last executing test programs:

31m59.640583621s ago: executing program 1 (id=1052):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x4c)

31m59.632809977s ago: executing program 1 (id=1053):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x10000, 0xffff, 0x8})
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0)
write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2)

31m56.374433619s ago: executing program 1 (id=1067):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0)
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

31m53.665800257s ago: executing program 1 (id=1079):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902"], 0x0)
socket$vsock_stream(0x28, 0x1, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
epoll_create1(0x80000)
socket$rxrpc(0x21, 0x2, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[], 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101f500000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

31m51.035185169s ago: executing program 1 (id=1088):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fadbdf2501000000140002007767310000000000000000000000000124000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000)

31m50.759390744s ago: executing program 1 (id=1095):
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0432c50000000000010902240001000000000904000001030001000921001006012207000905810300"], 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async)
r3 = syz_clone(0x80300, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000300)=r3, 0x12) (async)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
eventfd2(0x1000, 0x80800) (async)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x8, 0x1, 0x0, 0x0, 0x2, 0x100000000000, 0x4}, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async)
write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "9ecc9008"}, @local=@item_012={0x1, 0x2, 0x2, '|'}]}}, 0x0}, 0x0)

31m35.547028696s ago: executing program 32 (id=1095):
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0432c50000000000010902240001000000000904000001030001000921001006012207000905810300"], 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async)
r3 = syz_clone(0x80300, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000300)=r3, 0x12) (async)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
eventfd2(0x1000, 0x80800) (async)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x8, 0x1, 0x0, 0x0, 0x2, 0x100000000000, 0x4}, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async)
write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "9ecc9008"}, @local=@item_012={0x1, 0x2, 0x2, '|'}]}}, 0x0}, 0x0)

29m44.980521604s ago: executing program 5 (id=1612):
socket$nl_generic(0x11, 0x3, 0x10)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
socket$netlink(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}}, 0x0)

29m44.639028461s ago: executing program 5 (id=1616):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r3, 0x4038ae7a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r7 = dup(r6)
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000440)={{0xd000, 0xffff1000, 0xe, 0x0, 0x7, 0x81, 0x36, 0x5, 0x0, 0x3, 0x5, 0xd5}, {0x80a0000, 0x0, 0x9, 0x8, 0x9, 0x6, 0x9, 0x0, 0xd, 0xfc, 0x2, 0x4}, {0x4000, 0xd000, 0xa, 0x9, 0x2, 0x81, 0xea, 0x9, 0x6a, 0x7, 0x1, 0xe}, {0x1000, 0x2, 0xa, 0x6, 0x7, 0x96, 0x0, 0xe, 0x9, 0x7, 0x5, 0xf7}, {0xeeee0000, 0xeeef0500, 0x3, 0x5, 0x0, 0x0, 0xfc, 0xe, 0x6, 0x8, 0x4, 0x6c}, {0x5000, 0xd000, 0x8, 0x6d, 0x4, 0x66, 0x9, 0xe3, 0x8, 0x2, 0x5, 0xff}, {0x4, 0x8080000, 0x4, 0x7, 0x5, 0x40, 0x2, 0xcc, 0x2, 0x6a, 0x5, 0x47}, {0xdddd0000, 0xffff1000, 0x8, 0x1, 0xf, 0x80, 0x4, 0x8, 0x1, 0x2, 0x9, 0xf9}, {0xeeef0000, 0x8}, {0x4, 0x100}, 0x2000001c, 0x0, 0xffff1000, 0x20, 0xb, 0xec54151b056bf3fb, 0xffff1000, [0x3, 0x3, 0x3, 0x8]})

29m43.56121913s ago: executing program 5 (id=1623):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
fsopen(&(0x7f0000000040)='squashfs\x00', 0x1)
socket(0x40000000015, 0x5, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

29m43.047817381s ago: executing program 5 (id=1625):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = getegid()
fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r2}}, 0x0, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x28880, 0x0, 0x12}, 0x18)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000004c0)={0x10, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0})

29m41.05326221s ago: executing program 5 (id=1640):
socket$inet(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8})
madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10)
sched_setattr(0xffffffffffffffff, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x40, 0xfa11, 0x3}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write(0xffffffffffffffff, 0x0, 0x0)
unshare(0x22020600)
r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
r6 = fsmount(r5, 0x0, 0x4)
openat$cgroup_pressure(r6, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e4, 0x20a, 0x278, 0x1e4, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x154, 0x0, {}, [@inet=@rpfilter={{}, {0x4}}, @inet=@rpfilter={{}, {0x4}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'bond0\x00', 'pim6reg1\x00', {}, {0xff}}, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x5}, {0x2, 0x0, 0x3}, 0xf, 0x4}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xffffffffffffff1d)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00')
lseek(r8, 0xfffd, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)

29m40.584635868s ago: executing program 5 (id=1644):
mount$fuse(0x0, 0x0, 0x0, 0x10005, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000001200000001120022eb"], 0xfdef)

29m39.722804041s ago: executing program 33 (id=1644):
mount$fuse(0x0, 0x0, 0x0, 0x10005, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000001200000001120022eb"], 0xfdef)

9m33.673861496s ago: executing program 0 (id=5861):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x801, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r11, {0x1}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r12, 0x0, 0x118)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r12, 0x0)
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r13 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, 0x0)
syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x800000, 0x231}, &(0x7f0000000100), &(0x7f0000000080))
epoll_create1(0x0)

9m31.615801921s ago: executing program 0 (id=5866):
syz_emit_ethernet(0x98, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x62, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x1, 0x9, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000"}]}}}}}}, 0x0)

9m30.732239069s ago: executing program 0 (id=5868):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f0000000000)={{0x8000000, 0x30000, 0x8, 0x7, 0x3, 0xfe, 0x6, 0xf9, 0x5, 0x0, 0x8, 0x8}, {0x1, 0xdddd0000, 0xd, 0x9, 0xe, 0x6, 0x10, 0x8, 0x2, 0xc, 0x3d, 0xe2}, {0x26000, 0x1fffe2000, 0xe, 0x6, 0x0, 0x0, 0x4, 0x8, 0x9, 0x9, 0xeb, 0x5a}, {0x5000, 0x100000, 0xe, 0x6, 0xc, 0x1, 0xf4, 0x8, 0x12, 0x9, 0x0, 0x7}, {0x26000, 0x100000, 0x4, 0x2, 0x71, 0x8f, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x4000, 0x0, 0x3, 0x29, 0x5, 0x0, 0x40, 0x9, 0xc, 0x4, 0x4}, {0x58000, 0x0, 0x10, 0x1, 0x3d, 0x1, 0x5, 0x4, 0xfe, 0x8, 0x5, 0x4}, {0x200000, 0x2, 0xd, 0xff, 0x7, 0x8, 0x73, 0xaf, 0x5, 0x81, 0x5, 0x5}, {0x8080000}, {0x2000, 0x7}, 0x1, 0x0, 0x7000, 0x420, 0x0, 0x4d00, 0x57695900e7ee680d, 0x0, [0x1, 0x1, 0xff, 0x7fffffff]})
r1 = openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
write$FUSE_ATTR(r1, &(0x7f00000002c0)={0x78, 0x0, 0x0, {0x0, 0xa, 0x0, {0x0, 0x1000, 0x4, 0xc45, 0x9, 0x0, 0x8b6, 0x2, 0x8, 0x4000, 0x8001, r2, r5, 0x6, 0xfffffffa}}}, 0x78)
r6 = socket$kcm(0x29, 0xa, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000340)=0x3, 0x4)
r7 = openat$nullb(0xffffff9c, &(0x7f0000000380), 0x40000, 0x0)
listen(r6, 0x6000000)
r8 = openat$ptmx(0xffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000400)={0x4, 0x7, @name="7382183d1ae94b352b72a23f3447a5374250208ffe45fbd4d2b05ac402beaf50"})
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x304}, "5f1778799243e09c", "aed232bdcbae675a144712a5317655bd44b17f0ff12b3d820280deb336625f05", "89346ecf", "d0929c6b462eb5e0"}, 0x38)
r10 = inotify_init1(0x80000)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0xf504, 0x0)
ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000600)=<r11=>0x0)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000640)=<r12=>0x0)
r13 = syz_clone3(&(0x7f0000002d80)={0x10000000, &(0x7f0000002b40), &(0x7f0000002b80), &(0x7f0000002bc0), {0x1d}, &(0x7f0000002c00)=""/8, 0x8, &(0x7f0000002c40)=""/244, &(0x7f0000002d40)=[0xffffffffffffffff], 0x1}, 0x58)
r14 = syz_open_dev$evdev(&(0x7f0000002e00), 0x3, 0x400000)
r15 = syz_open_dev$vcsn(&(0x7f0000002e40), 0x5, 0x40000)
ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000002e80)=<r16=>0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)="180da21a43a86e71b2e2088ac9bb768ac7ed3461a83deeaa8b5fa873638adb", 0x1f}, {&(0x7f0000000540)="f2cdcf8276492a6822fec8bcc407c6d0f5efa72afd60946a565feb04cf8c257a4f7090803e98345352b3f8180941627b79e69296cc7a2fd6ed027f30de5d3e902a50a5e42e9074353346972d5e6f63a0db00", 0x52}], 0x2, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [r6, r0, r8, r8, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0, r6]}}, @rights={{0x1c, 0x1, 0x1, [r7, r1, r8, r10]}}, @cred={{0x18, 0x1, 0x2, {r11, r2, r5}}}, @cred={{0x18, 0x1, 0x2, {r12, 0x0, r5}}}], 0x84}}, {{&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002b00)=[{&(0x7f00000007c0)="5ff8daca4a70b47e04", 0x9}, {&(0x7f0000000800)="63c7d21fc45f4d8372bf5ebd0dc8d1c60fdac582e1d920f7463a37", 0x1b}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="e108e0f1c7ffc2cc97366ca72efbf87f340ad7fa5782ebcc4fed683f7eb112b6d8fd2ae8a3fc322b202ac230ee", 0x2d}, {&(0x7f0000002880)="e8cc064ae4c0cbf52a2df0bb1037dd27605ff5b102fc3db937fd04006c57d6170ece4ab8adfd22e87e4b40870421d88de783a079d7ddc98c88a699e134a62e11c70b6df1de4f84447a051d0ea0e3d96c29004f6765f9c41635f76e866d99b51b9a6ba671db26ae0f59ae89a3e77bc992df1bd469240532c8f143c53baf9f27e9cc8f867c4084d1db2b7c87f20faf7e7cea3a45943f2a6fcaf7e0299b7c9654dbb9d0054d13c80a8acaa3118ac89d17628dd750e4b7d8321c2d9ee216c80d3e68ceb0ee272be4b0ae6484e23d524a62323fa9dfb4a492f707c02baff69daafb344bb950de0b9a76ad9f49439043c6f6835a23b3a4f1f6ce", 0xf7}, {&(0x7f0000002980)="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", 0xff}, {&(0x7f0000002a80)="b8f030ec1e8b9dbfe8725f2b75cba0a139d3bee562e2aeb2b2c2a8c7487a9833ec6e1825c28b06b9d74bcb5c049e1b5f4525fee178e59c652777286fd21ae5ee2a7fed2632a062176eaf63fbe509cb6ba42429bddfd5b1a5aebfc304", 0x5c}], 0x8, &(0x7f0000002ec0)=[@cred={{0x18, 0x1, 0x2, {r13, r2, r3}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r14, r15, r10]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r0, r7, r7]}}, @cred={{0x18, 0x1, 0x2, {r16, r4, r5}}}], 0x78, 0x4004000}}], 0x2, 0x4)
ioctl$KVM_GET_FPU(r15, 0x81a0ae8c, &(0x7f0000002f80))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003180)={0x3, &(0x7f0000003140)=[{0x4, 0x9, 0x34, 0x7}, {0x1, 0x8, 0x4, 0xca}, {0x7ff, 0x4, 0x5, 0x1000}]})
ioctl$KVM_GET_PIT2(r15, 0x8070ae9f, &(0x7f00000031c0))
ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, &(0x7f0000003240)={{r1}, "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"})
ioctl$IMCLEAR_L2(r15, 0x80044946, &(0x7f0000004240)=0x9)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000004540)={'wg0\x00', <r17=>0x0})
sendmsg$inet(r15, &(0x7f0000004600)={0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000004280)="6bb91b650ecfb9a483223eba0722624dd0c27f1d22b07cc3cefa37ae152262eaa90ed5f01168a64672a876bd8f8478de94539ba34acfd9bb1d64b5d8a589c0627633903175ed7301a351bc", 0x4b}, {&(0x7f0000004300)="00a0569499e3bca7b8c794853d6abd9770713479f250ecf665f51cd76faaf1b6", 0x20}, {&(0x7f0000004340)="84c511d826cc0a08c9258530a7db58b919b57db7b1699e5b83c1bcf17a41fec47497115451fa5b359711e484f2f51f32eff49e461db5aa3f086ff3f640d17a5b03ab15a844812c8718dc95f790c646b9623f119db3c7aff1edfafb5a73e0168b9c0ede9c001c54de1d7521c3b7fa5dfa708673f868decf37bb40ab193d0d030ef172fad4e71c1de221b1cb19739f6ce0790da63d1b19696c797e17bc7ccbe2812ab0ce54098b6e4d5d7150decb869920baac4499ddb11a316b2a707a3ef056c498", 0xc1}, {&(0x7f0000004440)="bcfd3379102f68ab9b03ac217d8dfa1405ae831fdc06682902a0f5c4521d848f44a74d9ae55d8209f17d38885b9432d919aa972a4ee92f39bdf4d552582fd2267186ec7b2d5f8bd5f2ab09c73e84bb", 0x4f}, {&(0x7f00000044c0)="55a9c4f576b85748016a7014f1ba86b215aef3ea60500ea041bdbdf5f54f1ab5778c895d482dfdc7bb5c0c", 0x2b}], 0x5, &(0x7f0000004580)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r17, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xc9, 0x0, 0x7, [0x1, 0x3]}, @noop, @ssrr={0x89, 0x1b, 0x73, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @broadcast, @rand_addr=0x64010101, @private=0xa010101]}, @noop]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8}}, @ip_retopts={{0x10, 0x0, 0x7, {[@end]}}}], 0x70}, 0x24040011)

9m30.398929677s ago: executing program 0 (id=5870):
r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00')
getdents(r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f00000000c0), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0003000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2)
r3 = socket$key(0xf, 0x3, 0x2)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

9m27.865225718s ago: executing program 0 (id=5875):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200))
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x101400)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0x71b17947, 0x0, '\x00', {0x0, @bt={0x5, 0x1, 0x1, 0x2, 0x2, 0x4, 0x9, 0x1, 0x101, 0x2, 0x5, 0x34, 0x8, 0x9, 0x12, 0x2e, {0xff75, 0x2}, 0x9, 0xf}}})
socket$inet6(0xa, 0x3, 0x103)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0295c200000000000000000000000114000400fc00000000000000000000000000000006000340000100000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009880)=ANY=[@ANYBLOB="a40000000001050500000500000000000a4000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400200100000000000000000000000000010800074000000000100006800c000380060002004e220000"], 0xa4}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x7fc)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = eventfd2(0x0, 0x80800)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x1, r10, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)

9m26.556405929s ago: executing program 0 (id=5880):
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000040)="cb", 0xfffffdef)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r4, 0x29, 0x2, &(0x7f0000034780)=""/102391, &(0x7f0000000180)=0x18ff7)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000080)={0x1, 'batadv_slave_0\x00', {}, 0x4})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

9m11.068226271s ago: executing program 34 (id=5880):
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000040)="cb", 0xfffffdef)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r4, 0x29, 0x2, &(0x7f0000034780)=""/102391, &(0x7f0000000180)=0x18ff7)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000080)={0x1, 'batadv_slave_0\x00', {}, 0x4})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

16.498638952s ago: executing program 7 (id=7318):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@ipv6_getaddr={0x18, 0x16, 0x921, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xfd}}, 0x18}}, 0x94)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89101)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xf567, 0x100, 0x0, 0x368}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x1}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x24008840)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r1, 0x47bc, 0xfffffffc, 0x29, 0x0, 0x0)

14.734975166s ago: executing program 7 (id=7323):
syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r4}, 0x10)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803050000000000080000000000000200e1e0f240ddd6310300", <r6=>0xffffffffffffffff})
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r9 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x285b, 0x8, 0x2, 0x34f}, &(0x7f00000000c0)=<r10=>0x0, &(0x7f0000000080)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1}, 0x8c0)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r13=>0x0})
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f00000001c0)={0x79c, r8, 0x32, {0xb, 0x100000002}, 0x2}, 0x1)
r15 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r15, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", <r16=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r16, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r6})
r17 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r17, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"})

14.541748116s ago: executing program 3 (id=7324):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x40012000, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000080), &(0x7f0000000200)}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x641, 0x0, 0xbffffffffffe}]})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB='X', @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0xc, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c020400)
r6 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
msgrcv(r6, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, &(0x7f0000000280), &(0x7f0000000380)}, 0x1c)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@private2, <r7=>0x0}, &(0x7f0000000500)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x1a, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x3ff, 0x400001)
r8 = socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)

13.355279095s ago: executing program 3 (id=7327):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x153c, 0x0, 0x0, 0xffffffff, 0x0, 0x12c4, 0x14a8, 0x14a8, 0xffffffff, 0x14a8, 0x14a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x1160, 0x1190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0xd, 0x2, {0x1}}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x1, './cgroup/syz0\x00', 0x1, {0xc}}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@iprange={{0x64}, {@ipv6=@private2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x3}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0xd4, 0x11c, 0x0, {}, [@common=@addrtype={{0x2c}, {0x800, 0x20}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x6, 0x0, 0x59d6, {0x6}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x62, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x1598)

13.220199969s ago: executing program 2 (id=7328):
unshare(0x2c020400)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0)
io_setup(0x1, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f00000035c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x5, r0, 0x0, 0x0, 0x2b0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x12c, r0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x4}])
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r3)
close(r3)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYRES16=r5, @ANYRESHEX=r2], 0x0)

13.142224263s ago: executing program 3 (id=7330):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x39c, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2d4, 0x2d4, 0x2d4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xfc, 0x120, 0x0, {0x0, 0xf801000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'team0\x00', {0x6d, 0x6, 0x81, 0x9, 0x8, 0xf, 0x5, 0x20, 0x80}, {0x7}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0x4, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c)
clock_adjtime(0x0, &(0x7f0000001680)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x800007, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x38c, 0xffffffff, 0x268, 0x0, 0x268, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @remote, [0xffffffff, 0xff, 0xff, 0xff], [0xff000000, 0xff000000, 0xff], 'netdevsim0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0xd, 0x0, 0x2}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x1, 0x1, [0x6, 0x47de, 0x5, 0x3, 0x20, 0xe000, 0x0, 0x5400, 0x1222, 0x1, 0x7, 0x40, 0x8, 0x400, 0x3, 0x400], 0xb}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xf6fa, 'syz1\x00', {0xab7}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e8)
mremap(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f000022c000/0x3000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
unshare(0x2000180)
r5 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x14, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r7, 0xffffffffffffffff, 0x10, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xb9c8}}, 0x40)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

