last executing test programs:

3.985629928s ago: executing program 2 (id=672):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x208)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x50, r1, 0x924c4000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x800})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r8 = inotify_init1(0x0)
inotify_add_watch(r8, &(0x7f0000000180)='./control\x00', 0xa4000960)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0xffff0018)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000206050000000000000000000000000005000100070000000900020073797a3100000000040007740c000300686173683a697000050005000a0000000500040001000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)

3.358315869s ago: executing program 1 (id=678):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)

3.29492735s ago: executing program 1 (id=679):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ee007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x42000000, 0x4)
recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/190}], 0x0, &(0x7f0000000140)=""/21}, 0x3}], 0x40000000000022b, 0x45833af92e4bbbfe, 0x0)

3.166871966s ago: executing program 1 (id=682):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(0x0, 0x1)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x8b)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75706461749aec00cb00254000"/28], 0x1c, 0xfffffffffffffff9)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$clear(0x7, r4)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x1a, 0xffffffffffffffff)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x6, 0x8, 0x0, "a5b803805fe6"}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'ip6gretap0\x00', 0x0})
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)

3.004501996s ago: executing program 4 (id=683):
socket$kcm(0xa, 0x3, 0x3a)
mremap(&(0x7f0000a9f000/0x4000)=nil, 0x4000, 0x800000, 0x2, &(0x7f00007fe000/0x800000)=nil)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0)
r6 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0)
r7 = io_uring_setup(0x3eaf, &(0x7f0000000100))
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x22, &(0x7f0000000340), 0x0)
ioctl$VIDIOC_G_AUDIO(r6, 0x80345621, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x60, 0xa, 0x40, 0x0, 0x3e, 0x180, 0x2, 0x0, {0x0, 0x0, 0x1}, {}, {}, {0x0, 0x2000000}, 0x1, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, <r8=>0x0})
fcntl$dupfd(r6, 0x406, r2)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r8, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r8, 0x0, <r9=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r9, 0x0, 0x2fff, 0x2, &(0x7f0000000380)="9bc6", 0x5})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0)

1.91368768s ago: executing program 1 (id=688):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb3", 0x43}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1", 0x1d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x6}, {&(0x7f0000000200)=""/101, 0x61}], 0x2}, 0x2120)

1.855574028s ago: executing program 3 (id=691):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, 0x0, &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000840)="b89a24", &(0x7f00000003c0)=@tcp6, 0x2}, 0x20)

1.809650456s ago: executing program 1 (id=692):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ee007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x42000000, 0x4)
recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/190}], 0x0, &(0x7f0000000140)=""/21}, 0x3}], 0x40000000000022b, 0x45833af92e4bbbfe, 0x0)

1.742352079s ago: executing program 1 (id=693):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r1 = socket(0x1e, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r5=>0x0, 0x80, 0x1, 0xb, 0x1, {{0xf, 0x4, 0x0, 0xf, 0x3c, 0x68, 0x0, 0xd1, 0x4, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x25, 0x1, [{0x7, 0x3, '\''}, {0x1, 0x9, "9a3f8b236144ce"}, {0x6, 0x7, "3422c53364"}, {0x1, 0xa, "63fc17decafdb366"}, {0x2, 0x2}]}]}}}}})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x5, 0xffe0}, {0x2, 0xfff3}, {0xb, 0xfff2}}, ["", "", "", "", "", ""]}, 0x24}}, 0x24004010)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, 0x0)
r7 = fsopen(&(0x7f0000000140)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0)
syz_usb_connect(0x6, 0x3b, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'})

1.680706956s ago: executing program 3 (id=695):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080013"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 1)

1.341700039s ago: executing program 3 (id=696):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x40)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

1.177693719s ago: executing program 0 (id=697):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100ac1414aa00000000000000000001a800fc000000000000000000000000000001fc020000000000000000000000000000fe80000000000000000000020000000032000000020000000200020000000000000000000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000fc0200000000000000000000000000003c"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x42000)

