last executing test programs:

2m33.602934057s ago: executing program 3 (id=373):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2ac, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x258, 0x2, [@TCA_BASIC_EMATCHES={0x1dc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_META={0x84, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="66c51b842c"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe746a", @TCF_META_TYPE_VAR="79ba4a", @TCF_META_TYPE_VAR="116e55", @TCF_META_TYPE_VAR="b2", @TCF_META_TYPE_VAR="e5f5e663"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x130, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x59, 0x3, 0xffff}, {0xb, 0xfb95, 0x9, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x40}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3d0, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1d21, 0x8, 0x8}, {0xffffffffffffffff}}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x8993c776dea30184}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_META={0x94, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="12", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="084aa8abe3", @TCF_META_TYPE_VAR="63e44c0dd16dc11fa2", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="add194"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x9}, {0x4, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="487a5371d491fc", @TCF_META_TYPE_VAR="cda4e5cd6f4f25", @TCF_META_TYPE_VAR="68183d", @TCF_META_TYPE_VAR="1a29cf222c57ef5b", @TCF_META_TYPE_VAR="bc", @TCF_META_TYPE_VAR=';A', @TCF_META_TYPE_VAR="f736d353f4d08315b2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0xf3}, {0x2, 0x10, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x38, 0x2}, {0x3, 0xfd, 0x2}}}]}}]}]}, @TCA_BASIC_ACT={0x78, 0x3, [@m_connmark={0x74, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x42, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2m33.098189858s ago: executing program 3 (id=375):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x121881, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$ppp(0xffffff9c, &(0x7f0000000200), 0x18000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000900)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000840)
shutdown(r4, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x100}, 0x8)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x293, 0x0, 0x80000000}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, <r8=>r2, 0x2})
lseek(r8, 0x8, 0x2)
getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000940)={'mangle\x00', 0x1000, "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"}, &(0x7f00000001c0)=0x1024)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000040)={0x20000001})

2m31.537654124s ago: executing program 3 (id=381):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8)
sendto$inet6(r5, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)

2m30.469804688s ago: executing program 3 (id=385):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2ac, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x258, 0x2, [@TCA_BASIC_EMATCHES={0x1dc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_META={0x84, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="66c51b842c"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe746a", @TCF_META_TYPE_VAR="79ba4a", @TCF_META_TYPE_VAR="116e55", @TCF_META_TYPE_VAR="b2", @TCF_META_TYPE_VAR="e5f5e663"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x130, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x59, 0x3, 0xffff}, {0xb, 0xfb95, 0x9, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x40}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3d0, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1d21, 0x8, 0x8}, {0xffffffffffffffff}}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x8993c776dea30184}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_META={0x94, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="12", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="084aa8abe3", @TCF_META_TYPE_VAR="63e44c0dd16dc11fa2", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="add194"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x9}, {0x4, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="487a5371d491fc", @TCF_META_TYPE_VAR="cda4e5cd6f4f25", @TCF_META_TYPE_VAR="68183d", @TCF_META_TYPE_VAR="1a29cf222c57ef5b", @TCF_META_TYPE_VAR="bc", @TCF_META_TYPE_VAR=';A', @TCF_META_TYPE_VAR="f736d353f4d08315b2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0xf3}, {0x2, 0x10, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x38, 0x2}, {0x3, 0xfd, 0x2}}}]}}]}]}, @TCA_BASIC_ACT={0x78, 0x3, [@m_connmark={0x74, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x42, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2m30.105147854s ago: executing program 3 (id=387):
r0 = syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, 0x0, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1010000, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0006f309f1723aab4e43b0a2b5231b977c697eddd457771fb1baa94761af34f2bb283bad52ac0aac01f4144149e90c3cb36fdc6e5c94c8d09004d794ccaff189d265ed6bb1be2353dee823adf0c71c186c1ce99bde5ddc0bf97e3b3dd3564ecf58f876ff73ddcef691d68cf76508ede8222464b8188dba01df203ad18fac6fc9d9974c6b011e41b484aee4ec82e4b1"])
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@multicast2, @in6=@local, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, {0x8000, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb4}}, 0x40)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5c}, 0x6e6bbb}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
move_mount(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
execveat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000240)='&{@\xcd}$.\x00']}, &(0x7f0000000340), 0x17c74bcb68538af3)
connect$can_bcm(r5, &(0x7f00000000c0), 0x10)
mprotect(&(0x7f0000fac000/0x3000)=nil, 0x3000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000540)='fou\x00')
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="52f48785eefa1f9d219c07e76705e9e05242bc69fccfea2521744eb4c2fb470e3597e043c7bcc1d010ed80c60ab23bf1bf9208fd9c9a1ace", 0x38}, {&(0x7f00000004c0)="89", 0x1}], 0x2}}], 0x2, 0x4)

2m29.903544186s ago: executing program 3 (id=388):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400}, &(0x7f0000000340), &(0x7f0000000280))
io_uring_enter(r0, 0xe90, 0x5710, 0x18, 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x5, 0x4)
sendto$inet6(r4, &(0x7f0000000480)='\b', 0x1, 0x20040012, &(0x7f00000000c0)={0xa, 0x4e22, 0x27b6a97, @local, 0x9}, 0x1c)
getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001200)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080000000000800000000000000080000e6000000000300000000000000070000010000000000000003000000000061"]}, @subvolid=0x8})
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c002280340000800800030000000000080005000000000008000200000000000800030000000000080002000000000008000400000000004400008008000400000000000800070000000000080006000000000008000500000000000800010000000000080002"], 0xc0}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x12c, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe01}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff001}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x91d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x12c}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r5}, 0x68)
close(0x3)

2m14.694289691s ago: executing program 32 (id=388):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400}, &(0x7f0000000340), &(0x7f0000000280))
io_uring_enter(r0, 0xe90, 0x5710, 0x18, 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x5, 0x4)
sendto$inet6(r4, &(0x7f0000000480)='\b', 0x1, 0x20040012, &(0x7f00000000c0)={0xa, 0x4e22, 0x27b6a97, @local, 0x9}, 0x1c)
getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001200)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080000000000800000000000000080000e6000000000300000000000000070000010000000000000003000000000061"]}, @subvolid=0x8})
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c002280340000800800030000000000080005000000000008000200000000000800030000000000080002000000000008000400000000004400008008000400000000000800070000000000080006000000000008000500000000000800010000000000080002"], 0xc0}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x12c, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe01}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff001}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x91d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x12c}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r5}, 0x68)
close(0x3)

10.344534223s ago: executing program 5 (id=1012):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, 0x0, 0x0)
timer_gettime(0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000400)=[{{&(0x7f0000000200)=@rc={0x1f, @none}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000008c0)=""/217, 0xd9}, {&(0x7f00000009c0)=""/101, 0x65}], 0x3, &(0x7f0000000a40)=""/253, 0xfd}, 0x7}], 0x1, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9ab74000)
r5 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x2, 0x1187, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xa2, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0xd}})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00')
lseek(0xffffffffffffffff, 0x36, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f0000001440)=@vmx={0x0, 0x0, 0x2080, {0x30000, 0x0, {}, 0x0, 0x9}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000faff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ae00"}})
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000800020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002007000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0)

7.196525428s ago: executing program 1 (id=1032):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231b06e53f27010000002a900683749e821c0b8b9236590b09007a15a76c71950a0a923d77d4004b9b039e607df2143199dc699be58b907b30b214a2b4326e30a10882a0c4ef7d45863cd72100e799b7cc725ca58c8608677cd4d8d8805aa349976a9f86c4759cc7bcab0442b48a"], 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})

6.951572752s ago: executing program 5 (id=1033):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004)
socket$inet6(0xa, 0x3, 0x88)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x40000, 0xfffffe0000000003, 0xfa11, 0xfffffffe}, 0x0)
syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0)
close(0xffffffffffffffff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82a540, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x14, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
getpid()
capset(&(0x7f0000000100)={0x20071026}, &(0x7f00000001c0)={0x0, 0x1000, 0x0, 0x81, 0x8, 0x1})
r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x10, r4)
ptrace$peeksig(0x4209, r4, &(0x7f0000000140)={0x2}, 0x0)
setpriority(0x1, r4, 0x6)
r5 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)

6.638737021s ago: executing program 2 (id=1034):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = accept4(r0, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000180)=0x80, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'})

5.71961018s ago: executing program 4 (id=1037):
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x20, 0x20, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x24, 0x0, @void}}}}}}}, 0x0)

5.682328813s ago: executing program 2 (id=1038):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2ac, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x258, 0x2, [@TCA_BASIC_EMATCHES={0x1dc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_META={0x84, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="66c51b"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe746a", @TCF_META_TYPE_VAR="79ba4a", @TCF_META_TYPE_VAR="116e55", @TCF_META_TYPE_VAR="b2", @TCF_META_TYPE_VAR="e5f5e663"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x130, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x59, 0x3, 0xffff}, {0xb, 0xfb95, 0x9, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x40}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3d0, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1d21, 0x8, 0x8}, {0xffffffffffffffff}}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x8993c776dea30184}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_META={0x94, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="12", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="084aa8abe3", @TCF_META_TYPE_VAR="63e44c0dd16dc11fa2", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="add194"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x9}, {0x4, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="487a5371d491fc", @TCF_META_TYPE_VAR="cda4e5cd6f4f25", @TCF_META_TYPE_VAR="68183d", @TCF_META_TYPE_VAR="1a29cf222c57ef5b", @TCF_META_TYPE_VAR="bc", @TCF_META_TYPE_VAR=';A', @TCF_META_TYPE_VAR="f736d353f4d08315b2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0xf3}, {0x2, 0x10, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x38, 0x2}, {0x3, 0xfd, 0x2}}}]}}]}]}, @TCA_BASIC_ACT={0x78, 0x3, [@m_connmark={0x74, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x42, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

5.295925676s ago: executing program 4 (id=1039):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
rmdir(&(0x7f0000002cc0)='./file0\x00') (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800bee409c37d2e5e0511dba96b72000001000000010000001d37c0b66bac8c641e42e1f3133079a41c977f4c5a47d18e98ecb6", @ANYRES32=r1, @ANYRES32=r2], 0x18, 0x4042880}, 0x10) (async)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async)
r3 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r3, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}}, 0x0) (async)
syz_usb_control_io$uac2(r3, &(0x7f0000000700)={0xc, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @string={0x4, 0x3, "967f"}}}, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa)
ioctl$KVM_CAP_HYPERV_VP_INDEX(r4, 0x4068aea3, &(0x7f0000000040))
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3)

5.097455909s ago: executing program 2 (id=1040):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e, 0x80800)
sendto$unix(r2, &(0x7f00000001c0)="c371844d5062ae", 0x7, 0x1000, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2004e994}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e000100000000000400000002000000", @ANYRES32=0x0, @ANYBLOB="0000080008000f00010d"], 0x24}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20000080)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$unix(r1, 0x0, 0x0, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c00078008001240000affff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

4.668254099s ago: executing program 1 (id=1041):
syz_usb_connect(0x2, 0x440, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x109040, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
r1 = syz_io_uring_setup(0x6edd, &(0x7f0000000140)={0x0, 0xaee5, 0x800, 0xffffffff, 0x330}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x2000000, 0x2, 0x0, 0x300)

4.155983117s ago: executing program 2 (id=1044):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x758e, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x4}]}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r0, 0x47bc, 0x40000000, 0x0, 0x0, 0x0)

4.134983232s ago: executing program 4 (id=1045):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, 0x0}, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8)
sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r1, 0xffffffffffffffff, 0x0)

3.76728763s ago: executing program 2 (id=1046):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2a4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x26c, 0x2, [@TCA_BASIC_EMATCHES={0x1f0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="66c51b842c"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe746a", @TCF_META_TYPE_VAR="79ba4a", @TCF_META_TYPE_VAR="116e55", @TCF_META_TYPE_VAR="b2", @TCF_META_TYPE_VAR="e5f5e663"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x59, 0x3, 0xffff}, {0xb, 0xfb95, 0x9, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x40}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3d0, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1d21, 0x8, 0x8}, {0xffffffffffffffff}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x8993c776dea30184}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_META={0xac, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="12", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="084aa8abe3", @TCF_META_TYPE_VAR="63e44c0dd16dc11fa2", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="add194"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x9}, {0x4, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="487a5371d491fc", @TCF_META_TYPE_VAR="cda4e5cd6f4f25", @TCF_META_TYPE_VAR="68183d", @TCF_META_TYPE_VAR="1a29cf222c57ef5b", @TCF_META_TYPE_VAR="bc", @TCF_META_TYPE_VAR=';A', @TCF_META_TYPE_VAR="f736d353f4d08315b2"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="ebaa7be5", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f9bafdfb2c1352", @TCF_META_TYPE_VAR="9abf"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0xf3}, {0x2, 0x10, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x38, 0x2}, {0x3, 0xfd, 0x2}}}]}}]}]}, @TCA_BASIC_ACT={0x78, 0x3, [@m_connmark={0x74, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x43, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c44"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3.185626168s ago: executing program 5 (id=1047):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r2], 0x28}}, 0x0)
r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000100)={0x0, 0x758e, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000240)={0x83, r5, 0x29, {0x3, 0x1}, 0xb5}, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x800007, 0x100010, r4, 0x231cd000)
time(&(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000380)={"29b5b2a22c2a46b28436e8ba58fd9b75df66e92fd74fd19cb468010892ae6777", r0})
r8 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000040003900000008000300", @ANYRES32=r1, @ANYRES16=r7], 0x38}}, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000440)=[@ioring_restriction_sqe_op], 0x1)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r8, 0xc, 0x0, 0x0)
io_uring_enter(r8, 0x2e6f, 0x8555, 0x2, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x4}]}, 0x8)
syz_open_dev$tty1(0xc, 0x4, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

3.043442307s ago: executing program 4 (id=1048):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0xc0010020, 0x0, 0x9}]})
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
signalfd4(r4, &(0x7f0000000280)={[0x3]}, 0x8, 0x80000)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
mprotect(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x5)
r6 = accept4(r1, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000180)=0x80, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00'})

2.975653383s ago: executing program 2 (id=1049):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004)
socket$inet6(0xa, 0x3, 0x88)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket(0x1e, 0x1, 0x0)
getpeername$packet(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x40000, 0xfffffe0000000003, 0xfa11, 0xfffffffe}, 0x0)
syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0)
close(0xffffffffffffffff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82a540, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
getpid()
capset(&(0x7f0000000100)={0x20071026}, &(0x7f00000001c0)={0x0, 0x1000, 0x0, 0x81, 0x8, 0x1})
r6 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace(0x10, r6)
ptrace$peeksig(0x4209, r6, &(0x7f0000000140)={0x2}, 0x0)
setpriority(0x1, r6, 0x6)

2.539304812s ago: executing program 5 (id=1050):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2ac, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x258, 0x2, [@TCA_BASIC_EMATCHES={0x1dc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_META={0x84, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="66c51b"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe746a", @TCF_META_TYPE_VAR="79ba4a", @TCF_META_TYPE_VAR="116e55", @TCF_META_TYPE_VAR="b2", @TCF_META_TYPE_VAR="e5f5e663"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x130, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x59, 0x3, 0xffff}, {0xb, 0xfb95, 0x9, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x40}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3d0, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1d21, 0x8, 0x8}, {0xffffffffffffffff}}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x8993c776dea30184}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_META={0x94, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="12", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="084aa8abe3", @TCF_META_TYPE_VAR="63e44c0dd16dc11fa2", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="add194"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x9}, {0x4, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="487a5371d491fc", @TCF_META_TYPE_VAR="cda4e5cd6f4f25", @TCF_META_TYPE_VAR="68183d", @TCF_META_TYPE_VAR="1a29cf222c57ef5b", @TCF_META_TYPE_VAR="bc", @TCF_META_TYPE_VAR=';A', @TCF_META_TYPE_VAR="f736d353f4d08315b2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0xf3}, {0x2, 0x10, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x38, 0x2}, {0x3, 0xfd, 0x2}}}]}}]}]}, @TCA_BASIC_ACT={0x78, 0x3, [@m_connmark={0x74, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x42, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2.442186433s ago: executing program 5 (id=1051):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc})
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xffffffff}}, 0x10)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
close(r1)

2.333951365s ago: executing program 5 (id=1052):
syz_usb_connect(0x2, 0x440, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x2400c004)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000568000/0x3000)=nil)
shmdt(0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0xff, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x3308, 0xa32, 0xfffb, 0x8, 0x8, 0x6, [0xe, 0xfb]}})
r3 = socket$netlink(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES32], 0x34}}, 0x0)
syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]})
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
dup(r1)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = eventfd(0x5ef)
ioctl$KVM_IOEVENTFD(r6, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r7})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000140)={0xffff1000, 0x1000})

2.127694566s ago: executing program 1 (id=1053):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2a8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x254, 0x2, [@TCA_BASIC_EMATCHES={0x1d8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_META={0x80, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe746a", @TCF_META_TYPE_VAR="79ba4a", @TCF_META_TYPE_VAR="116e55", @TCF_META_TYPE_VAR="b2", @TCF_META_TYPE_VAR="e5f5e663"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x130, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x59, 0x3, 0xffff}, {0xb, 0xfb95, 0x9, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x40}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3d0, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1d21, 0x8, 0x8}, {0xffffffffffffffff}}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x8993c776dea30184}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_META={0x94, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="12", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="084aa8abe3", @TCF_META_TYPE_VAR="63e44c0dd16dc11fa2", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="add194"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x9}, {0x4, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="487a5371d491fc", @TCF_META_TYPE_VAR="cda4e5cd6f4f25", @TCF_META_TYPE_VAR="68183d", @TCF_META_TYPE_VAR="1a29cf222c57ef5b", @TCF_META_TYPE_VAR="bc", @TCF_META_TYPE_VAR=';A', @TCF_META_TYPE_VAR="f736d353f4d08315b2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0xf3}, {0x2, 0x10, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x38, 0x2}, {0x3, 0xfd, 0x2}}}]}}]}]}, @TCA_BASIC_ACT={0x78, 0x3, [@m_connmark={0x74, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x42, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2.126518032s ago: executing program 0 (id=1054):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000001a00), &(0x7f0000000080)=0x40)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000100)={0x0, 0x0, 0x8})