12.93463052s ago: executing program 7 (id=7332):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4})
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0)
r9 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x1f, 0x5b, "20891c746dd9b4ef870a6dc7b72e054ddb85a64a37f6a780d9d9bb"}, @NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "35a30dfba37a271162f4aff6c251ad1b43a14563c55e49937c76cb3e06e0f20c99535bea1bd1584dfe71047f1914b9ebb88f4f44df001ad4b50ed1c08dc0dedc99b366a00e1256c4457be1e5abb17e5ca17e38195e9e5c1c0f94fcc1241b60cd4126"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
close_range(r10, 0xffffffffffffffff, 0x200000000000000)
ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

10.603698932s ago: executing program 6 (id=7333):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@ipv6_getaddr={0x18, 0x16, 0x921, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xfd}}, 0x18}}, 0x94)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89101)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xf567, 0x100, 0x0, 0x368}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x1}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x24008840)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r1, 0x47bc, 0xfffffffc, 0x29, 0x0, 0x0)

10.297745573s ago: executing program 3 (id=7334):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x5000009)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
inotify_init()
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2d060000"])
creat(&(0x7f0000000000)='./file0\x00', 0x181)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r6=>0x0})
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0x2, 0x8, 0x9}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="00280000000000001c0012800b0001006d616373656300000c0002800800050006000000aa537a289c230f0f62126dc7a572e5aa612521b5c3cc6af20810c97f9388442e0cbab027d7c7be7cc2b7e28b483da52330807b86bd82facf0236fd4d68b8dbbfcfa87594656ec40c13c6eddbc5b5bf1574f2fecd69d9e24d4a95b6e4fffdf6a14f32e4361b3ee6fc13f9366de602803fd7e1f31051bb74999d02bcab64789f49634f3875c4bbb1fda1232bda811cca35bb66f22611b3ed2f43063d8e0c1b2b94576dfbdb522ae01a92508166"], 0x3c}}, 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
unshare(0x28040680)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r8, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

10.295921211s ago: executing program 4 (id=7335):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e410100000000010000000600000000000001"], 0x28)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa0800450000280064000004029078000000e0e300000211009078e00000f1ab0fd1b1020001000118ffffff00000000"], 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0xb000})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000010401010000000000000000070000050500010001000000080005400000000608000440000004010800032400000004"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e12000008"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x1d, 0x2, 0x6)
unshare(0x22020400)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x21, 0x3, 0x5, 0x101, 0x1000, 0x9, 0xe12, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x4, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x40000004, 0x5, 0x79b, 0x2, 0x6, 0x0, 0x4, 0x8, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x7, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x256, 0x81, 0xb, 0x5, 0x20006, 0x2, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x22, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x8, 0x4, 0x401, 0x66cd, 0x72, 0x6, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

10.006826685s ago: executing program 2 (id=7336):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x70bd2a, 0x2, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044052}, 0x2810)
r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc})
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48)
write$RDMA_USER_CM_CMD_QUERY(r4, 0x0, 0x0)
r5 = dup(r3)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5883, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800040002400000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r8, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, 0x0, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x4c, r7, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x44840)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f729b0bf4366fa2d5005dd3fcc4a8a8982a8883633520c43653016bbef19b3fbd8cbede415ef106387315827bfec2d85762d9aef1736baea3dd53bcb9ac89a47de0eb9f39d794fbbf3b72f7792b37972839ca6d834e5583228fbb7939b6579f72236fade8a8bddb4095c60e6f753b1c3b9783705ad973635c1d6f54e1edc4154dc11e61ef5db53259399a2b2c362e1cc5e85a25f00", @ANYRES32=0x0], 0x0)
r9 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$P9_RVERSION(r9, 0x0, 0x0)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x21c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x40, 0xfa}}]}}}]}}]}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

10.004335642s ago: executing program 7 (id=7337):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4})
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0)
r9 = dup(r7)
write$binfmt_aout(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2326], 0x916)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x1f, 0x5b, "20891c746dd9b4ef870a6dc7b72e054ddb85a64a37f6a780d9d9bb"}, @NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "35a30dfba37a271162f4aff6c251ad1b43a14563c55e49937c76cb3e06e0f20c99535bea1bd1584dfe71047f1914b9ebb88f4f44df001ad4b50ed1c08dc0dedc99b366a00e1256c4457be1e5abb17e5ca17e38195e9e5c1c0f94fcc1241b60cd4126"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

9.951072018s ago: executing program 4 (id=7338):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x70bd2a, 0x2, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044052}, 0x2810)
r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc})
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48)
write$RDMA_USER_CM_CMD_QUERY(r4, 0x0, 0x0)
r5 = dup(r3)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5883, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800040002400000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r8, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, 0x0, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x4c, r7, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x44840)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0)
r9 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$P9_RVERSION(r9, 0x0, 0x0)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x21c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x40, 0xfa}}]}}}]}}]}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

9.342985347s ago: executing program 6 (id=7339):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x29)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000101c622a96b618738f1100b2dcbfd57ced72fbac1c632551613c21dea70b068574d7e5cd6d152bc35e1883dd54d79846c623ff497fc207f8f3a3a7daf642b688a3b3073bc0a7ea373b7befc7b57c82419b33359cc6aa63d90381a1af3b56cee804bf6db3cee7806b476da5521585ec994622887650f85483831c36f52ef4b3b965ac990f05e465f819910ec59bfec1b9a672013ca2d26d10c154c10f021de1dd2bf37e34498b3a4713b4868e61c7", @ANYRES16=r2, @ANYBLOB="01002dbd7000000000001c0000000400018004000180"], 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000)
r4 = socket(0x11, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r6=>0x0})
sendmmsg(r4, &(0x7f0000001240)=[{{&(0x7f0000000040)=@can={0x1d, r6}, 0x80, 0x0}}], 0x1, 0x8010)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf251200000008000900060000001400018008000100", @ANYRES32, @ANYBLOB="08000100b2018d4feb256c8f5122e716b9cf2149d5ad7d4a5d496a2ee6a4b7c6ef49acaa152583dc5b0e41722b77a1535611b5041841550ed4e446ae5fd010c972cafc7e9784bedb77adb3d4043de10a4bf91ca3aa89a1624a6c32", @ANYRES32=r6, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8885)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000000c0), 0x8000, 0x1000}, 0x1c)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1, 0x2)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x0, 0x0)

6.672950956s ago: executing program 6 (id=7340):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0)
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa3fe000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

6.497000247s ago: executing program 4 (id=7341):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280))
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = dup(r3)
r5 = fcntl$dupfd(r2, 0x406, r3)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x1000})
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4})
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000000c0))
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f00000000c0)="c4a1d9db13470f01c566bad00466ed0f08410f32b9ee0800000f3266460f7f7e00420f01c2b9740100000f32c46233f6fa", 0x31}], 0x1, 0x5, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xbde, 0x71}}}}, ["", ""]}, 0x20}}, 0x4000)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7f, 0x81, 0x9, 0xa, 0xab, 0xe, 0xb, 0x5, 0x6, 0xfffffff9, 0xe, 0x19, 0x18, 0x10, 0x4a, 0x2}}, @TCA_GRED_DPS={0x10, 0x3, {0xe, 0xf, 0x1, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x8044)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12)
sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5.977560547s ago: executing program 2 (id=7342):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
fsopen(&(0x7f0000000040)='squashfs\x00', 0x1)
socket(0x40000000015, 0x5, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

5.656681048s ago: executing program 4 (id=7343):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r2)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x11)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24)
r6 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5804, 0x800, 0x0, 0xfffffdfc}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r9, 0xc00c55ca, 0x0)
ioctl$UI_GET_VERSION(r9, 0x8004552d, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r6, 0x80003519, 0x0, 0x0, 0x0, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x7e4440, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xd7)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r11 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x28900)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r11, 0xc04064aa, &(0x7f0000000280)={0x0, 0x0})
syz_usb_connect(0x4, 0x5f, &(0x7f0000000300)=ANY=[@ANYBLOB="846d8da59d13ab5c681ae92ec0bba21f9519f427d09c59da57233b39a7c2c8d1e52b87c33d567ff38885cecc18e810d6171aa4d22fe7774a66141382282ae7f52a6fda08c5efa2641c9ed77184369c908c5fcb80386f8514beb4b9782ad55f1bdf01eb81822afd661d1951b4dfbe23f6a370e12a6c01cf8fc8e14726daf3f163f2c162", @ANYRES8, @ANYRES16, @ANYRES64=r1], 0x0)
r12 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e7, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0x4, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x588, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x100006, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}})

5.652759561s ago: executing program 3 (id=7353):
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x5000009)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
inotify_init()
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2d060000"])
creat(&(0x7f0000000000)='./file0\x00', 0x181)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r5=>0x0})
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0x2, 0x8, 0x9}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00280000000000001c0012800b0001006d616373656300000c0002800800050006000000aa537a289c230f0f62126dc7a572e5aa612521b5c3cc6af20810c97f9388442e0cbab027d7c7be7cc2b7e28b483da52330807b86bd82facf0236fd4d68b8dbbfcfa87594656ec40c13c6eddbc5b5bf1574f2fecd69d9e24d4a95b6e4fffdf6a14f32e4361b3ee6fc13f9366de602803fd7e1f31051bb74999d02bcab64789f49634f3875c4bbb1fda1232bda811cca35bb66f22611b3ed2f43063d8e0c1b2b94576dfbdb522ae01a92508166"], 0x3c}}, 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
unshare(0x28040680)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r7, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

5.435048199s ago: executing program 2 (id=7344):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4})
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0)
r9 = dup(r7)
write$binfmt_aout(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2326], 0x916)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x1f, 0x5b, "20891c746dd9b4ef870a6dc7b72e054ddb85a64a37f6a780d9d9bb"}, @NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "35a30dfba37a271162f4aff6c251ad1b43a14563c55e49937c76cb3e06e0f20c99535bea1bd1584dfe71047f1914b9ebb88f4f44df001ad4b50ed1c08dc0dedc99b366a00e1256c4457be1e5abb17e5ca17e38195e9e5c1c0f94fcc1241b60cd4126"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

4.384584224s ago: executing program 7 (id=7345):
socket$netlink(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, 0x0, 0x5000009)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
inotify_init()
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2d060000"])
creat(&(0x7f0000000000)='./file0\x00', 0x181)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00'})
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0x2, 0x8, 0x9}, 0x20)

3.352363464s ago: executing program 6 (id=7346):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2e00, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, 0x0, 0x48040)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$KDGKBTYPE(r1, 0x4b48, &(0x7f0000000040))
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0xae64, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000240)={0x1, 0x0, [{0xb, 0x4, 0x0, 0x7fff, 0x5}]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xb, 0x403, 0x10001, 0x70, 0xffd}]})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000000c0)=0xd77)

2.09003111s ago: executing program 3 (id=7347):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x70bd2a, 0x2, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044052}, 0x2810)
r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc})
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r4, 0x0, 0x0)
r5 = dup(r3)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x60, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5883, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800040002400000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r8, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, 0x0, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x4c, r7, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x44840)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0)
r9 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$P9_RVERSION(r9, 0x0, 0x0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xa0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x21c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x0, 0x7}}}}}]}}]}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.633596355s ago: executing program 7 (id=7348):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x70bd2a, 0x2, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044052}, 0x2810)
r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc})
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48)
write$RDMA_USER_CM_CMD_QUERY(r4, 0x0, 0x0)
r5 = dup(r3)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5883, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800040002400000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r8, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, 0x0, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44840)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0)
r9 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$P9_RVERSION(r9, 0x0, 0x0)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x21c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x40, 0xfa}}]}}}]}}]}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.288650071s ago: executing program 4 (id=7349):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@ipv6_getaddr={0x18, 0x16, 0x921, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xfd}}, 0x18}}, 0x94)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89101)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xf567, 0x100, 0x0, 0x368}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x1}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x24008840)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r1, 0x47bc, 0xfffffffc, 0x29, 0x0, 0x0)

1.117598427s ago: executing program 6 (id=7350):
shmget$private(0x0, 0x400000, 0x40, &(0x7f0000c00000/0x400000)=nil)
setitimer(0x0, &(0x7f0000000080)={{0x7, 0x1}, {0x0, 0xb3}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x3, 0x8}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', <r2=>0x0, 0x4, 0xe, 0x0, 0x2, 0xc, @private0, @local, 0x8000, 0x7, 0xe734}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0xf9, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x15, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x5, 0xca, &(0x7f00000007c0)=""/202, 0x40f00, 0x14, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x5, 0x5, 0x8001}, 0x10, 0x3d4, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x1c)
r6 = openat$hwrng(0xffffff9c, &(0x7f0000000b00), 0x307800, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0xe, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x8, 0x5, 0xb, 0x50, 0xfffffffffffffff0}, @generic={0x1, 0x4, 0x6, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000040)='GPL\x00', 0x3ff, 0xf9, &(0x7f0000000180)=""/249, 0x41100, 0x1, '\x00', r2, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xf, 0x7, 0x1}, 0x10, r3, r4, 0x3, &(0x7f0000000b40)=[r5, 0x1, 0xffffffffffffffff, 0x1, r6], &(0x7f0000000b80)=[{0x1, 0x1, 0x3, 0xa}, {0x0, 0xfffffbc6, 0x2, 0x8}, {0x0, 0x4, 0x4, 0xb}], 0x10, 0x5}, 0x94)
setitimer(0x0, &(0x7f00000000c0)={{}, {0x0, 0xea60}}, 0x0)

936.857307ms ago: executing program 2 (id=7351):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83", 0x1}], 0x1}, 0x4c0e0) (fail_nth: 1)

286.479203ms ago: executing program 2 (id=7352):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x70bd2b}, 0x14}}, 0x4800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r4], 0x50)
ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000340)=""/178)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
sched_getaffinity(0x0, 0x8, &(0x7f0000000100))
ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x57, 0xa, 0x1, "32179418a6cc31ec828e314f741100fa7c53d50c01c728b2d40000070600", 0x32435750})
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40)
r8 = gettid()
r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401)
fcntl$setstatus(r9, 0x4, 0x2400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x7, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0xfffffffe, 0x7, 0x10000005, 0x2f, 0xe, 0xffff94f0, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0xb, 0x5, 0x2, 0x1, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x7c000000, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c)
r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r10, &(0x7f0000000040)="e2", 0x918)
tkill(r8, 0x16)
ppoll(&(0x7f0000000040)=[{r5, 0x200}], 0x1, 0x0, &(0x7f0000000180)={[0x10001, 0xc1]}, 0x8)

185.221329ms ago: executing program 6 (id=7354):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280))
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = dup(r3)
r5 = fcntl$dupfd(r2, 0x406, r3)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x1000})
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4})
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000000c0))
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f00000000c0)="c4a1d9db13470f01c566bad00466ed0f08410f32b9ee0800000f3266460f7f7e00420f01c2b9740100000f32c46233f6fa", 0x31}], 0x1, 0x5, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xbde, 0x71}}}}, ["", ""]}, 0x20}}, 0x4000)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7f, 0x81, 0x9, 0xa, 0xab, 0xe, 0xb, 0x5, 0x6, 0xfffffff9, 0xe, 0x19, 0x18, 0x10, 0x4a, 0x2}}, @TCA_GRED_DPS={0x10, 0x3, {0xe, 0xf, 0x1, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x8044)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12)
sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

0s ago: executing program 4 (id=7355):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000006000000000000000a50000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000414000980100002800c"], 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

kernel console output (not intermixed with test programs):

