last executing test programs:

12m46.093638009s ago: executing program 2 (id=501):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00')
read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020)

12m45.544214065s ago: executing program 2 (id=503):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
ioprio_set$pid(0x1, 0x0, 0x4007)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000)
recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123)
shutdown(r4, 0x1)
getpgid(0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001400b59527bd7000949764290a780400", @ANYRES32=r0, @ANYRES16=r0], 0x2c}}, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x14)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40})
ioctl$UI_DEV_CREATE(r5, 0x5501)

12m43.788469216s ago: executing program 2 (id=508):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) (async)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in6=@private0, 0x2, 0x0, 0x4e21, 0x80, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, {0x97}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x70bd2d, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) (async)
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32)
r4 = accept4(r3, 0x0, 0x0, 0x800) (rerun: 32)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c0000000b0a010800000000000000000300000708000c40000000020c000b4000000000000000020c001040000000000000000208000c400000000308000f400000000708000840000000017c0b00000c0a010400000000000000000a000001440b0380e8000080c4000b80100001800a00010071756f7461000000100001800b0001007470726f787900005c000180080001006c6f67005000028006000440000700000600044000800000080006400000001006000140fff90000080003400000000508000540800000010a000240706f72743100000008000640000000170600044000090000100001800b000100736f636b65740000100001800b00010074756e6e656c0000140001800b000100657874686472000004000280100001800b000100736f636b6574000008000340000000030c0004400000000000000c800c00054000000000000000092c06008060000b80100001800a00010071756575650000000c000180080001006f736600140001800d00010073796e70726f7879000000000c000180080001006f736600200001800e000100636f6e6e6c696d69740000000c000280080002400000000130030180500002800900020073797a30000000000900020073797a32000000000900020073797a30000000000900020073797a3100000000080003400000000208000340000000010900020073797a3000000000340002800900020073797a300000000008000180fffffffe0900020073797a3100000000080003400000000308000180fffffffb600002800900020073797a310000000008000180fffffffc0900020073797a300000000008000180fffffffd0900020073797a3200000000080003400000000408000180000000000900020073797a30000000000900020073797a310000000091000100d60c5d566b5acbd1bc4c414c631ce330397fab653167d55d452c56b4a80181527bcb898b8c603e11dd8ade780ce9b09da4620bb3b9135cc41ae0a4c0c3d52afb6547f5300e5a745aebda27be2220410a1b2e9f990492f326bc9ce7b27a8abcb5af089e5665ff815ce48be6b028d37b40b4da61874bf7f342cd8da85e96f0dc567879a1406d6fd478c505904d6b000000122a010081959df87b01beeb86a75dcd77410000100002800900020073797a30000000000c000100d23c68773b18caf6e700010098615e1a2db3d2bd23ff4d887b2130d2d72ba9f4895ffea1da278208109b76938ea0ccb7f97206add25cdb65d90404fd4ec8d24e8cdb447c9c6816db5a91adfc2fbce7d270766880a878c5dbeda5753ae8a2cc042f3a2650586a3633f88df830a8e2016b2c4b17e48e4eb492b802440481e48b4a813f18fd40d342fcc164415508ea8045548e254ba964074f0d003eb87f4bea62557280ec401190bfaa6545f5be430bcd92e5e0ca2facaa7072679bdbde7c190a72214e302aac08f54a937faee40a45ca544bf39df2d770bf638a6a5f14c19caecef2aabcd9629ba84ad711f074f8bc00800001001dcb8ca14dffac17422045a0333f0fa841744d4684db15e6ba8347ab6cff7a52d2b3685a6c33b878aba943f13475f1dc035e0797eac3d31dd495815ba662941c2ed9790e5eed77cf458ca90210f22c3fa9b31ec75427a37b22f77c0eaab4f5e7d539c021b5c9134bd9b31209f7428cc17e0062f0e0531b440403e9291c000280080003400000000208000180fffffffb08000180fffffffbdc0006404ab2eeb402032587a1f4f8285a029961cb8e8ca941ceb03d52a98c53dd23c649752f3eef70fff9bb3e0f5c035f1974e9ed56aa06a597d25f5f0eb48a800233431c534616f88367a8b8b7d37c318338b566c55bb6cdbc286605a7b38a59ca6a191b0ba297551b61c4c79919057d062c09b45b1fe076aba0b59bf3442825761aff1bc9c11c0a92a3604148df7b12ff4b488930f14deab06109edb7e293ac722e34e0fdb4e21717f99ede95da1a60206b2b64b835e42d990baeb56088d7a16fd9d511ab4d5e5ff34ac27eecc8c6011557996274a9f3e0c5dbb530010180b70001002a46edf88c4928ab3b4eab70becbe09576446ea5907105ed985c797cfdda1259"], 0xbf0}}, 0x0) (async)
syz_open_dev$video4linux(0x0, 0x200007, 0x48cc82)
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000380)={0x3ff, 0x1, 0x0, "eef1b7de005bd152f35ed734fc000000000000000000000000000000004000", 0x43353039})
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_opts(r7, 0x0, 0xb, &(0x7f0000000640)=""/2, &(0x7f0000000680)=0x2)
r8 = syz_open_dev$loop(&(0x7f0000000000), 0x1c000, 0x440)
fdatasync(r8) (async, rerun: 64)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
lchown(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)

12m42.904350333s ago: executing program 2 (id=514):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x2088000, 0x0, 0x8, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x89901)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000021c0)="81", 0x1}, {0x0}], 0x2)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x3a)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x112)

12m38.234035314s ago: executing program 4 (id=520):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x5, 0x0, [{0x98, 0x37, 0x7, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x4, 0x9, '\x00', 0x13}, {0x3, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x92, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x3, 0x5, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x9, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x6f, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140))
recvfrom$inet6(r4, 0x0, 0x0, 0x2000, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000014)
getpid()
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = syz_clone(0x2004000, &(0x7f0000000400)="07be519af2cd8b2f90e1c9b74fcc865a60f5f2dca8e16a42f75383e017dd2acecce459bc3692d31f92f20c0fd317083a0ed2aa22af0a4fd47ade97e0a99923890300259e5e54ef3c585d0dfd388f510066ed7203c7a713496ef422159346fd055bde29017bd4ffeec533f702cb17c7627ad997e62772019624401c188ab7ca0b27ab44faf7e58ed42f88cb2adbaf5c30ac9f2f5b5b0fddd34c94d0f9cf07a02c48018613039e8fd0f81f6931220f9d04dfb68775e0792f4047915ee884f483513340875453f2a72ecc0f53", 0xcb, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f00000001c0)="695a961704160311a3c6ffd2a925c8b3009f03cc4eedf484c5429a4a5742e09bac418e5e3fabd4ae2ed0b2238ca18f148821eaf91d81d64791d07f710764d0c682515c3a1ea06bb9f94ae0fc7cd8c5033a5ca07c567a854522488e61e7f254e440ef549f7088daa0a2e66d9c9d27ec21e0a53ea54943f299e668c2dc86b20a981751daace4ee9a0eaab38ed88827be422381")
ioprio_get$pid(0x0, r8)
openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x8000, 0x0)

12m37.556751712s ago: executing program 2 (id=521):
r0 = socket$inet6(0xa, 0x3, 0x5)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = dup3(r1, r0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@flowinfo={{0x10, 0x29, 0xb, 0x80000}}], 0x10}}], 0x1, 0x20000810)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'pim6reg\x00', {0x1}, 0x2})

12m36.778484652s ago: executing program 4 (id=525):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (fail_nth: 7)

12m36.706956382s ago: executing program 2 (id=526):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x20}, 0xc)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x300, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)

12m35.823079714s ago: executing program 32 (id=526):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x20}, 0xc)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x300, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)

12m35.750427232s ago: executing program 4 (id=529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x74bd2b, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x6000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8005}, 0x44004) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}, 0x1, 0x700}, 0x0) (async, rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0x6}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

12m35.177845751s ago: executing program 4 (id=532):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x2088000, 0x0, 0x8, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x89901)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000021c0)="81", 0x1}, {0x0}], 0x2)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x3a)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x112)

12m30.240012892s ago: executing program 4 (id=539):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (fail_nth: 6)

12m26.379430747s ago: executing program 4 (id=545):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}})
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00')
write$P9_RVERSION(r2, 0x0, 0x500)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700, 0x9120}, [@IFLA_PHYS_PORT_ID={0x15, 0x22, "b293a8d9a3c3cec438b0fd3ce008d0351e"}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x48}}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, 0x0)
syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r11, 0xc0045006, &(0x7f0000000180)=0x6f)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000885)

12m25.52013686s ago: executing program 33 (id=545):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}})
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00')
write$P9_RVERSION(r2, 0x0, 0x500)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700, 0x9120}, [@IFLA_PHYS_PORT_ID={0x15, 0x22, "b293a8d9a3c3cec438b0fd3ce008d0351e"}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x48}}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, 0x0)
syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r11, 0xc0045006, &(0x7f0000000180)=0x6f)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000885)

8.249823691s ago: executing program 5 (id=3264):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xc)

8.164269868s ago: executing program 0 (id=3265):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newspdinfo={0x5c, 0x24, 0x200, 0x70bd27, 0x25dfdbfe, 0x9, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)={'gretap0\x00', r2, 0x1, 0x1, 0xffff0000, 0x8000, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x64, 0x0, 0x82, 0x2f, 0x0, @loopback, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x28, 0x0, 0x7, [0x8000, 0x4]}, @end, @end]}}}}})
accept4$inet(r1, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10, 0x80800)
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r4, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9, 0x324}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000)

7.922182678s ago: executing program 5 (id=3267):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, "08c080d7"}}}}}, 0x0)

7.915154947s ago: executing program 0 (id=3268):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a320000000014000780080006400000000008"], 0x5c}}, 0x24040001)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340), &(0x7f0000000280))
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

7.821838888s ago: executing program 3 (id=3269):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfa0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x4}]}}]}, 0x38}}, 0x20000040)

7.791079632s ago: executing program 5 (id=3270):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000040)={0x58, 0x9, 0x4, 0x2, 0x2, {}, {0x5, 0x0, 0x7, 0x2, 0xf7, 0x6, "4e5ed31d"}, 0xfffffff9, 0x4, {}, 0x7})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_open_dev$usbfs(0x0, 0x76, 0x101301)
openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r7 = socket$kcm(0x2, 0xa, 0x2)
socket$pptp(0x18, 0x1, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
ioctl$VIDIOC_G_EDID(r9, 0xc0245628, &(0x7f0000000240)={0x0, 0x9a00000, 0x3, '\x00', &(0x7f0000000100)=0x7})
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

7.689789875s ago: executing program 3 (id=3271):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x400000, 0x0)
r2 = accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x80000)
unshare(0x400)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004600000076000000db98000000000000b5080000000000008500000007000000b700"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_usbip_server_init(0x4)
syz_usb_connect(0x6, 0x6c5, &(0x7f0000000a00)={{0x12, 0x1, 0x310, 0x9, 0x37, 0x16, 0xff, 0xaf0, 0x7601, 0x9170, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b3, 0x3, 0x6, 0x6, 0x20, 0x2, [{{0x9, 0x4, 0xa0, 0x2, 0xe, 0x13, 0x10, 0xc, 0x5, [@hid_hid={0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x182}}], [{{0x9, 0x5, 0xe, 0x8, 0x470, 0x2, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x3, 0x1, 0x80}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x3, 0x3, 0x4}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x51, 0x9, 0xb, [@generic={0x59, 0xc, "6be541efdd164af17a56dd2c56d5dd4cfea1d3e5ecad4a1c1670959ac6badb1b50128ee1930e7ffa821e6eb13de78227d622405102d4f9e97a82e1af1bfe8f177607ae0f58a7b562bfa42467fec040fcb8cc34bb4b0e39"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x2, 0x1, 0xf5, [@generic={0x7c, 0x2, "2574f3ae6e54931ae5b37347ff7a995e1c57efd2120731f6e414f54e57e5125303352343e7119e0964bdee85648c85659ca5696035cbd69b47034dfb1a21721d37382ba2c86a1400a5136019bee0f4b9517831e1af8f3bddced38cb2c7103cf83c9c6ec67f181829a8926d85ff3a6342f4ebd2cf9b909bcddbf5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3e3}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x7f, 0x7, 0xb}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0xf, 0xe8, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1f, 0x80, 0xfe, [@generic={0x83, 0x30, "ccc8c5199c39f4dc42fd8dc570d54e33d7335186c14e43283103f0aa4874b3c5bd87c6ea55c064d0c98bc04d6573a142ab609166f36f5b179702d00c68cbd052c6a4ee3b1c60e93788a51eea33f1d4eac654ef5cfae1865b41ce368697d959301f519a4f60c798c7be2f679d6ac6e9c9e46c34608837244d7af45b6f9fdaf20354"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x4, 0x15, 0x0, [@generic={0xa7, 0x2, "508b509db3a9601a097ab3a61d70f42d6dc8f55e3a0d75abf9d9d008c1328de3e234205540167c80c7a492d7235494e75a0ce81f48a7b67f852990c68c0a1a32d8012c6d0ee5c78889046278f199b7e1f11ed5309606ac1e754b831364bd6122154abe1eca9a1386b377bdf2188b54884b56e2e78bf93b240de74d9902b0eb442d7ffa79d2d423d123194cbfb26652ed266b4bf074aa1fd79a2da6dd0bb4219c90c74ce0e0"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x81, 0x3, 0x65}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x3, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xa}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x5, 0x8, 0x3, [@generic={0xde, 0x11, "165a62e33947d8ededc4a2d75dc229b1bd29b0f771e0f245ace06e19aec8e090459da1ddd1529948f281d88289583770a124095a66c34397aaeb339034924b0b28da640215a4302208d5a6707561f74bec17c9d7343cdcf40a90245d157b7b2f7bc1735319040ed7a71d82d6e88b4b9db5a132f63e47b79e01442b9a78075e33766e431d989d4dedfd557cbc06f34a1a5c8f12fa7da4e4daede0d2640a80a01a1094885245750844b9afc0dfc5198ef0b2c6aa7eee5a2ecaee41e0fb66ed46df682e7040affba0b3222b52aaa00e5290aafbaf7e78f210254863193b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x67, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x4a, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfa, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd}]}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x6, 0x1, 0x5}}]}}, {{0x9, 0x4, 0xf8, 0x3, 0x8, 0xc3, 0x23, 0x25, 0xb, [@uac_control={{0xa, 0x24, 0x1, 0xb, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x4, 0x2, 0x5, 0x4, 0xff}]}], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x3, 0x6b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x4}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0x9, 0x1, [@generic={0x32, 0x31, "066d2b72b5134a5cd2d0ed471a243b53282925169c0fefdcd284be9e752c93bc50f9c8b19277ede553dc9a895fef1f8c"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xfe, 0xbcaf}]}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x4, 0x8, 0x2, [@generic={0x88, 0x5, "7bb940f033e6288a0570d27d15db025e7ba7340a69579d6521586da91beefada1c6f17812f9b1573f5aca3528de9e9f862ecbc3c0fd934c248b86f4b3a859d412a0d14299afc16a6fcaf1c22d6c7595d7f8c42486c4dab878a206f753bb8ae749423d6bc3dfb1657fba8ef8559bf52508ad33d4c07452d78c0e720f249bb5749d6b0f20ae415"}]}}, {{0x9, 0x5, 0xf, 0x699c2451793bdec5, 0x400, 0x8, 0x3, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x0, 0xfe, 0x10, 0xd5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x2, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0xac, 0x4, 0x3, [@generic={0x60, 0xe, "e4a5dd10da6504ab3176019c925d17aee869cc9c059a122475b908a280b33d47db296263d6ee5c54f06ab1b2eeb19445eb491ba96eb6e86829957c60457db2f1815e69c7a250627eb992aa99db36aa28cc838908eeecc452e94f56e8968c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xe}]}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x7, 0x3, 0x4}}]}}, {{0x9, 0x4, 0xe4, 0x7f, 0x4, 0x99, 0x40, 0xc9, 0xf7, [@generic={0x28, 0x23, "9228bb96188c560620846d1fcb12bd99728c17d46217fa8ca593e194fb70ce44ee3b9ecc763f"}], [{{0x9, 0x5, 0x3, 0x8, 0x8, 0xfc, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x7}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x0, 0x0, 0x8, [@generic={0xbf, 0xf, "f3f14615571ba6c2b8a75e27a91804592e8634fc0acf914e1c65853a0a41a0a3edd5fd3119e7f661a6b7f3f74d3bb1d06b762e2c694cf55565e0a299b2cb8fee7f059e837121d3c279f28049f1be0a1fbb53d1d8ec0c019598a34f67a2a2d996274e40816adb5bf3b7f3318d01af1709229f406a90d8aae1c79e80a9c0c13d9f3cd64809df185874afc2e770162dcaa1bcf11074b8ea79bdce212f94ab7536a0820ea7ac042ab42ff4270fbfa6a7574d31c4d9306b68eeaf172e8aab1c"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x4, 0x8, 0x1, [@generic={0x2b, 0x7, "bd3cdbd4e825f7383ea06f5b1436f39d000c916eb0c050057862426d25115c6d0d94362d4f3d44cea3"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x220, 0x9, 0xc9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfe}]}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x110, 0x9, 0xf, 0x6, 0x0, 0x4}, 0x17, &(0x7f0000001140)=ANY=[@ANYBLOB="050f170002073c020cd909000b1001028e000703080007"], 0x7, [{0x85, &(0x7f0000001180)=@string={0x85, 0x3, "06bb7216be1df4ee6e3b7280b7ba69317339be6dc370b57b24095f22ad776fa94b12fc2db7784c286ec4b4a12b9c5e0c10b34cfd3f52d584f0dacd993f6656c8c0818689f619b2f027234816d55150222519ff12bf95667ca5c6cc7eeef98478cef2d113ff14e4e5c0bbad9db7ca27b8ea781544a41d1089bc1ebf4484d4e047498ba0"}}, {0x50, &(0x7f0000001240)=@string={0x50, 0x3, "17ffb6e93179717179839009d10ad6eaaf56a143ce2c04fee685de1894fb7ccb841f542bf8e4c8c6fee02924f2431753e02597e05e2f263bbbda90058917e0c49b8d5a5bfe8c892fca540fb7f167"}}, {0x4f, &(0x7f00000012c0)=@string={0x4f, 0x3, "33d3819d217f11f8b69da1a4616f7425f7c4486e10a9e086c6e9cf1b6eac4bc42bbecf43de6e9393b7c8c10d0972512cce56d3cc13c9704c4ac09fe4936e18fb33be57f640797c19d6c6381f77"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x44a}}, {0x2f, &(0x7f0000001500)=ANY=[@ANYBLOB="2f03499732e84002702ad8cb1f6db3bdb7b16e47fc94bf78a631e068d24011edde08f3c800"/49]}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x4c0a}}]})
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x0, 0x80, 0xfd, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x20000050)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'})
r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000900)='cpuset.cpus\x00', 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f00000009c0)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000200)="fe3bd77d14711bf7a0417dd7d1ec6af41d1790e891252263f9ed5822527abac5c27ef219ffe28e2b79e5f8e68141bde53967307233d76a9ed39a65a53102fef4ef3b01c4fc122f521b82fca68cc8d8ddf8e4da1c645fa43069f5f7dc1bbdcb849d58041392ad097add6e0d6c797c294d0839d034aa4ff8c71727ab85b5f19af3b2b0d6c0728739b2e2a628f1e5c9418844e8ea8011f529afb027e5b85de02a875448bd894bd7b971943278d94c1665c92f982a27c690c80025104ceb6c8e4e1fce8847d11dfd5ca4662ee925bb87883881d8a93f1d617fe52bb2", 0xda}, {&(0x7f0000000300)="a101a43c005651372568c08399d9683ff881d66681d5f99524102d79827223bb205e69004451bb2ab0354d09b05ae1a3fa09e15413675f2bfd2c6b3d789235a3841fc66a3d0897bfaa3780103654500d1ffed1109f0fee7cf7aeaade844b7d6144a5399b9695a808fc51273e6f677d4c56ede1534d6d2ab925968358244d68350fae5a260bf91d91798bd48f5ddf4b38320456a2e01d06707efd81a0fb586a6075ad57315615318cb9a6a4c64bf2f7c0a2f8d3e47628", 0xb6}, {&(0x7f00000003c0)="48eddd0a1c9f4bdc974f2881a0c5297508d387088f5f2362e53b627f07fe71a794da51789b8ebb2796032e352ba1feb9ddf9b843aa1fdc54e609d82e9b2c24d65d8bd41d318a82341c02d28d54224e", 0x4f}, {&(0x7f0000000440)="7cb00e520b0ecab83a9c622fe4c744885def7646bba3421abe606e423458d328835cdf17d117c88a17", 0x29}], 0x4, 0x0, 0x0, 0x4000000}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000540)="f57d59006955171e0d21b4b5055dc5973161a91cddc8dc3fe2b3368be6fe93f2d487a9f65860f85e2ae6c191919f2faa90706e2069c27730ec1c2acb829bd51d36c4d5fc1f549f03cb72b6f38b43b3dd84c1e88031c6f3f7c6d494fa1de8ffaa776798e2d9ab1e5ae6bf62c84909f758793f2cf123f9be96e80fe53b249a85a16370dab0a86823ba9034029e0524cda571c97ee4aa1cefe78294669299ab7b2172495f", 0xa3}, {&(0x7f0000000600)="e4749f3cfe6ad6f1f681", 0xa}, {&(0x7f0000000640)="c96010764898b9aeee0eb35e893f32fd0f1753c4bd60eabd0e651878d31a5061686c3235961f01f725ad069d39d8bad5c8c35d206d71b2e88834d2fc59f838cf484ba61f3797125faeecf93d8a84d92a318f55ce797771d124177a4c86cfa813bdb60b57", 0x64}, {&(0x7f00000006c0)="7706ed2ac5851bcb3a125bd549b3", 0xe}, {&(0x7f0000000700)="2f210a0ec16b56f9ccb279bf625f6f377dbc41d57cb341cb4fc364cb5985008389f67fc8405aaf560b9fa373666d087a4db2367a34eebb16398d50c5c40865e483761597aa88fcb216441e5157f67d550ad0455b1f96e9a7a93d79e79fe9357d0ff54a3009f988bd42e6b7167ee09b2d1f2f7eb0a135cfa9ca1ddd20458962b26c0318a9fcc26ea1c9", 0x89}, {&(0x7f00000007c0)="3ca5f5522ff790979b483f135b8902094a2c0fe137455dfc4c664a4e9c5bf3eb14e5e18b8238da214c5a22dfc08ccf1771f89e09f697559a778b51556484eaf3239ba7de8a86eeb0f6113ce3ee24a08c2910c5ae8bd2c357c95fa20bb4b4c471d04c05c5f4733be476037fb765c8c5d610f7f770a6eab56e4de20a4281cdfe18647106d2cc647add3744c836119ec941497a3c3e335da25e80bdbf159996045a64816bfa9c579723bdbeb3afc061b7c2818722be7fab77", 0xb7}], 0x6, &(0x7f0000000940)=[@rights={{0x20, 0x1, 0x1, [r1, r0, r0, r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r6, r1, r8, r0, r0, r9]}}], 0x48, 0x8880}}], 0x2, 0xd0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x14)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x37d8, 0x800, 0x0, 0x400250}, &(0x7f0000000340)=<r10=>0x0, &(0x7f00000002c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x44, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0)

