last executing test programs:

12m4.446146235s ago: executing program 3 (id=494):
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
clock_adjtime(0x4, &(0x7f00000002c0)={0x6, 0x3f8, 0x4, 0x22, 0xa, 0x2, 0x1, 0x1, 0x0, 0xa30, 0x7f, 0xaa5, 0x0, 0x2, 0x0, 0x4, 0x5, 0x0, 0x7ff, 0x9, 0x7fffffffffffffff, 0x2, 0xfffffffffffffffd, 0x8, 0x6, 0x10001})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r4, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)

12m2.967910555s ago: executing program 3 (id=497):
socket(0x2b, 0x1, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000ff020000000000000000000000000001fffd00004e2200000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f000000000000010004030000000044000500fe880000000000000000000000000101000000003c0000000a00000000000000000000000000000000000001060000000101000005000000000000000000000021f2c7e19c09820c7222c2febc2d9b64b81913fa8fe396d35b99ea80f03d336965836a5cd71e759afd80f60387c414"], 0xfc}}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r3, @ANYBLOB="01f5050000000000300012800b00010067656e65"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfcb, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x4, 0xffffffffffffffff, &(0x7f0000000c80))
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000440)="96e04f0705702ac5040000ea0798", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x6, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

12m1.967059784s ago: executing program 3 (id=504):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792, 0x0, 0x0, 0x102, 0x400000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

12m1.079038062s ago: executing program 3 (id=508):
r0 = getpgrp(0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
fchdir(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40)
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x7fffffff)
ftruncate(r3, 0x2007ffb)
sendfile(r3, r3, 0x0, 0x1000000201005)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xa, &(0x7f00000000c0)={0x9, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)=ANY=[@ANYBLOB="1c0000001900010026bd7000fcdbdf2502101002ff01000500040010"], 0x1c}}, 0x4004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
io_setup(0x9, &(0x7f0000000340)=<r7=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="b60210000000000000070eeb04134a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$xdp(0x2c, 0x3, 0x0)
io_submit(r7, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r8, 0x0}])
r9 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0)

11m57.484519619s ago: executing program 3 (id=515):
socket(0x2b, 0x1, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000ff020000000000000000000000000001fffd00004e2200000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f000000000000010004030000000044000500fe880000000000000000000000000101000000003c0000000a00000000000000000000000000000000000001060000000101000005000000000000000000000021f2c7e19c09820c7222c2febc2d9b64b81913fa8fe396d35b99ea80f03d336965836a5cd71e759afd80f60387c414"], 0xfc}}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r3, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfcb, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x4, 0xffffffffffffffff, &(0x7f0000000c80))
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000440)="96e04f0705702ac5040000ea0798", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x6, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11m55.85838587s ago: executing program 3 (id=519):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r1, 0x0, 0xffe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, 0xffffffffffffffff, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

11m40.728824742s ago: executing program 32 (id=519):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r1, 0x0, 0xffe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, 0xffffffffffffffff, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

8m50.676265531s ago: executing program 1 (id=827):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0xffff, 0x10001, 0x7, 0x2, 0x5, 0x6, 0xda4, 0x1, 0xc, 0x6, 0x9, 0xfffffffe, 0x4, 0x5, 0x53d0, 0x1, 0x7563, 0x2, 0x5, 0xfffffffb, 0x4, 0x4, 0x8, 0xfff, 0x9, 0x3000000, 0x1, 0x2, 0x80, 0x800, 0x6, 0x4]})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000140)={0x28, 0x1, 0x0, 0x0, 0x100, 0x3, 0x5})
r2 = dup2(r1, r1)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f0000000000)=0x8)
openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x341442, 0x1)
socket$packet(0x11, 0x2, 0x300)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x44, r4, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}}, 0x20048840)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0)
ppoll(&(0x7f00000000c0)=[{r5, 0x9000}], 0x1, 0x0, 0x0, 0x0)
umount2(0x0, 0xb)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x2)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r6, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd})
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

8m47.696374559s ago: executing program 1 (id=830):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000400)={{<r1=>0xffffffffffffffff, &(0x7f0000000100)='/]\x00', 0x2a000, &(0x7f0000000200)={@align, {0x3, 0x1, 0x0, 0x7fffffffffffffff}}, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x8001}, 0x0, &(0x7f0000000380)})
ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304)
syz_emit_ethernet(0x22a6, &(0x7f0000000dc0)={@random="1890467b0eca", @local, @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x3, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b02800", 0x2268, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x2a, {0x0, 0x6, '\x00WU', 0x2, 0x33, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0xf}, [@dstopts={0x5c, 0x219, '\x00', [@generic={0xe, 0x1000, "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"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1, @generic={0x5, 0x98, "8ca8c2d776e30f23d2c9c07ff117815e36bfc417ac1b9f6ca48bf8fb1b9bb5d7c796a9310d82e9c7fcd14107bc97eb9db17eaaf5b0455d95b2e7f19ca91d884c2b2491aee9bdf4814b70fed8583cd5bd2a8ddfb4ba5062b1accd14cf711f409b9b581bc0fe8a7377a23fce04a839edca16a6bed044e68b3e8ea3a983f011206775385a15c02b4c07ce8cad4538094286f10469321494c79c"}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x6}]}, @hopopts={0x2b, 0x3, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0xe}, @enc_lim={0x4, 0x1, 0xf3}, @pad1, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x1, [0x0]}]}, @dstopts={0x16, 0xa, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x4, 0x81, [0x3, 0x8, 0x80000001, 0x7f6e611c, 0xdb5, 0x4, 0x38f]}}, @pad1, @jumbo={0xc2, 0x4, 0x221e9d6f}]}, @dstopts={0x5e, 0x11, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x50, {0x1, 0x12, 0xff, 0x8, [0x5, 0x7, 0x1, 0x0, 0x7, 0x2, 0x1, 0x4, 0x8000000000000000]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x100, [0x3c20, 0x3]}}]}, @hopopts={0x84, 0x3, '\x00', [@hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x200}]}, @dstopts={0xe89bdfd5ab35318c, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}], "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"}}}}}}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555e}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xb}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555c}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x3c, &(0x7f0000000540)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}]}, &(0x7f0000000500)=0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000250200000600000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240))
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010700bd7000fddbdf2501000008080001008d5cacb177d93b807875220267385c1758922d5bdfd19976518ffadee50b34ea61db56e7ae162b6caeb6bd3220f92d9d59db689ca75e3990786772c2c45eff3e0b3a0fedbbc7b25250defe751e37cdde8a4674fc0e57e82a44dbd730a69960a6769fb91f48d94bc3065d", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10)

8m46.818138681s ago: executing program 1 (id=833):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettaction={0x40, 0x32, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x40}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09020000060000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0xffff, @local, 0x81}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xfffffffc}, 0x1c)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = userfaultfd(0x801)
syz_clone(0x289a2400, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x5793, &(0x7f0000000040)={0x0, 0xca22, 0x10000, 0xfffffff7, 0x212}, &(0x7f0000000180), 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1ff, 0x181800)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r8, 0x80804120, 0x0)
pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0)

8m44.699915305s ago: executing program 1 (id=836):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x2b, 0x80801, 0x1)
ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x4, 0xca2}})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002380)={'hsr0\x00', <r3=>0x0})
r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x100)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000015c0)={0x3, 0x55b0, 0x1, 'queue1\x00', 0x2})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000002040)={0x6, 0x1, 0x1, 'queue0\x00', 0x2})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000002240)={0xf, 0x1, 0x0, 'queue0\x00', 0x5})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a000004090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xd8, 0x6, @random="32b40c6fc44c"}, 0x14)
sendto$packet(r6, &(0x7f0000000380)="c1858aec1d0a06756f6608f23687", 0xe, 0x24080000, &(0x7f0000000240)={0x11, 0x19, r3, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000300))
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400600027c035c9cc652bdcea3ea5a7134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecb84ec95ee5de6ccd40dd6e4f1ef3d93452a92782f9ffcdb020e6f3baf432b25a55e08", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4c000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)="4fbb2ade4e882ca7e42f0950750e3e7dc580", 0x12)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r7, 0xfffffffd, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0xa]}})
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000540)=""/153, &(0x7f0000000080)=0x99)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r9, 0x0, 0x0, 0x800)

8m43.590110046s ago: executing program 1 (id=838):
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e7", 0x96, 0x840, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x2c060000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
write$cgroup_pid(r0, &(0x7f0000000c00)=0xffffffffffffffff, 0x12)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002f80)={{r1, &(0x7f0000000180)='\x00', 0x2, &(0x7f0000000d00)={@align=0x2, {0x0, 0x8, 0x3, 0x9}}, 0xf, &(0x7f0000000d40), &(0x7f0000000f00)=0x1}, {[0x0, 0x86f1, 0x4, 0x1]}, 0x8001, 0x0, 0x0})
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x40400cc}, 0x24008004)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xa, &(0x7f0000000c40)=ANY=[@ANYBLOB="60b4271ebc39294df424fcec5e919098ad2d549e912cb81f83cd73f610abcc7cbbf7bdc80886a978cfc6a7b08b778e3731afa9062c30d4da63b5017c4861e4281e761f687b2fb0280fe1a9e5c2043efce2a0", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000140)=r6, 0x4)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x30000009})
r7 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0xfffe, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}, 0x1c)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = socket(0x10, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r9, @ANYBLOB="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", @ANYRESOCT=r1, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

8m42.09147039s ago: executing program 1 (id=840):
set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="017200000000000020001280080001006774700014000280080003003e3275"], 0x48}, 0x1, 0x0, 0x0, 0x48884}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000610}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001940), r3)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x2400c004)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8m26.848277996s ago: executing program 33 (id=840):
set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="017200000000000020001280080001006774700014000280080003003e3275"], 0x48}, 0x1, 0x0, 0x0, 0x48884}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000610}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001940), r3)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x2400c004)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m26.924165797s ago: executing program 2 (id=1246):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x52, 0x1, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
unshare(0x400)
r0 = syz_open_procfs$pagemap(0x0, 0x0)
lseek(r0, 0x4100, 0x2)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x12, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
modify_ldt$write(0x1, &(0x7f00000000c0)={0x0, 0x1000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x9, 0x8, 0x400, 0x47f}})
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x7, 0xa9, 0x5, 0x2, 0x1})
setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000040)=0x1, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', 0x0})
sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x4004814}, 0x4044000)

3m24.583094404s ago: executing program 2 (id=1250):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x4000004)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="bff1ec5406d46652f7bc92d5ace0471d76a082d11f09e874c25155c8e2b08bf72e2219f96abee07706ef50da544171ae047e347009471c151b93d9865eedf735e3f347a9d362a25235da1f493d775761f8b5399077c48ae048f8f0052a386a3f8b4d3b8e2f082c73acd404f9be982f40e76254d07f59a81a26b5f3d10e4d230c8131d766517e3348647dcce0e6"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x22}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880180001801400108004000b8008000100ac1414bb04004e00080002"], 0x38}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008094)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x24000840)
syz_emit_ethernet(0x0, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYRESDEC=r7], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x400c010)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0)
ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff})
sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRESHEX=r8], 0x454}, 0x1, 0x0, 0x0, 0x20000101}, 0x4000000)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)

3m21.936604887s ago: executing program 2 (id=1254):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000080)={0x100, 0x1, 0xc}, 0x18)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x44080)
syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
prlimit64(0x0, 0x1, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x741881)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000800)={0x0, 0x6, 0xc, {0x600000, 0xe}, 0x8, 0x1000})
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
epoll_create(0x7)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
fchdir(r3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

3m17.638605468s ago: executing program 2 (id=1258):
syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x4008001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
syz_usb_connect$midi(0x4, 0x32, &(0x7f00000000c0)=ANY=[], 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

3m14.466543318s ago: executing program 2 (id=1262):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f0000000840), &(0x7f0000004880)=@udp=r2}, 0x20)
recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)

3m12.607716134s ago: executing program 2 (id=1263):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8004)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r4, &(0x7f0000000340)=ANY=[], 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x40800, &(0x7f00000000c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xa000}})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}})
r8 = socket$netlink(0x10, 0x3, 0x400000000000004)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
creat(&(0x7f0000000180)='./file0\x00', 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a3200000000050007"], 0x70}, 0x1, 0x0, 0x0, 0x4008850}, 0x24000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES8], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
socket$kcm(0x10, 0x2, 0x10)

2m55.913862775s ago: executing program 34 (id=1263):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8004)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r4, &(0x7f0000000340)=ANY=[], 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x40800, &(0x7f00000000c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xa000}})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}})
r8 = socket$netlink(0x10, 0x3, 0x400000000000004)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
creat(&(0x7f0000000180)='./file0\x00', 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a3200000000050007"], 0x70}, 0x1, 0x0, 0x0, 0x4008850}, 0x24000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES8], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
socket$kcm(0x10, 0x2, 0x10)

2m36.455372388s ago: executing program 7 (id=1290):
syz_open_dev$vbi(0x0, 0x0, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d300000001090212"], 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1b)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000017000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000003000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)

2m20.263880631s ago: executing program 35 (id=1290):
syz_open_dev$vbi(0x0, 0x0, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d300000001090212"], 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1b)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000017000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000003000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)

21.969734355s ago: executing program 5 (id=1541):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14)
prctl$PR_CAPBSET_READ(0x17, 0x3000000000000)

20.420057969s ago: executing program 5 (id=1545):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
writev(r0, &(0x7f0000001700)=[{&(0x7f0000000000)="fd01a4e2eb47430a8b68a4ee47c4c2a7d660e07b124517358b9bbb467fe94296b800dc84d9ce0752e02098ca7b4164e8ef6bcb69a0f103da7d4f578b9c8169ac1045038b52613cb81561fa83186b630ed8c1de", 0x53}, {&(0x7f00000000c0)="b2678277745124d6cb16b83ea46e6d30b45ba98712fd189eb4ec907599017eb1cebcd3607426a113", 0x28}, {&(0x7f0000000100)="b0e306514642178246347435349044ddaf99e5abaa4d903e7ff9b000e8a408939ed94c6c57406b02b53c065e2d19646dc31c780cf1a035c6f6ee95c054a354f6c2d22245665629b6159b4918e0a9b7e5448f77a78cd0afa24ef9aa2905f7c1129bd696e5ef13a889a5855d668400f69317b5811320c2e824fdba396422", 0x7d}, {0x0}, {0x0}], 0x5)

20.08052654s ago: executing program 5 (id=1548):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
pwritev2(r0, &(0x7f0000000740)=[{&(0x7f0000000100)="3f6c5b761046b0a77db63c34e13408e27fcea6c7605a226d926b187e4d85c6dc144795bcb7eb57aa924187b4915c60848ced868e669e7383365c1b98ccdf87f4db91bf74c981a25caf0102470956f6b38a96d397cb995a13c9f1c474091c01e8c3c09a356e7dac9e7405acd7d332ba3fbb177cd8b2ffba8cc8d01264085fa41b35c651a946b8f2034baaa01bc5c5b1179e2e6e82dc3f059c5245", 0x9a}, {0x0}, {&(0x7f00000005c0)="f92c1e79acd0f7cdc8d83328244f9958c71163a4241e65d197e16cc0f83b426f50b2e198556fb3093a6c773014485fa3d250498d3c37886f01e28967891c211476b81d48e0d8c0e00a702dc058b1ea7a3379e60ec24f132994e5e71486e475fbd0bc45120c98a1f481eeed303a49c3715c922f20115a81e65ff34d2b6d903525677b", 0x82}, {&(0x7f0000000540)}], 0x4, 0x9, 0x1, 0x1c)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x4, 0x4})
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
open(&(0x7f0000000200)='./file1\x00', 0x4008040, 0x0)
pipe2(&(0x7f0000001440), 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4000)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000006)
pipe(&(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="01ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f0000000040)=0xff56)

20.000891364s ago: executing program 4 (id=1549):
r0 = socket$kcm(0x11, 0x4, 0x0)
r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r1}, &(0x7f0000000280)=ANY=[@ANYBLOB='enc=oxtea)\x00'/62], &(0x7f0000000300), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, &(0x7f0000001080))
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_ep_write(r3, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="2047010000000b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, &(0x7f00000000c0)=""/187, 0xbb)

16.256101478s ago: executing program 5 (id=1552):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')

16.075403624s ago: executing program 4 (id=1555):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14)
prctl$PR_CAPBSET_READ(0x17, 0x3000000000000)

14.14472335s ago: executing program 6 (id=1556):
openat$dir(0xffffffffffffff9c, 0x0, 0xc0000, 0x28)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x7c, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090)
r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
gettimeofday(&(0x7f0000000100), &(0x7f0000000180))

14.050156956s ago: executing program 4 (id=1557):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x6, 0x58})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @time={0x6c0, 0xffffff}, 0x3, {0x1, 0xfc}})