SB disconnect, device number 19
[ 2187.224378][T29610] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 2187.342978][T13588] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 2187.699521][T13588] usb 3-1: config 0 has no interfaces?
[ 2187.708339][T13588] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 2187.750085][T13588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2187.769711][T13588] usb 3-1: config 0 descriptor??
[ 2187.871748][T21524] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[ 2187.960896][T29624] fuse: Bad value for 'group_id'
[ 2187.994642][T29624] fuse: Bad value for 'group_id'
[ 2188.030909][T21524] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2188.095325][T21524] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2188.137722][T21524] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2188.167194][T21524] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2188.177702][T21524] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2188.261756][T21524] usb 4-1: Product: syz
[ 2188.285545][T21524] usb 4-1: Manufacturer: syz
[ 2188.309361][T21524] usb 4-1: SerialNumber: syz
[ 2188.346531][T13588] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[ 2188.378602][T21524] usb 4-1: config 0 descriptor??
[ 2188.473749][T21524] usb 4-1: selecting invalid altsetting 0
[ 2188.547007][T13588] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2188.580412][T13588] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2188.674490][T29611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2188.687524][T13588] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2188.705953][T29611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2188.729878][T13588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2188.870562][T13588] usb 5-1: config 0 descriptor??
[ 2188.948602][T13588] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2188.985834][ T5924] usb 4-1: USB disconnect, device number 20
[ 2189.041841][T13588] dvb-usb: bulk message failed: -22 (3/0)
[ 2189.077957][T13588] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2189.086525][ T3442] net_ratelimit: 27 callbacks suppressed
[ 2189.086546][ T3442] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2189.104748][T13588] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2189.115260][T13588] usb 5-1: media controller created
[ 2189.134049][T13588] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2189.214267][T22056] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2189.302774][T13588] dvb-usb: bulk message failed: -22 (6/0)
[ 2189.344692][T13588] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2189.402079][T22056] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2189.438601][T13588] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input177
[ 2189.507491][T13588] dvb-usb: schedule remote query interval to 150 msecs.
[ 2189.519369][T13588] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2189.531936][T27869] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2189.680680][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 2189.689509][ T5922] dvb-usb: error while querying for an remote control event.
[ 2189.712482][ T1311] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2189.854010][T22056] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2189.907387][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 2189.925629][ T5922] dvb-usb: error while querying for an remote control event.
[ 2190.001796][T27227] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2190.021917][ T5924] usb 7-1: new full-speed USB device number 91 using dummy_hcd
[ 2190.112491][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 2190.113063][T22056] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2190.133087][ T5922] dvb-usb: error while querying for an remote control event.
[ 2190.252006][T18829] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2190.309465][ T5924] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2190.313231][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 2190.322885][ T5924] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2190.336933][ T5924] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2190.346862][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2190.352290][ T5922] dvb-usb: error while querying for an remote control event.
[ 2190.371875][ T7091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2190.567192][ T5922] usb 3-1: USB disconnect, device number 12
[ 2190.592481][ T5924] usb 7-1: config 0 descriptor??
[ 2190.610889][ T5924] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2190.625135][ T5924] dvb-usb: bulk message failed: -22 (3/0)
[ 2190.643867][ T5924] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2190.673029][T21524] usb 5-1: USB disconnect, device number 16
[ 2190.679304][T13589] dvb-usb: bulk message failed: -22 (1/0)
[ 2190.680713][ T5924] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2190.701141][T13589] dvb-usb: error while querying for an remote control event.
[ 2190.711836][ T5924] usb 7-1: media controller created
[ 2190.789640][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2190.857959][ T5924] dvb-usb: bulk message failed: -22 (6/0)
[ 2190.901339][ T5924] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2190.936187][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input178
[ 2191.426301][T21524] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2191.595430][T29718] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 2191.654130][ T5924] dvb-usb: schedule remote query interval to 150 msecs.
[ 2191.661157][ T5924] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2191.674977][T29720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7021'.
[ 2191.852348][ T5924] dvb-usb: bulk message failed: -22 (1/0)
[ 2191.858218][ T5924] dvb-usb: error while querying for an remote control event.
[ 2191.933109][T29720] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 2192.021809][ T5924] dvb-usb: bulk message failed: -22 (1/0)
[ 2192.027598][ T5924] dvb-usb: error while querying for an remote control event.
[ 2192.261831][T21524] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[ 2192.321736][ T5924] dvb-usb: bulk message failed: -22 (1/0)
[ 2192.331935][ T5924] dvb-usb: error while querying for an remote control event.
[ 2192.570235][ T5924] dvb-usb: bulk message failed: -22 (1/0)
[ 2192.580369][ T5924] dvb-usb: error while querying for an remote control event.
[ 2193.046813][T21524] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2193.058324][T21524] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2193.131242][T21524] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2193.211987][ T5924] dvb-usb: bulk message failed: -22 (1/0)
[ 2193.248262][T21524] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2193.260620][ T5924] dvb-usb: error while querying for an remote control event.
[ 2193.268662][ T7241] usb 7-1: USB disconnect, device number 91
[ 2193.292180][T29745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7022'.
[ 2193.301494][T29745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7022'.
[ 2193.345467][ T7241] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2193.436216][T21524] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2193.511857][T21524] usb 3-1: Product: syz
[ 2193.516878][T21524] usb 3-1: Manufacturer: syz
[ 2193.521613][T21524] usb 3-1: SerialNumber: syz
[ 2193.544817][T21524] usb 3-1: config 0 descriptor??
[ 2193.582693][T21524] usb 3-1: selecting invalid altsetting 0
[ 2193.696004][T29745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7022'.
[ 2193.705571][T29745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7022'.
[ 2193.820618][T29726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2193.865527][ T7241] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 2193.992615][T29726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2194.241795][ T7241] usb 5-1: Using ep0 maxpacket: 32
[ 2194.300810][ T7091] net_ratelimit: 20 callbacks suppressed
[ 2194.300832][ T7091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2194.320750][ T7241] usb 5-1: config 0 has an invalid interface number: 79 but max is 0
[ 2194.335136][ T7241] usb 5-1: config 0 has no interface number 0
[ 2194.360164][ T7241] usb 5-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53
[ 2194.376188][ T7241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2194.457023][ T7091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2194.512887][T29745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7022'.
[ 2194.551849][T29745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7022'.
[ 2194.581906][ T7241] usb 5-1: Product: syz
[ 2194.586156][ T7241] usb 5-1: Manufacturer: syz
[ 2194.590776][ T7241] usb 5-1: SerialNumber: syz
[ 2194.598732][ T7241] usb 5-1: config 0 descriptor??
[ 2194.724830][T27299] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2194.847268][ T5924] usb 3-1: USB disconnect, device number 13
[ 2194.979599][T12603] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2195.122932][ T1311] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2195.242146][ T1311] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2195.361881][T12603] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2195.471795][T27299] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2195.591990][T23166] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2195.721829][T19505] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2196.601906][ T5922] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 2196.745867][ T7241] cp210x 5-1:0.79: cp210x converter detected
[ 2196.752510][ T7241] cp210x 5-1:0.79: failed to get vendor val 0x370b size 1: -71
[ 2196.771795][ T5922] usb 4-1: Using ep0 maxpacket: 16
[ 2196.775310][ T7241] cp210x 5-1:0.79: querying part number failed
[ 2196.805640][ T5922] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf
[ 2196.907357][ T7241] usb 5-1: cp210x converter now attached to ttyUSB0
[ 2196.942001][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2196.969790][ T5922] usb 4-1: config 0 descriptor??
[ 2196.977314][ T7241] usb 5-1: USB disconnect, device number 17
[ 2197.142034][ T7241] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2197.174327][ T7241] cp210x 5-1:0.79: device disconnected
[ 2197.181750][ T5924] usb 7-1: new high-speed USB device number 92 using dummy_hcd
[ 2197.207183][T29862] xt_bpf: check failed: parse error
[ 2197.414327][ T5922] pegasus 4-1:0.0: probe with driver pegasus failed with error -71
[ 2197.451423][T29860] wireguard0: entered promiscuous mode
[ 2197.463016][ T5924] usb 7-1: config 0 has no interfaces?
[ 2197.477258][ T5924] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 2197.487662][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2197.504038][T29860] wireguard0: entered allmulticast mode
[ 2197.537281][ T5924] usb 7-1: config 0 descriptor??
[ 2197.560577][ T5922] usb 4-1: USB disconnect, device number 21
[ 2197.763361][T29892] ip6gretap0: entered promiscuous mode
[ 2197.769152][T29892] macsec0: entered promiscuous mode
[ 2197.774823][T29892] macsec0: entered allmulticast mode
[ 2197.807143][T29892] ip6gretap0: entered allmulticast mode
[ 2197.841004][T29892] ip6gretap0: left allmulticast mode
[ 2197.846996][T29892] ip6gretap0: left promiscuous mode
[ 2199.331169][T12565] net_ratelimit: 20 callbacks suppressed
[ 2199.331191][T12565] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2199.496148][T29922] ip6t_REJECT: ECHOREPLY is not supported
[ 2199.554722][  T144] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2199.673938][T29925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7039'.
[ 2199.812544][ T5956] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2199.942022][T27227] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2200.091870][T27299] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2200.212337][ T3848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2200.352019][   T44] usb 7-1: USB disconnect, device number 92
[ 2200.462553][ T3848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2200.662169][T12603] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2200.811825][T19505] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2200.931821][T12603] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2201.400553][T29946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7043'.
[ 2201.409875][T29946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7043'.
[ 2201.551967][T29946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7043'.
[ 2201.561527][T29946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7043'.
[ 2201.791800][   T44] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 2201.961962][   T44] usb 5-1: Using ep0 maxpacket: 32
[ 2201.980479][   T44] usb 5-1: config 0 has an invalid interface number: 79 but max is 0
[ 2202.002792][T29946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7043'.
[ 2202.011998][T29946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7043'.
[ 2202.097211][   T44] usb 5-1: config 0 has no interface number 0
[ 2202.140463][   T44] usb 5-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53
[ 2202.149933][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2202.191061][   T44] usb 5-1: Product: syz
[ 2202.196798][   T44] usb 5-1: Manufacturer: syz
[ 2202.207952][   T44] usb 5-1: SerialNumber: syz
[ 2202.236457][   T44] usb 5-1: config 0 descriptor??
[ 2203.202083][T29978] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7048'.
[ 2204.433210][ T6093] net_ratelimit: 27 callbacks suppressed
[ 2204.433237][ T6093] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2204.530899][   T44] cp210x 5-1:0.79: cp210x converter detected
[ 2204.538322][   T44] cp210x 5-1:0.79: failed to get vendor val 0x370b size 1: -71
[ 2204.575752][T19505] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2204.632225][   T44] cp210x 5-1:0.79: querying part number failed
[ 2204.703003][T23166] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2204.738176][   T44] usb 5-1: cp210x converter now attached to ttyUSB0
[ 2204.829910][   T44] usb 5-1: USB disconnect, device number 18
[ 2204.866277][   T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2204.874755][T19505] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2204.911326][   T44] cp210x 5-1:0.79: device disconnected
[ 2204.964349][T30007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2205.003526][T30007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2205.013560][T27054] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2205.252032][T13588] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 2205.303988][  T430] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2205.393497][   T44] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 2205.433665][T13588] usb 3-1: device descriptor read/64, error -71
[ 2205.451746][T27054] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2205.561927][T27054] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2205.615022][   T44] usb 5-1: config 0 has no interfaces?
[ 2205.640122][   T44] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 2205.681005][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2205.681934][T13588] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 2205.747713][T27054] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2205.775705][   T44] usb 5-1: config 0 descriptor??
[ 2205.835004][T13588] usb 3-1: device descriptor read/64, error -71
[ 2206.060313][T18631] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2206.272234][T13588] usb usb3-port1: attempt power cycle
[ 2206.612023][T13588] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 2206.652639][T13588] usb 3-1: device descriptor read/8, error -71
[ 2206.670349][T30041] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7055'.
[ 2206.700859][T30041] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7055'.
[ 2206.896959][T30047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7057'.
[ 2206.907613][T13588] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 2206.970226][T13588] usb 3-1: device descriptor read/8, error -71
[ 2207.078997][T30052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7059'.
[ 2207.088677][T13588] usb usb3-port1: unable to enumerate USB device
[ 2207.132708][T30052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7059'.
[ 2207.244832][T30052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7059'.
[ 2207.286019][T30052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7059'.
[ 2208.048083][T30069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7061'.
[ 2208.265366][T21666] usb 5-1: USB disconnect, device number 19
[ 2208.367479][T30086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7063'.
[ 2208.377117][T30086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7063'.
[ 2208.701854][T24269] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 2208.929519][T30103] fuse: Bad value for 'group_id'
[ 2209.002765][T24269] usb 4-1: Using ep0 maxpacket: 32
[ 2209.274881][T24269] usb 4-1: config 0 has an invalid interface number: 79 but max is 0
[ 2209.291869][T24269] usb 4-1: config 0 has no interface number 0
[ 2209.307795][T24269] usb 4-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53
[ 2209.321803][T24269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2209.332250][T21666] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[ 2209.365252][T30103] fuse: Bad value for 'group_id'
[ 2209.370457][T24269] usb 4-1: Product: syz
[ 2209.402343][T24269] usb 4-1: Manufacturer: syz
[ 2209.447044][T24269] usb 4-1: SerialNumber: syz
[ 2209.460424][  T144] net_ratelimit: 28 callbacks suppressed
[ 2209.460445][  T144] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2209.582255][T24269] usb 4-1: config 0 descriptor??
[ 2209.653980][T27054] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2209.711282][T21666] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2209.729840][T21666] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2209.752330][T21666] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2209.771891][ T4526] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2209.783585][T21666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2209.821105][T21666] usb 5-1: config 0 descriptor??
[ 2209.860665][T21666] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2209.871598][T21666] dvb-usb: bulk message failed: -22 (3/0)
[ 2209.872418][T21524] usb 7-1: new full-speed USB device number 93 using dummy_hcd
[ 2209.885645][  T144] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2209.906706][T21666] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2209.931312][T21666] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2210.051352][T21666] usb 5-1: media controller created
[ 2210.445147][T21666] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2210.454947][ T3848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2210.510300][T21524] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2210.560441][T21666] dvb-usb: bulk message failed: -22 (6/0)
[ 2210.577633][T21524] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2210.591932][ T1311] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2210.640130][T21666] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2210.659407][T21524] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2210.702465][T21666] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input179
[ 2210.725049][T21666] dvb-usb: schedule remote query interval to 150 msecs.
[ 2210.734497][T21666] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2210.757568][T21524] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2210.766337][ T1311] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2210.858476][T21524] usb 7-1: config 0 descriptor??
[ 2210.891881][T21666] dvb-usb: bulk message failed: -22 (1/0)
[ 2210.901676][ T1311] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2210.920186][T21666] dvb-usb: error while querying for an remote control event.
[ 2210.929703][T21524] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2210.963403][T21524] dvb-usb: bulk message failed: -22 (3/0)
[ 2211.012105][T21524] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2211.068687][T21524] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2211.076079][T22165] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2211.129681][T21666] dvb-usb: bulk message failed: -22 (1/0)
[ 2211.340777][T21524] usb 7-1: media controller created
[ 2211.355305][T21666] dvb-usb: error while querying for an remote control event.
[ 2211.387296][T21524] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2211.531924][T22165] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2211.563875][T21524] dvb-usb: bulk message failed: -22 (6/0)
[ 2211.569751][T21524] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2211.582219][T21666] dvb-usb: bulk message failed: -22 (1/0)
[ 2211.588083][T21666] dvb-usb: error while querying for an remote control event.
[ 2211.716221][T21524] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input180
[ 2211.751784][T21666] dvb-usb: bulk message failed: -22 (1/0)
[ 2211.826002][T21666] dvb-usb: error while querying for an remote control event.
[ 2211.856181][T21524] dvb-usb: schedule remote query interval to 150 msecs.
[ 2211.900187][T21524] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2212.041856][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2212.053295][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2212.071735][T13588] dvb-usb: error while querying for an remote control event.
[ 2212.114594][T30552] dvb-usb: error while querying for an remote control event.
[ 2212.271779][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2212.300328][T24269] cp210x 4-1:0.79: cp210x converter detected
[ 2212.306620][T13588] dvb-usb: error while querying for an remote control event.
[ 2212.314823][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2212.321343][T21524] usb 5-1: USB disconnect, device number 20
[ 2212.322352][T24269] cp210x 4-1:0.79: failed to get vendor val 0x370b size 1: -71
[ 2212.346915][T30552] dvb-usb: error while querying for an remote control event.
[ 2212.380769][T24269] cp210x 4-1:0.79: querying part number failed
[ 2212.407605][T24269] usb 4-1: cp210x converter now attached to ttyUSB0
[ 2212.490250][T24269] usb 4-1: USB disconnect, device number 22
[ 2212.547767][T21524] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2212.563030][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 2212.589986][ T5922] dvb-usb: error while querying for an remote control event.
[ 2212.677551][T24269] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2212.723637][T24269] cp210x 4-1:0.79: device disconnected
[ 2212.801868][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 2212.837607][ T5922] dvb-usb: error while querying for an remote control event.
[ 2212.873218][T21524] usb 7-1: USB disconnect, device number 93
[ 2212.955309][T21524] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2213.371751][T24269] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 2213.577461][T24269] usb 5-1: config 0 has no interfaces?
[ 2213.584591][T24269] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 2213.594749][T24269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2213.717656][T24269] usb 5-1: config 0 descriptor??
[ 2214.514642][T12565] net_ratelimit: 25 callbacks suppressed
[ 2214.514666][T12565] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2214.662164][T12565] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2214.781966][T22165] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2214.891949][T22165] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2215.002053][T23166] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2215.141973][T12603] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2215.259783][ T3469] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2215.383775][ T3469] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2215.531868][ T3469] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2215.752192][ T3848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2216.132288][T24269] usb 5-1: USB disconnect, device number 21