7.619532205s ago: executing program 1 (id=3272):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000700)={0x24, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00030d"], 0x0, 0x0}, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0xffe, 0x3ff, 0x8001, 0xbd7f, 0x1}}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x1dc, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1dc}}, 0x0)
r4 = eventfd2(0x8, 0x1)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r4, 0x4})
write$eventfd(r4, &(0x7f0000000080)=0x430f, 0x8)

7.537283461s ago: executing program 0 (id=3273):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000b80)=""/184, 0xb8}, {&(0x7f0000000c40)=""/4109, 0x100d}, {&(0x7f0000000440)=""/167, 0xa7}], 0x7}, 0x22020)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

7.535522645s ago: executing program 6 (id=3274):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socket$inet6(0xa, 0x800000000000002, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x5422, &(0x7f0000000140)=0x1)

6.422246923s ago: executing program 0 (id=3275):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0xd0040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30)
r2 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10)
sendmsg$kcm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="e23b07820228e95de918f7e8e4882b66708deb9872076b1e4a06dfd1f5be54cde1996ae3365c231dfc42899edbb43e7b74174544f5de247389a64a848473014f95a0a04a1d34c721b14676520f08f6d6a83655dde3eba3b0402c3e72b4ac3fa389c5f1b39696b161e763a6ad7abdf900394fc9a9279f157fac7727db3ff33e9a851a30a56613c3847edf3ba6120843cc14679363ca7354b4f3a3c61f13c1683bf9a823b4f48c24acd241de7ca7d2b82ec9d7e4c81627daff0cb2298e6f702d295de6fc52e679dc00313722439857cfd5d3d7c033bd60c713e9bace4d2a10f8b0ec0e993d077bf9b6e4c8f94877f51408b330a167", 0xf4}, {&(0x7f00000001c0)="9841f06e573565ab416d89709a140d92e96af403760704826535ab8b9400b1c38446417fdc47943a2fc225b2fe326f5f280ba51443cc0ff21db70d34a8a19f93c15e1d9f5d083a03c0c9e1d78ad504abb8d1188ade1b801954fd6eaa057e78a005", 0x61}, {&(0x7f0000000240)="088d7a53cb33763e922f3b5a2847c9d69b5806d2241fe2944ab309d23186f4c8379209e9689db177a5514fd82140fb776e0807fc455f56d80600e869edf618032111082c631b7eb7fb1db01a15e9a11a87009113025f66836a9df27ee478cc0a300842ad23d25a1499b29efb4d947e20dbadaad7e872f31cfba950d06297d91615ca6b3e53b37efe5e36a2a504d1dcd0a87a16261d25c78cc83237bb92d772a9f91a", 0xa2}], 0x3, &(0x7f0000000340)=[{0x14, 0x0, 0x5, "d363c3a601"}, {0x8c, 0x117, 0x7, "85bdf4f9379345d45887b4e4495ce64d3d31bd1d790029c5b8519f39a1ce4a14d2afc914ba25f4306f89556982196bb55362be753f52829b69fb04ce103e96b973193566cadb3275fc9004f0ad2e68d5891d3db68790b8e1c3581f0eb19a9a5aa52f269bcb59acd3b3be89c5caa6d727cf730f93a4ecd0845e80e2f66c8375"}, {0xa0, 0xff, 0x0, "e600a1f63bc7091a336c6b122907dfd499715b9ae7c1615a412713ce3340359dc7511a19004f5466471f7a85ee0242e7739c033c38c81da8c5bc5960ceec455d03a299820f6cd54e41d380291d0e3753bb46e1c9d28a5799a798fbe46ae35220c6487b815556e48ed3b6ef51ccd30da1af4fc25e5c262784b7fcf232172fc1167c1ef5962c9f18b0bcdf37928e631ba730"}, {0x18, 0x107, 0x9, "4889f9dab1c6eadd401dc8"}, {0xf0, 0x0, 0x3, "a02bbd25527b04f744d115aaa4fec308f36c9ee21ed07f23681cab6ecf5e98aaa71b98f05ef1ec1ccb9c1afd1bcbe8a3e90a1d4020fac3654b436967db4cca8bc1f232676a3a9885ec136c9bdef0904e40576dcc712f2d9379536a9a7cfa5f54ff9105206fdccc50e8d675f88d7cd2124bd8048ad642eaa82418c36bd50665547f5c9bce23d281da5a10560c8ed86adf99eb41548b10e95ea33c2a6267cb31a4b3dba9996b785acb6745f491314a7153d17242ff7aeda0403ac21ffc767de5b2864ab21973d43a5c5adee7f79379f7e0fcc4e875fd5774bc02d7d89fddef17330a981a9f"}, {0x100c, 0x6, 0x0, "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"}, {0x2c, 0x10a, 0xffffa3a7, "205b07be8196264cff802375b7ded0b3146ea2e2e9585119f7432a092f"}, {0xc0, 0x103, 0x3ff, "0751e3e8a2303aa0fa42ce84a35e7bbaadba716e19d4904ec0c4f73236ccf8b92b82797ed0e6e060bbafe1f62b3902df6dccdf442415fc1fcaf8d7be5a1f2bdd504482b45209a7efef7a53c41df84ddb815894c8e77a5892b0b2f0d41256f959c2ba449eb766202aaac82a38d6b92d979be85bd02876ccf439bc6e69de7d91d07fd284bd6f25b81dfacfb6a1c03d9fe88d6ebc1b87acc315da0c47f6408ae15538fd26661cf4f2359bf090a1a82049148a51a3"}], 0x1340}, 0x20000000)
r3 = openat$loop_ctrl(0xffffff9c, &(0x7f00000016c0), 0x100, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc01cf509, &(0x7f0000001700)={<r4=>r0, 0x3, 0x6, 0x100000001})
ppoll(&(0x7f0000001740)=[{r1, 0x100}], 0x1, &(0x7f0000001780)={0x0, 0x989680}, &(0x7f00000017c0)={[0x8, 0x100]}, 0x8)
ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000001800)={0x401, "122fd7795c94255bd5ac8383db81535d9a38214b8a1cfab526019e1ff3e38e6d", 0x2})
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001880), r2)
sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x5c, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x29b2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x800]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1da}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40040)
msgget$private(0x0, 0x40)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000019c0)={0x0, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000001a00)={0x8})
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001a80), r4)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x54, r7, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000)
ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0)
r8 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1e7d, 0x3232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x80, 0xfb, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x15, {0x9, 0x21, 0xc, 0x1c, 0x1, {0x22, 0x7c3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xe3, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x8, 0xfb}}]}}}]}}]}}, &(0x7f00000020c0)={0xa, &(0x7f0000001c00)={0xa, 0x6, 0x250, 0x7f, 0x1, 0x2, 0x10}, 0xc, &(0x7f0000001c40)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x6, 0xfff}]}, 0xa, [{0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x80a}}, {0x66, &(0x7f0000001cc0)=@string={0x66, 0x3, "378084a7167c618c5e13a38c19272563b03d82f1f485fe7b507c9ef5a99b88bd8ec4030cb73da0babbf31ccbee265a12586a42b214fa0b81aeca053f33e4e7c9ddbe3a89ed118a709ce1cbd95bb988a3198aa0ce730444d30742889b89f2e2e7f79e2988"}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x180c}}, {0xb0, &(0x7f0000001d80)=@string={0xb0, 0x3, "4f4a63b00e83b8205181463cf7bcff737ffe07fcc74e1b1d997f2dec84c4b7d669a8ea3fb943dd575e1cc581c1e92a37bacc2eeef374e77e055598f5c2cd468aa4da578e6854c999b7c9c475fd0bca0f0ec9774c79fdc7b1797853e0971fa17b97abff0a43edb6f5fa6a743a7923e52bc807b6cd9102b34819d878842c6bcae40dda291835693b54f83473344a8f261ec4f07e549631f8b7945f56928e060b6cd358ef0fcb5a5189eec0e71ee4c2"}}, {0x6b, &(0x7f0000001e40)=@string={0x6b, 0x3, "1d0e4e8b00a8b8689dcd65d9b94711449db111d24e134247a846449c8514a653a9d2a1b3f1793e1aa7698256b7e68eaeda812221e81dc6baa3420d037bf16b1c92a097e54c5c5d0c57c5f9e3317160ca6552051b40095f077fd3ada06c2154bde8b14ab3cf95d30050"}}, {0x11, &(0x7f0000001ec0)=@string={0x11, 0x3, "25bce5524c1d5d300b8baa20a9697e"}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x40c}}, {0x1a, &(0x7f0000001f40)=@string={0x1a, 0x3, "525d8ab9c3116bdd480dc4181c46f53a0dfbc1ab64e5a602"}}, {0xa, &(0x7f0000001f80)=@string={0xa, 0x3, "69eb308b4525147e"}}, {0xd0, &(0x7f0000001fc0)=@string={0xd0, 0x3, "48e340f43d38e3ca451b4f220acc64df5068e23bff0d7d7c06e5624d5f809842ce49dc8a350e65d07083436f2d5354b790e87d1b2ef3af7f6c6390178b5b92b4ba11afe004d7dbfd2d6f7d1bec210de3c915faac62012190d7999a293252a8a9ddd66c275b120e8052f5da126206df5b45312fcdc4d66c58f7aff3ac857e52c7cadfb1de91ca0b472a5c63f06a53f4025d7178e55b05c938657f5218b6e69a1ca317ceccd02389d9d25ad85cd463ee8dccf91d582a5612d27ea919c373f0798f927c661653f3fdc7caa054af1aec"}}]})
syz_usb_control_io$hid(r8, &(0x7f0000002300)={0x14, &(0x7f0000002140)={0x20, 0x3, 0x9b, {0x9b, 0x22, "f5cf2af4bcb645ce84df057af1d3097705520220649feda350dcc76c5075bdfe4f9546eb3cbb8b540163c5493ca6cf833a48f95222f543ead4db22abe40e48abd0fc9a77ca7daaf6e3d6c51c3931fa99de5c6a3f0c8482bc4936362806149725a2c28488fb59019f8d77a6c25eb30bc3887a741405ef4fb7168a420dd5a35538d371e48d3ab95ec6579a2a6d5f3eced1c4691f5a47022e12c0"}}, &(0x7f0000002200)={0x0, 0x3, 0x44, @string={0x44, 0x3, "15a5708cba5d0674c3c3c3db8ab3f57f715f60d5b66087b1b6575226266671fd7970b0d12534dd1b5c2432913af8a6c2ae1d369e1196cf6afca52615c65160080f75"}}, &(0x7f0000002280)={0x0, 0x22, 0xe, {[@global=@item_4={0x3, 0x1, 0x0, "48be3271"}, @main=@item_012={0x2, 0x0, 0xb, "c410"}, @main=@item_4={0x3, 0x0, 0xb, "1e559a90"}, @main=@item_012={0x0, 0x0, 0xc}]}}, &(0x7f00000022c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x79}}}}, &(0x7f00000025c0)={0x18, &(0x7f0000002340)={0x40, 0x9, 0xe8, "8c0ee5f3a625ccb0e387d4100e06633c3265dc6ff67a25f3ddc1b3941073e403df9771801fd8fd519c10fca9f7b40e016e4bb42a05f0ad6e850278c6343dcbe5a8c6c8cd2b17ea13f15db014126dccbdfced8f6c553b97061d4e6fc3491e2e36dade9a9ab3928661ade73a893ab2ae7e24e142ae8389c960813b9b62de50c0f13259a69f168c542875d062c388d2462fecc14f99c3a5234d873d4c90ef2adc76276c4c5aaca1096268cdde5ba6d6549cd50872d7de5ad7406ce7c4b703c34d0fd369d5b3112673022dce46420caf6bd5446315f024ee21944c139f181078247c72bb8dc35a796c4a"}, &(0x7f0000002440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002480)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000024c0)={0x20, 0x1, 0x7e, "040814c0263dc5ac1a87da788c3240bcd23f30913eaabe0163fdf68755e668e9fe826630de3b6ec98b87d363f6d8bba26ff51ed17d6adadff7c3095989448a96dd4f53bc749c969b05eac8da9c2ae8033f42b5703f3452883e2faaf1026f9daf52330c437fa657fd41a7e0a8d19db5010b94a19519ec6d3f0205fbf717cb"}, &(0x7f0000002580)={0x20, 0x3, 0x1, 0x7}})
epoll_create(0x1)
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000002680)={'broute\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x8000, 0xc, 0xd9a, 0x8000, 0x2], 0x1, &(0x7f0000002600)=[{}, {}, {}, {}, {}], 0x0, [{}]}, 0x60)
syz_usb_connect$uac1(0x1, 0xd2, &(0x7f0000002700)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x6, 0xeb225ff8182841f1, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xcd}, [@selector_unit={0x9, 0x24, 0x5, 0x6, 0x90, "cbd15db3"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x302, 0x5, 0x2, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x8, 0x0, "", '6_>'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xf, 0x9, 0x3, "4d0ee8cb3e8fe5"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x1, 0x3}, @as_header={0x7, 0x24, 0x1, 0xf, 0x0, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x5, 0x1, "f317b1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x5, 0x3, {0x7, 0x25, 0x1, 0x7a7767bf9778bcb0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x6, 0x9, "b3f3"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xeb40, 0x1, 0x5e, "534b4398b78de126"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x2, 0x2, {0x7, 0x25, 0x1, 0x2, 0xc, 0x5}}}}}}}]}}, &(0x7f0000002940)={0xa, &(0x7f0000002800)={0xa, 0x6, 0x250, 0x81, 0x80, 0x10, 0x10, 0x7}, 0x38, &(0x7f0000002840)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "2482d8378269b614e26637d85587e540"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x3, 0xf, 0x4, [0xff0000, 0xc0c0, 0x3f17, 0x1b0]}]}, 0x3, [{0x4, &(0x7f0000002880)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000028c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x4ff}}]})
r9 = msgget(0x1, 0x24)
msgrcv(r9, &(0x7f0000002980)={0x0, ""/28}, 0x20, 0x0, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f00000029c0)={0x0, 0x0, "8f1dec0a6e60ec5c1f43c856d78a9249"})
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000002a00), &(0x7f0000002a40)=0x4)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002ac0), r2)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002c80)={'ip_vti0\x00', &(0x7f0000002b00)={'erspan0\x00', <r11=>0x0, 0x40, 0x0, 0x2, 0x6, {{0x50, 0x4, 0x0, 0x8, 0x140, 0x64, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp_addr={0x44, 0x3c, 0x18, 0x1, 0x8, [{@remote, 0x24e}, {@multicast2, 0xfffffffb}, {@multicast2, 0x8}, {@rand_addr=0x64010101, 0x80}, {@local, 0x8}, {@local, 0x4}, {@multicast1, 0x40}]}, @timestamp_prespec={0x44, 0x44, 0x43, 0x3, 0x1, [{@rand_addr=0x64010100, 0x6}, {@multicast2, 0xca75}, {@local, 0x1}, {@rand_addr=0x64010101, 0x3}, {@empty, 0x7}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@empty, 0x2}]}, @end, @generic={0x88, 0x8, "45d8175f5e2f"}, @cipso={0x86, 0x17, 0x1, [{0x5, 0x11, "06c309189063152dd8df6070b27216"}]}, @rr={0x7, 0x23, 0x2a, [@multicast2, @private=0xa010101, @broadcast, @private=0xa010101, @rand_addr=0x64010101, @remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x8f, [@local, @rand_addr=0x64010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @lsrr={0x83, 0x1b, 0x3a, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @multicast2, @multicast2, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xca, 0x3, 0x5, [{@multicast1, 0xfffff718}, {@multicast2}, {@empty, 0xffffffff}, {@broadcast, 0x8}, {@private=0xa010100, 0x3}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002cc0)={'team0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002e40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d00)={0xe4, r10, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x84, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "3a0a75ea7617a0afbd4b5bd350102aa26c8afec44e83387dff00421ef260751f00bd9e2b6cad4d88a5dc1c336a394affddde2111eec863b542cda6707351edcef82ce3849b3dcb80ebfe7b1a7d84ef8829bab158b6bff17a6c6925356fd06be4798cc07b2b461a0b44a4b36d"}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x60014)