13.994370128s ago: executing program 8 (id=1558):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4044}, 0x20008062)
getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x8000)
syz_usb_connect(0x1, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x1a, 0x87, 0x70, 0x8, 0x10c4, 0x1601, 0x101c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x8, 0x1, 0x40, 0x60}}]}}, &(0x7f0000000080)={0x0, 0x0, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f0f00010a1003"], 0x1, [{0x0, 0x0}]})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000000440)="96e04f0705702ac5040000ea0798", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x6, r2, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004000000000000009000000850000001100000085000000b30000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000001580)=ANY=[@ANYBLOB="b80b000001050102000000000000000002000003d40201"], 0xbb8}, 0x1, 0x0, 0x0, 0x4080}, 0x40010)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

13.291024004s ago: executing program 0 (id=1560):
r0 = socket(0x40000000015, 0x5, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0xa000)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)={0x3a, 0x19, '\x00', [@generic={0xff, 0xc3, "da1dd4898206938023612c28ec7c220d7ad765e3bf0546b8e8ddf0ce5b707763cf50abfde35c1a9b3cdb5124f8cc274aa17675f690e8b91274415caee3ff9d7f3f3d73d49fa4a17bbfc6a3a73b10cb71ca19c878f2319c03bc322bbd63e80180ca61b6721dee826a81b09e9f3228a6a947bae9dd3da24cbfc318febf2aec05961e4c03fed6cc4d43badea8422b82a798e4c44f9179049812c9baf23719fba1acb144d2b644e70c645858cbfd3f77765295577149fb04414313863f686f08b8dcdd4032"}, @enc_lim={0x4, 0x1, 0xa}, @ra={0x5, 0x2, 0x2}]}, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x188843, 0x112)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)

11.100776773s ago: executing program 0 (id=1561):
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x5772, 0x80, 0x0, 0x170}, &(0x7f0000000080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee5, 0x20, 0x3, 0x328}}, {0x0, 0x0, <r0=>0xffffffffffffffff, {0x0, 0x7e33, 0x800, 0x3, 0xb8}, <r1=>0xffffffffffffffff}, {0x0, 0x0, <r2=>0xffffffffffffffff, {0x0, 0x311b, 0x2000, 0x1, 0x1f4}}, {0x0, 0x0, <r3=>0xffffffffffffffff, {0x0, 0xdbb3, 0x1, 0x3, 0x31b}}], 0x4, &(0x7f0000001300)={0x2e, 0x42, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6f}, 0x0, 0x0, '\x00', {0x3, 0x743, 0x0, &(0x7f0000000300)=@buf_1k="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"}}, &(0x7f0000001380))
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000013c0)={0x0, 0xffff, 0x0, 0x0, <r4=>0x0})
fcntl$lock(r0, 0x7, &(0x7f0000001440)={0x0, 0x3, 0x1, 0x10000, r4})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x5a, &(0x7f0000001480)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @random="b7b69d5c6b7b", @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x9, 0x1, 0x0, 0x0, "0439aad5f89771d293c4498e6a4c4350c0534bd69fe179402d0460f3d280b1d0297673e054e51a38fe4ba3030a0b38be198ed5901a4b81db1cf8a24be0a22edd"}}}}, &(0x7f0000001500)={0x1, 0x3, [0x2c5, 0x4f2, 0x8a9, 0xac1]})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001540)={<r6=>0x0, "d1d01d31a53124c930fc28baacc08aa1"})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002540)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000002940)={0x17, 0x4, {0x800, @usage, 0x0, 0x1, 0x1, 0xffffffffffffbc25, 0x7ff, 0xe67, 0x496, @usage=0xffffffff, 0x4, 0x4, [0x2, 0x5, 0x8, 0x9, 0x0, 0x9]}, {0x5, @struct={0x2, 0x1}, r6, 0xa, 0x6, 0x1, 0x101, 0x1, 0x400, @usage=0xde, 0xffff, 0x10000, [0x2, 0x8001, 0x9bf2, 0x101, 0x7fffffffffffffff, 0x2]}, {0x10, @usage=0x8, r7, 0x8be9, 0x7fffffffffffffff, 0x0, 0x1, 0xfffffffffffffff8, 0xc, @struct={0xbc01, 0x7b9}, 0x1ff, 0x5, [0x1, 0x9, 0x6, 0xfff, 0xffffffffffffffff, 0xffff]}, {0x7, 0x2, 0x1}})
r8 = accept$packet(r5, 0x0, &(0x7f0000002d40))
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000002d80)=@req={0x2, 0x5, 0x8, 0x78}, 0x10)
ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20010, r1, 0x5dace000)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r9, 0x89e4, &(0x7f0000002dc0)={0x45, "ed7c5ed66c4115bddf6ae2071303c923290e32b48d610af17e6e53554139a09047809f24705422d87992226dc7ddd2412e9ae44a176c7c39c1bb88907ea92db7e57f9f8d3905717ff4bd31770f8c0785919b8129b44f9933abcf5b1ce57ceb6e5a88a9ad81f94599528852e6981eb52de7ce949e3e8623d8c93bb2094dbb7f2b"})
r10 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7fffffffffffffff)
ioctl$TIOCGPTPEER(r10, 0x5441, 0x100000000)
r11 = openat$panthor(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f0000002ec0))
r12 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000002f00)='devices.allow\x00', 0x2, 0x0)
pread64(r12, &(0x7f0000002f40)=""/181, 0xb5, 0xfffffffffffffffb)
ioctl$XFS_IOC_FSGROWFSRT(r11, 0x40105870, &(0x7f0000003000)={0x8, 0x7})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r13, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x40, r14, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x20006000}, 0x8410)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000031c0), r13)
sendmsg$NL80211_CMD_GET_INTERFACE(r13, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x14, r15, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x58001)
r16 = syz_open_procfs(r4, &(0x7f00000032c0)='fdinfo/3\x00')
accept4$nfc_llcp(r16, &(0x7f0000003300), &(0x7f0000003380)=0x60, 0x800)
write$cgroup_devices(r16, &(0x7f00000033c0)={'a', ' *:* ', 'wm\x00'}, 0x9)
socket(0x11, 0x6, 0x2)

10.919883073s ago: executing program 8 (id=1562):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
connect$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x10)

10.526364673s ago: executing program 4 (id=1563):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000004880)=@udp=r2}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
write$char_usb(r7, &(0x7f0000000040)="e2", 0xff0f)

10.238958673s ago: executing program 6 (id=1564):
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x6}}, 0x18)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000080)={0x3, 0x3})
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x214040, 0x58)
setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x3, r1})
splice(r0, &(0x7f0000000180)=0x6, r0, &(0x7f00000001c0)=0x401, 0xa4, 0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x13f, 0x8}}, 0x20)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000280)={0x6, 0x8, 0x7ff, 0x6})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000002c0)=0xb, 0x4)
syz_emit_ethernet(0x56, &(0x7f0000000300)={@multicast, @empty, @void, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0x2e, 0x3, 0x0, 0x0, "8cbe1bec7e71b617d71443a4928943c76b058837fe829632033ce7b34e21c1810700b203d878f0179c91321511a5647f8b344bf2a3bf0f6030816b54f3dafff7"}}}}, &(0x7f0000000380)={0x0, 0x4, [0x195, 0x795, 0xff5, 0xca4]})
execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000400)='\xec]e\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='@\\/Y\x00', &(0x7f00000004c0)='\x00']}, &(0x7f0000000600)={[&(0x7f0000000540)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000580)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f00000005c0)='\x00']})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000640)={r1, 0xffffffff, 0x3, r1})
r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4)
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000680)={0x101, 0x4})
pipe2$watch_queue(&(0x7f00000006c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01864c1, &(0x7f0000000700)={0x0, 0x0, <r7=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000740)={0x1, 0x5, 0x6, 0x0, 0x0, [{{r6}, 0x7}, {{r2}, 0x1}, {{r3}, 0x9}, {{r4}, 0x2}, {{r7}, 0x9}, {{r3}, 0x8f7}]})
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f00000008c0)={&(0x7f0000000840)=""/72, 0x48, 0x5, 0xcd})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000900)=<r8=>0x0)
mq_notify(r1, &(0x7f0000000940)={0x0, 0x1f, 0x2, @tid=r8})
socket$nl_generic(0x10, 0x3, 0x10)
splice(r0, &(0x7f0000000980)=0xffff, r1, &(0x7f00000009c0)=0x1, 0x0, 0xa)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r1, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@bridge_getvlan={0x28, 0x72, 0x200, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c00)={0x4, &(0x7f0000000bc0)=[{0x8, 0x40, 0x40, 0x7fff}, {0x5, 0x4, 0x4, 0x72}, {0x89ba, 0x81, 0x2, 0x4800}, {0x6, 0x4, 0x9, 0xff}]})
ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000c40)={0x1, 0x0, {0x5c, 0x9, 0x800, 0xffff}})
ioctl$I2C_SLAVE_FORCE(r6, 0x706, 0x257)

10.222630264s ago: executing program 5 (id=1565):
r0 = socket$kcm(0x11, 0x4, 0x0)
r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r1}, &(0x7f0000000280)=ANY=[@ANYBLOB='enc=oxtea)\x00'/62], &(0x7f0000000300), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, &(0x7f0000001080))
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_ep_write(r3, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="2047010000000b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, &(0x7f00000000c0)=""/187, 0xbb)

8.409213013s ago: executing program 4 (id=1566):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f0000000840), &(0x7f0000004880)=@udp=r2}, 0x20)
recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)

7.983521419s ago: executing program 6 (id=1567):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14)
prctl$PR_CAPBSET_READ(0x17, 0x3000000000000)

7.426068397s ago: executing program 8 (id=1568):
futex(&(0x7f0000000340), 0x80000000000b, 0x0, 0x0, &(0x7f0000000300), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000014000100000080000040d52204000080fbff0180ecc032c4fd678632280502b210889fdc1680cd0841525cab"], 0x1c}], 0x1}, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000001180), 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r5, 0x0)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x40, 0x6, 0xd}, 0x8, 0x5, 0x107f, 0x0, 0x1, 0x101, 0x0})
ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000080))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4010)
rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000280)=0x2, 0x4)

7.41298466s ago: executing program 6 (id=1569):
symlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setreuid(0x0, 0xee00)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
symlink(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000280)='./bus\x00')
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb351)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee000000000000000002000000", 0x57}], 0x1)
r2 = io_uring_setup(0x7aa6, &(0x7f0000000100)={0x0, 0x497d, 0x100, 0x100003, 0x2b2})
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x4, 0x7, 0x20002f7, 0x0, r2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
io_uring_enter(r3, 0x2219, 0x1007721, 0x4, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf2502000000080001000300"], 0x1c}, 0x1, 0x0, 0x0, 0xdbbca5e2e2fba6f}, 0x8000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8})
fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5})
mlock(&(0x7f000021c000/0x4000)=nil, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1, 0x4, 0x0, 0x200000}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x4, 0x8})
readv(r6, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000002000500000000000400040000000000100002000000000008"], 0x24, 0x3)

7.12073354s ago: executing program 0 (id=1570):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
writev(r0, &(0x7f0000001700)=[{&(0x7f0000000000)="fd01a4e2eb47430a8b68a4ee47c4c2a7d660e07b124517358b9bbb467fe94296b800dc84d9ce0752e02098ca7b4164e8ef6bcb69a0f103da7d4f578b9c8169ac1045038b52613cb81561fa83186b630ed8c1de", 0x53}, {&(0x7f00000000c0)="b2678277745124d6cb16b83ea46e6d30b45ba98712fd189eb4ec907599017eb1cebcd3607426a113", 0x28}, {&(0x7f0000000100)="b0e306514642178246347435349044ddaf99e5abaa4d903e7ff9b000e8a40893", 0x20}, {0x0}, {0x0}], 0x5)

6.064062601s ago: executing program 8 (id=1571):
r0 = fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000114d9"], 0x50}, 0x1, 0x0, 0x0, 0x2000c091}, 0x4004080)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820)
r6 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x28001, @empty, 0xffffff5d}, 0x1c)
listen(r6, 0x4d)
syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d000000198401fa2441ce000000000000000000000002fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00@'}}}}}}}, 0x0)
r7 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="1201100127aa18080204025683490102030109021200010000500f0904"], 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1, 0x6, 0xab7, 0x120, r8, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0xe}, 0x50)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x18201, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.056053604s ago: executing program 6 (id=1572):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x100)
readv(r1, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3)
r2 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045730, 0x0)
r3 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x11}, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write(r4, &(0x7f0000000000)='~', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x3}, 0x28)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x8000000, 0x0, 0x3}, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r0, 0x0, 0x97ff, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

6.017123259s ago: executing program 0 (id=1573):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000002940)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23002bbd7000fcdbdf250f0000001400078008000200000000000800010004000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x90)

4.467543019s ago: executing program 4 (id=1574):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)=',8Zz', 0x4)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b", 0x2b}], 0x3}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800)

4.264546548s ago: executing program 5 (id=1575):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')

4.095383633s ago: executing program 0 (id=1576):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000004880)=@udp=r2}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
write$char_usb(r7, &(0x7f0000000040)="e2", 0xff0f)

1.923513897s ago: executing program 0 (id=1577):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b", 0x2b}], 0x3}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800)

1.720100392s ago: executing program 8 (id=1578):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'hugetlb'}, {0x2d, 'rlimit'}, {0x2d, 'net_cls'}, {0x2b, 'rdma'}, {0x3a88f33de98e16e6, 'cpuacct'}, {0x2b, 'rlimit'}]}, 0x31)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_open_dev$tty1(0xc, 0x4, 0x1)
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open_tree(r4, &(0x7f0000000300)='./file0\x00', 0x81901)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="b3", 0x1}], 0x1, &(0x7f00000001c0)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x20048814}, 0x40000d0)

126.104593ms ago: executing program 8 (id=1579):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14)
prctl$PR_CAPBSET_READ(0x17, 0x3000000000000)

0s ago: executing program 6 (id=1580):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800)

kernel console output (not intermixed with test programs):