[ 2216.224144][T30277] __nla_validate_parse: 5 callbacks suppressed
[ 2216.224167][T30277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7084'.
[ 2216.369800][T30277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7084'.
[ 2217.016932][T30277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7084'.
[ 2217.127923][T30277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7084'.
[ 2217.807261][T30277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7084'.
[ 2217.865859][T30277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7084'.
[ 2219.438317][T30325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7091'.
[ 2219.542324][T30327] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7092'.
[ 2219.596209][  T144] net_ratelimit: 30 callbacks suppressed
[ 2219.596227][  T144] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2219.722770][  T144] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2219.832777][T27869] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2219.961789][T27869] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2220.091933][T27869] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2220.212362][T27869] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2220.420789][T27869] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2220.488691][T30337] usb usb8: usbfs: process 30337 (syz.2.7094) did not claim interface 0 before use
[ 2220.574293][  T430] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2220.691810][T22165] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2220.821999][T27869] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2221.642069][T21666] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 2221.850142][T21666] usb 5-1: config 0 has no interfaces?
[ 2221.883518][T21666] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 2222.025590][T21666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2222.117478][T21666] usb 5-1: config 0 descriptor??
[ 2224.642451][  T144] net_ratelimit: 29 callbacks suppressed
[ 2224.642472][  T144] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2224.700616][T21524] usb 5-1: USB disconnect, device number 22
[ 2224.782355][T12603] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2224.911829][T12603] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2225.336823][T19505] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2225.472215][T19505] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2225.601776][T19505] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2225.895141][T27869] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2226.074424][ T4526] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2226.220142][T18829] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2226.382197][T27869] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2227.064711][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2227.071328][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2227.953524][T24269] usb 7-1: new high-speed USB device number 94 using dummy_hcd
[ 2228.160238][T24269] usb 7-1: config 0 has no interfaces?
[ 2228.195560][T30472] netlink: 'syz.4.7115': attribute type 1 has an invalid length.
[ 2228.385053][T24269] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2228.428479][T24269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2228.436695][   T44] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 2228.454884][T24269] usb 7-1: Product: syz
[ 2228.459790][T24269] usb 7-1: Manufacturer: syz
[ 2228.469496][T24269] usb 7-1: SerialNumber: syz
[ 2228.499596][T24269] usb 7-1: config 0 descriptor??
[ 2228.621221][   T44] usb 3-1: config 0 has no interfaces?
[ 2228.627819][   T44] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 2228.640703][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2228.729455][T13589] usb 7-1: USB disconnect, device number 94
[ 2228.729647][   T44] usb 3-1: config 0 descriptor??
[ 2229.902983][T27869] net_ratelimit: 17 callbacks suppressed
[ 2229.903830][T27869] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2230.156719][T23166] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2230.277629][ T3469] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2230.392088][ T3469] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2230.608529][ T6743] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2230.783818][ T1311] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2231.065034][T12565] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2231.216357][ T5956] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2231.324895][T30539] @: renamed from vlan0 (while UP)
[ 2231.381926][  T430] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2231.560265][T13589] usb 3-1: USB disconnect, device number 18
[ 2231.568236][T29799] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2232.297069][T30562] FAULT_INJECTION: forcing a failure.
[ 2232.297069][T30562] name failslab, interval 1, probability 0, space 0, times 0
[ 2232.311985][T30562] CPU: 1 UID: 0 PID: 30562 Comm: syz.3.7126 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2232.312020][T30562] Tainted: [L]=SOFTLOCKUP
[ 2232.312029][T30562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2232.312044][T30562] Call Trace:
[ 2232.312054][T30562]  <TASK>
[ 2232.312064][T30562]  dump_stack_lvl+0xe8/0x150
[ 2232.312100][T30562]  should_fail_ex+0x414/0x560
[ 2232.312140][T30562]  should_failslab+0xa8/0x100
[ 2232.312169][T30562]  __kmalloc_cache_noprof+0x84/0x700
[ 2232.312192][T30562]  ? sctp_add_bind_addr+0x8c/0x370
[ 2232.312230][T30562]  sctp_add_bind_addr+0x8c/0x370
[ 2232.312264][T30562]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 2232.312306][T30562]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 2232.312336][T30562]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 2232.312372][T30562]  ? sctp_v4_is_any+0x35/0x60
[ 2232.312402][T30562]  ? sctp_copy_one_addr+0x93/0x360
[ 2232.312436][T30562]  sctp_bind_addr_copy+0xb3/0x3c0
[ 2232.312467][T30562]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 2232.312497][T30562]  sctp_connect_new_asoc+0x2e0/0x690
[ 2232.312524][T30562]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 2232.312553][T30562]  ? __local_bh_enable_ip+0xd0/0x130
[ 2232.312575][T30562]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 2232.312598][T30562]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 2232.312623][T30562]  sctp_sendmsg+0x155c/0x2840
[ 2232.312657][T30562]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 2232.312677][T30562]  ? aa_sk_perm+0x15f/0x920
[ 2232.312705][T30562]  ? aa_sk_perm+0x7ee/0x920
[ 2232.312735][T30562]  ? __pfx_aa_sk_perm+0x10/0x10
[ 2232.312764][T30562]  ? sock_rps_record_flow+0x19/0x410
[ 2232.312797][T30562]  ? inet_sendmsg+0x2f4/0x370
[ 2232.312830][T30562]  __sock_sendmsg+0x19c/0x270
[ 2232.312871][T30562]  __sys_sendto+0x3bd/0x520
[ 2232.312898][T30562]  ? __pfx___sys_sendto+0x10/0x10
[ 2232.312919][T30562]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 2232.312957][T30562]  ? __fget_files+0x3a0/0x420
[ 2232.312995][T30562]  ? ksys_write+0x22a/0x250
[ 2232.313018][T30562]  ? __pfx_ksys_write+0x10/0x10
[ 2232.313044][T30562]  __ia32_sys_sendto+0xdd/0x100
[ 2232.313072][T30562]  __do_fast_syscall_32+0x1dc/0x570
[ 2232.313096][T30562]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2232.313116][T30562]  ? do_fast_syscall_32+0x34/0x80
[ 2232.313140][T30562]  ? irqentry_exit+0x10f/0x670
[ 2232.313165][T30562]  do_fast_syscall_32+0x34/0x80
[ 2232.313189][T30562]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2232.313215][T30562] RIP: 0023:0xf70ed539
[ 2232.313234][T30562] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2232.313252][T30562] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[ 2232.313274][T30562] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400
[ 2232.313289][T30562] RDX: 0000000000000004 RSI: 0000000000004850 RDI: 0000000080000280
[ 2232.313310][T30562] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000
[ 2232.313323][T30562] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2232.313335][T30562] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2232.313366][T30562]  </TASK>
[ 2232.895816][T30567] vivid-006: disconnect
[ 2233.029722][T30569] tipc: Enabling of bearer <udp:s> rejected, already enabled
[ 2233.642059][T30552] usb 8-1: new high-speed USB device number 59 using dummy_hcd
[ 2233.660290][T30565] vivid-006: reconnect
[ 2233.816479][T30552] usb 8-1: config 0 has no interfaces?
[ 2233.822131][T30552] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 2233.941341][T20206] cgroup: fork rejected by pids controller in /syz3
[ 2234.250839][T30552] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2234.285234][T30552] usb 8-1: config 0 descriptor??
[ 2235.001776][ T6093] net_ratelimit: 24 callbacks suppressed
[ 2235.001799][ T6093] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2235.201851][T22165] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2235.843138][ T6093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2236.108164][T22165] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2236.501355][ T6093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2236.865792][ T5922] usb 8-1: USB disconnect, device number 59
[ 2236.925678][T18829] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2237.073019][ T6093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2237.181820][T22056] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2237.266185][T30641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2237.277232][T30641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2237.287355][T30641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2237.295548][T30641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2237.306150][T30641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2237.620842][ T6093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2237.763425][T23644] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2237.911801][T23644] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2237.963455][T16375] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[ 2238.126853][T16375] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2238.147457][T16375] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2238.190747][T16375] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2238.241851][ T6742] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2238.257115][T16375] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2238.266621][T16375] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2238.275398][T16375] usb 5-1: Product: syz
[ 2238.280799][T16375] usb 5-1: Manufacturer: syz
[ 2238.314573][T16375] usb 5-1: SerialNumber: syz
[ 2238.353193][T16375] usb 5-1: config 0 descriptor??
[ 2238.389409][T16375] usb 5-1: selecting invalid altsetting 0
[ 2238.456804][T18631] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 2238.821573][T30646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2238.877520][T30646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2238.955817][T16375] usb 5-1: USB disconnect, device number 23
[ 2239.163380][ T6093] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[ 2239.209725][ T6093] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[ 2239.239929][ T6093] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 4e:f5:4e:c8:2c:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 2239.381790][ T8462] Bluetooth: hci2: command tx timeout
[ 2240.560139][T30742] FAULT_INJECTION: forcing a failure.
[ 2240.560139][T30742] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2240.680212][T30742] CPU: 1 UID: 0 PID: 30742 Comm: syz.4.7143 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2240.680238][T30742] Tainted: [L]=SOFTLOCKUP
[ 2240.680244][T30742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2240.680253][T30742] Call Trace:
[ 2240.680259][T30742]  <TASK>
[ 2240.680267][T30742]  dump_stack_lvl+0xe8/0x150
[ 2240.680291][T30742]  should_fail_ex+0x414/0x560
[ 2240.680319][T30742]  _copy_from_user+0x2d/0xb0
[ 2240.680339][T30742]  get_compat_msghdr+0xad/0x4a0
[ 2240.680369][T30742]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 2240.680402][T30742]  ___sys_sendmsg+0x193/0x2a0
[ 2240.680423][T30742]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2240.680441][T30742]  ? kstrtoull+0x12f/0x1d0
[ 2240.680466][T30742]  ? kstrtouint+0x6e/0xe0
[ 2240.680506][T30742]  ? __fget_files+0x2a/0x420
[ 2240.680524][T30742]  ? __fget_files+0x3a0/0x420
[ 2240.680549][T30742]  __sys_sendmmsg+0x28e/0x430
[ 2240.680571][T30742]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 2240.680588][T30742]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 2240.680623][T30742]  ? ksys_write+0x22a/0x250
[ 2240.680639][T30742]  ? __pfx_ksys_write+0x10/0x10
[ 2240.680657][T30742]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 2240.680680][T30742]  __do_fast_syscall_32+0x1dc/0x570
[ 2240.680697][T30742]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2240.680711][T30742]  ? do_fast_syscall_32+0x34/0x80
[ 2240.680728][T30742]  ? irqentry_exit+0x10f/0x670
[ 2240.680746][T30742]  do_fast_syscall_32+0x34/0x80
[ 2240.680764][T30742]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2240.680782][T30742] RIP: 0023:0xf70dd539
[ 2240.680795][T30742] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2240.680808][T30742] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 2240.680823][T30742] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280
[ 2240.680834][T30742] RDX: 0000000000000001 RSI: 0000000020008050 RDI: 0000000000000000
[ 2240.680843][T30742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2240.680852][T30742] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2240.680861][T30742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2240.680882][T30742]  </TASK>
[ 2241.461912][ T8462] Bluetooth: hci2: command tx timeout
[ 2241.684690][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2241.716576][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2241.739920][ T6093] bond0 (unregistering): Released all slaves
[ 2241.906388][T13589] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[ 2241.977829][ T6093] bond1 (unregistering): (slave veth3): Releasing backup interface
[ 2241.989903][ T6093] bond1 (unregistering): Released all slaves
[ 2242.081763][T13589] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2242.115082][T13589] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2242.232684][T13589] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2242.304302][ T6093] tipc: Disabling bearer <udp:s>
[ 2242.383813][ T6093] tipc: Left network mode
[ 2242.456571][T13589] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2242.516143][T13589] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2242.699110][T13589] usb 5-1: Product: syz
[ 2242.711022][T13589] usb 5-1: Manufacturer: syz
[ 2242.718884][T13589] usb 5-1: SerialNumber: syz
[ 2242.991918][T13589] usb 5-1: config 0 descriptor??
[ 2243.107202][T13589] usb 5-1: selecting invalid altsetting 0
[ 2243.542362][ T8462] Bluetooth: hci2: command tx timeout
[ 2243.571012][T30643] chnl_net:caif_netlink_parms(): no params data found
[ 2243.998242][T30758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2244.007056][T30758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2244.129451][T13589] usb 5-1: USB disconnect, device number 24
[ 2244.669460][ T6093] hsr_slave_0: left promiscuous mode
[ 2244.685516][ T6093] hsr_slave_1: left promiscuous mode
[ 2244.694381][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2244.721359][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2244.731935][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2244.797441][ T6093] veth0_macvtap: left promiscuous mode
[ 2244.822041][ T6093] veth1_vlan: left promiscuous mode
[ 2244.827890][T16375] usb 7-1: new low-speed USB device number 95 using dummy_hcd
[ 2244.833253][ T6093] veth0_vlan: left promiscuous mode
[ 2245.003936][T16375] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 2245.043555][T16375] usb 7-1: config 0 has no interface number 0
[ 2245.057565][T16375] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2245.103028][T16375] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2245.118808][ T6093] vlan2 (unregistering): left promiscuous mode
[ 2245.125724][ T6093] dummy0 (unregistering): left promiscuous mode
[ 2245.133617][T16375] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2245.162175][T16375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2245.218589][ T6093] team0 (unregistering): Port device vlan2 removed
[ 2245.300515][T16375] usb 7-1: config 0 descriptor??
[ 2245.308447][T30960] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 2245.377026][T16375] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2245.559248][T31011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7160'.
[ 2245.571002][T24269] usb 7-1: USB disconnect, device number 95
[ 2245.621739][ T8462] Bluetooth: hci2: command tx timeout
[ 2246.898139][ T6093] team_slave_1 (unregistering): left promiscuous mode
[ 2246.975108][ T6093] team0 (unregistering): Port device team_slave_1 removed
[ 2247.345954][ T6093] team_slave_0 (unregistering): left promiscuous mode
[ 2247.359222][ T6093] team0 (unregistering): Port device team_slave_0 removed
[ 2249.167666][T30643] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2249.179297][T30643] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2249.191981][T30643] bridge_slave_0: entered allmulticast mode
[ 2249.205956][T30643] bridge_slave_0: entered promiscuous mode
[ 2249.235997][T30643] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2249.325280][T30643] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2249.343582][T30643] bridge_slave_1: entered allmulticast mode
[ 2249.464269][T30643] bridge_slave_1: entered promiscuous mode
[ 2250.079765][T30643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2250.208900][T30643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2250.381925][T16375] usb 8-1: new high-speed USB device number 60 using dummy_hcd
[ 2250.543062][T16375] usb 8-1: Using ep0 maxpacket: 8
[ 2250.559214][T13589] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 2250.569860][T16375] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 2250.586984][T30643] team0: Port device team_slave_0 added
[ 2250.599710][T16375] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 2250.650964][T30643] team0: Port device team_slave_1 added
[ 2250.652437][T16375] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF
[ 2250.696866][T31135] FAULT_INJECTION: forcing a failure.
[ 2250.696866][T31135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2250.741100][T16375] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 2250.760156][T31135] CPU: 0 UID: 0 PID: 31135 Comm: syz.6.7171 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2250.760190][T31135] Tainted: [L]=SOFTLOCKUP
[ 2250.760198][T31135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2250.760216][T31135] Call Trace:
[ 2250.760224][T31135]  <TASK>
[ 2250.760231][T31135]  dump_stack_lvl+0xe8/0x150
[ 2250.760256][T31135]  should_fail_ex+0x414/0x560
[ 2250.760284][T31135]  _copy_from_user+0x2d/0xb0
[ 2250.760305][T31135]  do_ipv6_setsockopt+0x23e/0x2eb0
[ 2250.760330][T31135]  ? kstrtoull+0x12f/0x1d0
[ 2250.760360][T31135]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 2250.760381][T31135]  ? kstrtouint+0x6e/0xe0
[ 2250.760404][T31135]  ? get_pid_task+0x20/0x1f0
[ 2250.760424][T31135]  ? aa_label_sk_perm+0x4c4/0x610
[ 2250.760442][T31135]  ? get_pid_task+0x20/0x1f0
[ 2250.760465][T31135]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 2250.760482][T31135]  ? get_pid_task+0x20/0x1f0
[ 2250.760499][T31135]  ? get_pid_task+0x20/0x1f0
[ 2250.760524][T31135]  ? __lock_acquire+0x6b6/0x2cf0
[ 2250.760550][T31135]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 2250.760573][T31135]  ipv6_setsockopt+0x59/0x170
[ 2250.760597][T31135]  rawv6_setsockopt+0x23b/0x5b0
[ 2250.760622][T31135]  ? __pfx_rawv6_setsockopt+0x10/0x10
[ 2250.760642][T31135]  ? aa_sock_opt_perm+0xff/0x1a0
[ 2250.760663][T31135]  ? sock_common_setsockopt+0x36/0xc0
[ 2250.760677][T31135]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 2250.760693][T31135]  do_sock_setsockopt+0x17c/0x1b0
[ 2250.760714][T31135]  __ia32_sys_setsockopt+0x13f/0x1b0
[ 2250.760735][T31135]  __do_fast_syscall_32+0x1dc/0x570
[ 2250.760753][T31135]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2250.760767][T31135]  ? do_fast_syscall_32+0x34/0x80
[ 2250.760784][T31135]  ? irqentry_exit+0x10f/0x670
[ 2250.760803][T31135]  do_fast_syscall_32+0x34/0x80
[ 2250.760821][T31135]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2250.760839][T31135] RIP: 0023:0xf707d539
[ 2250.760852][T31135] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2250.760865][T31135] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[ 2250.760881][T31135] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029
[ 2250.760891][T31135] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 000000000000052c
[ 2250.760900][T31135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2250.760909][T31135] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2250.760918][T31135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2250.760938][T31135]  </TASK>
[ 2251.044881][T16375] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 2251.315692][T16375] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 2251.333865][T16375] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 2251.373688][T31094] could not allocate digest TFM handle cryptd(blake2b-160)
[ 2251.391904][T16375] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF
[ 2251.407565][T13589] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2251.423085][T13589] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2251.443548][T16375] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 2251.458388][T13589] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2251.468509][T16375] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 2251.480795][T13589] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2251.513574][T16375] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 2251.522470][T16375] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 2251.534863][T13589] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2251.549278][T16375] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF
[ 2251.568720][T16375] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 2251.584504][T13589] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2251.597584][T13589] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2251.685209][T16375] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 2251.760314][T30643] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2251.773097][T13589] usb 3-1: Product: syz
[ 2251.778863][T13589] usb 3-1: Manufacturer: syz
[ 2251.786245][T30643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2251.820454][T16375] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 2251.835060][T13589] cdc_wdm 3-1:1.0: skipping garbage
[ 2251.840311][T13589] cdc_wdm 3-1:1.0: skipping garbage
[ 2251.845897][T16375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2251.859564][T16375] usb 8-1: Product: syz
[ 2251.864426][T13589] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 2251.873964][T16375] usb 8-1: Manufacturer: syz
[ 2251.882582][T31171] fuse: Bad value for 'group_id'
[ 2251.887588][T31171] fuse: Bad value for 'group_id'
[ 2251.895837][T13589] cdc_wdm 3-1:1.0: Unknown control protocol