1.103626145s ago: executing program 0 (id=698):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
unshare(0x20040400)
r1 = socket$kcm(0x2, 0x5, 0x84)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x7c, &(0x7f0000000000)=r2, 0x62)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f00000002c0), 0x4)
r4 = accept4$alg(r2, 0x0, 0x0, 0x80000)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d00)={0x0, @broadcast, @remote}, &(0x7f0000000d40)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003d80)={'team0\x00', <r5=>0x0})
sendmmsg$inet(r4, &(0x7f0000003e40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="a3a468a207aa8b7dbc95828bd1ded4996e028e9bf8e3113cf7bbc4f2", 0x1c}, {&(0x7f00000000c0)="8dd9684df62d071ee7799789d7bfbfaead8b7a892090fa3c08dfaa81152166129f208022be1c7cdd0db3243b8c58ab1ce1ce646fbd9ca664983716c398b4181a4b76513a0424c6afd3c4ce80bcd52ef6716c18eddafd1370fb7b69a3b5fb1f22b18013d0c31e60b5909b0bf4689a12b721df9e", 0x73}, {&(0x7f0000000140)="9a3747bc68c4fc9406646c93fba60511cad295f371303cca0aee97e081b0845365e34f46e289b93066bf003920f0416655bc0dc4b7fc9d83fa6ef34d2c579210ca91ec17aa8184eb389240f320cbb29c450873d4f3593c4fdc9b", 0x5a}], 0x3}}, {{&(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f0000004080)="49d51f8a22cea39eee5d1e0b3a3a293729e2689e4043c1074b89534baa856b7aaae91e8f8475c87aa6314a6ed20a308a9fb0d38f7d0411ef5f0504b0e02a5031d5ae7499867920db90f6e870feefca66965498f15bff833660a2ebf686e21fa71f3b1e430e9d5d722353", 0x6a}, {&(0x7f0000000380)="0478262ced351011cb8382964a5d79148eb0c8a2a9031f941a43af1736e1e31186bfbaa5db6a73ab55ea221db5619803ab82e5fbcb39d3b65e4343f27d87ac8b92abebd9f7fa047acbc3e938b4ff1b7500844fac3238f96c12dbd59be8df55c677cb59411d2e01ac096acec957c4538fbea895a68c7c48444447adc2ce9ff3f291433a58c07631798150ea14891a5281218e944c4a5c6a6ad4b8ab0d914f964110a60fdd5afe713fbda7aa0122bbde423792bc1ac995a4c9", 0xb8}, {&(0x7f0000000440)="aefb567d2aceddeb84f1cee4aa5e5246f29157e2a788572c9a04cab5be76cdc207b4efdfa9c45923297036805153b9a5d90122367e0421bd8239f9019363a90eb31d376e8157c1f4418d3eacde06816faf1a0e92fac2edebb3055583073ed2a26910e2e650d34d5f762d248d3f24147fb8f6e062f832edd259c65c8c32c8d2c72fd1da9c255c579fc6", 0x89}, {&(0x7f0000000500)="915205a7dc2a934b4440aac6364f4835089e9272bcfd827fd84b2e7ac0184b26d369264cd01751820ac196ed0bc131fec5cb691f5f6563b9bb2ad060b6852ad2a39fdf7ff57f3664f08797a8a7ebbb1c368a4c237f08fa4b8f4b2b7d2b2dcb0cefbe399cfb5373d85072766610167befb2a61364b8c6dab77bc63101b067f5ec37d907d575c6a6d80215076f2b7711999647a35bb9c684b01ef665f24b14b2b4e83e88a504a27a440d", 0xa9}, {&(0x7f00000005c0)="f849fb594ff4f2a803f80d5c71a83c4a9febd73945546af5970668e2f4ecd16bdd5f1cc221a78127a0fa89e19d2a4c8c9b8795d387192e31a76ec1c311a005230debc7ab065fffa576a067de52c2998427f2b7b78bb5fe336a1bc7607f440376dbe40d3e46efc428fbaa314c50bc66d6b36c605a008c2129bc1a76960e8914d124c438df4116193d82b2fa6308ca7c3bc97535dd54afed87d5c0fd67653e0fcb2bf0", 0xa2}], 0x5, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}, {{&(0x7f0000000700)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000740)="d77e24704b139bd7b06426381fcb93d584daa93a501bccb8833e1828f81d75ddbc7d196a76245bd88d2cb03a317f87c9a315ba986945505f2fa2a98b1ae731b8e4d41906d1ad8ab23ca77f1c89a0ea96365439bb55b4cd0cfdf7ba3a16f69ef4cabed6509403655614358fa1758add19f1ee8493b1d1d8565dab43c72173ed73b8f7dc306a", 0x85}, {&(0x7f0000000800)="91663d544954db35e6974d6a876ac42f94446b18ffc005d9a698d7e6e3737f1cbd20f44b1a35c3b250a18949b7403844031a91ec45c85e74430a3d2c0f3da81adc09ef6799d32e8b3a9f01c66a5ce98aff485177035596d2346215f296f69cd502250167a526771d59af5d22c3bcded6955b9aea33358ebffb8fc87002a162a8c0e8d6f8d47b6c318259fefcbc7a8d5bf0fc8afaa2451864ecd65cb3fbe609d77ab53cddf4623dd4422037d5944685125eb8fe54da11fe7c49da7aaa1f01edf74beabedf16660ab1c0de1fa851fc2bb5df08b46edbc33ce6eaaa2c892ecc1bdd2378e76de12a5b", 0xe7}, {&(0x7f0000000900)="755216c60415be0922c77a7c5f53df97c686a8b94104ce6f44da0ec4cea73a3da8fb26cfe6a1fb431b2592d2fadfd860db5b29b60dbd788f9dba0cf16808d2b3f5488f1fbe1f079559399f852a5bb9b9847d3589ac16a31fddb293c6efff6eccebda565bca44a271dc7780c704d6fafb6212676f7ff675c6f358d603fa0d729c4168b42f7ac3c7badc8d1ca45ae138210fdd67c732b9baa29ae1daf85e8a6a2ddc182c6978", 0xa5}, {&(0x7f00000009c0)="42d784f6a5294bf8ef0c86d04bb12028dbcb11bb839a16e639657d7822d24daf", 0x20}, {&(0x7f0000000a00)="e1ea129440879c14a412b102b7992e3bbde2faf9749c714691718c993a20a7d98aece12fe44f6bbbecd3dc190641d43a6e98c1c093e47da5fa849e1b3ba1e08b560717d3d410ec77719e92416e44544602460368992f30cbf91971a677fa5fc1407db27b534379a8b08123497a60a4c67d683033121c310ff6c20bb533cab4b1abe633c6a903894bf475d25597", 0x8d}, {&(0x7f0000000ac0)="7d9e1c493d4c354f0edf09c1e7e7fe258039a8f64afd56cead435baadfc626cc5cfdea6d4766ea7c2c9e143be1def218dcdda1a54a8224dc344c38e4bb05f7c2e056aa82c16ac71da00b35d34b8edfa9386ca194a759eb56d584541f0588dbaab382dfc84cbf5a686f5b4afa729fdf21a78db7fd2cd8cf5b1a4d24f84f1738b704ff43c2f1634b58f27aa70d9ca2cc64ca7dde8ac2e49f12a83a32757033f52245bb6e3b2ee10be64948c4d8a400e31952d285981d46e063afd2fe5458199543c82b49", 0xc3}, {&(0x7f0000000bc0)="a532fc83fc4a40c21e65447e8fdde2434f31b8f0645b655711c6cbf13d919bfb9575d466612cfee93b68036352da609c4afd2ad4e6849ca0acde0c01a0d93cfb1a50500933dc785eb14c23d07db310c4f4ee9013ae7805c1f6c3f32773e59e452326b44f3e9fc50559f8c63cd54b49a28fa08ae917a4d99bebe480e4af559b9211439a5454ce3df5a57ded3b0f63073fa050cab6af55b0fe22a59837db6e8081b047211926c6fc7c09", 0xa9}], 0x7, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xb9, 0x1, 0x0, [{@remote, 0x5}, {@multicast1, 0x6}, {@loopback, 0x7}, {@loopback, 0xffff0001}, {@rand_addr=0x64010102, 0x5}, {@broadcast, 0x5}, {@broadcast, 0x9}]}, @timestamp={0x44, 0x8, 0xf7, 0x0, 0x1, [0x10001]}, @generic={0x44, 0x11, "9e7c0c309bb2ad2022e006b78249b0"}, @timestamp={0x44, 0xc, 0xed, 0x0, 0x2, [0xffffffff, 0xab]}, @cipso={0x86, 0x6, 0x2}, @ssrr={0x89, 0x13, 0x8c, [@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010102, @multicast1, @broadcast]}, @generic={0x86, 0x4, '.&'}, @end, @ssrr={0x89, 0xf, 0xf8, [@local, @loopback, @empty]}, @end]}}}], 0xd0}}, {{&(0x7f0000000e80)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000ec0)="4c0ec2d1e4cd9f1432bc68f9cf99ec6b1ec08081d88626b53164e88e655231e68cdfde55db93f26b6ea636532785a3d6367cf5db8c9491b92c54eb1544a1dedea6ab7a6fc51fa0ab76719eb1ed0affb0c3ecbb2357b1d4c85926c93be91966321bd5bafad2722e755620e84f03ebec01cb0d88246850ec777c865c412c9f41f018811d483bbac0f42e305be01e8e5b6f10eb2d8c653f32e93222041c5a337148de6b5d1f7c842b4f277e373ec3be8ec23a090497a33ad2cf3ab4d1d084b278dd5a", 0xc1}, {&(0x7f0000000fc0)="eb1b6d59986a8ce753b70800f399bef40a6023bead788085a15a28909511a42a1fc2de4d7e59327217ca5326cd6c8ffc04adc90000000000000000", 0x3b}, {&(0x7f0000001000)="a17b4ddbc463376f13f5dde8a70b16a0dcffc7894a8d5042206f396feab722ce16317ffa2cbfed0dd2680f159a5200b3a6dad1e436a1f5ea8161b24e4f8c3c078ee3a60277ae6e2da82aaad2a1b4bcbb8a4f4cf9fbb291aed57080b91d8a5df93563a0d476961c41323016fb22f1f16b2872418a5ef6e35d88138a6bc71efc34", 0x80}, {&(0x7f0000001080)="79ef886566f22ec3f1f8c873382f0431e231edd0eeba1a87ddd89f1d969f12fb631b7b29ab277e70e414158e680ada2bac20ddfc48a018457a40d773ba70716ac7e5d3945e9a91afc6f8fba74a6b3fb8171f537d6edf7610c6ff63115b8e6aefef6aec032cb0a1d6a19232217c04c0e3dc69b2bd6e1a4fe55b64a4dc46821bf4d8bc7d05115e4dbc195719fcdbca110a9a728e16", 0x94}], 0x4, &(0x7f0000001180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x30}}, {{&(0x7f00000011c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003340)=[{&(0x7f0000001200)}, {&(0x7f0000001240)="3e3f5f7324cfc5ba33fe1a49d63cedaec3768da2b88adeb97ec38955386cc8787f8d1a94edc37e8d6e1ceb0e2e6ff9a7a50a6c243c4add7a0eeac78aa8fa05cf978347e2afd1cfc1030634f6cc9d1ab1af992d41fe9bf11086d026331cdd507b37d0a1cf9e73eda7f523d28ea75e6e9fa825868d9b8bd9b9f6c3cf2b75a1f2e61198d7172fea4963dc4c5a2276fee597a404327b0be5fbded9c1563f6159f09fc731f0b7107cc592a7fa780c4e83d84ffe046b360f4e3fe7f4a922d99d0f07490ad448ea719d7e9b80450e2b9030f5acdd0e741d9eaee0dd2656c7a7f631d7e2e3ff34f6b2621616b62d77f40bf9a3ca1be08fe9fe4dc1e3d599665e9fff556ca175d6e7e0fad919bf8652ba685f27ea9fcd3c6320eeeb4fc6191a29eb4c222e14942cf4df392b5a075a88ec8da780be55683525aa8da07e54f867785f709069e014f524470b610ef909168778b5cd6edfad1d99e36278aa93e73cd6ebb61f7c63fee8ba7e0629d5b68948d4a149867a250972568c5afd3cf4ef1f841f5634df20614311eb94c13c5acb396648b6d323fc0cbac8089b12bca567ab5006d486f9210fcb507840e0387352b0dfa4c84b1f62b829b92a49acc9c38a2b66dc3c3df2d6dbdc0b53a6ee51e357c49d02483786b9efe85d79daa858c62d65eb27d9d10df1584f4c91591f5148ee3b9a3b55cc6991a9f82f9dfcce55cecd4cca717ad919dbe2dff3fb59dc2bd2c5045362ccaff742420808085cfe99fc9bef0578d67a76d0fa31e13f677107449ed6972ffcaa70ea2eec45f0ba043d64a2cd1703706fedd91057959d6b19828bd5a4cd1035006014a93311afe271b4ee9ba6228894e90cad3e214269a81caca8ad311312d965e2f2f1a0a1445cbfa7983fdf80416ac20608409d5f190ae76c59dffd4df419fddae98c867f5cc80ed0262255e1614d856ba643ee699ad85d16c2d95d77ed218635924f51c9ec6a5067099986cdbcf44383f00488c82c17f1a1ed9518d3c54bdce6185d6978972c60e514b3833a3ff42e481e90061848c23d85a52150dcea0d70751123d45a328c38f8139e2d9df42cf4949a826108ac628e754f47da9a4e49c9d81e4618ef423a40d0d4f59ea1626915bacc8a2d79a687f77fdf0bc780356d8258854418d08f2045975e0b45cdc906df8d6f1e249ea806d0ba6adb97d811a63b8bcd68fa55e25f4eef1bf23343cc65a1a1d6eb90140b88fb313a40560e82af7e89d9e9a2423054f8e3c6c2d61c5f35077a761fe57fda70b6c702202c6d28c128176e3e6648edba893b64c0585dbd8482deeedfb0cd8bbdd608d93daacd972ebc6518c4ddd1cc1382f0feffaf492e0d9de9347b09d0cf163f07f0526d2716436f698c625b15222954e5910c1a3829fa2afc475b6e540d5969bab04e19cbf013182b54d9590eb45b7ee2ec507256b170069285dd744c9b12c5ab4bc47dd166404c574cc43b8b51582c52ff7badb7d78c3ca0b3fb516c95308b24279993a1ea99f0cea9b4e8a6544ee0bead44f7ef59077b74b0d490aa2aae718d859aa6802296707037684ec29a765b9f88b7a60853eac0166dad5cf5aebe8a21b5204595107c5ce3e4def499700a22f8cd2a45cee5fc264e840bcae1a9a15c3c819c5a051909a5f1a86365d53adead1a6acf372fdd97af0128c5d304b3073c1410088d6992bee5978722f060affd72c4a4805f3262813a69a43a07467ae9bf2b9d2f12c22293ef90dbd41d4e2d8fbed747d0d2af91d84978aa2ac274200995aec58f5a0f5127d41489cddbcb