ig 208 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1025.742217][ T5654] usb 1-1: config 208 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[ 1025.742243][ T5654] usb 1-1: config 208 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[ 1025.742266][ T5654] usb 1-1: config 208 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[ 1025.742289][ T5654] usb 1-1: config 208 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1025.742312][ T5654] usb 1-1: config 208 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[ 1025.742350][ T5654] usb 1-1: config 208 interface 139 altsetting 51 endpoint 0x9 has an invalid bInterval 128, changing to 11
[ 1025.742380][ T5654] usb 1-1: config 208 interface 139 altsetting 51 has a duplicate endpoint with address 0xC, skipping
[ 1025.742404][ T5654] usb 1-1: config 208 interface 139 altsetting 51 has a duplicate endpoint with address 0x9, skipping
[ 1025.742430][ T5654] usb 1-1: config 208 interface 139 altsetting 51 endpoint 0xF has invalid maxpacket 1024, setting to 64
[ 1025.742459][ T5654] usb 1-1: config 208 interface 139 altsetting 51 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 1025.742502][ T5654] usb 1-1: config 208 interface 228 altsetting 16 has an invalid descriptor for endpoint zero, skipping
[ 1025.742525][ T5654] usb 1-1: config 208 interface 139 has no altsetting 0
[ 1025.742544][ T5654] usb 1-1: config 208 interface 228 has no altsetting 0
[ 1025.881523][ T5654] usb 1-1: New USB device found, idVendor=1199, idProduct=9002, bcdDevice= 1.18
[ 1025.881556][ T5654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.881577][ T5654] usb 1-1: Product: syz
[ 1025.881592][ T5654] usb 1-1: Manufacturer: syz
[ 1025.881607][ T5654] usb 1-1: SerialNumber: syz
[ 1026.258278][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1026.262959][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1026.274096][T11292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1205'.
[ 1026.814117][    T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1026.955455][    T9] usb 3-1: device descriptor read/64, error -71
[ 1027.006349][ T5654] usb-storage 1-1:208.139: USB Mass Storage device detected
[ 1027.238304][ T5654] usb 1-1: USB disconnect, device number 57
[ 1027.244553][    T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1027.555393][    T9] usb 3-1: device descriptor read/64, error -71
[ 1027.664268][    T9] usb usb3-port1: attempt power cycle
[ 1027.706134][T11313] 9p: Bad value for 'wfdno'
[ 1028.004025][    T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1028.024523][    T9] usb 3-1: device descriptor read/8, error -71
[ 1028.403880][    T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1028.424593][    T9] usb 3-1: device descriptor read/8, error -71
[ 1028.534227][    T9] usb usb3-port1: unable to enumerate USB device
[ 1029.095138][ T5654] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1029.268461][ T5654] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1029.270788][ T5654] usb 5-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[ 1029.270813][ T5654] usb 5-1: config 66 has 1 interface, different from the descriptor's value: 2
[ 1029.311964][ T5654] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[ 1029.311996][ T5654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.312019][ T5654] usb 5-1: Product: syz
[ 1029.312035][ T5654] usb 5-1: Manufacturer: syz
[ 1029.312051][ T5654] usb 5-1: SerialNumber: syz
[ 1029.996579][ T5654] ati_remote2 5-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint
[ 1030.021267][ T5654] usb 5-1: USB disconnect, device number 58
[ 1031.215152][  T154] bridge_slave_1: left allmulticast mode
[ 1031.215187][  T154] bridge_slave_1: left promiscuous mode
[ 1031.215488][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1031.303827][    T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1031.362203][  T154] bridge_slave_0: left allmulticast mode
[ 1031.362237][  T154] bridge_slave_0: left promiscuous mode
[ 1031.362618][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1031.442904][T11355] FAULT_INJECTION: forcing a failure.
[ 1031.442904][T11355] name failslab, interval 1, probability 0, space 0, times 0
[ 1031.442943][T11355] CPU: 0 UID: 0 PID: 11355 Comm: syz.0.1209 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1031.442976][T11355] Tainted: [L]=SOFTLOCKUP
[ 1031.442982][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1031.442992][T11355] Call Trace:
[ 1031.442998][T11355]  <TASK>
[ 1031.443004][T11355]  dump_stack_lvl+0xe8/0x150
[ 1031.443028][T11355]  should_fail_ex+0x46b/0x600
[ 1031.443055][T11355]  should_failslab+0xa8/0x100
[ 1031.443092][T11355]  __kvmalloc_node_noprof+0x170/0x8e0
[ 1031.443113][T11355]  ? nf_hook_entries_grow+0x288/0x720
[ 1031.443143][T11355]  nf_hook_entries_grow+0x288/0x720
[ 1031.443177][T11355]  __nf_register_net_hook+0x2c9/0x930
[ 1031.443200][T11355]  ? nft_chain_add+0xe3e/0x1090
[ 1031.443231][T11355]  nf_register_net_hook+0xb2/0x190
[ 1031.443257][T11355]  nf_tables_newchain+0x235b/0x2890
[ 1031.443285][T11355]  ? __pfx_nf_tables_newchain+0x10/0x10
[ 1031.443319][T11355]  ? nft_trans_table_add+0x230/0x430
[ 1031.443339][T11355]  ? nfnl_pernet+0x23/0x240
[ 1031.443358][T11355]  ? nfnl_pernet+0x23/0x240
[ 1031.443384][T11355]  ? __nla_parse+0x40/0x60
[ 1031.443402][T11355]  nfnetlink_rcv+0x1247/0x27b0
[ 1031.443446][T11355]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1031.443480][T11355]  ? ref_tracker_free+0x673/0x820
[ 1031.443562][T11355]  ? __netlink_deliver_tap+0x807/0x850
[ 1031.443602][T11355]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1031.443631][T11355]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1031.443665][T11355]  netlink_unicast+0x780/0x920
[ 1031.443703][T11355]  netlink_sendmsg+0x813/0xb40
[ 1031.443743][T11355]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1031.443778][T11355]  ? unwind_get_return_address+0x4d/0x90
[ 1031.443810][T11355]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1031.443839][T11355]  ____sys_sendmsg+0x94c/0x9c0
[ 1031.443879][T11355]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1031.443921][T11355]  ? import_iovec+0x73/0xa0
[ 1031.443959][T11355]  ___sys_sendmsg+0x2a5/0x360
[ 1031.443991][T11355]  ? __lock_acquire+0x6b5/0x2cf0
[ 1031.444023][T11355]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1031.444096][T11355]  ? __fget_files+0x2a/0x420
[ 1031.444111][T11355]  ? __fget_files+0x3a6/0x420
[ 1031.444133][T11355]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1031.444159][T11355]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1031.444190][T11355]  ? __pfx_ksys_write+0x10/0x10
[ 1031.444220][T11355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.444237][T11355]  do_syscall_64+0x174/0x580
[ 1031.444260][T11355]  ? trace_irq_disable+0x3b/0x140
[ 1031.444278][T11355]  ? clear_bhb_loop+0x40/0x90
[ 1031.444297][T11355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.444312][T11355] RIP: 0033:0x7f693e20ce59
[ 1031.444327][T11355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1031.444359][T11355] RSP: 002b:00007f693c45e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1031.444383][T11355] RAX: ffffffffffffffda RBX: 00007f693e485fa0 RCX: 00007f693e20ce59
[ 1031.444399][T11355] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[ 1031.444413][T11355] RBP: 00007f693c45e090 R08: 0000000000000000 R09: 0000000000000000
[ 1031.444426][T11355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1031.444439][T11355] R13: 00007f693e486038 R14: 00007f693e485fa0 R15: 00007ffdc7ec4f28
[ 1031.444473][T11355]  </TASK>
[ 1031.479022][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1031.479108][    T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1031.479162][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1031.479308][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1031.479405][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1031.488019][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1031.488112][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1031.488167][    T9] usb 5-1: Product: syz
[ 1031.488210][    T9] usb 5-1: Manufacturer: syz
[ 1032.042885][    T9] cdc_wdm 5-1:1.0: skipping garbage
[ 1032.042907][    T9] cdc_wdm 5-1:1.0: skipping garbage
[ 1032.101585][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1032.101609][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1032.479604][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'.
[ 1032.735768][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1032.805884][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1032.846434][  T154] bond0 (unregistering): Released all slaves
[ 1032.989208][    T9] usb 5-1: USB disconnect, device number 59
[ 1036.653850][    T9] usb 5-1: new low-speed USB device number 60 using dummy_hcd
[ 1036.761289][  T154] hsr_slave_0: left promiscuous mode
[ 1036.796802][  T154] hsr_slave_1: left promiscuous mode
[ 1036.797863][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1036.878639][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1038.262323][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1038.263413][    T9] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1038.263450][    T9] usb 5-1: can't read configurations, error -71
[ 1038.568941][   T36] kauditd_printk_skb: 28 callbacks suppressed
[ 1038.568960][   T36] audit: type=1326 audit(1780592534.598:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11402 comm="syz.2.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcf8fce59 code=0x7ffc0000
[ 1038.569653][   T36] audit: type=1326 audit(1780592534.598:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11402 comm="syz.2.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcf8fce59 code=0x7ffc0000
[ 1038.570025][   T36] audit: type=1326 audit(1780592534.598:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11402 comm="syz.2.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcf8fce59 code=0x7ffc0000
[ 1038.570186][   T36] audit: type=1326 audit(1780592534.598:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11402 comm="syz.2.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcf8fce59 code=0x7ffc0000
[ 1038.570391][   T36] audit: type=1326 audit(1780592534.598:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11402 comm="syz.2.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bcf8fce59 code=0x7ffc0000
[ 1038.570940][   T36] audit: type=1326 audit(1780592534.598:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11402 comm="syz.2.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcf8fce59 code=0x7ffc0000
[ 1038.571398][   T36] audit: type=1326 audit(1780592534.598:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11402 comm="syz.2.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcf8fce59 code=0x7ffc0000
[ 1038.571574][   T36] audit: type=1326 audit(1780592534.598:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11402 comm="syz.2.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcf8fce59 code=0x7ffc0000
[ 1038.571761][   T36] audit: type=1326 audit(1780592534.598:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11402 comm="syz.2.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8bcf8fce59 code=0x7ffc0000
[ 1038.571974][   T36] audit: type=1326 audit(1780592534.598:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11402 comm="syz.2.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcf8fce59 code=0x7ffc0000
[ 1039.105960][  T154] team0 (unregistering): Port device team_slave_1 removed
[ 1039.168483][  T154] team0 (unregistering): Port device team_slave_0 removed
[ 1041.298102][T11428] Set syz0 is full, maxelem 0 reached
[ 1041.956772][T11411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1044.497853][T11441] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1227'.
[ 1044.851003][T11061] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1044.942031][T11061] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1044.957209][T11061] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1044.989455][T11061] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1045.006912][T11061] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1045.085596][T11061] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1045.369911][T11061] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1045.428902][T11061] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1046.012080][T11142] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1046.073915][ T5577] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[ 1046.121184][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1046.133399][T11142] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1046.211007][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1046.238487][ T5577] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1046.238563][ T5577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1046.238591][ T5577] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1046.240112][ T5577] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1046.240155][ T5577] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1046.240177][ T5577] usb 5-1: Manufacturer: syz
[ 1046.307739][ T5577] usb 5-1: config 0 descriptor??
[ 1046.450799][T11142] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1046.489891][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1046.509515][T11142] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1046.595198][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1046.654046][    T9] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[ 1046.816553][    T9] usb 3-1: config 0 has an invalid interface number: 70 but max is 0
[ 1046.816578][    T9] usb 3-1: config 0 has no interface number 0
[ 1046.816631][    T9] usb 3-1: config 0 interface 70 has no altsetting 0
[ 1046.819594][    T9] usb 3-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e
[ 1046.819624][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.819646][    T9] usb 3-1: Product: syz
[ 1046.819663][    T9] usb 3-1: Manufacturer: syz
[ 1046.819679][    T9] usb 3-1: SerialNumber: syz
[ 1046.867293][    T9] usb 3-1: config 0 descriptor??
[ 1047.064999][T11061] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1047.145571][    T9] ti_usb_3410_5052 3-1:0.70: TI USB 3410 1 port adapter converter detected
[ 1047.145858][    T9] ti_usb_3410_5052 3-1:0.70: missing endpoints
[ 1047.173275][    T9] usb 3-1: USB disconnect, device number 62
[ 1047.193339][T11061] 8021q: adding VLAN 0 to HW filter on device team0
[ 1047.215992][T11497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1234'.
[ 1047.216009][T11497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1234'.
[ 1047.255165][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1047.255432][ T8797] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1047.279018][T11142] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1047.320754][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1047.321004][ T8797] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1047.441804][T11142] 8021q: adding VLAN 0 to HW filter on device team0
[ 1047.510560][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1047.510731][ T8797] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1047.542690][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1047.542815][ T8797] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1048.284519][  T823] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1048.438463][  T823] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1048.438491][  T823] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1048.438510][  T823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1048.438555][  T823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1048.438581][  T823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1048.440329][  T823] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1048.440354][  T823] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1048.440374][  T823] usb 3-1: Product: syz
[ 1048.440388][  T823] usb 3-1: Manufacturer: syz
[ 1048.548419][  T823] cdc_wdm 3-1:1.0: skipping garbage
[ 1048.548437][  T823] cdc_wdm 3-1:1.0: skipping garbage
[ 1048.553441][  T823] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1048.553460][  T823] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1048.640859][T11061] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1048.724693][T11142] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1048.945221][ T5780] usb 5-1: USB disconnect, device number 62
[ 1049.301336][T11061] veth0_vlan: entered promiscuous mode
[ 1049.322723][T11061] veth1_vlan: entered promiscuous mode
[ 1049.512764][ T5881] usb 3-1: USB disconnect, device number 63
[ 1049.525027][T11061] veth0_macvtap: entered promiscuous mode
[ 1049.563778][ T8711] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[ 1049.669048][T11142] veth0_vlan: entered promiscuous mode
[ 1049.734082][ T8711] usb 5-1: config 1 has an invalid interface number: 82 but max is 0
[ 1049.734109][ T8711] usb 5-1: config 1 has no interface number 0
[ 1049.734138][ T8711] usb 5-1: config 1 interface 82 has no altsetting 0
[ 1049.737489][ T8711] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a
[ 1049.737518][ T8711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1049.737539][ T8711] usb 5-1: Product: syz
[ 1049.737555][ T8711] usb 5-1: Manufacturer: syz
[ 1049.737571][ T8711] usb 5-1: SerialNumber: syz
[ 1049.861963][T11142] veth1_vlan: entered promiscuous mode
[ 1050.002583][T11142] veth0_macvtap: entered promiscuous mode
[ 1050.015472][T11142] veth1_macvtap: entered promiscuous mode
[ 1050.042630][ T8711] hub 5-1:1.82: bad descriptor, ignoring hub
[ 1050.042669][ T8711] hub 5-1:1.82: probe with driver hub failed with error -5
[ 1050.055766][ T8711] sierra 5-1:1.82: Sierra USB modem converter detected
[ 1050.078495][ T8711] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[ 1050.081481][T11142] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1050.148877][T11142] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1050.194866][ T8711] usb 5-1: USB disconnect, device number 63
[ 1050.197027][  T154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.199965][  T154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.201328][  T154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.203473][  T154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.274997][ T8711] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1050.277797][ T8711] sierra 5-1:1.82: device disconnected
[ 1050.714593][  T823] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1050.971846][ T4915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1050.977082][  T823] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1050.977111][  T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1050.977133][  T823] usb 1-1: Product: syz
[ 1050.977147][  T823] usb 1-1: Manufacturer: syz
[ 1050.977162][  T823] usb 1-1: SerialNumber: syz
[ 1051.105277][ T4915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1051.139083][ T4915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1051.185457][ T4915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1051.202790][ T4915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1052.260041][ T5873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1052.260064][ T5873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1053.008522][  T823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1053.008588][  T823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[ 1053.009362][  T823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 1053.009420][  T823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1053.082061][  T823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1053.118061][  T823] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[ 1053.158087][  T823] usb 1-1: USB disconnect, device number 58
[ 1053.193378][ T7339] udevd[7339]: setting owner of /dev/bus/usb/001/058 to uid=0, gid=0 failed: No such file or directory
[ 1053.324209][ T4915] Bluetooth: hci5: command tx timeout
[ 1054.170537][ T5879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1054.170558][ T5879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1054.272461][   T36] kauditd_printk_skb: 217 callbacks suppressed