5.858196765s ago: executing program 5 (id=3276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x5, 0x3, 0x3d)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r5 = getpid()
stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000740)=<r8=>0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$unix(r4, &(0x7f000000a380)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)="4e4abcc346af3bc17385ef3e117b4d58bea3857cf0355d30a611aaefa10b74d85c1a4344b2e6a3ae15bbbe31b2e98961522bfc7f667865a7828aebcc65d84c579ed7ddb128eb556ff693155d1b2a8822", 0x50}, {&(0x7f0000000480)="6c09f56b7db34924e6d47ebcc49e72214ba6d77c60ff0bb07d50e5f579523f8873245731ef8d411fe868ba9cb4dc080a1a06dc2935d80997b6eb5bc04d52b06edb6c6427cc1df5bac171b4d71ec57f3ba34d37bd442149d1e114ecd1c1f74c63a8051fac1fcb1ee1d0c7623e8f623bcc4ec32a0b6b02250a089345fbfcdd503844f539b1ae85db0d18756ea4ef90f1848ce6dd2a16ca170bfa3f5b2d71ae6fe0910cef67f2adb36dfc9f8c2476cee1d22ddad7af31f8ed48e54e5403267855e31c1f92dec05017777f6523774f42ca52", 0xd0}, {&(0x7f0000000580)="33323f96fe420faa635f2ab3a21a308b8053d1c2b35c63bbb0217cb0ecab9adfe9b4e4d4f9a2d69319ecaa126ff4ee96dd4ba9ed76698ac75e4fa9989b0499345532f4aed928db1f719a0398793c93b2a231ec3095ee67cdf6f72c4e348ba304e58402935cdfc185a440d5a7592ca12adad34eebaf3dd077da6f5c673841a8f93b28e3e2e40517d891f7e35424553fe8aaa9d486ba343305b38a4e7481c9fd80e0eb8e1c4c412cd56fb7f3d199dc2f97fb6804f0deed9442f6cef5b37d8dcc48f0059518a4f30b3b", 0xc8}], 0x3, &(0x7f0000003940)=[@rights={{0x28, 0x1, 0x1, [r4, r4, r0, r3, r3, r2, r3]}}, @cred={{0x18, 0x1, 0x2, {r5, 0xffffffffffffffff, r7}}}, @cred={{0x18, 0x1, 0x2, {r8}}}, @rights={{0x2c, 0x1, 0x1, [r4, r0, r4, r3, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r3, r1, r4]}}, @rights={{0x2c, 0x1, 0x1, [r3, r4, r3, r0, r2, r2, r4, r4]}}, @rights={{0x10, 0x1, 0x1, [r4]}}, @rights={{0x14, 0x1, 0x1, [r4, r2]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x11c, 0x4008001}}, {{&(0x7f0000004080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000043c0)=[{&(0x7f0000004100)="bb3e462adb26463b3e8df03b4a414ffa0566c4194050f4a4622466066c19e491b6e78bbed3c125c3ab75ff56b03ed5648d358380d4206c5f5bf92ed6d37aef4b106a586e1856f5e16e0189f709896f8656050993ca9fa4d6cb3efda49b2f54395a20e7dcec7906249840c04eda03844bce0678e5f0cc38ed2c12b3890f64615194fb1972a29bb9b884fdb4", 0x8b}, {&(0x7f00000041c0)="b50578865685a45cadfda33de78e99afaac9e3e156081895a59ee588cbc7bca8f1b6e3bdadaf5a4df463c619b3d9e527ddbdbe8406afbc828afe830949030ac3e1d46fe79aae3fad3c19017f896232ef031ee3f0514c3cd427f3ebacee9e3f34080aa7", 0x63}, {&(0x7f0000004240)="1e873f556496536916219cef130ed4f14bc5c47992ff89b5ec48bb78172d99c472c5da41521e6a88f4a29207e4fe66a8641078b3", 0x34}, {&(0x7f0000004280)="868a990c26d52d7150b81224e5d99c3aa748df61ba22c0198ab2667c310924ae2e9a67ff66910b44a6119f50fa42221f4d62d8b6edecfb41020b797166", 0x3d}, {&(0x7f00000042c0)="d29d7a7f940bfb4b7913f92f59d7d5d121bfe7046e087853ac53d1aba7b648e4deeddaed9756b24bc260587db1d221e7443dfc0b0ec5b0e88406d9e7db87a0768dd7038e5e305efe41462666a25838e877b58734faf4da4ad98e35567d288fbd17917a6f4c78f10a75643357cf0b2eae57220e4543af4c83566f97973203e46eefb3700df6a8316acb3b7740e27b9e3daea6df1626ad713b7c2498129846deb517767ea98a5eaefaea7d0a124672429199d4a7b573e49f0e2bed72dc9eeedc84a8345f6da291db62760265df3c33d0a7d430c32c72d3c23186ba3d355ea6d3ed7d9330f409ae69b70167", 0xea}], 0x5, &(0x7f0000004440)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, r7}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r2, r3, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x30, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r3]}}], 0x7c, 0x80}}, {{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000044c0)="a9e84f4fc359655bbf373821a9c9194b568b927bbfe14ef67c4b9314947153aa0d484d5d84c04688fd62131cf3afd6def95a8111db474d8e1f7e3d407ec3d70bdabab109347ac65480bcb4397cc441f960931778db93e09a833f652a3f2efea96664c07fa41f8fcfee8c309f83fff157c723df4b9c83e22beef5771fc724207683aa5da61f27999c6e", 0x89}, {&(0x7f0000004580)="29dfb24fdc18fa9333739bf2b87ec8cb130c3b14ea98ca7b279b2e37f49467abd6b7c98f1e846c58026cd3fbefca06f550e35b373b8330d30b60a29ad0f3a371dcf67aacafb8e0809f533570e3b0731cddfc03944e494d5f340a32428275ec7d8e6e230c8cd5ed15bd7a4a6f4bb28dd9a8804343f7b8760a65ca8b3fd138a1875ab60b72ca663fa69e5fa10a5267e77f8ae666de167ae76c", 0x98}, {&(0x7f0000004640)="db6a066e7f36883db6167c3a28a1f309f15e0bfbec6e0ce093e28d", 0x1b}, {&(0x7f0000004680)="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", 0x1000}, {&(0x7f0000005680)="822a8f91182c832ea294", 0xa}], 0x5, &(0x7f0000005700)=[@cred={{0x18, 0x1, 0x2, {r8}}}], 0x18, 0x4010}}, {{&(0x7f0000005740)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005d00)=[{&(0x7f00000057c0)="17e43c64270078566eb11f5f10677ca70808684caab4eb217f45e64d2d39c20c09085114210e9568bd6a182e0b109216ef0bf9a3ecd4caa9dfcb4c86f51ce5e27f56e788f81616e62313b6a62c959fbe897a3a8e614f8d5103f46b30a888fd327ed25235564d07a9b39971168543afe4e3db4025739008da594c6c432de96d1ea9bcd629b6e243d4f55ca4840aea1a1e20ebcc1b5bed2017cf42457ade78e09f7db2f713fd66dcb3a321a69eef35f0742fd459430e3a01ec5cfdeef8828e49637a4de4c9ff5efc5b0784955efb0d78b2f7df35f02efd72f658785f1610803572154409b34687a9f3f68fbbb732fd062898413b459578c624", 0xf8}, {&(0x7f00000058c0)="715042eb374c2fc3dc2b620909ee87491b9e991b619a52a80c8b39294ff6e9ba06f7728c7780c4a9a18c89ae24e4990bc0c895485dfea1d3d4a52a4888db15c16b5fdece4e52fab1f09b7cd924c3240b4080c80347b343a70e39fa147ee44faddbcad5c24fd461d940538c7411335fda26bb2a6f185212f45311a336732575fa41f86592572465af7dbfbff9791e62a3", 0x90}, {&(0x7f0000005980)="dc931a56f8be37485010effb16ad58298da3e88024fe9f30614a9c6cfc99a11a49857b25f17c7dcfaa96171ca162913b95ec3d85e6a46693241c3c66cb2b2e50853e1d5458004ef730661c33170e94259eaae0315ccc87571030d9f33ff1794c283b1cf4bf1d586ec434cd1006627a3c7f31b82a5a67c9c41b5a9beed6351f5689b721e0643a4b50bb8a58a3fa67ee1af921baf2b2b58cf4c1335acbcc2f5b1dd8d1f8bac3464313d5e4a61c10baf050af9eb565d7827e4c3d9f4061567856368570581d827fb4c2b6a41ea4583b0111c11b2befa8cf0fb250822f04afbe43477ccb583dad83f43eaef3561aad07607d367921a3", 0xf4}, {&(0x7f0000005a80)="a70bf4de3da306518a7b81621d099b528969d8446be898366ed75ce902dff1d54d2f7423a6a14242f7e7161e220f864d2c82653f079da4219f4dc857ce5a47c984785d30883227a5412079c87eab5a356e6e7d69a9aaf9149b6e2ffbf47d0fe291", 0x61}, {&(0x7f0000005b00)="c0b822f8ae44be96ac4db7b9a86fe0721f6d1d6a59eba6ee1308bd833421675574aef5976bb1ae05116e68a2cab077588ae658c468ba040406a9639948abc20eee02f57466ccf000f0e3e1b3feea19acbae2dcb09090ee16026d0acdec06cc7461d442b8f77848dff1ab6dfb4571115dd1d3a6ba426ed1a01bf9ade2becba42b68bff7d41d725b6dd3fb33083801476cea0aa630cfbefd8f01de3a0da263928c61da759ca9db341bf477cc40a92fe6099fa903e420d9cd7c140ea4182bae2dfd4fac", 0xc2}, {&(0x7f0000005c00)="b58aa0911018ebeacc13c3d0826c170547bb78f8636212c23db6c5192d58ce91b79fda4c226cea00f89ed32bca2b8c379844de77fc6a192ee8", 0x39}, {&(0x7f0000005c40)="c233edf12f8985f3b3b55732", 0xc}, {&(0x7f0000005c80)="d86e104b85522c3ebaabece81bf30b4c6eb90f38b3de67cbdf90858c2dcb3984f6d6", 0x22}, {&(0x7f0000005cc0)="57ef34ecb5d4fcc6e6ecde23b515a949a7d8585d06f85acaafc8f626fc961b1211ad225cbc6b38c42ec30cecac", 0x2d}], 0x9, &(0x7f0000005f00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r7}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, r6}}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0xd8, 0x48000}}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000006000)="197b31d0dfd5764dad2c18a669c9e23c75cb5328646eab35b48be09a84abc0cc40ac58de3bb22af4da80ce5b14b8548a967fab2a50c1f5bcd0f57d0c5fd17d0eff78d3984cfe51176f4f446bfd75fdd90997630c4f02af4745854b1476aa40d028b93b9a749bb6e3002f50cdf1241d7fd44dcfb4071921daa0b079999e2d58fb304a5382b82ea1e355a1fae4dc9f8d8e61f4d7dcbf1b930604823cc40a55af137136de91dee0c54f", 0xa8}, {&(0x7f00000060c0)="9d2a4d878d907f956df2bcc998cf63f49e0cfe455512637966da", 0x1a}], 0x2, &(0x7f0000006140), 0x0, 0x4000000}}, {{&(0x7f0000006180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000006240)=[{&(0x7f000000a100)="297c4e7bed65990d478b369ca3b671454d748babdfdc5109c79590d8945789c012f43a04767ff2663939214ebf5ac85624d14449877db5e041a29ddb2fdd7cdaace0200d9ed562db6a473f0ea773c0a64bb57119e7fc6313603a472a04b9f6bda49c25ebcb7ae16ccb20dc7546b68cee0709f20cf8f61d553dcb330aa6fe0f815e0e2558e802172916afd80a3c7022cd8eff18e75eee334213e67fafd5aeb9a9610f7f9cd68e9a49a7332bcd46b6b74792b8be5617267aa6401779", 0xbb}, {&(0x7f000000a1c0)="37c642987492f1f2ca682fdde51a5c12a54c1170319532fc1decc27724945eb914cb55d4908923edb1daa7efc4ce8fbaa3cb8fddcb900cdb91c17538f2e004ec2600ee64b11e7bc25b7f9e069fde4fff68b9ba86f0f8fa36c98e8fb9b66b0d30c75273582668a1719d365e38bf1b10642b74a9bf0cc91c4cf56f0a22c469358ee70efd92d2d45cba568295a2824fc5b9623787866a2de445e2baf6ad5c795771adfedddce7325c5c5241af9d86356ec401e4bf367f8c408223fbe8fdf0bb4abd03391a1fb05cd5db33922190f498795233c40d3ea8aa03a9cf57d56f8d14bc6665fc4e", 0xe3}, {&(0x7f0000006200)="a0b279cac2bf10cf71cb6b8a9edf1bdf6e539d9ac17acb77cb97cd2797d623bbcc14ff833da423c965b12a7c4b", 0x2d}], 0x3, &(0x7f000000a2c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x24000012}}], 0x6, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, 0x0, 0x40010)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r12, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r12, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c)
sendto$inet6(r11, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
socket(0x10, 0x3, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r13 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02)
ioctl$VIDIOC_S_INPUT(r13, 0xc0045627, &(0x7f0000000180)=0x1)
syz_io_uring_setup(0x4ce4, &(0x7f0000000200)={0x0, 0x3e1e, 0x400, 0x0, 0x182, 0x0, r10}, &(0x7f0000000040), &(0x7f00000002c0))
ioctl$VIDIOC_S_CROP(r13, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, 0x3, 0x1, 0xb01, 0x0, 0x0, {}, [@CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x24}}, 0x0)

5.480928785s ago: executing program 6 (id=3277):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x0, 0x1}, 0x18, 0x2)
r1 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00')
fchdir(r2)
r3 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, 0x0)
r4 = dup(r3)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x1, 0x0, 0x7})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x1d, 0x3, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x4e22, 0x7, @mcast2, 0x7}, 0x1, {[0x0, 0x1, 0x8, 0x80, 0x8, 0xf, 0x6, 0x1000]}}, 0x5c)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r7, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfe85, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x8, 0x0, 0x0}}, 0x34)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
unshare(0x8040480)
r9 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r9, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x100, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xbc, 0x2, [@TCA_MATCHALL_ACT={0xb8, 0x2, [@m_gact={0xb4, 0x1, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffa, 0x3, 0x5, 0x2, 0x8e8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2701, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2b, 0x21261062, 0x5, 0x3f, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x1dfe, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xdbc, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xb, 0x8, 0x4, 0x21b2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa37f, 0x7, 0x1, 0x9, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x5, 0xfd}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

5.356859874s ago: executing program 6 (id=3278):
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x44, 0x0}, 0x4008000)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1b4, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2c0, 0x20a, 0x278, 0x2c0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x190, 0x1b4, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[], [0x0, 0xffff], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e4)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r5 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0})
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r7 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000003c0)={0x2, {{0xa, 0x0, 0x0, @mcast1, 0xb}}}, 0x88)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe53}}}, 0x104)
readlinkat(r6, 0x0, &(0x7f0000000180)=""/10, 0xa)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
syz_usb_connect(0x5, 0x39c, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x88, 0xcd, 0x9d, 0x8, 0x2100, 0x9e55, 0xe1a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38a, 0x2, 0x6, 0x8f, 0x60, 0x5, [{{0x9, 0x4, 0x13, 0x15, 0x5, 0x42, 0x6e, 0x71, 0x81, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0xba, 0x1001}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x8, 0xa, "55a11431e1"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1, 0x80, "1516", "ce12"}]}], [{{0x9, 0x5, 0x4, 0xc, 0x400, 0xfa, 0x13, 0x8, [@generic={0xe0, 0x31, "00cef966954c708afc319e07417b34e08bc8eeb96c82361c82a37c766203b632818cf6892ab64f33928908c78c0b225e111f15e8e54be5c1596343dd3a4d41e56fb6a358273e5c37517d11e4aef8a1d7a38cbc5f57b35b99436d227231af5b659c4163fdf79517fea9a9e8160f893ec8e740b4adeea94e0039f9279ebdea6837c4ed2dffb2848dcbc1f1edb962d94db7d9da135d5a186e71e402dea43870f20433f1547c47127e1f99ff94df700364a738fe5249d3dc4317a66257d0f655876b3c22f6e26cfaf1ecdc082e5b7c66df831f979234bc702f6cc3de14ed12ec"}, @generic={0x7d, 0x7, "d62cdefb4288dade445a859be65ec68c703212308f4bd94f51709bbae60e9ea2e30575ef31e701dfa9f00cb9a525e196146176cb2a94d39ea8e050fa2922b38d86b54f017bcde7a4d6f113cd8207fe13e540b6d348e7c2e175944f2d3d152ce686a750618a3f94d31b5b7b776c5c8ee07400025b67db334009a94b"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x9, 0x0, 0x46}}, {{0x9, 0x5, 0x0, 0x10, 0x28, 0xf0, 0x1, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x15a0}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x7, 0x1, 0xf, [@generic={0x21, 0x3, "5841e9ad61371884504883cfc36baacde5edee803279675fea46a7bbb12384"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20}]}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0xe6, 0x5c, 0x0, [@generic={0xda, 0x8, "0193786c4da5308398264062cc82f1c8e7f659bf7f7c427d904767fc2ec216cd8ca6bd17d25709ff4be271a53ac813b67f89082e36942d9e4c7d58f0755a75349b4dd7183b579197d6fa5ba8516ff5aaf380c929c86b1b8b9db867ca2f615c2740f0c59b0edd77d94d9db572af89f3af3e00075a0a576de2813fc482af4b691aa4dfd772a9454a37a17cc91fb7c97edcb7314888de340e5fc4907a2d3dccb5be606a51fc9331bf6ad25f50aa8fdafe2cd55812977f3a8abed98b91403cf734135c9cf7aada9fbac132392110e4639f74584bc74fd6172d8a"}, @generic={0x2d, 0xf, "439072e145ebc767578a410a7eb5ad43115e3819114a9b33d0db53e7fbf9ea35b3c97132bf1ed89944d638"}]}}]}}, {{0x9, 0x4, 0x50, 0x5, 0x6, 0x7e, 0x3c, 0x7b, 0x3f, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "8c6d21f5"}, {0x5, 0x24, 0x0, 0x86}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x8000, 0x9, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xa}, @acm={0x4}]}, @generic={0x11, 0x0, "cd7704cde7610682603d2acac78367"}], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x93, 0x6, 0xff, [@generic={0xe, 0x3, "f4d95f22932ae0ee2360c653"}]}}, {{0x9, 0x5, 0x1a, 0x0, 0x1f7, 0x7, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x836}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x5, 0x0, 0x9}}, {{0x9, 0x5, 0xe, 0xc, 0x230, 0xdb, 0x8}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x3, 0x1, 0x3b}}, {{0x9, 0x5, 0x16, 0x0, 0x400, 0x1, 0x8, 0x7e}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x55, 0x8, 0x3, 0x20, 0x3}, 0x47, &(0x7f00000002c0)={0x5, 0xf, 0x47, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "619e357a25c7f2f28948c8e3815e797b"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0xf, 0xfffd}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x8, 0x42, 0x9, 0x81}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x3, 0xf, 0x43, [0xf0, 0xffc000, 0xc000, 0xc0]}]}, 0x6, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x183f}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x25, &(0x7f0000000480)=@string={0x25, 0x3, "72358c8398e5cd63d601da5abab1dea9a7efc93883bf65993a57d0d6f09081a46b5204"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x406}}, {0x8b, &(0x7f0000000500)=@string={0x8b, 0x3, "50c7da183b186577cc319f6176621928f541483746d4d5a85ab8790393659fa1fb3ead94753ba643ab6d6d0bdf5fd6772dd0091de37e222e67db212defe651e197b0cd7c1a5e4bcadb11bcbce1810da570729d15216da71d146c8da7fadf529920178723cde34e33987a94521f2da12daf5ffd7cbf4f67b82136a34bc027b5904d0dad4690f843291c"}}]})

5.111726624s ago: executing program 1 (id=3279):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000680)={0xb6, 0x0, 0x8000})

4.912329313s ago: executing program 1 (id=3280):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, "08c080d7"}}}}}, 0x0)

4.885748027s ago: executing program 5 (id=3281):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f00000002c0)=[{0xf, 0x10, 0x4, &(0x7f0000000080)="cd137f46"}], 0x1})

4.755654327s ago: executing program 1 (id=3282):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f00000002c0)=[{0xf, 0x10, 0x4, &(0x7f0000000080)="cd137f46"}], 0x1}) (fail_nth: 1)

4.268614318s ago: executing program 3 (id=3283):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a320000000014000780080006400000000008"], 0x5c}}, 0x24040001)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340), &(0x7f0000000280))
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

3.765869798s ago: executing program 3 (id=3284):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8)
sendto$inet6(r1, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r2, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000001180)=""/95, 0x5f, 0x0, 0x0, 0x2}}, 0x48)
setsockopt$inet6_int(r1, 0x29, 0xef, 0x0, 0xfffffffffffffe61)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f0000001080)="0bbb268dd6ffa80800000000002a16000000210d0000aaa8fa0172429a9380d41000000000000000290000003b000000", 0x30)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c40)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x2603)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000000)={&(0x7f00000002c0)=[{0xf, 0x10, 0x4, &(0x7f0000000080)="cd137f46"}], 0x1})

3.115096128s ago: executing program 0 (id=3285):
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x0, 0x5, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
getdents(r3, &(0x7f0000000380)=""/55, 0x37)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x3)
r6 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r6, 0x0, 0x0, 'syz1\x00', 0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000dc0200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000100000000000000", @ANYRES32=r7, @ANYBLOB="040000000000000000000000000000000000e500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0x6, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]})
futex(0x0, 0x4, 0xffffffbe, 0x0, 0x0, 0x4000001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'})
close(r5)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r8, 0x7, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x8})
fcntl$lock(r8, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x100, 0xdbd})
fcntl$lock(r8, 0x6, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x400})
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)

2.272702575s ago: executing program 6 (id=3286):
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x0, 0x5, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
getdents(r3, &(0x7f0000000380)=""/55, 0x37)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x3)
r6 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r6, 0x0, 0x0, 'syz1\x00', 0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000dc0200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000100000000000000", @ANYRES32=r7, @ANYBLOB="040000000000000000000000000000000000e500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0x6, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]})
futex(0x0, 0x4, 0xffffffbe, 0x0, 0x0, 0x4000001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'})
close(r5)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r8, 0x6, &(0x7f0000000080)={0x1, 0x1})
fcntl$lock(r8, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x100, 0xdbd})
fcntl$lock(r8, 0x6, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x400})
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)

1.746481062s ago: executing program 1 (id=3287):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0x8, 0xf}, {0xffe5, 0xd}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x4000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402148006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054)

1.742442573s ago: executing program 5 (id=3288):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000ffffffff0080000008000000", @ANYRES32, @ANYBLOB="0000000000000000000000f20000000000000000edfdf5449708d1798b990e1e1de3e2", @ANYRES32=r2, @ANYRES32, @ANYBLOB="00200000000000000400"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r4)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x4c6c}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000002c0)=0x9, 0x4)
write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000a18661d00200000000000001fe8000000000000000000000000000aa3b000000001090780200"/70], 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001ac0)={r9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})
ioctl$LOOP_SET_STATUS64(r10, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753115418ab0cb090024d5c8bf604cca108938fcfa390080ffffdef8000000000000ddff00e09800", "8b600009aaa722681a1e2513d754f688a932fb211960a36fbfe1a69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r11, 0x1, 0x6, @broadcast}, 0x8)

1.269805124s ago: executing program 1 (id=3289):
openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00030d"], 0x0, 0x0}, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0xffe, 0x3ff, 0x8001, 0xbd7f, 0x1}}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x1dc, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1dc}}, 0x0)
r2 = eventfd2(0x8, 0x1)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r2, 0x4})
write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8)

944.613054ms ago: executing program 0 (id=3290):
r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$igmp(0x2, 0x3, 0x2)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@loopback, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x1, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x8001, 0x543}, {0x7, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "66d38547aa140d000000000000000086cae9fb4f"}}, @offload={0xc, 0x1c, {r2, 0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x40, 0x8b, [{{0x9, 0x4, 0x0, 0x28, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0xd, 0x5}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x24, 0x1, 0xff, 0x7}, 0x37, &(0x7f0000000140)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "f9dda47108aadce7800e803874561560"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2ffee7754fee5fc4e3d142527c8ac8cd"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x33}]}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000000000000b18b7cbbc78256b2e2"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
getcwd(&(0x7f0000000280)=""/101, 0x65)
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

380.831908ms ago: executing program 6 (id=3291):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)

221.812959ms ago: executing program 3 (id=3292):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, "08c080d7"}}}}}, 0x0)

7.920578ms ago: executing program 3 (id=3293):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r4=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r7 = socket$kcm(0x2d, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0xff, 0x0, 0x0, 0xfd, 0x2}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000080)={r7})
r9 = syz_open_procfs(0x0, 0x0)
pread64(r9, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3)
preadv(r9, 0x0, 0x0, 0xc9, 0x1)
pipe2$watch_queue(0x0, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008"], 0x44}}, 0x28000)

0s ago: executing program 6 (id=3294):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a320000000014000780080006400000000008"], 0x5c}}, 0x24040001)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340), &(0x7f0000000280))
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

kernel console output (not intermixed with test programs):