1c1c298fdd05307b19767fbe6e4343f3e7117141bc4ac8607737a699e1d7a761b6eb79cf44d19139c6a9c33c5cd58c67a343fa1ae8184f7302b47254fd1d74e999f515a0d7aad3d39619e20e5fafcd306992d485e0fd21e1fcca7c8d97852fc23662a6852bb2379aad172a0af29870fb2529ecabe66251f4511cc2df5c869c9e30ef8e5f1653c1a8ff2536296e12589b206889020394aa7b3c6754ab929ddc5a01ee39ba47c66a240cf8971510cd010ddb0b9917f601a849d618237c6a231bb56301f65806444c5ace335fbc821836fbe9ab2ead05fa8ee1e1e00a1453467c379b72cd85ee734c71f72a0d66afc054f7bee357c0f8733dfb71b9f0b8b61072b02fa945fa6e1eec1794d305c3f43a9b6688f32402cd88d3c7aad5db97834c14100669016f406b94f66d1521da14eba77777f5f36a21b2f8a87d35134f9eb7ebaf91f8288b270350796d2db0b9af6c71814202b0c6eef176c4e6ae4436e7b8be828be875c0d65254d252035c026b0bd1cad4fc0df149a8849ddaf96f77ce2e24c253527ceb27941929808ebd76daaef232cfbb14b6f9aaf5ac41f0f4dfdd57b8adea00273746fa830482b8db057f23470608737bbf54ee478dba7c69cf7d5f909b8437aa21ce9c0afb33972f9029c618ca74ee23ab784cda5cd62b17449a77b1a7050ca4fbd74bc973de082f8e201e2825d9f7ae4e224979667b9c1bb5c914968fd66cfec29030a31b9320bb187e8a1425b76cbe5602fc877ed57a6a8de5e49a4b63fab8c8832dba3548e43f80d18a928ef9c6959f9f532db7895ca5fcaf313ad40735cd3b3af4618a81c6aebe79612c0bb927a6ed1a8113a1a041423a878a378e9e6b928ecc1e6c8f3a656db3792aaca593fd29310b9eb3cc09f89c3ed9126d88b64ecb52c3dbe24a479e35cb4d5b96c8054e6c640376071cddf3e2bb934e978b28e55beb60cd7e8bc523fe538fab87213fbe85073468db80ceff46738aaee57e69aff9a7718c88f4a4e4875c68ed5ab5c470e3918320915b18f6768b16c66549b9024e3aff3af4da820c548556f312d10f8f0ea79082c705db33b3c22cfd782a1313b2f6158c6d855f13b12c83ca22719a6f84f5c438797934b69d253c993f7827aec4c59b4e5655b13536eca51be084f691a7bdc3120e9c1653f993c64ec22e01c64c8412ecc424e197c355bd0429f8b85ef6c6af78efd344717e65cfec115bb5fe21140b0799a774a604367422f0c081c36e5f169fe5166516fdf0ff8e3ab30f956c6a9c9f9420e12ad3b02a818ae47ea9b8ec04bc835f805bedd483380a27c02eda936853ef74498ead912705d0da8ed9ab4addd69164390a5ae60c4d2d1309b47f5c5a883a2d832b02b17f5c78ba7a77a14350f62a63ed135b558a8cb0ae07405c0a259d4a12ead56c513a09f83505cdb847e4f4e636ca76ec32dc0fa0fcd137c655a113864abeb73833e57304819e8fd206e45c192701c8e22f8b1366a6a944915392ce34ad106346c6ec5463b4674a593d1175aa2d81c87ad16456c2e6909a8d7f098c86eda445e11ab1ef739c26af156ecd8b5340c1fd4d8c6953930065b72186f7529482f4ff8afdefe412c8c77354241192856f22de33e91b0f6e54bb398cf18cd1d42efba596cf7b921c3479a5340cbdca561e7d862783e26455911a4be5f3e0664604262f1a6735af44c34f661cf5157bf58fb68cc8351c5f936f45216777684966cbcaa7bdd411b8f3c11033e68afa0d5544261f69dcc4ece42f0846c9641e3240720123dfa8b12055b6fc73a560802db92805cc90ffa0d295211b60b919146280ac5ac9ca7bde6430e0bb573efbbd7d945549042ac3e2caf16e30973744936d51be0c89244a1de6c82b178cd61474232a4ca387ef5d8c519e1db7b584597706502d39d64ed0c47628d2769f421d01d092612058070e182a1987afd8a62afb3a11b2537329d0578bc52e6fe9ace5be70ccc9389125c6962f5c3a768c38f07267e837a458cbd905fb9364e662f74f039b6dea81f5385d1d3dc01dfbc52947f882ee38b640dbe4880c5d0ef01012946cd03a8b76a594e954460bf9c2707b28fcae236936bac23d570c201532b4817e174e60cce1c897bc624c6b03567d9d832a8f2e366ffad0935d4ed062d8c132ce20a192c1ceeff762e1bb4815e5d6070eb370a103b6b35eb80471ac23fac6ab96f0a6c7b9b6b4b0d7c90b783a953ab49984f7ab17804cb6a91f5b856ce5d1da873abdd03fd268dfaed7cd94d06c7397fbb1be3614220fd82a668587a3eb6ffd694e5e3c1aa426092bdf6473fa093cf4e431881b5118588bed811cabb81782df8b861562137a36a2b5e3bd326f72003c3eb4f31ddc2c7f57111bfae3c384d0c94a661d946a001e2a2f30c7e223ff73e201dc898912306310ea4c91d9e7cd1134f6d24bc2b03503cd45381b0cc2c5119709e600522e8b00a283cd660ed36d17958cbb811d45476aa4de4cc561db4fbfa60e4feb7d5c727798124f7f81e4a88a895b4d81aeabbc967db3f7b3dfebaebdb4133567a6b9f0e8572c11257f977c01cb1d89a900588f7fe87a1898e0f245613e13e0577192607388c18fbdcd896d7bc5aea7d93bd237e9287a96038a8db2af36f9b97b30d262b11090cf2c84914411d318286be63be0b30f78fcfca6a204a48912ccce0a96e46fa2e78f10442e524838b261c5dd6555431b6eb8728adb4f4ec672f9d8d36f9c9e81bf9babe849fb4815b162de3fc1631cdde463b9179a79092a4150b64ace414eefeea6599a58c34291e3d16feba96b38712814661889bf743b2f31e4fe15235fd324d1fd497bac72f75679b2c98bbfb0c739b229a0855fa50707f4a4b9c29e1343a9dae02a473e460faaaabdd6fe51aad4b6500f9c7daad1d282dd3bb964ec987b05bf55c1cffcc05221e36ff31c5e84d1ab731d1e4108f82ac7cbad12361252bc408639ae13a7c6e056614124535bf830eb0efac023060bfeef3ed50faacc087d85c96666634ee47d579b4c3dfec15a13f14c174269674b1f8788ca6e9def3e6b14e9a920a069af3b7ab89488c14b94466bf3084bd96906e1bca90ddd5eb10ced3bc93ddf70ad2ad50130c917a5d77b4d588d307c54bc9344c76f98f362d13b464469ea5c020a7673789f8dd1eff54a79cf531953a395b726c26cedc00402f725f344bf1e2f0c9f00c24494f7784cc514b6e2036cbc7ce9b1ab49978ff60a17c1e23496ed255629f06d25890eb9e0c8427471bc042abb2048eb3433cf0762619521472af66a8edec7a5ce9febef67b9deb321cb1787e193ca3922369e7e1d01089e1182f08b589d85e549e8f35aa0b6300906e814fdd24dd52f42de9d96caf40b7f6a8fdf68ae90664b71ec80cc414abb7539a852152103f8b3bf41062de719862417ccafbf6b3368a9308822fe1cd7b984adc99c6502a8c21cd12a26e935d455d528c091b8552eb58996e5df1448d987833f53cb911fe3248f7d619c7a56e80b1c8511c1c06690ab6d3256d4d415e1b44340108c61a793893f47aa24b55e973209e09847a5ebcd6988884a5216481e65de66cf9b6d7dd312f99a18039317cd84b062cb4d6805929a138a8959f312e7fb249c4b30672f806b412370585007d0b7e8cd0b15c76c4c041a5b1fdd3b3fd489a98760b4b6dfca0df989ccb50f4e3bdeafb06b47c3fad8ea44ececc15d2fe43bbac8b207503160a5798a02ab916de4600be9302f5244e1f77fec18ddef409faa5b8f070d8939801343872b516c65bc507acafb784ed67325db23b25e64b2b8c4fa41350db8b796fa345742bf3551d91740bd5bdd442ce2fe245df57d82e265c064d0e8e497c4531ef35ea690ac1dc55f50eaa5b61a769d3bbfdbba605ed46ad95734c87b280b86173438a1f3c31381f59ded60b1f610e20d41d4cf6c7049a40225122b72b1abcd8a139665a8032235592e1b453f499853d443c3b2bedb0e652611e0de1f0afb4a590aac7deb2a2f592c65", 0x1000}, {&(0x7f0000002240)="3bdea3f80bcef45f4d9a819f0a0220aeaa7e930f70071b24df3265c8ce69a590c055df8c528d804501d463f2c0b31c28c4acab8434db7be2cc74f0c66f51b6d75d7922cdca0398bc8b5ab059d1c7", 0x4e}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="35917d374c2000d33651abbfffa0d699fe6ded7c6b60d7481f8445292941d5aa733f88bf8fc181c8ba9158b181309465466642f431b8effff5ac1a342d523fe38f90bc", 0x43}], 0x5, &(0x7f00000033c0)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x54, 0x0, 0x6, [0xfff, 0x0]}, @ssrr={0x89, 0x23, 0x8b, [@loopback, @empty, @local, @rand_addr=0x64010101, @loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ra={0x94, 0x4}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x60}}, {{&(0x7f0000003440)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000003b00)=[{&(0x7f0000004000)="b6c7b635e984fba21f65d0e331112d3a7bf05fabac9190aeab1b8c83181a0ef861dc3eacb852ea90d085e8267d01849251a15c1fdff27a8ef60eb164b426efeed2c5488d88a9503530ea97047e3f90b4a60f025ca225e919480d814bfd949a953f7a412f673d8c70be1005c24aed1711840400000000000000", 0x79}, {&(0x7f00000034c0)="06bfa2061148f07081020365ba5cee5c8c61d8b6cf66e3291190230ceabf8b6ad48ef489f13d746875ead13552998a08683a77edef822d2b7bd97cce7091c68855937e0b590f5607aa4ac5d4a86a68b8d2f0cdcc4dabb335331f93b7695ed6885d5a8b4d8bfba8c472d2106056ff5eb06456350e5525dbccc93fe47bd415fe70e2d91e8cf9e21c14e8368c1a2e7531e92fefad6f13cfd3d90acb48f1a20a072f43b7cd411cc682f6975e86d8b6d7b6f741f083200504c72f", 0xb8}, {&(0x7f0000003580)="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", 0xfb}, {&(0x7f0000003680)="6f21fce0f9fd23c54334b9b2823c145048f43173ebe1fc3614c82a9cc8be1b824dbb320ab9fdb1e30b69605d118765fdc27bdeec04369ba8411391040941407030349507ee0919ccd612e4b4cbe6061a28acc72f5219727a65b706ab9496293f29caa9ac7e74747c478b8d0aa3b3b10c9552d8d02beefc6c1c5358d4a8ecbaaa455f8f79fe9a43c45e9dd916b96b49ba9b190b3121681fd26f6087c19efb6454b3432744216013929b365497e6f19f627874c70593ac93f79f", 0xb9}, {&(0x7f0000003740)="dc06663f99b19e546dd20103b08b23067eafd9540b2212ae521cc02fcc012bec6cd4d267d522965eaa3713c68075c66113b3260fb28ee8a46c97f0f2583a816696dc63b3a872c709cfa4fe4495fded15f850831ec9d077fc3faa6279fa5289de8d4e055335c3c847725cc4d655a0c20db8dca6510e67eaa83ca22da1907a7c3030eb923045b31de8f3337952768230578600d99ff709ea6dbde64a0a50f617e97bfb2e2615", 0xa5}, {&(0x7f0000003800)="2de957a1a59392485bb70c9c52ae3d7d3420aa3269641456e0dff46430f0fe5de9a39baab7bb19a5e4602cef4aa03363657731721982abea8495a88d8bcc994fd823f16c5fa04c487d4467804cde99691a0a66df03420231addc32470a1b3366e46f11ab0307edb4d28829cf6c32cc3b239e130b19e28dea5bfbf872a23adbea2c0b9f3585b5b445f85ad6f9f73e2f3e6b7d2f4309ce6a477f7328361c5c3338ab025e72f597335dbb455207673d552f37436000775e073479628a70dedf988b5434ff76b5659232341ca7597901a77705a45d2e43a75d6d897dca6091486bcac53e2d9bd54b5d245fc4", 0xea}, {&(0x7f0000003900)="f0ac3989de3d2ab490d2bc68d2b949c0f4e9e46ae1ab8e3e09a999258f4c761a47bed7cc291f6c6acf2f5b077639595885b9f77ae603b59bcac225dd45dcb6e00edc0294844cddbe48bf23e725d15d23e0a7226c7e440884fe3677d08aafd03953fcec684b9d5623654be1dea784914bf68b17de8e86ad6a914da6e55ee8c799e2eb5f55e1dc2efe5cdc95a08d33", 0x8e}, {&(0x7f00000039c0)="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", 0xfb}, {&(0x7f0000003ac0)="b79740d502f08c93e91802c1f6cd7c7d0f615f114207d87bf3", 0x19}], 0x9, &(0x7f0000003bc0)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x33, [@empty]}, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x0, 0x4, "5e13"}, {0x7, 0x11, "e0bcde4a4636f6eafd05987c0f988e"}, {0x5, 0xa, "15445ff31985bf80"}, {0x0, 0x11, "f5464ae8812c264a5addff7bbbab4e"}]}, @rr={0x7, 0x27, 0xc9, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010101, @multicast1, @empty, @empty, @private=0xa010100, @private=0xa010102]}, @generic={0x7, 0x7, "e15a94d591"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003c80)="11bc0413173881af74398b5331ab0819dd0a85bc4ff2b846b446c79da8350c42bf75cc0cd9fc0953f52c58121a11b51dd2449b5cf980eda63b3e5dbbd4a4c5736291a427949ad55a4ece4bdca93beae6c82aa05db683cb8f860f5c7a2acbad078cce6b935c126690be9adca3fac3349c1b3a28f1f4ee662ce1b2c9a55a2476721732ffc3a83d9f281225e95ae12e1c9dcbfd1fecca50161cc386ed52eb60da64356f51083d6c2d06d356dff5f87f67a709683c9a3ffbed", 0xb7}], 0x1, &(0x7f0000003dc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @loopback}}}], 0x80}}], 0x7, 0x200408d0)