[ 2251.903636][T30643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2251.922155][T16375] usb 8-1: SerialNumber: syz
[ 2252.046824][T30643] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2252.071838][T30643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2252.124187][    C1] wdm_int_callback: 10 callbacks suppressed
[ 2252.124224][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 2252.137229][    C1] wdm_int_callback: 10 callbacks suppressed
[ 2252.137254][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 2252.149960][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 2252.156605][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 2252.163270][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 2252.169906][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 2252.176247][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 2252.182961][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 2252.189420][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 2252.196057][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 2252.202351][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 2252.209061][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 2252.215834][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 2252.222448][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 2252.229387][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 2252.236178][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 2252.242515][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 2252.249127][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 2252.255406][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 2252.262044][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 2252.277628][ T7241] usb 3-1: USB disconnect, device number 19
[ 2252.283759][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 2252.302099][T16375] adutux 8-1:168.0: interrupt endpoints not found
[ 2252.346966][T16375] usb 8-1: USB disconnect, device number 60
[ 2252.495601][T30643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2252.710141][T30643] hsr_slave_0: entered promiscuous mode
[ 2252.739307][T30643] hsr_slave_1: entered promiscuous mode
[ 2252.769376][T30643] debugfs: 'hsr0' already exists in 'hsr'
[ 2252.788643][T30643] Cannot create hsr debugfs directory
[ 2253.591193][T31279] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 2254.068426][T31310] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 2254.201765][T24269] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[ 2254.453662][T24269] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2254.491781][T24269] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2254.508289][T24269] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2254.535285][ T7241] usb 7-1: new full-speed USB device number 96 using dummy_hcd
[ 2254.578202][T24269] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2254.629630][T24269] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2254.681356][T24269] usb 3-1: Product: syz
[ 2254.696799][T24269] usb 3-1: Manufacturer: syz
[ 2254.720196][T24269] usb 3-1: SerialNumber: syz
[ 2254.732045][ T7241] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2254.747050][T24269] usb 3-1: config 0 descriptor??
[ 2254.752972][ T7241] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2254.764873][ T7241] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2254.789421][T24269] usb 3-1: selecting invalid altsetting 0
[ 2254.809190][ T7241] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2254.820951][ T7241] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2254.845071][ T7241] usb 7-1: Product: syz
[ 2254.849322][ T7241] usb 7-1: Manufacturer: syz
[ 2254.933157][ T7241] usb 7-1: SerialNumber: syz
[ 2255.000373][ T7241] usb 7-1: config 0 descriptor??
[ 2255.118277][ T7241] usb 7-1: selecting invalid altsetting 0
[ 2255.224740][T31299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2255.246077][T31299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2255.273302][T31318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2255.284642][T31318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2255.332216][T13589] usb 3-1: USB disconnect, device number 20
[ 2255.654834][ T7241] usb 7-1: USB disconnect, device number 96
[ 2255.909202][T31420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7181'.
[ 2255.940824][ T8059] udevd[8059]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2256.289530][T30643] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2256.365815][T30643] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2256.473412][T30643] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2256.678153][T30643] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2257.859763][T30643] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2258.226717][T30643] 8021q: adding VLAN 0 to HW filter on device team0
[ 2258.285871][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2258.293095][ T6093] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2258.437311][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2258.444612][ T6093] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2258.742814][T31472] fuse: Bad value for 'group_id'
[ 2258.747996][T31472] fuse: Bad value for 'group_id'
[ 2259.149801][T30643] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2259.448979][T30643] veth0_vlan: entered promiscuous mode
[ 2259.474165][T30643] veth1_vlan: entered promiscuous mode
[ 2259.537861][T30643] veth0_macvtap: entered promiscuous mode
[ 2259.568351][T30643] veth1_macvtap: entered promiscuous mode
[ 2259.676596][T30643] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2259.728959][T30643] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2259.774856][T27054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2259.796928][T19505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2259.852415][T19505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2259.901558][T19505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2260.216123][T12565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2260.236090][T12565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2260.656966][T19505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2260.740198][T19505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2261.250907][T31538] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[ 2262.150567][T31560] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 2262.404091][   T30] audit: type=1326 audit(1768189551.588:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31553 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 2262.618139][   T30] audit: type=1326 audit(1768189551.588:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31553 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 2262.734004][   T30] audit: type=1326 audit(1768189551.598:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31553 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=312 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 2262.834084][   T30] audit: type=1326 audit(1768189551.598:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31553 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 2262.991791][   T30] audit: type=1326 audit(1768189551.598:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31553 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 2263.135919][   T30] audit: type=1326 audit(1768189551.598:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31553 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 2263.204014][   T30] audit: type=1326 audit(1768189551.598:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31553 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 2263.257032][   T30] audit: type=1326 audit(1768189551.598:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31553 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 2263.698305][T31595] fuse: Bad value for 'group_id'
[ 2263.703799][T31595] fuse: Bad value for 'group_id'
[ 2264.071890][T18977] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[ 2264.247964][T18977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2264.260577][T18977] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2264.287915][T18977] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2264.379077][T18977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2264.493774][T18977] usb 5-1: config 0 descriptor??
[ 2264.738274][T18977] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2265.183429][T18977] dvb-usb: bulk message failed: -22 (3/0)
[ 2265.197189][T31609] vlan2: entered promiscuous mode
[ 2265.290316][T18977] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2265.332910][T18977] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2265.350147][T18977] usb 5-1: media controller created
[ 2265.396731][T31618] fuse: Bad value for 'group_id'
[ 2265.402242][T31618] fuse: Bad value for 'group_id'
[ 2265.446138][T18977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2265.547554][T18977] dvb-usb: bulk message failed: -22 (6/0)
[ 2265.576038][T18977] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2265.637681][T18977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input181
[ 2265.737977][T18977] dvb-usb: schedule remote query interval to 150 msecs.
[ 2265.768231][T18977] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2265.921757][T21524] dvb-usb: bulk message failed: -22 (1/0)
[ 2265.927530][T21524] dvb-usb: error while querying for an remote control event.
[ 2266.106834][T13589] dvb-usb: bulk message failed: -22 (1/0)
[ 2266.115629][T13589] dvb-usb: error while querying for an remote control event.
[ 2266.312041][T13589] dvb-usb: bulk message failed: -22 (1/0)
[ 2266.354692][T13589] dvb-usb: error while querying for an remote control event.
[ 2266.370988][T31635] team_slave_0: entered promiscuous mode
[ 2266.376774][T31635] team_slave_1: entered promiscuous mode
[ 2266.384431][T31635] vlan0: entered promiscuous mode
[ 2266.398665][T31635] team0: entered promiscuous mode
[ 2266.541836][T13589] dvb-usb: bulk message failed: -22 (1/0)
[ 2266.567784][T13589] dvb-usb: error while querying for an remote control event.
[ 2266.931782][T13589] dvb-usb: bulk message failed: -22 (1/0)
[ 2267.101776][T13589] dvb-usb: error while querying for an remote control event.
[ 2267.153071][T31654] kAFS: unable to lookup cell ''
[ 2267.243060][T30552] usb 5-1: USB disconnect, device number 25
[ 2267.973766][T30552] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2268.100821][T31686] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7210'.
[ 2268.191122][T31686] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7210'.
[ 2273.035372][T31780] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7220'.
[ 2273.464562][T31787] fuse: Bad value for 'group_id'
[ 2273.469647][T31787] fuse: Bad value for 'group_id'
[ 2276.906722][T31822] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7228'.
[ 2277.971805][T21524] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[ 2278.121941][T21524] usb 7-1: Using ep0 maxpacket: 8
[ 2278.180845][T21524] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 2278.192768][T21524] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2278.225879][T21524] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2278.252697][T21524] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2278.296503][T21524] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2278.310976][T21524] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2278.322759][T21524] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2278.536748][T31832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7231'.
[ 2278.551802][T21524] usb 7-1: GET_CAPABILITIES returned 0
[ 2278.559082][T21524] usbtmc 7-1:16.0: can't read capabilities
[ 2278.569652][T31832] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7231'.
[ 2278.885473][T21524] usb 7-1: USB disconnect, device number 97
[ 2278.901820][T31836] usbtmc 7-1:16.0: usb_control_msg returned -71
[ 2279.792140][T21524] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 2279.962581][T21524] usb 3-1: Using ep0 maxpacket: 8
[ 2279.990057][T21524] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 2280.008719][T21524] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2280.042138][T21524] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2280.059272][T21524] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2280.093738][T31900] kAFS: unable to lookup cell ''
[ 2280.121494][T21524] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2280.174538][T21524] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2280.340813][T21524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2280.497868][T31908] fuse: Bad value for 'group_id'
[ 2280.503140][T31908] fuse: Bad value for 'group_id'
[ 2280.851738][T13588] usb 7-1: new full-speed USB device number 98 using dummy_hcd
[ 2280.928415][T21524] usb 3-1: GET_CAPABILITIES returned 0
[ 2280.934309][T21524] usbtmc 3-1:16.0: can't read capabilities
[ 2280.962427][T31921] fuse: Bad value for 'group_id'
[ 2280.968637][T31921] fuse: Bad value for 'group_id'
[ 2281.107136][T31891] FAULT_INJECTION: forcing a failure.
[ 2281.107136][T31891] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2281.162831][T31891] CPU: 0 UID: 0 PID: 31891 Comm: syz.2.7235 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2281.162867][T31891] Tainted: [L]=SOFTLOCKUP
[ 2281.162875][T31891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2281.162890][T31891] Call Trace:
[ 2281.162899][T31891]  <TASK>
[ 2281.162909][T31891]  dump_stack_lvl+0xe8/0x150
[ 2281.162943][T31891]  should_fail_ex+0x414/0x560
[ 2281.162982][T31891]  _copy_to_user+0x31/0xb0
[ 2281.163011][T31891]  simple_read_from_buffer+0xe1/0x170
[ 2281.163042][T31891]  proc_fail_nth_read+0x1b3/0x220
[ 2281.163069][T31891]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2281.163094][T31891]  ? rw_verify_area+0x2a6/0x4d0
[ 2281.163125][T31891]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2281.163157][T31891]  vfs_read+0x200/0xa30
[ 2281.163175][T31891]  ? fdget_pos+0x247/0x320
[ 2281.163206][T31891]  ? __pfx___mutex_lock+0x10/0x10
[ 2281.163232][T31891]  ? __pfx_vfs_read+0x10/0x10
[ 2281.163253][T31891]  ? __fget_files+0x2a/0x420
[ 2281.163282][T31891]  ? __fget_files+0x3a0/0x420
[ 2281.163306][T31891]  ? __fget_files+0x2a/0x420
[ 2281.163339][T31891]  ksys_read+0x145/0x250
[ 2281.163360][T31891]  ? __pfx_ksys_read+0x10/0x10
[ 2281.163391][T31891]  __do_fast_syscall_32+0x1dc/0x570
[ 2281.163409][T31891]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2281.163423][T31891]  ? do_fast_syscall_32+0x34/0x80
[ 2281.163440][T31891]  ? irqentry_exit+0x10f/0x670
[ 2281.163458][T31891]  do_fast_syscall_32+0x34/0x80
[ 2281.163476][T31891]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2281.163494][T31891] RIP: 0023:0xf7fc1539
[ 2281.163507][T31891] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2281.163519][T31891] RSP: 002b:00000000f54b6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 2281.163536][T31891] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54b6620
[ 2281.163546][T31891] RDX: 000000000000000f RSI: 00000000f7456ff4 RDI: 0000000000000000
[ 2281.163555][T31891] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 2281.163564][T31891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2281.163573][T31891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2281.163593][T31891]  </TASK>
[ 2281.463754][T30552] usb 8-1: new full-speed USB device number 61 using dummy_hcd
[ 2281.620390][T31914] xt_CT: No such helper "snmp"
[ 2281.637668][T13588] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2281.648077][T13588] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2281.687233][   T44] usb 3-1: USB disconnect, device number 21
[ 2281.894590][T13588] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2281.942110][T13588] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2282.064923][T13588] usb 7-1: config 0 descriptor??
[ 2282.139979][T13588] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2282.174782][T31943] IPv6: addrconf: prefix option has invalid lifetime
[ 2282.192791][T13588] dvb-usb: bulk message failed: -22 (3/0)
[ 2282.221900][T30552] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2282.232150][T30552] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2282.241125][T30552] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2282.254828][T13588] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2282.388182][T13588] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2282.398248][T13588] usb 7-1: media controller created
[ 2282.405176][T13588] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2282.426964][T30552] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2282.440073][T13588] dvb-usb: bulk message failed: -22 (6/0)
[ 2282.454145][T13588] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2282.469515][T13588] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input182
[ 2282.534553][T30552] usb 8-1: config 0 descriptor??
[ 2282.556318][T13588] dvb-usb: schedule remote query interval to 150 msecs.
[ 2282.606437][T30552] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2282.634321][T30552] dvb-usb: bulk message failed: -22 (3/0)
[ 2282.688614][T13588] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2282.742767][T30552] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2282.968786][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2283.111958][T30552] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2283.230671][T30552] usb 8-1: media controller created
[ 2283.253604][T13588] dvb-usb: error while querying for an remote control event.
[ 2283.476316][T30552] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2283.616400][T30552] dvb-usb: bulk message failed: -22 (6/0)
[ 2283.629600][T30552] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2283.631327][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2283.706109][T13588] dvb-usb: error while querying for an remote control event.
[ 2283.733933][T30552] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input183
[ 2283.839046][T30552] dvb-usb: schedule remote query interval to 150 msecs.
[ 2283.869287][T30552] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2283.930460][T18977] dvb-usb: bulk message failed: -22 (1/0)
[ 2283.960434][T18977] dvb-usb: error while querying for an remote control event.
[ 2284.032378][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2284.038171][T30552] dvb-usb: error while querying for an remote control event.
[ 2284.422987][T18977] dvb-usb: bulk message failed: -22 (1/0)
[ 2284.672358][T18977] dvb-usb: error while querying for an remote control event.
[ 2284.686057][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2284.734487][T30552] dvb-usb: error while querying for an remote control event.
[ 2284.850131][T18977] usb 7-1: USB disconnect, device number 98
[ 2285.216562][   T44] dvb-usb: bulk message failed: -22 (1/0)
[ 2285.225564][   T44] dvb-usb: error while querying for an remote control event.
[ 2285.411846][   T44] dvb-usb: bulk message failed: -22 (1/0)
[ 2285.506954][   T44] dvb-usb: error while querying for an remote control event.
[ 2285.692236][   T44] dvb-usb: bulk message failed: -22 (1/0)
[ 2285.713347][   T44] dvb-usb: error while querying for an remote control event.
[ 2285.797068][T18977] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2285.942188][T24269] dvb-usb: bulk message failed: -22 (1/0)
[ 2285.948243][T24269] dvb-usb: error while querying for an remote control event.
[ 2286.141944][   T44] dvb-usb: bulk message failed: -22 (1/0)
[ 2286.172461][   T44] dvb-usb: error while querying for an remote control event.
[ 2286.304607][T32019] netlink: 'syz.2.7249': attribute type 10 has an invalid length.
[ 2286.361790][   T44] dvb-usb: bulk message failed: -22 (1/0)
[ 2286.391864][   T44] dvb-usb: error while querying for an remote control event.
[ 2286.571842][   T44] dvb-usb: bulk message failed: -22 (1/0)
[ 2286.577679][   T44] dvb-usb: error while querying for an remote control event.
[ 2286.676360][T32021] team_slave_0: entered promiscuous mode
[ 2286.682201][T32021] team_slave_1: entered promiscuous mode
[ 2286.702644][T32021] vlan2: entered promiscuous mode
[ 2286.707760][T32021] team0: entered promiscuous mode
[ 2286.782112][   T44] dvb-usb: bulk message failed: -22 (1/0)
[ 2286.789140][   T44] dvb-usb: error while querying for an remote control event.
[ 2286.834542][T16375] usb 8-1: USB disconnect, device number 61
[ 2286.919927][T16375] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2287.132653][   T30] audit: type=1326 audit(1768189576.388:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32054 comm="syz.4.7253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 2287.182585][   T30] audit: type=1326 audit(1768189576.398:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32054 comm="syz.4.7253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 2287.207886][   T30] audit: type=1326 audit(1768189576.398:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32054 comm="syz.4.7253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 2287.304269][   T30] audit: type=1326 audit(1768189576.398:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32054 comm="syz.4.7253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 2287.367026][   T30] audit: type=1326 audit(1768189576.398:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32054 comm="syz.4.7253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 2287.398746][T32066] tipc: Started in network mode
[ 2287.408113][   T30] audit: type=1326 audit(1768189576.418:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32054 comm="syz.4.7253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 2287.430493][T32066] tipc: Node identity ac1414aa, cluster identity 4711
[ 2287.471549][T32066] tipc: Enabled bearer <udp:s>, priority 20
[ 2287.944078][   T30] audit: type=1326 audit(1768189577.208:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32054 comm="syz.4.7253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 2288.089723][   T30] audit: type=1326 audit(1768189577.228:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32054 comm="syz.4.7253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 2288.231165][   T30] audit: type=1326 audit(1768189577.488:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32054 comm="syz.4.7253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 2288.273050][   T44] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 2288.299647][   T30] audit: type=1326 audit(1768189577.488:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32054 comm="syz.4.7253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 2288.462007][   T44] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 2288.462043][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2288.464621][   T44] usb 3-1: config 0 descriptor??
[ 2288.469278][   T44] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 2288.516650][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2288.516713][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2288.608857][T13588] tipc: Node number set to 2886997162
[ 2288.875141][   T44] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[ 2289.074715][   T44] gspca_cpia1: usb_control_msg 01, error -32
[ 2289.094525][   T44] gspca_cpia1: usb_control_msg 01, error -71
[ 2289.100630][   T44] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0)
[ 2289.140680][   T44] usb 3-1: USB disconnect, device number 22
[ 2289.436640][T32116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2290.242908][T32132] fuse: Bad value for 'fd'