[ 1054.272473][   T36] audit: type=1326 audit(1780592550.288:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.0.1242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1054.272522][   T36] audit: type=1326 audit(1780592550.298:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.0.1242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1054.306949][   T36] audit: type=1326 audit(1780592550.328:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.0.1242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1054.307090][   T36] audit: type=1326 audit(1780592550.328:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.0.1242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f693e20e6c7 code=0x7ffc0000
[ 1054.326918][   T36] audit: type=1326 audit(1780592550.348:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.0.1242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1054.327083][   T36] audit: type=1326 audit(1780592550.348:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.0.1242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1054.327226][   T36] audit: type=1326 audit(1780592550.348:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.0.1242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1054.339165][ T4915] Bluetooth: hci1: unexpected event for opcode 0x2006
[ 1054.342650][   T36] audit: type=1326 audit(1780592550.348:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.0.1242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f693e1cd68e code=0x7ffc0000
[ 1054.342796][   T36] audit: type=1326 audit(1780592550.368:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.0.1242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1054.342924][   T36] audit: type=1326 audit(1780592550.368:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.0.1242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1054.368625][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.368699][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.403709][ T4915] Bluetooth: hci5: command tx timeout
[ 1055.523629][  T823] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 1055.561313][T11587] netlink: 64 bytes leftover after parsing attributes in process `syz.6.855'.
[ 1055.597694][T11587] l2tp_ppp: sess 2/0: no socket in recv
[ 1055.675901][  T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1055.675934][  T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1055.675971][  T823] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1055.675995][  T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.723904][  T823] usb 1-1: config 0 descriptor??
[ 1055.865441][ T5654] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[ 1055.993689][ T5654] usb 7-1: device descriptor read/64, error -71
[ 1056.233711][ T5654] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[ 1056.362464][T11599] openvswitch: netlink: EtherType 100 is less than min 600
[ 1056.510567][ T5654] usb 7-1: device descriptor read/64, error -71
[ 1057.326451][ T5654] usb usb7-port1: attempt power cycle
[ 1057.343706][  T823] usbhid 1-1:0.0: can't add hid device: -71
[ 1057.343816][  T823] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1057.413687][  T823] usb 1-1: USB disconnect, device number 59
[ 1057.483657][ T4915] Bluetooth: hci5: command tx timeout
[ 1057.753916][ T5654] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[ 1057.775502][ T5654] usb 7-1: device descriptor read/8, error -71
[ 1058.013719][ T5654] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[ 1058.034487][ T5654] usb 7-1: device descriptor read/8, error -71
[ 1058.151431][ T5654] usb usb7-port1: unable to enumerate USB device
[ 1058.291406][T11549] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1058.291607][T11549] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1058.291816][T11549] bridge_slave_0: entered allmulticast mode
[ 1058.317126][T11549] bridge_slave_0: entered promiscuous mode
[ 1058.352515][T11611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1058.381283][T11549] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1058.381437][T11549] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1058.381663][T11549] bridge_slave_1: entered allmulticast mode
[ 1058.383059][T11610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1058.391440][T11611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1058.413162][T11549] bridge_slave_1: entered promiscuous mode
[ 1058.640262][T11549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1058.842336][T11618] openvswitch: netlink: Tunnel attr 78 out of range max 16
[ 1058.853860][T11618] binder: 11613:11618 ioctl c0285840 200000000000 returned -22
[ 1059.283924][ T6406] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1059.623635][ T4915] Bluetooth: hci5: command tx timeout
[ 1059.982277][T11549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1060.093688][ T6406] usb 5-1: Using ep0 maxpacket: 32
[ 1060.096617][ T6406] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[ 1060.096645][ T6406] usb 5-1: config 0 has no interface number 0
[ 1060.096692][ T6406] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1060.096723][ T6406] usb 5-1: config 0 interface 85 has no altsetting 0
[ 1060.101000][ T6406] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1060.101028][ T6406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1060.101050][ T6406] usb 5-1: Product: syz
[ 1060.101066][ T6406] usb 5-1: Manufacturer: syz
[ 1060.101081][ T6406] usb 5-1: SerialNumber: syz
[ 1060.116774][ T6406] usb 5-1: config 0 descriptor??
[ 1061.147038][T11549] team0: Port device team_slave_0 added
[ 1061.202267][ T6406] appletouch 5-1:0.85: Geyser mode initialized.
[ 1061.238922][ T6406] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input39
[ 1061.274423][    C1] appletouch 5-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[ 1061.309886][T11549] team0: Port device team_slave_1 added
[ 1062.154333][  T823] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1062.303730][  T823] usb 1-1: Using ep0 maxpacket: 16
[ 1062.306677][  T823] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1062.307885][  T823] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1062.307901][  T823] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1062.307950][  T823] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1062.310858][  T823] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1062.310879][  T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.310895][  T823] usb 1-1: Product: syz
[ 1062.310906][  T823] usb 1-1: Manufacturer: syz
[ 1062.310917][  T823] usb 1-1: SerialNumber: syz
[ 1063.914365][  T823] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 1063.914412][  T823] cdc_ncm 1-1:1.0: bind() failure
[ 1064.177824][  T823] usb 1-1: USB disconnect, device number 60
[ 1064.384263][   T12] bridge_slave_1: left allmulticast mode
[ 1064.384297][   T12] bridge_slave_1: left promiscuous mode
[ 1064.384683][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1064.653765][  T823] usb 5-1: USB disconnect, device number 64
[ 1064.653910][    C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19
[ 1064.775914][   T12] bridge_slave_0: left allmulticast mode
[ 1064.775949][   T12] bridge_slave_0: left promiscuous mode
[ 1064.789881][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1064.932747][  T823] appletouch 5-1:0.85: input: appletouch disconnected
[ 1064.951093][T11641] netlink: zone id is out of range
[ 1064.951110][T11641] netlink: zone id is out of range
[ 1064.951119][T11641] netlink: zone id is out of range
[ 1064.951128][T11641] netlink: zone id is out of range
[ 1064.951138][T11641] netlink: zone id is out of range
[ 1064.951148][T11641] netlink: zone id is out of range
[ 1064.951157][T11641] netlink: zone id is out of range
[ 1064.951166][T11641] netlink: zone id is out of range
[ 1064.951175][T11641] netlink: zone id is out of range
[ 1064.951184][T11641] netlink: zone id is out of range
[ 1066.525390][ T5754] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1066.614234][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1066.686899][ T5754] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1066.686930][ T5754] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1066.686951][ T5754] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1066.686972][ T5754] usb 3-1: config 220 has no interface number 2
[ 1066.687068][ T5754] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1066.687089][ T5754] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1066.687103][ T5754] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1066.687117][ T5754] usb 3-1: config 220 interface 1 has no altsetting 0
[ 1066.689861][ T5754] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1066.689891][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.689912][ T5754] usb 3-1: Product: syz
[ 1066.689933][ T5754] usb 3-1: Manufacturer: syz
[ 1066.689944][ T5754] usb 3-1: SerialNumber: syz
[ 1066.804069][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1066.837038][   T12] bond0 (unregistering): Released all slaves
[ 1066.890527][T11549] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1066.890546][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1066.890575][T11549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1067.013134][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1067.021120][T11549] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1067.021135][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1067.021163][T11549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1067.186633][ T5754] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1067.186667][ T5754] uvcvideo 3-1:220.0: No valid video chain found.
[ 1067.224418][ T5754] usb 3-1: USB disconnect, device number 64
[ 1067.483085][T11663] FAULT_INJECTION: forcing a failure.
[ 1067.483085][T11663] name failslab, interval 1, probability 0, space 0, times 0
[ 1067.483112][T11663] CPU: 0 UID: 0 PID: 11663 Comm: syz.6.1260 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1067.483132][T11663] Tainted: [L]=SOFTLOCKUP
[ 1067.483138][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1067.483147][T11663] Call Trace:
[ 1067.483153][T11663]  <TASK>
[ 1067.483159][T11663]  dump_stack_lvl+0xe8/0x150
[ 1067.483180][T11663]  should_fail_ex+0x46b/0x600
[ 1067.483222][T11663]  should_failslab+0xa8/0x100
[ 1067.483242][T11663]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[ 1067.483261][T11663]  ? __alloc_skb+0x1d0/0x7d0
[ 1067.483281][T11663]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1067.483308][T11663]  __alloc_skb+0x1d0/0x7d0
[ 1067.483332][T11663]  netlink_sendmsg+0x5d4/0xb40
[ 1067.483363][T11663]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1067.483387][T11663]  ? unwind_get_return_address+0x4d/0x90
[ 1067.483411][T11663]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1067.483430][T11663]  ____sys_sendmsg+0x94c/0x9c0
[ 1067.483457][T11663]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1067.483521][T11663]  ? import_iovec+0x73/0xa0
[ 1067.483557][T11663]  ___sys_sendmsg+0x2a5/0x360
[ 1067.483584][T11663]  ? __lock_acquire+0x6b5/0x2cf0
[ 1067.483622][T11663]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1067.483685][T11663]  ? __fget_files+0x2a/0x420
[ 1067.483705][T11663]  ? __fget_files+0x3a6/0x420
[ 1067.483733][T11663]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1067.483786][T11663]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1067.483831][T11663]  ? __pfx_ksys_write+0x10/0x10
[ 1067.483857][T11663]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1067.483874][T11663]  do_syscall_64+0x174/0x580
[ 1067.483897][T11663]  ? trace_irq_disable+0x3b/0x140
[ 1067.483916][T11663]  ? clear_bhb_loop+0x40/0x90
[ 1067.483935][T11663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1067.483950][T11663] RIP: 0033:0x7f8f1ef8ce59
[ 1067.483965][T11663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1067.483978][T11663] RSP: 002b:00007f8f1d1e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1067.484008][T11663] RAX: ffffffffffffffda RBX: 00007f8f1f205fa0 RCX: 00007f8f1ef8ce59
[ 1067.484020][T11663] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000007
[ 1067.484030][T11663] RBP: 00007f8f1d1e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1067.484039][T11663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1067.484048][T11663] R13: 00007f8f1f206038 R14: 00007f8f1f205fa0 R15: 00007ffc70cad4c8
[ 1067.484070][T11663]  </TASK>
[ 1067.487934][   T12] hsr_slave_0: left promiscuous mode
[ 1067.544841][   T12] hsr_slave_1: left promiscuous mode
[ 1067.549079][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1067.632857][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1067.863816][ T5754] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1067.900680][   T12] veth0_macvtap: left promiscuous mode
[ 1067.903303][   T12] veth1_vlan: left promiscuous mode
[ 1067.903523][   T12] veth0_vlan: left promiscuous mode
[ 1068.017729][ T5754] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1068.017756][ T5754] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17
[ 1068.021792][ T5754] usb 5-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03
[ 1068.021819][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3
[ 1068.021841][ T5754] usb 5-1: Product: syz
[ 1068.021856][ T5754] usb 5-1: Manufacturer: syz
[ 1068.021871][ T5754] usb 5-1: SerialNumber: syz
[ 1068.107557][ T5754] usb 5-1: config 0 descriptor??
[ 1069.508908][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1069.537245][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1070.157815][T11549] hsr_slave_0: entered promiscuous mode
[ 1070.160438][T11549] hsr_slave_1: entered promiscuous mode
[ 1070.169419][T11549] debugfs: 'hsr0' already exists in 'hsr'
[ 1070.169491][T11549] Cannot create hsr debugfs directory
[ 1070.885462][ T5754] usb 5-1: USB disconnect, device number 65
[ 1071.449162][T11699] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1074.035435][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1074.279866][T11716] netlink: 'syz.0.1269': attribute type 1 has an invalid length.
[ 1074.279892][T11716] netlink: 'syz.0.1269': attribute type 1 has an invalid length.
[ 1074.556682][T11723] syzkaller0: entered promiscuous mode
[ 1074.556709][T11723] syzkaller0: entered allmulticast mode
[ 1074.588901][T11726] tipc: Started in network mode
[ 1074.588934][T11726] tipc: Node identity 9e887d409af2, cluster identity 4711
[ 1074.706652][T11726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1074.814257][T11708] tipc: Resetting bearer <eth:syzkaller0>
[ 1075.068872][T11708] tipc: Disabling bearer <eth:syzkaller0>
[ 1075.373763][ T5754] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1075.523695][ T5754] usb 1-1: Using ep0 maxpacket: 16
[ 1075.526482][ T5754] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1075.530277][ T5754] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1075.530307][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.530329][ T5754] usb 1-1: Product: syz
[ 1075.530357][ T5754] usb 1-1: Manufacturer: syz
[ 1075.530372][ T5754] usb 1-1: SerialNumber: syz
[ 1078.722322][ T5754] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1078.769105][ T5754] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1079.106871][ T5754] usb 1-1: USB disconnect, device number 61
[ 1079.572764][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1080.065467][T11549] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1080.114033][T11549] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1080.115531][T11549] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1080.161957][T11549] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1080.163029][T11549] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1080.232028][T11549] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1080.241603][T11549] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1080.298262][T11549] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1080.641025][T11549] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1080.644250][T11542] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1080.770728][T11549] 8021q: adding VLAN 0 to HW filter on device team0
[ 1080.797505][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1080.797748][ T5876] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1080.829857][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1080.830076][ T5876] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1080.833990][T11542] usb 1-1: Using ep0 maxpacket: 8
[ 1080.869851][T11542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1080.869902][T11542] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1080.869929][T11542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.950768][T11542] usb 1-1: config 0 descriptor??
[ 1081.075138][ T5577] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1081.276422][T11542] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1081.624232][ T8711] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1081.757122][ T5754] usb 1-1: USB disconnect, device number 62
[ 1081.783626][ T8711] usb 7-1: Using ep0 maxpacket: 32
[ 1081.789087][ T8711] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1081.789142][ T8711] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1081.790452][ T8711] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1081.790519][ T8711] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1081.791638][ T8711] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1081.791691][ T8711] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1081.878846][ T8711] usb 7-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a
[ 1081.878879][ T8711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.878901][ T8711] usb 7-1: Product: syz
[ 1081.878918][ T8711] usb 7-1: Manufacturer: syz
[ 1081.878940][ T8711] usb 7-1: SerialNumber: syz
[ 1081.969471][ T8711] usb 7-1: config 0 descriptor??
[ 1082.399606][ T8711] cdc_acm 7-1:0.0: Zero length descriptor references
[ 1082.399644][ T8711] cdc_acm 7-1:0.0: probe with driver cdc_acm failed with error -22
[ 1082.668571][ T5650] usb 7-1: USB disconnect, device number 6
[ 1083.193697][ T5650] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1083.231732][T11549] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1083.363364][ T5650] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1083.363395][ T5650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.363414][ T5650] usb 1-1: Product: syz
[ 1083.363429][ T5650] usb 1-1: Manufacturer: syz
[ 1083.363444][ T5650] usb 1-1: SerialNumber: syz
[ 1086.954222][ T5650] rtl8150 1-1:1.0: couldn't reset the device
[ 1086.954487][ T5650] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[ 1087.061486][ T5650] usb 1-1: USB disconnect, device number 63
[ 1087.481807][T11549] veth0_vlan: entered promiscuous mode
[ 1087.818781][ T5662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1087.868450][ T5662] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1087.906806][ T5662] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1087.915953][ T5662] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1087.917502][ T5662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1087.976213][T11549] veth1_vlan: entered promiscuous mode
[ 1088.150282][T11873] usb usb7: usbfs: process 11873 (syz.0.1292) did not claim interface 63 before use
[ 1088.215543][T11549] veth0_macvtap: entered promiscuous mode
[ 1088.250891][T11549] veth1_macvtap: entered promiscuous mode
[ 1088.357880][T11549] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1088.432786][T11549] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1088.483427][ T5873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.484726][ T5873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.485694][ T5873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.485807][ T5873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1089.513812][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.513835][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1089.701862][ T5873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.701884][ T5873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1091.642397][ T4915] Bluetooth: hci0: command tx timeout
[ 1094.304430][ T4915] Bluetooth: hci0: command tx timeout
[ 1094.806688][T11871] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1094.806889][T11871] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1094.807076][T11871] bridge_slave_0: entered allmulticast mode
[ 1094.810399][T11871] bridge_slave_0: entered promiscuous mode
[ 1094.844616][T11871] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1094.844826][T11871] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1094.845001][T11871] bridge_slave_1: entered allmulticast mode