1.044126698s ago: executing program 3 (id=699):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1804}, 0x8000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[], 0x60}}, 0x4000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000001c0)=[0x0, <r3=>0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, <r4=>0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x2, 0x3})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000340)={r2, <r5=>r4, r3, 0x0, 0x0, 0xfffffffffffffe30, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, <r6=>0x0], &(0x7f0000000040), 0x4000000000000045, r5, 0xcccccccc})
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000040), &(0x7f0000000600)=[r6], &(0x7f0000000200)})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x80, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0)
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x0)
select(0x40, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x1, 0x3, 0x7, 0x7, 0x8}, 0x0, 0x0, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000001e00)={0x1, {0x1, 0x9, 0x200, 0xfff, 0x8001, 0x3}})
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0)
r9 = socket(0x10, 0x3, 0x0)
r10 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x2, 0x408440)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r10, 0xc06c4124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)

949.707596ms ago: executing program 0 (id=700):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

847.164508ms ago: executing program 0 (id=701):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2c0841, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000100)={0x5, 0x0, [{0x2, 0x0, 0x0, 0x5}, {0x76b48f433226e54c, 0x5, 0xe, 0x0, 0xcdd, 0x2, 0x10000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0xc, 0x0, 0xa, 0x7fe}, {0x0, 0x1b5d, 0x6, 0x1, 0x7, 0x5, 0xfffffff9}]})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r7=>0x0})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, 0x18f40, 0x2200a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080400300240012800b00010067726574617000001400028006000e0003000000080007007f00000108000a00", @ANYRES32=r8, @ANYBLOB="d36ce985e769111900000000000000"], 0x4c}}, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000440), 0x400200, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100677265746170006f6a2f000c00028008000700ffffffff0a000100aaaaaaaaaa000000"], 0x48}}, 0x0)
r12 = socket(0x1, 0x803, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r14, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00280000012aa4105b91b37a000000080001003b3e6b3a7f59375459ea7279972be04ca21ecfb1b96e3200dafcabc2a25091c407260f3c26ce6f60906b5157e03d1b19cf861ae477004c39da313d", @ANYRES32=r9, @ANYBLOB="29c0a90cdf75541f9c6bd3499b65c413e860cb3e44ff38a6a5165c22d5ec762a66e83c8916087a942e1bedd01dd5f4a9039dc2eab566272a9dbf4c94f64b179419cf342e41c2751bb3f9f5789625ca4b539ca253eed64ee41cbcf4fd9e62f0cc1f501521f10af22adda6", @ANYRES16, @ANYRES64=r8, @ANYRESHEX=0x0], 0x50}}, 0x0)

811.797593ms ago: executing program 2 (id=702):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00020000000000000000000006000000040100000000afe274d9da000000000000000000004c8a169cee4fe972fb3f9ecae1d0419011fbcb6133383796a098d74dfe1f561a4affb0ad0066fb9dc1c4be4bb8ccb24c6e11e563f0748ef1bbf2f590fa34898417fef46f4795f3bc88fde36ef8d405d77b19cc6680e73c6ae55fe311d6cbf37acb5693360647fbee3e81eeca376dbc3f2f6828204a08f8bf"], 0xfc}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x67, 0x1000, 0x10, 0x100, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5a3b, 0x1}, 0x50)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x8)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x41000)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r5, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

505.736105ms ago: executing program 4 (id=703):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ee007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x42000000, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/190}], 0x0, &(0x7f0000000140)=""/21}, 0x3}], 0x40000000000022b, 0x45833af92e4bbbfe, 0x0)

496.327261ms ago: executing program 2 (id=704):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x1, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)

481.043953ms ago: executing program 4 (id=705):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x9c}}, 0x0)

347.15367ms ago: executing program 2 (id=706):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000009001e"], 0x2c}}, 0x0)

346.104949ms ago: executing program 4 (id=707):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) (async)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0) (async)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
r7 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 32)
r8 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000000)=<r10=>0x0) (rerun: 32)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000000280)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000200)={0xd, 0xffff}}) (async)
io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000100)="470f009756a60000c4837904869431808ddd66470f3882744e85640f01c266b8db008ed866440fd32c25f0000000b8010000000f01d9b8010000000f01c1c74424008000c0fec744240298fb0000c7442406000000000f01142466baf80cb888e07389ef66bafc0cb80a3923c9ef", 0x6e}], 0x1, 0x4d, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