1.97490483s ago: executing program 0 (id=1055):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000005b60266c7cf06dae049ac0e7ffffff00009e6ce870"], 0x48)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be4", 0x79, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000003c0)}}], 0x1, 0x88d4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0)
sendto(r3, &(0x7f0000000040)="96eff080de2a7d9fc585181c42b2fa082b44f28afe91145b85e9dc523dfed5e50ca1494c6ab6b9a0004cbe47bf2bb61b5b05dcb7ea7a1b8efa25c245ec3adfd9fc7964763759c204b7a6f1ae7dae3c503712e893749aed461d8bfcb54749f00ab166c4f16b962c220c457fc96b7f7bd611819c2d7662e4ecbc8007f5446f21c75ea0522feba03d5d0dee0808327ffd948de268a2bdf438c99acfc333595321e32fafbaf3996c7d1468238432d158e6625a633564b5730d", 0xb7, 0x40000, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80)
shutdown(r0, 0x1)

1.84256726s ago: executing program 1 (id=1056):
r0 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d9969e4d672a015a9165ef47bab7fd628371d41dedcc7578f3f548f9c6792c9e", 0x20}], 0x1}, 0x14044000)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

1.736430176s ago: executing program 4 (id=1057):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r6, &(0x7f0000001300)=""/4118, 0x1016, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f00000000c0)={0x7, 'ip6_vti0\x00', {}, 0x2})
syz_fuse_handle_req(r6, &(0x7f0000002340)="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", 0x2000, &(0x7f0000005300)={0x0, &(0x7f0000000140)={0x18, 0x0, 0x2, {0x8}}, &(0x7f00000001c0)={0x18, 0xd2c646708b7529b3, 0x7ff, {0x7f}}, &(0x7f00000012c0)={0x18, 0x0, 0x800, {0x4}}, &(0x7f0000004340)={0x18, 0xffffffffffffffda, 0x4, {0x9}}, &(0x7f00000043c0)={0x28, 0xfffffffffffffffe, 0x1, {{0x3, 0x7fffffffffffffff, 0x3}}}, &(0x7f0000004400)={0x60, 0xfffffffffffffff5, 0x0, {{0x8c2f, 0x7c, 0x8004000000000001, 0x8000000000000000, 0x1, 0x10, 0xb0, 0x9}}}, &(0x7f0000004480)={0x18, 0x2ea0cf58e9cbbfea, 0x8, {0x1000}}, &(0x7f00000044c0)={0x14, 0x0, 0x1, {'.^$\x00'}}, &(0x7f0000004500)={0x20, 0x0, 0x965, {0x0, 0x8}}, &(0x7f0000004600)={0x78, 0x0, 0x9, {0xfe3, 0x9, 0x0, {0x6, 0x5, 0x2, 0x9, 0x1, 0x6, 0x2, 0x1, 0x9, 0x1000, 0x80000000, 0x0, 0x0, 0x400, 0x8001}}}, &(0x7f00000046c0)={0x90, 0x0, 0x7, {0x1, 0x1, 0x3ff, 0x200, 0x0, 0xa, {0x5, 0x2, 0x3, 0x56, 0x1, 0x9, 0x6, 0x8, 0x100, 0x2000, 0x5, 0x0, 0x0, 0x100, 0x6}}}, &(0x7f0000004780)={0xc0, 0x0, 0x0, [{0x1, 0x6, 0x0, 0x80000000}, {0x3, 0xfffffffffffffffe, 0x7, 0xffffffff, '@{%\xd0\xf4:%'}, {0x1, 0x6, 0x6, 0x80000001, '[.[}/\''}, {0x5, 0x10, 0x0, 0xed}, {0x1, 0x38d, 0x5, 0x6, '$*^$.'}, {0x3, 0x7, 0x1, 0x7f, '.'}]}, &(0x7f0000004b40)={0x200, 0xfffffffffffffff5, 0x1, [{{0x2, 0x0, 0x5, 0x3, 0x9, 0x10001, {0x5, 0x8, 0x4, 0xfff, 0x6a8c, 0x1000, 0xd8, 0x2, 0x3, 0x2000, 0xc826, 0x0, 0x0, 0x8000000, 0x7}}, {0x6, 0x5, 0xd, 0xffffffe1, '/dev/ttynull\x00'}}, {{0x0, 0x3, 0xe54, 0x8, 0x2, 0x9, {0x1, 0x1, 0x80000001, 0x100000001, 0x4, 0x3, 0x0, 0x4, 0xc, 0xc000, 0xa, 0x0, 0xffffffffffffffff, 0x3, 0x3}}, {0x4, 0x6, 0x6, 0xcc, '}:\\[/#'}}, {{0x1, 0x2, 0x3a, 0x200, 0x1, 0x200, {0x3, 0x9, 0x0, 0x3, 0x1, 0x308933d, 0x16, 0x4458, 0x6, 0x6000, 0x9, 0x0, 0x0, 0x8, 0x95b}}, {0x2, 0x7fffffffffffffff, 0xe, 0x6, '/dev/qrtr-tun\x00'}}]}, &(0x7f0000004f80)={0xa0, 0xfffffffffffffff5, 0x3, {{0x3, 0x0, 0x5, 0x6, 0x6, 0x4, {0x4, 0x9, 0x80, 0x8, 0xa8c8, 0xff, 0x8, 0xaeab1f2, 0x0, 0x2000, 0x7, 0x0, 0x0, 0x9, 0x7}}, {0x0, 0x10}}}, &(0x7f0000005040)={0x20, 0xfffffffffffffff5, 0x9470, {0xf9ce, 0x4, 0x6, 0x381}}, 0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0)
ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f00000000c0))
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x2, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0x0, 0x1, 0x400000000]})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_GET_SREGS2(r8, 0x8140aecc, &(0x7f0000001680))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
r9 = socket(0x1e, 0x1, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3d8, 0x10c, 0x10c, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @local, 0xff, 0xffffff00, 0x5, 0x9, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x5, 0x1, 0xf206, 0xe28f, 0x5, 'veth0_to_bond\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x0, 0x202}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2}}}, {{@arp={@empty, @loopback, 0xffffffff, 0xff, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0x0, 0x101, 0xff, 0x0, 0xff]}}, 0x16, 0x6, 0x9, 0xc8c0, 0xf4f0, 0x5, 'pim6reg0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x0, 0x4}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@loopback, @local, 0xffffff00, 0xffffffff, 0xb, 0x1, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x1000, 0x3, 0x5, 0xa, 0x101, 0xcd, 'ip6_vti0\x00', 'pim6reg1\x00', {}, {0x2a96b25154b01616}, 0x0, 0x20}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, 0x4, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
close(r9)

1.511326055s ago: executing program 0 (id=1058):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x21c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x1c8, 0x2, [@TCA_BASIC_EMATCHES={0x150, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x59, 0x3, 0xffff}, {0xb, 0xfb95, 0x9, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x40}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3d0, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1d21, 0x8, 0x8}, {0xffffffffffffffff}}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x8993c776dea30184}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_META={0x90, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="12", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="084aa8abe3", @TCF_META_TYPE_VAR="63e44c0dd16dc11fa2", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="add194"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x9}, {0x4, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_VAR="487a5371d491fc", @TCF_META_TYPE_VAR="cda4e5cd6f4f25", @TCF_META_TYPE_VAR="1a29cf222c57ef5b", @TCF_META_TYPE_VAR="bc", @TCF_META_TYPE_VAR=';A', @TCF_META_TYPE_VAR="f736d353f4d08315b2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0xf3}, {0x2, 0x10, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x38, 0x2}, {0x3, 0xfd, 0x2}}}]}}]}]}, @TCA_BASIC_ACT={0x74, 0x3, [@m_connmark={0x70, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x3e, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.510207313s ago: executing program 1 (id=1059):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2a4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x26c, 0x2, [@TCA_BASIC_EMATCHES={0x1f0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="66c51b842c"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe746a", @TCF_META_TYPE_VAR="79ba4a", @TCF_META_TYPE_VAR="116e55", @TCF_META_TYPE_VAR="b2", @TCF_META_TYPE_VAR="e5f5e663"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x59, 0x3, 0xffff}, {0xb, 0xfb95, 0x9, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x40}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3d0, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1d21, 0x8, 0x8}, {0xffffffffffffffff}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x8993c776dea30184}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_META={0xac, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="12", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="084aa8abe3", @TCF_META_TYPE_VAR="63e44c0dd16dc11fa2", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="add194"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x9}, {0x4, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="487a5371d491fc", @TCF_META_TYPE_VAR="cda4e5cd6f4f25", @TCF_META_TYPE_VAR="68183d", @TCF_META_TYPE_VAR="1a29cf222c57ef5b", @TCF_META_TYPE_VAR="bc", @TCF_META_TYPE_VAR=';A', @TCF_META_TYPE_VAR="f736d353f4d08315b2"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="ebaa7be5", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f9bafdfb2c1352", @TCF_META_TYPE_VAR="9abf"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0xf3}, {0x2, 0x10, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x38, 0x2}, {0x3, 0xfd, 0x2}}}]}}]}]}, @TCA_BASIC_ACT={0x78, 0x3, [@m_connmark={0x74, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x43, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c44"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

729.852086ms ago: executing program 1 (id=1060):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r0}, 0x18)
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x534c}}, './file0\x00'})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x2, 0x0, [{0x1, 0x3, 0x0, 0x0, @adapter={0x8374, 0x689, 0xfffffffffffffff7, 0x3ff, 0xd3}}, {0xd, 0x1, 0x1, 0x0, @adapter={0x8000000000000000, 0x80, 0x7, 0x3ff, 0x10000}}]})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000100)={0xfd})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x1, 0x2, 0x9, 0x1, 0xcd2e}})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10)
r4 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})
r5 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

624.4493ms ago: executing program 0 (id=1061):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x7, 0x0, 0x400000000000081, 0x2, 0x3e, 0xfffffff9, 0x3bf, 0x40, 0x103, 0xd35, 0x5, 0x38, 0x2, 0x78, 0x7}, [{0x6474e551, 0x5, 0x1, 0x8dbb, 0xc2d, 0xaf, 0x3, 0x8}, {0x1, 0xa1b8, 0x7, 0xc4, 0x2, 0x5, 0x0, 0x10001}]}, 0xb0)
syz_emit_ethernet(0xbb, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@mpls_mc={0x8848, {[{0x9}, {0x3}, {0x9, 0x0, 0x1}, {0x7ff}, {0x40, 0x0, 0x1}, {0xa81}, {0x200}], @generic="6ae4e41ae42c7617e75e8b55759d93ca6408510788351a9801212028930349c36259a154da1661091e64452bcd82fcfb6118b901e1f0c8de1a16e99ea7bcf74bab9633905fde625c8b01bf2309cc0d985802e06c9ee023b98471cca66f67ae56bad376929e3e4e3ad7baaf4c971dbb99eb73a1048f30363d6fc47e4fde6634e463d5e08c96b23b187830b71ccc"}}}}, &(0x7f0000000000)={0x1, 0x3, [0xe4a, 0x986, 0xe43, 0xabc]})
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

369.953352ms ago: executing program 0 (id=1062):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2ac, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x258, 0x2, [@TCA_BASIC_EMATCHES={0x1dc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_META={0x84, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR="66c51b84"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe746a", @TCF_META_TYPE_VAR="79ba4a", @TCF_META_TYPE_VAR="116e55", @TCF_META_TYPE_VAR="b2", @TCF_META_TYPE_VAR="e5f5e663"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x130, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x59, 0x3, 0xffff}, {0xb, 0xfb95, 0x9, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x40}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3d0, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1d21, 0x8, 0x8}, {0xffffffffffffffff}}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x8993c776dea30184}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_META={0x94, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="12", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="084aa8abe3", @TCF_META_TYPE_VAR="63e44c0dd16dc11fa2", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="add194"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x9}, {0x4, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="487a5371d491fc", @TCF_META_TYPE_VAR="cda4e5cd6f4f25", @TCF_META_TYPE_VAR="68183d", @TCF_META_TYPE_VAR="1a29cf222c57ef5b", @TCF_META_TYPE_VAR="bc", @TCF_META_TYPE_VAR=';A', @TCF_META_TYPE_VAR="f736d353f4d08315b2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0xf3}, {0x2, 0x10, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x38, 0x2}, {0x3, 0xfd, 0x2}}}]}}]}]}, @TCA_BASIC_ACT={0x78, 0x3, [@m_connmark={0x74, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x42, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

292.023711ms ago: executing program 4 (id=1063):
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000012)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0x2, 0x3, 0xf8)
sendto$unix(r3, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
connect$pppl2tp(r3, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x5, 0x3, 0x4, {0xa, 0x4e24, 0x5, @remote, 0xff000000}}}, 0x32)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000006f80)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000c40)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=""/9, 0x9}, 0x4}, {{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/69, 0x45}, 0x480}, {{&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/73, 0x49}], 0x2}, 0x5}, {{&(0x7f0000000840)=@alg, 0x80, &(0x7f00000070c0)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/4085, 0xff5}, {&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000007040)=""/97, 0x61}, {&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/25, 0x19}, {&(0x7f00000009c0)=""/151, 0x97}, {&(0x7f00000008c0)=""/24, 0x18}], 0xa}, 0x5}, {{0x0, 0x0, &(0x7f0000006e40), 0x0, &(0x7f0000006e80)=""/217, 0xd9}, 0xfc2c}], 0x5, 0x2, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000061c0)={0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000000140)}, {&(0x7f00000004c0)="774f63623a7686b1af388a8fef6f9aeff4427874e455c0a979c5283272c94be8f83e65209765cdc09f252d77077e0a39c1f8584dc7690d7b1a02b1fbbf0a312c3eaa1d860f338d6eccb614708dad3822206ce8fb30fb2feb220117e76ef16217b8485332dde23eeae01c53d26292dab407a9d84ea16a538b380587f783fee6c110321e14c0c0b26d101ac40b7d52d0c2a40b366c5e93cebb2840d8cbe7f3cbe03436df4d79ccb80db21b263c257f3c162e086a50", 0xb4}, {&(0x7f00000001c0)="42073ae53f0f1142efe7d4", 0xb}, {&(0x7f0000000ac0)="99f51599845688164d5757aeedc77b3e3738597496731587a7bd2c8309abb75a6eb4e5497cc7ff1558dc7fcfe6619820dbd3b416a3e3ecd4b602111e193a575c11cc8b29d328c96cce164648b89c6d2fa05dd1937fb4849d6d679cab704e349557de09e031c6a9dc62ea5cf5b41401bd033e51a35dfdd986b2e276f4f713f1f458375bfb0fb9e912b541aab7ad029538ea7b86e9341fc3265835cb26f3e7199b48fa75ac0a1d62b05e6924f6b0a6c1c365", 0xb1}, {&(0x7f0000005c40)="f0bc18ee51ce46b1f3d7b98d5c7261f272e91611a9313debe588ddda09abdf09c41ddb57387ea2d8642ee652755e7809280477ba9566a9ae5430f9a8a7d66ece0b0c325a3d16ec73b92a6e0e1e43881bc6196b6dccb062f5d28cea118c602292e1aa6b2afb4de09f83dc4fe82b39987955eb2a1d0263454a82937f538171ebab1406de083c2f1ffbdfbfff075dcb35d3cb5fa750229d4647ad66bf2110a5eeddad8b676fabd31ccd1cb78db99112bb604f3c1971d3cbadeaccd720b9fdea84921c3194331bde5345d52159", 0xcb}, {&(0x7f0000005d40)="12d5dee556b381221907b23f5fb1407bfbc2ff9dbb44096ab9fa1a0f3c0bbe9c2abf73c40e32c048290e9e67cc6f5bf2733bd53c8f2cfc4661625cd13e269125ccd0f9", 0x43}, {&(0x7f0000005dc0)="f88a903e0a419e229bd78d64a46da82043d56fe8096c9710677778951d34ab88905a9f0ec05f5ee18160807a201073691dad1ff101860ddbe692b68b22de6ec535f11e964b08cbd862a97c8da3be9d69548ec09514e74daac4fa713c57ec28bdfabdf2ebd5ef3ae2b6e662d85120d31de9e2987c29cf0c4c0b8e2407d2502b5e44525d27662fb82e12a0d270b90b6fb89312851ae1df18", 0x97}, {&(0x7f0000000900)="3e723335a2b5c602820a9498f5c5f1eb8752d365c3c02e004eb69583328f6de333015a1c47ed", 0x26}, {&(0x7f0000005e80)="3aa76d4235d9985ab6b8cab90cb6924132410a9c707ecca4cfebc80a895a4fb27296883fdd69902faa73f7627c995cf49a5cd3fc234e65d2a5017e18f216593b15765d8e4264e3c929ced3ee777a6e7e8852fb35f75af6d39c1e8d805e61ee8c1cea9ea5818bee61acb5e05b03bd5c8192f5dafba7dbf70c8a9883c1d1d242a4cf98c2497208915ea6483bccc0937ba3126d0495284bc39cee77b9cf469b9279a61df1c15655a403355a3244603c", 0xae}], 0x9, &(0x7f0000006140)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r7]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r4, r3, r5, 0xffffffffffffffff]}}], 0x50, 0x804}, 0x20000014)
openat$fb0(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0)

0s ago: executing program 0 (id=1064):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
r1 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r2, &(0x7f0000006800)="10", 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x0, &(0x7f0000000080)})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x5, 0x1}, 0x8)

kernel console output (not intermixed with test programs):