606]  ? aa_label_sk_perm+0x532/0x6e0
[  931.074500][T16606]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  931.074525][T16606]  ? process_measurement+0x195e/0x1c80
[  931.074555][T16606]  ? process_measurement+0x301/0x1c80
[  931.074588][T16606]  udpv6_recvmsg+0x20e/0x15e0
[  931.074620][T16606]  ? __pfx_process_measurement+0x10/0x10
[  931.074650][T16606]  ? __pfx_udpv6_recvmsg+0x10/0x10
[  931.074670][T16606]  ? aa_sk_perm+0x6d5/0x900
[  931.074690][T16606]  ? __pfx_udpv6_recvmsg+0x10/0x10
[  931.074707][T16606]  inet6_recvmsg+0x1fe/0x6c0
[  931.074724][T16606]  ? __pfx_aa_sk_perm+0x10/0x10
[  931.074743][T16606]  ? __pfx_inet6_recvmsg+0x10/0x10
[  931.074761][T16606]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  931.074777][T16606]  ? security_socket_recvmsg+0x7e/0x2c0
[  931.074802][T16606]  sock_recvmsg+0x105/0x270
[  931.074822][T16606]  ____sys_recvmsg+0x1e6/0x4a0
[  931.074852][T16606]  ? __pfx_____sys_recvmsg+0x10/0x10
[  931.074873][T16606]  ? get_compat_msghdr+0x34b/0x4c0
[  931.074909][T16606]  ___sys_recvmsg+0x215/0x590
[  931.074934][T16606]  ? __lock_acquire+0x6b5/0x2cf0
[  931.074954][T16606]  ? __pfx____sys_recvmsg+0x10/0x10
[  931.074994][T16606]  ? __fget_files+0x3a0/0x420
[  931.075024][T16606]  do_recvmmsg+0x3a5/0x800
[  931.075053][T16606]  ? __pfx_do_recvmmsg+0x10/0x10
[  931.075085][T16606]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  931.075114][T16606]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  931.075144][T16606]  __sys_recvmmsg+0x1a5/0x290
[  931.075169][T16606]  ? __pfx___sys_recvmmsg+0x10/0x10
[  931.075193][T16606]  ? ksys_write+0x242/0x270
[  931.075214][T16606]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  931.075241][T16606]  __do_fast_syscall_32+0x20d/0x640
[  931.075258][T16606]  ? do_fast_syscall_32+0x33/0x70
[  931.075272][T16606]  ? asm_int80_emulation+0x1a/0x20
[  931.075287][T16606]  ? do_int80_emulation+0x274/0x4d0
[  931.075301][T16606]  ? trace_irq_disable+0x3b/0x150
[  931.075326][T16606]  do_fast_syscall_32+0x33/0x70
[  931.075342][T16606]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  931.075361][T16606] RIP: 0023:0xf7fe3f6c
[  931.075376][T16606] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[  931.075390][T16606] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  931.075407][T16606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800009c0
[  931.075418][T16606] RDX: 0000000000000001 RSI: 0000000000002122 RDI: 0000000000000000
[  931.075428][T16606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  931.075437][T16606] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  931.075447][T16606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  931.075473][T16606]  </TASK>
[  931.899532][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  931.912961][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  932.060899][  T795] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  932.282653][  T795] usb 1-1: Using ep0 maxpacket: 8
[  932.756104][  T795] usb 1-1: unable to get BOS descriptor or descriptor too short
[  932.803069][  T795] usb 1-1: config 9 has an invalid interface number: 5 but max is 0
[  932.833292][  T795] usb 1-1: config 9 has no interface number 0
[  932.839560][  T795] usb 1-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87
[  932.908638][  T795] usb 1-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  933.253393][  T795] usb 1-1: config 9 interface 5 has no altsetting 0
[  933.313260][  T795] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[  933.333123][  T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.341246][  T795] usb 1-1: Product: syz
[  933.362967][  T795] usb 1-1: Manufacturer: syz
[  933.367648][  T795] usb 1-1: SerialNumber: syz
[  934.525895][T16640] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  934.532585][T16640] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  934.616066][T16640] vhci_hcd vhci_hcd.0: Device attached
[  934.793148][   T10] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  934.803382][T15895] usb 7-1: new high-speed USB device number 126 using dummy_hcd
[  934.853412][   T10] usb 35-1: new full-speed USB device number 14 using vhci_hcd
[  934.952979][T15895] usb 7-1: Using ep0 maxpacket: 32
[  934.965239][T15895] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[  934.993160][  T795] usb 1-1: USB disconnect, device number 13
[  935.020741][T15895] usb 7-1: config 0 has no interface number 0
[  935.055807][T15895] usb 7-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  935.115599][T15895] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  935.135065][T15895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.153281][T15895] usb 7-1: Product: syz
[  935.166256][T15895] usb 7-1: Manufacturer: syz
[  935.177860][T15895] usb 7-1: SerialNumber: syz
[  935.198219][T15895] usb 7-1: config 0 descriptor??
[  935.273331][  T979] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  935.423011][  T979] usb 4-1: Using ep0 maxpacket: 16
[  935.436329][  T979] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  935.544739][  T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  935.566757][  T979] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  935.576170][  T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.584614][  T979] usb 4-1: Product: syz
[  935.589006][  T979] usb 4-1: Manufacturer: syz
[  935.595355][  T979] usb 4-1: SerialNumber: syz
[  935.864059][T16648] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2995'.
[  935.883597][T16648] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  935.898556][T16648] bond0 (unregistering): Released all slaves
[  937.302748][T16641] vhci_hcd: connection reset by peer
[  937.311972][T10223] vhci_hcd vhci_hcd.1: stop threads
[  937.317748][T10223] vhci_hcd vhci_hcd.1: release socket
[  937.323721][T10223] vhci_hcd vhci_hcd.1: disconnect device
[  937.673393][T15895] usb 7-1: USB disconnect, device number 126
[  937.934984][  T979] usb 4-1: 0:2 : does not exist
[  937.975761][  T979] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5)
[  937.984248][    T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  938.008820][  T979] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5)
[  938.028349][  T979] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5)
[  938.089569][  T979] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  938.153447][    T9] usb 2-1: Using ep0 maxpacket: 32
[  938.160881][    T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  938.181573][    T9] usb 2-1: config 0 has no interface number 0
[  938.260788][    T9] usb 2-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  938.285531][  T979] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5)
[  938.330197][    T9] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  938.343263][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.363297][    T9] usb 2-1: Product: syz
[  938.391096][    T9] usb 2-1: Manufacturer: syz
[  938.415486][    T9] usb 2-1: SerialNumber: syz
[  938.420740][  T979] usb 4-1: USB disconnect, device number 17
[  938.459372][    T9] usb 2-1: config 0 descriptor??
[  939.027174][T14485] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  939.039479][T14485] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  939.053762][T14485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  939.067841][T14485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  939.075791][T14485] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  939.092789][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  939.145988][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  939.154437][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  939.163088][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  939.176574][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  939.946833][   T10] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  940.025270][T16685] chnl_net:caif_netlink_parms(): no params data found
[  940.577424][T15887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  940.605046][  T979] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  940.826255][  T979] usb 1-1: Using ep0 maxpacket: 8
[  940.842384][  T979] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  940.880215][  T979] usb 1-1: config 0 interface 0 has no altsetting 0
[  940.890053][  T795] usb 2-1: USB disconnect, device number 118
[  940.901674][T16685] bridge0: port 1(bridge_slave_0) entered blocking state
[  940.913574][  T979] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[  940.928276][  T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.953125][T16685] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.003261][  T979] usb 1-1: Product: syz
[  941.008964][  T979] usb 1-1: Manufacturer: syz
[  941.013902][T16685] bridge_slave_0: entered allmulticast mode
[  941.037981][  T979] usb 1-1: SerialNumber: syz
[  941.052561][T16685] bridge_slave_0: entered promiscuous mode
[  941.067020][  T979] usb 1-1: config 0 descriptor??
[  941.098381][  T979] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  941.144917][T15887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  941.210507][T16685] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.221313][T16685] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.237164][ T5830] Bluetooth: hci5: command tx timeout
[  941.248620][T16685] bridge_slave_1: entered allmulticast mode
[  941.271787][T16685] bridge_slave_1: entered promiscuous mode
[  941.292435][  T979] snd_usb_toneport 1-1:0.0: cannot get proper max packet size
[  941.336906][  T979] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  941.385611][  T979] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  941.648045][T15887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  941.953752][T15887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.166016][T16685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  942.399891][T16716] syzkaller0: entered promiscuous mode
[  942.426666][T16716] syzkaller0: entered allmulticast mode
[  942.463764][T16721] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  942.487320][T16685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  942.493342][T16721] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  943.335722][  T979] usb 1-1: USB disconnect, device number 14
[  943.563142][   T10] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  943.867711][   T10] usb 2-1: Using ep0 maxpacket: 16
[  944.005025][   T10] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  944.015695][   T10] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  944.051492][   T10] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  944.079570][   T10] usb 2-1: config 1 interface 0 has no altsetting 0
[  944.134108][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  944.146817][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.157207][   T10] usb 2-1: Product: syz
[  944.161397][   T10] usb 2-1: Manufacturer: syz
[  944.175634][   T10] usb 2-1: SerialNumber: syz
[  944.333257][T13873] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  944.474240][   T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  944.503353][T13873] usb 1-1: Using ep0 maxpacket: 32
[  944.511243][T13873] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  944.527859][T13873] usb 1-1: config 0 has no interface number 0
[  944.543035][T13873] usb 1-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  944.575154][T13873] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  944.584923][T13873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.595253][T13873] usb 1-1: Product: syz
[  944.602023][T13873] usb 1-1: Manufacturer: syz
[  944.622064][T13873] usb 1-1: SerialNumber: syz
[  944.648629][T13873] usb 1-1: config 0 descriptor??
[  946.380634][  T795] usb 2-1: USB disconnect, device number 119
[  946.407404][  T795] usblp0: removed
[  946.763004][T16752] netlink: 'syz.1.3020': attribute type 3 has an invalid length.
[  947.128662][  T795] usb 1-1: USB disconnect, device number 15
[  947.739160][T16685] team0: Port device team_slave_0 added
[  947.765105][T16685] team0: Port device team_slave_1 added
[  947.979795][T16685] batman_adv: batadv0: Adding interface: batadv_slave_0
[  947.992916][T16685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  948.037010][T16764] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  948.043605][T16764] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  948.051824][T16685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  948.063090][T16764] vhci_hcd vhci_hcd.0: Device attached
[  948.071233][T16685] batman_adv: batadv0: Adding interface: batadv_slave_1
[  948.097336][T16685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  948.340331][   T10] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  948.526029][   T10] usb 45-1: new full-speed USB device number 9 using vhci_hcd
[  948.767571][T16685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  948.937977][T15887] erspan0: left allmulticast mode
[  948.964426][T15887] erspan0: left promiscuous mode
[  948.990201][T15887] bridge0: port 1(erspan0) entered disabled state
[  949.528867][T16775] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000065 undefined
[  949.871797][T15887] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  949.881888][T15887] bridge1 (unregistering): left allmulticast mode
[  950.047304][T15887] bond1 (unregistering): Released all slaves
[  950.066330][T15887] bond2 (unregistering): Released all slaves
[  950.086301][T15887] bond3 (unregistering): Released all slaves
[  950.102049][T15887] bond4 (unregistering): Released all slaves
[  950.129187][T15887] bond5 (unregistering): (slave batadv1): Releasing active interface
[  950.137660][T15887] batadv1: left promiscuous mode
[  950.146850][T15887] batadv1: left allmulticast mode
[  950.154371][T15887] bond5 (unregistering): Released all slaves
[  950.196858][T16780] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3025'.
[  950.273771][  T979] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  950.328696][T16685] hsr_slave_0: entered promiscuous mode
[  950.347502][T16685] hsr_slave_1: entered promiscuous mode
[  950.360580][T16685] debugfs: 'hsr0' already exists in 'hsr'
[  950.400662][T16685] Cannot create hsr debugfs directory
[  950.419887][T15887] tipc: Left network mode
[  950.483426][  T979] usb 1-1: Using ep0 maxpacket: 32
[  950.516663][  T979] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  950.538019][  T979] usb 1-1: config 0 has no interface number 0
[  950.552044][  T979] usb 1-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  950.599386][  T979] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  950.880826][  T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.912481][  T979] usb 1-1: Product: syz
[  950.922042][  T979] usb 1-1: Manufacturer: syz
[  950.927057][  T979] usb 1-1: SerialNumber: syz
[  950.937721][T16765] vhci_hcd: connection reset by peer
[  950.963688][T10215] vhci_hcd vhci_hcd.6: stop threads
[  950.971674][T10215] vhci_hcd vhci_hcd.6: release socket
[  951.082115][  T979] usb 1-1: config 0 descriptor??
[  951.087411][T10215] vhci_hcd vhci_hcd.6: disconnect device
[  951.586012][T16815] netlink: 'syz.6.3033': attribute type 3 has an invalid length.
[  952.411004][T15887] hsr_slave_0: left promiscuous mode
[  952.426717][T15887] hsr_slave_1: left promiscuous mode
[  952.457498][T15887] veth1_macvtap: left promiscuous mode
[  952.469227][T15887] veth0_macvtap: left promiscuous mode
[  952.481710][T15887] veth1_vlan: left promiscuous mode
[  952.496300][T15887] veth0_vlan: left promiscuous mode
[  952.582651][T16830] FAULT_INJECTION: forcing a failure.
[  952.582651][T16830] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  952.618481][T16830] CPU: 0 UID: 0 PID: 16830 Comm: syz.6.3037 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  952.618518][T16830] Tainted: [L]=SOFTLOCKUP
[  952.618527][T16830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  952.618540][T16830] Call Trace:
[  952.618549][T16830]  <TASK>
[  952.618559][T16830]  dump_stack_lvl+0xe8/0x150
[  952.618595][T16830]  should_fail_ex+0x412/0x560
[  952.618627][T16830]  _copy_from_user+0x2d/0xb0
[  952.618660][T16830]  do_ip6t_set_ctl+0x6f7/0xe10
[  952.618694][T16830]  ? rcu_is_watching+0x15/0xb0
[  952.618725][T16830]  ? trace_contention_end+0x3d/0x150
[  952.618760][T16830]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  952.618794][T16830]  ? nf_setsockopt+0x221/0x290
[  952.618828][T16830]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  952.618880][T16830]  ? __pfx_aa_sk_perm+0x10/0x10
[  952.618909][T16830]  nf_setsockopt+0x26f/0x290
[  952.618941][T16830]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  952.618967][T16830]  do_sock_setsockopt+0x17c/0x1b0
[  952.619001][T16830]  __ia32_sys_setsockopt+0x13d/0x1b0
[  952.619037][T16830]  __do_fast_syscall_32+0x20d/0x640
[  952.619059][T16830]  ? do_fast_syscall_32+0x33/0x70
[  952.619078][T16830]  ? asm_int80_emulation+0x1a/0x20
[  952.619099][T16830]  ? do_int80_emulation+0x274/0x4d0
[  952.619136][T16830]  ? trace_irq_disable+0x3b/0x150
[  952.619172][T16830]  do_fast_syscall_32+0x33/0x70
[  952.619194][T16830]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  952.619220][T16830] RIP: 0023:0xf704ef6c
[  952.619239][T16830] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[  952.619257][T16830] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  952.619279][T16830] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029
[  952.619294][T16830] RDX: 0000000000000040 RSI: 0000000080000300 RDI: 0000000000000508
[  952.619308][T16830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  952.619321][T16830] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  952.619333][T16830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  952.619371][T16830]  </TASK>
[  952.968962][   T30] audit: type=1800 audit(1771956556.174:889): pid=16833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3036" name="bus" dev="ramfs" ino=63826 res=0 errno=0
[  953.326407][T16849] loop2: detected capacity change from 0 to 7
[  953.338091][T16849] Dev loop2: unable to read RDB block 7
[  953.345624][T16849]  loop2: AHDI p2 p3
[  953.384783][T16849] loop2: partition table partially beyond EOD, truncated
[  953.653835][  T795] usb 1-1: USB disconnect, device number 16
[  953.703088][   T10] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  953.736863][T16855] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  954.159224][T16858] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  954.165830][T16858] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  954.315447][ T5192] Dev loop2: unable to read RDB block 7
[  954.321071][ T5192]  loop2: AHDI p2 p3
[  954.354191][ T5192] loop2: partition table partially beyond EOD, truncated
[  954.376846][T16858] vhci_hcd vhci_hcd.0: Device attached
[  954.592707][  T979] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  954.684168][  T979] usb 33-1: new full-speed USB device number 8 using vhci_hcd
[  955.501096][T16873] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3046'.
[  955.629989][T15887] IPVS: stop unused estimator thread 0...
[  956.037534][T16685] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  956.103099][T16685] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  956.245752][T16685] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  956.306561][T16685] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  956.413238][T13873] usb 7-1: new full-speed USB device number 127 using dummy_hcd
[  956.635139][T13873] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  956.869628][T13873] usb 7-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  956.870410][T16685] 8021q: adding VLAN 0 to HW filter on device bond0
[  956.894659][T13873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.997777][T13873] usb 7-1: config 0 descriptor??
[  957.116715][T16685] 8021q: adding VLAN 0 to HW filter on device team0
[  957.134373][T10212] bridge0: port 1(bridge_slave_0) entered blocking state
[  957.141763][T10212] bridge0: port 1(bridge_slave_0) entered forwarding state
[  957.213817][T10212] bridge0: port 2(bridge_slave_1) entered blocking state
[  957.221102][T10212] bridge0: port 2(bridge_slave_1) entered forwarding state
[  957.441708][T16885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  957.459160][T16885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  957.506060][T13873] uclogic 0003:2179:0053.002D: interface is invalid, ignoring
[  957.570094][T16859] vhci_hcd: connection reset by peer
[  957.588243][T10215] vhci_hcd vhci_hcd.0: stop threads
[  957.595768][T10215] vhci_hcd vhci_hcd.0: release socket
[  957.623452][T16685] 8021q: adding VLAN 0 to HW filter on device batadv0
[  957.630659][T10215] vhci_hcd vhci_hcd.0: disconnect device
[  957.719503][  T795] usb 7-1: USB disconnect, device number 127
[  957.971216][T16685] veth0_vlan: entered promiscuous mode
[  957.984591][T13873] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  958.009105][T16685] veth1_vlan: entered promiscuous mode
[  958.153030][T13873] usb 1-1: Using ep0 maxpacket: 32
[  958.159780][T13873] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  958.171825][T16685] veth0_macvtap: entered promiscuous mode
[  958.191802][T13873] usb 1-1: config 0 has no interface number 0
[  958.203549][T16685] veth1_macvtap: entered promiscuous mode
[  958.209729][T13873] usb 1-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  958.227852][T13873] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  958.237593][T13873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.246861][T13873] usb 1-1: Product: syz
[  958.251239][T13873] usb 1-1: Manufacturer: syz
[  958.257924][T13873] usb 1-1: SerialNumber: syz
[  958.290568][T13873] usb 1-1: config 0 descriptor??
[  958.298762][T16685] batman_adv: batadv0: Interface activated: batadv_slave_0
[  958.350862][T16685] batman_adv: batadv0: Interface activated: batadv_slave_1
[  958.409428][T10215] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  958.466464][T10215] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  958.482474][T10215] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  958.496354][T10215] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  959.110676][T16926] IPVS: fo: FWM 3 0x00000003 - no destination available
[  959.367649][T16935] fuse: Invalid rootmode
[  959.654643][T16947] FAULT_INJECTION: forcing a failure.
[  959.654643][T16947] name failslab, interval 1, probability 0, space 0, times 0
[  959.667812][T16947] CPU: 0 UID: 0 PID: 16947 Comm: syz.5.3064 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  959.667846][T16947] Tainted: [L]=SOFTLOCKUP
[  959.667855][T16947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  959.667870][T16947] Call Trace:
[  959.667881][T16947]  <TASK>
[  959.667891][T16947]  dump_stack_lvl+0xe8/0x150
[  959.667928][T16947]  should_fail_ex+0x412/0x560
[  959.667961][T16947]  should_failslab+0xa8/0x100
[  959.667991][T16947]  __kmalloc_cache_noprof+0x88/0x660
[  959.668017][T16947]  ? sctp_add_bind_addr+0x8c/0x370
[  959.668060][T16947]  sctp_add_bind_addr+0x8c/0x370
[  959.668093][T16947]  sctp_copy_local_addr_list+0x314/0x4f0
[  959.668125][T16947]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  959.668154][T16947]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  959.668184][T16947]  ? sctp_v6_is_any+0x64/0x80
[  959.668215][T16947]  ? sctp_copy_one_addr+0x93/0x360
[  959.668247][T16947]  sctp_bind_addr_copy+0xb3/0x3c0
[  959.668276][T16947]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  959.668305][T16947]  sctp_connect_new_asoc+0x2ff/0x6b0
[  959.668341][T16947]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  959.668382][T16947]  ? __local_bh_enable_ip+0xd0/0x130
[  959.668409][T16947]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  959.668435][T16947]  ? security_sctp_bind_connect+0x7e/0x2c0
[  959.668474][T16947]  sctp_sendmsg+0x1528/0x2c10
[  959.668522][T16947]  ? __pfx_sctp_sendmsg+0x10/0x10
[  959.668557][T16947]  ? aa_sk_perm+0x6d5/0x900
[  959.668594][T16947]  ? __pfx_aa_sk_perm+0x10/0x10
[  959.668623][T16947]  ? sock_rps_record_flow+0x19/0x400
[  959.668659][T16947]  ? inet_sendmsg+0x2f4/0x370
[  959.668697][T16947]  __sys_sendto+0x627/0x7a0
[  959.668730][T16947]  ? __pfx___sys_sendto+0x10/0x10
[  959.668785][T16947]  ? fput+0xa0/0xd0
[  959.668816][T16947]  ? ksys_write+0x242/0x270
[  959.668846][T16947]  __ia32_sys_sendto+0xdd/0x100
[  959.668880][T16947]  __do_fast_syscall_32+0x20d/0x640
[  959.668905][T16947]  ? do_fast_syscall_32+0x33/0x70
[  959.668926][T16947]  ? asm_int80_emulation+0x1a/0x20
[  959.668947][T16947]  ? do_int80_emulation+0x274/0x4d0
[  959.668967][T16947]  ? trace_irq_disable+0x3b/0x150
[  959.669006][T16947]  do_fast_syscall_32+0x33/0x70
[  959.669034][T16947]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  959.669063][T16947] RIP: 0023:0xf7f93f6c
[  959.669083][T16947] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[  959.669102][T16947] RSP: 002b:00000000f541450c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[  959.669125][T16947] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240
[  959.669141][T16947] RDX: 0000000000000001 RSI: 0000000000000051 RDI: 0000000080000080