268.885651ms ago: executing program 0 (id=708):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e00014b603f640002000800000000000000000e000000001400"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x2810)

268.503026ms ago: executing program 2 (id=709):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

205.663668ms ago: executing program 4 (id=710):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8008000280f10f0500080000003e1200000800"], 0x44}}, 0x0)

204.793016ms ago: executing program 0 (id=711):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fanotify_mark(r0, 0x1, 0x48000004, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0x3ff}, 0x1c)
listen(r1, 0x0)
shutdown(r1, 0x0)
getpeername$tipc(r0, &(0x7f0000001100)=@id, &(0x7f0000001140)=0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010006000000207d1eed2c000000000001090224000100000000090400000103100200092100000401220500090581194b41c3c4a1"], 0x0)
syz_usb_connect(0xb5f675792fb9a0c2, 0x9b4, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x2b, 0x2b, 0x4b, 0x8, 0x83a, 0xc522, 0x5f74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a2, 0x3, 0x5, 0x1, 0x80, 0x1, [{{0x9, 0x4, 0x1d, 0x9, 0xc, 0x4, 0x96, 0xfa, 0xe4, [], [{{0x9, 0x5, 0xa, 0x8, 0x40, 0x5, 0x80, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x1, 0x8, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @generic={0xcf, 0x34, "8b857a095245750625bce9a6260767380b41dbfeabf362dcdb5304fd3f6e3c42228cd4d67a1a8545a230bb65ebd102d13260ef4c86c3dfec27de272eb20cdd3630d5d5ebb1f0ae8efd529ef1f1a054c879f96f8c9248f00e976c3f7a117b716666aa95c22efaebd710995a5b3182494b00eeac76210ffa2a3da92de4e6408ae715260b857c60004ed13396e259e3cdc93647455a02160d0eb57e5f52a5a28e010f08b7e949bdf2a06dc3d5428c1f7eb94b411c23af53574d2f38465f5fd25ca8745158df1964578969626899cf"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x8b, 0xa, 0xec}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x0, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x101}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x4, 0x0, 0x2c, [@generic={0x2d, 0xd, "36b2c99e8a86d06abf608da69f81d58f9b6fc14748b726fe862def86698f03acf62806fc6f745dbbb50301"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x1e}]}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0xf7, 0xf, 0xa, [@generic={0xc6, 0xa, "5d60de76d33ba7a8a5eab4e98ffd32725ee8e829502563323a90c068e0f7420921eca67de2c01122168b3ad2a83d26cc34b469249140ed5484ad3d882e5a8d8ae1c055b5c34b541152fdded80529b8018556cc5debe2da260c3097c0009c0652333f30c611ba700c6f75faebfe3e4bf1630ba55b6ee2a406550ad55eddcf893b9ae845b39f716aa2754cdbf88af8586dc17db3b53cfe14202c8af3d9f3a31f040e2bf39159ea638e418e7425abf6279001861fe15bc8182b1a8b28d41175e703325d4d06"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x4, 0x7, 0x6}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0xf9, 0x5, 0x81, [@generic={0x27, 0x3, "424699ef1c37dfb1abe59da8d77159e83aa1513e6718afd5660dcbcdb9196a739c2651dfb0"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x3, 0x9, 0x4}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x1, 0x0, 0x8, [@generic={0x25, 0x6, "174dcb3e98939f0322ba2ec2654f8f5e4287a7ad59fcdbe03ff2057682cc82c1baa102"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x1, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa0, 0xb}, @generic={0xe9, 0x5, "3f7c6165408185de6204c041ca1c3677376889c5261f6dbfb4afe914c52a272b8e6079273d180516cbaca998743ba484477c776218cd26abd69c9c135fe5ae1b5afb648c745b9c7f5ff04c2faec0c3d73525df574f92b2e3b7de7c5a65b013f36d16b5871200080ee78bb749b52ed7d0f953a062871a91da07d930a04da2c7a66d6cc8ab3934eb6d00467c25d699fc18f565bff233113fd768ac0498bfe25a56ed2b3f1081c333dc454d9f21389c6954dc61c2206c202c478a23bf54b11b472ce421769e50d4c1087ff94a765c44aafae609c67afb61fe117c780684fbeb89369d33df79286e02"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x4, 0xbf, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x4}]}}]}}, {{0x9, 0x4, 0xdc, 0x9, 0xa, 0x19, 0xb0, 0xf6, 0x1, [], [{{0x9, 0x5, 0x7, 0x3, 0x200, 0x4, 0xc, 0x3, [@generic={0xa1, 0x22, "05b8a202d5f240e6884adf28e58f31a6f2bf2d49d53e7e02c9602aca23101051f888654f45dd219474d63dab675f2bfb3ca7c8e5af7f2a65cf3791b6185ed5fbca17468df2fe27174c996b09e15539f42fabc3b7f36f1012c79761e069d314eaef2b531619886fe2142f1ed1bb40e54102db26d1afecb2569f8f1b54ad58f19b48b7c7ce30d3e29be29dc4b7de16deebb32ac62fa368bae2975f667469c73a"}, @generic={0x7b, 0x30, "014c1635dc36f9d6f50e1653f4e5cdb03b8cafde15d0e7481c17d72fea387a10ac64309481be7068dba4ffd3ec744af7a66e4e6bd591cffed1f52aa6af965a424d1da01dcefcf00884f96b067bf132d9100499e2e05934d391b301ac4a8d8891e16515a00203a9b6070b3147037bfc2f58ec9e168bd17d046c"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x10, 0x4, 0xc, [@generic={0xed, 0x24, "0fbe845c437910281f5b81f6c12b0b68cb00a4175855f72aa3a29f3a110920b7b19599bfdfc5c1a3cd8130654ee0167f3e1bd08c91a21fc49676f7c7594517d4f59fa4f30e4155a6cfbee21257ff4e7a55080728f2c4d5db0fdeea8a34bd7956c225e1601d6149abc255962f26ac561b9f08fd5dba5fc812399d2c561c54e333a54d7463cab1a27eafb7bf1b01679cebf47aa660c617ef519660ebb14e5126f8ae7b0413fd29af2c878e38c08aff07bd25f233c4ac09d418a6aaa4cfd9f36841cdee860fa6a9a7a3646116e32712687259c35d5c82d67f35891dcf6c604f27ee8ff22dac743f88d5131567"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xf, 0x0, 0x8, [@generic={0x15, 0x4, "56c93eb2c05a4f835f9972ff836686f2d2fd27"}]}}, {{0x9, 0x5, 0x8e, 0x4, 0x20, 0x4, 0x7, 0x6}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x0, 0x9, 0x2}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0xb4, 0x5, 0x10}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x9, 0xd, 0x40}}, {{0x9, 0x5, 0x7, 0xc9f8b7fc5690cbf7, 0x3ff, 0x7, 0xbe, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x19f, 0x0, 0x15, 0x6}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x7, 0x5, 0xb, [@generic={0x54, 0x21, "8a5e1d742ea30ab3ad238037c195d3f8ba175c2c237899b0f07c8a2baf38252ed1669a6703f5c586da7820a1ec966082eab450a070987010025e78fcc13189ef74f9c07eca3018508f2c7a3f12abd05e7eff"}]}}]}}, {{0x9, 0x4, 0xa2, 0x1, 0x6, 0xff, 0x6, 0xd, 0x6, [@uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x114, 0x1, "8f602be68c"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc, 0x84, 0xf6}]}, @generic={0xd9, 0x8, "7fed50d9ec901b117c941ed1d5a178596e7efef4dbdcc99a55b5ce8c60a2702c3504c39314e33cf07be387188d76e996ca134e6fa641b26358cf981d499fedb6e31434aef16f6294d84c8e7287269eb6ebfaff4bacc5dac64ccdb5201c904fcf8eccc5512d94e3978a722558e33812d6b4656906f5eba50c78ee0fa2da18493b8236969e5da8759c8ed45bd0d372db00fd7896b8d86f93416ac73980a24f4b85ff218b6f71f771d8b3f30260cae7f46f9bd0778028b87bc17120b9c84587f0a851b748abd4f6f2b9983f71e3fa731b1ae0aa1d0da30af0"}], [{{0x9, 0x5, 0x0, 0xc, 0x10, 0x79, 0x9, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4c, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x8}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x7f, 0x3, 0x10, [@generic={0xee, 0x11, "82e317b47fc0c064e6ea4764ca8edfa547a5db62c5a8278124d1a4fb9fd52b8ab18fc4385a5c68324ac6289124b165e0cfd6e1f8677a01ebc39c38cd98d565b6452e55a45683a0367a930803d42327ca3ab4e93a6bf840a00f893aae79b89c2166d0bbd35902d60c42dadee64e5cd2f83413288879dd7fcdb10a15c562e97caa6398a50b5a5632d1dc57a740b4293acc37a077fa1a0a6c2c2c2db14a3dbb683654c0b82a548994b26250517c4af231680ccb5f7be125f34d635015587e799d94e0fc7f946614ed5ce12836df3aad65ce88417ba0aaee3bee50cca090cf82161823a2d9f450fff9cec61e3798"}, @generic={0x5e, 0x11, "17952cd711ab0cc82509f90eabf4040200be2f38bd4decc87e9a170372f16116a95b9d89fe3c9f15f12b314fd17caa9ff5d98b63719fb52b142c4c15217ca213a8019e1a95a295c1ae6d515297b3ea15a759e9647f9be9c74020fb04"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x8, 0x0, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x9, 0x10, 0x90}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0xa3, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40}, @generic={0x90, 0xe, "710b44907921105d83a827b61ce507fb90863c78ecb8aec1a79da1091edd6abad96a55800a8c26e170efac5431b54efa9ac389f6d47858513531ff13ed5060c49ef8b1c8fe6c55332267a4067a7d936c0eaf4af93fc57b604fd37a2b19cc4228c047c2fdb926323401330677e58743c37cc20023c3800c82ce23d2271f4ff2b232535d768443f93ef8b2376d2069"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xb8, 0x47, 0x7}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x81, 0x5, 0xde, 0x40, 0x80}, 0x27, &(0x7f00000000c0)={0x5, 0xf, 0x27, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x3, 0x782}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x0, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x8, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6, 0x4, 0x8}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42d}}, {0xf6, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]}]})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x22200, 0x0)
ioctl$SNDCTL_TMR_START(r3, 0x5402)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0x2e, &(0x7f00000001c0)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92yi\xd1nc_\x00le\xf4K.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a00000034000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xd, 0x0, 0x6}, 0x10}, 0x94)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000001200)=""/26, 0x1a)
getdents64(r5, 0xfffffffffffffffe, 0x63)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)={0x38, 0x140b, 0x111, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x2000c004)
syz_usb_control_io(r2, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
getpgid(0x0)

101.705741ms ago: executing program 3 (id=712):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0)
recvmmsg$unix(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1}}], 0x1, 0x20000000, 0x0)

97.519531ms ago: executing program 3 (id=713):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x8080000, 0xb, 0xfffffff8, 0xfffffffc, 0x0, [{0xc, 0x5, 0x8, '\x00', 0x4}, {0x83, 0x1d, 0x4, '\x00', 0x4b}, {0xf9, 0xd, 0x9, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0x10, 0x8, '\x00', 0x1}, {0x2, 0x7, 0x6, '\x00', 0xff}, {0x2, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x6d, '\x00', 0xe9}, {0xe, 0x4, 0xa5, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x10, '\x00', 0x8}, {0x0, 0x0, 0x2, '\x00', 0x7}, {0x1, 0x8a, 0x3, '\x00', 0x4}, {0x4, 0xf1, 0x6, '\x00', 0xb2}, {0x4, 0x4, 0x6, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x7, '\x00', 0x4}, {0xec, 0x3, 0x8}, {0x1f, 0x2, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x56, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x7}, {0x6, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x8, 0xfa, '\x00', 0x42}]}})
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = io_uring_setup(0x497c, &(0x7f00000001c0))
r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
read$midi(r4, 0x0, 0x14)
close_range(r3, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0x1220}, {r0, 0x4000}, {r0, 0x2}, {r0, 0xe0}, {r0, 0x8}, {r0}], 0x6, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0xd5]}, 0x8)

93.840667ms ago: executing program 4 (id=714):
socket$netlink(0x10, 0x3, 0x8)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
accept4$inet6(r0, 0x0, &(0x7f0000000300), 0x80000)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x4})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0xc, &(0x7f0000000000)=0x5402, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}})
ioctl$VT_GETSTATE(r4, 0x5603, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f0000000280)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x1, 0x2}, {0x64}]})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
dup(r5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01", 0x30}], 0x1)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fddbaa2503000000180001801400020073797a5f74756e0000000000000000000500"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x2000c000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})