  __do_fast_syscall_32+0x20d/0x640
[  241.843150][ T7981]  ? do_fast_syscall_32+0x33/0x70
[  241.843165][ T7981]  ? asm_int80_emulation+0x1a/0x20
[  241.843177][ T7981]  ? do_int80_emulation+0x274/0x4d0
[  241.843191][ T7981]  ? trace_irq_disable+0x3b/0x150
[  241.843204][ T7981]  do_fast_syscall_32+0x33/0x70
[  241.843220][ T7981]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  241.843235][ T7981] RIP: 0023:0xf7f83f6c
[  241.843246][ T7981] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  241.843257][ T7981] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  241.843274][ T7981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540
[  241.843287][ T7981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  241.843298][ T7981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  241.843309][ T7981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  241.843321][ T7981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  241.843345][ T7981]  </TASK>
[  242.895912][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'.
[  242.977492][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'.
[  243.006224][ T7989] bond2: entered promiscuous mode
[  243.017256][ T7989] bond2: entered allmulticast mode
[  243.026595][ T7989] 8021q: adding VLAN 0 to HW filter on device bond2
[  243.088531][ T7993] macsec1: entered promiscuous mode
[  243.094640][ T7993] macsec1: entered allmulticast mode
[  243.112501][ T7997] netlink: 'syz.5.614': attribute type 12 has an invalid length.
[  243.119569][ T5825] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  243.149863][ T7997] netlink: 'syz.5.614': attribute type 12 has an invalid length.
[  243.279488][ T5825] usb 2-1: Using ep0 maxpacket: 32
[  243.294769][ T5825] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  243.300562][ T8001] netlink: 'syz.5.616': attribute type 12 has an invalid length.
[  243.314706][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.329759][ T5825] usb 2-1: Product: syz
[  243.334407][ T5825] usb 2-1: Manufacturer: syz
[  243.344124][ T5825] usb 2-1: SerialNumber: syz
[  243.364229][ T8001] netlink: 'syz.5.616': attribute type 12 has an invalid length.
[  243.374118][ T8001] FAULT_INJECTION: forcing a failure.
[  243.374118][ T8001] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.389277][ T8001] CPU: 1 UID: 0 PID: 8001 Comm: syz.5.616 Not tainted syzkaller #0 PREEMPT(full) 
[  243.389304][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  243.389315][ T8001] Call Trace:
[  243.389323][ T8001]  <TASK>
[  243.389331][ T8001]  dump_stack_lvl+0xe8/0x150
[  243.389371][ T8001]  should_fail_ex+0x412/0x560
[  243.389406][ T8001]  _copy_to_user+0x31/0xb0
[  243.389433][ T8001]  simple_read_from_buffer+0xe1/0x170
[  243.389468][ T8001]  proc_fail_nth_read+0x1bb/0x230
[  243.389501][ T8001]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  243.389533][ T8001]  ? rw_verify_area+0x2a6/0x4d0
[  243.389555][ T8001]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  243.389586][ T8001]  vfs_read+0x20c/0xa70
[  243.389606][ T8001]  ? fdget_pos+0x246/0x320
[  243.389623][ T8001]  ? __pfx___sys_sendmmsg+0x10/0x10
[  243.389654][ T8001]  ? __pfx___mutex_lock+0x10/0x10
[  243.389682][ T8001]  ? __pfx_vfs_read+0x10/0x10
[  243.389706][ T8001]  ? __fget_files+0x2a/0x420
[  243.389729][ T8001]  ? __fget_files+0x3a0/0x420
[  243.389745][ T8001]  ? __fget_files+0x2a/0x420
[  243.389773][ T8001]  ksys_read+0x150/0x270
[  243.389798][ T8001]  ? __pfx_ksys_read+0x10/0x10
[  243.389825][ T8001]  ? asm_int80_emulation+0x1a/0x20
[  243.389851][ T8001]  do_int80_emulation+0x173/0x4d0
[  243.389876][ T8001]  ? trace_irq_disable+0x3b/0x150
[  243.389894][ T8001]  ? asm_int80_emulation+0x1a/0x20
[  243.389912][ T8001]  ? clear_bhb_loop+0x40/0x90
[  243.389932][ T8001]  ? clear_bhb_loop+0x40/0x90
[  243.389957][ T8001]  asm_int80_emulation+0x1a/0x20
[  243.389976][ T8001] RIP: 0023:0xf7125cab
[  243.390004][ T8001] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  243.390021][ T8001] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  243.390043][ T8001] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53dd5d0
[  243.390056][ T8001] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  243.390068][ T8001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  243.390079][ T8001] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  243.390091][ T8001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  243.390121][ T8001]  </TASK>
[  243.636061][ T5825] usb 2-1: config 0 descriptor??
[  243.899638][ T5825] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  244.095520][ T7991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.611'.
[  244.223701][  T980] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  244.234968][   T30] audit: type=1326 audit(1774848038.540:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.4.622" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83f6c code=0x0
[  244.568178][ T8028] netlink: 'syz.4.622': attribute type 1 has an invalid length.
[  244.647042][ T5825] usb 2-1: reset high-speed USB device number 10 using dummy_hcd
[  244.711551][ T8030] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  244.767109][  T980] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  244.776670][  T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.788799][  T980] usb 1-1: Product: syz
[  244.793125][  T980] usb 1-1: Manufacturer: syz
[  244.798085][  T980] usb 1-1: SerialNumber: syz
[  244.806493][  T980] usb 1-1: config 0 descriptor??
[  244.814404][ T8030] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  244.864036][ T5825] usb 2-1: device descriptor read/64, error -71
[  244.980746][  T980] hub 1-1:0.0: bad descriptor, ignoring hub
[  244.986910][  T980] hub 1-1:0.0: probe with driver hub failed with error -5
[  245.167473][ T5825] usb 2-1: reset high-speed USB device number 10 using dummy_hcd
[  245.244631][  T980] f81232 1-1:0.0: f81534a converter detected
[  245.307425][ T5825] usb 2-1: device descriptor read/64, error -71
[  245.354520][ T8046] netlink: 64 bytes leftover after parsing attributes in process `syz.2.624'.
[  245.484592][  T980] usb 1-1: f81534a converter now attached to ttyUSB0
[  245.559514][ T5825] usb 2-1: reset high-speed USB device number 10 using dummy_hcd
[  245.590209][ T5825] usb 2-1: device descriptor read/8, error -71
[  245.843576][ T5825] usb 2-1: reset high-speed USB device number 10 using dummy_hcd
[  245.887763][ T5825] usb 2-1: device descriptor read/8, error -71
[  246.228146][ T5825] usb 2-1: [UEAGLE-ATM] interface 1 not found
[  246.239661][ T5825] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  246.276163][ T5825] usb 2-1: USB disconnect, device number 10
[  246.830659][ T5825] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  246.860957][ T8058] FAULT_INJECTION: forcing a failure.
[  246.860957][ T8058] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  246.874913][ T8058] CPU: 0 UID: 0 PID: 8058 Comm: syz.2.629 Not tainted syzkaller #0 PREEMPT(full) 
[  246.874948][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  246.874960][ T8058] Call Trace:
[  246.874969][ T8058]  <TASK>
[  246.874976][ T8058]  dump_stack_lvl+0xe8/0x150
[  246.875007][ T8058]  should_fail_ex+0x412/0x560
[  246.875043][ T8058]  _copy_to_user+0x31/0xb0
[  246.875070][ T8058]  simple_read_from_buffer+0xe1/0x170
[  246.875119][ T8058]  proc_fail_nth_read+0x1bb/0x230
[  246.875151][ T8058]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  246.875183][ T8058]  ? rw_verify_area+0x2a6/0x4d0
[  246.875205][ T8058]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  246.875235][ T8058]  vfs_read+0x20c/0xa70
[  246.875255][ T8058]  ? fdget_pos+0x246/0x320
[  246.875279][ T8058]  ? __pfx___mutex_lock+0x10/0x10
[  246.875306][ T8058]  ? __pfx_vfs_read+0x10/0x10
[  246.875330][ T8058]  ? __fget_files+0x2a/0x420
[  246.875353][ T8058]  ? __fget_files+0x3a0/0x420
[  246.875370][ T8058]  ? __fget_files+0x2a/0x420
[  246.875398][ T8058]  ksys_read+0x150/0x270
[  246.875423][ T8058]  ? __pfx_ksys_read+0x10/0x10
[  246.875450][ T8058]  ? asm_int80_emulation+0x1a/0x20
[  246.875477][ T8058]  do_int80_emulation+0x173/0x4d0
[  246.875502][ T8058]  ? trace_irq_disable+0x3b/0x150
[  246.875520][ T8058]  ? asm_int80_emulation+0x1a/0x20
[  246.875538][ T8058]  ? clear_bhb_loop+0x40/0x90
[  246.875557][ T8058]  ? clear_bhb_loop+0x40/0x90
[  246.875587][ T8058]  asm_int80_emulation+0x1a/0x20
[  246.875606][ T8058] RIP: 0023:0xf7185cab
[  246.875625][ T8058] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  246.875643][ T8058] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  246.875664][ T8058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54465d0
[  246.875678][ T8058] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  246.875689][ T8058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  246.875700][ T8058] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  246.875712][ T8058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  246.875835][ T8058]  </TASK>
[  247.119462][ T5825] usb 2-1: Using ep0 maxpacket: 32
[  247.214277][ T5825] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  247.247095][ T5825] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  247.289615][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  247.299779][ T5930] usb 1-1: USB disconnect, device number 14
[  247.309520][ T5930] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  247.318254][ T5930] f81232 1-1:0.0: device disconnected
[  247.330950][ T5825] usb 2-1: config 1 has no interface number 0
[  247.337704][ T5825] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  247.438630][ T5825] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  247.466548][ T5825] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  247.476598][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.494538][ T5825] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  247.659655][  T796] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  247.689504][ T5898] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  247.706370][ T5825] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  247.876599][ T8072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.631'.
[  247.980293][ T5898] usb 6-1: Using ep0 maxpacket: 32
[  247.991197][ T5898] usb 6-1: config 4 has an invalid interface number: 128 but max is 0
[  248.001188][ T5898] usb 6-1: config 4 has no interface number 0
[  248.018356][ T5898] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.048177][ T5898] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.059476][ T5898] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  248.069597][  T796] usb 5-1: Using ep0 maxpacket: 8
[  248.085507][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.119742][  T796] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  248.148264][ T5898] hub 6-1:4.128: USB hub found
[  248.192695][  T796] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  248.213599][  T796] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  248.246078][  T796] usb 5-1: Product: syz
[  248.254826][  T796] usb 5-1: Manufacturer: syz
[  248.263894][  T796] usb 5-1: SerialNumber: syz
[  248.428411][   T24] usb 2-1: USB disconnect, device number 11
[  248.437415][   T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  248.545703][ T5898] hub 6-1:4.128: config failed, can't read hub descriptor (err -22)
[  248.558470][  T796] hub 5-1:1.0: bad descriptor, ignoring hub
[  248.565857][  T796] hub 5-1:1.0: probe with driver hub failed with error -5
[  248.590585][ T5898] usb 6-1: USB disconnect, device number 5
[  248.721731][  T796] usb 5-1: Handspring Visor / Palm OS: No valid connect info available
[  248.730737][  T796] usb 5-1: Handspring Visor / Palm OS: port 191, is for unknown use
[  248.743943][  T796] usb 5-1: Handspring Visor / Palm OS: port 206, is for unknown use
[  248.769473][  T796] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2
[  248.922965][ T8062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.934425][ T8062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.960233][ T8062] netlink: 'syz.4.630': attribute type 1 has an invalid length.
[  249.032119][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.630'.
[  249.109839][  T796] usb 5-1: palm_os_3_probe - error -110 getting bytes available request
[  249.118438][  T796] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  249.187987][  T796] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  249.249992][  T796] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  249.280584][  T796] usb 5-1: USB disconnect, device number 17
[  249.345121][  T796] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  249.412169][  T796] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  249.480121][  T796] visor 5-1:1.0: device disconnected
[  249.627995][ T8085] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  249.719718][  T980] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  249.824998][   T30] audit: type=1326 audit(1774848044.150:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.0.641" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x0
[  249.900702][  T980] usb 3-1: Using ep0 maxpacket: 8
[  249.936530][ T8106] netlink: 'syz.0.641': attribute type 1 has an invalid length.
[  249.955209][  T980] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  249.964186][  T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.976668][  T980] usb 3-1: config 0 has no interface number 0
[  249.984400][  T980] usb 3-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  250.085484][ T8110] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  250.206358][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'.
[  250.240296][ T8110] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  250.460430][ T8117] netlink: 'syz.1.645': attribute type 1 has an invalid length.
[  250.483944][  T980] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  250.570686][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'.
[  250.627919][  T980] usb 3-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[  250.699500][  T980] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  250.742104][  T980] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  250.964475][  T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  251.033174][  T980] usb 3-1: SerialNumber: syz
[  251.184881][  T980] usb 3-1: config 0 descriptor??
[  251.213565][  T980] hso 3-1:0.1: Failed to find BULK OUT ep
[  251.539172][ T8090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.576871][ T8090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.728387][  T980] usb 3-1: USB disconnect, device number 20
[  252.685904][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'.
[  252.736262][ T8138] netlink: 48 bytes leftover after parsing attributes in process `syz.1.650'.
[  252.883349][ T8149] x_tables: duplicate underflow at hook 1
[  253.109719][ T5930] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  253.273704][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short
[  253.299833][ T5930] usb 2-1: not running at top speed; connect to a high speed hub
[  253.325996][ T5930] usb 2-1: config index 0 descriptor too short (expected 28771, got 10)
[  253.355250][ T5930] usb 2-1: config 114 has too many interfaces: 95, using maximum allowed: 32
[  253.395076][ T5930] usb 2-1: config 114 descriptor has 1 excess byte, ignoring
[  253.417056][ T5930] usb 2-1: config 114 has 0 interfaces, different from the descriptor's value: 95
[  253.448571][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.656'.
[  253.483498][ T5930] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f
[  253.498652][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.577418][   T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  253.583879][ T5930] usb 2-1: Product: syz
[  253.593363][ T5930] usb 2-1: Manufacturer: syz
[  253.598477][ T5930] usb 2-1: SerialNumber: syz
[  253.709458][  T796] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  253.751637][   T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  253.763702][   T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  253.774469][   T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  253.810753][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.832569][ T8162] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  253.844164][   T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  253.892624][  T796] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  253.910259][  T796] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  253.922334][  T796] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  253.959091][ T8138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.996966][ T8138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.093664][  T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.433472][ T8166] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  254.466234][  T796] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  254.481368][   T24] usb 3-1: USB disconnect, device number 21
[  254.735586][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.660'.
[  254.786618][ T8169] netlink: 'syz.2.660': attribute type 1 has an invalid length.
[  254.801189][  T796] usb 5-1: USB disconnect, device number 18
[  254.870400][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'.
[  254.947060][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  255.317020][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'.
[  255.376398][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'.
[  255.397060][ T8169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  255.481752][ T5930] usb 2-1: USB disconnect, device number 12
[  255.569044][ T8181] batman_adv: batadv0: Adding interface: macsec1
[  255.592693][ T8181] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  255.621655][ T8181] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active
[  255.701828][ T8184] netlink: 56 bytes leftover after parsing attributes in process `syz.5.662'.
[  255.781981][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.662'.
[  255.994071][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  256.000863][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  256.189565][  T796] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  256.350436][  T796] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  256.360621][  T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.371787][  T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.499030][  T796] usb 2-1: config 0 interface 0 has no altsetting 0
[  256.528717][  T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.539890][  T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.562882][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'.
[  256.575201][  T796] usb 2-1: config 0 interface 0 has no altsetting 0
[  256.649695][  T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.660223][  T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.715676][  T796] usb 2-1: config 0 interface 0 has no altsetting 0
[  256.795972][  T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.820230][  T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.855193][ T8205] pimreg: entered allmulticast mode
[  256.869523][  T796] usb 2-1: config 0 interface 0 has no altsetting 0
[  256.878214][  T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.882208][ T8205] pimreg: left allmulticast mode
[  256.887646][   T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  256.912444][  T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.947068][  T796] usb 2-1: config 0 interface 0 has no altsetting 0
[  256.975856][  T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  257.004750][  T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  257.018758][  T796] usb 2-1: config 0 interface 0 has no altsetting 0
[  257.033126][  T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  257.042960][  T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  257.061332][   T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  257.073619][   T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  257.089600][  T796] usb 2-1: config 0 interface 0 has no altsetting 0