[ 1094.849392][T11871] bridge_slave_1: entered promiscuous mode
[ 1094.926478][T11871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1094.946696][T11871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1095.021257][T11871] team0: Port device team_slave_0 added
[ 1095.033330][T11871] team0: Port device team_slave_1 added
[ 1095.317403][T11871] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1095.317421][T11871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1095.317449][T11871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1095.319796][T11871] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1095.319811][T11871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1095.319842][T11871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1096.808309][ T4915] Bluetooth: hci0: command tx timeout
[ 1098.366387][T11871] hsr_slave_0: entered promiscuous mode
[ 1098.370844][T11871] hsr_slave_1: entered promiscuous mode
[ 1098.388943][T11871] debugfs: 'hsr0' already exists in 'hsr'
[ 1098.388987][T11871] Cannot create hsr debugfs directory
[ 1098.572418][T11933] usb usb8: usbfs: process 11933 (syz.5.1302) did not claim interface 0 before use
[ 1098.863779][ T5654] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1098.930569][ T4915] Bluetooth: hci0: command tx timeout
[ 1098.993734][ T5654] usb 5-1: device descriptor read/64, error -71
[ 1099.235306][ T5654] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 1099.316496][T11941] FAULT_INJECTION: forcing a failure.
[ 1099.316496][T11941] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1099.316534][T11941] CPU: 1 UID: 0 PID: 11941 Comm: syz.0.1304 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1099.316564][T11941] Tainted: [L]=SOFTLOCKUP
[ 1099.316572][T11941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1099.316586][T11941] Call Trace:
[ 1099.316595][T11941]  <TASK>
[ 1099.316604][T11941]  dump_stack_lvl+0xe8/0x150
[ 1099.316633][T11941]  should_fail_ex+0x46b/0x600
[ 1099.316687][T11941]  _copy_from_user+0x2d/0xb0
[ 1099.316710][T11941]  get_sg_io_hdr+0xf6/0x850
[ 1099.316743][T11941]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1099.316771][T11941]  ? __pfx_get_sg_io_hdr+0x10/0x10
[ 1099.316795][T11941]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1099.316853][T11941]  ? rt_write_unlock+0x190/0x230
[ 1099.316882][T11941]  ? sg_add_request+0x526/0x580
[ 1099.316906][T11941]  sg_new_write+0x180/0x890
[ 1099.316935][T11941]  ? __pfx_sg_new_write+0x10/0x10
[ 1099.316992][T11941]  sg_ioctl+0x11fd/0x21a0
[ 1099.317029][T11941]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1099.317058][T11941]  ? __pfx_sg_ioctl+0x10/0x10
[ 1099.317084][T11941]  ? __fget_files+0x2a/0x420
[ 1099.317102][T11941]  ? __fget_files+0x3a6/0x420
[ 1099.317120][T11941]  ? __fget_files+0x2a/0x420
[ 1099.317142][T11941]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1099.317169][T11941]  ? __pfx_sg_ioctl+0x10/0x10
[ 1099.317189][T11941]  __se_sys_ioctl+0xff/0x170
[ 1099.317213][T11941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1099.317235][T11941]  do_syscall_64+0x174/0x580
[ 1099.317264][T11941]  ? trace_irq_disable+0x3b/0x140
[ 1099.317287][T11941]  ? clear_bhb_loop+0x40/0x90
[ 1099.317310][T11941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1099.317331][T11941] RIP: 0033:0x7f693e20ce59
[ 1099.317348][T11941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1099.317365][T11941] RSP: 002b:00007f693c45e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1099.317392][T11941] RAX: ffffffffffffffda RBX: 00007f693e485fa0 RCX: 00007f693e20ce59
[ 1099.317407][T11941] RDX: 00002000000033c0 RSI: 0000000000002285 RDI: 0000000000000003
[ 1099.317421][T11941] RBP: 00007f693c45e090 R08: 0000000000000000 R09: 0000000000000000
[ 1099.317434][T11941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1099.317446][T11941] R13: 00007f693e486038 R14: 00007f693e485fa0 R15: 00007ffdc7ec4f28
[ 1099.317477][T11941]  </TASK>
[ 1099.363957][ T5654] usb 5-1: device descriptor read/64, error -71
[ 1099.609802][ T5654] usb usb5-port1: attempt power cycle
[ 1099.787944][T11871] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1099.841282][T11871] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1099.842204][T11871] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1099.893198][T11871] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1099.902836][T11871] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1099.941622][T11871] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1099.943952][ T5654] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 1099.958976][T11871] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1099.971619][ T5654] usb 5-1: device descriptor read/8, error -71
[ 1099.998588][T11871] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1100.176177][T11871] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1100.199909][T11871] 8021q: adding VLAN 0 to HW filter on device team0
[ 1100.219917][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1100.220011][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1100.246972][ T5654] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1100.269136][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1100.269778][ T5876] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1100.291989][ T5654] usb 5-1: device descriptor read/8, error -71
[ 1100.504347][ T5654] usb usb5-port1: unable to enumerate USB device
[ 1102.102248][T11871] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1102.348682][ T8711] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[ 1102.407186][ T4915] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff
[ 1102.610232][ T8711] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1102.610260][ T8711] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1102.619056][ T8711] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1102.619138][ T8711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1102.619199][ T8711] usb 6-1: Product: syz
[ 1102.619242][ T8711] usb 6-1: Manufacturer: syz
[ 1102.619291][ T8711] usb 6-1: SerialNumber: syz
[ 1103.860128][ T8711] usb 6-1: 0:2 : does not exist
[ 1103.860231][ T8711] usb 6-1: unit 9 not found!
[ 1104.148193][T11975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1104.148794][T11975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1104.240811][ T8711] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4)
[ 1104.280745][ T8711] usb 6-1: 4:0: cannot get min/max values for control 2 (id 4)
[ 1104.310345][ T8711] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4)
[ 1104.327621][ T8711] usb 6-1: 4:0: cannot get min/max values for control 4 (id 4)
[ 1104.343764][ T8711] usb 6-1: 4:0: cannot get min/max values for control 6 (id 4)
[ 1104.360560][ T8711] usb 6-1: 4:0: cannot get min/max values for control 7 (id 4)
[ 1104.379840][ T8711] usb 6-1: 4:0: cannot get min/max values for control 8 (id 4)
[ 1104.382568][T11871] veth0_vlan: entered promiscuous mode
[ 1104.412381][T11871] veth1_vlan: entered promiscuous mode
[ 1104.477796][T11871] veth0_macvtap: entered promiscuous mode
[ 1104.504307][T11871] veth1_macvtap: entered promiscuous mode
[ 1104.557485][T11871] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1104.606843][T11871] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1104.653666][T11674] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.657913][T11674] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.658421][T11674] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.658460][T11674] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.816591][ T8711] usb 6-1: USB disconnect, device number 2
[ 1105.491154][T11997] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1105.521223][  T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1105.521246][  T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1105.639186][  T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1105.639206][  T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1105.755629][T11997] net_ratelimit: 75 callbacks suppressed
[ 1105.755648][T11997] Set syz0 is full, maxelem 0 reached
[ 1106.573703][ T5835] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[ 1106.583188][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1317'.
[ 1106.912117][ T5835] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1106.912148][ T5835] usb 8-1: config 0 has no interfaces?
[ 1106.912182][ T5835] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1106.912208][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1106.970588][ T5835] usb 8-1: config 0 descriptor??
[ 1109.084529][T12020] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1110.326826][T12027] bridge_slave_0: left allmulticast mode
[ 1110.326860][T12027] bridge_slave_0: left promiscuous mode
[ 1110.327849][T12027] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1110.828175][T12027] bridge_slave_1: left allmulticast mode
[ 1110.828208][T12027] bridge_slave_1: left promiscuous mode
[ 1110.828477][T12027] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1111.289588][ T5662] Bluetooth: hci5: Invalid handle: 0x20c9 > 0x0eff
[ 1111.380482][T12027] bond0: (slave 
3
0
): Releasing backup interface
[ 1111.547928][T12027] bond0: (slave bond_slave_1): Releasing backup interface
[ 1111.813444][T12027] team0: Port device team_slave_0 removed
[ 1111.889050][T12027] team0: Port device team_slave_1 removed
[ 1111.891129][T12027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1111.891240][T12027] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1112.040788][T12027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1112.040820][T12027] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1112.083817][ T5835] usb 8-1: string descriptor 0 read error: -32
[ 1112.089772][T12027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1113.992581][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1326'.
[ 1115.998649][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.998716][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1118.891229][T12077] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1335'.
[ 1119.271173][T12082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1119.278489][T12082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1119.513682][T11542] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1119.653668][T11542] usb 1-1: device descriptor read/64, error -71
[ 1119.905312][T11542] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1120.034100][T11542] usb 1-1: device descriptor read/64, error -71
[ 1120.146613][T11542] usb usb1-port1: attempt power cycle
[ 1120.513702][T11542] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1120.534603][T11542] usb 1-1: device descriptor read/8, error -71
[ 1120.793776][T11542] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 1120.818085][T11542] usb 1-1: device descriptor read/8, error -71
[ 1120.953794][T11542] usb usb1-port1: unable to enumerate USB device
[ 1122.969756][T12104] binder: 12103:12104 ioctl f507 0 returned -22
[ 1125.075764][ T5662] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1125.165841][ T5662] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1125.169327][ T5662] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1125.257069][ T5662] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1125.258735][ T5662] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1128.360462][ T4915] Bluetooth: hci6: command tx timeout
[ 1128.361060][ T4915] Bluetooth: hci4: command 0x0406 tx timeout
[ 1128.713768][ T5780] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 1128.850043][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1353'.
[ 1128.879034][ T5780] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1128.879069][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1128.879092][ T5780] usb 1-1: Product: syz
[ 1128.879109][ T5780] usb 1-1: Manufacturer: syz
[ 1128.879126][ T5780] usb 1-1: SerialNumber: syz
[ 1129.042593][T12157] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1353'.
[ 1130.211633][T12154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1130.363603][T12145] Bluetooth: hci6: command tx timeout
[ 1131.961313][ T5780] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1131.961369][ T5780] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[ 1131.972033][ T5780] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 1131.972093][ T5780] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1132.082136][ T5780] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1132.140434][ T5780] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[ 1132.186862][ T5780] usb 1-1: USB disconnect, device number 68
[ 1132.263604][ T6406] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1132.417786][ T6406] usb 6-1: Using ep0 maxpacket: 32
[ 1132.424149][ T6406] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1132.424186][ T6406] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1132.424222][ T6406] usb 6-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00
[ 1132.424257][ T6406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1132.444220][T12145] Bluetooth: hci6: command tx timeout
[ 1132.507035][ T6406] usb 6-1: config 0 descriptor??
[ 1132.508274][T12177] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1134.570554][T12145] Bluetooth: hci6: command tx timeout
[ 1134.814557][ T6406] hid (null): unknown global tag 0xc
[ 1134.814579][ T6406] hid (null): report_id 0 is invalid
[ 1134.864986][ T6406] hid_parser_main: 170 callbacks suppressed
[ 1134.865007][ T6406] evision 0003:320F:5041.000A: unknown main item tag 0x0
[ 1134.865036][ T6406] evision 0003:320F:5041.000A: unknown main item tag 0x0
[ 1134.865062][ T6406] evision 0003:320F:5041.000A: unknown main item tag 0x0
[ 1134.865087][ T6406] evision 0003:320F:5041.000A: unknown main item tag 0x0
[ 1134.865112][ T6406] evision 0003:320F:5041.000A: unknown main item tag 0x0
[ 1134.865137][ T6406] evision 0003:320F:5041.000A: unknown main item tag 0x0
[ 1134.865162][ T6406] evision 0003:320F:5041.000A: unknown main item tag 0x0
[ 1134.865899][ T6406] evision 0003:320F:5041.000A: unknown main item tag 0x0
[ 1134.865927][ T6406] evision 0003:320F:5041.000A: unknown main item tag 0x0
[ 1134.865953][ T6406] evision 0003:320F:5041.000A: unknown main item tag 0x0
[ 1134.867224][ T6406] evision 0003:320F:5041.000A: unexpected long global item
[ 1134.871395][ T6406] evision 0003:320F:5041.000A: probe with driver evision failed with error -22
[ 1135.066643][ T6406] IPVS: starting estimator thread 0...
[ 1135.146793][T12187] can: request_module (can-proto-0) failed.
[ 1135.153952][T12191] IPVS: using max 8 ests per chain, 19200 per kthread
[ 1135.240108][ T6406] usb 6-1: USB disconnect, device number 3
[ 1135.457369][T12116] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1135.457506][T12116] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1135.457706][T12116] bridge_slave_0: entered allmulticast mode
[ 1135.490321][T12116] bridge_slave_0: entered promiscuous mode
[ 1135.508391][T12116] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1135.508510][T12116] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1135.508685][T12116] bridge_slave_1: entered allmulticast mode
[ 1135.511694][T12116] bridge_slave_1: entered promiscuous mode
[ 1135.591565][T12116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1135.606670][T12116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1135.664407][T12116] team0: Port device team_slave_0 added
[ 1135.709175][T12116] team0: Port device team_slave_1 added
[ 1135.847903][T12116] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1135.847921][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1135.847957][T12116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1135.850403][T12116] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1135.850419][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1135.850451][T12116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1136.041398][T12116] hsr_slave_0: entered promiscuous mode
[ 1136.042838][T12116] hsr_slave_1: entered promiscuous mode
[ 1136.057903][T12116] debugfs: 'hsr0' already exists in 'hsr'
[ 1136.057932][T12116] Cannot create hsr debugfs directory
[ 1136.341273][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1362'.
[ 1139.546963][T12218] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1357'.
[ 1139.585373][T12227] FAULT_INJECTION: forcing a failure.
[ 1139.585373][T12227] name failslab, interval 1, probability 0, space 0, times 0
[ 1139.585425][T12227] CPU: 1 UID: 0 PID: 12227 Comm: syz.6.1365 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1139.585459][T12227] Tainted: [L]=SOFTLOCKUP
[ 1139.585469][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1139.585483][T12227] Call Trace:
[ 1139.585493][T12227]  <TASK>
[ 1139.585504][T12227]  dump_stack_lvl+0xe8/0x150
[ 1139.585537][T12227]  should_fail_ex+0x46b/0x600
[ 1139.585577][T12227]  should_failslab+0xa8/0x100
[ 1139.585607][T12227]  __kmalloc_node_track_caller_noprof+0xe2/0x7e0
[ 1139.585639][T12227]  ? resume_store+0x14e/0x4f0
[ 1139.585669][T12227]  kstrndup+0x80/0x160
[ 1139.585706][T12227]  resume_store+0x14e/0x4f0
[ 1139.585734][T12227]  ? sysfs_file_kobj+0x1a/0x230
[ 1139.585769][T12227]  ? __pfx_resume_store+0x10/0x10
[ 1139.585796][T12227]  ? sysfs_file_kobj+0x1a/0x230
[ 1139.585828][T12227]  ? sysfs_file_kobj+0x1a/0x230
[ 1139.585857][T12227]  ? sysfs_file_kobj+0x1a/0x230
[ 1139.585891][T12227]  ? sysfs_file_kobj+0x1e4/0x230
[ 1139.585925][T12227]  ? sysfs_kf_write+0x166/0x260
[ 1139.585963][T12227]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1139.586002][T12227]  kernfs_fop_write_iter+0x3b0/0x540
[ 1139.586041][T12227]  vfs_write+0x629/0xba0
[ 1139.586079][T12227]  ? __pfx_vfs_write+0x10/0x10
[ 1139.586110][T12227]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1139.586145][T12227]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1139.586183][T12227]  ? mutex_lock_nested+0x152/0x1d0
[ 1139.586209][T12227]  ? fdget_pos+0x252/0x320
[ 1139.586243][T12227]  ksys_write+0x156/0x270
[ 1139.586272][T12227]  ? __pfx_ksys_write+0x10/0x10
[ 1139.586308][T12227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1139.586334][T12227]  do_syscall_64+0x174/0x580
[ 1139.586367][T12227]  ? trace_irq_disable+0x3b/0x140
[ 1139.586392][T12227]  ? clear_bhb_loop+0x40/0x90
[ 1139.586421][T12227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1139.586444][T12227] RIP: 0033:0x7f8f1ef8ce59
[ 1139.586465][T12227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1139.586484][T12227] RSP: 002b:00007f8f1d1e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1139.586509][T12227] RAX: ffffffffffffffda RBX: 00007f8f1f205fa0 RCX: 00007f8f1ef8ce59
[ 1139.586527][T12227] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003
[ 1139.586542][T12227] RBP: 00007f8f1d1e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1139.586556][T12227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1139.586571][T12227] R13: 00007f8f1f206038 R14: 00007f8f1f205fa0 R15: 00007ffc70cad4c8
[ 1139.586610][T12227]  </TASK>
[ 1139.633679][ T8711] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1139.763632][ T8711] usb 1-1: device descriptor read/64, error -71
[ 1140.996537][ T8711] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1141.147597][ T8711] usb 1-1: device descriptor read/64, error -71
[ 1143.080170][ T8711] usb usb1-port1: attempt power cycle
[ 1144.147554][T12241] binder: 12240:12241 ioctl 4018620d 0 returned -22
[ 1144.542418][T12116] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1144.585163][T12116] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1144.586336][T12116] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1144.627598][T12116] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1144.628652][T12116] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1144.680794][T12116] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1144.693860][T12116] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1144.722654][T12116] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1144.949848][T12116] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1145.020249][T12116] 8021q: adding VLAN 0 to HW filter on device team0
[ 1145.080564][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1145.080776][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1145.100419][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1145.100556][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1145.104317][ T8711] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1145.245522][ T6406] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1145.416127][T12258] bridge_slave_1: default FDB implementation only supports local addresses