[ 2290.656695][T30552] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[ 2290.848641][T30552] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2290.875682][T30552] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2290.887213][T30552] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2290.901231][T30552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2290.934817][T32145] netlink: 1096 bytes leftover after parsing attributes in process `syz.7.7268'.
[ 2290.985728][T32145] openvswitch: netlink: Flow key attr not present in new flow.
[ 2291.007038][T30552] usb 5-1: config 0 descriptor??
[ 2291.027028][T30552] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2291.048511][T30552] dvb-usb: bulk message failed: -22 (3/0)
[ 2291.080774][T30552] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2291.085555][T30552] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2291.089098][T30552] usb 5-1: media controller created
[ 2291.135114][T30552] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2291.176429][T30552] dvb-usb: bulk message failed: -22 (6/0)
[ 2291.176524][T30552] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2291.199616][T30552] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input185
[ 2292.020545][T30552] dvb-usb: schedule remote query interval to 150 msecs.
[ 2292.020575][T30552] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2292.173064][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2292.173220][T30552] dvb-usb: error while querying for an remote control event.
[ 2292.333210][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2292.333240][T30552] dvb-usb: error while querying for an remote control event.
[ 2292.501742][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2292.511682][T30552] dvb-usb: error while querying for an remote control event.
[ 2292.569087][T32145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2292.674966][T32145] syzkaller0: entered promiscuous mode
[ 2292.681736][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2292.687676][T30552] dvb-usb: error while querying for an remote control event.
[ 2292.711880][T32145] syzkaller0: entered allmulticast mode
[ 2292.872079][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2292.878690][T30552] dvb-usb: error while querying for an remote control event.
[ 2292.953898][T32144] tipc: Resetting bearer <eth:syzkaller0>
[ 2293.028318][T32144] tipc: Disabling bearer <eth:syzkaller0>
[ 2293.052517][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2293.058288][T30552] dvb-usb: error while querying for an remote control event.
[ 2293.251857][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2293.258165][T30552] dvb-usb: error while querying for an remote control event.
[ 2293.311737][T16375] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 2293.407846][T32182] FAULT_INJECTION: forcing a failure.
[ 2293.407846][T32182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2293.430163][T32182] CPU: 1 UID: 0 PID: 32182 Comm: syz.3.7274 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2293.430196][T32182] Tainted: [L]=SOFTLOCKUP
[ 2293.430204][T32182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2293.430217][T32182] Call Trace:
[ 2293.430226][T32182]  <TASK>
[ 2293.430235][T32182]  dump_stack_lvl+0xe8/0x150
[ 2293.430268][T32182]  should_fail_ex+0x414/0x560
[ 2293.430306][T32182]  _copy_from_user+0x2d/0xb0
[ 2293.430334][T32182]  move_addr_to_kernel+0x7e/0x160
[ 2293.430367][T32182]  get_compat_msghdr+0x3bd/0x4a0
[ 2293.430403][T32182]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 2293.430444][T32182]  ___sys_sendmsg+0x193/0x2a0
[ 2293.430473][T32182]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2293.430499][T32182]  ? kstrtoull+0x12f/0x1d0
[ 2293.430533][T32182]  ? kstrtouint+0x6e/0xe0
[ 2293.430593][T32182]  ? __fget_files+0x2a/0x420
[ 2293.430618][T32182]  ? __fget_files+0x3a0/0x420
[ 2293.430662][T32182]  __sys_sendmmsg+0x28e/0x430
[ 2293.430695][T32182]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 2293.430719][T32182]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 2293.430770][T32182]  ? ksys_write+0x22a/0x250
[ 2293.430793][T32182]  ? __pfx_ksys_write+0x10/0x10
[ 2293.430820][T32182]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 2293.430853][T32182]  __do_fast_syscall_32+0x1dc/0x570
[ 2293.430877][T32182]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2293.430897][T32182]  ? do_fast_syscall_32+0x34/0x80
[ 2293.430921][T32182]  ? irqentry_exit+0x10f/0x670
[ 2293.430946][T32182]  do_fast_syscall_32+0x34/0x80
[ 2293.430972][T32182]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2293.430996][T32182] RIP: 0023:0xf7f46539
[ 2293.431016][T32182] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2293.431033][T32182] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 2293.431056][T32182] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280
[ 2293.431070][T32182] RDX: 0000000000000001 RSI: 0000000020008050 RDI: 0000000000000000
[ 2293.431082][T32182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2293.431094][T32182] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2293.431107][T32182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2293.431137][T32182]  </TASK>
[ 2293.663962][   T44] dvb-usb: bulk message failed: -22 (1/0)
[ 2293.669892][   T44] dvb-usb: error while querying for an remote control event.
[ 2293.726038][T16375] usb 3-1: Using ep0 maxpacket: 16
[ 2293.737174][T24269] usb 5-1: USB disconnect, device number 26
[ 2293.762961][T16375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2293.826359][T16375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2293.845695][T24269] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2294.097435][T16375] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2294.314519][T16375] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2294.324274][T16375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2294.407721][T32210] fuse: Bad value for 'fd'
[ 2294.676323][T16375] usb 3-1: config 0 descriptor??
[ 2294.724394][T30552] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[ 2294.793569][T32222] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7277'.
[ 2295.030741][T30552] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2295.052030][T30552] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2295.061086][T30552] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2295.121256][T30552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2295.163528][T30552] usb 5-1: config 0 descriptor??
[ 2295.186876][T30552] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2295.204619][T30552] dvb-usb: bulk message failed: -22 (3/0)
[ 2295.244518][T30552] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2295.265846][T30552] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2295.305958][T30552] usb 5-1: media controller created
[ 2295.326010][T30552] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2295.551789][T30552] dvb-usb: bulk message failed: -22 (6/0)
[ 2295.574782][T30552] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2295.585898][T16375] usbhid 3-1:0.0: can't add hid device: -71
[ 2295.627593][T16375] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2295.668036][T16375] usb 3-1: USB disconnect, device number 23
[ 2295.766330][T32240] vlan0: entered promiscuous mode
[ 2295.797669][T30552] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input186
[ 2295.908460][T30552] dvb-usb: schedule remote query interval to 150 msecs.
[ 2295.945350][T30552] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2296.112016][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2296.118488][T30552] dvb-usb: error while querying for an remote control event.
[ 2296.322367][T24269] dvb-usb: bulk message failed: -22 (1/0)
[ 2296.328260][T24269] dvb-usb: error while querying for an remote control event.
[ 2296.544427][T24269] dvb-usb: bulk message failed: -22 (1/0)
[ 2296.553343][T24269] dvb-usb: error while querying for an remote control event.
[ 2296.811726][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2296.832286][T30552] dvb-usb: error while querying for an remote control event.
[ 2297.002011][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2297.007973][T30552] dvb-usb: error while querying for an remote control event.
[ 2297.196025][T16375] usb 5-1: USB disconnect, device number 27
[ 2297.301712][T24269] usb 7-1: new full-speed USB device number 99 using dummy_hcd
[ 2297.353055][T16375] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2297.830615][T24269] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2297.855849][T32308] fuse: Bad value for 'group_id'
[ 2297.862012][T32308] fuse: Bad value for 'group_id'
[ 2297.907271][T24269] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2298.050356][T32312] fuse: Bad value for 'fd'
[ 2298.075336][T24269] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2298.107078][T24269] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2298.116441][T24269] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2298.134631][T32313] fuse: Bad value for 'group_id'
[ 2298.181930][T32313] fuse: Bad value for 'group_id'
[ 2298.220698][T24269] usb 7-1: Product: syz
[ 2298.237096][T24269] usb 7-1: Manufacturer: syz
[ 2298.285300][T24269] usb 7-1: SerialNumber: syz
[ 2298.328724][T24269] usb 7-1: config 0 descriptor??
[ 2298.354719][T24269] usb 7-1: selecting invalid altsetting 0
[ 2298.542530][T13588] usb 8-1: new full-speed USB device number 62 using dummy_hcd
[ 2298.611060][T32269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2298.681713][T24269] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[ 2298.794271][T32269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2298.810717][T16375] usb 7-1: USB disconnect, device number 99
[ 2298.867480][T13588] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2298.987539][T13588] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2299.104309][T24269] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2299.122050][T13588] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2299.141786][T13588] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2299.152352][T24269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2299.262548][T13588] usb 8-1: config 0 descriptor??
[ 2299.330876][T13588] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2299.337921][T24269] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2299.337953][T24269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2299.345583][T24269] usb 3-1: config 0 descriptor??
[ 2299.411860][T13588] dvb-usb: bulk message failed: -22 (3/0)
[ 2299.474174][T13588] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2299.500178][T24269] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2299.509472][T13588] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2299.521851][T24269] dvb-usb: bulk message failed: -22 (3/0)
[ 2299.552032][T13588] usb 8-1: media controller created
[ 2299.594489][T13588] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2299.640569][T24269] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2299.657115][T13588] dvb-usb: bulk message failed: -22 (6/0)
[ 2299.690397][T13588] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2299.753631][T13588] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input187
[ 2299.835142][T13588] dvb-usb: schedule remote query interval to 150 msecs.
[ 2299.838661][T24269] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2299.854691][T24269] usb 3-1: media controller created
[ 2299.877925][T13588] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2299.878335][T24269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2299.982498][T24269] dvb-usb: bulk message failed: -22 (6/0)
[ 2299.988380][T24269] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2300.150747][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2300.163961][T13588] dvb-usb: error while querying for an remote control event.
[ 2300.188231][T24269] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input188
[ 2300.224480][T24269] dvb-usb: schedule remote query interval to 150 msecs.
[ 2300.233311][T24269] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2300.344529][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2300.367585][T13588] dvb-usb: error while querying for an remote control event.
[ 2300.394411][T24269] dvb-usb: bulk message failed: -22 (1/0)
[ 2300.744354][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2300.754086][T13588] dvb-usb: error while querying for an remote control event.
[ 2300.792663][T24269] dvb-usb: error while querying for an remote control event.
[ 2300.875349][T32377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7287'.
[ 2300.922372][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2300.942104][T13588] dvb-usb: error while querying for an remote control event.
[ 2301.019903][ T7241] dvb-usb: bulk message failed: -22 (1/0)
[ 2301.198033][ T7241] dvb-usb: error while querying for an remote control event.
[ 2301.198251][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2301.350622][T13588] dvb-usb: error while querying for an remote control event.
[ 2301.372083][ T7241] dvb-usb: bulk message failed: -22 (1/0)
[ 2301.378990][ T7241] dvb-usb: error while querying for an remote control event.
[ 2301.568346][T21524] dvb-usb: bulk message failed: -22 (1/0)
[ 2301.582985][ T7241] dvb-usb: bulk message failed: -22 (1/0)
[ 2301.591552][T21524] dvb-usb: error while querying for an remote control event.
[ 2301.605236][T32384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7288'.
[ 2301.623861][ T7241] dvb-usb: error while querying for an remote control event.
[ 2301.761734][T21524] dvb-usb: bulk message failed: -22 (1/0)
[ 2301.767924][T21524] dvb-usb: error while querying for an remote control event.
[ 2301.862113][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2301.867935][T30552] dvb-usb: error while querying for an remote control event.
[ 2301.931867][T21524] dvb-usb: bulk message failed: -22 (1/0)
[ 2301.934331][T30552] usb 8-1: USB disconnect, device number 62
[ 2301.938717][T21524] dvb-usb: error while querying for an remote control event.
[ 2302.119448][T21524] dvb-usb: bulk message failed: -22 (1/0)
[ 2302.127817][ T7241] dvb-usb: bulk message failed: -22 (1/0)
[ 2302.132628][T21524] dvb-usb: error while querying for an remote control event.
[ 2302.135050][ T7241] dvb-usb: error while querying for an remote control event.
[ 2302.251554][T30552] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2302.277026][T13588] usb 3-1: USB disconnect, device number 24
[ 2302.284709][T21524] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[ 2302.305125][ T7241] dvb-usb: bulk message failed: -22 (1/0)
[ 2302.314239][ T7241] dvb-usb: error while querying for an remote control event.
[ 2302.507790][T21524] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4
[ 2302.556166][T21524] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10
[ 2302.575374][T13588] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2302.586313][T21524] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64
[ 2302.744119][T21524] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2302.753551][T21524] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2302.886462][T21524] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2302.911791][T21524] usb 4-1: Product: syz
[ 2302.921782][T21524] usb 4-1: Manufacturer: syz
[ 2302.926557][T21524] usb 4-1: SerialNumber: syz
[ 2302.943598][T21524] usb 4-1: config 0 descriptor??
[ 2302.968539][T32387] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 2303.029119][T21524] usb 4-1: selecting invalid altsetting 0
[ 2303.223935][T32385] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow!
[ 2303.304199][T30552] usb 4-1: USB disconnect, device number 23
[ 2303.353273][T32445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7292'.
[ 2303.385024][ T8059] udevd[8059]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2303.451736][T32445] netlink: 'syz.6.7292': attribute type 5 has an invalid length.
[ 2303.518263][T32445] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7292'.
[ 2303.706963][T32445] geneve2: entered promiscuous mode
[ 2303.771857][T32445] geneve2: entered allmulticast mode
[ 2303.829754][ T3469] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[ 2303.875115][ T3469] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[ 2303.884211][ T3469] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[ 2303.949149][ T3469] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[ 2304.509465][T32470] veth1_macvtap: left promiscuous mode
[ 2304.798983][T21524] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[ 2304.956770][T21524] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2304.972306][T21524] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2304.982801][T21524] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2305.023278][T21524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2305.071093][T21524] usb 4-1: config 0 descriptor??
[ 2305.090089][T21524] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2305.101121][T21524] dvb-usb: bulk message failed: -22 (3/0)
[ 2305.174832][T21524] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2305.257064][T21524] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2305.446135][T21524] usb 4-1: media controller created
[ 2305.474035][T21524] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2305.536891][T21524] dvb-usb: bulk message failed: -22 (6/0)
[ 2305.566808][T21524] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2305.606051][T21524] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input190
[ 2305.670858][T21524] dvb-usb: schedule remote query interval to 150 msecs.
[ 2305.679268][T21524] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2305.831788][T16375] dvb-usb: bulk message failed: -22 (1/0)
[ 2305.847564][T16375] dvb-usb: error while querying for an remote control event.
[ 2305.893380][T13588] usb 7-1: new high-speed USB device number 100 using dummy_hcd
[ 2305.934713][T32502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7300'.
[ 2306.019886][T32503] FAULT_INJECTION: forcing a failure.
[ 2306.019886][T32503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2306.077337][T16375] dvb-usb: bulk message failed: -22 (1/0)
[ 2306.083324][T13588] usb 7-1: Using ep0 maxpacket: 8
[ 2306.090101][T16375] dvb-usb: error while querying for an remote control event.
[ 2306.103986][T13588] usb 7-1: config 6 has an invalid interface number: 2 but max is 0
[ 2306.119976][T13588] usb 7-1: config 6 has no interface number 0
[ 2306.163558][T13588] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 2306.179328][T32503] CPU: 0 UID: 0 PID: 32503 Comm: syz.2.7299 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2306.179366][T32503] Tainted: [L]=SOFTLOCKUP
[ 2306.179374][T32503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2306.179388][T32503] Call Trace:
[ 2306.179397][T32503]  <TASK>
[ 2306.179407][T32503]  dump_stack_lvl+0xe8/0x150
[ 2306.179445][T32503]  should_fail_ex+0x414/0x560
[ 2306.179484][T32503]  _copy_from_user+0x2d/0xb0
[ 2306.179512][T32503]  do_ip6t_set_ctl+0x6e7/0xce0
[ 2306.179546][T32503]  ? rcu_is_watching+0x15/0xb0
[ 2306.179574][T32503]  ? trace_contention_end+0x39/0x100
[ 2306.179601][T32503]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[ 2306.179636][T32503]  ? nf_setsockopt+0x221/0x290
[ 2306.179662][T32503]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 2306.179707][T32503]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 2306.179736][T32503]  nf_setsockopt+0x26f/0x290
[ 2306.179762][T32503]  rawv6_setsockopt+0x23b/0x5b0
[ 2306.179798][T32503]  ? __pfx_rawv6_setsockopt+0x10/0x10
[ 2306.179827][T32503]  ? aa_sock_opt_perm+0xff/0x1a0
[ 2306.179856][T32503]  ? sock_common_setsockopt+0x36/0xc0
[ 2306.179877][T32503]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 2306.179900][T32503]  do_sock_setsockopt+0x17c/0x1b0
[ 2306.179931][T32503]  __ia32_sys_setsockopt+0x13f/0x1b0
[ 2306.179961][T32503]  __do_fast_syscall_32+0x1dc/0x570
[ 2306.179986][T32503]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2306.180006][T32503]  ? do_fast_syscall_32+0x34/0x80
[ 2306.180030][T32503]  ? irqentry_exit+0x10f/0x670
[ 2306.180056][T32503]  do_fast_syscall_32+0x34/0x80
[ 2306.180081][T32503]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2306.180107][T32503] RIP: 0023:0xf7fc1539
[ 2306.180125][T32503] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2306.180144][T32503] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[ 2306.180166][T32503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029
[ 2306.180181][T32503] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 000000000000052c
[ 2306.180195][T32503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2306.180207][T32503] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2306.180220][T32503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2306.180250][T32503]  </TASK>
[ 2306.420176][T16375] dvb-usb: bulk message failed: -22 (1/0)
[ 2306.427640][T16375] dvb-usb: error while querying for an remote control event.
[ 2306.507617][T13588] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 2306.520059][T13588] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 2306.529899][T13588] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2306.538023][T13588] usb 7-1: Product: syz
[ 2306.542456][T13588] usb 7-1: Manufacturer: syz
[ 2306.547096][T13588] usb 7-1: SerialNumber: syz
[ 2306.557758][T13588] hso 7-1:6.2: Failed to find INT IN ep
[ 2306.591770][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2306.598629][T13588] dvb-usb: error while querying for an remote control event.
[ 2306.761751][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2306.767705][T13588] dvb-usb: error while querying for an remote control event.
[ 2306.783561][T32491] program syz.6.7298 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2306.804019][T32491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2306.817487][T32491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2306.964315][T32491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2307.026199][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2307.032563][T13588] dvb-usb: error while querying for an remote control event.
[ 2307.043705][T32491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2307.125919][T30552] usb 7-1: USB disconnect, device number 100
[ 2307.191938][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2307.357856][T13588] dvb-usb: error while querying for an remote control event.
[ 2307.521867][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2307.527889][T13588] dvb-usb: error while querying for an remote control event.
[ 2307.804857][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2307.841992][T13588] dvb-usb: error while querying for an remote control event.
[ 2307.883715][T13588] usb 4-1: USB disconnect, device number 24
[ 2308.000389][T13588] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2308.117371][T32546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7305'.
[ 2308.178689][T32546] bridge_slave_1: left allmulticast mode
[ 2308.220528][T32546] bridge_slave_1: left promiscuous mode
[ 2308.239504][T32546] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2308.294245][T32546] bridge_slave_0: left allmulticast mode
[ 2308.556207][T32546] bridge_slave_0: left promiscuous mode
[ 2308.592398][T32546] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2309.829398][T32571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7308'.
[ 2309.871818][T32571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7308'.
[ 2309.897918][T32571] erspan0: entered promiscuous mode
[ 2309.934394][T32571] gretap0: entered promiscuous mode
[ 2310.091785][T24269] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 2310.128769][T32585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7312'.
[ 2310.209273][T32585] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 2310.252037][T24269] usb 4-1: Using ep0 maxpacket: 32