[  257.096432][   T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  257.110585][  T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  257.120350][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.141782][  T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  257.153207][  T796] usb 2-1: config 0 interface 0 has no altsetting 0
[  257.165916][  T796] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  257.176591][  T796] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  257.190801][ T8200] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  257.202721][   T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  257.219529][  T796] usb 2-1: Product: syz
[  257.224439][  T796] usb 2-1: Manufacturer: syz
[  257.229083][  T796] usb 2-1: SerialNumber: syz
[  257.267451][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.676'.
[  257.318576][ T8212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.370091][  T796] usb 2-1: config 0 descriptor??
[  257.425501][ T8212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.469430][    C1] hrtimer: interrupt took 72279 ns
[  257.489605][  T796] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  257.540526][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'.
[  257.541658][   T24] usb 5-1: USB disconnect, device number 19
[  257.602460][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'.
[  257.685023][ T5921] usb 2-1: USB disconnect, device number 13
[  257.723091][ T5921] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  257.764575][ T8217] vcan1: entered promiscuous mode
[  257.780965][ T8217] vcan1: entered allmulticast mode
[  257.821774][ T8215] gre0: entered promiscuous mode
[  257.826798][ T8215] gre0: entered allmulticast mode
[  257.984821][ T8228] netlink: 'syz.4.679': attribute type 3 has an invalid length.
[  258.142826][ T8233] pim6reg99999991: entered allmulticast mode
[  258.193247][   T24] IPVS: starting estimator thread 0...
[  258.289847][ T8235] IPVS: using max 23 ests per chain, 55200 per kthread
[  258.617787][ T8247] binder: 8246:8247 ioctl c0345641 80000000 returned -22
[  258.952716][ T1100] IPVS: stop unused estimator thread 0...
[  261.034913][  T796] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  261.084554][ T8294] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) !
[  261.125381][ T8294] syzkaller0: entered promiscuous mode
[  261.132155][ T8294] syzkaller0: entered allmulticast mode
[  261.242614][  T796] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  261.255070][  T796] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  261.282341][  T796] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  261.305698][  T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.328370][ T8285] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  261.354567][  T796] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  261.530783][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'.
[  261.699573][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'.
[  262.189693][  T980] usb 2-1: USB disconnect, device number 14
[  262.409131][ T8311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.709'.
[  262.445113][ T8311] netlink: 'syz.1.709': attribute type 1 has an invalid length.
[  262.523811][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'.
[  262.728909][ T8319] syzkaller0: entered promiscuous mode
[  262.735223][ T8319] syzkaller0: entered allmulticast mode
[  262.759535][ T5930] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  262.933180][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  262.949439][ T5930] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  262.972694][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.018540][ T5930] usb 1-1: config 0 descriptor??
[  263.067778][ T8313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  263.330192][ T5930] ath6kl: Failed to submit usb control message: -71
[  263.337604][ T5930] ath6kl: unable to send the bmi data to the device: -71
[  263.379442][ T5930] ath6kl: Unable to send get target info: -71
[  263.499897][ T5930] ath6kl: Failed to init ath6kl core: -71
[  263.538680][ T5930] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  263.679201][ T8326] "syz.1.713" (8326) uses obsolete ecb(arc4) skcipher
[  263.780763][ T5930] usb 1-1: USB disconnect, device number 15
[  264.005417][ T8328] "syz.1.713" (8328) uses obsolete ecb(arc4) skcipher
[  264.872385][ T8358] fuse: Bad value for 'fd'
[  265.149737][ T5913] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  265.316203][ T5913] usb 5-1: Using ep0 maxpacket: 16
[  265.345217][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.356461][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.379651][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.410596][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  265.541258][ T5913] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  265.563335][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.622370][ T5913] usb 5-1: config 0 descriptor??
[  266.138356][ T5913] input: HID 0955:7214 Haptics as /devices/virtual/input/input8
[  266.367227][ T5913] shield 0003:0955:7214.0006: Registered Thunderstrike controller
[  266.388028][ T5913] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  266.483975][   T24] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  266.497245][ T5913] usb 5-1: USB disconnect, device number 20
[  266.510047][  T796] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  266.746949][ T5921] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  266.756654][   T24] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  266.790630][   T24] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  266.822648][   T24] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  267.073992][ T8388] FAULT_INJECTION: forcing a failure.
[  267.073992][ T8388] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  267.091165][ T8388] CPU: 1 UID: 0 PID: 8388 Comm: syz.1.732 Not tainted syzkaller #0 PREEMPT(full) 
[  267.091195][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  267.091208][ T8388] Call Trace:
[  267.091216][ T8388]  <TASK>
[  267.091225][ T8388]  dump_stack_lvl+0xe8/0x150
[  267.091259][ T8388]  should_fail_ex+0x412/0x560
[  267.091296][ T8388]  _copy_from_user+0x2d/0xb0
[  267.091321][ T8388]  input_event_from_user+0x100/0x290
[  267.091347][ T8388]  ? __pfx_input_event_from_user+0x10/0x10
[  267.091383][ T8388]  evdev_write+0x2c7/0x4c0
[  267.091411][ T8388]  ? __pfx_evdev_write+0x10/0x10
[  267.091435][ T8388]  ? bpf_lsm_file_permission+0x9/0x20
[  267.091460][ T8388]  ? security_file_permission+0x75/0x260
[  267.091488][ T8388]  ? rw_verify_area+0x255/0x4d0
[  267.091511][ T8388]  ? __pfx_evdev_write+0x10/0x10
[  267.091534][ T8388]  vfs_write+0x29a/0xb90
[  267.091566][ T8388]  ? __pfx_vfs_write+0x10/0x10
[  267.091592][ T8388]  ? __fget_files+0x2a/0x420
[  267.091614][ T8388]  ? __fget_files+0x2a/0x420
[  267.091631][ T8388]  ? __fget_files+0x3a0/0x420
[  267.091648][ T8388]  ? __fget_files+0x2a/0x420
[  267.091675][ T8388]  ksys_write+0x150/0x270
[  267.091701][ T8388]  ? __pfx_ksys_write+0x10/0x10
[  267.091735][ T8388]  __do_fast_syscall_32+0x20d/0x640
[  267.091764][ T8388]  ? do_fast_syscall_32+0x33/0x70
[  267.091789][ T8388]  ? asm_int80_emulation+0x1a/0x20
[  267.091807][ T8388]  ? do_int80_emulation+0x274/0x4d0
[  267.091832][ T8388]  ? trace_irq_disable+0x3b/0x150
[  267.091855][ T8388]  do_fast_syscall_32+0x33/0x70
[  267.091882][ T8388]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  267.091906][ T8388] RIP: 0023:0xf7f24f6c
[  267.091934][ T8388] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  267.091951][ T8388] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  267.091973][ T8388] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040
[  267.091987][ T8388] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000
[  267.092000][ T8388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  267.092011][ T8388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  267.092023][ T8388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  267.092055][ T8388]  </TASK>
[  267.349417][ T5921] usb 1-1: Using ep0 maxpacket: 32
[  267.444546][  T796] usb 3-1: Using ep0 maxpacket: 16
[  267.452151][  T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  267.465947][  T796] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  267.475271][  T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.483676][  T796] usb 3-1: Product: syz
[  267.488006][  T796] usb 3-1: Manufacturer: syz
[  267.493739][  T796] usb 3-1: SerialNumber: syz
[  267.502459][ T5921] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  267.503171][  T796] usb 3-1: config 0 descriptor??
[  267.511783][ T5921] usb 1-1: config 0 has no interface number 0
[  267.530312][  T796] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  267.540247][ T5921] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 39163, setting to 1024
[  267.541714][  T796] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  267.558617][   T24] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  267.583035][ T5921] usb 1-1: config 0 interface 89 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024
[  267.639532][ T5921] usb 1-1: config 0 interface 89 has no altsetting 0
[  267.676895][ T5921] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  267.691221][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.713872][   T24] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  267.723491][   T24] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  267.744451][ T5921] usb 1-1: Product: syz
[  267.754498][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  267.756676][ T5921] usb 1-1: Manufacturer: syz
[  267.775009][ T5921] usb 1-1: SerialNumber: syz
[  267.785063][   T24] usb 2-1: config 1 has no interface number 0
[  267.798179][ T5921] usb 1-1: config 0 descriptor??
[  267.801902][   T24] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  267.844367][   T24] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  267.865314][   T24] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  267.865533][ T8386] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  267.926763][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.929975][ T5921] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  267.971795][ T5921] em28xx 1-1:0.89: Video interface 89 found: bulk
[  268.001700][   T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  268.187734][  T796] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  268.200300][   T24] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[  268.214275][   T24] snd_usb_pod 2-1:1.1: invalid control EP
[  268.224075][   T24] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  268.335168][   T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  268.374601][ T8386] cgroup: fork rejected by pids controller in /syz0
[  268.376824][   T24] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[  268.416767][   T24] usb 2-1: USB disconnect, device number 15
[  268.618365][  T796] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  268.628683][  T796] em28xx 3-1:0.0: board has no eeprom
[  269.130379][ T5921] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  269.133552][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'.
[  269.195312][ T5921] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  269.212673][ T5921] em28xx 1-1:0.89: board has no eeprom
[  269.319595][ T5921] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  269.343468][ T5921] em28xx 1-1:0.89: analog set to bulk mode.
[  269.372660][  T980] em28xx 1-1:0.89: Registering V4L2 extension
[  269.579290][  T980] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  269.632187][  T980] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5)
[  269.666521][ T5913] usb 1-1: USB disconnect, device number 16
[  269.673780][ T5913] em28xx 1-1:0.89: Disconnecting em28xx
[  269.724971][  T980] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[  269.755135][ T8385] em28xx 3-1:0.0: reading from i2c device at 0x482c failed (error=-5)
[  269.800751][  T980] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  269.809465][  T796] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  269.818683][  T796] em28xx 3-1:0.0: dvb set to bulk mode.
[  269.875251][  T980] em28xx 1-1:0.89: No AC97 audio processor
[  269.894037][  T796] usb 3-1: USB disconnect, device number 22
[  269.930567][  T980] usb 1-1: Decoder not found
[  269.979422][  T980] em28xx 1-1:0.89: failed to create media graph
[  270.034794][  T980] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  270.047472][  T796] em28xx 3-1:0.0: Disconnecting em28xx
[  270.130725][  T980] em28xx 1-1:0.89: Registering snapshot button...
[  270.253122][  T980] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input9
[  270.327207][  T980] em28xx 1-1:0.89: Remote control support is not available for this card.
[  270.472224][   T24] em28xx 3-1:0.0: Binding DVB extension
[  271.169026][ T8786] FAULT_INJECTION: forcing a failure.
[  271.169026][ T8786] name failslab, interval 1, probability 0, space 0, times 0
[  271.296267][   T24] em28xx 3-1:0.0: Registering input extension
[  271.333168][ T8786] CPU: 0 UID: 0 PID: 8786 Comm: syz.4.744 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  271.333193][ T8786] Tainted: [L]=SOFTLOCKUP
[  271.333197][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  271.333204][ T8786] Call Trace:
[  271.333212][ T8786]  <TASK>
[  271.333218][ T8786]  dump_stack_lvl+0xe8/0x150
[  271.333240][ T8786]  should_fail_ex+0x412/0x560
[  271.333261][ T8786]  should_failslab+0xa8/0x100
[  271.333279][ T8786]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  271.333293][ T8786]  ? do_raw_spin_lock+0x12b/0x2f0
[  271.333305][ T8786]  ? dup_task_struct+0x52/0x9a0
[  271.333324][ T8786]  dup_task_struct+0x52/0x9a0
[  271.333340][ T8786]  ? _raw_spin_unlock_irq+0x23/0x50
[  271.333356][ T8786]  copy_process+0x508/0x3cd0
[  271.333385][ T8786]  ? __pfx_copy_process+0x10/0x10
[  271.333408][ T8786]  kernel_clone+0x248/0x8e0
[  271.333428][ T8786]  ? __pfx_kernel_clone+0x10/0x10
[  271.333454][ T8786]  __se_sys_clone3+0x33c/0x360
[  271.333472][ T8786]  ? ksys_write+0x1e6/0x270
[  271.333485][ T8786]  ? __pfx___se_sys_clone3+0x10/0x10
[  271.333517][ T8786]  ? __fget_files+0x3a0/0x420
[  271.333542][ T8786]  __do_fast_syscall_32+0x20d/0x640
[  271.333559][ T8786]  ? do_fast_syscall_32+0x33/0x70
[  271.333574][ T8786]  ? asm_int80_emulation+0x1a/0x20
[  271.333587][ T8786]  ? do_int80_emulation+0x274/0x4d0
[  271.333644][ T8786]  ? trace_irq_disable+0x3b/0x150
[  271.333658][ T8786]  do_fast_syscall_32+0x33/0x70
[  271.333674][ T8786]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  271.333690][ T8786] RIP: 0023:0xf7f83f6c
[  271.333702][ T8786] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  271.333713][ T8786] RSP: 002b:00000000f54463dc EFLAGS: 00000206 ORIG_RAX: 00000000000001b3
[  271.333727][ T8786] RAX: ffffffffffffffda RBX: 00000000f5446410 RCX: 0000000000000058
[  271.333736][ T8786] RDX: 0000000000000000 RSI: 0000000040020000 RDI: 0000000000000000
[  271.333744][ T8786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  271.333750][ T8786] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  271.333758][ T8786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  271.333775][ T8786]  </TASK>
[  271.827022][ T5913] em28xx 1-1:0.89: Closing input extension
[  271.913285][ T5913] em28xx 1-1:0.89: Deregistering snapshot button
[  272.223398][  T796] em28xx 3-1:0.0: Closing input extension
[  272.404208][ T5913] em28xx 1-1:0.89: Freeing device
[  272.432241][  T796] em28xx 3-1:0.0: Freeing device
[  272.538181][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.749'.
[  273.557458][ T8812] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  273.564228][ T8812] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  273.613038][ T8812] vhci_hcd vhci_hcd.0: Device attached
[  273.799263][ T8815] vhci_hcd: connection closed
[  273.799837][ T1100] vhci_hcd vhci_hcd.4: stop threads
[  273.813972][ T1100] vhci_hcd vhci_hcd.4: release socket
[  273.826378][ T1100] vhci_hcd vhci_hcd.4: disconnect device
[  274.107535][ T8825] netlink: 96 bytes leftover after parsing attributes in process `syz.5.755'.
[  274.679098][ T8829] FAULT_INJECTION: forcing a failure.
[  274.679098][ T8829] name failslab, interval 1, probability 0, space 0, times 0
[  274.692714][ T8829] CPU: 1 UID: 0 PID: 8829 Comm: syz.2.756 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  274.692747][ T8829] Tainted: [L]=SOFTLOCKUP
[  274.692755][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  274.692766][ T8829] Call Trace:
[  274.692774][ T8829]  <TASK>
[  274.692783][ T8829]  dump_stack_lvl+0xe8/0x150
[  274.692818][ T8829]  should_fail_ex+0x412/0x560
[  274.692882][ T8829]  should_failslab+0xa8/0x100
[  274.692911][ T8829]  __kmalloc_node_noprof+0xf0/0x7c0
[  274.692936][ T8829]  ? qdisc_alloc+0x92/0x9e0
[  274.692962][ T8829]  qdisc_alloc+0x92/0x9e0
[  274.692991][ T8829]  qdisc_create_dflt+0x8e/0x510
[  274.693016][ T8829]  taprio_init+0x3e5/0xbe0
[  274.693051][ T8829]  ? __pfx_taprio_init+0x10/0x10
[  274.693071][ T8829]  ? qdisc_alloc+0x6ec/0x9e0
[  274.693096][ T8829]  ? __pfx_taprio_init+0x10/0x10
[  274.693117][ T8829]  qdisc_create+0x7c4/0xf20
[  274.693147][ T8829]  ? lockdep_rtnl_is_held+0x26/0x40
[  274.693179][ T8829]  tc_modify_qdisc+0x16f0/0x2290
[  274.693208][ T8829]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  274.693247][ T8829]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  274.693318][ T8829]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  274.693345][ T8829]  rtnetlink_rcv_msg+0x77e/0xbe0
[  274.693372][ T8829]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  274.693393][ T8829]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  274.693412][ T8829]  ? ref_tracker_free+0x693/0x840
[  274.693430][ T8829]  ? __copy_skb_header+0xa3/0x4a0
[  274.693457][ T8829]  ? __pfx_ref_tracker_free+0x10/0x10
[  274.693490][ T8829]  netlink_rcv_skb+0x232/0x4b0
[  274.693512][ T8829]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  274.693536][ T8829]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  274.693569][ T8829]  ? netlink_deliver_tap+0x2e/0x1b0
[  274.693599][ T8829]  netlink_unicast+0x80f/0x9b0
[  274.693636][ T8829]  ? __pfx_netlink_unicast+0x10/0x10
[  274.693668][ T8829]  ? netlink_sendmsg+0x650/0xb40
[  274.693687][ T8829]  ? skb_put+0x11b/0x210
[  274.693714][ T8829]  netlink_sendmsg+0x813/0xb40
[  274.693752][ T8829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.693778][ T8829]  ? aa_sock_msg_perm+0xf1/0x1b0
[  274.693810][ T8829]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  274.693838][ T8829]  ____sys_sendmsg+0x972/0x9f0
[  274.693879][ T8829]  ? __pfx_____sys_sendmsg+0x10/0x10
[  274.693910][ T8829]  ? kstrtoull+0x12f/0x1d0
[  274.693948][ T8829]  ___sys_sendmsg+0x2a5/0x360
[  274.693980][ T8829]  ? __pfx____sys_sendmsg+0x10/0x10
[  274.694008][ T8829]  ? get_pid_task+0x20/0x1f0
[  274.694028][ T8829]  ? get_pid_task+0x20/0x1f0
[  274.694044][ T8829]  ? get_pid_task+0x20/0x1f0
[  274.694093][ T8829]  ? __fget_files+0x2a/0x420
[  274.694112][ T8829]  ? __fget_files+0x3a0/0x420
[  274.694142][ T8829]  __sys_sendmsg+0x183/0x260
[  274.694170][ T8829]  ? __pfx___sys_sendmsg+0x10/0x10
[  274.694220][ T8829]  __do_fast_syscall_32+0x20d/0x640
[  274.694250][ T8829]  ? do_fast_syscall_32+0x33/0x70
[  274.694275][ T8829]  ? asm_int80_emulation+0x1a/0x20
[  274.694293][ T8829]  ? do_int80_emulation+0x274/0x4d0
[  274.694318][ T8829]  ? trace_irq_disable+0x3b/0x150
[  274.694340][ T8829]  do_fast_syscall_32+0x33/0x70
[  274.694368][ T8829]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  274.694392][ T8829] RIP: 0023:0xf7f87f6c
[  274.694434][ T8829] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  274.694452][ T8829] RSP: 002b:00000000f542550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  274.694475][ T8829] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800012c0