[ 1145.577691][ T8711] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1145.577777][ T8711] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1145.577836][ T8711] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1145.578237][ T8711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1145.578299][ T8711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1145.888777][ T8711] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1145.888818][ T8711] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1145.888839][ T8711] usb 5-1: Product: syz
[ 1145.888854][ T8711] usb 5-1: Manufacturer: syz
[ 1145.974091][ T8711] cdc_wdm 5-1:1.0: skipping garbage
[ 1145.974115][ T8711] cdc_wdm 5-1:1.0: skipping garbage
[ 1145.994774][ T8711] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1145.994797][ T8711] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1146.203713][ T6406] usb 6-1: Using ep0 maxpacket: 16
[ 1146.223437][ T6406] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1146.223641][ T6406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1146.235253][ T6406] usb 6-1: config 0 descriptor??
[ 1146.266078][ T6406] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1147.130889][T12260] usb 5-1: USB disconnect, device number 71
[ 1147.398673][T12116] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1147.553733][T12268] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1369'.
[ 1147.781235][T12116] veth0_vlan: entered promiscuous mode
[ 1147.799566][T12116] veth1_vlan: entered promiscuous mode
[ 1147.963212][T12289] FAULT_INJECTION: forcing a failure.
[ 1147.963212][T12289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1147.963258][T12289] CPU: 0 UID: 0 PID: 12289 Comm: syz.4.1380 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1147.963287][T12289] Tainted: [L]=SOFTLOCKUP
[ 1147.963295][T12289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1147.963308][T12289] Call Trace:
[ 1147.963317][T12289]  <TASK>
[ 1147.963326][T12289]  dump_stack_lvl+0xe8/0x150
[ 1147.963355][T12289]  should_fail_ex+0x46b/0x600
[ 1147.963390][T12289]  _copy_from_user+0x2d/0xb0
[ 1147.963411][T12289]  __sys_sendto+0x2bc/0x710
[ 1147.963447][T12289]  ? __pfx___sys_sendto+0x10/0x10
[ 1147.963501][T12289]  ? ksys_write+0x248/0x270
[ 1147.963529][T12289]  ? __pfx_ksys_write+0x10/0x10
[ 1147.963577][T12289]  __x64_sys_sendto+0xde/0x100
[ 1147.963610][T12289]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1147.963636][T12289]  do_syscall_64+0x174/0x580
[ 1147.963668][T12289]  ? trace_irq_disable+0x3b/0x140
[ 1147.963695][T12289]  ? clear_bhb_loop+0x40/0x90
[ 1147.963723][T12289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1147.963746][T12289] RIP: 0033:0x7f0a382cce59
[ 1147.963767][T12289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1147.963787][T12289] RSP: 002b:00007f0a36526028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1147.963822][T12289] RAX: ffffffffffffffda RBX: 00007f0a38545fa0 RCX: 00007f0a382cce59
[ 1147.963838][T12289] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000003
[ 1147.963853][T12289] RBP: 00007f0a36526090 R08: 0000200000000540 R09: 0000000000000014
[ 1147.963867][T12289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1147.963880][T12289] R13: 00007f0a38546038 R14: 00007f0a38545fa0 R15: 00007ffe70057e08
[ 1147.963913][T12289]  </TASK>
[ 1148.231661][T12116] veth0_macvtap: entered promiscuous mode
[ 1148.258816][T12116] veth1_macvtap: entered promiscuous mode
[ 1148.935801][T12116] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1148.940345][T12189] usb 6-1: USB disconnect, device number 4
[ 1149.035384][T12116] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1149.225499][  T154] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1149.226997][  T154] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1149.229155][  T154] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1149.231397][  T154] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1151.757623][ T5875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1151.757643][ T5875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1151.856363][ T5879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1151.856379][ T5879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1152.783851][ T5754] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 1152.943643][ T5754] usb 1-1: Using ep0 maxpacket: 16
[ 1152.945844][ T5754] usb 1-1: config 0 has an invalid interface number: 107 but max is 0
[ 1152.945872][ T5754] usb 1-1: config 0 has no interface number 0
[ 1152.945949][ T5754] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 102, changing to 10
[ 1152.945970][ T5754] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 24624, setting to 1024
[ 1152.948410][ T5754] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[ 1152.948444][ T5754] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 1152.948472][ T5754] usb 1-1: Product: syz
[ 1152.948483][ T5754] usb 1-1: Manufacturer: syz
[ 1152.948494][ T5754] usb 1-1: SerialNumber: syz
[ 1152.955107][ T5754] usb 1-1: config 0 descriptor??
[ 1153.028565][ T5754] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected
[ 1153.030359][ T5754] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81
[ 1153.053694][  T824] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[ 1153.076640][ T5754] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1
[ 1153.114186][ T5754] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[ 1153.143742][ T5754] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2
[ 1153.153422][ T5754] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[ 1153.205853][ T5754] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4
[ 1153.225609][  T824] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1153.231905][  T824] usb 9-1: config 8 has an invalid interface number: 109 but max is 0
[ 1153.231934][  T824] usb 9-1: config 8 has no interface number 0
[ 1153.232047][  T824] usb 9-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8
[ 1153.232079][  T824] usb 9-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8
[ 1153.232104][  T824] usb 9-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1153.307247][  T824] usb 9-1: string descriptor 0 read error: -22
[ 1153.307406][  T824] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29
[ 1153.307425][  T824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1153.410677][ T5754] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[ 1153.444288][T12315] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[ 1153.471901][ T5754] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6
[ 1153.492464][  T824] metro_usb 9-1:8.109: Metrologic USB to Serial converter detected
[ 1153.539827][  T824] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB4
[ 1153.601704][ T5754] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[ 1153.653751][ T5754] usb 1-1: USB disconnect, device number 72
[ 1153.833438][ T5754] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[ 1153.893658][  T824] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1153.922522][ T5754] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[ 1154.002183][ T5754] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[ 1154.051088][  T824] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1154.051120][  T824] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1154.051142][  T824] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1154.051194][  T824] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1154.051223][  T824] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1154.163319][  T824] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1154.163353][  T824] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1154.163376][  T824] usb 6-1: Product: syz
[ 1154.163392][  T824] usb 6-1: Manufacturer: syz
[ 1154.281045][  T824] cdc_wdm 6-1:1.0: skipping garbage
[ 1154.281069][  T824] cdc_wdm 6-1:1.0: skipping garbage
[ 1154.402506][  T824] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1154.402523][  T824] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1154.753686][ T5754] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[ 1154.754798][ T5754] keyspan 1-1:0.107: device disconnected
[ 1155.840843][ T8711] usb 6-1: USB disconnect, device number 5
[ 1155.918431][ T5650] usb 9-1: USB disconnect, device number 2
[ 1156.010074][ T5650] metro-usb ttyUSB4: Metrologic USB to Serial converter now disconnected from ttyUSB4
[ 1156.039006][ T5650] metro_usb 9-1:8.109: device disconnected
[ 1161.605879][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1400'.
[ 1161.605910][T12361] netlink: 'syz.8.1400': attribute type 30 has an invalid length.
[ 1161.747944][  T169] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1161.748333][  T169] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1161.749527][  T169] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1161.749571][  T169] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1162.046534][T12367] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1401'.
[ 1162.251980][T12371] netlink: 'syz.4.1401': attribute type 21 has an invalid length.
[ 1162.252005][T12371] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1401'.
[ 1162.252088][T12371] netlink: 'syz.4.1401': attribute type 5 has an invalid length.
[ 1162.252105][T12371] netlink: 'syz.4.1401': attribute type 6 has an invalid length.
[ 1162.252120][T12371] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1401'.
[ 1162.270187][T12371] IPVS: length: 153 != 24
[ 1164.634180][T12390] bridge1: entered promiscuous mode
[ 1164.634333][T12390] bridge1: entered allmulticast mode
[ 1165.430692][T12396] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1409'.
[ 1166.004688][T12405] FAULT_INJECTION: forcing a failure.
[ 1166.004688][T12405] name failslab, interval 1, probability 0, space 0, times 0
[ 1166.004754][T12405] CPU: 0 UID: 0 PID: 12405 Comm: syz.8.1408 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1166.004786][T12405] Tainted: [L]=SOFTLOCKUP
[ 1166.004795][T12405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1166.004810][T12405] Call Trace:
[ 1166.004819][T12405]  <TASK>
[ 1166.004830][T12405]  dump_stack_lvl+0xe8/0x150
[ 1166.004862][T12405]  should_fail_ex+0x46b/0x600
[ 1166.004902][T12405]  should_failslab+0xa8/0x100
[ 1166.004932][T12405]  __kmalloc_node_track_caller_noprof+0xe2/0x7e0
[ 1166.004962][T12405]  ? rcu_is_watching+0x15/0xb0
[ 1166.004995][T12405]  ? smb3_fs_context_parse_param+0x57dc/0x7df0
[ 1166.005025][T12405]  kstrdup+0x42/0x100
[ 1166.005060][T12405]  smb3_fs_context_parse_param+0x57dc/0x7df0
[ 1166.005089][T12405]  ? __pfx_bpf_lsm_fs_context_parse_param+0x10/0x10
[ 1166.005122][T12405]  ? __pfx_smb3_fs_context_parse_param+0x10/0x10
[ 1166.005152][T12405]  ? static_key_count+0x41/0x70
[ 1166.005188][T12405]  vfs_parse_fs_param+0x1a9/0x420
[ 1166.005216][T12405]  __se_sys_fsconfig+0x6cf/0x820
[ 1166.005254][T12405]  ? __pfx___se_sys_fsconfig+0x10/0x10
[ 1166.005282][T12405]  ? ksys_write+0x248/0x270
[ 1166.005312][T12405]  ? rcu_is_watching+0x15/0xb0
[ 1166.005353][T12405]  ? __x64_sys_fsconfig+0x20/0xc0
[ 1166.005383][T12405]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.005408][T12405]  do_syscall_64+0x174/0x580
[ 1166.005443][T12405]  ? clear_bhb_loop+0x40/0x90
[ 1166.005471][T12405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.005494][T12405] RIP: 0033:0x7fc85301ce59
[ 1166.005515][T12405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1166.005536][T12405] RSP: 002b:00007fc851234028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[ 1166.005567][T12405] RAX: ffffffffffffffda RBX: 00007fc853296180 RCX: 00007fc85301ce59
[ 1166.005584][T12405] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000005
[ 1166.005610][T12405] RBP: 00007fc851234090 R08: 0000000000000000 R09: 0000000000000000
[ 1166.005624][T12405] R10: 0000200000005fc0 R11: 0000000000000246 R12: 0000000000000001
[ 1166.005638][T12405] R13: 00007fc853296218 R14: 00007fc853296180 R15: 00007ffc0256efc8
[ 1166.005671][T12405]  </TASK>
[ 1166.006079][T12405] CIFS: VFS: OOM when copying UNC string
[ 1166.774243][T12401] netlink: 'syz.6.1410': attribute type 4 has an invalid length.
[ 1166.774269][T12401] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1410'.
[ 1166.998346][T12401] Invalid logical block size (8192)
[ 1169.193110][ T5754] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1169.783560][ T5754] usb 6-1: Using ep0 maxpacket: 32
[ 1169.785690][ T5754] usb 6-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config
[ 1169.785717][ T5754] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1169.788465][ T5754] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[ 1169.788490][ T5754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1169.788509][ T5754] usb 6-1: Product: syz
[ 1169.788524][ T5754] usb 6-1: Manufacturer: syz
[ 1169.788539][ T5754] usb 6-1: SerialNumber: syz
[ 1171.044168][    C0] raw-gadget.1 gadget.5: ignoring, device is not running
[ 1171.045468][ T5754] usb 6-1: can't set config #1, error -32
[ 1171.083702][ T5754] usb 6-1: USB disconnect, device number 6
[ 1171.213607][ T8711] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1171.377080][ T8711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1171.377110][ T8711] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1171.377132][ T8711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1171.377184][ T8711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1171.377220][ T8711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1171.379584][ T8711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1171.379605][ T8711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1171.379620][ T8711] usb 1-1: Product: syz
[ 1171.379631][ T8711] usb 1-1: Manufacturer: syz
[ 1171.488555][ T8711] cdc_wdm 1-1:1.0: skipping garbage
[ 1171.488579][ T8711] cdc_wdm 1-1:1.0: skipping garbage
[ 1171.506541][ T8711] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1171.506571][ T8711] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1171.792514][T12433] netlink: 'syz.6.1420': attribute type 2 has an invalid length.
[ 1171.792539][T12433] netlink: 'syz.6.1420': attribute type 2 has an invalid length.
[ 1172.155004][T12440] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1172.238329][T12441] Set syz0 is full, maxelem 0 reached
[ 1172.952635][T12450] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1425'.
[ 1172.992590][T12450] l2tp_ppp: sess 2/0: no socket in recv
[ 1173.235170][ T5650] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[ 1173.742283][T12455] program syz.4.1426 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1174.131018][ T8711] usb 1-1: USB disconnect, device number 73
[ 1174.159439][ T5650] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83
[ 1174.159464][ T5650] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1174.159479][ T5650] usb 6-1: Product: syz
[ 1174.159490][ T5650] usb 6-1: Manufacturer: syz
[ 1174.159501][ T5650] usb 6-1: SerialNumber: syz
[ 1174.263607][ T5650] usb 6-1: config 0 descriptor??
[ 1174.273343][ T5650] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[ 1174.785867][ T5650] gspca_m5602: Failed to find a sensor
[ 1174.785880][ T5650] ALi m5602 6-1:0.0: ALi m5602 webcam failed
[ 1174.810743][ T5650] usb 6-1: USB disconnect, device number 7
[ 1175.547489][T12460] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1429'.
[ 1175.847814][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1428'.
[ 1176.350426][T12476] openvswitch: netlink: Tunnel attr 78 out of range max 16
[ 1176.382518][T12476] support for cryptoloop has been removed.  Use dm-crypt instead.
[ 1176.382813][T12476] binder: 12471:12476 ioctl c0285840 200000000000 returned -22
[ 1177.294331][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.294402][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.808357][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1434'.
[ 1180.141509][T12500] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1180.182741][T12500] Set syz0 is full, maxelem 0 reached
[ 1184.498564][  T824] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1184.766283][  T824] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1184.766316][  T824] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1184.766338][  T824] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1184.766391][  T824] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1184.766420][  T824] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1184.768624][  T824] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1184.768652][  T824] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1184.768673][  T824] usb 1-1: Product: syz
[ 1184.768690][  T824] usb 1-1: Manufacturer: syz
[ 1184.862834][  T824] cdc_wdm 1-1:1.0: skipping garbage
[ 1184.862853][  T824] cdc_wdm 1-1:1.0: skipping garbage
[ 1184.876381][  T824] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1184.876403][  T824] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1185.047987][T12145] Bluetooth: hci4: unexpected event for opcode 0x204e
[ 1185.830096][  T824] usb 1-1: USB disconnect, device number 74
[ 1186.555459][T12545] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1449'.
[ 1186.603802][T12546] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1450'.
[ 1186.609210][T12544] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1442'.
[ 1186.663046][T12548] netlink: 'syz.8.1449': attribute type 21 has an invalid length.
[ 1186.663067][T12548] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1449'.
[ 1186.719806][T12548] netlink: 'syz.8.1449': attribute type 5 has an invalid length.
[ 1186.719828][T12548] netlink: 'syz.8.1449': attribute type 6 has an invalid length.
[ 1186.719843][T12548] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1449'.
[ 1186.784672][T12547] binder: 12540:12547 ioctl 4018620d 0 returned -22
[ 1186.786745][T12548] IPVS: length: 153 != 24
[ 1186.836578][T12551] binder: 12540:12551 ioctl c0306201 0 returned -14
[ 1187.023720][  T824] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1187.180885][  T824] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1187.180915][  T824] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1187.180935][  T824] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1187.180982][  T824] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1187.181008][  T824] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1187.183197][  T824] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1187.183225][  T824] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1187.183245][  T824] usb 1-1: Product: syz
[ 1187.183259][  T824] usb 1-1: Manufacturer: syz
[ 1187.274712][  T824] cdc_wdm 1-1:1.0: skipping garbage
[ 1187.274732][  T824] cdc_wdm 1-1:1.0: skipping garbage
[ 1187.298146][T12558] mmap: syz.5.1452 (12558) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1187.308298][  T824] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1187.308365][  T824] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1187.372349][T12558] netlink: 'syz.5.1452': attribute type 1 has an invalid length.
[ 1188.242787][T12567] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1188.286698][ T6406] usb 1-1: USB disconnect, device number 75
[ 1188.294559][T12562] program syz.4.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1188.317209][T12568] Set syz0 is full, maxelem 0 reached
[ 1188.943658][  T824] usb 5-1: new full-speed USB device number 72 using dummy_hcd
[ 1189.096216][  T824] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x34, changing to 0x4
[ 1189.098799][  T824] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 1189.098826][  T824] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 1189.098850][  T824] usb 5-1: Manufacturer: syz
[ 1189.098860][  T824] usb 5-1: SerialNumber: syz
[ 1190.675022][  T824] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[ 1190.718812][  T824] usb 5-1: USB disconnect, device number 72
[ 1191.853646][  T824] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1192.038433][  T824] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1192.038463][  T824] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1192.038484][  T824] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1192.038531][  T824] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1192.038558][  T824] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1192.040850][  T824] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1192.040879][  T824] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1192.040902][  T824] usb 5-1: Product: syz