[  959.669154][T16947] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000
[  959.669168][T16947] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  959.669181][T16947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  959.669214][T16947]  </TASK>
[  960.067831][  T979] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  960.496131][T10212] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  960.654077][    T9] usb 1-1: USB disconnect, device number 17
[  960.945173][T16952] can: request_module (can-proto-0) failed.
[  960.973611][T16957] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  960.984500][T16957] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  960.992733][T16957] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  961.035958][T14485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  961.047081][T14485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  961.056185][T14485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  961.069087][T14485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  961.078009][T14485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  961.105907][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  961.126434][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  961.135530][   T10] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[  961.151173][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  961.161540][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  961.170524][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  961.222367][T10212] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.336011][   T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  961.352319][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  961.381406][   T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  961.396199][T10212] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.413487][   T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  961.427733][   T10] usb 6-1: Product: syz
[  961.431986][   T10] usb 6-1: Manufacturer: syz
[  961.453640][   T10] usb 6-1: SerialNumber: syz
[  961.499814][   T10] usb 6-1: config 0 descriptor??
[  961.526686][   T10] usb 6-1: selecting invalid altsetting 0
[  961.619259][T10212] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.770518][   T10] usb 6-1: USB disconnect, device number 119
[  962.364733][T10212] bridge_slave_1: left allmulticast mode
[  962.370978][T10212] bridge_slave_1: left promiscuous mode
[  962.377779][T10212] bridge0: port 2(bridge_slave_1) entered disabled state
[  962.419213][T10212] bridge_slave_0: left allmulticast mode
[  962.425998][T10212] bridge_slave_0: left promiscuous mode
[  962.438904][T10212] bridge0: port 1(bridge_slave_0) entered disabled state
[  963.164984][T16991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'.
[  963.233235][ T5830] Bluetooth: hci0: command tx timeout
[  963.323184][  T795] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[  963.466684][T10212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  963.474190][  T795] usb 6-1: Using ep0 maxpacket: 32
[  963.493325][  T795] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  963.501755][  T795] usb 6-1: config 0 has no interface number 0
[  963.521482][  T795] usb 6-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  963.546032][  T795] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  963.555409][T10212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  963.584789][  T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  963.589622][T10212] bond0 (unregistering): Released all slaves
[  963.623039][  T795] usb 6-1: Product: syz
[  963.630131][  T795] usb 6-1: Manufacturer: syz
[  963.640295][  T795] usb 6-1: SerialNumber: syz
[  963.694885][  T795] usb 6-1: config 0 descriptor??
[  964.022188][T10212] hsr_slave_0: left promiscuous mode
[  964.057718][T10212] hsr_slave_1: left promiscuous mode
[  964.079892][T10212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  964.100528][T10212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  964.127428][T10212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  964.146687][T10212] batman_adv: batadv0: Removing interface: batadv_slave_1
[  964.182618][T10212] veth1_macvtap: left promiscuous mode
[  964.188669][T10212] veth0_macvtap: left promiscuous mode
[  964.197563][T10212] veth1_vlan: left promiscuous mode
[  964.203713][T10212] veth0_vlan: left promiscuous mode
[  964.256686][   T10] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  964.444738][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  964.462963][   T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  964.549816][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.574418][   T10] usb 2-1: config 0 descriptor??
[  964.609013][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  965.035477][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  965.044471][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  965.055224][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  965.074828][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[  965.084342][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[  965.095317][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[  965.103488][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[  965.112531][   T10] pwc: recv_control_msg error -32 req 02 val 2100
[  965.121962][   T10] pwc: recv_control_msg error -32 req 04 val 1500
[  965.132618][   T10] pwc: recv_control_msg error -32 req 02 val 2500
[  965.140829][   T10] pwc: recv_control_msg error -32 req 02 val 2400
[  965.149574][   T10] pwc: recv_control_msg error -32 req 02 val 2600
[  965.184800][   T10] pwc: recv_control_msg error -32 req 02 val 2900
[  965.315056][ T5830] Bluetooth: hci0: command tx timeout
[  965.445212][T10212] team0 (unregistering): Port device team_slave_1 removed
[  965.545512][T10212] team0 (unregistering): Port device team_slave_0 removed
[  965.900946][T16961] chnl_net:caif_netlink_parms(): no params data found
[  966.002588][T17029] syzkaller0: entered promiscuous mode
[  966.035600][T17029] syzkaller0: entered allmulticast mode
[  966.111804][T13873] usb 6-1: USB disconnect, device number 120
[  966.164466][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  966.173229][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  966.211700][   T10] pwc: Registered as video103.
[  966.222402][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input91
[  966.306864][   T10] usb 2-1: USB disconnect, device number 120
[  966.598372][T17043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  966.632405][T17047] FAULT_INJECTION: forcing a failure.
[  966.632405][T17047] name failslab, interval 1, probability 0, space 0, times 0
[  966.685706][T17047] CPU: 1 UID: 0 PID: 17047 Comm: syz.5.3086 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  966.685740][T17047] Tainted: [L]=SOFTLOCKUP
[  966.685749][T17047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  966.685762][T17047] Call Trace:
[  966.685772][T17047]  <TASK>
[  966.685782][T17047]  dump_stack_lvl+0xe8/0x150
[  966.685818][T17047]  should_fail_ex+0x412/0x560
[  966.685851][T17047]  should_failslab+0xa8/0x100
[  966.685878][T17047]  ? ep_ptable_queue_proc+0x5c/0x200
[  966.685900][T17047]  kmem_cache_alloc_noprof+0x87/0x650
[  966.685949][T17047]  ep_ptable_queue_proc+0x5c/0x200
[  966.685968][T17047]  ? __pfx_ep_ptable_queue_proc+0x10/0x10
[  966.685985][T17047]  input_proc_devices_poll+0x9e/0x140
[  966.686007][T17047]  ? __pfx_input_proc_devices_poll+0x10/0x10
[  966.686029][T17047]  proc_reg_poll+0x1b3/0x290
[  966.686053][T17047]  ? __pfx_proc_reg_poll+0x10/0x10
[  966.686075][T17047]  ep_insert+0x11a9/0x1a40
[  966.686109][T17047]  ? __pfx_ep_insert+0x10/0x10
[  966.686133][T17047]  ? __pfx___mutex_lock+0x10/0x10
[  966.686148][T17047]  ? __fget_files+0x2a/0x420
[  966.686172][T17047]  ? __pfx_ep_ptable_queue_proc+0x10/0x10
[  966.686187][T17047]  ? __fget_files+0x3a0/0x420
[  966.686208][T17047]  ? __fget_files+0x2a/0x420
[  966.686236][T17047]  do_epoll_ctl+0x7f4/0xe80
[  966.686265][T17047]  __ia32_sys_epoll_ctl+0x165/0x1b0
[  966.686290][T17047]  ? __pfx___ia32_sys_epoll_ctl+0x10/0x10
[  966.686321][T17047]  __do_fast_syscall_32+0x20d/0x640
[  966.686338][T17047]  ? do_fast_syscall_32+0x33/0x70
[  966.686352][T17047]  ? asm_int80_emulation+0x1a/0x20
[  966.686405][T17047]  ? do_int80_emulation+0x274/0x4d0
[  966.686419][T17047]  ? trace_irq_disable+0x3b/0x150
[  966.686445][T17047]  do_fast_syscall_32+0x33/0x70
[  966.686460][T17047]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  966.686481][T17047] RIP: 0023:0xf7f93f6c
[  966.686523][T17047] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[  966.686543][T17047] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff
[  966.686570][T17047] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001
[  966.686581][T17047] RDX: 0000000000000003 RSI: 0000000080000180 RDI: 0000000000000000
[  966.686591][T17047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  966.686601][T17047] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  966.686610][T17047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  966.686632][T17047]  </TASK>
[  967.008915][T16961] bridge0: port 1(bridge_slave_0) entered blocking state
[  967.016166][T16961] bridge0: port 1(bridge_slave_0) entered disabled state
[  967.023444][T16961] bridge_slave_0: entered allmulticast mode
[  967.030811][T16961] bridge_slave_0: entered promiscuous mode
[  967.038667][T16961] bridge0: port 2(bridge_slave_1) entered blocking state
[  967.045825][T16961] bridge0: port 2(bridge_slave_1) entered disabled state
[  967.053513][T16961] bridge_slave_1: entered allmulticast mode
[  967.060715][T16961] bridge_slave_1: entered promiscuous mode
[  967.091416][T16961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  967.103434][T16961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  967.133178][T16961] team0: Port device team_slave_0 added
[  967.141578][T16961] team0: Port device team_slave_1 added
[  967.166849][T16961] batman_adv: batadv0: Adding interface: batadv_slave_0
[  967.173898][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  967.200073][T16961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  967.218020][T16961] batman_adv: batadv0: Adding interface: batadv_slave_1
[  967.225835][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  967.252612][T16961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  967.297195][T16961] hsr_slave_0: entered promiscuous mode
[  967.303817][T16961] hsr_slave_1: entered promiscuous mode
[  967.412914][ T5830] Bluetooth: hci0: command tx timeout
[  967.682979][T15895] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  967.834886][T15895] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  967.863310][T15895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  967.896484][T15895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  967.909398][T15895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  967.944075][T15895] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  967.953570][T15893] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[  967.963300][T15895] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  967.983194][T15895] usb 1-1: Manufacturer: syz
[  968.013246][T15895] usb 1-1: config 0 descriptor??
[  968.127089][T15893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  968.174432][T15893] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  968.194557][T15893] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  968.204750][T15893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  968.221199][T15893] usb 6-1: SerialNumber: syz
[  968.393051][  T795] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  968.416425][T16961] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  968.437473][T15895] appleir 0003:05AC:8243.002E: unknown main item tag 0x0
[  968.448785][T16961] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  968.475779][T15893] usb 6-1: 0:2 : does not exist
[  968.487396][T16961] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  968.493580][T15893] usb 6-1: unit 5: unexpected type 0x09
[  968.507059][T15895] appleir 0003:05AC:8243.002E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  968.536520][T16961] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  968.556365][  T795] usb 2-1: config 0 has an invalid interface number: 72 but max is 3
[  968.589483][  T795] usb 2-1: config 0 has an invalid interface number: 98 but max is 3
[  968.617403][  T795] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  968.640849][T15893] usb 6-1: USB disconnect, device number 121
[  968.664591][  T795] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 4
[  968.718723][  T795] usb 2-1: config 0 has no interface number 0
[  968.735061][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  968.747080][T17043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  968.770057][  T795] usb 2-1: config 0 has no interface number 1
[  968.784695][  T795] usb 2-1: config 0 interface 72 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  968.813924][  T795] usb 2-1: config 0 interface 72 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  968.846330][  T795] usb 2-1: config 0 interface 72 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  968.884640][  T795] usb 2-1: config 0 interface 72 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  968.889196][T17043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  968.914677][  T795] usb 2-1: too many endpoints for config 0 interface 98 altsetting 0: 54, using maximum allowed: 30
[  968.938530][  T795] usb 2-1: config 0 interface 98 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 54
[  968.956857][T15893] usb 1-1: USB disconnect, device number 18
[  969.010309][  T795] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03
[  969.048905][  T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.060936][  T795] usb 2-1: Product: syz
[  969.065301][  T795] usb 2-1: Manufacturer: syz
[  969.070242][  T795] usb 2-1: SerialNumber: syz
[  969.089851][  T795] usb 2-1: config 0 descriptor??
[  969.101619][  T795] s2255 2-1:0.72: Could not find bulk-in endpoint
[  969.110089][  T795] Sensoray 2255 driver load failed: 0xfffffff4
[  969.132194][T16961] 8021q: adding VLAN 0 to HW filter on device bond0
[  969.151511][  T795] s2255 2-1:0.72: probe with driver s2255 failed with error -12
[  969.194929][  T795] s2255 2-1:0.98: Could not find bulk-in endpoint
[  969.217657][  T795] Sensoray 2255 driver load failed: 0xfffffff4
[  969.234008][T16961] 8021q: adding VLAN 0 to HW filter on device team0
[  969.236799][  T795] s2255 2-1:0.98: probe with driver s2255 failed with error -12
[  969.290509][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  969.297916][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  969.327730][T17089] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3092'.
[  969.347763][T10223] bridge0: port 2(bridge_slave_1) entered blocking state
[  969.355043][T10223] bridge0: port 2(bridge_slave_1) entered forwarding state
[  969.473758][ T5830] Bluetooth: hci0: command tx timeout
[  969.494203][  T795] usb 2-1: USB disconnect, device number 121
[  969.598550][T16961] 8021q: adding VLAN 0 to HW filter on device batadv0
[  969.747307][T16961] veth0_vlan: entered promiscuous mode
[  969.838164][T16961] veth1_vlan: entered promiscuous mode
[  970.191795][T16961] veth0_macvtap: entered promiscuous mode
[  970.409389][T16961] veth1_macvtap: entered promiscuous mode
[  970.571485][T16961] batman_adv: batadv0: Interface activated: batadv_slave_0
[  970.665182][T16961] batman_adv: batadv0: Interface activated: batadv_slave_1
[  970.773301][T15893] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[  970.815618][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  970.853341][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  970.862192][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  970.935446][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  970.993685][T15893] usb 6-1: Using ep0 maxpacket: 32
[  971.027886][T15893] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  971.042902][T15893] usb 6-1: config 0 has no interface number 0
[  971.049100][T15893] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  971.118384][T15893] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  971.156729][T15893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  971.196994][T15893] usb 6-1: Product: syz
[  971.201279][T15893] usb 6-1: Manufacturer: syz
[  971.234558][T15893] usb 6-1: SerialNumber: syz
[  971.272068][T15893] usb 6-1: config 0 descriptor??
[  971.328664][T15893] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  971.358906][T15893] em28xx 6-1:0.132: Video interface 132 found:
[  971.389572][T10212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  971.400207][T10212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  971.584491][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  971.601178][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  971.696934][T17125] netlink: 'syz.0.3098': attribute type 3 has an invalid length.
[  971.744155][T15893] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  971.897981][T17130] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  971.915307][T17130] bridge0: port 2(bridge_slave_1) entered disabled state
[  971.924604][T17130] bridge0: port 1(bridge_slave_0) entered disabled state
[  971.954314][T15893] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  971.966617][T15893] em28xx 6-1:0.132: board has no eeprom
[  972.033639][T15893] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  972.043113][T15893] em28xx 6-1:0.132: analog set to bulk mode.
[  972.061458][  T795] em28xx 6-1:0.132: Registering V4L2 extension
[  972.085045][T15893] usb 6-1: USB disconnect, device number 122
[  972.173093][    T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  972.229941][T15893] em28xx 6-1:0.132: Disconnecting em28xx
[  972.526067][    T9] usb 2-1: Using ep0 maxpacket: 16
[  972.571284][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  972.623054][    T9] usb 2-1: can't read configurations, error -61
[  972.783066][    T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  972.890586][  T795] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  972.907384][  T795] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  972.933143][  T795] em28xx 6-1:0.132: No AC97 audio processor
[  972.968982][  T795] usb 6-1: Decoder not found
[  972.976455][    T9] usb 2-1: Using ep0 maxpacket: 16
[  972.995562][  T795] em28xx 6-1:0.132: failed to create media graph
[  973.001186][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  973.013447][  T795] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  973.023042][T17146] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  973.029639][T17146] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  973.053613][  T795] em28xx 6-1:0.132: Remote control support is not available for this card.
[  973.072544][    T9] usb 2-1: can't read configurations, error -61
[  973.085649][T15893] em28xx 6-1:0.132: Closing input extension
[  973.115731][    T9] usb usb2-port1: attempt power cycle
[  973.124138][T15893] em28xx 6-1:0.132: Freeing device
[  973.175156][T17146] vhci_hcd vhci_hcd.0: Device attached
[  973.252671][T14485] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  973.264321][T14485] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  973.279793][T14485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  973.296135][T14485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  973.306267][T14485] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  973.353229][   T10] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  973.453157][   T10] usb 43-1: new full-speed USB device number 9 using vhci_hcd
[  973.493058][    T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  973.523891][    T9] usb 2-1: Using ep0 maxpacket: 16
[  973.539230][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  973.576081][    T9] usb 2-1: can't read configurations, error -61
[  973.734340][    T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  973.773633][    T9] usb 2-1: Using ep0 maxpacket: 16
[  973.787207][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  973.801605][    T9] usb 2-1: can't read configurations, error -61
[  973.817083][    T9] usb usb2-port1: unable to enumerate USB device
[  974.190219][T17160] chnl_net:caif_netlink_parms(): no params data found
[  974.802264][T17160] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.835149][T17160] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.870146][T17160] bridge_slave_0: entered allmulticast mode
[  974.931247][T17160] bridge_slave_0: entered promiscuous mode
[  974.968119][T17184] vlan2: entered promiscuous mode
[  974.975961][T17184] macvlan1: entered promiscuous mode
[  975.017413][T17160] bridge0: port 2(bridge_slave_1) entered blocking state
[  975.042206][T17160] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.071471][T17160] bridge_slave_1: entered allmulticast mode
[  975.098606][T17160] bridge_slave_1: entered promiscuous mode
[  975.312012][T17160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  975.359407][T17160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  975.395355][ T5830] Bluetooth: hci5: command tx timeout
[  975.677400][T17160] team0: Port device team_slave_0 added
[  975.706851][T17160] team0: Port device team_slave_1 added
[  975.811881][T17160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  975.837635][T17160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  975.912157][T17148] vhci_hcd: connection reset by peer
[  975.922656][T10212] vhci_hcd vhci_hcd.5: stop threads
[  975.933063][T13873] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  975.938800][T10212] vhci_hcd vhci_hcd.5: release socket
[  975.947534][T17160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  975.993145][T10212] vhci_hcd vhci_hcd.5: disconnect device
[  976.032746][T17160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  976.056107][T17160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  976.087149][T17160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  976.113375][T13873] usb 7-1: Using ep0 maxpacket: 32
[  976.121148][T13873] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[  976.133168][T13873] usb 7-1: config 0 has no interface number 0
[  976.148759][T13873] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  976.173162][T13873] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  976.184675][T13873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.203421][T13873] usb 7-1: Product: syz
[  976.214162][T13873] usb 7-1: Manufacturer: syz
[  976.223186][T13873] usb 7-1: SerialNumber: syz
[  976.234910][T13873] usb 7-1: config 0 descriptor??
[  976.248745][T13873] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  976.259958][T13873] em28xx 7-1:0.132: Video interface 132 found:
[  976.276384][T17160] hsr_slave_0: entered promiscuous mode
[  976.285995][T17160] hsr_slave_1: entered promiscuous mode
[  976.293748][T17160] debugfs: 'hsr0' already exists in 'hsr'
[  976.299652][T17160] Cannot create hsr debugfs directory
[  976.431813][T17211] kvm: user requested TSC rate below hardware speed
[  976.648583][T13873] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[  976.685848][T17216] syzkaller0: entered promiscuous mode
[  976.691686][T17216] syzkaller0: entered allmulticast mode
[  976.867546][T13873] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  976.879139][T13873] em28xx 7-1:0.132: board has no eeprom
[  976.943001][T13873] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  976.951034][T13873] em28xx 7-1:0.132: analog set to bulk mode.
[  976.974530][    T9] em28xx 7-1:0.132: Registering V4L2 extension
[  977.022249][T13873] usb 7-1: USB disconnect, device number 2
[  977.055269][T13873] em28xx 7-1:0.132: Disconnecting em28xx
[  977.103936][T17221] QAT: failed to copy from user cfg_data.
[  977.315639][    T9] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[  977.323203][    T9] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[  977.334753][    T9] em28xx 7-1:0.132: No AC97 audio processor
[  977.344791][T17160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  977.359989][    T9] usb 7-1: Decoder not found
[  977.526642][T17160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.545591][ T5830] Bluetooth: hci5: command tx timeout
[  977.595350][    T9] em28xx 7-1:0.132: failed to create media graph
[  977.601903][    T9] em28xx 7-1:0.132: V4L2 device video103 deregistered
[  977.611030][    T9] em28xx 7-1:0.132: Remote control support is not available for this card.
[  977.620020][T13873] em28xx 7-1:0.132: Closing input extension
[  977.637736][T13873] em28xx 7-1:0.132: Freeing device
[  977.769505][T17160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  977.789002][T17160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.984393][T15893] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[  977.996324][T17160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  978.022941][T17160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  978.162980][T15893] usb 6-1: Using ep0 maxpacket: 8