0s ago: executing program 2 (id=715):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r4, 0x111, 0x1, 0x0, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.503166][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.527517][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.534965][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.564407][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.600086][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.607301][ T5859] Bluetooth: hci2: command tx timeout
[   69.607359][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.640321][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.666463][ T5874] hsr_slave_0: entered promiscuous mode
[   69.673540][ T5874] hsr_slave_1: entered promiscuous mode
[   69.679759][ T5874] debugfs: 'hsr0' already exists in 'hsr'
[   69.685705][ T5859] Bluetooth: hci3: command tx timeout
[   69.691392][ T5874] Cannot create hsr debugfs directory
[   69.697071][   T51] Bluetooth: hci1: command tx timeout
[   69.697106][   T51] Bluetooth: hci4: command tx timeout
[   69.697188][ T5859] Bluetooth: hci0: command tx timeout
[   69.737958][ T5877] hsr_slave_0: entered promiscuous mode
[   69.744230][ T5877] hsr_slave_1: entered promiscuous mode
[   69.750517][ T5877] debugfs: 'hsr0' already exists in 'hsr'
[   69.756314][ T5877] Cannot create hsr debugfs directory
[   69.871269][ T5876] hsr_slave_0: entered promiscuous mode
[   69.878067][ T5876] hsr_slave_1: entered promiscuous mode
[   69.884829][ T5876] debugfs: 'hsr0' already exists in 'hsr'
[   69.890819][ T5876] Cannot create hsr debugfs directory
[   70.076404][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.087807][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.114966][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.128196][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.170390][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.190971][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.200593][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.210679][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.239389][ T5877] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   70.251447][ T5877] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   70.271641][ T5877] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   70.298338][ T5877] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   70.337692][ T5874] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   70.347221][ T5874] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   70.367185][ T5874] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   70.377293][ T5874] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   70.434778][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.451790][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.465858][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.477382][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.491504][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.535148][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   70.551761][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.559392][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.587672][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.594943][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.626064][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.663069][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   70.678637][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.696152][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.704431][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.727871][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.735179][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.754969][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.776081][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   70.795866][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.804270][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.824388][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   70.837297][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.844642][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.861848][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.869204][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.885156][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.919958][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.927584][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.964363][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[   70.975787][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.990038][ T5874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   71.001743][ T5874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.032890][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.040879][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.061353][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.070001][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.131698][ T5872] veth0_vlan: entered promiscuous mode
[   71.148639][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.160789][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.179046][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.189507][ T5872] veth1_vlan: entered promiscuous mode
[   71.257909][ T5875] veth0_vlan: entered promiscuous mode
[   71.296139][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.310829][ T5877] veth0_vlan: entered promiscuous mode
[   71.318270][ T5872] veth0_macvtap: entered promiscuous mode
[   71.331371][ T5875] veth1_vlan: entered promiscuous mode
[   71.348399][ T5874] veth0_vlan: entered promiscuous mode
[   71.358472][ T5872] veth1_macvtap: entered promiscuous mode
[   71.368134][ T5877] veth1_vlan: entered promiscuous mode
[   71.383538][ T5874] veth1_vlan: entered promiscuous mode
[   71.438217][ T5875] veth0_macvtap: entered promiscuous mode
[   71.449601][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.463084][ T5877] veth0_macvtap: entered promiscuous mode
[   71.480109][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.490470][ T5877] veth1_macvtap: entered promiscuous mode
[   71.500503][ T5876] veth0_vlan: entered promiscuous mode
[   71.516733][ T5875] veth1_macvtap: entered promiscuous mode
[   71.525421][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.536171][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.555583][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.565977][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.580368][ T5874] veth0_macvtap: entered promiscuous mode
[   71.589718][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.599553][ T5876] veth1_vlan: entered promiscuous mode
[   71.608089][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[   71.615191][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[   71.634087][ T5874] veth1_macvtap: entered promiscuous mode
[   71.641819][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.655066][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.676141][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.687119][   T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.696306][   T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.702242][ T5865] Bluetooth: hci2: command tx timeout
[   71.726852][   T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.736353][   T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.754387][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.763375][ T5876] veth0_macvtap: entered promiscuous mode
[   71.771707][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.772356][ T5865] Bluetooth: hci0: command tx timeout
[   71.781324][ T5859] Bluetooth: hci4: command tx timeout
[   71.786202][   T51] Bluetooth: hci1: command tx timeout
[   71.792934][ T5183] Bluetooth: hci3: command tx timeout
[   71.804498][   T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.818101][   T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.839287][ T5876] veth1_macvtap: entered promiscuous mode
[   71.847016][   T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.856252][   T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.884923][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.911563][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.921679][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.939000][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.948292][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.955400][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.979238][ T3022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.010886][ T3022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.023481][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   72.027351][ T3022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.050243][ T1092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.071997][ T1092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.082229][ T1092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.100712][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.114120][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.135981][ T1092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.167651][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.185196][ T1092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.191680][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.231462][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.244304][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.271386][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.280912][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.295134][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.307586][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.411890][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.430359][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.456960][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.469459][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.559957][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.618185][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.675227][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   72.772307][ T5942] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   72.838230][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   72.912187][ T5942] usb 5-1: device descriptor read/64, error -71
[   73.088708][ T5971] bond0: option packets_per_slave: invalid value (18446744073709551615)
[   73.102173][ T5971] bond0: option packets_per_slave: allowed values 0 - 65535
[   73.139984][ T5962] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   73.282771][ T5942] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   73.422764][ T5962] usb 4-1: Using ep0 maxpacket: 32
[   73.472158][ T5942] usb 5-1: device descriptor read/64, error -71
[   73.526803][ T5962] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.562154][    T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!!
[   73.576709][ T5962] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[   73.587209][ T5942] usb usb5-port1: attempt power cycle
[   73.790331][ T5183] Bluetooth: hci2: command tx timeout
[   73.818133][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   73.828958][ T5962] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[   73.849987][ T5183] Bluetooth: hci3: command tx timeout
[   73.890965][ T5859] Bluetooth: hci4: command tx timeout
[   73.897252][ T5859] Bluetooth: hci0: command tx timeout
[   73.902912][ T5183] Bluetooth: hci1: command tx timeout
[   73.969178][ T5962] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[   74.022719][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.122711][ T5962] usb 4-1: Product: syz
[   74.141368][ T5962] usb 4-1: Manufacturer: syz
[   74.162225][ T5942] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   74.200944][ T5962] usb 4-1: SerialNumber: syz
[   74.229990][ T5962] usb 4-1: config 0 descriptor??
[   74.255274][ T5942] usb 5-1: device descriptor read/8, error -71
[   74.437346][ T5962] cxacru 4-1:0.0: cxacru_bind: interface has incorrect endpoints
[   74.460783][ T5962] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[   74.485202][ T5962] usb 4-1: USB disconnect, device number 2
[   74.509292][ T5942] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   74.568116][ T5942] usb 5-1: device descriptor read/8, error -71
[   74.602247][ T5950] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.697261][ T5942] usb usb5-port1: unable to enumerate USB device
[   74.782140][ T1211] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[   74.794174][ T5950] usb 1-1: Using ep0 maxpacket: 8
[   74.811440][ T5950] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   74.824757][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.845976][ T5950] usb 1-1: Product: syz
[   74.850308][ T5950] usb 1-1: Manufacturer: syz
[   74.875701][ T5950] usb 1-1: SerialNumber: syz
[   74.884571][ T5950] usb 1-1: config 0 descriptor??
[   74.966425][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   74.992519][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.016426][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'.
[   75.023475][ T1211] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 15
[   75.060782][ T1211] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[   75.084061][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.102197][ T1211] usb 3-1: config 0 descriptor??
[   75.122537][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   75.132388][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   75.141405][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   75.164001][ T5950] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   75.642507][ T5942] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   75.802217][ T5942] usb 4-1: device descriptor read/64, error -71
[   75.869643][ T5183] Bluetooth: hci2: command tx timeout
[   75.932336][ T5183] Bluetooth: hci1: command tx timeout
[   75.938064][ T5859] Bluetooth: hci0: command tx timeout
[   75.943548][   T51] Bluetooth: hci3: command tx timeout
[   75.949081][ T5865] Bluetooth: hci4: command tx timeout
[   76.052320][ T5942] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   76.083945][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   76.202208][ T5928] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   76.210365][ T5942] usb 4-1: device descriptor read/64, error -71
[   76.222164][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   76.325727][ T5942] usb usb4-port1: attempt power cycle
[   76.342375][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.362305][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.371363][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.380060][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.426076][ T5928] usb 2-1: too many configurations: 213, using maximum allowed: 8
[   76.489748][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -61
[   76.527575][ T5928] usb 2-1: can't read configurations, error -61
[   76.672146][ T5928] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   76.692197][ T5942] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   76.712832][ T5942] usb 4-1: device descriptor read/8, error -71
[   76.846585][ T5928] usb 2-1: too many configurations: 213, using maximum allowed: 8
[   76.856462][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -61
[   76.864743][ T5928] usb 2-1: can't read configurations, error -61
[   76.871877][ T5928] usb usb2-port1: attempt power cycle
[   76.952358][ T5942] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   76.973254][ T5942] usb 4-1: device descriptor read/8, error -71
[   77.005457][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'.
[   77.018866][ T5975] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[   77.033654][ T5950] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   77.051413][ T5950] usb 1-1: USB disconnect, device number 2
[   77.093273][ T5942] usb usb4-port1: unable to enumerate USB device
[   77.242759][ T5928] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   77.274179][ T5928] usb 2-1: too many configurations: 213, using maximum allowed: 8
[   77.288327][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -61
[   77.296392][ T5928] usb 2-1: can't read configurations, error -61
[   77.452664][ T5928] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   77.478266][ T1211] usb 3-1: USB disconnect, device number 2
[   77.518073][ T5928] usb 2-1: too many configurations: 213, using maximum allowed: 8
[   77.544275][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -61
[   77.562346][ T5928] usb 2-1: can't read configurations, error -61
[   77.577857][ T5928] usb usb2-port1: unable to enumerate USB device
[   77.944947][ T6031] mmap: syz.0.22 (6031) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   78.452612][ T6043] FAULT_INJECTION: forcing a failure.
[   78.452612][ T6043] name failslab, interval 1, probability 0, space 0, times 1
[   78.466394][ T6043] CPU: 1 UID: 0 PID: 6043 Comm: syz.2.24 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) 
[   78.466424][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   78.466434][ T6043] Call Trace:
[   78.466444][ T6043]  <TASK>
[   78.466452][ T6043]  dump_stack_lvl+0x189/0x250
[   78.466482][ T6043]  ? __pfx____ratelimit+0x10/0x10
[   78.466508][ T6043]  ? __pfx_dump_stack_lvl+0x10/0x10
[   78.466531][ T6043]  ? __pfx__printk+0x10/0x10
[   78.466556][ T6043]  ? fs_reclaim_acquire+0x7d/0x100
[   78.466583][ T6043]  ? rcu_is_watching+0x15/0xb0
[   78.466602][ T6043]  ? __pfx___might_resched+0x10/0x10
[   78.466619][ T6043]  ? lock_acquire+0x5f/0x360
[   78.466647][ T6043]  should_fail_ex+0x414/0x560
[   78.466674][ T6043]  should_failslab+0xa8/0x100
[   78.466701][ T6043]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[   78.466727][ T6043]  ? __alloc_skb+0x112/0x2d0
[   78.466756][ T6043]  __alloc_skb+0x112/0x2d0
[   78.466795][ T6043]  netlink_sendmsg+0x5c6/0xb30
[   78.466827][ T6043]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.466853][ T6043]  ? aa_sock_msg_perm+0xf1/0x1d0
[   78.466870][ T6043]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   78.466890][ T6043]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.466914][ T6043]  __sock_sendmsg+0x219/0x270
[   78.466936][ T6043]  ____sys_sendmsg+0x505/0x830
[   78.466954][ T6043]  ? __pfx_____sys_sendmsg+0x10/0x10
[   78.466971][ T6043]  ? import_iovec+0x74/0xa0
[   78.466991][ T6043]  ___sys_sendmsg+0x21f/0x2a0
[   78.467006][ T6043]  ? __pfx____sys_sendmsg+0x10/0x10
[   78.467033][ T6043]  ? __x64_sys_sendmsg+0x180/0x260
[   78.467050][ T6043]  __x64_sys_sendmsg+0x19b/0x260
[   78.467065][ T6043]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   78.467083][ T6043]  ? __pfx_ksys_write+0x10/0x10
[   78.467101][ T6043]  ? rcu_is_watching+0x15/0xb0
[   78.467117][ T6043]  ? rcu_is_watching+0x15/0xb0
[   78.467134][ T6043]  do_syscall_64+0xfa/0x3b0
[   78.467156][ T6043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.467170][ T6043]  ? clear_bhb_loop+0x60/0xb0
[   78.467186][ T6043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.467200][ T6043] RIP: 0033:0x7fd9a918ebe9
[   78.467214][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.467226][ T6043] RSP: 002b:00007fd9a9f91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   78.467244][ T6043] RAX: ffffffffffffffda RBX: 00007fd9a93b6180 RCX: 00007fd9a918ebe9
[   78.467257][ T6043] RDX: 0000000000000090 RSI: 0000200000000280 RDI: 0000000000000007
[   78.467268][ T6043] RBP: 00007fd9a9f91090 R08: 0000000000000000 R09: 0000000000000000
[   78.467277][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.467286][ T6043] R13: 00007fd9a93b6218 R14: 00007fd9a93b6180 R15: 00007fd9a94dfa28
[   78.467301][ T6043]  </TASK>
[   78.761539][    C1] vkms_vblank_simulate: vblank timer overrun
[   79.112122][ T5914] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   79.131934][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'.
[   79.142001][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26'.
[   79.159820][ T6046] team0: Port device veth0_to_bond added
[   79.235240][ T6055] syz.4.27 uses obsolete (PF_INET,SOCK_PACKET)
[   79.280219][ T5914] usb 3-1: no configurations
[   79.285600][ T5914] usb 3-1: can't read configurations, error -22
[   79.502148][ T5914] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   79.579775][ T6067] vlan2: entered promiscuous mode
[   79.585615][ T6067] bond0: entered promiscuous mode
[   79.607099][ T6067] bond_slave_0: entered promiscuous mode
[   79.620834][ T6067] bond_slave_1: entered promiscuous mode
[   79.702202][ T5914] usb 3-1: no configurations
[   79.838965][ T5914] usb 3-1: can't read configurations, error -22
[   79.913169][ T5914] usb usb3-port1: attempt power cycle