[ 2310.279112][T24269] usb 4-1: config 0 has no interfaces?
[ 2310.298354][T24269] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 2310.340614][T24269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2310.384792][T24269] usb 4-1: config 0 descriptor??
[ 2310.631817][T32572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2310.640542][T32572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2310.660400][T32603] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 2310.697218][T32572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2310.722443][T32572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2310.800503][T13588] usb 4-1: USB disconnect, device number 25
[ 2310.831777][T16375] usb 7-1: new full-speed USB device number 101 using dummy_hcd
[ 2311.009448][T16375] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2311.028704][T16375] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2311.052102][T16375] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2311.071720][T24269] usb 8-1: new full-speed USB device number 63 using dummy_hcd
[ 2311.113475][T16375] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2311.164716][T16375] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2311.173655][T16375] usb 7-1: Product: syz
[ 2311.177971][T16375] usb 7-1: Manufacturer: syz
[ 2311.217294][T16375] usb 7-1: SerialNumber: syz
[ 2311.244311][T24269] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2311.255774][T24269] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2311.295267][T16375] usb 7-1: config 0 descriptor??
[ 2311.319743][T24269] usb 8-1: config 0 interface 0 has no altsetting 0
[ 2311.368156][T16375] usb 7-1: selecting invalid altsetting 0
[ 2311.562921][T24269] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2311.607273][T32594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2311.650936][T32594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2311.661984][T24269] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2311.671759][T24269] usb 8-1: Product: syz
[ 2311.675973][T24269] usb 8-1: Manufacturer: syz
[ 2311.680634][T24269] usb 8-1: SerialNumber: syz
[ 2311.693072][T24269] usb 8-1: config 0 descriptor??
[ 2311.730042][T24269] usb 8-1: selecting invalid altsetting 0
[ 2311.773294][   T44] usb 7-1: USB disconnect, device number 101
[ 2311.987144][T32605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2311.996223][T32605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2312.051090][T24269] usb 8-1: USB disconnect, device number 63
[ 2312.361900][ T5922] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[ 2312.525853][ T8496] udevd[8496]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2312.568702][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2312.579008][ T5922] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2312.588063][ T5922] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2312.601413][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2312.649605][ T5922] usb 4-1: config 0 descriptor??
[ 2312.707672][ T5922] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2312.716279][ T5922] dvb-usb: bulk message failed: -22 (3/0)
[ 2312.732904][ T5922] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2312.742883][ T5922] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2312.750463][ T5922] usb 4-1: media controller created
[ 2312.758575][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2312.900665][ T5922] dvb-usb: bulk message failed: -22 (6/0)
[ 2313.126828][ T5922] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2313.195480][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input191
[ 2313.242158][ T5922] dvb-usb: schedule remote query interval to 150 msecs.
[ 2313.281682][ T5922] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2313.485374][T16375] dvb-usb: bulk message failed: -22 (1/0)
[ 2313.505533][T16375] dvb-usb: error while querying for an remote control event.
[ 2313.688716][T32696] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[ 2313.698309][T32696] tipc: Enabled bearer <udp:syz0>, priority 20
[ 2313.715983][T16375] dvb-usb: bulk message failed: -22 (1/0)
[ 2313.724968][T16375] dvb-usb: error while querying for an remote control event.
[ 2313.933409][T16375] dvb-usb: bulk message failed: -22 (1/0)
[ 2313.945621][T16375] dvb-usb: error while querying for an remote control event.
[ 2314.162248][T16375] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[ 2314.216181][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2314.241721][T13588] dvb-usb: error while querying for an remote control event.
[ 2314.476960][T16375] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2314.541450][T16375] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2314.554746][T16375] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2314.566090][T16375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2314.575125][T16375] usb 7-1: SerialNumber: syz
[ 2314.632555][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[ 2314.638574][ T5922] dvb-usb: error while querying for an remote control event.
[ 2314.851757][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2314.857713][T13588] dvb-usb: error while querying for an remote control event.
[ 2315.041799][T13588] dvb-usb: bulk message failed: -22 (1/0)
[ 2315.047743][T13588] dvb-usb: error while querying for an remote control event.
[ 2315.164693][   T44] usb 4-1: USB disconnect, device number 26
[ 2315.276965][   T44] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2315.747934][T32733] wireguard0: entered promiscuous mode
[ 2315.857485][T32733] wireguard0: entered allmulticast mode
[ 2316.234904][T32760] loop6: detected capacity change from 0 to 7
[ 2316.267624][ T8135] Dev loop6: unable to read RDB block 7
[ 2316.273827][ T8135]  loop6: unable to read partition table
[ 2316.292958][ T8135] loop6: partition table beyond EOD, truncated
[ 2316.323144][T32761] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7325'.
[ 2316.350109][T32760] Dev loop6: unable to read RDB block 7
[ 2316.364382][T32760]  loop6: unable to read partition table
[ 2316.375121][T32760] loop6: partition table beyond EOD, truncated
[ 2316.444811][T32760] loop_reread_partitions: partition scan of loop6 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[ 2316.650578][T16375] usb 7-1: 0:2 : does not exist
[ 2316.666162][T16375] usb 7-1: unit 255 not found!
[ 2316.730441][T16375] usb 7-1: USB disconnect, device number 102
[ 2317.032704][  T333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7331'.
[ 2317.084312][  T331] ip6t_REJECT: ECHOREPLY is not supported
[ 2317.143439][T24269] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 2317.414474][  T333] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7331'.
[ 2317.529406][T24269] usb 3-1: Using ep0 maxpacket: 8
[ 2317.646552][T13588] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[ 2317.858755][T13588] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2317.870324][T13588] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2317.900141][T13588] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2317.944791][T24269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2317.978284][T24269] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2318.131726][T24269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2318.196348][T13588] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2318.236190][T24269] usb 3-1: config 0 descriptor??
[ 2318.296851][T13588] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2318.342673][T13588] usb 5-1: Product: syz
[ 2318.347081][T13588] usb 5-1: Manufacturer: syz
[ 2318.352167][T13588] usb 5-1: SerialNumber: syz
[ 2318.383738][T13588] usb 5-1: config 0 descriptor??
[ 2318.396451][T13588] usb 5-1: selecting invalid altsetting 0
[ 2318.565980][T24269] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 2318.634589][  T337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2318.653563][  T337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2318.826786][T13588] usb 5-1: USB disconnect, device number 28
[ 2318.873593][  T311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2318.999882][  T311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2319.560070][  T389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7335'.
[ 2319.593476][   T44] usb 3-1: USB disconnect, device number 25
[ 2320.151953][T24269] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[ 2320.466380][T24269] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2320.481965][T24269] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2320.491024][T24269] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2320.492980][T16375] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[ 2320.502474][T24269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2320.527655][T24269] usb 4-1: config 0 descriptor??
[ 2320.652159][T21524] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[ 2320.760525][T16375] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2320.792167][T16375] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2320.869669][T24269] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2320.876505][T24269] dvb-usb: bulk message failed: -22 (3/0)
[ 2320.885325][T24269] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2320.896059][T24269] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2320.903540][T24269] usb 4-1: media controller created
[ 2320.905385][T21524] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2320.913054][T24269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2320.993235][T21524] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2321.004692][T16375] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2321.142823][T21524] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2321.186472][T21524] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2321.195696][T21524] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2321.204271][T21524] usb 5-1: Product: syz
[ 2321.210132][T21524] usb 5-1: Manufacturer: syz
[ 2321.216774][T21524] usb 5-1: SerialNumber: syz
[ 2321.257962][T16375] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2321.300340][T16375] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2321.322302][T16375] usb 3-1: Product: syz
[ 2321.326783][T16375] usb 3-1: Manufacturer: syz
[ 2321.334085][T21524] usb 5-1: config 0 descriptor??
[ 2321.341290][T16375] usb 3-1: SerialNumber: syz
[ 2321.350804][T21524] usb 5-1: selecting invalid altsetting 0
[ 2321.362337][T16375] usb 3-1: config 0 descriptor??
[ 2321.486101][T16375] usb 3-1: selecting invalid altsetting 0
[ 2321.594118][T24269] dvb-usb: bulk message failed: -22 (6/0)
[ 2321.652037][T24269] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2321.934854][  T424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2321.981918][T24269] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input192
[ 2321.995572][T24269] dvb-usb: schedule remote query interval to 150 msecs.
[ 2322.004084][T24269] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2322.111120][  T424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2322.171729][ T7241] dvb-usb: bulk message failed: -22 (1/0)
[ 2322.177644][ T7241] dvb-usb: error while querying for an remote control event.
[ 2322.226638][  T413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2322.416928][  T413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2322.425713][ T7241] usb 5-1: USB disconnect, device number 29
[ 2322.495361][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2322.503431][T30552] dvb-usb: error while querying for an remote control event.
[ 2322.627960][T21524] usb 3-1: USB disconnect, device number 26
[ 2322.929685][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2323.061182][T30552] dvb-usb: error while querying for an remote control event.
[ 2323.313398][ T7241] dvb-usb: bulk message failed: -22 (1/0)
[ 2323.346264][ T7241] dvb-usb: error while querying for an remote control event.
[ 2323.365675][  T500] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7340'.
[ 2323.552841][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2323.559219][T30552] dvb-usb: error while querying for an remote control event.
[ 2323.607120][  T502] syzkaller0: entered promiscuous mode
[ 2323.612754][  T502] syzkaller0: entered allmulticast mode
[ 2323.653690][  T502] tipc: Started in network mode
[ 2323.658708][  T502] tipc: Node identity 42a013641b13, cluster identity 4711
[ 2323.668777][  T502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2323.681419][  T501] tipc: Resetting bearer <eth:syzkaller0>
[ 2323.722850][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2323.733454][T30552] dvb-usb: error while querying for an remote control event.
[ 2323.789604][  T501] tipc: Disabling bearer <eth:syzkaller0>
[ 2323.843022][T21524] usb 4-1: USB disconnect, device number 27
[ 2323.881161][  T514] dummy0: entered promiscuous mode
[ 2323.892513][  T514] vlan2: entered promiscuous mode
[ 2323.984122][T21524] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2324.505755][  T540] fuse: Bad value for 'group_id'
[ 2324.511410][  T540] fuse: Bad value for 'group_id'
[ 2324.792175][T30552] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[ 2325.243665][T30552] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2325.272218][T30552] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2325.281407][T30552] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2325.294597][T30552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2325.328561][T30552] usb 4-1: config 0 descriptor??
[ 2325.366330][T30552] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2325.388062][T30552] dvb-usb: bulk message failed: -22 (3/0)
[ 2325.434964][T30552] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2325.685735][T30552] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2325.693225][T30552] usb 4-1: media controller created
[ 2325.715661][T30552] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2325.761650][T30552] dvb-usb: bulk message failed: -22 (6/0)
[ 2325.775092][T30552] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2325.859812][T30552] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input194
[ 2326.460577][T30552] dvb-usb: schedule remote query interval to 150 msecs.
[ 2326.477236][T30552] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2326.778725][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2327.012795][T30552] dvb-usb: error while querying for an remote control event.
[ 2327.201760][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2327.207564][T30552] dvb-usb: error while querying for an remote control event.
[ 2327.473525][T30552] dvb-usb: bulk message failed: -22 (1/0)
[ 2327.479995][T30552] dvb-usb: error while querying for an remote control event.
[ 2327.552634][T24269] usb 4-1: USB disconnect, device number 28
[ 2327.828006][T24269] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2328.440635][  T594] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 2328.941701][T24269] usb 8-1: new full-speed USB device number 64 using dummy_hcd
[ 2329.010988][  T612] FAULT_INJECTION: forcing a failure.
[ 2329.010988][  T612] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2329.021916][T30552] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[ 2329.047889][  T612] CPU: 1 UID: 0 PID: 612 Comm: syz.2.7351 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2329.047914][  T612] Tainted: [L]=SOFTLOCKUP
[ 2329.047920][  T612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2329.047931][  T612] Call Trace:
[ 2329.047938][  T612]  <TASK>
[ 2329.047951][  T612]  dump_stack_lvl+0xe8/0x150
[ 2329.047976][  T612]  should_fail_ex+0x414/0x560
[ 2329.048004][  T612]  _copy_from_user+0x2d/0xb0
[ 2329.048025][  T612]  get_compat_msghdr+0xad/0x4a0
[ 2329.048050][  T612]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 2329.048072][  T612]  ? kstrtouint+0x6e/0xe0
[ 2329.048099][  T612]  ___sys_sendmsg+0x193/0x2a0
[ 2329.048121][  T612]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2329.048139][  T612]  ? get_pid_task+0x20/0x1f0
[ 2329.048158][  T612]  ? get_pid_task+0x20/0x1f0
[ 2329.048176][  T612]  ? get_pid_task+0x20/0x1f0
[ 2329.048216][  T612]  ? __fget_files+0x2a/0x420
[ 2329.048234][  T612]  ? __fget_files+0x3a0/0x420
[ 2329.048260][  T612]  __sys_sendmsg+0x164/0x220
[ 2329.048280][  T612]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2329.048304][  T612]  ? __pfx_ksys_write+0x10/0x10
[ 2329.048327][  T612]  __do_fast_syscall_32+0x1dc/0x570
[ 2329.048345][  T612]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2329.048360][  T612]  ? do_fast_syscall_32+0x34/0x80
[ 2329.048377][  T612]  ? irqentry_exit+0x10f/0x670
[ 2329.048395][  T612]  do_fast_syscall_32+0x34/0x80
[ 2329.048412][  T612]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2329.048431][  T612] RIP: 0023:0xf7fc1539
[ 2329.048444][  T612] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2329.048457][  T612] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2329.048473][  T612] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0
[ 2329.048484][  T612] RDX: 000000000004c0e0 RSI: 0000000000000000 RDI: 0000000000000000
[ 2329.048493][  T612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2329.048502][  T612] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2329.048511][  T612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2329.048531][  T612]  </TASK>
[ 2329.439575][T24269] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2329.450817][T24269] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2329.463043][T24269] usb 8-1: config 0 interface 0 has no altsetting 0
[ 2329.472920][T24269] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2329.483763][T24269] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2329.491997][T24269] usb 8-1: Product: syz
[ 2329.496158][T24269] usb 8-1: Manufacturer: syz
[ 2329.500748][T24269] usb 8-1: SerialNumber: syz
[ 2329.509143][T24269] usb 8-1: config 0 descriptor??
[ 2329.565783][T24269] usb 8-1: selecting invalid altsetting 0
[ 2329.594482][T30552] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[ 2329.621114][T30552] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 2329.654754][T30552] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2329.712486][T30552] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2329.722040][T30552] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2329.732299][T30552] usb 4-1: Product: syz
[ 2329.736512][T30552] usb 4-1: Manufacturer: syz
[ 2329.741237][T30552] usb 4-1: SerialNumber: syz
[ 2329.832632][  T596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2329.918834][  T596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2329.928523][  T627] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7352'.
[ 2329.950813][T30552] usb 4-1: config 0 descriptor??
[ 2329.979401][  T636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7355'.
[ 2330.009734][T24269] usb 8-1: USB disconnect, device number 64
[ 2330.076214][  T627] 
[ 2330.078609][  T627] =====================================================
[ 2330.085554][  T627] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 2330.093040][  T627] syzkaller #0 Tainted: G             L     
[ 2330.099016][  T627] -----------------------------------------------------
[ 2330.105953][  T627] syz.2.7352/627 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 2330.113508][  T627] ffff888079408a98 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 2330.122417][  T627] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2330.122417][  T627] and this task is already holding:
[ 2330.129807][  T627] ffff88802a2c7230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[ 2330.139543][  T627] which would create a new lock dependency:
[ 2330.145465][  T627]  (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3}
[ 2330.153479][  T627] 
[ 2330.153479][  T627] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 2330.163050][  T627]  (&dev->event_lock#2){..-.}-{3:3}
[ 2330.163090][  T627] 
[ 2330.163090][  T627] ... which became SOFTIRQ-irq-safe at:
[ 2330.176072][  T627]   lock_acquire+0x107/0x340
[ 2330.180674][  T627]   _raw_spin_lock_irqsave+0x40/0x60
[ 2330.185971][  T627]   input_inject_event+0xa5/0x340
[ 2330.191088][  T627]   kd_sound_helper+0x19f/0x210
[ 2330.195970][  T627]   input_handler_for_each_handle+0x101/0x1c0
[ 2330.202062][  T627]   call_timer_fn+0x16e/0x590
[ 2330.206750][  T627]   __run_timer_base+0x61a/0x860
[ 2330.211691][  T627]   run_timer_softirq+0xb7/0x180
[ 2330.216634][  T627]   handle_softirqs+0x22b/0x7c0
[ 2330.221480][  T627]   __irq_exit_rcu+0x60/0x150
[ 2330.226159][  T627]   irq_exit_rcu+0x9/0x30
[ 2330.230577][  T627]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2330.236295][  T627]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2330.242363][  T627]   preempt_schedule_irq+0x48/0xa0
[ 2330.247478][  T627]   irqentry_exit+0x5e3/0x670
[ 2330.252169][  T627]   asm_sysvec_reschedule_ipi+0x1a/0x20
[ 2330.257727][  T627]   console_flush_all+0x7fc/0xb00
[ 2330.262872][  T627]   console_unlock+0xbb/0x190
[ 2330.267646][  T627]   do_con_write+0x5125/0x5210
[ 2330.272417][  T627]   con_write+0x24/0x40
[ 2330.276592][  T627]   n_tty_write+0xd78/0x12a0
[ 2330.281187][  T627]   file_tty_write+0x559/0xa20
[ 2330.285960][  T627]   vfs_write+0x5c9/0xb30
[ 2330.290392][  T627]   ksys_write+0x145/0x250
[ 2330.294821][  T627]   __do_fast_syscall_32+0x1dc/0x570
[ 2330.300117][  T627]   do_fast_syscall_32+0x34/0x80
[ 2330.305062][  T627]   entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2330.311482][  T627] 
[ 2330.311482][  T627] to a SOFTIRQ-irq-unsafe lock:
[ 2330.318510][  T627]  (tasklist_lock){.+.+}-{3:3}
[ 2330.318537][  T627] 
[ 2330.318537][  T627] ... which became SOFTIRQ-irq-unsafe at:
[ 2330.331162][  T627] ...
[ 2330.331171][  T627]   lock_acquire+0x107/0x340
[ 2330.338354][  T627]   _raw_read_lock+0x36/0x50
[ 2330.342945][  T627]   __do_wait+0xde/0x740
[ 2330.347194][  T627]   do_wait+0x1e8/0x4f0
[ 2330.351355][  T627]   kernel_wait+0xab/0x170
[ 2330.355790][  T627]   call_usermodehelper_exec_work+0xbe/0x230
[ 2330.361803][  T627]   process_scheduled_works+0xad1/0x1770
[ 2330.367462][  T627]   worker_thread+0x8a0/0xda0
[ 2330.372168][  T627]   kthread+0x711/0x8a0
[ 2330.376353][  T627]   ret_from_fork+0x510/0xa50
[ 2330.381032][  T627]   ret_from_fork_asm+0x1a/0x30
[ 2330.385909][  T627] 
[ 2330.385909][  T627] other info that might help us debug this:
[ 2330.385909][  T627] 
[ 2330.396143][  T627] Chain exists of:
[ 2330.396143][  T627]   &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock
[ 2330.396143][  T627] 
[ 2330.409122][  T627]  Possible interrupt unsafe locking scenario:
[ 2330.409122][  T627] 
[ 2330.417638][  T627]        CPU0                    CPU1
[ 2330.423003][  T627]        ----                    ----
[ 2330.428835][  T627]   lock(tasklist_lock);
[ 2330.433098][  T627]                                local_irq_disable();
[ 2330.439859][  T627]                                lock(&dev->event_lock#2);
[ 2330.447070][  T627]                                lock(&new->fa_lock);
[ 2330.453905][  T627]   <Interrupt>
[ 2330.457361][  T627]     lock(&dev->event_lock#2);
[ 2330.462224][  T627] 
[ 2330.462224][  T627]  *** DEADLOCK ***
[ 2330.462224][  T627] 
[ 2330.470362][  T627] 6 locks held by syz.2.7352/627:
[ 2330.475475][  T627]  #0: ffff88802a5a9118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[ 2330.484636][  T627]  #1: ffff88802a2c7230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[ 2330.494779][  T627]  #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[ 2330.504469][  T627]  #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 2330.514133][  T627]  #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00
[ 2330.524231][  T627]  #5: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 2330.533296][  T627] 