[  274.694489][ T8829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  274.694501][ T8829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  274.694513][ T8829] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  274.694525][ T8829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  274.694556][ T8829]  </TASK>
[  275.469522][ T5930] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  275.719514][ T5930] usb 1-1: device descriptor read/64, error -71
[  275.731263][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'.
[  275.969796][ T5930] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  276.129507][ T5930] usb 1-1: device descriptor read/64, error -71
[  276.269952][ T5930] usb usb1-port1: attempt power cycle
[  276.343834][  T980] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  276.549490][  T980] usb 2-1: Using ep0 maxpacket: 8
[  276.558653][  T980] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  276.571007][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.585235][  T980] usb 2-1: Product: syz
[  276.600149][  T980] usb 2-1: Manufacturer: syz
[  276.609037][  T980] usb 2-1: SerialNumber: syz
[  276.627535][  T980] usb 2-1: config 0 descriptor??
[  276.759601][ T5930] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  276.790387][ T5930] usb 1-1: device descriptor read/8, error -71
[  276.955299][  T980] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  276.994482][   T30] audit: type=1326 audit(1774848071.330:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.5.768" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x0
[  277.090087][ T5930] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  277.111300][ T5930] usb 1-1: device descriptor read/8, error -71
[  277.220299][ T5930] usb usb1-port1: unable to enumerate USB device
[  277.430616][ T8848] syzkaller0: entered promiscuous mode
[  277.444590][ T8848] syzkaller0: entered allmulticast mode
[  277.723784][  T980] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  277.745744][  T980] usb 2-1: USB disconnect, device number 16
[  278.294649][   T30] audit: type=1326 audit(1774848072.590:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.5.770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000
[  278.429695][   T30] audit: type=1326 audit(1774848072.590:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.5.770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000
[  278.550587][   T30] audit: type=1326 audit(1774848072.890:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.5.770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7125cab code=0x7ffc0000
[  278.638341][   T30] audit: type=1326 audit(1774848072.940:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.5.770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000
[  278.662515][ T8871] usb usb8: usbfs: process 8871 (syz.5.770) did not claim interface 0 before use
[  278.690245][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'.
[  278.732649][ T8871] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  278.781071][ T8871] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  278.791626][   T30] audit: type=1326 audit(1774848072.940:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.5.770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000
[  278.879603][   T30] audit: type=1326 audit(1774848072.970:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.5.770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6feef6c code=0x7ffc0000
[  278.888618][ T8871] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  278.991612][   T30] audit: type=1326 audit(1774848072.970:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.5.770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000
[  279.039466][   T30] audit: type=1326 audit(1774848072.970:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.5.770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000
[  279.109524][   T30] audit: type=1326 audit(1774848072.970:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.5.770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6feef6c code=0x7ffc0000
[  280.085618][ T5913] IPVS: starting estimator thread 0...
[  280.197273][ T8909] IPVS: using max 49 ests per chain, 117600 per kthread
[  280.739757][ T5885] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  281.096207][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -61
[  281.105630][ T5885] usb 5-1: can't read configurations, error -61
[  281.309630][ T5885] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  281.417925][ T8921] FAULT_INJECTION: forcing a failure.
[  281.417925][ T8921] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  281.462548][ T8921] CPU: 0 UID: 0 PID: 8921 Comm: syz.5.785 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  281.462585][ T8921] Tainted: [L]=SOFTLOCKUP
[  281.462592][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  281.462603][ T8921] Call Trace:
[  281.462611][ T8921]  <TASK>
[  281.462620][ T8921]  dump_stack_lvl+0xe8/0x150
[  281.462654][ T8921]  should_fail_ex+0x412/0x560
[  281.462689][ T8921]  _copy_to_user+0x31/0xb0
[  281.462716][ T8921]  simple_read_from_buffer+0xe1/0x170
[  281.462751][ T8921]  proc_fail_nth_read+0x1bb/0x230
[  281.462782][ T8921]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  281.462813][ T8921]  ? rw_verify_area+0x2a6/0x4d0
[  281.462835][ T8921]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  281.462865][ T8921]  vfs_read+0x20c/0xa70
[  281.462884][ T8921]  ? __fget_files+0x2a/0x420
[  281.462900][ T8921]  ? fdget_pos+0x246/0x320
[  281.462922][ T8921]  ? __pfx___mutex_lock+0x10/0x10
[  281.462948][ T8921]  ? __pfx_vfs_read+0x10/0x10
[  281.462971][ T8921]  ? __fget_files+0x2a/0x420
[  281.462995][ T8921]  ? __fget_files+0x3a0/0x420
[  281.463013][ T8921]  ? __fget_files+0x2a/0x420
[  281.463041][ T8921]  ksys_read+0x150/0x270
[  281.463067][ T8921]  ? __pfx_ksys_read+0x10/0x10
[  281.463093][ T8921]  ? asm_int80_emulation+0x1a/0x20
[  281.463120][ T8921]  do_int80_emulation+0x173/0x4d0
[  281.463146][ T8921]  ? trace_irq_disable+0x3b/0x150
[  281.463163][ T8921]  ? asm_int80_emulation+0x1a/0x20
[  281.463181][ T8921]  ? clear_bhb_loop+0x40/0x90
[  281.463201][ T8921]  ? clear_bhb_loop+0x40/0x90
[  281.463224][ T8921]  asm_int80_emulation+0x1a/0x20
[  281.463243][ T8921] RIP: 0023:0xf7125cab
[  281.463263][ T8921] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  281.463280][ T8921] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  281.463302][ T8921] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53dd5d0
[  281.463317][ T8921] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  281.463329][ T8921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  281.463341][ T8921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  281.463353][ T8921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  281.463385][ T8921]  </TASK>
[  281.788360][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -61
[  281.796655][ T5885] usb 5-1: can't read configurations, error -61
[  281.803555][ T5885] usb usb5-port1: attempt power cycle
[  281.951056][ T8930] FAULT_INJECTION: forcing a failure.
[  281.951056][ T8930] name failslab, interval 1, probability 0, space 0, times 0
[  281.965265][ T8930] CPU: 1 UID: 0 PID: 8930 Comm: syz.5.790 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  281.965301][ T8930] Tainted: [L]=SOFTLOCKUP
[  281.965308][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  281.965320][ T8930] Call Trace:
[  281.965329][ T8930]  <TASK>
[  281.965338][ T8930]  dump_stack_lvl+0xe8/0x150
[  281.965373][ T8930]  should_fail_ex+0x412/0x560
[  281.965410][ T8930]  should_failslab+0xa8/0x100
[  281.965437][ T8930]  ? security_inode_alloc+0x39/0x310
[  281.965458][ T8930]  kmem_cache_alloc_noprof+0x87/0x650
[  281.965478][ T8930]  ? __pfx_make_kgid+0x10/0x10
[  281.965515][ T8930]  security_inode_alloc+0x39/0x310
[  281.965537][ T8930]  inode_init_always_gfp+0x9ed/0xdc0
[  281.965574][ T8930]  ? __pfx_proc_alloc_inode+0x10/0x10
[  281.965604][ T8930]  alloc_inode+0x82/0x1b0
[  281.965634][ T8930]  new_inode+0x22/0x170
[  281.965670][ T8930]  proc_pid_make_inode+0x21/0x130
[  281.965695][ T8930]  proc_fd_instantiate+0x54/0x2f0
[  281.965720][ T8930]  ? proc_fill_cache+0x1d7/0x440
[  281.965746][ T8930]  proc_fill_cache+0x1ff/0x440
[  281.965783][ T8930]  ? __pfx_proc_fd_instantiate+0x10/0x10
[  281.965809][ T8930]  ? __pfx_proc_fill_cache+0x10/0x10
[  281.965830][ T8930]  ? snprintf+0xe8/0x140
[  281.965863][ T8930]  ? fget_task_next+0x572/0x5f0
[  281.965892][ T8930]  proc_readfd_common+0x3ce/0x5c0
[  281.965924][ T8930]  ? __pfx_proc_fd_instantiate+0x10/0x10
[  281.965950][ T8930]  ? __pfx_proc_readfd_common+0x10/0x10
[  281.965984][ T8930]  ? iterate_dir+0x292/0x570
[  281.966008][ T8930]  ? down_read_killable+0x1bb/0x340
[  281.966043][ T8930]  iterate_dir+0x399/0x570
[  281.966074][ T8930]  __se_sys_getdents64+0xf1/0x280
[  281.966104][ T8930]  ? __pfx___se_sys_getdents64+0x10/0x10
[  281.966129][ T8930]  ? __pfx_filldir64+0x10/0x10
[  281.966171][ T8930]  __do_fast_syscall_32+0x20d/0x640
[  281.966200][ T8930]  ? do_fast_syscall_32+0x33/0x70
[  281.966225][ T8930]  ? asm_int80_emulation+0x1a/0x20
[  281.966245][ T8930]  ? do_int80_emulation+0x274/0x4d0
[  281.966270][ T8930]  ? trace_irq_disable+0x3b/0x150
[  281.966292][ T8930]  do_fast_syscall_32+0x33/0x70
[  281.966320][ T8930]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  281.966345][ T8930] RIP: 0023:0xf6feef6c
[  281.966364][ T8930] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  281.966381][ T8930] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 00000000000000dc
[  281.966403][ T8930] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002f40
[  281.966417][ T8930] RDX: 0000000000001002 RSI: 0000000000000000 RDI: 0000000000000000
[  281.966429][ T8930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  281.966441][ T8930] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  281.966453][ T8930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  281.966486][ T8930]  </TASK>
[  282.534478][ T5885] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  282.582327][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -61
[  282.609100][ T5885] usb 5-1: can't read configurations, error -61
[  282.794627][ T5885] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  282.810233][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  282.810253][   T30] audit: type=1326 audit(1774848077.150:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.1.793" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x0
[  283.053714][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -61
[  283.064962][ T5885] usb 5-1: can't read configurations, error -61
[  283.091144][ T5885] usb usb5-port1: unable to enumerate USB device
[  283.794068][ T8960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.798'.
[  283.833921][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'.
[  283.953181][ T8955] syzkaller0: entered promiscuous mode
[  283.979627][ T8955] syzkaller0: entered allmulticast mode
[  284.019682][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.799'.
[  284.031239][ T8966] netlink: 'syz.0.800': attribute type 9 has an invalid length.
[  284.039287][ T8966] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.800'.
[  284.053364][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.799'.
[  284.420798][ T8977] syz.5.806 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  284.529911][   T30] audit: type=1326 audit(1774848078.860:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.0.807" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x0
[  284.706440][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.808'.
[  284.742358][ T8990] FAULT_INJECTION: forcing a failure.
[  284.742358][ T8990] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  284.758012][ T8990] CPU: 0 UID: 0 PID: 8990 Comm: syz.1.811 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  284.758042][ T8990] Tainted: [L]=SOFTLOCKUP
[  284.758049][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  284.758060][ T8990] Call Trace:
[  284.758068][ T8990]  <TASK>
[  284.758076][ T8990]  dump_stack_lvl+0xe8/0x150
[  284.758110][ T8990]  should_fail_ex+0x412/0x560
[  284.758145][ T8990]  _copy_to_user+0x31/0xb0
[  284.758172][ T8990]  simple_read_from_buffer+0xe1/0x170
[  284.758206][ T8990]  proc_fail_nth_read+0x1bb/0x230
[  284.758238][ T8990]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  284.758270][ T8990]  ? rw_verify_area+0x2a6/0x4d0
[  284.758291][ T8990]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  284.758320][ T8990]  vfs_read+0x20c/0xa70
[  284.758340][ T8990]  ? fdget_pos+0x246/0x320
[  284.758357][ T8990]  ? _raw_spin_unlock_irq+0x2e/0x50
[  284.758384][ T8990]  ? __pfx___mutex_lock+0x10/0x10
[  284.758410][ T8990]  ? __pfx_vfs_read+0x10/0x10
[  284.758435][ T8990]  ? __fget_files+0x2a/0x420
[  284.758457][ T8990]  ? __fget_files+0x3a0/0x420
[  284.758473][ T8990]  ? __fget_files+0x2a/0x420
[  284.758500][ T8990]  ksys_read+0x150/0x270
[  284.758525][ T8990]  ? __pfx_ksys_read+0x10/0x10
[  284.758550][ T8990]  ? asm_int80_emulation+0x1a/0x20
[  284.758577][ T8990]  do_int80_emulation+0x173/0x4d0
[  284.758603][ T8990]  ? trace_irq_disable+0x3b/0x150
[  284.758619][ T8990]  ? asm_int80_emulation+0x1a/0x20
[  284.758636][ T8990]  ? clear_bhb_loop+0x40/0x90
[  284.758666][ T8990]  ? clear_bhb_loop+0x40/0x90
[  284.758687][ T8990]  asm_int80_emulation+0x1a/0x20
[  284.758706][ T8990] RIP: 0023:0xf7125cab
[  284.758724][ T8990] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  284.758741][ T8990] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  284.758761][ T8990] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0
[  284.758775][ T8990] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  284.758794][ T8990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  284.758805][ T8990] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  284.758817][ T8990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  284.758847][ T8990]  </TASK>
[  284.765758][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.807'.
[  285.755387][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'.
[  286.433395][ T9009] syzkaller0: entered promiscuous mode
[  286.455606][ T9009] syzkaller0: entered allmulticast mode
[  286.557787][ T9015] FAULT_INJECTION: forcing a failure.
[  286.557787][ T9015] name failslab, interval 1, probability 0, space 0, times 0
[  286.579561][ T9015] CPU: 0 UID: 0 PID: 9015 Comm: syz.4.819 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  286.579596][ T9015] Tainted: [L]=SOFTLOCKUP
[  286.579603][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  286.579615][ T9015] Call Trace:
[  286.579623][ T9015]  <TASK>
[  286.579631][ T9015]  dump_stack_lvl+0xe8/0x150
[  286.579665][ T9015]  should_fail_ex+0x412/0x560
[  286.579699][ T9015]  should_failslab+0xa8/0x100
[  286.579734][ T9015]  ? vm_area_dup+0x2b/0x680
[  286.579749][ T9015]  kmem_cache_alloc_noprof+0x87/0x650
[  286.579767][ T9015]  vm_area_dup+0x2b/0x680
[  286.579783][ T9015]  __split_vma+0x1dc/0xa40
[  286.579801][ T9015]  ? mas_find+0xb0e/0xd30
[  286.579821][ T9015]  ? __pfx___split_vma+0x10/0x10
[  286.579845][ T9015]  ? __pfx___up_read+0x10/0x10
[  286.579859][ T9015]  vms_gather_munmap_vmas+0x32d/0x1370
[  286.579876][ T9015]  ? __mt_destroy+0x1c9/0x280
[  286.579891][ T9015]  ? vms_complete_munmap_vmas+0xa0b/0xc60
[  286.579914][ T9015]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  286.579942][ T9015]  do_vmi_align_munmap+0x2b4/0x4b0
[  286.579967][ T9015]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  286.580001][ T9015]  do_vmi_munmap+0x252/0x2d0
[  286.580020][ T9015]  __vm_munmap+0x22c/0x3d0
[  286.580039][ T9015]  ? __pfx___vm_munmap+0x10/0x10
[  286.580054][ T9015]  ? vm_mmap_pgoff+0x3b1/0x4f0
[  286.580076][ T9015]  ? exc_page_fault+0x6a/0xc0
[  286.580095][ T9015]  __ia32_sys_munmap+0x5f/0x70
[  286.580109][ T9015]  __do_fast_syscall_32+0x20d/0x640
[  286.580125][ T9015]  ? lockdep_hardirqs_on+0x7a/0x110
[  286.580138][ T9015]  ? do_fast_syscall_32+0x33/0x70
[  286.580153][ T9015]  ? irqentry_exit+0x10e/0x620
[  286.580167][ T9015]  ? trace_irq_disable+0x3b/0x150
[  286.580180][ T9015]  do_fast_syscall_32+0x33/0x70
[  286.580196][ T9015]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  286.580211][ T9015] RIP: 0023:0xf7f83f6c
[  286.580223][ T9015] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  286.580233][ T9015] RSP: 002b:00000000f542424c EFLAGS: 00000206 ORIG_RAX: 000000000000005b
[  286.580248][ T9015] RAX: ffffffffffffffda RBX: 00000000f5300000 RCX: 00000000000e4000
[  286.580256][ T9015] RDX: 00000000f7412ff4 RSI: 0000000000021000 RDI: 0000000000100000
[  286.580264][ T9015] RBP: 00000000f5200000 R08: 0000000000000000 R09: 0000000000000000
[  286.580271][ T9015] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  286.580278][ T9015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  286.580295][ T9015]  </TASK>
[  287.189483][ T5913] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  287.373156][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.388546][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4
[  287.418443][ T9026] syzkaller0: entered promiscuous mode
[  287.427012][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  287.449408][ T9026] syzkaller0: entered allmulticast mode
[  287.459514][ T5913] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  287.499658][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.554877][ T5913] usb 5-1: config 0 descriptor??
[  287.783282][   T30] audit: type=1326 audit(1774848082.110:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.5.824" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x0
[  287.894560][ T5913] ath6kl: Failed to submit usb control message: -71
[  287.910214][ T5913] ath6kl: unable to send the bmi data to the device: -71
[  287.926510][ T5913] ath6kl: Unable to send get target info: -71
[  287.949135][ T5913] ath6kl: Failed to init ath6kl core: -71
[  287.980600][ T5913] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  288.016344][ T9036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.824'.
[  288.039218][ T5913] usb 5-1: USB disconnect, device number 25
[  288.203463][ T9042] FAULT_INJECTION: forcing a failure.
[  288.203463][ T9042] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  288.240204][ T9042] CPU: 0 UID: 0 PID: 9042 Comm: syz.0.827 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.240240][ T9042] Tainted: [L]=SOFTLOCKUP
[  288.240247][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  288.240259][ T9042] Call Trace:
[  288.240268][ T9042]  <TASK>
[  288.240277][ T9042]  dump_stack_lvl+0xe8/0x150
[  288.240314][ T9042]  should_fail_ex+0x412/0x560
[  288.240352][ T9042]  _copy_to_user+0x31/0xb0
[  288.240379][ T9042]  simple_read_from_buffer+0xe1/0x170
[  288.240414][ T9042]  proc_fail_nth_read+0x1bb/0x230
[  288.240447][ T9042]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  288.240480][ T9042]  ? rw_verify_area+0x2a6/0x4d0
[  288.240512][ T9042]  ? tun_chr_write_iter+0x18a/0x200
[  288.240533][ T9042]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  288.240563][ T9042]  vfs_read+0x20c/0xa70
[  288.240584][ T9042]  ? fdget_pos+0x246/0x320
[  288.240608][ T9042]  ? __pfx___mutex_lock+0x10/0x10
[  288.240636][ T9042]  ? __pfx_vfs_read+0x10/0x10
[  288.240660][ T9042]  ? __fget_files+0x2a/0x420
[  288.240683][ T9042]  ? __fget_files+0x3a0/0x420
[  288.240700][ T9042]  ? __fget_files+0x2a/0x420
[  288.240728][ T9042]  ksys_read+0x150/0x270
[  288.240753][ T9042]  ? __pfx_ksys_read+0x10/0x10
[  288.240779][ T9042]  ? asm_int80_emulation+0x1a/0x20
[  288.240806][ T9042]  do_int80_emulation+0x173/0x4d0
[  288.240832][ T9042]  ? trace_irq_disable+0x3b/0x150
[  288.240850][ T9042]  ? asm_int80_emulation+0x1a/0x20
[  288.240869][ T9042]  ? clear_bhb_loop+0x40/0x90
[  288.240890][ T9042]  ? clear_bhb_loop+0x40/0x90
[  288.240915][ T9042]  asm_int80_emulation+0x1a/0x20
[  288.240935][ T9042] RIP: 0023:0xf7155cab
[  288.240954][ T9042] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  288.240973][ T9042] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  288.240995][ T9042] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f540d5d0