[   79.944858][   T30] audit: type=1326 audit(1755620666.174:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[   79.991221][   T30] audit: type=1326 audit(1755620666.174:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[   80.059063][   T30] audit: type=1326 audit(1755620666.174:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[   80.118340][   T30] audit: type=1326 audit(1755620666.174:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[   80.174164][   T30] audit: type=1326 audit(1755620666.174:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[   80.224211][ T6075] Zero length message leads to an empty skb
[   80.324203][ T5914] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   80.375414][ T5914] usb 3-1: no configurations
[   80.375431][ T5914] usb 3-1: can't read configurations, error -22
[   80.602316][ T5914] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   80.611230][   T30] audit: type=1326 audit(1755620666.174:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[   80.636275][   T30] audit: type=1326 audit(1755620666.174:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[   80.667571][ T5914] usb 3-1: no configurations
[   80.672554][ T5914] usb 3-1: can't read configurations, error -22
[   80.679918][ T5914] usb usb3-port1: unable to enumerate USB device
[   80.688827][   T30] audit: type=1326 audit(1755620666.174:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[   80.715729][   T30] audit: type=1326 audit(1755620666.174:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[   80.741500][   T30] audit: type=1326 audit(1755620666.174:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[   81.162187][ T5928] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   81.332124][ T5928] usb 1-1: Using ep0 maxpacket: 16
[   81.365347][ T5928] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   81.382367][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.394333][ T5928] usb 1-1: Product: syz
[   81.402253][ T5928] usb 1-1: Manufacturer: syz
[   81.413798][ T5928] usb 1-1: SerialNumber: syz
[   81.428581][ T5928] r8152-cfgselector 1-1: Unknown version 0x0000
[   81.440716][ T5928] r8152-cfgselector 1-1: config 0 descriptor??
[   81.674158][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.686501][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.782231][ T5914] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   81.888791][ T5928] r8152-cfgselector 1-1: Unknown version 0x0000
[   81.899684][ T5928] r8152-cfgselector 1-1: bad CDC descriptors
[   81.910690][ T5928] r8152-cfgselector 1-1: USB disconnect, device number 3
[   81.922877][ T5914] usb 3-1: device descriptor read/64, error -71
[   82.162207][ T5914] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   82.302193][ T5914] usb 3-1: device descriptor read/64, error -71
[   82.413149][ T5914] usb usb3-port1: attempt power cycle
[   82.461337][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'.
[   82.474105][ T6085] netlink: 80 bytes leftover after parsing attributes in process `syz.0.37'.
[   82.500132][   T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   82.665968][   T43] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[   82.677103][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.687868][   T43] usb 5-1: config 0 descriptor??
[   82.701014][   T43] gspca_main: spca508-2.14.0 probing 8086:0110
[   82.782297][ T5942] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   82.793183][ T5914] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   82.822902][ T5914] usb 3-1: device descriptor read/8, error -71
[   82.953513][ T5942] usb 4-1: Using ep0 maxpacket: 16
[   82.960482][ T5942] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   82.970286][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   82.983458][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.000241][ T5942] usb 4-1: config 0 descriptor??
[   83.121012][ T5914] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   83.194620][    T9] usb 1-1: no configurations
[   83.199307][    T9] usb 1-1: can't read configurations, error -22
[   83.313073][ T5914] usb 3-1: device descriptor read/8, error -71
[   83.332226][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   83.442362][   T43] gspca_spca508: reg_read err -110
[   83.457470][ T5942] lenovo 0003:17EF:6047.0001: item fetching failed at offset 2/5
[   83.482405][   T43] gspca_spca508: reg_read err -32
[   83.488516][ T5942] lenovo 0003:17EF:6047.0001: hid_parse failed
[   83.488580][ T5942] lenovo 0003:17EF:6047.0001: probe with driver lenovo failed with error -22
[   83.496660][    T9] usb 1-1: no configurations
[   83.538114][    T9] usb 1-1: can't read configurations, error -22
[   83.547258][    T9] usb usb1-port1: attempt power cycle
[   83.555395][ T6104] netlink: 68 bytes leftover after parsing attributes in process `syz.1.42'.
[   83.579538][ T5914] usb usb3-port1: unable to enumerate USB device
[   83.681596][ T5942] usb 4-1: USB disconnect, device number 7
[   83.736491][   T43] gspca_spca508: reg_read err -32
[   83.767390][   T43] gspca_spca508: reg_read err -32
[   83.797864][   T43] gspca_spca508: reg write: error -32
[   83.806026][ T6110] tipc: Started in network mode
[   83.819726][ T6110] tipc: Node identity e0000001, cluster identity 4711
[   83.827512][   T43] spca508 5-1:0.0: probe with driver spca508 failed with error -32
[   83.838388][ T6110] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   83.962260][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   84.069732][    T9] usb 1-1: no configurations
[   84.112126][    T9] usb 1-1: can't read configurations, error -22
[   84.282371][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   84.303259][    T9] usb 1-1: no configurations
[   84.309147][    T9] usb 1-1: can't read configurations, error -22
[   84.317821][    T9] usb usb1-port1: unable to enumerate USB device
[   84.632341][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   84.815033][    T9] usb 4-1: no configurations
[   84.820627][    T9] usb 4-1: can't read configurations, error -22
[   84.892229][ T5914] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   84.972374][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   85.050820][ T5914] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   85.063306][ T5914] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   85.078416][ T5914] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   85.090437][ T5914] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   85.099979][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.112413][ T6126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   85.154754][    T9] usb 4-1: no configurations
[   85.159455][    T9] usb 4-1: can't read configurations, error -22
[   85.166291][    T9] usb usb4-port1: attempt power cycle
[   85.202331][   T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   85.223536][ T5943] usb 5-1: USB disconnect, device number 7
[   85.365493][   T43] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[   85.375415][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.385951][   T43] usb 2-1: config 0 descriptor??
[   85.513220][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   85.534759][    T9] usb 4-1: no configurations
[   85.540063][    T9] usb 4-1: can't read configurations, error -22
[   85.597993][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.608968][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.619589][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.632649][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.642180][ T5943] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   85.650229][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.665020][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.673610][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   85.678027][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.700196][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.710694][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.721403][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.733286][ T5914] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[   85.748350][ T5914] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input5
[   85.796067][    T9] usb 4-1: no configurations
[   85.809036][    T9] usb 4-1: can't read configurations, error -22
[   85.812703][ T5943] usb 5-1: Using ep0 maxpacket: 16
[   85.827234][    T9] usb usb4-port1: unable to enumerate USB device
[   85.860642][ T5943] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   85.871745][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.889278][   T43] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   85.903756][ T6138] futex_wake_op: syz.0.49 tries to shift op by 32; fix this program
[   85.912470][ T5943] usb 5-1: Product: syz
[   85.916732][ T5943] usb 5-1: Manufacturer: syz
[   85.921424][ T5943] usb 5-1: SerialNumber: syz
[   85.926735][   T43] asix 2-1:0.0: probe with driver asix failed with error -71
[   85.938144][   T43] usb 2-1: USB disconnect, device number 6
[   85.950036][ T5943] r8152-cfgselector 5-1: Unknown version 0x0000
[   85.972154][ T5943] r8152-cfgselector 5-1: config 0 descriptor??
[   86.023677][ T6142] netlink: 'syz.1.51': attribute type 10 has an invalid length.
[   86.202391][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.212837][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.270131][   T43] usb 3-1: USB disconnect, device number 11
[   86.277024][    C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   86.362247][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   86.583781][    T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   86.603557][ T6154] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.616299][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.625731][    T9] usb 2-1: Product: syz
[   86.630148][    T9] usb 2-1: Manufacturer: syz
[   86.637783][    T9] usb 2-1: SerialNumber: syz
[   86.700594][ T5943] r8152-cfgselector 5-1: Unknown version 0x0000
[   86.714378][ T5943] r8152-cfgselector 5-1: bad CDC descriptors
[   86.737982][    T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   86.741053][ T5943] r8152-cfgselector 5-1: USB disconnect, device number 8
[   86.782938][ T5928] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   87.032050][    C0] usb 2-1: ath9k_htc: invalid pkt_len (fd7e)
[   87.035414][   T24] cfg80211: failed to load regulatory.db
[   92.982345][ T5928] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[   92.989581][ T5928] ath9k_htc: Failed to initialize the device
[   93.882692][ T5875] sched: DL replenish lagged too much
[   93.924314][ T5943] usb 2-1: USB disconnect, device number 7
[   94.038617][ T5943] usb 2-1: ath9k_htc: USB layer deinitialized
[   94.232915][ T6165] syzkaller1: entered promiscuous mode
[   94.358035][ T6165] syzkaller1: entered allmulticast mode
[   94.407973][ T5942] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   94.475330][ T6175] bridge_slave_0: left allmulticast mode
[   94.481036][ T6175] bridge_slave_0: left promiscuous mode
[   94.487563][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.503633][ T6175] bridge_slave_1: left allmulticast mode
[   94.510203][ T6175] bridge_slave_1: left promiscuous mode
[   94.517862][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.530882][ T6175] bond0: (slave bond_slave_0): Releasing backup interface
[   94.551799][ T6178] program syz.3.60 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.573968][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'.
[   94.588223][ T6175] bond0: (slave bond_slave_1): Releasing backup interface
[   94.632208][ T5942] usb 1-1: Using ep0 maxpacket: 16
[   94.651234][ T6175] team0: Port device team_slave_0 removed
[   94.675514][ T6175] team0: Port device team_slave_1 removed
[   94.682723][ T6175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.690390][ T6175] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.699442][ T6175] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.707263][ T6175] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.730248][ T6177] batadv0: entered promiscuous mode
[   94.736594][ T6177] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   94.789305][ T5942] usb 1-1: config 0 has an invalid interface number: 39 but max is 0
[   94.813080][ T5942] usb 1-1: config 0 has no interface number 0
[   94.820188][ T5942] usb 1-1: config 0 interface 39 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[   94.858671][ T5942] usb 1-1: config 0 interface 39 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[   94.930894][ T5942] usb 1-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice= 1.ca
[   94.966885][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.990211][ T5942] usb 1-1: Product: syz
[   95.003243][ T5942] usb 1-1: Manufacturer: syz
[   95.181784][ T5942] usb 1-1: SerialNumber: syz
[   95.210035][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'.
[   95.262627][ T5942] usb 1-1: config 0 descriptor??
[   95.283069][ T6168] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   95.308820][ T5942] ftdi_sio 1-1:0.39: FTDI USB Serial Device converter detected
[   95.390685][ T5942] usb 1-1: Detected SIO
[   95.400205][ T5942] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   95.528044][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.539929][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.557470][ T5942] usb 1-1: USB disconnect, device number 8
[   95.568922][ T5942] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   95.651155][ T5942] ftdi_sio 1-1:0.39: device disconnected
[   96.915377][ T6212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.057224][ T6219] FAULT_INJECTION: forcing a failure.
[   97.057224][ T6219] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   97.071439][ T6219] CPU: 0 UID: 0 PID: 6219 Comm: syz.0.68 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) 
[   97.071469][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   97.071480][ T6219] Call Trace:
[   97.071488][ T6219]  <TASK>
[   97.071497][ T6219]  dump_stack_lvl+0x189/0x250
[   97.071526][ T6219]  ? __pfx____ratelimit+0x10/0x10
[   97.071552][ T6219]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.071574][ T6219]  ? __pfx__printk+0x10/0x10
[   97.071598][ T6219]  ? __might_fault+0xb0/0x130
[   97.071625][ T6219]  ? rcu_is_watching+0x15/0xb0
[   97.071645][ T6219]  should_fail_ex+0x414/0x560
[   97.071669][ T6219]  _copy_from_iter+0x1db/0x16f0
[   97.071688][ T6219]  ? rcu_is_watching+0x15/0xb0
[   97.071704][ T6219]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   97.071727][ T6219]  ? __pfx__copy_from_iter+0x10/0x10
[   97.071743][ T6219]  ? __build_skb_around+0x257/0x3e0
[   97.071766][ T6219]  ? netlink_sendmsg+0x642/0xb30
[   97.071788][ T6219]  ? skb_put+0x11b/0x210
[   97.071802][ T6219]  netlink_sendmsg+0x6b2/0xb30
[   97.071825][ T6219]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.071847][ T6219]  ? aa_sock_msg_perm+0xf1/0x1d0
[   97.071860][ T6219]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   97.071885][ T6219]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.071907][ T6219]  __sock_sendmsg+0x219/0x270
[   97.071927][ T6219]  ____sys_sendmsg+0x505/0x830
[   97.071944][ T6219]  ? __pfx_____sys_sendmsg+0x10/0x10
[   97.071960][ T6219]  ? import_iovec+0x74/0xa0
[   97.071977][ T6219]  ___sys_sendmsg+0x21f/0x2a0
[   97.071992][ T6219]  ? __pfx____sys_sendmsg+0x10/0x10
[   97.072023][ T6219]  ? __fget_files+0x2a/0x420
[   97.072038][ T6219]  ? __fget_files+0x3a0/0x420
[   97.072056][ T6219]  __x64_sys_sendmsg+0x19b/0x260
[   97.072073][ T6219]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   97.072091][ T6219]  ? __pfx_ksys_write+0x10/0x10
[   97.072109][ T6219]  ? rcu_is_watching+0x15/0xb0
[   97.072125][ T6219]  ? rcu_is_watching+0x15/0xb0
[   97.072139][ T6219]  do_syscall_64+0xfa/0x3b0
[   97.072160][ T6219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.072175][ T6219]  ? clear_bhb_loop+0x60/0xb0
[   97.072191][ T6219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.072205][ T6219] RIP: 0033:0x7fdaf478ebe9
[   97.072219][ T6219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.072231][ T6219] RSP: 002b:00007fdaf5649038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   97.072249][ T6219] RAX: ffffffffffffffda RBX: 00007fdaf49b6180 RCX: 00007fdaf478ebe9
[   97.072260][ T6219] RDX: 0000000000000090 RSI: 0000200000000280 RDI: 0000000000000007
[   97.072270][ T6219] RBP: 00007fdaf5649090 R08: 0000000000000000 R09: 0000000000000000
[   97.072279][ T6219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.072288][ T6219] R13: 00007fdaf49b6218 R14: 00007fdaf49b6180 R15: 00007fdaf4adfa28
[   97.072303][ T6219]  </TASK>
[   98.132275][ T5942] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   98.452214][ T5942] usb 5-1: Using ep0 maxpacket: 16
[   98.626294][ T5942] usb 5-1: config 0 has an invalid interface number: 57 but max is 0
[   98.696399][ T5942] usb 5-1: config 0 has no interface number 0
[   98.717314][ T5942] usb 5-1: config 0 interface 57 has no altsetting 0
[   98.743527][ T5942] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   98.777379][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.819688][ T5942] usb 5-1: Product: syz
[   98.832167][ T5942] usb 5-1: Manufacturer: syz
[   98.960259][ T5942] usb 5-1: SerialNumber: syz
[   98.966470][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   98.995783][ T5942] usb 5-1: config 0 descriptor??
[   99.026395][ T5942] CoreChips 5-1:0.57: probe with driver CoreChips failed with error -22
[   99.138014][   T24] usb 2-1: Using ep0 maxpacket: 16
[   99.173784][   T24] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[   99.193777][   T24] usb 2-1: config 0 has no interface number 0
[   99.227195][   T24] usb 2-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30
[   99.259730][ T6232] warning: `syz.4.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   99.358066][   T24] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   99.432180][   T24] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   99.478123][   T24] usb 2-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171
[   99.553461][   T24] usb 2-1: config 0 interface 41 has no altsetting 0
[   99.618161][   T24] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   99.628752][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.657073][   T24] usb 2-1: Product: syz
[   99.675737][   T24] usb 2-1: Manufacturer: syz
[   99.694225][   T24] usb 2-1: SerialNumber: syz
[   99.728100][   T24] usb 2-1: config 0 descriptor??
[   99.734012][ T6244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   99.741979][ T6244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   99.851783][ T6262] vcan0: tx drop: invalid da for name 0x0000000000000002
[   99.982349][ T6244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   99.990434][ T6244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  100.035720][ T6267] dvmrp8: entered allmulticast mode
[  100.292159][   T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  100.462316][   T43] usb 4-1: Using ep0 maxpacket: 32
[  100.469383][   T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  100.488297][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  100.536212][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  100.568023][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  100.579860][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  100.593421][ T5942] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  100.594509][   T43] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  100.614107][   T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  100.627340][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.636708][   T43] usb 4-1: Product: syz
[  100.640912][   T43] usb 4-1: Manufacturer: syz
[  100.646330][   T43] usb 4-1: SerialNumber: syz
[  100.652913][   T43] usb 4-1: config 0 descriptor??
[  100.702674][ T5914] usb 5-1: USB disconnect, device number 9
[  100.743355][ T5942] usb 1-1: device descriptor read/64, error -71
[  100.782309][ T1211] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  100.837345][ T6244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.847354][ T6244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.857931][   T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  100.871778][   T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  100.882921][   T24] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[  100.894495][   T24] usb 2-1: USB disconnect, device number 8
[  100.942462][ T1211] usb 3-1: Using ep0 maxpacket: 32
[  100.949434][ T1211] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  100.957932][ T1211] usb 3-1: config 0 has no interface number 0
[  100.964458][ T1211] usb 3-1: config 0 interface 12 has no altsetting 0
[  100.978617][ T1211] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  100.989110][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.992184][ T5942] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  100.998989][ T1211] usb 3-1: Product: syz
[  101.009838][ T1211] usb 3-1: Manufacturer: syz