[ 1192.040919][  T824] usb 5-1: Manufacturer: syz
[ 1192.151105][  T824] cdc_wdm 5-1:1.0: skipping garbage
[ 1192.151127][  T824] cdc_wdm 5-1:1.0: skipping garbage
[ 1192.172662][  T824] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1192.172686][  T824] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1192.973738][T12189] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[ 1194.460625][T12189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1194.460680][T12189] usb 1-1: config 0 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[ 1194.460709][T12189] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1194.460744][T12189] usb 1-1: New USB device found, idVendor=037d, idProduct=2ced, bcdDevice= 0.00
[ 1194.460767][T12189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1194.512924][T12189] usb 1-1: config 0 descriptor??
[ 1194.641654][    C0] cdc_wdm 5-1:1.0: Unexpected error -71
[ 1194.642378][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 1194.642573][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 1194.642805][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 1194.642825][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 1194.643209][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 1194.643230][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 1194.643540][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 1194.643567][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 1194.643812][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 1194.643833][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 1194.644069][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 1194.644093][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 1194.644376][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 1194.644398][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 1194.644627][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 1194.644648][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 1194.644878][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 1194.644899][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 1194.645123][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[ 1194.645140][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[ 1194.710311][ T8711] usb 5-1: USB disconnect, device number 73
[ 1194.710396][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1195.034254][T12189] usb 1-1: string descriptor 0 read error: -71
[ 1195.047868][T12189] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1195.763998][T12609] Set syz0 is full, maxelem 0 reached
[ 1195.899291][T12608] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1195.928717][T12189] usb 1-1: USB disconnect, device number 76
[ 1200.166621][T12145] Bluetooth: hci5: command 0x0406 tx timeout
[ 1200.773684][ T5780] usb 1-1: new full-speed USB device number 77 using dummy_hcd
[ 1200.903618][ T5780] usb 1-1: device descriptor read/64, error -71
[ 1201.234116][ T5780] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[ 1201.393638][ T5780] usb 1-1: device descriptor read/64, error -71
[ 1201.515342][ T5780] usb usb1-port1: attempt power cycle
[ 1202.763750][ T5780] usb 1-1: new full-speed USB device number 79 using dummy_hcd
[ 1202.794255][ T5780] usb 1-1: device descriptor read/8, error -71
[ 1203.063693][ T5780] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[ 1203.084371][ T5780] usb 1-1: device descriptor read/8, error -71
[ 1203.194014][ T5780] usb usb1-port1: unable to enumerate USB device
[ 1203.195546][T12631] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1477'.
[ 1204.907091][T12653] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1480'.
[ 1209.121169][ T5650] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[ 1209.378335][ T5650] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1209.378363][ T5650] usb 6-1: config 0 has no interface number 0
[ 1209.411317][ T5650] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 1209.411337][ T5650] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1209.411350][ T5650] usb 6-1: Product: syz
[ 1209.411359][ T5650] usb 6-1: Manufacturer: syz
[ 1209.411369][ T5650] usb 6-1: SerialNumber: syz
[ 1209.451778][ T5650] usb 6-1: config 0 descriptor??
[ 1209.487276][ T5650] usb 6-1: selecting invalid altsetting 1
[ 1209.528260][ T5650] dvb_ttusb_budget: ttusb_init_controller: error
[ 1209.528285][ T5650] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1209.665675][T12663] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1484'.
[ 1209.697315][ T9655] Bluetooth: hci5: unexpected subevent 0x0e length: 30 > 15
[ 1209.697341][ T9655] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[ 1209.940960][ T5650] DVB: Unable to find symbol stv0299_attach()
[ 1210.014246][ T5654] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1210.042933][ T5650] DVB: Unable to find symbol tda8083_attach()
[ 1210.042948][ T5650] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[ 1210.107492][ T5650] usb 6-1: USB disconnect, device number 8
[ 1211.365819][ T5654] usb 9-1: device descriptor read/64, error -71
[ 1211.655063][ T5654] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1211.783582][ T5654] usb 9-1: device descriptor read/64, error -71
[ 1211.900076][ T5654] usb usb9-port1: attempt power cycle
[ 1213.905586][ T5654] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1214.033360][ T5654] usb 9-1: device descriptor read/8, error -71
[ 1214.528948][T12687] : entered promiscuous mode
[ 1215.083857][T12698] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1491'.
[ 1215.200500][ T5654] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1215.230050][ T5654] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1215.230081][ T5654] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1215.230103][ T5654] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1215.230154][ T5654] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1215.230174][ T5654] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1215.232450][ T5654] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1215.232479][ T5654] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1215.232503][ T5654] usb 9-1: Product: syz
[ 1215.232514][ T5654] usb 9-1: Manufacturer: syz
[ 1215.310648][ T5654] cdc_wdm 9-1:1.0: skipping garbage
[ 1215.310703][ T5654] cdc_wdm 9-1:1.0: skipping garbage
[ 1215.336836][ T5654] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1215.336857][ T5654] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1217.716049][ T9655] Bluetooth: hci0: command 0x0406 tx timeout
[ 1217.937928][T11998] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1218.090578][ T5780] usb 9-1: USB disconnect, device number 6
[ 1218.143933][T11998] usb 6-1: Using ep0 maxpacket: 8
[ 1218.146853][T11998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1218.146887][T11998] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1218.146932][T11998] usb 6-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00
[ 1218.146957][T11998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1218.215321][T11998] usb 6-1: config 0 descriptor??
[ 1220.237560][T12738] FAULT_INJECTION: forcing a failure.
[ 1220.237560][T12738] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1220.237598][T12738] CPU: 1 UID: 0 PID: 12738 Comm: syz.4.1506 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1220.237628][T12738] Tainted: [L]=SOFTLOCKUP
[ 1220.237634][T12738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1220.237645][T12738] Call Trace:
[ 1220.237651][T12738]  <TASK>
[ 1220.237674][T12738]  dump_stack_lvl+0xe8/0x150
[ 1220.237706][T12738]  should_fail_ex+0x46b/0x600
[ 1220.237742][T12738]  strncpy_from_user+0x36/0x2b0
[ 1220.237774][T12738]  path_setxattrat+0x191/0x440
[ 1220.237813][T12738]  ? __pfx_path_setxattrat+0x10/0x10
[ 1220.237872][T12738]  ? ksys_write+0x248/0x270
[ 1220.237903][T12738]  ? __pfx_ksys_write+0x10/0x10
[ 1220.237933][T12738]  __x64_sys_setxattr+0xbc/0xe0
[ 1220.237956][T12738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1220.237981][T12738]  do_syscall_64+0x174/0x580
[ 1220.238004][T12738]  ? trace_irq_disable+0x3b/0x140
[ 1220.238042][T12738]  ? clear_bhb_loop+0x40/0x90
[ 1220.238070][T12738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1220.238093][T12738] RIP: 0033:0x7f0a382cce59
[ 1220.238113][T12738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1220.238130][T12738] RSP: 002b:00007f0a36526028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 1220.238154][T12738] RAX: ffffffffffffffda RBX: 00007f0a38545fa0 RCX: 00007f0a382cce59
[ 1220.238166][T12738] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000
[ 1220.238177][T12738] RBP: 00007f0a36526090 R08: 0000000000000001 R09: 0000000000000000
[ 1220.238201][T12738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1220.238216][T12738] R13: 00007f0a38546038 R14: 00007f0a38545fa0 R15: 00007ffe70057e08
[ 1220.238250][T12738]  </TASK>
[ 1220.633184][T11998] usbhid 6-1:0.0: can't add hid device: -71
[ 1220.633423][T11998] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1220.729662][T11998] usb 6-1: USB disconnect, device number 9
[ 1220.785260][ T5650] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1220.829960][T12745] netlink: 'syz.6.1509': attribute type 3 has an invalid length.
[ 1220.933731][ T5650] usb 9-1: Using ep0 maxpacket: 16
[ 1220.938420][ T5650] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1220.938448][ T5650] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1220.942528][ T5650] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1220.942558][ T5650] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1220.942580][ T5650] usb 9-1: Product: syz
[ 1220.942595][ T5650] usb 9-1: Manufacturer: syz
[ 1220.942611][ T5650] usb 9-1: SerialNumber: syz
[ 1221.024257][ T5650] usb 9-1: config 0 descriptor??
[ 1221.040213][ T5650] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1221.040254][ T5650] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[ 1221.082484][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'.
[ 1221.110028][T12752] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1221.434741][T12757] sg_write: data in/out 398303/786 bytes for SCSI command 0x0-- guessing data in;
[ 1221.434741][T12757]    program syz.6.1513 not setting count and/or reply_len properly
[ 1221.658164][ T5650] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 1221.692113][ T5650] em28xx 9-1:0.0: Config register raw data: 0x22
[ 1221.692135][ T5650] em28xx 9-1:0.0: I2S Audio (1 sample rate(s))
[ 1221.692150][ T5650] em28xx 9-1:0.0: No AC97 audio processor
[ 1223.477050][T12768] syzkaller0: entered promiscuous mode
[ 1223.477075][T12768] syzkaller0: entered allmulticast mode
[ 1223.504473][T11998] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 1223.613387][ T5780] usb 9-1: USB disconnect, device number 7
[ 1223.693909][T11998] usb 1-1: Using ep0 maxpacket: 32
[ 1223.696097][T11998] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[ 1223.696123][T11998] usb 1-1: config 0 has no interface number 0
[ 1223.696164][T11998] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1223.696187][T11998] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1223.696204][T11998] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1223.696240][T11998] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1223.696258][T11998] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1223.696276][T11998] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1223.696292][T11998] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1223.696312][T11998] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1223.698691][T11998] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1223.698720][T11998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1223.698741][T11998] usb 1-1: Product: syz
[ 1223.698757][T11998] usb 1-1: Manufacturer: syz
[ 1223.698776][T11998] usb 1-1: SerialNumber: syz
[ 1223.744667][T11998] usb 1-1: config 0 descriptor??
[ 1223.790279][T12765] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1223.874615][T11998] usb 1-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[ 1223.874642][T11998] usb 1-1: couldn't find an output bulk endpoint. Bailing out.
[ 1224.067074][T12765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1224.067697][T12765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1224.073145][T12765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1224.076024][T12765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1224.079617][T12765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1224.081115][T12765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1224.097510][T12765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1224.099032][T12765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1224.114547][T12765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1224.124682][T12765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1225.073054][ T5780] usb 1-1: USB disconnect, device number 81
[ 1225.208686][T12781] program syz.6.1520 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1225.359388][T12785] snd_dummy snd_dummy.0: control 5:8:12:syz1:1301 is already present
[ 1225.463739][ T8711] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1225.605301][ T8711] usb 9-1: device descriptor read/64, error -71
[ 1225.873711][ T8711] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1226.013641][ T8711] usb 9-1: device descriptor read/64, error -71
[ 1226.135707][ T8711] usb usb9-port1: attempt power cycle
[ 1227.793685][ T8711] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1227.861008][ T8711] usb 9-1: device descriptor read/8, error -71
[ 1228.943661][T12792] FAULT_INJECTION: forcing a failure.
[ 1228.943661][T12792] name failslab, interval 1, probability 0, space 0, times 0
[ 1228.943702][T12792] CPU: 1 UID: 0 PID: 12792 Comm: syz.4.1523 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1228.943730][T12792] Tainted: [L]=SOFTLOCKUP
[ 1228.943738][T12792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1228.943763][T12792] Call Trace:
[ 1228.943771][T12792]  <TASK>
[ 1228.943781][T12792]  dump_stack_lvl+0xe8/0x150
[ 1228.943809][T12792]  should_fail_ex+0x46b/0x600
[ 1228.943841][T12792]  should_failslab+0xa8/0x100
[ 1228.943881][T12792]  kmem_cache_alloc_noprof+0x87/0x680
[ 1228.943906][T12792]  ? do_getname+0x2e/0x250
[ 1228.943934][T12792]  ? lock_vma_under_rcu+0x45a/0x500
[ 1228.943964][T12792]  do_getname+0x2e/0x250
[ 1228.943990][T12792]  ? getname_flags+0x11/0x20
[ 1228.944021][T12792]  do_sys_openat2+0xca/0x200
[ 1228.944058][T12792]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1228.944098][T12792]  ? do_user_addr_fault+0xc6f/0x1340
[ 1228.944124][T12792]  __x64_sys_openat+0x138/0x170
[ 1228.944148][T12792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1228.944169][T12792]  do_syscall_64+0x174/0x580
[ 1228.944201][T12792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1228.944223][T12792]  ? clear_bhb_loop+0x40/0x90
[ 1228.944249][T12792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1228.944270][T12792] RIP: 0033:0x7f0a3828d68e
[ 1228.944289][T12792] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1228.944308][T12792] RSP: 002b:00007f0a36525b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1228.944330][T12792] RAX: ffffffffffffffda RBX: 00007f0a365266c0 RCX: 00007f0a3828d68e
[ 1228.944347][T12792] RDX: 0000000000000000 RSI: 00007f0a36525c00 RDI: ffffffffffffff9c
[ 1228.944361][T12792] RBP: 00007f0a36525c00 R08: 0000000000000000 R09: 0000000000000000
[ 1228.944376][T12792] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1228.944390][T12792] R13: 00007f0a38546038 R14: 00007f0a38545fa0 R15: 00007ffe70057e08
[ 1228.944439][T12792]  </TASK>
[ 1229.677047][ T5754] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1229.885255][ T5754] usb 1-1: Using ep0 maxpacket: 32
[ 1229.904760][ T5754] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[ 1229.904790][ T5754] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1229.904820][ T5754] usb 1-1: config 0 has no interface number 0
[ 1229.904869][ T5754] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1229.904895][ T5754] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1229.904921][ T5754] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1229.904949][ T5754] usb 1-1: config 0 interface 196 has no altsetting 0
[ 1229.907938][ T5754] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[ 1229.907967][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1229.907989][ T5754] usb 1-1: Product: syz
[ 1229.908005][ T5754] usb 1-1: Manufacturer: syz
[ 1229.908021][ T5754] usb 1-1: SerialNumber: syz
[ 1229.974477][ T5754] usb 1-1: config 0 descriptor??
[ 1230.194614][T12801] netlink: 'syz.0.1525': attribute type 10 has an invalid length.
[ 1234.815375][T12811] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1527'.
[ 1234.850626][T12815] netlink: 'syz.5.1527': attribute type 21 has an invalid length.
[ 1234.850651][T12815] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1527'.
[ 1234.905561][T12808] IPVS: length: 153 != 24
[ 1235.485058][ T5754] ipheth 1-1:0.196: Unable to find endpoints
[ 1235.791641][T12801] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1235.801783][T12801] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[ 1235.802833][T12815] netlink: 'syz.5.1527': attribute type 5 has an invalid length.
[ 1235.802856][T12815] netlink: 'syz.5.1527': attribute type 6 has an invalid length.
[ 1235.802870][T12815] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1527'.
[ 1235.917077][    T9] usb 1-1: USB disconnect, device number 82
[ 1236.322363][T12821] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1530'.
[ 1236.322389][T12821] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1530'.
[ 1238.269132][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1531'.
[ 1238.746458][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.746534][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.973604][ T5650] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1239.038004][T12835] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1533'.
[ 1239.038045][T12835] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1533'.
[ 1239.143597][ T5650] usb 6-1: Using ep0 maxpacket: 32
[ 1239.147676][ T5650] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1239.147734][ T5650] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1239.147764][ T5650] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1239.147794][ T5650] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1239.176676][ T5650] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1239.176708][ T5650] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1239.176730][ T5650] usb 6-1: Product: syz
[ 1239.176746][ T5650] usb 6-1: Manufacturer: syz
[ 1239.176763][ T5650] usb 6-1: SerialNumber: syz
[ 1239.287792][    C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1239.432905][ T5650] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input41
[ 1239.545474][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1534'.
[ 1239.605443][ T5650] imon:send_packet: packet tx failed (-71)
[ 1239.623543][ T5650] imon 6-1:155.0: panel buttons/knobs setup failed
[ 1239.623566][ T5650] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1239.623578][ T5650]  (id 0x00)
[ 1239.850507][   T36] kauditd_printk_skb: 63 callbacks suppressed
[ 1239.850527][   T36] audit: type=1326 audit(1780592735.878:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12843 comm="syz.5.1536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39f1cce59 code=0x7ffc0000
[ 1239.850586][   T36] audit: type=1326 audit(1780592735.878:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12843 comm="syz.5.1536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39f1cce59 code=0x7ffc0000
[ 1239.850636][   T36] audit: type=1326 audit(1780592735.878:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12843 comm="syz.5.1536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39f1cce59 code=0x7ffc0000
[ 1239.851768][   T36] audit: type=1326 audit(1780592735.878:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12843 comm="syz.5.1536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb39f1cce59 code=0x7ffc0000