[  288.241010][ T9042] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  288.241022][ T9042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  288.241033][ T9042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  288.241044][ T9042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  288.241077][ T9042]  </TASK>
[  289.252035][ T9060] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  290.196730][ T9084] netlink: 'syz.1.841': attribute type 2 has an invalid length.
[  290.254650][ T9084] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  290.459966][ T8768] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.570223][   T30] audit: type=1326 audit(1774848084.890:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.0.844" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x0
[  290.756888][ T9097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.844'.
[  291.300551][ T9105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.848'.
[  291.633805][ T9116] FAULT_INJECTION: forcing a failure.
[  291.633805][ T9116] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  291.709845][ T9116] CPU: 1 UID: 0 PID: 9116 Comm: syz.1.852 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  291.709881][ T9116] Tainted: [L]=SOFTLOCKUP
[  291.709888][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  291.709900][ T9116] Call Trace:
[  291.709908][ T9116]  <TASK>
[  291.709916][ T9116]  dump_stack_lvl+0xe8/0x150
[  291.709951][ T9116]  should_fail_ex+0x412/0x560
[  291.709986][ T9116]  _copy_from_user+0x2d/0xb0
[  291.710012][ T9116]  generic_map_update_batch+0x648/0x990
[  291.710049][ T9116]  ? __pfx_generic_map_update_batch+0x10/0x10
[  291.710085][ T9116]  ? __pfx_generic_map_update_batch+0x10/0x10
[  291.710110][ T9116]  bpf_map_do_batch+0x39b/0x630
[  291.710137][ T9116]  __sys_bpf+0x7c1/0x950
[  291.710158][ T9116]  ? __pfx___sys_bpf+0x10/0x10
[  291.710194][ T9116]  ? ksys_write+0x1fc/0x270
[  291.710227][ T9116]  __ia32_sys_bpf+0x7c/0x90
[  291.710257][ T9116]  __do_fast_syscall_32+0x20d/0x640
[  291.710289][ T9116]  ? do_fast_syscall_32+0x33/0x70
[  291.710313][ T9116]  ? asm_int80_emulation+0x1a/0x20
[  291.710333][ T9116]  ? do_int80_emulation+0x274/0x4d0
[  291.710357][ T9116]  ? trace_irq_disable+0x3b/0x150
[  291.710380][ T9116]  do_fast_syscall_32+0x33/0x70
[  291.710407][ T9116]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  291.710432][ T9116] RIP: 0023:0xf7f24f6c
[  291.710452][ T9116] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  291.710468][ T9116] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[  291.710491][ T9116] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000300
[  291.710505][ T9116] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000
[  291.710517][ T9116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  291.710529][ T9116] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  291.710550][ T9116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  291.710580][ T9116]  </TASK>
[  291.938605][ T9119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.851'.
[  292.344297][ T9125] FAULT_INJECTION: forcing a failure.
[  292.344297][ T9125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  292.371635][  T980] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  292.541704][ T9125] CPU: 1 UID: 0 PID: 9125 Comm: syz.1.854 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  292.541735][ T9125] Tainted: [L]=SOFTLOCKUP
[  292.541740][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  292.541747][ T9125] Call Trace:
[  292.541753][ T9125]  <TASK>
[  292.541758][ T9125]  dump_stack_lvl+0xe8/0x150
[  292.541781][ T9125]  should_fail_ex+0x412/0x560
[  292.541803][ T9125]  _copy_from_iter+0x1d3/0x1670
[  292.541818][ T9125]  ? rcu_is_watching+0x15/0xb0
[  292.541838][ T9125]  ? __pfx__copy_from_iter+0x10/0x10
[  292.541860][ T9125]  ? netlink_sendmsg+0x650/0xb40
[  292.541873][ T9125]  ? skb_put+0x11b/0x210
[  292.541889][ T9125]  netlink_sendmsg+0x6c0/0xb40
[  292.541906][ T9125]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.541920][ T9125]  ? aa_sock_msg_perm+0xf1/0x1b0
[  292.541939][ T9125]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  292.541954][ T9125]  ____sys_sendmsg+0x972/0x9f0
[  292.541974][ T9125]  ? __pfx_____sys_sendmsg+0x10/0x10
[  292.541991][ T9125]  ? kstrtoull+0x12f/0x1d0
[  292.542012][ T9125]  ___sys_sendmsg+0x2a5/0x360
[  292.542030][ T9125]  ? __pfx____sys_sendmsg+0x10/0x10
[  292.542045][ T9125]  ? get_pid_task+0x20/0x1f0
[  292.542057][ T9125]  ? get_pid_task+0x20/0x1f0
[  292.542067][ T9125]  ? get_pid_task+0x20/0x1f0
[  292.542091][ T9125]  ? __fget_files+0x2a/0x420
[  292.542102][ T9125]  ? __fget_files+0x3a0/0x420
[  292.542118][ T9125]  __sys_sendmsg+0x183/0x260
[  292.542134][ T9125]  ? __pfx___sys_sendmsg+0x10/0x10
[  292.542160][ T9125]  __do_fast_syscall_32+0x20d/0x640
[  292.542177][ T9125]  ? do_fast_syscall_32+0x33/0x70
[  292.542192][ T9125]  ? asm_int80_emulation+0x1a/0x20
[  292.542203][ T9125]  ? do_int80_emulation+0x274/0x4d0
[  292.542217][ T9125]  ? trace_irq_disable+0x3b/0x150
[  292.542230][ T9125]  do_fast_syscall_32+0x33/0x70
[  292.542246][ T9125]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  292.542260][ T9125] RIP: 0023:0xf7f24f6c
[  292.542272][ T9125] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  292.542283][ T9125] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  292.542297][ T9125] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  292.542305][ T9125] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  292.542312][ T9125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  292.542320][ T9125] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  292.542327][ T9125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  292.542343][ T9125]  </TASK>
[  292.841713][  T980] usb 5-1: unable to get BOS descriptor or descriptor too short
[  292.958744][  T980] usb 5-1: not running at top speed; connect to a high speed hub
[  293.015482][ T9128] netlink: zone id is out of range
[  293.068136][  T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  293.085142][ T9128] netlink: zone id is out of range
[  293.121354][  T980] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  293.174165][  T980] usb 5-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40
[  293.191167][  T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.224913][  T980] usb 5-1: Product: syz
[  293.246052][  T980] usb 5-1: Manufacturer: syz
[  293.282203][  T980] usb 5-1: SerialNumber: syz
[  293.481103][   T30] audit: type=1326 audit(1774848087.820:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.0.861" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x0
[  293.489871][ T5913] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  293.519804][ T9121] gretap2: entered promiscuous mode
[  293.526164][ T9121] batman_adv: batadv0: Adding interface: gretap2
[  293.536531][ T9121] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  293.557616][ T9121] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  293.580155][  T980] usb 5-1: unit 2 not found!
[  293.584803][  T980] usb 5-1: unit 8 not found!
[  293.599306][ T9138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.861'.
[  293.609939][ T5930] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  293.642087][  T980] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  293.659453][ T5913] usb 2-1: Using ep0 maxpacket: 8
[  293.660538][  T980] usb 5-1: USB disconnect, device number 26
[  293.683166][ T5913] usb 2-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 8
[  293.688315][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  293.694369][ T5913] usb 2-1: config 1 interface 0 has no altsetting 0
[  293.724825][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  293.735910][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.745426][ T5913] usb 2-1: Product: syz
[  293.751663][ T5913] usb 2-1: Manufacturer: syz
[  293.756513][ T5913] usb 2-1: SerialNumber: syz
[  293.765634][ T9131] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  293.779504][ T5930] usb 3-1: Using ep0 maxpacket: 32
[  293.786750][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.799169][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.809726][ T5930] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  293.819972][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.831416][ T5930] usb 3-1: config 0 descriptor??
[  293.977655][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'.
[  294.341920][ T5930] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0
[  294.365609][ T5930] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0
[  294.379616][ T5930] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0
[  294.428990][ T5930] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0
[  294.538945][ T5930] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0
[  294.546566][ T5930] savu 0003:1E7D:2D5A.0007: unbalanced collection at end of report description
[  294.560508][ T5930] savu 0003:1E7D:2D5A.0007: parse failed
[  294.566512][ T5930] savu 0003:1E7D:2D5A.0007: probe with driver savu failed with error -22
[  294.628994][ T5913] usb 2-1: bad CDC descriptors
[  294.676095][ T5913] usb 2-1: USB disconnect, device number 17
[  295.045919][ T5885] usb 3-1: USB disconnect, device number 23
[  295.425518][ T9161] FAULT_INJECTION: forcing a failure.
[  295.425518][ T9161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.539763][ T9161] CPU: 1 UID: 0 PID: 9161 Comm: syz.2.869 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.539797][ T9161] Tainted: [L]=SOFTLOCKUP
[  295.539805][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  295.539817][ T9161] Call Trace:
[  295.539825][ T9161]  <TASK>
[  295.539834][ T9161]  dump_stack_lvl+0xe8/0x150
[  295.539868][ T9161]  should_fail_ex+0x412/0x560
[  295.539904][ T9161]  _copy_from_iter+0x1d3/0x1670
[  295.539926][ T9161]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  295.539957][ T9161]  ? __pfx_policy_nodemask+0x10/0x10
[  295.539986][ T9161]  ? __pfx__copy_from_iter+0x10/0x10
[  295.540014][ T9161]  ? set_page_refcounted+0xa0/0x1e0
[  295.540040][ T9161]  ? page_copy_sane+0x4e/0x270
[  295.540060][ T9161]  copy_page_from_iter+0xdd/0x170
[  295.540086][ T9161]  tun_get_user+0x1d4b/0x3dd0
[  295.540108][ T9161]  ? tun_get_user+0x6ff/0x3dd0
[  295.540148][ T9161]  ? aa_file_perm+0x50e/0x15e0
[  295.540168][ T9161]  ? __pfx_tun_get_user+0x10/0x10
[  295.540187][ T9161]  ? aa_file_perm+0x192/0x15e0
[  295.540225][ T9161]  ? ref_tracker_alloc+0x35c/0x4c0
[  295.540246][ T9161]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  295.540271][ T9161]  ? tun_get+0x1c/0x2f0
[  295.540297][ T9161]  ? tun_get+0x1c/0x2f0
[  295.540316][ T9161]  ? tun_get+0x1c/0x2f0
[  295.540342][ T9161]  tun_chr_write_iter+0x113/0x200
[  295.540366][ T9161]  vfs_write+0x61d/0xb90
[  295.540398][ T9161]  ? __pfx_vfs_write+0x10/0x10
[  295.540431][ T9161]  ? __fget_files+0x2a/0x420
[  295.540457][ T9161]  ksys_write+0x150/0x270
[  295.540481][ T9161]  ? __pfx_ksys_write+0x10/0x10
[  295.540502][ T9161]  ? asm_int80_emulation+0x1a/0x20
[  295.540522][ T9161]  do_int80_emulation+0x173/0x4d0
[  295.540548][ T9161]  ? trace_irq_disable+0x3b/0x150
[  295.540562][ T9161]  ? asm_int80_emulation+0x1a/0x20
[  295.540577][ T9161]  ? clear_bhb_loop+0x40/0x90
[  295.540592][ T9161]  ? clear_bhb_loop+0x40/0x90
[  295.540611][ T9161]  asm_int80_emulation+0x1a/0x20
[  295.540626][ T9161] RIP: 0023:0xf7185cab
[  295.540641][ T9161] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  295.540656][ T9161] RSP: 002b:00000000f544644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  295.540676][ T9161] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000180
[  295.540697][ T9161] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000000
[  295.540707][ T9161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  295.540716][ T9161] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  295.540726][ T9161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  295.540749][ T9161]  </TASK>
[  296.237029][ T9168] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.871'.
[  296.963445][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.986819][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.107897][   T30] audit: type=1326 audit(1774848091.440:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.4.875" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83f6c code=0x0
[  297.210143][ T5885] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  297.223093][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.873'.
[  297.237563][ T9181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.875'.
[  297.371637][ T5885] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  297.379629][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  297.397176][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  297.427843][ T5885] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  297.438129][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.447475][ T5885] usb 2-1: Product: syz
[  297.453282][ T5885] usb 2-1: Manufacturer: syz
[  297.458088][ T5885] usb 2-1: SerialNumber: syz
[  297.472545][ T5885] usb 2-1: config 0 descriptor??
[  297.807224][ T5885] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff
[  297.894398][ T5885] usb 2-1: USB disconnect, device number 18
[  298.072028][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  298.183784][ T9193] FAULT_INJECTION: forcing a failure.
[  298.183784][ T9193] name failslab, interval 1, probability 0, space 0, times 0
[  298.231972][ T9187] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  298.295569][ T9193] CPU: 1 UID: 0 PID: 9193 Comm: syz.0.879 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  298.295604][ T9193] Tainted: [L]=SOFTLOCKUP
[  298.295612][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  298.295624][ T9193] Call Trace:
[  298.295635][ T9193]  <TASK>
[  298.295644][ T9193]  dump_stack_lvl+0xe8/0x150
[  298.295680][ T9193]  should_fail_ex+0x412/0x560
[  298.295718][ T9193]  should_failslab+0xa8/0x100
[  298.295746][ T9193]  __kmalloc_noprof+0xe8/0x760
[  298.295770][ T9193]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  298.295799][ T9193]  tomoyo_realpath_from_path+0xe3/0x5d0
[  298.295832][ T9193]  ? tomoyo_path_number_perm+0x219/0x630
[  298.295861][ T9193]  tomoyo_path_number_perm+0x246/0x630
[  298.295892][ T9193]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  298.295924][ T9193]  ? __lock_acquire+0x6b5/0x2cf0
[  298.295989][ T9193]  ? __fget_files+0x2a/0x420
[  298.296013][ T9193]  ? __fget_files+0x3a0/0x420
[  298.296031][ T9193]  ? __fget_files+0x2a/0x420
[  298.296054][ T9193]  security_file_ioctl_compat+0xc3/0x2a0
[  298.296084][ T9193]  __ia32_compat_sys_ioctl+0x139/0x950
[  298.296115][ T9193]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  298.296145][ T9193]  ? __fget_files+0x3a0/0x420
[  298.296170][ T9193]  ? fput+0xa0/0xd0
[  298.296199][ T9193]  ? ksys_write+0x242/0x270
[  298.296236][ T9193]  __do_fast_syscall_32+0x20d/0x640
[  298.296264][ T9193]  ? do_fast_syscall_32+0x33/0x70
[  298.296290][ T9193]  ? asm_int80_emulation+0x1a/0x20
[  298.296309][ T9193]  ? do_int80_emulation+0x274/0x4d0
[  298.296334][ T9193]  ? trace_irq_disable+0x3b/0x150
[  298.296358][ T9193]  do_fast_syscall_32+0x33/0x70
[  298.296386][ T9193]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  298.296419][ T9193] RIP: 0023:0xf701ef6c
[  298.296438][ T9193] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  298.296456][ T9193] RSP: 002b:00000000f53ec50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  298.296479][ T9193] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080086601
[  298.296492][ T9193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  298.296504][ T9193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  298.296516][ T9193] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  298.296528][ T9193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  298.296559][ T9193]  </TASK>
[  298.296569][ T9193] ERROR: Out of memory at tomoyo_realpath_from_path.
[  299.095397][ T1090] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  299.347550][ T9206] batadv0: entered promiscuous mode
[  299.361065][ T9206] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  299.378515][ T9206] batadv0: left promiscuous mode
[  300.201375][ T5920] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  300.392675][ T9226] FAULT_INJECTION: forcing a failure.
[  300.392675][ T9226] name failslab, interval 1, probability 0, space 0, times 0
[  300.409959][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'.
[  300.452412][ T9226] CPU: 0 UID: 0 PID: 9226 Comm: syz.0.890 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  300.452457][ T9226] Tainted: [L]=SOFTLOCKUP
[  300.452464][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  300.452476][ T9226] Call Trace:
[  300.452485][ T9226]  <TASK>
[  300.452494][ T9226]  dump_stack_lvl+0xe8/0x150
[  300.452528][ T9226]  should_fail_ex+0x412/0x560
[  300.452564][ T9226]  should_failslab+0xa8/0x100
[  300.452590][ T9226]  ? skb_clone+0x212/0x3a0
[  300.452617][ T9226]  kmem_cache_alloc_noprof+0x87/0x650
[  300.452638][ T9226]  ? ipv6_chk_mcast_addr+0x2e/0x860
[  300.452673][ T9226]  skb_clone+0x212/0x3a0
[  300.452696][ T9226]  ? ip6_finish_output2+0xed4/0x13e0
[  300.452725][ T9226]  ip6_finish_output2+0xee3/0x13e0
[  300.452766][ T9226]  ip6_fragment+0x1915/0x1f30
[  300.452814][ T9226]  ? __pfx_ip6_finish_output2+0x10/0x10
[  300.452847][ T9226]  ? __pfx_ip6_fragment+0x10/0x10
[  300.452868][ T9226]  ? ip6_mtu+0x7d/0x490
[  300.452888][ T9226]  ? ip6_mtu+0x38c/0x490
[  300.452911][ T9226]  ? ip6_finish_output+0x37d/0x480
[  300.452933][ T9226]  ? ip6_output+0x126/0x550
[  300.452956][ T9226]  ip6_output+0x340/0x550
[  300.452981][ T9226]  ? ip6_mr_output+0x1f3/0x11c0
[  300.453003][ T9226]  ip6_mr_output+0x549/0x11c0
[  300.453034][ T9226]  ? __pfx___schedule+0x10/0x10
[  300.453060][ T9226]  ? ip6_mr_output+0x1f3/0x11c0
[  300.453083][ T9226]  ? __pfx_ip6_mr_output+0x10/0x10
[  300.453115][ T9226]  ? irqentry_exit+0x59e/0x620
[  300.453140][ T9226]  ? lockdep_hardirqs_on+0x7a/0x110
[  300.453165][ T9226]  ? irqentry_exit+0x59e/0x620
[  300.453188][ T9226]  ? rcu_is_watching+0x15/0xb0
[  300.453240][ T9226]  ? ip6_local_out+0xea/0x190
[  300.453268][ T9226]  ? ip6_local_out+0x16e/0x190
[  300.453294][ T9226]  ? ip6_send_skb+0x10f/0x390
[  300.453320][ T9226]  ip6_send_skb+0x1d5/0x390
[  300.453348][ T9226]  rawv6_push_pending_frames+0x65e/0x810
[  300.453385][ T9226]  ? __pfx_rawv6_push_pending_frames+0x10/0x10
[  300.453417][ T9226]  ? __pfx_raw6_getfrag+0x10/0x10
[  300.453458][ T9226]  rawv6_sendmsg+0x1387/0x18e0
[  300.453499][ T9226]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  300.453540][ T9226]  ? aa_sk_perm+0x6d5/0x900
[  300.453581][ T9226]  ? __pfx_aa_sk_perm+0x10/0x10
[  300.453614][ T9226]  ? sock_rps_record_flow+0x19/0x400
[  300.453645][ T9226]  ? inet_sendmsg+0x2f4/0x370
[  300.453668][ T9226]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  300.453695][ T9226]  ____sys_sendmsg+0x80a/0x9f0
[  300.453732][ T9226]  ? __pfx_____sys_sendmsg+0x10/0x10
[  300.453764][ T9226]  ? kstrtoull+0x12f/0x1d0
[  300.453804][ T9226]  ___sys_sendmsg+0x2a5/0x360
[  300.453834][ T9226]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.453863][ T9226]  ? get_pid_task+0x20/0x1f0
[  300.453882][ T9226]  ? get_pid_task+0x20/0x1f0
[  300.453899][ T9226]  ? get_pid_task+0x20/0x1f0
[  300.453952][ T9226]  ? __fget_files+0x2a/0x420
[  300.453969][ T9226]  ? __fget_files+0x3a0/0x420
[  300.454001][ T9226]  __sys_sendmsg+0x183/0x260
[  300.454030][ T9226]  ? __pfx___sys_sendmsg+0x10/0x10
[  300.454084][ T9226]  __do_fast_syscall_32+0x20d/0x640
[  300.454112][ T9226]  ? do_fast_syscall_32+0x33/0x70
[  300.454137][ T9226]  ? asm_int80_emulation+0x1a/0x20
[  300.454156][ T9226]  ? do_int80_emulation+0x274/0x4d0
[  300.454182][ T9226]  ? trace_irq_disable+0x3b/0x150
[  300.454206][ T9226]  do_fast_syscall_32+0x33/0x70
[  300.454233][ T9226]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  300.454276][ T9226] RIP: 0023:0xf701ef6c