[ 2330.533296][  T627] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 2330.543703][  T627] -> (&dev->event_lock#2){..-.}-{3:3} {
[ 2330.549276][  T627]    IN-SOFTIRQ-W at:
[ 2330.553271][  T627]                     lock_acquire+0x107/0x340
[ 2330.559431][  T627]                     _raw_spin_lock_irqsave+0x40/0x60
[ 2330.566287][  T627]                     input_inject_event+0xa5/0x340
[ 2330.572967][  T627]                     kd_sound_helper+0x19f/0x210
[ 2330.579389][  T627]                     input_handler_for_each_handle+0x101/0x1c0
[ 2330.587013][  T627]                     call_timer_fn+0x16e/0x590
[ 2330.593252][  T627]                     __run_timer_base+0x61a/0x860
[ 2330.599755][  T627]                     run_timer_softirq+0xb7/0x180
[ 2330.606348][  T627]                     handle_softirqs+0x22b/0x7c0
[ 2330.612765][  T627]                     __irq_exit_rcu+0x60/0x150
[ 2330.619024][  T627]                     irq_exit_rcu+0x9/0x30
[ 2330.624919][  T627]                     sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2330.632231][  T627]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2330.639863][  T627]                     preempt_schedule_irq+0x48/0xa0
[ 2330.646539][  T627]                     irqentry_exit+0x5e3/0x670
[ 2330.652782][  T627]                     asm_sysvec_reschedule_ipi+0x1a/0x20
[ 2330.659903][  T627]                     console_flush_all+0x7fc/0xb00
[ 2330.666502][  T627]                     console_unlock+0xbb/0x190
[ 2330.672754][  T627]                     do_con_write+0x5125/0x5210
[ 2330.679088][  T627]                     con_write+0x24/0x40
[ 2330.684835][  T627]                     n_tty_write+0xd78/0x12a0
[ 2330.690993][  T627]                     file_tty_write+0x559/0xa20
[ 2330.697327][  T627]                     vfs_write+0x5c9/0xb30
[ 2330.703407][  T627]                     ksys_write+0x145/0x250
[ 2330.709492][  T627]                     __do_fast_syscall_32+0x1dc/0x570
[ 2330.716343][  T627]                     do_fast_syscall_32+0x34/0x80
[ 2330.722849][  T627]                     entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2330.730830][  T627]    INITIAL USE at:
[ 2330.734757][  T627]                    lock_acquire+0x107/0x340
[ 2330.740827][  T627]                    _raw_spin_lock_irqsave+0x40/0x60
[ 2330.747597][  T627]                    input_inject_event+0xa5/0x340
[ 2330.754113][  T627]                    kbd_led_trigger_activate+0xbc/0x100
[ 2330.761140][  T627]                    led_trigger_set+0x52d/0x950
[ 2330.767501][  T627]                    led_trigger_set_default+0x260/0x2a0
[ 2330.774528][  T627]                    led_classdev_register_ext+0x73d/0x960
[ 2330.781729][  T627]                    input_leds_connect+0x517/0x790
[ 2330.788331][  T627]                    input_register_device+0xd00/0x1170
[ 2330.795281][  T627]                    atkbd_connect+0x73b/0xa50
[ 2330.801446][  T627]                    serio_driver_probe+0x82/0xd0
[ 2330.807878][  T627]                    really_probe+0x26d/0xad0
[ 2330.813958][  T627]                    __driver_probe_device+0x18c/0x320
[ 2330.820811][  T627]                    driver_probe_device+0x4f/0x240
[ 2330.827410][  T627]                    __driver_attach+0x349/0x650
[ 2330.833746][  T627]                    bus_for_each_dev+0x233/0x2b0
[ 2330.840175][  T627]                    serio_handle_event+0x1f9/0x8d0
[ 2330.846774][  T627]                    process_scheduled_works+0xad1/0x1770
[ 2330.853903][  T627]                    worker_thread+0x8a0/0xda0
[ 2330.860082][  T627]                    kthread+0x711/0x8a0
[ 2330.865725][  T627]                    ret_from_fork+0x510/0xa50
[ 2330.871893][  T627]                    ret_from_fork_asm+0x1a/0x30
[ 2330.878239][  T627]  }
[ 2330.880736][  T627]  ... key      at: [<ffffffff99c465c0>] input_allocate_device.__key.6+0x0/0x20
[ 2330.889762][  T627] 
[ 2330.889762][  T627] the dependencies between the lock to be acquired
[ 2330.889772][  T627]  and SOFTIRQ-irq-unsafe lock:
[ 2330.903298][  T627]   -> (tasklist_lock){.+.+}-{3:3} {
[ 2330.908604][  T627]      HARDIRQ-ON-R at:
[ 2330.912784][  T627]                         lock_acquire+0x107/0x340
[ 2330.919312][  T627]                         _raw_read_lock+0x36/0x50
[ 2330.926045][  T627]                         __do_wait+0xde/0x740
[ 2330.932227][  T627]                         do_wait+0x1e8/0x4f0
[ 2330.938316][  T627]                         kernel_wait+0xab/0x170
[ 2330.944764][  T627]                         call_usermodehelper_exec_work+0xbe/0x230
[ 2330.952676][  T627]                         process_scheduled_works+0xad1/0x1770
[ 2330.960225][  T627]                         worker_thread+0x8a0/0xda0
[ 2330.966824][  T627]                         kthread+0x711/0x8a0
[ 2330.972897][  T627]                         ret_from_fork+0x510/0xa50
[ 2330.979489][  T627]                         ret_from_fork_asm+0x1a/0x30
[ 2330.986259][  T627]      SOFTIRQ-ON-R at:
[ 2330.990416][  T627]                         lock_acquire+0x107/0x340
[ 2330.996939][  T627]                         _raw_read_lock+0x36/0x50
[ 2331.003467][  T627]                         __do_wait+0xde/0x740
[ 2331.009633][  T627]                         do_wait+0x1e8/0x4f0
[ 2331.015711][  T627]                         kernel_wait+0xab/0x170
[ 2331.022053][  T627]                         call_usermodehelper_exec_work+0xbe/0x230
[ 2331.029947][  T627]                         process_scheduled_works+0xad1/0x1770
[ 2331.037488][  T627]                         worker_thread+0x8a0/0xda0
[ 2331.044599][  T627]                         kthread+0x711/0x8a0
[ 2331.050671][  T627]                         ret_from_fork+0x510/0xa50
[ 2331.057262][  T627]                         ret_from_fork_asm+0x1a/0x30
[ 2331.064058][  T627]      INITIAL USE at:
[ 2331.068126][  T627]                        lock_acquire+0x107/0x340
[ 2331.074577][  T627]                        _raw_write_lock_irq+0x3d/0x50
[ 2331.081428][  T627]                        copy_process+0x2185/0x3950
[ 2331.088022][  T627]                        kernel_clone+0x21e/0x820
[ 2331.094440][  T627]                        user_mode_thread+0xdd/0x140
[ 2331.101119][  T627]                        rest_init+0x23/0x300
[ 2331.107454][  T627]                        start_kernel+0x381/0x3d0
[ 2331.113867][  T627]                        x86_64_start_reservations+0x24/0x30
[ 2331.121257][  T627]                        x86_64_start_kernel+0x143/0x1c0
[ 2331.128292][  T627]                        common_startup_64+0x13e/0x147
[ 2331.135165][  T627]      INITIAL READ USE at:
[ 2331.139673][  T627]                             lock_acquire+0x107/0x340
[ 2331.146530][  T627]                             _raw_read_lock+0x36/0x50
[ 2331.153383][  T627]                             __do_wait+0xde/0x740
[ 2331.159903][  T627]                             do_wait+0x1e8/0x4f0
[ 2331.166342][  T627]                             kernel_wait+0xab/0x170
[ 2331.173030][  T627]                             call_usermodehelper_exec_work+0xbe/0x230
[ 2331.181271][  T627]                             process_scheduled_works+0xad1/0x1770
[ 2331.189254][  T627]                             worker_thread+0x8a0/0xda0
[ 2331.196201][  T627]                             kthread+0x711/0x8a0
[ 2331.202631][  T627]                             ret_from_fork+0x510/0xa50
[ 2331.209598][  T627]                             ret_from_fork_asm+0x1a/0x30
[ 2331.216722][  T627]    }
[ 2331.219415][  T627]    ... key      at: [<ffffffff8dc0c058>] tasklist_lock+0x18/0x40
[ 2331.227327][  T627]    ... acquired at:
[ 2331.231303][  T627]    _raw_read_lock+0x36/0x50
[ 2331.235979][  T627]    send_sigurg+0x12b/0x420
[ 2331.240751][  T627]    sk_send_sigurg+0x6c/0x2e0
[ 2331.245523][  T627]    queue_oob+0x420/0x4f0
[ 2331.250051][  T627]    unix_stream_sendmsg+0xc32/0xde0
[ 2331.255536][  T627]    __sock_sendmsg+0x21c/0x270
[ 2331.260414][  T627]    ____sys_sendmsg+0x52d/0x820
[ 2331.265365][  T627]    ___sys_sendmsg+0x21f/0x2a0
[ 2331.270235][  T627]    __sys_sendmmsg+0x28e/0x430
[ 2331.275097][  T627]    __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 2331.280829][  T627]    __do_fast_syscall_32+0x1dc/0x570
[ 2331.286209][  T627]    do_fast_syscall_32+0x34/0x80
[ 2331.291500][  T627]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2331.298005][  T627] 
[ 2331.300335][  T627]  -> (&f_owner->lock){....}-{3:3} {
[ 2331.305726][  T627]     INITIAL USE at:
[ 2331.309709][  T627]                      lock_acquire+0x107/0x340
[ 2331.315965][  T627]                      _raw_write_lock_irq+0x3d/0x50
[ 2331.322650][  T627]                      __f_setown+0x67/0x370
[ 2331.328676][  T627]                      tty_fasync+0x2dc/0x350
[ 2331.335023][  T627]                      do_fcntl+0x11d2/0x1a50
[ 2331.341136][  T627]                      do_compat_fcntl64+0x477/0x720
[ 2331.347829][  T627]                      __do_fast_syscall_32+0x1dc/0x570
[ 2331.354779][  T627]                      do_fast_syscall_32+0x34/0x80
[ 2331.361464][  T627]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2331.369624][  T627]     INITIAL READ USE at:
[ 2331.374048][  T627]                           lock_acquire+0x107/0x340
[ 2331.380736][  T627]                           _raw_read_lock_irqsave+0x48/0x60
[ 2331.388107][  T627]                           send_sigurg+0x55/0x420
[ 2331.394618][  T627]                           sk_send_sigurg+0x6c/0x2e0
[ 2331.401508][  T627]                           queue_oob+0x420/0x4f0
[ 2331.407991][  T627]                           unix_stream_sendmsg+0xc32/0xde0
[ 2331.415295][  T627]                           __sock_sendmsg+0x21c/0x270
[ 2331.422167][  T627]                           ____sys_sendmsg+0x52d/0x820
[ 2331.429130][  T627]                           ___sys_sendmsg+0x21f/0x2a0
[ 2331.435984][  T627]                           __sys_sendmmsg+0x28e/0x430
[ 2331.443010][  T627]                           __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 2331.450734][  T627]                           __do_fast_syscall_32+0x1dc/0x570
[ 2331.458104][  T627]                           do_fast_syscall_32+0x34/0x80
[ 2331.465130][  T627]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2331.473640][  T627]   }
[ 2331.476227][  T627]   ... key      at: [<ffffffff99928c60>] file_f_owner_allocate.__key+0x0/0x20
[ 2331.485164][  T627]   ... acquired at:
[ 2331.489049][  T627]    _raw_read_lock_irqsave+0x48/0x60
[ 2331.494419][  T627]    send_sigio+0x38/0x370
[ 2331.498853][  T627]    kill_fasync+0x24d/0x4d0
[ 2331.503448][  T627]    lease_break_callback+0x26/0x30
[ 2331.508671][  T627]    __break_lease+0x6e3/0x1490
[ 2331.513546][  T627]    try_break_deleg+0xb1/0x120
[ 2331.518396][  T627]    notify_change+0xb5a/0xf40
[ 2331.523159][  T627]    chown_common+0x40c/0x5b0
[ 2331.527841][  T627]    ksys_fchown+0xea/0x160
[ 2331.532365][  T627]    __ia32_sys_fchown16+0xc0/0xd0
[ 2331.537481][  T627]    __do_fast_syscall_32+0x1dc/0x570
[ 2331.542855][  T627]    do_fast_syscall_32+0x34/0x80
[ 2331.547897][  T627]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2331.554402][  T627] 
[ 2331.556722][  T627] -> (&new->fa_lock){....}-{3:3} {
[ 2331.561852][  T627]    INITIAL USE at:
[ 2331.565741][  T627]                    lock_acquire+0x107/0x340
[ 2331.571813][  T627]                    _raw_write_lock_irq+0x3d/0x50
[ 2331.578328][  T627]                    fasync_remove_entry+0xf1/0x1c0
[ 2331.584923][  T627]                    sock_fasync+0x85/0xf0
[ 2331.590732][  T627]                    __fput+0x8a2/0xa70
[ 2331.596300][  T627]                    task_work_run+0x1d4/0x260
[ 2331.602467][  T627]                    exit_to_user_mode_loop+0xef/0x4e0
[ 2331.609326][  T627]                    __do_fast_syscall_32+0x398/0x570
[ 2331.616108][  T627]                    do_fast_syscall_32+0x34/0x80
[ 2331.622707][  T627]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2331.630603][  T627]    INITIAL READ USE at:
[ 2331.634931][  T627]                         lock_acquire+0x107/0x340
[ 2331.641437][  T627]                         _raw_read_lock_irqsave+0x48/0x60
[ 2331.648635][  T627]                         kill_fasync+0x199/0x4d0
[ 2331.655059][  T627]                         sock_wake_async+0x137/0x160
[ 2331.661842][  T627]                         af_alg_wmem_wakeup+0x3c0/0x440
[ 2331.668889][  T627]                         aead_recvmsg+0x1340/0x13b0
[ 2331.675591][  T627]                         sock_recvmsg+0x22c/0x270
[ 2331.682124][  T627]                         sock_read_iter+0x231/0x2f0
[ 2331.688927][  T627]                         vfs_read+0x55a/0xa30
[ 2331.695082][  T627]                         ksys_read+0x145/0x250
[ 2331.701326][  T627]                         __do_fast_syscall_32+0x1dc/0x570
[ 2331.708529][  T627]                         do_fast_syscall_32+0x34/0x80
[ 2331.715382][  T627]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2331.723712][  T627]  }
[ 2331.726212][  T627]  ... key      at: [<ffffffff99928c80>] fasync_insert_entry.__key+0x0/0x20
[ 2331.734889][  T627]  ... acquired at:
[ 2331.738990][  T627]    _raw_read_lock_irqsave+0x48/0x60
[ 2331.744450][  T627]    kill_fasync+0x199/0x4d0
[ 2331.749051][  T627]    mousedev_notify_readers+0x6f1/0xc00
[ 2331.754772][  T627]    mousedev_event+0x602/0x1320
[ 2331.759706][  T627]    input_handle_events_default+0xd4/0x1a0
[ 2331.765599][  T627]    input_pass_values+0x288/0x890
[ 2331.770713][  T627]    input_event_dispose+0x330/0x6b0
[ 2331.776008][  T627]    input_inject_event+0x1dd/0x340
[ 2331.781235][  T627]    evdev_write+0x2fc/0x480
[ 2331.785829][  T627]    vfs_write+0x27e/0xb30
[ 2331.790261][  T627]    ksys_write+0x145/0x250
[ 2331.794761][  T627]    __do_fast_syscall_32+0x1dc/0x570
[ 2331.800223][  T627]    do_fast_syscall_32+0x34/0x80
[ 2331.805252][  T627]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2331.811948][  T627] 
[ 2331.814271][  T627] 
[ 2331.814271][  T627] stack backtrace:
[ 2331.820247][  T627] CPU: 1 UID: 0 PID: 627 Comm: syz.2.7352 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2331.820269][  T627] Tainted: [L]=SOFTLOCKUP
[ 2331.820275][  T627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2331.820285][  T627] Call Trace:
[ 2331.820293][  T627]  <TASK>
[ 2331.820300][  T627]  dump_stack_lvl+0xe8/0x150
[ 2331.820321][  T627]  __lock_acquire+0x2a95/0x2cf0
[ 2331.820345][  T627]  ? kill_fasync+0x199/0x4d0
[ 2331.820368][  T627]  lock_acquire+0x107/0x340
[ 2331.820382][  T627]  ? kill_fasync+0x199/0x4d0
[ 2331.820410][  T627]  _raw_read_lock_irqsave+0x48/0x60
[ 2331.820426][  T627]  ? kill_fasync+0x199/0x4d0
[ 2331.820448][  T627]  kill_fasync+0x199/0x4d0
[ 2331.820470][  T627]  ? kill_fasync+0x53/0x4d0
[ 2331.820493][  T627]  mousedev_notify_readers+0x6f1/0xc00
[ 2331.820512][  T627]  ? mousedev_notify_readers+0x2c/0xc00
[ 2331.820528][  T627]  mousedev_event+0x602/0x1320
[ 2331.820544][  T627]  input_handle_events_default+0xd4/0x1a0
[ 2331.820565][  T627]  ? input_pass_values+0x8d/0x890
[ 2331.820578][  T627]  input_pass_values+0x288/0x890
[ 2331.820596][  T627]  ? input_handle_event+0x70c/0xf30
[ 2331.820618][  T627]  input_event_dispose+0x330/0x6b0
[ 2331.820641][  T627]  input_inject_event+0x1dd/0x340
[ 2331.820668][  T627]  ? input_inject_event+0xb6/0x340
[ 2331.820690][  T627]  evdev_write+0x2fc/0x480
[ 2331.820709][  T627]  ? __pfx_evdev_write+0x10/0x10
[ 2331.820725][  T627]  ? bpf_lsm_file_permission+0x9/0x20
[ 2331.820742][  T627]  ? security_file_permission+0x75/0x290
[ 2331.820758][  T627]  ? rw_verify_area+0x255/0x4d0
[ 2331.820782][  T627]  ? __pfx_evdev_write+0x10/0x10
[ 2331.820799][  T627]  vfs_write+0x27e/0xb30
[ 2331.820815][  T627]  ? __pfx_vfs_write+0x10/0x10
[ 2331.820829][  T627]  ? __fget_files+0x2a/0x420
[ 2331.820850][  T627]  ? __fget_files+0x2a/0x420
[ 2331.820869][  T627]  ? __fget_files+0x3a0/0x420
[ 2331.820887][  T627]  ? __fget_files+0x2a/0x420
[ 2331.820909][  T627]  ksys_write+0x145/0x250
[ 2331.820924][  T627]  ? __pfx_ksys_write+0x10/0x10
[ 2331.820938][  T627]  ? __secure_computing+0xe2/0x2a0
[ 2331.820956][  T627]  __do_fast_syscall_32+0x1dc/0x570
[ 2331.820975][  T627]  ? do_fast_syscall_32+0x34/0x80
[ 2331.820995][  T627]  do_fast_syscall_32+0x34/0x80
[ 2331.821013][  T627]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2331.821032][  T627] RIP: 0023:0xf7fc1539
[ 2331.821047][  T627] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2331.821061][  T627] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 2331.821078][  T627] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000040
[ 2331.821090][  T627] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000
[ 2331.821099][  T627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2331.821109][  T627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2331.821118][  T627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2331.821133][  T627]  </TASK>
[ 2332.181651][  T628] syzkaller0: entered promiscuous mode
[ 2332.188529][  T628] syzkaller0: entered allmulticast mode
[ 2332.220222][T30552] usb 4-1: selecting invalid altsetting 0
[ 2332.239539][T30552] usb 4-1: USB disconnect, device number 29
[ 2332.364155][ T8136] udevd[8136]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2333.084822][T18332] bond0: (slave syz_tun): Releasing backup interface
[ 2333.168622][ T3442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2333.258755][ T3442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2333.385875][ T3442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2333.436692][ T3442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2333.670248][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2333.680733][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2333.695358][ T3442] bond0 (unregistering): Released all slaves
[ 2333.931090][ T3442] hsr_slave_0: left promiscuous mode
[ 2333.937096][ T3442] hsr_slave_1: left promiscuous mode
[ 2333.947154][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2333.954622][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2333.962462][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2333.969862][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2333.980505][ T3442] veth0_macvtap: left promiscuous mode
[ 2333.986238][ T3442] veth1_vlan: left promiscuous mode
[ 2333.991551][ T3442] veth0_vlan: left promiscuous mode
[ 2334.166912][ T3442] team_slave_1 (unregistering): left promiscuous mode
[ 2334.174458][ T3442] team0 (unregistering): Port device team_slave_1 removed
[ 2334.203797][ T3442] team_slave_0 (unregistering): left promiscuous mode
[ 2334.211209][ T3442] team0 (unregistering): Port device team_slave_0 removed
[ 2334.636024][ T3442] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2334.648759][ T3442] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2334.718933][ T3442] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2334.730120][ T3442] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2334.787443][ T3442] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2334.798098][ T3442] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2334.847877][ T3442] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2334.858542][ T3442] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2334.957423][ T3442] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2334.969610][ T3442] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2335.031249][ T3442] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2335.043184][ T3442] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2335.098365][ T3442] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2335.109079][ T3442] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2335.202367][ T3442] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2335.213347][ T3442] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2335.330325][ T3442] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2335.401068][ T3442] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2335.442318][ T3442] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2335.505233][ T3442] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2335.603259][ T3442] bond_slave_0: left promiscuous mode
[ 2335.611134][ T3442] bond_slave_1: left promiscuous mode
[ 2335.737142][ T3442] erspan0 (unregistering): left promiscuous mode
[ 2335.761848][ T3442] gretap0 (unregistering): left promiscuous mode
[ 2335.793410][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2335.806305][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2335.820346][ T3442] bond0 (unregistering): (slave team0): Releasing backup interface
[ 2335.829275][ T3442] bond0 (unregistering): Released all slaves
[ 2335.899149][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2335.909889][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2335.924619][ T3442] bond0 (unregistering): Released all slaves
[ 2336.049086][ T3442] bond1 (unregistering): Released all slaves
[ 2336.169894][ T3442] bond2 (unregistering): Released all slaves
[ 2336.232972][ T3442] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[ 2336.243127][ T3442] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[ 2336.255225][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2336.267619][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2336.277633][ T3442] bond0 (unregistering): Released all slaves
[ 2336.290042][ T3442] bond1 (unregistering): Released all slaves
[ 2336.404910][ T3442] m1Ie5n��: left promiscuous mode
[ 2336.493346][ T3442] tipc: Disabling bearer <udp:s>
[ 2336.498493][ T3442] tipc: Disabling bearer <udp:syz0>
[ 2336.510599][ T3442] tipc: Left network mode
[ 2336.526584][ T3442] tipc: Disabling bearer <udp:s>
[ 2336.541847][ T3442] tipc: Left network mode
[ 2337.031039][ T3442] hsr_slave_0: left promiscuous mode
[ 2337.038243][ T3442] hsr_slave_1: left promiscuous mode
[ 2337.049791][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2337.057740][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2337.067596][ T3442] hsr_slave_0: left promiscuous mode
[ 2337.074402][ T3442] hsr_slave_1: left promiscuous mode
[ 2337.080133][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2337.087699][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2337.099345][ T3442] hsr_slave_0: left promiscuous mode
[ 2337.105212][ T3442] hsr_slave_1: left promiscuous mode
[ 2337.110935][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2337.119233][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2337.127269][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2337.142119][ T3442] veth1_vlan: left promiscuous mode
[ 2337.147489][ T3442] veth0_vlan: left promiscuous mode
[ 2337.154258][ T3442] veth1_vlan: left promiscuous mode
[ 2337.159539][ T3442] veth0_vlan: left promiscuous mode
[ 2337.166058][ T3442] veth0_macvtap: left promiscuous mode
[ 2337.171810][ T3442] veth1_vlan: left promiscuous mode
[ 2337.177094][ T3442] veth0_vlan: left promiscuous mode
[ 2337.374720][ T3442] team0 (unregistering): Port device team_slave_1 removed
[ 2337.405869][ T3442] team0 (unregistering): Port device team_slave_0 removed
[ 2337.714854][ T3442] team_slave_1 (unregistering): left promiscuous mode
[ 2337.722367][ T3442] team0 (unregistering): Port device team_slave_1 removed
[ 2337.751291][ T3442] team_slave_0 (unregistering): left promiscuous mode
[ 2337.758920][ T3442] team0 (unregistering): Port device team_slave_0 removed
[ 2337.961281][ T3442] team_slave_1 (unregistering): left promiscuous mode
[ 2337.968716][ T3442] team0 (unregistering): Port device team_slave_1 removed
[ 2337.980279][ T3442] team_slave_0 (unregistering): left promiscuous mode
[ 2337.989128][ T3442] team0 (unregistering): Port device team_slave_0 removed
[ 2338.712624][ T3442] IPVS: stop unused estimator thread 0...
[ 2338.719678][ T3442] IPVS: stop unused estimator thread 0...