[  978.186295][T15893] usb 6-1: config 9 has an invalid interface number: 170 but max is 0
[  978.196141][T17237] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3122'.
[  978.213084][T15893] usb 6-1: config 9 has no interface number 0
[  978.226747][T15893] usb 6-1: config 9 interface 170 has no altsetting 0
[  978.247664][T15893] usb 6-1: New USB device found, idVendor=19d2, idProduct=1105, bcdDevice=71.4e
[  978.258820][T17160] team0: Port device netdevsim0 removed
[  978.275712][T17160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  978.278614][T15893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.287055][T17160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  978.331593][T15893] usb 6-1: Product: syz
[  978.342924][T15893] usb 6-1: Manufacturer: syz
[  978.371463][T15893] usb 6-1: SerialNumber: syz
[  978.464743][T17241] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  978.471469][T17241] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  978.536227][T17241] vhci_hcd vhci_hcd.0: Device attached
[  978.583238][   T10] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  978.609711][T13873] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  978.633813][T17227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  978.660037][T17227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  978.670955][T17160] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  978.700776][T17160] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  978.712989][   T24] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  978.733563][T17160] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  978.748453][T17160] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  978.750268][T15893] option 6-1:9.170: GSM modem (1-port) converter detected
[  978.774196][   T24] usb 39-1: new full-speed USB device number 13 using vhci_hcd
[  978.783058][T13873] usb 7-1: Using ep0 maxpacket: 32
[  978.806540][T13873] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  978.815129][T15893] usb 6-1: USB disconnect, device number 123
[  978.823633][T13873] usb 7-1: config 0 has no interface number 0
[  978.845281][T15893] option 6-1:9.170: device disconnected
[  978.849690][T13873] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  978.861813][  T795] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  978.870974][T13873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.893784][T13873] usb 7-1: Product: syz
[  978.903376][T13873] usb 7-1: Manufacturer: syz
[  978.926207][T13873] usb 7-1: SerialNumber: syz
[  978.957505][T13873] usb 7-1: config 0 descriptor??
[  978.975988][T13873] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  978.997992][T13873] usb 7-1: selecting invalid altsetting 1
[  979.014203][T13873] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  979.022237][T17160] 8021q: adding VLAN 0 to HW filter on device bond0
[  979.036931][T13873] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  979.050959][  T795] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  979.064550][T13873] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  979.074972][  T795] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  979.094758][  T795] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  979.096081][T13873] usb 7-1: media controller created
[  979.115207][T17160] 8021q: adding VLAN 0 to HW filter on device team0
[  979.134816][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  979.142004][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  979.151386][  T795] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  979.180028][  T795] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  979.208725][  T795] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  979.217851][T13873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  979.249887][  T795] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  979.265980][  T795] usb 2-1: Product: syz
[  979.276551][  T795] usb 2-1: Manufacturer: syz
[  979.296745][T10223] bridge0: port 2(bridge_slave_1) entered blocking state
[  979.303962][T10223] bridge0: port 2(bridge_slave_1) entered forwarding state
[  979.326737][  T795] cdc_wdm 2-1:1.0: skipping garbage
[  979.334853][  T795] cdc_wdm 2-1:1.0: skipping garbage
[  979.352118][  T795] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  979.362940][  T795] cdc_wdm 2-1:1.0: Unknown control protocol
[  979.513680][T13873] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  979.525263][T13873] zl10353_read_register: readreg error (reg=127, ret==-71)
[  979.541979][T13873] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  979.553566][ T5830] Bluetooth: hci5: command tx timeout
[  979.564249][T17248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  979.576467][T17248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  979.595256][  T795] usb 2-1: USB disconnect, device number 126
[  979.621857][T17160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  979.675617][T13873] usb 7-1: USB disconnect, device number 3
[  979.777975][T17160] veth0_vlan: entered promiscuous mode
[  979.791584][T17160] veth1_vlan: entered promiscuous mode
[  979.844310][T17160] veth0_macvtap: entered promiscuous mode
[  979.856315][T17160] veth1_macvtap: entered promiscuous mode
[  979.885638][T17160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  979.908707][T17160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  979.929885][T10223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  979.949362][T10223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  979.966297][T10223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  979.985883][T10223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  980.117022][T17259] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  980.135978][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  980.166326][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  980.227667][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  980.244258][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  980.567490][T17267] syzkaller0: entered promiscuous mode
[  980.584219][T17267] syzkaller0: entered allmulticast mode
[  980.603025][   T10] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  980.624095][T17274] batman_adv: batadv0: Adding interface: dummy0
[  980.654848][T17274] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  980.682154][T17274] batman_adv: batadv0: Interface activated: dummy0
[  980.762619][T17277] batadv0: mtu less than device minimum
[  980.773146][   T10] usb 2-1: Using ep0 maxpacket: 32
[  980.779817][T17277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  980.791874][T17277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  980.803707][T17277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  980.815400][T17277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  980.827269][T17277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  980.839197][T17277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  980.850884][T17277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  980.862773][T17277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  980.874534][T17277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  980.928962][   T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  980.937694][   T10] usb 2-1: config 0 has no interface number 0
[  980.953270][   T10] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  980.968321][   T10] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  980.978515][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.996795][   T10] usb 2-1: Product: syz
[  981.001247][   T10] usb 2-1: Manufacturer: syz
[  981.006048][   T10] usb 2-1: SerialNumber: syz
[  981.038964][   T10] usb 2-1: config 0 descriptor??
[  981.067098][   T10] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  981.090607][   T10] em28xx 2-1:0.132: Video interface 132 found:
[  981.195273][T17244] vhci_hcd: connection reset by peer
[  981.235871][T10223] vhci_hcd vhci_hcd.3: stop threads
[  981.241159][T10223] vhci_hcd vhci_hcd.3: release socket
[  981.284771][T10223] vhci_hcd vhci_hcd.3: disconnect device
[  981.502230][   T10] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  981.593704][T15893] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[  981.651092][ T5830] Bluetooth: hci5: command tx timeout
[  981.724478][   T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  981.741396][   T10] em28xx 2-1:0.132: board has no eeprom
[  981.757243][T15893] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  981.766705][T15893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.782769][T15893] usb 6-1: Product: syz
[  981.787285][T15893] usb 6-1: Manufacturer: syz
[  981.791996][T15893] usb 6-1: SerialNumber: syz
[  981.854787][   T10] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  981.863504][   T10] em28xx 2-1:0.132: analog set to bulk mode.
[  981.883403][T13873] em28xx 2-1:0.132: Registering V4L2 extension
[  982.019263][   T10] usb 2-1: USB disconnect, device number 127
[  982.072259][   T10] em28xx 2-1:0.132: Disconnecting em28xx
[  982.351810][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  982.408467][T15893] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  982.514463][T13873] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  982.523116][    T9] usb 1-1: Using ep0 maxpacket: 32
[  982.539650][T13873] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  982.556871][    T9] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  982.568929][T14485] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  982.582289][T14485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  982.593829][T14485] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  982.624819][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.633520][T13873] em28xx 2-1:0.132: No AC97 audio processor
[  982.641229][T13873] usb 2-1: Decoder not found
[  982.648626][T14485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  982.658159][    T9] usb 1-1: config 0 descriptor??
[  982.666216][T13873] em28xx 2-1:0.132: failed to create media graph
[  982.672733][T14485] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  982.682912][T13873] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  982.694912][T13873] em28xx 2-1:0.132: Remote control support is not available for this card.
[  982.704030][   T10] em28xx 2-1:0.132: Closing input extension
[  982.713585][    T9] gspca_main: sunplus-2.14.0 probing 041e:400b
[  982.730350][   T10] em28xx 2-1:0.132: Freeing device
[  983.552134][    T9] gspca_sunplus: reg_w_riv err -71
[  983.558541][    T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  983.584483][    T9] usb 1-1: USB disconnect, device number 19
[  983.874279][   T24] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  984.642967][  T795] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  984.808185][  T795] usb 1-1: Using ep0 maxpacket: 32
[  984.836841][T14485] Bluetooth: hci4: command tx timeout
[  984.870399][  T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  984.892280][  T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  984.902489][  T795] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  984.926774][  T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  984.960366][  T795] usb 1-1: config 0 descriptor??
[  984.973514][T17280] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3135'.
[  984.992677][T15893] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  985.003854][T15893] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  985.016445][T15893] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  985.061630][T15893] usb 6-1: USB disconnect, device number 124
[  985.497230][  T795] savu 0003:1E7D:2D5A.002F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  985.644796][T17311] FAULT_INJECTION: forcing a failure.
[  985.644796][T17311] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  985.665631][T17311] CPU: 1 UID: 0 PID: 17311 Comm: syz.5.3143 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  985.665667][T17311] Tainted: [L]=SOFTLOCKUP
[  985.665675][T17311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  985.665689][T17311] Call Trace:
[  985.665698][T17311]  <TASK>
[  985.665707][T17311]  dump_stack_lvl+0xe8/0x150
[  985.665744][T17311]  should_fail_ex+0x412/0x560
[  985.665784][T17311]  _copy_to_iter+0x404/0x17d0
[  985.665812][T17311]  ? seq_read_iter+0xb84/0xe10
[  985.665867][T17311]  ? __pfx__copy_to_iter+0x10/0x10
[  985.665893][T17311]  ? net_generic+0x1e/0x240
[  985.665929][T17311]  ? net_generic+0x1f4/0x240
[  985.665962][T17311]  ? xt_table_seq_next+0xe3/0x120
[  985.665988][T17311]  seq_read_iter+0xbf5/0xe10
[  985.666032][T17311]  seq_read+0x367/0x480
[  985.666065][T17311]  ? __pfx_seq_read+0x10/0x10
[  985.666098][T17311]  ? apparmor_file_permission+0x1f4/0x300
[  985.666140][T17311]  ? __pfx_seq_read+0x10/0x10
[  985.666161][T17311]  proc_reg_read+0x1e9/0x2e0
[  985.666194][T17311]  ? __pfx_proc_reg_read+0x10/0x10
[  985.666228][T17311]  vfs_read+0x20c/0xa70
[  985.666259][T17311]  ? __pfx_vfs_read+0x10/0x10
[  985.666283][T17311]  ? __fget_files+0x2a/0x420
[  985.666316][T17311]  ? __fget_files+0x2a/0x420
[  985.666345][T17311]  ? __fget_files+0x3a0/0x420
[  985.666374][T17311]  ? __fget_files+0x2a/0x420
[  985.666414][T17311]  ksys_pread64+0x126/0x1c0
[  985.666439][T17311]  ? __pfx_ksys_pread64+0x10/0x10
[  985.666467][T17311]  ? __ia32_sys_ia32_pread64+0x20/0xd0
[  985.666498][T17311]  __do_fast_syscall_32+0x20d/0x640
[  985.666523][T17311]  ? do_fast_syscall_32+0x33/0x70
[  985.666542][T17311]  ? asm_int80_emulation+0x1a/0x20
[  985.666564][T17311]  ? do_int80_emulation+0x274/0x4d0
[  985.666584][T17311]  ? trace_irq_disable+0x3b/0x150
[  985.666626][T17311]  do_fast_syscall_32+0x33/0x70
[  985.666647][T17311]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  985.666674][T17311] RIP: 0023:0xf7f93f6c
[  985.666693][T17311] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[  985.666713][T17311] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 00000000000000b4
[  985.666735][T17311] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001240
[  985.666751][T17311] RDX: 0000000000019000 RSI: 0000000000000004 RDI: 0000000000000000
[  985.666770][T17311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  985.666783][T17311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  985.666794][T17311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  985.666829][T17311]  </TASK>
[  986.916820][T14485] Bluetooth: hci4: command tx timeout
[  987.184430][   T10] usb 1-1: reset high-speed USB device number 20 using dummy_hcd
[  987.223462][T17327] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3148'.
[  987.397155][T17337] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  987.403747][T17337] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  987.455743][T17337] vhci_hcd vhci_hcd.0: Device attached
[  987.547258][T17331] syzkaller0: entered promiscuous mode
[  987.561129][T17331] syzkaller0: entered allmulticast mode
[  987.593039][  T979] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  987.663266][  T979] usb 43-1: new full-speed USB device number 10 using vhci_hcd
[  987.713632][ T5898] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  987.731055][T17297] chnl_net:caif_netlink_parms(): no params data found
[  987.823998][ T5899] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  987.885376][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  987.899704][T17297] bridge0: port 1(bridge_slave_0) entered blocking state
[  987.908229][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  987.917905][T17297] bridge0: port 1(bridge_slave_0) entered disabled state
[  987.925335][ T5898] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  987.935090][T17297] bridge_slave_0: entered allmulticast mode
[  987.941154][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.951569][T17297] bridge_slave_0: entered promiscuous mode
[  987.962785][ T5898] usb 7-1: config 0 descriptor??
[  987.975350][T17297] bridge0: port 2(bridge_slave_1) entered blocking state
[  987.983428][ T5899] usb 4-1: Using ep0 maxpacket: 32
[  987.995305][ T5899] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  988.006856][ T5898] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  988.017381][T17297] bridge0: port 2(bridge_slave_1) entered disabled state
[  988.025768][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.034815][   T10] usb 1-1: device descriptor read/64, error -71
[  988.041358][ T5898] dvb-usb: bulk message failed: -22 (3/0)
[  988.050694][T17297] bridge_slave_1: entered allmulticast mode
[  988.077553][ T5899] usb 4-1: config 0 descriptor??
[  988.086711][ T5898] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  988.103178][T17297] bridge_slave_1: entered promiscuous mode
[  988.111171][ T5899] gspca_main: sunplus-2.14.0 probing 041e:400b
[  988.125862][ T5898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  988.140916][ T5898] usb 7-1: media controller created
[  988.149171][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  988.185774][ T5898] dvb-usb: bulk message failed: -22 (6/0)
[  988.200439][ T5898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  988.212316][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input92
[  988.266331][ T5898] dvb-usb: schedule remote query interval to 150 msecs.
[  988.293668][   T10] usb 1-1: reset high-speed USB device number 20 using dummy_hcd
[  988.303152][ T5898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  988.334580][   T10] usb 1-1: device reset changed ep0 maxpacket size!
[  988.347744][T17327] dvb-usb: bulk message failed: -22 (2/0)
[  988.350042][T13873] usb 1-1: USB disconnect, device number 20
[  988.424561][T17297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  988.446416][T17297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  988.463821][ T5898] dvb-usb: bulk message failed: -22 (1/0)
[  988.476317][ T5898] dvb-usb: error while querying for an remote control event.
[  988.543036][T13873] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  988.605249][ T5898] usb 7-1: USB disconnect, device number 4
[  988.627082][T17297] team0: Port device team_slave_0 added
[  988.637406][T17297] team0: Port device team_slave_1 added
[  988.670795][ T5898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  988.713207][T13873] usb 1-1: Using ep0 maxpacket: 16
[  988.730027][T13873] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  988.744379][T13873] usb 1-1: config 0 interface 0 has no altsetting 0
[  988.751149][T13873] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  988.761819][T13873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.781798][T13873] usb 1-1: config 0 descriptor??
[  988.953118][ T5899] gspca_sunplus: reg_w_riv err -71
[  988.958477][ T5899] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  988.988195][ T5899] usb 4-1: USB disconnect, device number 18
[  988.994429][T14485] Bluetooth: hci4: command tx timeout
[  989.246808][T13873] nzxt-smart2 0003:1E71:2009.0030: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  989.478033][T17343] ALSA: mixer_oss: invalid OSS volume ''
[  990.268581][T17339] vhci_hcd: connection reset by peer
[  990.303763][T10215] vhci_hcd vhci_hcd.5: stop threads
[  990.309181][T10215] vhci_hcd vhci_hcd.5: release socket
[  990.316962][T10215] vhci_hcd vhci_hcd.5: disconnect device
[  990.423985][T13873] usb 1-1: USB disconnect, device number 21
[  990.593110][    T9] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[  990.742982][    T9] usb 6-1: Using ep0 maxpacket: 16
[  990.751903][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  990.781227][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  990.797225][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  990.806769][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  990.815114][    T9] usb 6-1: Product: syz
[  990.819499][    T9] usb 6-1: Manufacturer: syz
[  990.824286][    T9] usb 6-1: SerialNumber: syz
[  991.051551][    T9] usb 6-1: 0:10 : does not exist
[  991.074300][T14485] Bluetooth: hci4: command tx timeout
[  991.133180][    T9] usb 6-1: USB disconnect, device number 125
[  991.188757][ T7139] udevd[7139]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  992.405153][T17297] batman_adv: batadv0: Adding interface: batadv_slave_0
[  992.412176][T17297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  992.456175][T17297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  992.470492][T17297] batman_adv: batadv0: Adding interface: batadv_slave_1
[  992.533295][T17297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  992.582532][T17297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  992.726827][T17297] hsr_slave_0: entered promiscuous mode
[  992.755042][T17297] hsr_slave_1: entered promiscuous mode
[  992.823906][  T979] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  992.831087][T17297] debugfs: 'hsr0' already exists in 'hsr'
[  992.847513][T17297] Cannot create hsr debugfs directory
[  992.943427][T17388] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  993.208080][T17394] input: syz1 as /devices/virtual/input/input94
[  993.242956][  T795] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  993.317542][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  993.325849][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  993.425494][  T795] usb 4-1: unable to get BOS descriptor or descriptor too short
[  993.525770][  T795] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  993.773068][  T795] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  993.837595][  T795] usb 4-1: config 1 interface 0 has no altsetting 1
[  993.857080][  T795] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  993.877723][  T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  993.904538][  T795] usb 4-1: Product: syz
[  993.917655][  T795] usb 4-1: Manufacturer: syz
[  993.982984][  T795] usb 4-1: SerialNumber: syz
[  994.035461][  T795] smsusb:smsusb_probe: board id=8, interface number 0
[  994.055091][T17401] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3165'.
[  994.073677][T17402] ������: renamed from wg2 (while UP)
[  994.211003][T17297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.396542][T17297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.569103][T17297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.390474][T17297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  996.097011][T17297] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  996.138765][T17297] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  996.195361][T17297] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  996.218434][  T795] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[  996.242569][T17297] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  996.261576][  T795] smsusb 4-1:1.0: probe with driver smsusb failed with error -71
[  996.325997][  T795] usb 4-1: USB disconnect, device number 19
[  996.653825][T17297] 8021q: adding VLAN 0 to HW filter on device bond0
[  996.719963][T17297] 8021q: adding VLAN 0 to HW filter on device team0
[  996.748901][T10221] bridge0: port 1(bridge_slave_0) entered blocking state
[  996.756100][T10221] bridge0: port 1(bridge_slave_0) entered forwarding state
[  996.837047][T10221] bridge0: port 2(bridge_slave_1) entered blocking state
[  996.844318][T10221] bridge0: port 2(bridge_slave_1) entered forwarding state
[  997.162420][T17297] 8021q: adding VLAN 0 to HW filter on device batadv0
[  997.290858][T17297] veth0_vlan: entered promiscuous mode
[  997.325607][T17297] veth1_vlan: entered promiscuous mode
[  997.420837][T17297] veth0_macvtap: entered promiscuous mode
[  997.436378][T17297] veth1_macvtap: entered promiscuous mode
[  997.469699][T17297] batman_adv: batadv0: Interface activated: batadv_slave_0
[  997.490847][T17432] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  997.537408][T17297] batman_adv: batadv0: Interface activated: batadv_slave_1
[  997.562530][T17320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  997.587847][T17320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  997.609713][T17320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  997.620704][T17320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  997.728254][T17320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  997.740045][T17320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  997.787881][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  997.812713][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  997.825594][ T5899] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  997.997415][ T5899] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  998.367324][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  998.608617][ T5899] usb 7-1: Product: syz
[  998.626443][ T5899] usb 7-1: Manufacturer: syz
[  998.783066][ T5899] usb 7-1: SerialNumber: syz
[  998.831831][ T5899] usb 7-1: config 0 descriptor??
[  999.213390][ T5899] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  999.456966][T17458] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.464835][T17458] bridge0: port 1(bridge_slave_0) entered disabled state
[  999.911371][T17463] netlink: 'syz.0.3183': attribute type 3 has an invalid length.