[  300.454297][ T9226] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  300.454315][ T9226] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  300.454337][ T9226] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  300.454351][ T9226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  300.454363][ T9226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  300.454375][ T9226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  300.454386][ T9226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  300.454418][ T9226]  </TASK>
[  300.679437][   T30] audit: type=1326 audit(1774848094.800:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.2.891" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f87f6c code=0x0
[  301.246845][ T9230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.891'.
[  301.589963][ T9240] binder: 9239:9240 ioctl c0306201 80000100 returned -14
[  301.639564][ T5913] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  301.821952][ T5913] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  301.874298][ T5913] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  301.919782][ T5913] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  301.928997][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.989288][ T9238] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  302.015536][ T5913] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  302.528368][ T5885] usb 1-1: USB disconnect, device number 21
[  302.629484][ T5913] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  302.841974][ T5913] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  302.879979][ T5913] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  302.940228][ T5913] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  302.991162][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.047423][ T9255] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  303.079025][ T5913] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  304.324746][ T9284] netlink: 9 bytes leftover after parsing attributes in process `syz.0.908'.
[  304.346181][ T9284] 0·: renamed from hsr0 (while UP)
[  304.391679][ T9284] 0·: entered allmulticast mode
[  304.421719][ T9284] hsr_slave_0: entered allmulticast mode
[  304.461962][ T9284] hsr_slave_1: entered allmulticast mode
[  304.503711][ T9284] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  304.691455][ T5930] usb 2-1: USB disconnect, device number 19
[  304.699479][ T5913] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  304.899555][ T5913] usb 1-1: Using ep0 maxpacket: 8
[  304.913621][ T5913] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  304.932317][ T5913] usb 1-1: config 0 has no interface number 0
[  304.942807][ T5913] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  304.961537][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.999413][ T5913] usb 1-1: Product: syz
[  305.003395][ T9296] batadv0: entered promiscuous mode
[  305.003995][ T5913] usb 1-1: Manufacturer: syz
[  305.011767][ T9296] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  305.023400][ T9296] batadv0: left promiscuous mode
[  305.041131][ T5913] usb 1-1: SerialNumber: syz
[  305.067885][ T5913] usb 1-1: config 0 descriptor??
[  305.179610][  T796] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  305.373167][  T796] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  305.425258][  T796] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  305.436750][ T5913] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  305.450771][ T5913] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized!
[  305.466328][  T796] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  305.481656][  T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.508507][ T5913] usb 1-1: USB disconnect, device number 22
[  305.541416][ T9293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  305.582083][  T796] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  305.822150][ T9310] netdevsim netdevsim4: Direct firmware load for /
[  305.822150][ T9310]  failed with error -2
[  305.846582][ T9310] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[  305.846582][ T9310] 
[  307.431892][  T796] usb 6-1: USB disconnect, device number 6
[  307.504942][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.920'.
[  307.536567][ T9325] FAULT_INJECTION: forcing a failure.
[  307.536567][ T9325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  307.580193][ T9325] CPU: 0 UID: 0 PID: 9325 Comm: syz.5.921 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  307.580229][ T9325] Tainted: [L]=SOFTLOCKUP
[  307.580236][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  307.580248][ T9325] Call Trace:
[  307.580257][ T9325]  <TASK>
[  307.580266][ T9325]  dump_stack_lvl+0xe8/0x150
[  307.580302][ T9325]  should_fail_ex+0x412/0x560
[  307.580337][ T9325]  _copy_from_iter+0x1d3/0x1670
[  307.580359][ T9325]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  307.580390][ T9325]  ? __pfx_policy_nodemask+0x10/0x10
[  307.580419][ T9325]  ? __pfx__copy_from_iter+0x10/0x10
[  307.580448][ T9325]  ? set_page_refcounted+0xa0/0x1e0
[  307.580472][ T9325]  ? page_copy_sane+0x4e/0x270
[  307.580495][ T9325]  copy_page_from_iter+0xdd/0x170
[  307.580520][ T9325]  tun_get_user+0x1d4b/0x3dd0
[  307.580542][ T9325]  ? tun_get_user+0x6ff/0x3dd0
[  307.580582][ T9325]  ? aa_file_perm+0x50e/0x15e0
[  307.580602][ T9325]  ? __pfx_tun_get_user+0x10/0x10
[  307.580623][ T9325]  ? aa_file_perm+0x192/0x15e0
[  307.580663][ T9325]  ? ref_tracker_alloc+0x35c/0x4c0
[  307.580686][ T9325]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  307.580722][ T9325]  ? tun_get+0x1c/0x2f0
[  307.580750][ T9325]  ? tun_get+0x1c/0x2f0
[  307.580772][ T9325]  ? tun_get+0x1c/0x2f0
[  307.580798][ T9325]  tun_chr_write_iter+0x113/0x200
[  307.580824][ T9325]  vfs_write+0x61d/0xb90
[  307.580855][ T9325]  ? __pfx_vfs_write+0x10/0x10
[  307.580888][ T9325]  ? __fget_files+0x2a/0x420
[  307.580917][ T9325]  ksys_write+0x150/0x270
[  307.580942][ T9325]  ? __pfx_ksys_write+0x10/0x10
[  307.580969][ T9325]  ? asm_int80_emulation+0x1a/0x20
[  307.580995][ T9325]  do_int80_emulation+0x173/0x4d0
[  307.581021][ T9325]  ? trace_irq_disable+0x3b/0x150
[  307.581039][ T9325]  ? asm_int80_emulation+0x1a/0x20
[  307.581058][ T9325]  ? clear_bhb_loop+0x40/0x90
[  307.581078][ T9325]  ? clear_bhb_loop+0x40/0x90
[  307.581102][ T9325]  asm_int80_emulation+0x1a/0x20
[  307.581122][ T9325] RIP: 0023:0xf7125cab
[  307.581140][ T9325] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  307.581158][ T9325] RSP: 002b:00000000f53dd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  307.581181][ T9325] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800000c0
[  307.581196][ T9325] RDX: 0000000000000032 RSI: 0000000000000000 RDI: 0000000000000000
[  307.581207][ T9325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  307.581219][ T9325] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  307.581231][ T9325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  307.581261][ T9325]  </TASK>
[  307.590828][ T9324] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  307.986892][ T9318] syzkaller0: entered promiscuous mode
[  308.029510][ T9318] syzkaller0: entered allmulticast mode
[  308.207573][ T9331] binder: 9330:9331 ioctl 5646 0 returned -22
[  308.218383][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.924'.
[  308.270382][ T5885] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  308.366025][ T5920] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  308.429470][ T5885] usb 5-1: Using ep0 maxpacket: 8
[  308.438498][ T5885] usb 5-1: unable to get BOS descriptor or descriptor too short
[  308.448752][ T5885] usb 5-1: config 240 has an invalid interface number: 167 but max is 0
[  308.458412][ T5885] usb 5-1: config 240 has no interface number 0
[  308.475837][ T5885] usb 5-1: config 240 interface 167 altsetting 255 bulk endpoint 0x6 has invalid maxpacket 1024
[  308.486712][  T980] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  308.495826][ T5885] usb 5-1: config 240 interface 167 has no altsetting 0
[  308.506697][ T5885] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=40.c1
[  308.516418][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.525716][ T5885] usb 5-1: Product: syz
[  308.530220][ T5885] usb 5-1: Manufacturer: syz
[  308.535100][ T5885] usb 5-1: SerialNumber: syz
[  308.544337][ T9327] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  308.562077][ T5920] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  308.581695][ T5920] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  308.602015][ T5920] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  308.619496][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.646654][ T9329] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  308.665622][  T980] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  308.666806][ T5920] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  308.682465][  T980] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  308.710502][  T980] usb 2-1: config 220 has no interface number 2
[  308.732451][  T980] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  308.757074][  T980] usb 2-1: config 220 interface 0 has no altsetting 0
[  308.772982][ T9327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.791097][ T9327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.797862][  T980] usb 2-1: config 220 interface 76 has no altsetting 0
[  308.816641][  T980] usb 2-1: config 220 interface 1 has no altsetting 0
[  308.834083][  T980] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  308.844955][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.853941][  T980] usb 2-1: Product: syz
[  308.858979][  T980] usb 2-1: Manufacturer: syz
[  308.867034][  T980] usb 2-1: SerialNumber: syz
[  308.876713][ T5885] kvaser_usb 5-1:240.167: error -ENODEV: Cannot get usb endpoint(s)
[  308.902602][ T5885] usb 5-1: USB disconnect, device number 28
[  309.165361][ T9331] binder: 9330:9331 ioctl c0306201 80000100 returned -11
[  309.173252][ T9331] binder: 9330:9331 ioctl c0306201 80000540 returned -22
[  309.220219][  T980] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  309.227860][  T980] uvcvideo 2-1:220.0: No valid video chain found.
[  309.258684][  T980] usb 2-1: selecting invalid altsetting 0
[  309.304673][  T980] usb 2-1: selecting invalid altsetting 0
[  309.319048][  T980] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  309.340035][  T980] usb 2-1: USB disconnect, device number 20
[  309.410947][ T5920] usb 6-1: USB disconnect, device number 7
[  309.831558][  T980] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  310.129842][  T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.140934][  T980] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  310.169874][  T980] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  310.191134][  T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  310.200054][  T980] usb 5-1: SerialNumber: syz
[  310.223486][  T980] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  310.251027][  T980] usb-storage 5-1:1.0: USB Mass Storage device detected
[  310.273449][  T980] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  311.879529][ T5920] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  312.063167][ T5920] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  312.083576][ T5920] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  312.146356][ T5920] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  312.171911][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.200330][ T9362] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  312.227590][ T5920] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  312.820432][ T9371] netdevsim netdevsim0: Direct firmware load for /
[  312.820432][ T9371]  failed with error -2
[  312.959567][ T9371] netdevsim netdevsim0: Falling back to sysfs fallback for: /
[  312.959567][ T9371] 
[  313.003864][ T5885] usb 6-1: USB disconnect, device number 8
[  313.141773][ T9377] binder: 9376:9377 ioctl c04c560f 80000380 returned -22
[  313.676683][ T5920] usb 5-1: USB disconnect, device number 29
[  314.398987][ T9400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  315.042555][ T9405] FAULT_INJECTION: forcing a failure.
[  315.042555][ T9405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  315.068976][ T9405] CPU: 0 UID: 0 PID: 9405 Comm: syz.5.945 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  315.069010][ T9405] Tainted: [L]=SOFTLOCKUP
[  315.069017][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  315.069028][ T9405] Call Trace:
[  315.069035][ T9405]  <TASK>
[  315.069044][ T9405]  dump_stack_lvl+0xe8/0x150
[  315.069077][ T9405]  should_fail_ex+0x412/0x560
[  315.069113][ T9405]  _copy_from_user+0x2d/0xb0
[  315.069137][ T9405]  get_compat_msghdr+0xb3/0x4c0
[  315.069162][ T9405]  ? __lock_acquire+0x6b5/0x2cf0
[  315.069191][ T9405]  ? __pfx_get_compat_msghdr+0x10/0x10
[  315.069217][ T9405]  ? kstrtoull+0x12f/0x1d0
[  315.069252][ T9405]  ___sys_sendmsg+0x201/0x360
[  315.069284][ T9405]  ? __pfx____sys_sendmsg+0x10/0x10
[  315.069313][ T9405]  ? get_pid_task+0x20/0x1f0
[  315.069336][ T9405]  ? get_pid_task+0x20/0x1f0
[  315.069352][ T9405]  ? get_pid_task+0x20/0x1f0
[  315.069396][ T9405]  ? __fget_files+0x2a/0x420
[  315.069413][ T9405]  ? __fget_files+0x3a0/0x420
[  315.069435][ T9405]  __sys_sendmsg+0x183/0x260
[  315.069451][ T9405]  ? __pfx___sys_sendmsg+0x10/0x10
[  315.069478][ T9405]  __do_fast_syscall_32+0x20d/0x640
[  315.069496][ T9405]  ? do_fast_syscall_32+0x33/0x70
[  315.069511][ T9405]  ? asm_int80_emulation+0x1a/0x20
[  315.069523][ T9405]  ? do_int80_emulation+0x274/0x4d0
[  315.069537][ T9405]  ? trace_irq_disable+0x3b/0x150
[  315.069550][ T9405]  do_fast_syscall_32+0x33/0x70
[  315.069566][ T9405]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  315.069613][ T9405] RIP: 0023:0xf6feef6c
[  315.069625][ T9405] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  315.069636][ T9405] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  315.069650][ T9405] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000840
[  315.069659][ T9405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  315.069665][ T9405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  315.069672][ T9405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  315.069679][ T9405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  315.069695][ T9405]  </TASK>
[  315.471317][ T9405] fuse: Bad value for 'fd'
[  315.529459][   T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  315.688187][   T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  315.709450][   T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  315.759463][   T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  315.801913][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.868237][ T9407] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  315.884859][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  316.044480][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'.
[  316.748386][ T9429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.949'.
[  317.438287][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  317.447754][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  317.626965][ T5920] usb 2-1: USB disconnect, device number 21
[  317.891543][ T9440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.953'.
[  317.979470][   T10] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  318.254306][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  318.417566][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  318.487813][   T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  318.527557][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.579530][   T10] usb 5-1: config 0 descriptor??
[  318.671532][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  318.700444][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  318.764053][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  318.817541][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  318.830221][ T9436] dvb-usb: bulk message failed: -22 (2/0)
[  318.864274][   T10] usb 5-1: media controller created
[  318.896738][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  318.985922][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  319.009612][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  319.026277][ T9451] sctp: [Deprecated]: syz.2.957 (pid 9451) Use of int in max_burst socket option.
[  319.026277][ T9451] Use struct sctp_assoc_value instead
[  319.079237][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  319.082058][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.959'.
[  319.150507][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  319.184279][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  319.220513][   T10] usb 5-1: USB disconnect, device number 30
[  319.304451][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  320.031748][ T9462] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  321.039736][ T9489] FAULT_INJECTION: forcing a failure.
[  321.039736][ T9489] name failslab, interval 1, probability 0, space 0, times 0
[  321.053122][ T9489] CPU: 1 UID: 0 PID: 9489 Comm: syz.5.966 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  321.053144][ T9489] Tainted: [L]=SOFTLOCKUP
[  321.053149][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  321.053157][ T9489] Call Trace:
[  321.053165][ T9489]  <TASK>
[  321.053171][ T9489]  dump_stack_lvl+0xe8/0x150
[  321.053193][ T9489]  should_fail_ex+0x412/0x560
[  321.053214][ T9489]  should_failslab+0xa8/0x100
[  321.053230][ T9489]  ? skb_clone+0x212/0x3a0
[  321.053251][ T9489]  kmem_cache_alloc_noprof+0x87/0x650
[  321.053266][ T9489]  ? lock_acquire+0xf0/0x2e0
[  321.053284][ T9489]  skb_clone+0x212/0x3a0
[  321.053299][ T9489]  ? dev_queue_xmit_nit+0x268/0xad0
[  321.053322][ T9489]  dev_queue_xmit_nit+0x29a/0xad0
[  321.053336][ T9489]  ? dev_queue_xmit_nit+0x2d/0xad0
[  321.053355][ T9489]  dev_hard_start_xmit+0x1cf/0x870
[  321.053379][ T9489]  __dev_queue_xmit+0x16d1/0x3890
[  321.053399][ T9489]  ? netlink_sendmsg+0x813/0xb40
[  321.053413][ T9489]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  321.053429][ T9489]  ? __dev_queue_xmit+0x277/0x3890
[  321.053452][ T9489]  ? __pfx___dev_queue_xmit+0x10/0x10
[  321.053473][ T9489]  ? __copy_skb_header+0xa3/0x4a0
[  321.053498][ T9489]  ? skb_clone+0x246/0x3a0
[  321.053514][ T9489]  __netlink_deliver_tap+0x5ad/0x850
[  321.053532][ T9489]  ? netlink_deliver_tap+0x2e/0x1b0
[  321.053545][ T9489]  netlink_deliver_tap+0x19c/0x1b0
[  321.053558][ T9489]  netlink_sendskb+0x68/0x140
[  321.053579][ T9489]  netlink_unicast+0x3a3/0x9b0
[  321.053600][ T9489]  ? __pfx_netlink_unicast+0x10/0x10
[  321.053621][ T9489]  netlink_rcv_skb+0x2b6/0x4b0
[  321.053634][ T9489]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  321.053648][ T9489]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  321.053665][ T9489]  ? netlink_deliver_tap+0x2e/0x1b0
[  321.053681][ T9489]  netlink_unicast+0x80f/0x9b0
[  321.053703][ T9489]  ? __pfx_netlink_unicast+0x10/0x10
[  321.053720][ T9489]  ? netlink_sendmsg+0x650/0xb40
[  321.053731][ T9489]  ? skb_put+0x11b/0x210
[  321.053745][ T9489]  netlink_sendmsg+0x813/0xb40
[  321.053763][ T9489]  ? __pfx_netlink_sendmsg+0x10/0x10
[  321.053777][ T9489]  ? aa_sock_msg_perm+0xf1/0x1b0
[  321.053795][ T9489]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  321.053811][ T9489]  ____sys_sendmsg+0x972/0x9f0
[  321.053831][ T9489]  ? __pfx_____sys_sendmsg+0x10/0x10
[  321.053849][ T9489]  ? kstrtoull+0x12f/0x1d0
[  321.053871][ T9489]  ___sys_sendmsg+0x2a5/0x360
[  321.053889][ T9489]  ? __pfx____sys_sendmsg+0x10/0x10
[  321.053905][ T9489]  ? get_pid_task+0x20/0x1f0
[  321.053918][ T9489]  ? get_pid_task+0x20/0x1f0
[  321.053928][ T9489]  ? get_pid_task+0x20/0x1f0
[  321.053953][ T9489]  ? __fget_files+0x2a/0x420
[  321.053963][ T9489]  ? __fget_files+0x3a0/0x420
[  321.053979][ T9489]  __sys_sendmsg+0x183/0x260
[  321.053996][ T9489]  ? __pfx___sys_sendmsg+0x10/0x10
[  321.054022][ T9489]  __do_fast_syscall_32+0x20d/0x640
