112][T16214]  device_initial_probe+0xa1/0xd0
[ 1321.182199][T16214]  bus_probe_device+0x12a/0x220
[ 1321.187086][T16214]  ? device_add+0x726/0xb70
[ 1321.191670][T16214]  device_add+0x7b6/0xb70
[ 1321.196041][T16214]  usb_new_device+0xa08/0x16f0
[ 1321.200866][T16214]  ? __pfx_usb_new_device+0x10/0x10
[ 1321.206117][T16214]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1321.211351][T16214]  hub_event+0x2a1c/0x4f30
[ 1321.216002][T16214]  ? __lock_acquire+0x6b5/0x2cf0
[ 1321.221048][T16214]  ? __pfx_hub_event+0x10/0x10
[ 1321.225859][T16214]  ? process_scheduled_works+0xa8d/0x18c0
[ 1321.231640][T16214]  ? process_scheduled_works+0xa8d/0x18c0
[ 1321.237451][T16214]  process_scheduled_works+0xb6e/0x18c0
[ 1321.243106][T16214]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1321.249153][T16214]  ? assign_work+0x3d5/0x5e0
[ 1321.253801][T16214]  worker_thread+0xa53/0xfc0
[ 1321.258469][T16214]  kthread+0x388/0x470
[ 1321.262600][T16214]  ? __pfx_worker_thread+0x10/0x10
[ 1321.267859][T16214]  ? __pfx_kthread+0x10/0x10
[ 1321.272533][T16214]  ret_from_fork+0x51e/0xb90
[ 1321.277266][T16214]  ? __pfx_ret_from_fork+0x10/0x10
[ 1321.282437][T16214]  ? __switch_to+0xc7d/0x1450
[ 1321.287148][T16214]  ? __pfx_kthread+0x10/0x10
[ 1321.291886][T16214]  ret_from_fork_asm+0x1a/0x30
[ 1321.296714][T16214]  </TASK>
[ 1321.300366][T16214] Kernel Offset: disabled
[ 1321.304709][T16214] Rebooting in 86400 seconds..