[ 1000.707689][   T30] audit: type=1326 audit(1771956603.794:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.6.3175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000
[ 1000.750504][   T30] audit: type=1326 audit(1771956603.794:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.6.3175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000
[ 1000.931214][   T30] audit: type=1326 audit(1771956603.794:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.6.3175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000
[ 1000.954278][   T30] audit: type=1326 audit(1771956603.814:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.6.3175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf704ef6c code=0x7ffc0000
[ 1000.977629][   T30] audit: type=1326 audit(1771956603.824:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.6.3175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000
[ 1001.026469][T17480] macvlan0: entered promiscuous mode
[ 1001.033864][T17480] netlink: 'syz.3.3188': attribute type 2 has an invalid length.
[ 1001.041805][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3188'.
[ 1001.073834][   T30] audit: type=1326 audit(1771956603.854:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.6.3175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000
[ 1001.097465][   T30] audit: type=1326 audit(1771956603.874:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.6.3175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000
[ 1001.121202][   T30] audit: type=1326 audit(1771956603.874:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.6.3175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000
[ 1001.144030][   T30] audit: type=1326 audit(1771956603.874:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.6.3175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704ef6c code=0x7ffc0000
[ 1001.168073][   T30] audit: type=1326 audit(1771956603.874:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.6.3175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704ef6c code=0x7ffc0000
[ 1001.834456][ T5899] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1001.869632][ T5899] usb 7-1: USB disconnect, device number 5
[ 1002.159464][T17489] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3192'.
[ 1002.593299][  T795] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1002.874245][  T795] usb 1-1: Using ep0 maxpacket: 32
[ 1002.889556][  T795] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1002.898267][  T795] usb 1-1: config 0 has no interface number 0
[ 1002.909906][  T795] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1002.940834][  T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.984499][  T795] usb 1-1: Product: syz
[ 1002.995930][  T795] usb 1-1: Manufacturer: syz
[ 1003.010427][  T795] usb 1-1: SerialNumber: syz
[ 1003.031998][  T795] usb 1-1: config 0 descriptor??
[ 1003.054665][  T795] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1003.082066][  T795] usb 1-1: selecting invalid altsetting 1
[ 1003.094952][  T795] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1003.121989][  T795] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1003.148331][  T795] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1003.171452][  T795] usb 1-1: media controller created
[ 1003.221685][  T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1003.494367][T17512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3200'.
[ 1003.562627][  T795] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1003.575321][  T795] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1003.603520][  T795] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1003.643137][T15893] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1003.726417][  T795] usb 1-1: USB disconnect, device number 22
[ 1003.759829][T17515] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3201'.
[ 1003.769411][T17515] FAULT_INJECTION: forcing a failure.
[ 1003.769411][T17515] name failslab, interval 1, probability 0, space 0, times 0
[ 1003.785636][T17515] CPU: 1 UID: 0 PID: 17515 Comm: syz.5.3201 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1003.785672][T17515] Tainted: [L]=SOFTLOCKUP
[ 1003.785681][T17515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1003.785695][T17515] Call Trace:
[ 1003.785705][T17515]  <TASK>
[ 1003.785714][T17515]  dump_stack_lvl+0xe8/0x150
[ 1003.785751][T17515]  should_fail_ex+0x412/0x560
[ 1003.785783][T17515]  should_failslab+0xa8/0x100
[ 1003.785810][T17515]  ? skb_clone+0x212/0x3a0
[ 1003.785841][T17515]  kmem_cache_alloc_noprof+0x87/0x650
[ 1003.785883][T17515]  skb_clone+0x212/0x3a0
[ 1003.785917][T17515]  __netlink_deliver_tap+0x404/0x850
[ 1003.785955][T17515]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1003.785982][T17515]  netlink_deliver_tap+0x19c/0x1b0
[ 1003.786010][T17515]  netlink_sendskb+0x68/0x140
[ 1003.786034][T17515]  netlink_unicast+0x3a3/0x9b0
[ 1003.786064][T17515]  ? __pfx_netlink_unicast+0x10/0x10
[ 1003.786096][T17515]  netlink_rcv_skb+0x2b6/0x4b0
[ 1003.786121][T17515]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1003.786151][T17515]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1003.786198][T17515]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1003.786230][T17515]  netlink_unicast+0x80f/0x9b0
[ 1003.786259][T17515]  ? __pfx_netlink_unicast+0x10/0x10
[ 1003.786284][T17515]  ? netlink_sendmsg+0x650/0xb40
[ 1003.786308][T17515]  ? skb_put+0x11b/0x210
[ 1003.786338][T17515]  netlink_sendmsg+0x813/0xb40
[ 1003.786374][T17515]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1003.786404][T17515]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1003.786431][T17515]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1003.786457][T17515]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1003.786482][T17515]  ____sys_sendmsg+0xa68/0xad0
[ 1003.786522][T17515]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1003.786558][T17515]  ? kstrtoull+0x12f/0x1d0
[ 1003.786590][T17515]  ___sys_sendmsg+0x2a5/0x360
[ 1003.786626][T17515]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1003.786659][T17515]  ? get_pid_task+0x20/0x1f0
[ 1003.786678][T17515]  ? get_pid_task+0x20/0x1f0
[ 1003.786692][T17515]  ? get_pid_task+0x20/0x1f0
[ 1003.786729][T17515]  ? __fget_files+0x2a/0x420
[ 1003.786754][T17515]  ? __fget_files+0x3a0/0x420
[ 1003.786787][T17515]  __sys_sendmsg+0x183/0x260
[ 1003.786814][T17515]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1003.786858][T17515]  __do_fast_syscall_32+0x20d/0x640
[ 1003.786877][T17515]  ? do_fast_syscall_32+0x33/0x70
[ 1003.786893][T17515]  ? asm_int80_emulation+0x1a/0x20
[ 1003.786910][T17515]  ? do_int80_emulation+0x274/0x4d0
[ 1003.786927][T17515]  ? trace_irq_disable+0x3b/0x150
[ 1003.786956][T17515]  do_fast_syscall_32+0x33/0x70
[ 1003.786973][T17515]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1003.786996][T17515] RIP: 0023:0xf7f93f6c
[ 1003.787013][T17515] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 1003.787028][T17515] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1003.787048][T17515] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[ 1003.787061][T17515] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1003.787072][T17515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1003.787082][T17515] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1003.787093][T17515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1003.787117][T17515]  </TASK>
[ 1004.165219][T15893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1004.175388][T15893] usb 7-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[ 1004.185952][T15893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1004.200207][T15893] usb 7-1: config 0 descriptor??
[ 1004.294468][T17521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1004.625691][ T5899] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1004.822162][T15893] waltop 0003:172F:0501.0031: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.6-1/input0
[ 1004.845147][ T5899] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1004.856531][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1004.869540][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1004.933080][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1005.072694][ T5899] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1005.083584][ T5899] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1005.102762][ T5899] usb 4-1: Manufacturer: syz
[ 1005.125263][ T5899] usb 4-1: config 0 descriptor??
[ 1005.187221][T15893] usb 7-1: USB disconnect, device number 6
[ 1005.578453][ T5899] appleir 0003:05AC:8243.0032: unknown main item tag 0x0
[ 1005.624727][ T5899] appleir 0003:05AC:8243.0032: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 1005.852339][T17521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1005.917023][T17521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1005.958601][  T795] usb 4-1: USB disconnect, device number 20
[ 1006.152044][T17548] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1006.307957][T17554] macvlan0: entered promiscuous mode
[ 1006.316746][T17554] netlink: 'syz.1.3215': attribute type 2 has an invalid length.
[ 1006.324771][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3215'.
[ 1006.464462][T17560] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3216'.
[ 1006.886141][  T795] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1007.063117][  T795] usb 7-1: Using ep0 maxpacket: 32
[ 1007.076690][  T795] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1007.087933][  T795] usb 7-1: config 0 has no interface number 0
[ 1007.301093][  T795] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1007.310374][  T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.421867][  T795] usb 7-1: Product: syz
[ 1007.445821][  T795] usb 7-1: Manufacturer: syz
[ 1007.464220][  T795] usb 7-1: SerialNumber: syz
[ 1007.499978][  T795] usb 7-1: config 0 descriptor??
[ 1007.530785][  T795] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1007.552080][  T795] usb 7-1: selecting invalid altsetting 1
[ 1007.570503][  T795] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1007.635602][  T795] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1007.650718][T17576] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3222'.
[ 1007.663443][  T795] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1007.673020][ T5898] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1007.682088][  T795] usb 7-1: media controller created
[ 1007.714834][  T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1007.848438][ T5898] usb 1-1: Using ep0 maxpacket: 8
[ 1007.883827][ T5898] usb 1-1: config 9 has an invalid interface number: 170 but max is 0
[ 1007.912080][ T5898] usb 1-1: config 9 has no interface number 0
[ 1007.919384][ T5898] usb 1-1: config 9 interface 170 has no altsetting 0
[ 1007.941265][ T5898] usb 1-1: New USB device found, idVendor=19d2, idProduct=1105, bcdDevice=71.4e
[ 1007.958571][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.989032][ T5898] usb 1-1: Product: syz
[ 1007.995910][ T5898] usb 1-1: Manufacturer: syz
[ 1008.002695][  T795] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1008.024511][ T5898] usb 1-1: SerialNumber: syz
[ 1008.031403][  T795] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1008.044929][T17583] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1008.073076][  T795] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1008.186979][  T795] usb 7-1: USB disconnect, device number 7
[ 1008.300659][T17574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1008.317081][T17574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1008.350586][ T5898] option 1-1:9.170: GSM modem (1-port) converter detected
[ 1008.387274][ T5898] usb 1-1: USB disconnect, device number 23
[ 1008.420130][ T5898] option 1-1:9.170: device disconnected
[ 1008.624126][T17592] netlink: 'syz.3.3228': attribute type 2 has an invalid length.
[ 1008.632092][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'.
[ 1009.004171][T17597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.344271][  T795] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 1009.435069][T17604] wireguard0: entered allmulticast mode
[ 1009.526445][  T795] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1009.537916][  T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1009.550784][  T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1009.562922][  T795] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1009.578168][  T795] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1009.588572][  T795] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1009.597618][  T795] usb 4-1: Manufacturer: syz
[ 1009.605674][  T795] usb 4-1: config 0 descriptor??
[ 1009.676338][T17609] netlink: 'syz.0.3235': attribute type 5 has an invalid length.
[ 1009.762951][ T5898] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1009.858853][T17611] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1009.923127][ T5898] usb 7-1: Using ep0 maxpacket: 16
[ 1009.934895][ T5898] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1009.948953][ T5898] usb 7-1: config 0 has no interface number 0
[ 1009.983099][ T5898] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1009.994266][ T5898] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1010.023007][ T5898] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1010.032165][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.042167][  T795] appleir 0003:05AC:8243.0033: unknown main item tag 0x0
[ 1010.063912][  T795] appleir 0003:05AC:8243.0033: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 1010.076167][ T5898] usb 7-1: config 0 descriptor??
[ 1010.200551][T17619] netlink: 'syz.5.3238': attribute type 25 has an invalid length.
[ 1010.242583][T17619] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3238'.
[ 1010.316710][T17597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1010.362926][  T795] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1010.381051][T17621] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3239'.
[ 1010.403171][T17597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1010.439179][T15895] usb 4-1: USB disconnect, device number 21
[ 1010.502945][  T795] usb 1-1: device descriptor read/64, error -71
[ 1010.527013][ T5898] usbhid 7-1:0.1: can't add hid device: -71
[ 1010.533275][ T5898] usbhid 7-1:0.1: probe with driver usbhid failed with error -71
[ 1010.571519][ T5898] usb 7-1: USB disconnect, device number 8
[ 1010.671662][T17626] netlink: 'syz.5.3241': attribute type 10 has an invalid length.
[ 1010.681412][T17626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3241'.
[ 1010.692609][T17626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3241'.
[ 1010.733081][T15893] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1010.783050][  T795] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1010.882958][T15893] usb 2-1: Using ep0 maxpacket: 32
[ 1010.890026][T15893] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1010.899027][T15893] usb 2-1: config 0 has no interface number 0
[ 1010.908970][T15893] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1010.918565][T15893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1010.929795][  T795] usb 1-1: device descriptor read/64, error -71
[ 1010.936405][T15893] usb 2-1: Product: syz
[ 1010.941733][T15893] usb 2-1: Manufacturer: syz
[ 1010.946646][T15893] usb 2-1: SerialNumber: syz
[ 1010.962198][T15893] usb 2-1: config 0 descriptor??
[ 1010.971048][T15893] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1010.985490][T15893] usb 2-1: selecting invalid altsetting 1
[ 1010.991457][T15893] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1011.024453][T15893] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1011.050270][T15893] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1011.059188][  T795] usb usb1-port1: attempt power cycle
[ 1011.065607][T15893] usb 2-1: media controller created
[ 1011.091030][T15893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1011.383163][ T5898] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1011.413145][  T795] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 1011.434236][  T795] usb 1-1: device descriptor read/8, error -71
[ 1011.514169][T17643] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[ 1011.520775][T17643] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1011.528586][T17643] vhci_hcd vhci_hcd.0: Device attached
[ 1011.535698][ T5898] usb 4-1: Using ep0 maxpacket: 8
[ 1011.546444][ T5898] usb 4-1: config 9 has an invalid interface number: 170 but max is 0
[ 1011.557930][ T5898] usb 4-1: config 9 has no interface number 0
[ 1011.565782][ T5898] usb 4-1: config 9 interface 170 has no altsetting 0
[ 1011.578304][ T5898] usb 4-1: New USB device found, idVendor=19d2, idProduct=1105, bcdDevice=71.4e
[ 1011.588248][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.596864][ T5898] usb 4-1: Product: syz
[ 1011.601614][ T5898] usb 4-1: Manufacturer: syz
[ 1011.608762][ T5898] usb 4-1: SerialNumber: syz
[ 1011.684626][  T795] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1011.713386][ T5899] vhci_hcd vhci_hcd.6: vhci_device speed not set
[ 1011.735544][  T795] usb 1-1: device descriptor read/8, error -71
[ 1011.793025][ T5899] usb 45-1: new full-speed USB device number 10 using vhci_hcd
[ 1011.819202][T17647] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1011.836433][T17637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1011.854394][  T795] usb usb1-port1: unable to enumerate USB device
[ 1011.867372][T17637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1011.907729][ T5898] option 4-1:9.170: GSM modem (1-port) converter detected
[ 1011.961659][ T5898] usb 4-1: USB disconnect, device number 22
[ 1011.988589][ T5898] option 4-1:9.170: device disconnected
[ 1012.277208][T17621] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1012.291490][T15893] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1012.409435][T15893] usb 2-1: USB disconnect, device number 2
[ 1013.148199][T17658] netlink: 'syz.1.3251': attribute type 2 has an invalid length.
[ 1013.169791][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3251'.
[ 1013.371887][T17666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1013.442931][  T795] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1013.582941][  T795] usb 4-1: device descriptor read/64, error -71
[ 1013.653137][T15893] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1013.713015][T15891] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1013.747420][T17677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1013.755367][T17677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1013.833096][  T795] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1013.841146][T15893] usb 1-1: Using ep0 maxpacket: 16
[ 1013.848685][T15893] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1013.857200][T15893] usb 1-1: config 0 has no interface number 0
[ 1013.863615][T15893] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1013.883118][T15893] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1013.960372][T15893] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1013.970045][T15891] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1013.981621][T15891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1014.000492][T15893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1014.009089][T15891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1014.019079][  T795] usb 4-1: device descriptor read/64, error -71
[ 1014.027086][T15891] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1014.041199][T15893] usb 1-1: config 0 descriptor??
[ 1014.064333][T15891] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1014.073689][T15891] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1014.081969][T15891] usb 6-1: Manufacturer: syz
[ 1014.128514][T15891] usb 6-1: config 0 descriptor??
[ 1014.134106][  T795] usb usb4-port1: attempt power cycle
[ 1014.377156][T17644] vhci_hcd: connection reset by peer
[ 1014.404126][T10221] vhci_hcd vhci_hcd.6: stop threads
[ 1014.409656][T10221] vhci_hcd vhci_hcd.6: release socket
[ 1014.437794][T10221] vhci_hcd vhci_hcd.6: disconnect device
[ 1014.513321][  T795] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1014.639252][T15893] usbhid 1-1:0.1: can't add hid device: -71
[ 1014.656483][T15891] appleir 0003:05AC:8243.0034: unknown main item tag 0x0
[ 1014.723007][  T795] usb 4-1: device descriptor read/8, error -71
[ 1014.758101][T15893] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[ 1014.785951][T17685] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3261'.
[ 1014.798214][T15893] usb 1-1: USB disconnect, device number 28
[ 1014.842154][T15891] appleir 0003:05AC:8243.0034: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 1015.033291][  T795] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1015.047276][T17687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1015.102979][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1015.107519][  T795] usb 4-1: device descriptor read/8, error -71
[ 1015.239034][T17666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1015.251801][T15893] usb 6-1: USB disconnect, device number 126
[ 1015.269761][  T795] usb usb4-port1: unable to enumerate USB device
[ 1015.313000][    T9] usb 7-1: Using ep0 maxpacket: 32
[ 1015.324933][    T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1015.363563][    T9] usb 7-1: config 0 has no interface number 0
[ 1015.387501][    T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1015.399885][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1015.412916][    T9] usb 7-1: Product: syz
[ 1015.417159][    T9] usb 7-1: Manufacturer: syz
[ 1015.441433][    T9] usb 7-1: SerialNumber: syz
[ 1015.462941][    T9] usb 7-1: config 0 descriptor??
[ 1015.494772][    T9] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1015.528616][    T9] usb 7-1: selecting invalid altsetting 1
[ 1015.542947][    T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1015.555095][    T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1015.565844][    T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1015.579014][    T9] usb 7-1: media controller created
[ 1015.656276][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1015.960427][    T9] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1015.968729][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1015.983166][    T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1015.994270][T17696] macvlan0: entered promiscuous mode
[ 1016.012040][T17696] netlink: 'syz.0.3265': attribute type 2 has an invalid length.
[ 1016.039689][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3265'.
[ 1016.098008][    T9] usb 7-1: USB disconnect, device number 9
[ 1016.863018][  T979] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1016.913621][T17725] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 1016.920220][T17725] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1016.928460][ T5899] vhci_hcd vhci_hcd.6: vhci_device speed not set
[ 1016.945584][T17725] vhci_hcd vhci_hcd.0: Device attached
[ 1017.034656][  T979] usb 2-1: Using ep0 maxpacket: 16
[ 1017.056377][  T979] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1017.070421][  T979] usb 2-1: config 0 has no interface number 0
[ 1017.096725][  T979] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1017.117732][  T979] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1017.123529][T15893] vhci_hcd vhci_hcd.3: vhci_device speed not set
[ 1017.133382][  T979] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1017.563271][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1017.583722][  T979] usb 2-1: config 0 descriptor??
[ 1017.672996][T15893] usb 39-1: new full-speed USB device number 14 using vhci_hcd
[ 1018.013615][  T979] usbhid 2-1:0.1: can't add hid device: -71
[ 1018.019724][  T979] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[ 1018.065219][  T979] usb 2-1: USB disconnect, device number 3
[ 1018.183100][T15891] usb 1-1: new low-speed USB device number 29 using dummy_hcd
[ 1018.343055][T15891] usb 1-1: device descriptor read/64, error -71
[ 1018.605696][T17736] can: request_module (can-proto-0) failed.
[ 1018.634574][T15891] usb 1-1: new low-speed USB device number 30 using dummy_hcd
[ 1018.773299][T15891] usb 1-1: device descriptor read/64, error -71
[ 1018.841474][T17742] xt_TCPMSS: Only works on TCP SYN packets
[ 1018.893632][T15891] usb usb1-port1: attempt power cycle
[ 1019.132954][    T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1019.243266][T15891] usb 1-1: new low-speed USB device number 31 using dummy_hcd
[ 1019.273798][T15891] usb 1-1: device descriptor read/8, error -71
[ 1019.343315][    T9] usb 7-1: Using ep0 maxpacket: 8
[ 1019.377986][    T9] usb 7-1: config 6 has an invalid interface number: 19 but max is 1
[ 1019.392485][    T9] usb 7-1: config 6 has an invalid interface number: 80 but max is 1
[ 1019.408855][    T9] usb 7-1: config 6 has no interface number 0
[ 1019.420740][    T9] usb 7-1: config 6 has no interface number 1