[  321.054039][ T9489]  ? do_fast_syscall_32+0x33/0x70
[  321.054054][ T9489]  ? asm_int80_emulation+0x1a/0x20
[  321.054065][ T9489]  ? do_int80_emulation+0x274/0x4d0
[  321.054080][ T9489]  ? trace_irq_disable+0x3b/0x150
[  321.054093][ T9489]  do_fast_syscall_32+0x33/0x70
[  321.054108][ T9489]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  321.054123][ T9489] RIP: 0023:0xf6feef6c
[  321.054157][ T9489] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  321.054168][ T9489] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  321.054183][ T9489] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000800003c0
[  321.054192][ T9489] RDX: 0000000000000802 RSI: 0000000000000000 RDI: 0000000000000000
[  321.054199][ T9489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  321.054206][ T9489] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  321.054213][ T9489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  321.054229][ T9489]  </TASK>
[  321.892722][ T9499] netlink: 132 bytes leftover after parsing attributes in process `syz.4.970'.
[  323.580447][ T5885] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  323.607998][ T9533] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  323.757672][ T5885] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  323.799697][ T5885] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  323.859489][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0
[  323.881042][ T5885] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  323.928645][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  323.968036][ T5885] usb 2-1: Product: syz
[  324.045191][ T5885] usb 2-1: Manufacturer: syz
[  324.059440][ T5885] usb 2-1: SerialNumber: syz
[  324.079823][ T5885] usb 2-1: config 0 descriptor??
[  324.194195][ T9542] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  324.328168][ T5885] usb 2-1: selecting invalid altsetting 0
[  324.495753][ T5920] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  324.689491][ T5920] usb 3-1: device descriptor read/64, error -71
[  325.156419][ T5920] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  325.319452][ T5920] usb 3-1: device descriptor read/64, error -71
[  325.415028][ T9558] netlink: 100 bytes leftover after parsing attributes in process `syz.4.991'.
[  325.429966][ T5920] usb usb3-port1: attempt power cycle
[  325.562476][ T9560] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  325.569033][ T9560] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  325.577318][ T9560] vhci_hcd vhci_hcd.0: Device attached
[  325.608113][ T9561] usbip_core: unknown command
[  325.624417][ T9561] vhci_hcd: unknown pdu 0
[  325.635986][ T9561] usbip_core: unknown command
[  325.652675][ T1100] vhci_hcd vhci_hcd.4: stop threads
[  325.687927][ T1100] vhci_hcd vhci_hcd.4: release socket
[  325.793688][ T1100] vhci_hcd vhci_hcd.4: disconnect device
[  325.820624][ T5920] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  325.839698][ T5913] usb 42-1: enqueue for inactive port 0
[  325.850102][ T5920] usb 3-1: device descriptor read/8, error -71
[  326.203465][ T5920] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  326.253027][ T5920] usb 3-1: device descriptor read/8, error -71
[  326.305501][ T9569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  326.360895][ T5913] usb usb42-port1: attempt power cycle
[  326.373243][ T5920] usb usb3-port1: unable to enumerate USB device
[  326.749662][ T9577] netlink: 'syz.5.996': attribute type 1 has an invalid length.
[  326.790356][ T9577] netlink: 'syz.5.996': attribute type 1 has an invalid length.
[  326.999026][ T5913] usb usb42-port1: unable to enumerate USB device
[  327.146031][ T5885] usb 2-1: USB disconnect, device number 22
[  327.437409][ T9592] syzkaller0: entered promiscuous mode
[  327.466343][ T9592] syzkaller0: entered allmulticast mode
[  327.539725][ T5885] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  327.734924][ T5885] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  327.746301][ T9600] batadv0: entered promiscuous mode
[  327.749389][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.753933][ T9600] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  327.773197][ T5885] usb 5-1: Product: syz
[  327.784217][ T5885] usb 5-1: Manufacturer: syz
[  327.788879][ T5885] usb 5-1: SerialNumber: syz
[  327.804626][ T5885] usb 5-1: config 0 descriptor??
[  327.822473][ T5885] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  328.672118][   T30] audit: type=1800 audit(1774848123.010:390): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1009" name="file1" dev="tmpfs" ino=641 res=0 errno=0
[  329.309848][   T24] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  329.446574][ T9636] syzkaller0: entered promiscuous mode
[  329.452609][   T24] usb 6-1: device descriptor read/64, error -71
[  329.459203][ T9636] syzkaller0: entered allmulticast mode
[  329.699729][   T24] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  329.759499][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  329.830203][   T24] usb 6-1: device descriptor read/64, error -71
[  329.919763][ T5913] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  329.939812][   T24] usb usb6-port1: attempt power cycle
[  329.949759][ T5885] gspca_sunplus: reg_r err -110
[  329.955002][ T5885] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[  330.071242][ T5913] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[  330.079711][ T5913] usb 1-1: config 0 has no interface number 0
[  330.086050][ T5913] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  330.098374][ T5913] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  330.107622][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  330.115746][ T5913] usb 1-1: Manufacturer: syz
[  330.120446][ T5913] usb 1-1: SerialNumber: syz
[  330.127469][ T5913] usb 1-1: config 0 descriptor??
[  330.273379][ T5920] usb 5-1: USB disconnect, device number 31
[  330.299890][   T24] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  330.333786][   T24] usb 6-1: device descriptor read/8, error -71
[  330.510431][ T9649] binder_alloc: 9648: binder_alloc_buf size 1024 failed, no address space
[  330.545446][ T9649] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0)
[  330.556756][ T9651] futex_wake_op: syz.1.1023 tries to shift op by 32; fix this program
[  330.573123][ T9651] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  330.589611][   T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  330.623143][   T24] usb 6-1: device descriptor read/8, error -71
[  330.637070][ T9655] syzkaller0: entered promiscuous mode
[  330.644597][ T9655] syzkaller0: entered allmulticast mode
[  330.740644][   T24] usb usb6-port1: unable to enumerate USB device
[  330.768365][ T5913] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71
[  330.797120][ T5913] usb 1-1: USB disconnect, device number 23
[  332.228091][ T9679] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  332.501049][ T5885] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  332.848653][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  332.860379][   T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  332.886841][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.917227][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  332.967180][ T5885] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  332.993966][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.039148][ T5885] usb 2-1: config 0 descriptor??
[  333.048162][ T9693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.081005][ T9692] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.118515][ T9693] veth1_macvtap: entered allmulticast mode
[  333.160778][ T9691] tipc: Disabling bearer <eth:syzkaller0>
[  333.264276][   T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  333.388445][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.419844][   T10] usb 6-1: Product: syz
[  333.424566][   T10] usb 6-1: Manufacturer: syz
[  333.429271][   T10] usb 6-1: SerialNumber: syz
[  333.505314][ T5885] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input13
[  333.525256][   T10] usb 6-1: config 0 descriptor??
[  333.550392][   T10] hub 6-1:0.0: bad descriptor, ignoring hub
[  333.556723][   T10] hub 6-1:0.0: probe with driver hub failed with error -5
[  333.657589][   T10] f81232 6-1:0.0: f81534a converter detected
[  333.683407][ T5885] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  333.768040][ T5885] usb 2-1: USB disconnect, device number 23
[  333.776745][   T10] usb 6-1: f81534a converter now attached to ttyUSB0
[  333.891554][ T9699] fido_id[9699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  334.358451][ T5913] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  334.562627][ T5913] usb 5-1: Using ep0 maxpacket: 32
[  334.572048][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short
[  334.602674][ T5913] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  334.612710][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.624600][ T5913] usb 5-1: Product: syz
[  334.638005][ T5913] usb 5-1: Manufacturer: syz
[  334.649683][ T5913] usb 5-1: SerialNumber: syz
[  334.868728][ T9721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1043'.
[  334.984779][ T5913] usb 5-1: unit 0 not found!
[  335.009057][ T5913] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  335.060491][ T5913] usb 5-1: unit 0 not found!
[  335.085717][ T5913] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  335.128509][ T5913] usb 5-1: unit 0 not found!
[  335.389091][ T5913] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[  335.411757][ T5913] usb 5-1: USB disconnect, device number 32
[  335.434736][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  336.082617][   T24] usb 6-1: USB disconnect, device number 13
[  336.092387][   T24] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  336.118463][   T24] f81232 6-1:0.0: device disconnected
[  336.283219][ T9731] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1047'.
[  336.478579][ T9739] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  336.736121][ T9744] tipc: Failed to remove unknown binding: 66,0,0/0:2441350237/2441350238
[  336.769588][   T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  336.935931][   T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  336.966576][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.985894][   T24] usb 3-1: Product: syz
[  337.008116][   T24] usb 3-1: Manufacturer: syz
[  337.018943][   T24] usb 3-1: SerialNumber: syz
[  337.040908][   T24] usb 3-1: config 0 descriptor??
[  337.070473][   T24] hub 3-1:0.0: bad descriptor, ignoring hub
[  337.078886][   T24] hub 3-1:0.0: probe with driver hub failed with error -5
[  337.088684][   T24] f81232 3-1:0.0: f81534a converter detected
[  337.274650][   T24] usb 3-1: f81534a converter now attached to ttyUSB0
[  337.454983][ T9758] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1056'.
[  338.008638][ T9765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  338.699451][ T9773] Invalid argument reading file caps for ./file0
[  338.801730][ T5930] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  338.959881][ T5930] usb 2-1: Using ep0 maxpacket: 32
[  338.972426][ T5930] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  338.987307][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.026286][ T5930] usb 2-1: config 0 descriptor??
[  339.069766][ T5930] as10x_usb: device has been detected
[  339.093531][ T5930] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  339.171750][ T5930] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  339.204022][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1063'.
[  339.258049][ T9771] ------------[ cut here ]------------
[  339.263745][ T9771] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  339.263759][ T9771] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x10a4/0x1300, CPU#0: syz.1.1060/9771
[  339.279969][ T9771] Modules linked in:
[  339.284337][ T9771] CPU: 0 UID: 0 PID: 9771 Comm: syz.1.1060 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  339.295674][ T9771] Tainted: [L]=SOFTLOCKUP
[  339.300091][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  339.310323][ T9771] RIP: 0010:__mutex_lock+0x10ab/0x1300
[  339.315940][ T9771] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 57 61 04 00 75 13 48 8d 3d 1c 6d 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f
[  339.335925][ T9771] RSP: 0018:ffffc9000b96f880 EFLAGS: 00010246
[  339.342055][ T9771] RAX: 0000000000000000 RBX: 1ffff9200172df28 RCX: 0000000000080000
[  339.350423][ T9771] RDX: ffffc9000ca33000 RSI: ffffffff8bcce0c0 RDI: ffffffff90151210
[  339.358695][ T9771] RBP: ffffc9000b96fa38 R08: ffffffff9011fcc3 R09: 1ffffffff2023f98
[  339.367079][ T9771] R10: dffffc0000000000 R11: fffffbfff2023f99 R12: ffff888035984b60
[  339.375243][ T9771] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  339.383619][ T9771] FS:  0000000000000000(0000) GS:ffff888125457000(0063) knlGS:00000000f53e6b40
[  339.392842][ T9771] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  339.399624][ T9771] CR2: 000000000c38bae8 CR3: 0000000036c0c000 CR4: 00000000003526f0
[  339.408056][ T9771] Call Trace:
[  339.411609][ T9771]  <TASK>
[  339.414563][ T9771]  ? __mutex_lock+0x319/0x1300
[  339.419392][ T9771]  ? as102_dvb_dmx_start_feed+0x70/0x290
[  339.425032][ T9771]  ? dmx_section_feed_allocate_filter+0x34f/0x3e0
[  339.431718][ T9771]  ? __pfx___mutex_lock+0x10/0x10
[  339.436940][ T9771]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  339.442867][ T9771]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  339.449100][ T9771]  ? do_raw_spin_lock+0x12b/0x2f0
[  339.454305][ T9771]  as102_dvb_dmx_start_feed+0x70/0x290
[  339.459934][ T9771]  dmx_section_feed_start_filtering+0x518/0x6c0
[  339.466296][ T9771]  dvb_dmxdev_filter_start+0xcf4/0x10e0
[  339.471890][ T9771]  ? dvb_dmxdev_filter_set+0x2d1/0x580
[  339.477575][ T9771]  dvb_demux_do_ioctl+0x470/0x540
[  339.482919][ T9771]  dvb_usercopy+0x199/0x2e0
[  339.487545][ T9771]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  339.493645][ T9771]  ? __pfx_dvb_usercopy+0x10/0x10
[  339.498811][ T9771]  ? __fget_files+0x3a0/0x420
[  339.504010][ T9771]  dvb_demux_ioctl+0x29/0x40
[  339.508854][ T9771]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  339.514593][ T9771]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  339.520697][ T9771]  ? kmem_cache_free+0x187/0x630
[  339.525814][ T9771]  ? __se_sys_futex_time32+0x3ab/0x440
[  339.531905][ T9771]  ? rcu_is_watching+0x15/0xb0
[  339.536674][ T9771]  __do_fast_syscall_32+0x20d/0x640
[  339.542131][ T9771]  ? do_fast_syscall_32+0x33/0x70
[  339.547215][ T9771]  ? asm_int80_emulation+0x1a/0x20
[  339.552453][ T9771]  ? do_int80_emulation+0x274/0x4d0
[  339.557925][ T9771]  ? trace_irq_disable+0x3b/0x150
[  339.562989][ T9771]  do_fast_syscall_32+0x33/0x70
[  339.567935][ T9771]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  339.574478][ T9771] RIP: 0023:0xf7f24f6c
[  339.578647][ T9771] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  339.599013][ T9771] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  339.607749][ T9771] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000403c6f2b
[  339.615935][ T9771] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000
[  339.624022][ T9771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  339.632439][ T9771] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  339.640823][ T9771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  339.649384][ T9771]  </TASK>
[  339.652514][ T9771] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  339.659934][ T9771] CPU: 0 UID: 0 PID: 9771 Comm: syz.1.1060 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  339.671274][ T9771] Tainted: [L]=SOFTLOCKUP
[  339.675598][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  339.686079][ T9771] Call Trace:
[  339.689621][ T9771]  <TASK>
[  339.692552][ T9771]  vpanic+0x56c/0xa60
[  339.696538][ T9771]  ? __pfx__printk+0x10/0x10
[  339.701301][ T9771]  ? __pfx_vpanic+0x10/0x10
[  339.705909][ T9771]  ? is_bpf_text_address+0x292/0x2b0
[  339.711374][ T9771]  ? is_bpf_text_address+0x26/0x2b0
[  339.716591][ T9771]  panic+0xc5/0xd0
[  339.720506][ T9771]  ? __pfx_panic+0x10/0x10
[  339.725109][ T9771]  __warn+0x315/0x4f0
[  339.729111][ T9771]  ? __mutex_lock+0x10a4/0x1300
[  339.734453][ T9771]  ? __mutex_lock+0x10a4/0x1300
[  339.739342][ T9771]  __report_bug+0x29a/0x540
[  339.744075][ T9771]  ? dvb_demux_do_ioctl+0x470/0x540
[  339.749311][ T9771]  ? __mutex_lock+0x10a4/0x1300
[  339.754203][ T9771]  ? __pfx___report_bug+0x10/0x10
[  339.759251][ T9771]  ? pfn_valid+0x125/0x4c0
[  339.763698][ T9771]  ? __lock_acquire+0x6b5/0x2cf0
[  339.768646][ T9771]  report_bug_entry+0x19a/0x290
[  339.773683][ T9771]  ? __mutex_lock+0x10ab/0x1300
[  339.778538][ T9771]  ? __mutex_lock+0x10b0/0x1300
[  339.783394][ T9771]  handle_bug+0xce/0x200
[  339.787735][ T9771]  exc_invalid_op+0x1a/0x50
[  339.792508][ T9771]  asm_exc_invalid_op+0x1a/0x20
[  339.797461][ T9771] RIP: 0010:__mutex_lock+0x10ab/0x1300
[  339.803019][ T9771] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 57 61 04 00 75 13 48 8d 3d 1c 6d 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f
[  339.823066][ T9771] RSP: 0018:ffffc9000b96f880 EFLAGS: 00010246
[  339.829184][ T9771] RAX: 0000000000000000 RBX: 1ffff9200172df28 RCX: 0000000000080000
[  339.837253][ T9771] RDX: ffffc9000ca33000 RSI: ffffffff8bcce0c0 RDI: ffffffff90151210
[  339.845427][ T9771] RBP: ffffc9000b96fa38 R08: ffffffff9011fcc3 R09: 1ffffffff2023f98
[  339.853510][ T9771] R10: dffffc0000000000 R11: fffffbfff2023f99 R12: ffff888035984b60
[  339.861537][ T9771] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  339.870061][ T9771]  ? __mutex_lock+0x319/0x1300
[  339.875207][ T9771]  ? as102_dvb_dmx_start_feed+0x70/0x290
[  339.880855][ T9771]  ? dmx_section_feed_allocate_filter+0x34f/0x3e0
[  339.887377][ T9771]  ? __pfx___mutex_lock+0x10/0x10
[  339.892433][ T9771]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  339.898081][ T9771]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  339.904077][ T9771]  ? do_raw_spin_lock+0x12b/0x2f0
[  339.909292][ T9771]  as102_dvb_dmx_start_feed+0x70/0x290
[  339.914767][ T9771]  dmx_section_feed_start_filtering+0x518/0x6c0
[  339.921019][ T9771]  dvb_dmxdev_filter_start+0xcf4/0x10e0
[  339.926575][ T9771]  ? dvb_dmxdev_filter_set+0x2d1/0x580
[  339.932042][ T9771]  dvb_demux_do_ioctl+0x470/0x540
[  339.937168][ T9771]  dvb_usercopy+0x199/0x2e0
[  339.941774][ T9771]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  339.947771][ T9771]  ? __pfx_dvb_usercopy+0x10/0x10
[  339.952897][ T9771]  ? __fget_files+0x3a0/0x420
[  339.957685][ T9771]  dvb_demux_ioctl+0x29/0x40
[  339.962469][ T9771]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  339.968028][ T9771]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  339.974171][ T9771]  ? kmem_cache_free+0x187/0x630
[  339.979315][ T9771]  ? __se_sys_futex_time32+0x3ab/0x440
[  339.984840][ T9771]  ? rcu_is_watching+0x15/0xb0
[  339.989731][ T9771]  __do_fast_syscall_32+0x20d/0x640
[  339.995296][ T9771]  ? do_fast_syscall_32+0x33/0x70
[  340.000439][ T9771]  ? asm_int80_emulation+0x1a/0x20
[  340.005738][ T9771]  ? do_int80_emulation+0x274/0x4d0
[  340.011050][ T9771]  ? trace_irq_disable+0x3b/0x150
[  340.016217][ T9771]  do_fast_syscall_32+0x33/0x70
[  340.021174][ T9771]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  340.027690][ T9771] RIP: 0023:0xf7f24f6c
[  340.032111][ T9771] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  340.052596][ T9771] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  340.061288][ T9771] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000403c6f2b
[  340.069356][ T9771] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000
[  340.077345][ T9771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  340.085418][ T9771] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  340.093416][ T9771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  340.101402][ T9771]  </TASK>
[  340.105858][ T9771] Kernel Offset: disabled
[  340.110185][ T9771] Rebooting in 86400 seconds..