[ 1239.851833][   T36] audit: type=1326 audit(1780592735.878:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12843 comm="syz.5.1536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39f1cce59 code=0x7ffc0000
[ 1239.852659][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1537'.
[ 1239.893492][   T36] audit: type=1326 audit(1780592735.898:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12843 comm="syz.5.1536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39f1cce59 code=0x7ffc0000
[ 1239.902602][   T36] audit: type=1326 audit(1780592735.898:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12843 comm="syz.5.1536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb39f1cce59 code=0x7ffc0000
[ 1239.902664][   T36] audit: type=1326 audit(1780592735.928:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12843 comm="syz.5.1536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39f1cce59 code=0x7ffc0000
[ 1239.902712][   T36] audit: type=1326 audit(1780592735.928:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12843 comm="syz.5.1536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39f1cce59 code=0x7ffc0000
[ 1239.927450][   T36] audit: type=1326 audit(1780592735.898:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12843 comm="syz.5.1536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39f1cce59 code=0x7ffc0000
[ 1240.043595][ T5650] rc_core: IR keymap rc-imon-pad not found
[ 1240.043618][ T5650] Registered IR keymap rc-empty
[ 1240.043734][ T5650] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1240.113565][ T5650] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1240.196843][ T5650] imon:send_packet: packet tx failed (-71)
[ 1240.213631][ T5650] imon 6-1:155.0: remote input dev register failed
[ 1240.213823][ T5650] imon 6-1:155.0: imon_init_intf0: rc device setup failed
[ 1241.717249][ T5650] imon 6-1:155.0: unable to initialize intf0, err 0
[ 1241.717274][ T5650] imon:imon_probe: failed to initialize context!
[ 1241.717288][ T5650] imon 6-1:155.0: unable to register, err -19
[ 1241.761154][T12831] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1241.762497][ T5650] usb 6-1: USB disconnect, device number 10
[ 1243.393718][ T5650] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1243.773855][ T5650] usb 1-1: Using ep0 maxpacket: 8
[ 1244.113950][ T5650] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1244.380184][ T5650] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1244.380248][ T5650] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1245.873702][ T5650] usb 1-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40
[ 1245.873743][ T5650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1245.873806][ T5650] usb 1-1: Product: syz
[ 1245.873823][ T5650] usb 1-1: Manufacturer: syz
[ 1245.873884][ T5650] usb 1-1: SerialNumber: syz
[ 1246.131443][ T5650] usb 1-1: can't set config #1, error -71
[ 1246.152835][ T5650] usb 1-1: USB disconnect, device number 83
[ 1246.293750][    T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1246.320691][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1550'.
[ 1246.602075][    T9] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1246.602105][    T9] usb 5-1: can't read configurations, error -71
[ 1247.039794][T12906] program syz.6.1553 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1247.531354][   T36] kauditd_printk_skb: 115 callbacks suppressed
[ 1247.531373][   T36] audit: type=1326 audit(1780592743.558:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12909 comm="syz.0.1551" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1247.534886][   T36] audit: type=1326 audit(1780592743.558:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12909 comm="syz.0.1551" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1247.535011][   T36] audit: type=1326 audit(1780592743.568:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12909 comm="syz.0.1551" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1247.538093][   T36] audit: type=1326 audit(1780592743.568:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12909 comm="syz.0.1551" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1247.555210][   T36] audit: type=1326 audit(1780592743.578:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12909 comm="syz.0.1551" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1247.560129][   T36] audit: type=1326 audit(1780592743.588:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12909 comm="syz.0.1551" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1247.588023][   T36] audit: type=1326 audit(1780592743.588:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12909 comm="syz.0.1551" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1247.588089][   T36] audit: type=1326 audit(1780592743.598:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12909 comm="syz.0.1551" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1247.588139][   T36] audit: type=1326 audit(1780592743.598:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12909 comm="syz.0.1551" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1247.588187][   T36] audit: type=1326 audit(1780592743.598:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12909 comm="syz.0.1551" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e20ce59 code=0x7ffc0000
[ 1247.638145][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1554'.
[ 1249.139026][T12934] geneve2: entered promiscuous mode
[ 1254.843743][T11542] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1254.999135][T11542] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1254.999165][T11542] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1254.999187][T11542] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1254.999240][T11542] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1254.999269][T11542] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1255.001529][T11542] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1255.001560][T11542] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1255.001583][T11542] usb 6-1: Product: syz
[ 1255.001599][T11542] usb 6-1: Manufacturer: syz
[ 1255.056432][T11542] cdc_wdm 6-1:1.0: skipping garbage
[ 1255.056470][T11542] cdc_wdm 6-1:1.0: skipping garbage
[ 1255.070229][T11542] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1255.070252][T11542] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1255.653061][   T36] kauditd_printk_skb: 109 callbacks suppressed
[ 1255.653081][   T36] audit: type=1326 audit(1780592751.678:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12962 comm="syz.6.1569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8ce59 code=0x7ffc0000
[ 1255.685480][   T36] audit: type=1326 audit(1780592751.678:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12962 comm="syz.6.1569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8ce59 code=0x7ffc0000
[ 1255.685551][   T36] audit: type=1326 audit(1780592751.698:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12962 comm="syz.6.1569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f1ef8ce59 code=0x7ffc0000
[ 1255.687028][   T36] audit: type=1326 audit(1780592751.718:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12962 comm="syz.6.1569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8ce59 code=0x7ffc0000
[ 1255.687853][   T36] audit: type=1326 audit(1780592751.718:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12962 comm="syz.6.1569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8ce59 code=0x7ffc0000
[ 1255.688010][   T36] audit: type=1326 audit(1780592751.718:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12962 comm="syz.6.1569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8ce59 code=0x7ffc0000
[ 1255.688352][   T36] audit: type=1326 audit(1780592751.718:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12962 comm="syz.6.1569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8ce59 code=0x7ffc0000
[ 1255.688603][   T36] audit: type=1326 audit(1780592751.718:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12962 comm="syz.6.1569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8ce59 code=0x7ffc0000
[ 1255.688790][   T36] audit: type=1326 audit(1780592751.718:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12962 comm="syz.6.1569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8f1ef8ce59 code=0x7ffc0000
[ 1255.689081][   T36] audit: type=1326 audit(1780592751.718:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12962 comm="syz.6.1569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8ce59 code=0x7ffc0000
[ 1255.809640][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1568'.
[ 1256.702911][T11542] usb 6-1: USB disconnect, device number 11
[ 1258.481541][T12979] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1571'.
[ 1258.529438][T12979] l2tp_ppp: sess 2/0: no socket in recv
[ 1264.535551][   T37] INFO: task syz.7.1290:12003 blocked for more than 145 seconds.
[ 1264.535580][   T37]       Tainted: G             L      syzkaller #0
[ 1264.535593][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1264.535604][   T37] task:syz.7.1290      state:D stack:26408 pid:12003 tgid:12002 ppid:11871  task_flags:0x400140 flags:0x00080002
[ 1264.535676][   T37] Call Trace:
[ 1264.535685][   T37]  <TASK>
[ 1264.535698][   T37]  __schedule+0x16ec/0x5620
[ 1265.088529][   T37]  ? __pfx_stack_trace_save+0x10/0x10
[ 1265.088573][   T37]  ? look_up_lock_class+0x57/0x110
[ 1265.088611][   T37]  ? __pfx___schedule+0x10/0x10
[ 1265.088652][   T37]  ? schedule+0x90/0x360
[ 1265.088687][   T37]  schedule+0x164/0x360
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe)
[ 1265.088720][   T37]  schedule_timeout+0xc3/0x2c0
[ 1265.088747][   T37]  ? __lock_acquire+0x6b5/0x2cf0
[ 1265.088780][   T37]  ? __pfx_schedule_timeout+0x10/0x10
[ 1265.088812][   T37]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1265.088849][   T37]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1265.088880][   T37]  ? wait_for_completion+0x274/0x5e0
[ 1265.172692][   T37]  wait_for_completion+0x2cc/0x5e0
[ 1265.172749][   T37]  ? __pfx_wait_for_completion+0x10/0x10
[ 1265.172798][   T37]  ? __flush_work+0x104/0xda0
[ 1265.172831][   T37]  __flush_work+0x9e0/0xda0
[ 1265.172857][   T37]  ? __flush_work+0x104/0xda0
[ 1265.172890][   T37]  ? __pfx___flush_work+0x10/0x10
[ 1265.172919][   T37]  ? __pfx_wq_barrier_func+0x10/0x10
[ 1265.172966][   T37]  ? flush_work+0xd/0x30
[ 1265.172996][   T37]  p9_fd_close+0x226/0x400
[ 1265.173033][   T37]  p9_client_create+0x6b4/0xcc0
[ 1265.173067][   T37]  ? __pfx_p9_client_create+0x10/0x10
[ 1265.173114][   T37]  v9fs_session_init+0x46/0xe60
[ 1265.173143][   T37]  ? __kasan_kmalloc+0x93/0xb0
[ 1265.173170][   T37]  ? __kmalloc_cache_noprof+0x3a6/0x690
[ 1265.173196][   T37]  ? vfs_parse_monolithic_sep+0x290/0x360
[ 1265.173222][   T37]  ? v9fs_get_tree+0xaa/0xac0
[ 1265.173269][   T37]  v9fs_get_tree+0xbd/0xac0
[ 1265.173298][   T37]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 1265.173298][   T37]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 1265.173327][   T37]  ? __pfx_v9fs_get_tree+0x10/0x10
[ 1265.173355][   T37]  ? cap_capable+0x123/0x460
[ 1265.173401][   T37]  ? safesetid_security_capable+0xa9/0x1a0
[ 1265.173546][   T37]  vfs_get_tree+0x92/0x2a0
[ 1265.173580][   T37]  do_new_mount+0x341/0xd30
[ 1265.173614][   T37]  ? safesetid_security_capable+0xa9/0x1a0
[ 1265.173725][   T37]  ? __pfx_do_new_mount+0x10/0x10
[ 1265.173870][   T37]  ? ns_capable+0x89/0xe0
[ 1265.173938][   T37]  ? path_mount+0x690/0x10e0
[ 1265.174024][   T37]  ? user_path_at+0xd4/0x160
[ 1265.174101][   T37]  ? user_path_at+0xd4/0x160
[ 1265.174176][   T37]  __se_sys_mount+0x31d/0x420
[ 1265.185894][   T37]  ? __pfx___se_sys_mount+0x10/0x10
[ 1265.186221][   T37]  ? __x64_sys_mount+0x20/0xc0
[ 1265.186338][   T37]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1265.186415][   T37]  do_syscall_64+0x174/0x580
[ 1265.186508][   T37]  ? trace_irq_disable+0x3b/0x140
[ 1265.186583][   T37]  ? clear_bhb_loop+0x40/0x90
[ 1265.186659][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1265.186735][   T37] RIP: 0033:0x7f1678adce59
[ 1265.186795][   T37] RSP: 002b:00007f1676d2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1265.186847][   T37] RAX: ffffffffffffffda RBX: 00007f1678d55fa0 RCX: 00007f1678adce59
[ 1265.186864][   T37] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000
[ 1265.186889][   T37] RBP: 00007f1678b72d6f R08: 0000200000000040 R09: 0000000000000000
[ 1265.186932][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1265.186973][   T37] R13: 00007f1678d56038 R14: 00007f1678d55fa0 R15: 00007ffc67de7868
[ 1265.187078][   T37]  </TASK>
[ 1265.187176][   T37] 
[ 1265.187176][   T37] Showing all locks held in the system:
[ 1265.187201][   T37] 4 locks held by pr/legacy/17:
[ 1265.187245][   T37] 1 lock held by khungtaskd/37:
[ 1265.187284][   T37]  #0: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1265.194693][   T37] 7 locks held by kworker/u8:8/169:
[ 1265.194748][   T37] 2 locks held by kworker/1:2/823:
[ 1265.194782][   T37]  #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1265.195086][   T37]  #1: ffffc90005427c40 (p9_poll_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1265.195273][   T37] 6 locks held by kworker/u8:10/1030:
[ 1265.195303][   T37]  #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1265.195359][   T37]  #1: ffffc90005d3fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1265.195535][   T37]  #2: ffff8880206b2310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[ 1265.195737][   T37]  #3: ffff88801da9f920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[ 1265.195858][   T37]  #4: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1265.214518][   T37]  #5: ffff8880b88246c8 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x53/0x880
[ 1265.214736][   T37] 1 lock held by klogd/4955:
[ 1265.214787][   T37] 2 locks held by getty/5353:
[ 1265.214813][   T37]  #0: ffff888032d2c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1265.214921][   T37]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[ 1265.215102][   T37] 6 locks held by syz-executor/5623:
[ 1265.215145][   T37] 1 lock held by syz-executor/5641:
[ 1265.215179][   T37]  #0: ffff8880644e2480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1265.215337][   T37] 1 lock held by syz-executor/5644:
[ 1265.215370][   T37]  #0: ffff888063568480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1265.215517][   T37] 4 locks held by kworker/1:4/5650:
[ 1265.215562][   T37] 1 lock held by udevd/5839:
[ 1265.215595][   T37]  #0: ffff888037c8c480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1265.215741][   T37] 4 locks held by kworker/u8:9/5861:
[ 1265.215755][   T37] 7 locks held by kworker/u8:12/5873:
[ 1265.215768][   T37] 12 locks held by kworker/u8:14/5875:
[ 1265.215790][   T37] 5 locks held by kworker/u8:15/5876:
[ 1265.215843][   T37] 7 locks held by kworker/u8:17/8797:
[ 1265.215904][   T37] 1 lock held by syz-executor/11142:
[ 1265.215936][   T37]  #0: ffff88804bba2480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1265.240666][   T37] 5 locks held by kworker/u8:20/12140:
[ 1265.240711][   T37] 4 locks held by kworker/u8:22/12143:
[ 1265.240742][   T37] 5 locks held by kworker/u8:23/12144:
[ 1265.240795][   T37] 4 locks held by kworker/u8:24/12812:
[ 1265.240836][   T37] 5 locks held by syz.8.1579/12997:
[ 1265.240879][   T37] 
[ 1265.240894][   T37] =============================================
[ 1265.240894][   T37] 
[ 1265.240946][   T37] NMI backtrace for cpu 0
[ 1265.241002][   T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1265.241084][   T37] Tainted: [L]=SOFTLOCKUP
[ 1265.241106][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1265.241149][   T37] Call Trace:
[ 1265.241173][   T37]  <TASK>
[ 1265.241208][   T37]  dump_stack_lvl+0xe8/0x150
[ 1265.241287][   T37]  nmi_cpu_backtrace+0x274/0x2d0
[ 1265.241364][   T37]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1265.241442][   T37]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1265.241522][   T37]  sys_info+0x135/0x170
[ 1265.241592][   T37]  watchdog+0xfd3/0x1030
[ 1265.241712][   T37]  ? watchdog+0x1c9/0x1030
[ 1265.241791][   T37]  kthread+0x388/0x470
[ 1265.241882][   T37]  ? __pfx_watchdog+0x10/0x10
[ 1265.241940][   T37]  ? __pfx_kthread+0x10/0x10
[ 1265.242054][   T37]  ret_from_fork+0x514/0xb70
[ 1265.242135][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 1265.242161][   T37]  ? __switch_to+0xc79/0x1410
[ 1265.242245][   T37]  ? __pfx_kthread+0x10/0x10
[ 1265.242357][   T37]  ret_from_fork_asm+0x1a/0x30
[ 1265.242484][   T37]  </TASK>
[ 1265.242562][   T37] Sending NMI from CPU 0 to CPUs 1:
[ 1265.242619][    C1] NMI backtrace for cpu 1
[ 1265.242636][    C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1265.242669][    C1] Tainted: [L]=SOFTLOCKUP
[ 1265.242676][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1265.242688][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[ 1265.242713][    C1] Code: e8 6e 1e 90 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df 4b f7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a fe ea 05 cc 44 89 f9 80 e1 07
[ 1265.242729][    C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202
[ 1265.242750][    C1] RAX: 1ffffffff3361500 RBX: 00000000000003fd RCX: 0000000000000000
[ 1265.242763][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000
[ 1265.242774][    C1] RBP: ffffffff99b0abb0 R08: 0000000000000000 R09: 0000000000000000
[ 1265.242786][    C1] R10: dffffc0000000000 R11: ffffffff85344d50 R12: dffffc0000000000
[ 1265.242800][    C1] R13: 0000000000000000 R14: ffffffff99b0a920 R15: 0000000000000000
[ 1265.242813][    C1] FS:  0000000000000000(0000) GS:ffff888126283000(0000) knlGS:0000000000000000
[ 1265.242828][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1265.242840][    C1] CR2: 00007f8f1ef75fc0 CR3: 0000000086f3e000 CR4: 00000000003526f0
[ 1265.242857][    C1] Call Trace:
[ 1265.242864][    C1]  <TASK>
[ 1265.242872][    C1]  wait_for_lsr+0x1aa/0x2f0
[ 1265.242897][    C1]  serial8250_console_write+0x120d/0x1b90
[ 1265.242927][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[ 1265.242948][    C1]  ? console_flush_one_record+0xfa/0xb90
[ 1265.242975][    C1]  ? console_flush_one_record+0x48f/0xb90
[ 1265.243002][    C1]  console_flush_one_record+0x68b/0xb90
[ 1265.243029][    C1]  ? console_flush_one_record+0xfa/0xb90
[ 1265.243054][    C1]  ? __pfx_console_flush_one_record+0x10/0x10
[ 1265.243079][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1265.243121][    C1]  legacy_kthread_func+0x1b6/0x250
[ 1265.243161][    C1]  ? __pfx_legacy_kthread_func+0x10/0x10
[ 1265.243183][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1265.243207][    C1]  ? __kthread_parkme+0x7a/0x1f0
[ 1265.243233][    C1]  kthread+0x388/0x470
[ 1265.243256][    C1]  ? __pfx_legacy_kthread_func+0x10/0x10
[ 1265.243277][    C1]  ? __pfx_kthread+0x10/0x10
[ 1265.243301][    C1]  ret_from_fork+0x514/0xb70
[ 1265.243322][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1265.243342][    C1]  ? __switch_to+0xc79/0x1410
[ 1265.243369][    C1]  ? __pfx_kthread+0x10/0x10
[ 1265.243393][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1265.243424][    C1]  </TASK>
[ 1265.266497][   T37] Kernel panic - not syncing: hung_task: blocked tasks
[ 1265.266569][   T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1265.266655][   T37] Tainted: [L]=SOFTLOCKUP
[ 1265.266677][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1265.266710][   T37] Call Trace:
[ 1265.266744][   T37]  <TASK>
[ 1265.266767][   T37]  vpanic+0x56c/0xa60
[ 1265.266852][   T37]  ? __pfx___schedule+0x10/0x10
[ 1265.266935][   T37]  ? __pfx_vpanic+0x10/0x10
[ 1265.267042][   T37]  panic+0xc5/0xd0
[ 1265.267124][   T37]  ? __pfx_panic+0x10/0x10
[ 1265.267192][   T37]  ? preempt_schedule_thunk+0x16/0x30
[ 1265.267303][   T37]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1265.267409][   T37]  watchdog+0x102c/0x1030
[ 1265.267503][   T37]  ? watchdog+0x1c9/0x1030
[ 1265.267580][   T37]  kthread+0x388/0x470
[ 1265.267665][   T37]  ? __pfx_watchdog+0x10/0x10
[ 1265.267721][   T37]  ? __pfx_kthread+0x10/0x10
[ 1265.267804][   T37]  ret_from_fork+0x514/0xb70
[ 1265.267879][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 1265.267943][   T37]  ? __switch_to+0xc79/0x1410
[ 1265.268041][   T37]  ? __pfx_kthread+0x10/0x10
[ 1265.268137][   T37]  ret_from_fork_asm+0x1a/0x30
[ 1265.268244][   T37]  </TASK>
[ 1265.268836][   T37] Kernel Offset: disabled