[ 1019.431909][    T9] usb 7-1: config 6 interface 19 altsetting 21 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[ 1019.451973][    T9] usb 7-1: config 6 interface 19 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 1019.478904][    T9] usb 7-1: config 6 interface 19 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 1019.500269][    T9] usb 7-1: config 6 interface 19 altsetting 21 endpoint 0xB has an invalid bInterval 230, changing to 11
[ 1019.512628][  T979] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 1019.525198][T15891] usb 1-1: new low-speed USB device number 32 using dummy_hcd
[ 1019.537795][    T9] usb 7-1: config 6 interface 80 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[ 1019.557078][T15891] usb 1-1: device descriptor read/8, error -71
[ 1019.567905][    T9] usb 7-1: config 6 interface 80 altsetting 5 has an endpoint descriptor with address 0x1A, changing to 0xA
[ 1019.597554][    T9] usb 7-1: config 6 interface 80 altsetting 5 endpoint 0xA has invalid maxpacket 503, setting to 64
[ 1019.603258][T15895] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1019.621641][    T9] usb 7-1: config 6 interface 80 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[ 1019.660558][    T9] usb 7-1: config 6 interface 80 altsetting 5 endpoint 0xE has invalid maxpacket 560, setting to 64
[ 1019.676661][T15891] usb usb1-port1: unable to enumerate USB device
[ 1019.692021][    T9] usb 7-1: config 6 interface 80 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 1023
[ 1019.709440][T17726] vhci_hcd: connection reset by peer
[ 1019.720826][  T979] usb 6-1: Using ep0 maxpacket: 32
[ 1019.728786][T10221] vhci_hcd vhci_hcd.3: stop threads
[ 1019.737193][    T9] usb 7-1: config 6 interface 80 altsetting 5 has an endpoint descriptor with address 0x16, changing to 0x6
[ 1019.738416][T10221] vhci_hcd vhci_hcd.3: release socket
[ 1019.763722][T10221] vhci_hcd vhci_hcd.3: disconnect device
[ 1019.773531][  T979] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 1019.786145][    T9] usb 7-1: config 6 interface 80 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[ 1019.794188][T15895] usb 2-1: Using ep0 maxpacket: 32
[ 1019.809287][  T979] usb 6-1: config 0 has no interface number 0
[ 1019.819121][T15895] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 1019.836052][T15895] usb 2-1: config 0 has no interface number 0
[ 1019.836420][  T979] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1019.853541][T15895] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1019.863520][    T9] usb 7-1: config 6 interface 19 has no altsetting 0
[ 1019.863569][    T9] usb 7-1: config 6 interface 80 has no altsetting 0
[ 1019.879728][    T9] usb 7-1: New USB device found, idVendor=2100, idProduct=9e55, bcdDevice=e1.a8
[ 1019.886789][T15895] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1019.898992][T15895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.900601][  T979] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1019.909007][T15895] usb 2-1: Product: syz
[ 1019.922518][T15895] usb 2-1: Manufacturer: syz
[ 1019.922702][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.948223][T15895] usb 2-1: SerialNumber: syz
[ 1019.962686][    T9] usb 7-1: Product: Џ
[ 1019.968259][T15895] usb 2-1: config 0 descriptor??
[ 1019.973027][  T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.982225][  T979] usb 6-1: Product: syz
[ 1019.990745][T15895] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1020.001192][    T9] usb 7-1: Manufacturer: ᠁
[ 1020.006122][T15895] em28xx 2-1:0.132: Video interface 132 found:
[ 1020.016851][    T9] usb 7-1: SerialNumber: 㕲莌揍ǖ嫚놺꧞㣉뾃饥场훐郰ꒁ剫
[ 1020.036020][  T979] usb 6-1: Manufacturer: syz
[ 1020.052708][  T979] usb 6-1: SerialNumber: syz
[ 1020.097166][  T979] usb 6-1: config 0 descriptor??
[ 1020.115757][  T979] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1020.153805][  T979] em28xx 6-1:0.132: Video interface 132 found:
[ 1020.389507][T15895] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[ 1020.531726][  T979] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[ 1020.542964][  T795] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1020.606915][T17750] FAULT_INJECTION: forcing a failure.
[ 1020.606915][T17750] name failslab, interval 1, probability 0, space 0, times 0
[ 1020.624685][T17750] CPU: 1 UID: 0 PID: 17750 Comm: syz.1.3282 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1020.624722][T17750] Tainted: [L]=SOFTLOCKUP
[ 1020.624731][T17750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1020.624745][T17750] Call Trace:
[ 1020.624754][T17750]  <TASK>
[ 1020.624764][T17750]  dump_stack_lvl+0xe8/0x150
[ 1020.624801][T17750]  should_fail_ex+0x412/0x560
[ 1020.624832][T17750]  should_failslab+0xa8/0x100
[ 1020.624861][T17750]  __kmalloc_noprof+0xe8/0x760
[ 1020.624884][T17750]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1020.624921][T17750]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1020.624960][T17750]  ? tomoyo_path_number_perm+0x219/0x630
[ 1020.624983][T17750]  tomoyo_path_number_perm+0x246/0x630
[ 1020.625009][T17750]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1020.625036][T17750]  ? __lock_acquire+0x6b5/0x2cf0
[ 1020.625099][T17750]  ? __fget_files+0x2a/0x420
[ 1020.625134][T17750]  ? __fget_files+0x3a0/0x420
[ 1020.625163][T17750]  ? __fget_files+0x2a/0x420
[ 1020.625199][T17750]  security_file_ioctl_compat+0xc3/0x2a0
[ 1020.625237][T17750]  __ia32_compat_sys_ioctl+0x139/0x950
[ 1020.625266][T17750]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1020.625295][T17750]  ? __fget_files+0x3a0/0x420
[ 1020.625331][T17750]  ? fput+0xa0/0xd0
[ 1020.625361][T17750]  ? ksys_write+0x242/0x270
[ 1020.625396][T17750]  __do_fast_syscall_32+0x20d/0x640
[ 1020.625420][T17750]  ? do_fast_syscall_32+0x33/0x70
[ 1020.625446][T17750]  ? asm_int80_emulation+0x1a/0x20
[ 1020.625468][T17750]  ? do_int80_emulation+0x274/0x4d0
[ 1020.625487][T17750]  ? trace_irq_disable+0x3b/0x150
[ 1020.625522][T17750]  do_fast_syscall_32+0x33/0x70
[ 1020.625542][T17750]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1020.625568][T17750] RIP: 0023:0xf70aef6c
[ 1020.625587][T17750] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 1020.625607][T17750] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1020.625629][T17750] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707
[ 1020.625643][T17750] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1020.625656][T17750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1020.625669][T17750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1020.625681][T17750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1020.625711][T17750]  </TASK>
[ 1020.625748][T17750] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1020.906405][  T795] usb 4-1: Using ep0 maxpacket: 32
[ 1020.925622][  T795] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 1020.944642][  T795] usb 4-1: config 0 has no interface number 0
[ 1020.961081][  T795] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1020.991420][  T795] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1021.015438][  T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.034746][  T795] usb 4-1: Product: syz
[ 1021.044362][  T795] usb 4-1: Manufacturer: syz
[ 1021.049928][  T795] usb 4-1: SerialNumber: syz
[ 1021.061822][  T795] usb 4-1: config 0 descriptor??
[ 1021.077583][  T795] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1021.088243][  T795] em28xx 4-1:0.132: Video interface 132 found:
[ 1021.559108][T15895] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 1021.570259][T15895] em28xx 2-1:0.132: board has no eeprom
[ 1021.576550][T17748] em28xx 2-1:0.132: failed to trigger write to i2c address 0x1e (error=-5)
[ 1021.601925][T17750] em28xx 2-1:0.132: failed to trigger write to i2c address 0x1e (error=-5)
[ 1021.613052][  T979] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 1021.632481][  T795] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[ 1021.646105][  T979] em28xx 6-1:0.132: board has no eeprom
[ 1021.654082][T15895] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1021.667320][T15895] em28xx 2-1:0.132: analog set to bulk mode.
[ 1021.677316][T15891] em28xx 2-1:0.132: Registering V4L2 extension
[ 1021.697662][T15895] usb 2-1: USB disconnect, device number 4
[ 1021.718938][T15895] em28xx 2-1:0.132: Disconnecting em28xx
[ 1021.725349][  T979] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1021.789012][  T979] em28xx 6-1:0.132: analog set to bulk mode.
[ 1021.798980][    T9] ftdi_sio 7-1:6.19: FTDI USB Serial Device converter detected
[ 1021.821211][  T979] usb 6-1: USB disconnect, device number 127
[ 1021.842157][  T979] em28xx 6-1:0.132: Disconnecting em28xx
[ 1021.851736][    T9] ftdi_sio ttyUSB0: unknown device type: 0xe1a8
[ 1021.989861][    T9] ftdi_sio 7-1:6.80: FTDI USB Serial Device converter detected
[ 1022.014700][    T9] ftdi_sio ttyUSB1: unknown device type: 0xe1a8
[ 1022.051912][    T9] usb 7-1: USB disconnect, device number 10
[ 1022.087251][    T9] ftdi_sio 7-1:6.19: device disconnected
[ 1022.293457][    T9] ftdi_sio 7-1:6.80: device disconnected
[ 1022.372412][T15891] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[ 1022.382027][T15891] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[ 1022.416588][T15891] em28xx 2-1:0.132: No AC97 audio processor
[ 1022.446217][T15891] usb 2-1: Decoder not found
[ 1022.456979][T15891] em28xx 2-1:0.132: failed to create media graph
[ 1022.468846][T15891] em28xx 2-1:0.132: V4L2 device video103 deregistered
[ 1022.495242][T15891] em28xx 2-1:0.132: Remote control support is not available for this card.
[ 1022.512396][T13873] em28xx 6-1:0.132: Registering V4L2 extension
[ 1022.641457][T17772] net_ratelimit: 14 callbacks suppressed
[ 1022.641511][T17772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1022.763569][  T795] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 1022.774572][  T795] em28xx 4-1:0.132: board has no eeprom
[ 1022.988767][T15893] vhci_hcd vhci_hcd.3: vhci_device speed not set
[ 1023.122940][  T795] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1023.147408][T17777] loop6: detected capacity change from 0 to 524288000
[ 1023.169058][  T795] em28xx 4-1:0.132: analog set to bulk mode.
[ 1023.342175][T13873] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[ 1023.350174][T17781] support for the xor transformation has been removed.
[ 1023.384787][T13873] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[ 1023.462604][T13873] em28xx 6-1:0.132: No AC97 audio processor
[ 1023.573860][T13873] usb 6-1: Decoder not found
[ 1023.587806][T13873] em28xx 6-1:0.132: failed to create media graph
[ 1023.608330][T13873] em28xx 6-1:0.132: V4L2 device video103 deregistered
[ 1023.675209][T13873] em28xx 6-1:0.132: Remote control support is not available for this card.
[ 1023.714344][  T795] usb 4-1: USB disconnect, device number 27
[ 1023.715278][  T979] em28xx 6-1:0.132: Closing input extension
[ 1023.728094][  T795] em28xx 4-1:0.132: Disconnecting em28xx
[ 1023.745366][T15895] em28xx 2-1:0.132: Closing input extension
[ 1023.753857][   T24] em28xx 4-1:0.132: Registering V4L2 extension
[ 1023.771613][T15895] em28xx 2-1:0.132: Freeing device
[ 1023.780116][    T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1023.797991][  T979] em28xx 6-1:0.132: Freeing device
[ 1023.954805][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1024.018933][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1024.082993][    T9] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1024.134543][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1024.185251][    T9] usb 1-1: config 0 descriptor??
[ 1024.242947][T15895] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1024.270889][   T24] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[ 1024.282973][   T24] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[ 1024.300734][   T24] em28xx 4-1:0.132: No AC97 audio processor
[ 1024.348630][   T24] usb 4-1: Decoder not found
[ 1024.365233][   T24] em28xx 4-1:0.132: failed to create media graph
[ 1024.371671][   T24] em28xx 4-1:0.132: V4L2 device video103 deregistered
[ 1024.454735][T15895] usb 2-1: Using ep0 maxpacket: 16
[ 1024.464817][   T24] em28xx 4-1:0.132: Remote control support is not available for this card.
[ 1024.468822][T17796] ==================================================================
[ 1024.476970][T15895] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1024.481573][T17796] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[ 1024.496952][T17796] Read of size 8 at addr ffff88806f738748 by task v4l_id/17796
[ 1024.504505][T17796] 
[ 1024.506836][T17796] CPU: 0 UID: 0 PID: 17796 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1024.506858][T17796] Tainted: [L]=SOFTLOCKUP
[ 1024.506864][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1024.506875][T17796] Call Trace:
[ 1024.506883][T17796]  <TASK>
[ 1024.506890][T17796]  dump_stack_lvl+0xe8/0x150
[ 1024.506915][T17796]  print_report+0xba/0x230
[ 1024.506933][T17796]  ? v4l2_fh_open+0xac/0x420
[ 1024.506948][T17796]  kasan_report+0x117/0x150
[ 1024.506967][T17796]  ? v4l2_fh_open+0xac/0x420
[ 1024.506984][T17796]  v4l2_fh_open+0xac/0x420
[ 1024.506999][T17796]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1024.507026][T17796]  em28xx_v4l2_open+0x157/0x9a0
[ 1024.507047][T17796]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1024.507065][T17796]  v4l2_open+0x1bf/0x3a0
[ 1024.507083][T17796]  chrdev_open+0x4cd/0x5e0
[ 1024.507103][T17796]  ? __pfx_chrdev_open+0x10/0x10
[ 1024.507120][T17796]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[ 1024.507147][T17796]  ? __pfx_chrdev_open+0x10/0x10
[ 1024.507163][T17796]  do_dentry_open+0x785/0x14e0
[ 1024.507189][T17796]  vfs_open+0x3b/0x340
[ 1024.507207][T17796]  ? path_openat+0x2df0/0x3860
[ 1024.507223][T17796]  path_openat+0x2e08/0x3860
[ 1024.507243][T17796]  ? __pfx_stack_trace_save+0x10/0x10
[ 1024.507260][T17796]  ? stack_depot_save_flags+0x33/0x810
[ 1024.507282][T17796]  ? __pfx_path_openat+0x10/0x10
[ 1024.507296][T17796]  ? __x64_sys_openat+0x138/0x170
[ 1024.507316][T17796]  ? do_syscall_64+0x14d/0xf80
[ 1024.507345][T17796]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1024.507364][T17796]  ? __lock_acquire+0x6b5/0x2cf0
[ 1024.507387][T17796]  do_file_open+0x23e/0x4a0
[ 1024.507404][T17796]  ? __pfx_do_file_open+0x10/0x10
[ 1024.507427][T17796]  ? _raw_spin_unlock+0x28/0x50
[ 1024.507447][T17796]  ? alloc_fd+0x64b/0x6c0
[ 1024.507471][T17796]  do_sys_openat2+0x113/0x200
[ 1024.507493][T17796]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1024.507514][T17796]  ? exc_page_fault+0x6a/0xc0
[ 1024.507538][T17796]  ? do_user_addr_fault+0xc6f/0x1340
[ 1024.507559][T17796]  __x64_sys_openat+0x138/0x170
[ 1024.507600][T17796]  do_syscall_64+0x14d/0xf80
[ 1024.507623][T17796]  ? trace_irq_disable+0x3b/0x150
[ 1024.507645][T17796]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1024.507660][T17796]  ? clear_bhb_loop+0x40/0x90
[ 1024.507677][T17796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1024.507700][T17796] RIP: 0033:0x7fce578a7407
[ 1024.507716][T17796] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1024.507730][T17796] RSP: 002b:00007ffc91fe66f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1024.507747][T17796] RAX: ffffffffffffffda RBX: 00007fce57f97880 RCX: 00007fce578a7407
[ 1024.507759][T17796] RDX: 0000000000000000 RSI: 00007ffc91fe7f1a RDI: ffffffffffffff9c
[ 1024.507771][T17796] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1024.507780][T17796] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1024.507789][T17796] R13: 00007ffc91fe6940 R14: 00007fce580fe000 R15: 000055f017c5b4d8
[ 1024.507808][T17796]  </TASK>
[ 1024.507813][T17796] 
[ 1024.809220][T17796] Allocated by task 24:
[ 1024.813386][T17796]  kasan_save_track+0x3e/0x80
[ 1024.818089][T17796]  __kasan_kmalloc+0x93/0xb0
[ 1024.822691][T17796]  __kmalloc_cache_noprof+0x31c/0x660
[ 1024.828076][T17796]  em28xx_v4l2_init+0x10b/0x2e70
[ 1024.833022][T17796]  em28xx_init_extension+0x120/0x1c0
[ 1024.838311][T17796]  process_scheduled_works+0xb02/0x1830
[ 1024.843873][T17796]  worker_thread+0xa50/0xfc0
[ 1024.848476][T17796]  kthread+0x388/0x470
[ 1024.852551][T17796]  ret_from_fork+0x51e/0xb90
[ 1024.857150][T17796]  ret_from_fork_asm+0x1a/0x30
[ 1024.861926][T17796] 
[ 1024.864271][T17796] Freed by task 24:
[ 1024.868126][T17796]  kasan_save_track+0x3e/0x80
[ 1024.872847][T17796]  kasan_save_free_info+0x46/0x50
[ 1024.877897][T17796]  __kasan_slab_free+0x5c/0x80
[ 1024.882661][T17796]  kfree+0x1c1/0x630
[ 1024.886567][T17796]  em28xx_v4l2_init+0x1683/0x2e70
[ 1024.891623][T17796]  em28xx_init_extension+0x120/0x1c0
[ 1024.896914][T17796]  process_scheduled_works+0xb02/0x1830
[ 1024.902469][T17796]  worker_thread+0xa50/0xfc0
[ 1024.907064][T17796]  kthread+0x388/0x470
[ 1024.911135][T17796]  ret_from_fork+0x51e/0xb90
[ 1024.915749][T17796]  ret_from_fork_asm+0x1a/0x30
[ 1024.920528][T17796] 
[ 1024.922864][T17796] The buggy address belongs to the object at ffff88806f738000
[ 1024.922864][T17796]  which belongs to the cache kmalloc-8k of size 8192
[ 1024.937033][T17796] The buggy address is located 1864 bytes inside of
[ 1024.937033][T17796]  freed 8192-byte region [ffff88806f738000, ffff88806f73a000)
[ 1024.951011][T17796] 
[ 1024.953343][T17796] The buggy address belongs to the physical page:
[ 1024.959765][T17796] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6f738
[ 1024.968545][T17796] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1024.977048][T17796] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1024.984607][T17796] page_type: f5(slab)
[ 1024.988594][T17796] raw: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122
[ 1024.997182][T17796] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 1025.005777][T17796] head: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122
[ 1025.014452][T17796] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 1025.023130][T17796] head: 00fff00000000003 ffffea0001bdce01 00000000ffffffff 00000000ffffffff
[ 1025.031812][T17796] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1025.040522][T17796] page dumped because: kasan: bad access detected
[ 1025.046962][T17796] page_owner tracks the page as allocated
[ 1025.052862][T17796] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 17437, tgid 17436 (syz.6.3175), ts 1001320384356, free_ts 1001132199958
[ 1025.075990][T17796]  post_alloc_hook+0x231/0x280
[ 1025.080884][T17796]  get_page_from_freelist+0x24dc/0x2580
[ 1025.086438][T17796]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1025.092256][T17796]  allocate_slab+0x77/0x660
[ 1025.096768][T17796]  refill_objects+0x331/0x3c0
[ 1025.101483][T17796]  __pcs_replace_empty_main+0x2b9/0x620
[ 1025.107049][T17796]  __kmalloc_cache_noprof+0x392/0x660
[ 1025.112426][T17796]  audit_log_d_path+0xb8/0x1a0
[ 1025.117216][T17796]  audit_log_d_path_exe+0x42/0x70
[ 1025.122255][T17796]  audit_log_task+0x2c3/0x3d0
[ 1025.126939][T17796]  audit_seccomp+0x85/0x190
[ 1025.131452][T17796]  __seccomp_filter+0xd48/0x1ef0
[ 1025.136396][T17796]  __do_fast_syscall_32+0x332/0x640
[ 1025.141601][T17796]  do_fast_syscall_32+0x33/0x70
[ 1025.146461][T17796]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1025.152804][T17796] page last free pid 17442 tgid 17442 stack trace:
[ 1025.159323][T17796]  __free_frozen_pages+0xc2b/0xdb0
[ 1025.164490][T17796]  __slab_free+0x263/0x2b0
[ 1025.168913][T17796]  qlist_free_all+0x97/0x100
[ 1025.173506][T17796]  kasan_quarantine_reduce+0x148/0x160
[ 1025.178970][T17796]  __kasan_slab_alloc+0x22/0x80
[ 1025.183830][T17796]  __kmalloc_cache_noprof+0x2ba/0x660
[ 1025.189201][T17796]  fuse_iomap_writeback_range+0xa9c/0x18b0
[ 1025.195009][T17796]  iomap_writeback_folio+0x15f2/0x2770
[ 1025.200486][T17796]  iomap_writepages+0x167/0x2e0
[ 1025.205347][T17796]  fuse_writepages+0x2ef/0x3f0
[ 1025.210122][T17796]  do_writepages+0x32e/0x550
[ 1025.214720][T17796]  __writeback_single_inode+0x133/0x11a0
[ 1025.220363][T17796]  writeback_single_inode+0x4ac/0xdc0
[ 1025.225737][T17796]  write_inode_now+0x1c2/0x290
[ 1025.230504][T17796]  fuse_flush+0x2b8/0x8a0
[ 1025.234842][T17796]  filp_flush+0xbd/0x190
[ 1025.239124][T17796] 
[ 1025.241451][T17796] Memory state around the buggy address:
[ 1025.247087][T17796]  ffff88806f738600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1025.255160][T17796]  ffff88806f738680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1025.263255][T17796] >ffff88806f738700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1025.271363][T17796]                                               ^
[ 1025.277789][T17796]  ffff88806f738780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1025.285891][T17796]  ffff88806f738800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1025.293953][T17796] ==================================================================
[ 1025.316612][  T795] em28xx 4-1:0.132: Closing input extension
[ 1025.419241][T15895] usb 2-1: config 0 has no interface number 0
[ 1025.432962][T15895] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1025.452200][T15895] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1025.480490][T17799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1025.489761][T17799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1025.625160][T15895] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1025.634738][T15895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1025.729988][T15895] usb 2-1: config 0 descriptor??
[ 1025.739651][    T9] usbhid 1-1:0.0: can't add hid device: -71
[ 1025.750265][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1025.776769][T17800] netlink: 'syz.3.3293': attribute type 3 has an invalid length.
[ 1025.816215][    T9] usb 1-1: USB disconnect, device number 33
[ 1025.851433][T17796] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1025.858723][T17796] CPU: 0 UID: 0 PID: 17796 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1025.869443][T17796] Tainted: [L]=SOFTLOCKUP
[ 1025.873809][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1025.883919][T17796] Call Trace:
[ 1025.887295][T17796]  <TASK>
[ 1025.890279][T17796]  vpanic+0x56c/0xa60
[ 1025.894306][T17796]  ? __pfx_vpanic+0x10/0x10
[ 1025.898871][T17796]  panic+0xc5/0xd0
[ 1025.902671][T17796]  ? __pfx_panic+0x10/0x10
[ 1025.907161][T17796]  ? preempt_schedule_thunk+0x16/0x30
[ 1025.912680][T17796]  ? preempt_schedule_thunk+0x16/0x30
[ 1025.918132][T17796]  ? v4l2_fh_open+0xac/0x420
[ 1025.922791][T17796]  check_panic_on_warn+0x89/0xb0
[ 1025.927766][T17796]  ? v4l2_fh_open+0xac/0x420
[ 1025.932394][T17796]  end_report+0x73/0x180
[ 1025.936735][T17796]  ? v4l2_fh_open+0xac/0x420
[ 1025.941366][T17796]  kasan_report+0x128/0x150
[ 1025.945907][T17796]  ? v4l2_fh_open+0xac/0x420
[ 1025.950540][T17796]  v4l2_fh_open+0xac/0x420
[ 1025.954997][T17796]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1025.961062][T17796]  em28xx_v4l2_open+0x157/0x9a0
[ 1025.966059][T17796]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1025.971135][T17796]  v4l2_open+0x1bf/0x3a0
[ 1025.975439][T17796]  chrdev_open+0x4cd/0x5e0
[ 1025.979905][T17796]  ? __pfx_chrdev_open+0x10/0x10
[ 1025.984893][T17796]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[ 1025.991286][T17796]  ? __pfx_chrdev_open+0x10/0x10
[ 1025.996285][T17796]  do_dentry_open+0x785/0x14e0
[ 1026.001151][T17796]  vfs_open+0x3b/0x340
[ 1026.005337][T17796]  ? path_openat+0x2df0/0x3860
[ 1026.010156][T17796]  path_openat+0x2e08/0x3860
[ 1026.014814][T17796]  ? __pfx_stack_trace_save+0x10/0x10
[ 1026.020241][T17796]  ? stack_depot_save_flags+0x33/0x810
[ 1026.025756][T17796]  ? __pfx_path_openat+0x10/0x10
[ 1026.030754][T17796]  ? __x64_sys_openat+0x138/0x170
[ 1026.035837][T17796]  ? do_syscall_64+0x14d/0xf80
[ 1026.040663][T17796]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.046793][T17796]  ? __lock_acquire+0x6b5/0x2cf0
[ 1026.051811][T17796]  do_file_open+0x23e/0x4a0
[ 1026.056377][T17796]  ? __pfx_do_file_open+0x10/0x10
[ 1026.061558][T17796]  ? _raw_spin_unlock+0x28/0x50
[ 1026.066457][T17796]  ? alloc_fd+0x64b/0x6c0
[ 1026.070844][T17796]  do_sys_openat2+0x113/0x200
[ 1026.075581][T17796]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1026.080833][T17796]  ? exc_page_fault+0x6a/0xc0
[ 1026.085554][T17796]  ? do_user_addr_fault+0xc6f/0x1340
[ 1026.090883][T17796]  __x64_sys_openat+0x138/0x170
[ 1026.095815][T17796]  do_syscall_64+0x14d/0xf80
[ 1026.100463][T17796]  ? trace_irq_disable+0x3b/0x150
[ 1026.105547][T17796]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.111686][T17796]  ? clear_bhb_loop+0x40/0x90
[ 1026.116425][T17796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.122369][T17796] RIP: 0033:0x7fce578a7407
[ 1026.126829][T17796] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1026.146482][T17796] RSP: 002b:00007ffc91fe66f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1026.154953][T17796] RAX: ffffffffffffffda RBX: 00007fce57f97880 RCX: 00007fce578a7407
[ 1026.162984][T17796] RDX: 0000000000000000 RSI: 00007ffc91fe7f1a RDI: ffffffffffffff9c
[ 1026.171001][T17796] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1026.179004][T17796] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1026.187012][T17796] R13: 00007ffc91fe6940 R14: 00007fce580fe000 R15: 000055f017c5b4d8
[ 1026.195042][T17796]  </TASK>
[ 1026.198690][T17796] Kernel Offset: disabled
[ 1026.203026][T17796] Rebooting in 86400 seconds..