[  101.014585][ T1211] usb 3-1: SerialNumber: syz
[  101.020529][ T1211] usb 3-1: config 0 descriptor??
[  101.072988][   T43] input input6: Device does not respond to id packet M
[  101.112280][ T5914] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  101.132242][ T5942] usb 1-1: device descriptor read/64, error -71
[  101.239754][ T6271] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  101.252280][ T5942] usb usb1-port1: attempt power cycle
[  101.264319][ T5914] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  101.281348][ T5914] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  101.293305][   T43] iforce 4-1:0.0: usb_submit_urb failed: -71
[  101.300209][   T43] input input6: Device does not respond to id packet P
[  101.308896][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  101.317827][ T5914] usb 5-1: SerialNumber: syz
[  101.323404][   T43] iforce 4-1:0.0: usb_submit_urb failed: -71
[  101.330107][   T43] input input6: Device does not respond to id packet B
[  101.339024][   T43] iforce 4-1:0.0: usb_submit_urb failed: -71
[  101.346039][   T43] input input6: Device does not respond to id packet N
[  101.357744][   T43] iforce 4-1:0.0: usb_submit_urb failed: -71
[  101.365967][   T43] iforce 4-1:0.0: usb_submit_urb failed: -71
[  101.375074][ T1211] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  101.385277][   T43] iforce 4-1:0.0: usb_submit_urb failed: -71
[  101.398496][ T1211] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  101.409824][   T43] iforce 4-1:0.0: usb_submit_urb failed: -71
[  101.417386][ T1211] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  101.428837][   T43] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6
[  101.443029][ T1211] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  101.485278][ T1211] usb 3-1: USB disconnect, device number 12
[  101.492581][ T6276] ip6tnl1: entered promiscuous mode
[  101.502390][   T43] usb 4-1: USB disconnect, device number 12
[  101.592455][ T5942] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  101.644406][ T5942] usb 1-1: device descriptor read/8, error -71
[  101.911987][ T5942] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  101.981897][ T5942] usb 1-1: device descriptor read/8, error -71
[  101.990359][ T5914] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  102.015715][ T5914] usb 5-1: USB disconnect, device number 10
[  102.112369][ T5942] usb usb1-port1: unable to enumerate USB device
[  102.382124][ T5942] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  102.558913][ T5942] usb 4-1: Using ep0 maxpacket: 32
[  102.616908][ T5942] usb 4-1: unable to get BOS descriptor or descriptor too short
[  102.641096][ T5942] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  102.670971][ T5942] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  102.682406][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.691146][ T5942] usb 4-1: Product: syz
[  102.697211][ T5942] usb 4-1: Manufacturer: syz
[  102.702450][ T5942] usb 4-1: SerialNumber: syz
[  102.713248][ T6292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  102.805355][ T6304] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  102.892678][ T5950] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  102.925339][ T5942] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  102.936639][ T5942] usb 4-1: USB disconnect, device number 13
[  103.064405][ T5950] usb 2-1: Using ep0 maxpacket: 16
[  103.073817][ T5950] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  103.082166][ T5914] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  103.091905][ T5950] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  103.105624][ T5950] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95
[  103.115045][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.124420][ T5950] usb 2-1: Product: syz
[  103.128770][ T5950] usb 2-1: Manufacturer: syz
[  103.133443][ T5950] usb 2-1: SerialNumber: syz
[  103.139371][ T5950] usb 2-1: config 0 descriptor??
[  103.145114][ T6297] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  103.152874][ T6297] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  103.243894][ T5914] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  103.253120][ T5914] usb 3-1: config 0 has no interface number 0
[  103.259266][ T5914] usb 3-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30
[  103.271150][ T5914] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  103.282929][ T5914] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.294211][ T5914] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  103.309165][ T5914] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[  103.319874][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.329913][ T5914] usb 3-1: config 0 descriptor??
[  103.361560][ T6297] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  103.369686][ T6297] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  103.530274][ T6315] netlink: 44 bytes leftover after parsing attributes in process `syz.3.97'.
[  103.586047][ T5914] usbhid 3-1:0.1: can't add hid device: -71
[  103.589389][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.597703][ T5914] usbhid 3-1:0.1: probe with driver usbhid failed with error -71
[  103.630930][ T5914] usb 3-1: USB disconnect, device number 13
[  103.642665][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.739132][ T6320] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  103.792130][ T1211] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  103.839937][ T5950] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  103.860290][ T5950] asix 2-1:0.0: probe with driver asix failed with error -71
[  103.875574][ T5950] usb 2-1: USB disconnect, device number 9
[  103.954086][ T5928] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  103.978901][ T6326] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  103.986250][ T1211] usb 1-1: Invalid ep0 maxpacket: 32
[  104.058372][ T6327] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  104.093080][ T5928] usb 4-1: device descriptor read/64, error -71
[  104.132187][ T1211] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  104.302232][ T1211] usb 1-1: Invalid ep0 maxpacket: 32
[  104.308731][ T1211] usb usb1-port1: attempt power cycle
[  104.332161][ T5928] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  104.386559][ T6332] iommufd_mock iommufd_mock2: Adding to iommu group 2
[  104.472267][ T5928] usb 4-1: device descriptor read/64, error -71
[  104.584115][ T5928] usb usb4-port1: attempt power cycle
[  104.682404][ T1211] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  104.723499][ T1211] usb 1-1: Invalid ep0 maxpacket: 32
[  104.872550][ T5914] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  104.881075][ T1211] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  104.914194][ T1211] usb 1-1: Invalid ep0 maxpacket: 32
[  104.919871][ T1211] usb usb1-port1: unable to enumerate USB device
[  104.962257][ T5928] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  104.993741][ T5928] usb 4-1: device descriptor read/8, error -71
[  105.044183][ T5914] usb 2-1: Using ep0 maxpacket: 8
[  105.055468][ T5914] usb 2-1: config 0 has an invalid interface number: 207 but max is 0
[  105.064423][ T5914] usb 2-1: config 0 has no interface number 0
[  105.072374][ T5914] usb 2-1: config 0 interface 207 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  105.087001][ T5914] usb 2-1: config 0 interface 207 has no altsetting 0
[  105.098685][ T5914] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  105.108321][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.123615][ T5914] usb 2-1: Product: syz
[  105.131560][ T5914] usb 2-1: Manufacturer: syz
[  105.190441][ T5914] usb 2-1: SerialNumber: syz
[  105.232684][ T5928] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  105.294287][ T6345] sctp: [Deprecated]: syz.2.106 (pid 6345) Use of struct sctp_assoc_value in delayed_ack socket option.
[  105.294287][ T6345] Use struct sctp_sack_info instead
[  105.331243][ T5928] usb 4-1: device descriptor read/8, error -71
[  105.389803][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  105.389900][   T30] audit: type=1400 audit(1755620691.634:31): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6342 comm="syz.2.106"
[  105.428142][ T5914] usb 2-1: config 0 descriptor??
[  105.460171][ T5928] usb usb4-port1: unable to enumerate USB device
[  106.038355][ T6355] random: crng reseeded on system resumption
[  106.113707][   T30] audit: type=1326 audit(1755620692.364:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.4.108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe50338ebe9 code=0x0
[  106.726089][ T6366] netlink: 'syz.0.109': attribute type 13 has an invalid length.
[  106.855579][ T6366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.512972][ T5914] usb 2-1: USB disconnect, device number 10
[  107.596564][ T6382] capability: warning: `syz.1.113' uses 32-bit capabilities (legacy support in use)
[  107.942773][ T1211] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  108.122580][ T1211] usb 5-1: Using ep0 maxpacket: 32
[  108.130084][ T1211] usb 5-1: config 0 has an invalid interface number: 29 but max is 0
[  108.141049][ T1211] usb 5-1: config 0 has no interface number 0
[  108.147846][ T1211] usb 5-1: config 0 interface 29 has no altsetting 0
[  108.158529][ T1211] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  108.169779][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.197635][ T1211] usb 5-1: Product: syz
[  108.203569][ T1211] usb 5-1: Manufacturer: syz
[  108.211272][ T1211] usb 5-1: SerialNumber: syz
[  108.237725][ T1211] usb 5-1: config 0 descriptor??
[  108.322223][ T5914] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  108.393743][ T6407] vcan0: tx drop: invalid da for name 0xfffffffffffffffd
[  108.462221][ T1211] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[  108.496102][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.507349][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  108.538140][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  108.540040][ T6411] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.125'.
[  108.584760][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  108.598932][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  108.663357][ T1211] peak_usb 5-1:0.29 can0: sending command failure: -8
[  108.683836][ T1211] peak_usb 5-1:0.29 can0: sending command failure: -8
[  108.705483][ T5914] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  108.716353][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  108.726976][ T1211] peak_usb 5-1:0.29 can0: sending command failure: -8
[  108.784331][ T5914] usb 2-1: Product: syz
[  108.832277][ T5914] usb 2-1: Manufacturer: syz
[  108.857858][ T5914] usb 2-1: SerialNumber: syz
[  108.909839][ T5914] usb 2-1: config 0 descriptor??
[  108.922954][ T1211] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -8
[  109.158830][ T5914] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  109.177736][ T5914] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  109.398336][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.411888][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.441672][ T5914] radio-si470x 2-1:0.0: software version 0, hardware version 0
[  109.463271][ T5914] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  109.510146][ T5914] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  109.659533][ T5914] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[  109.687116][ T5914] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[  109.697182][ T5914] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[  109.746374][ T5914] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22
[  109.786889][ T5914] usb 2-1: USB disconnect, device number 11
[  109.971840][ T6440] netlink: 56 bytes leftover after parsing attributes in process `syz.3.138'.
[  109.999301][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'.
[  110.171951][ T6455] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  110.339831][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'.
[  110.470084][ T5914] usb 5-1: USB disconnect, device number 11
[  110.898449][ T6505] netlink: 96 bytes leftover after parsing attributes in process `syz.0.169'.
[  111.186071][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'.
[  111.221175][ T6525] bridge: RTM_NEWNEIGH with invalid ether address
[  111.816620][ T6566] tipc: Started in network mode
[  111.821769][ T6566] tipc: Node identity a6e0ab0b98f4, cluster identity 4711
[  111.832104][ T6566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.842904][ T6566] syzkaller0: entered promiscuous mode
[  111.848489][ T6566] syzkaller0: entered allmulticast mode
[  111.892758][ T6566] tipc: Resetting bearer <eth:syzkaller0>
[  111.898395][ T6572] vcan0: tx drop: invalid sa for name 0x0000000000000004
[  111.906589][ T6565] tipc: Resetting bearer <eth:syzkaller0>
[  111.914925][ T6565] tipc: Disabling bearer <eth:syzkaller0>
[  112.600805][ T6617] netlink: 'syz.0.224': attribute type 30 has an invalid length.
[  112.609414][ T6603] syz.1.215 (6603) used greatest stack depth: 18832 bytes left
[  112.954897][ T6642] netlink: 'syz.3.237': attribute type 2 has an invalid length.
[  113.038252][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'.
[  113.332557][ T6629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.430756][ T6673] netlink: 'syz.4.251': attribute type 10 has an invalid length.
[  113.717668][ T6691] syzkaller1: entered promiscuous mode
[  113.738654][ T6691] syzkaller1: entered allmulticast mode
[  113.979062][ T6711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.995852][ T6711] syzkaller0: entered promiscuous mode
[  114.009618][ T6711] syzkaller0: entered allmulticast mode
[  114.026650][ T6711] tipc: Resetting bearer <eth:syzkaller0>
[  114.036546][ T6710] tipc: Resetting bearer <eth:syzkaller0>
[  114.057086][ T6710] tipc: Disabling bearer <eth:syzkaller0>
[  114.360087][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'.
[  114.382334][ T6738] netlink: 'syz.4.283': attribute type 30 has an invalid length.
[  114.610781][ T6755] netlink: 212316 bytes leftover after parsing attributes in process `syz.2.290'.
[  114.750382][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'.
[  114.792217][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'.
[  114.825585][ T6767] netlink: 'syz.4.295': attribute type 18 has an invalid length.
[  114.887800][ T6777] pimreg: entered allmulticast mode
[  114.974973][ T6784] dvmrp8: entered allmulticast mode
[  114.997501][ T6777] pimreg: left allmulticast mode
[  115.017023][ T6777] dvmrp8: left allmulticast mode
[  115.024810][ T6791] netlink: 212316 bytes leftover after parsing attributes in process `syz.0.306'.
[  115.081102][ T6796] tipc: Started in network mode
[  115.093269][ T6796] tipc: Node identity , cluster identity 4711
[  115.124065][ T6796] tipc: Failed to obtain node identity
[  115.147060][ T6796] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  115.165999][ T6799] syzkaller0: entered promiscuous mode
[  115.185690][ T6799] syzkaller0: entered allmulticast mode
[  115.200793][ T6803] netlink: 'syz.3.312': attribute type 1 has an invalid length.
[  115.276080][ T6803] 8021q: adding VLAN 0 to HW filter on device bond1
[  115.383499][ T6809] bond1: (slave geneve2): making interface the new active one
[  115.392675][ T6809] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  115.490997][ T6822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.319'.
[  115.888194][ T6855] netlink: 'syz.4.333': attribute type 5 has an invalid length.
[  116.340120][ T6877] tipc: Started in network mode
[  116.375034][ T6877] tipc: Node identity , cluster identity 4711
[  116.411189][ T6877] tipc: Failed to obtain node identity
[  116.439227][ T6877] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  116.741175][ T6903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.759762][ T6903] syzkaller0: entered promiscuous mode
[  116.784957][ T6903] syzkaller0: entered allmulticast mode
[  116.795818][ T6903] tipc: Resetting bearer <eth:syzkaller0>
[  116.812897][ T6898] tipc: Resetting bearer <eth:syzkaller0>
[  116.833321][ T6898] tipc: Disabling bearer <eth:syzkaller0>
[  116.975462][ T6912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.358'.
[  117.097431][ T6916] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  117.109186][ T6918] netlink: 'syz.4.361': attribute type 30 has an invalid length.
[  117.311558][ T1211] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  117.472273][ T1211] usb 2-1: device descriptor read/64, error -71
[  117.772284][ T1211] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  117.912522][ T1211] usb 2-1: device descriptor read/64, error -71
[  118.102255][   T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  118.110212][ T1211] usb usb2-port1: attempt power cycle
[  118.312171][   T43] usb 3-1: device descriptor read/64, error -71
[  118.513156][ T6946] netlink: 'syz.4.373': attribute type 30 has an invalid length.
[  118.523209][ T1211] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  118.562567][   T43] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  118.571537][ T1211] usb 2-1: device descriptor read/8, error -71
[  118.627451][ T6948] netlink: 'syz.4.374': attribute type 5 has an invalid length.
[  118.680390][ T6950] FAULT_INJECTION: forcing a failure.
[  118.680390][ T6950] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.694159][ T6950] CPU: 1 UID: 0 PID: 6950 Comm: syz.4.375 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) 
[  118.694187][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  118.694198][ T6950] Call Trace:
[  118.694206][ T6950]  <TASK>
[  118.694214][ T6950]  dump_stack_lvl+0x189/0x250
[  118.694242][ T6950]  ? __pfx____ratelimit+0x10/0x10
[  118.694267][ T6950]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.694288][ T6950]  ? __pfx__printk+0x10/0x10
[  118.694311][ T6950]  ? __might_fault+0xb0/0x130
[  118.694340][ T6950]  ? rcu_is_watching+0x15/0xb0
[  118.694360][ T6950]  should_fail_ex+0x414/0x560
[  118.694386][ T6950]  _copy_from_user+0x2d/0xb0
[  118.694408][ T6950]  do_sock_getsockopt+0x17d/0x450
[  118.694428][ T6950]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  118.694446][ T6950]  ? rcu_needs_cpu+0x50/0xb0
[  118.694462][ T6950]  ? __fget_files+0x3a0/0x420
[  118.694478][ T6950]  ? __fget_files+0x2a/0x420
[  118.694495][ T6950]  __x64_sys_getsockopt+0x1a5/0x250
[  118.694513][ T6950]  ? rcu_needs_cpu+0x50/0xb0
[  118.694530][ T6950]  ? rcu_needs_cpu+0x50/0xb0
[  118.694548][ T6950]  do_syscall_64+0xfa/0x3b0
[  118.694575][ T6950]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.694593][ T6950]  ? clear_bhb_loop+0x60/0xb0
[  118.694614][ T6950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.694631][ T6950] RIP: 0033:0x7fe50338ebe9
[  118.694648][ T6950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.694663][ T6950] RSP: 002b:00007fe5042e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  118.694685][ T6950] RAX: ffffffffffffffda RBX: 00007fe5035b5fa0 RCX: 00007fe50338ebe9
[  118.694699][ T6950] RDX: 000000000000000f RSI: 0000000000000084 RDI: 0000000000000003
[  118.694710][ T6950] RBP: 00007fe5042e1090 R08: 00002000000001c0 R09: 0000000000000000
[  118.694722][ T6950] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  118.694734][ T6950] R13: 00007fe5035b6038 R14: 00007fe5035b5fa0 R15: 00007fe5036dfa28
[  118.694767][ T6950]  </TASK>
[  118.921694][   T43] usb 3-1: device descriptor read/64, error -71
[  119.032255][   T43] usb usb3-port1: attempt power cycle
[  119.052150][ T1211] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  119.081661][ T1211] usb 2-1: device descriptor read/8, error -71
[  119.192355][ T1211] usb usb2-port1: unable to enumerate USB device
[  119.412188][   T43] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  119.432713][   T43] usb 3-1: device descriptor read/8, error -71
[  119.692233][   T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  119.723869][   T43] usb 3-1: device descriptor read/8, error -71
[  119.833001][   T43] usb usb3-port1: unable to enumerate USB device
[  119.874794][ T6956] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.377'.
[  119.997494][ T6960] netlink: 'syz.1.378': attribute type 13 has an invalid length.
[  120.060969][ T6962] binder: 6961:6962 ioctl c0306201 2000000001c0 returned -22
[  120.312343][ T5942] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  120.375614][ T6975] syzkaller1: entered promiscuous mode
[  120.381252][ T6975] syzkaller1: entered allmulticast mode
[  120.472115][ T5942] usb 4-1: device descriptor read/64, error -71
[  120.559803][ T6981] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.388'.
[  120.732545][ T5942] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  120.903033][ T5942] usb 4-1: device descriptor read/64, error -71
[  121.024117][ T5942] usb usb4-port1: attempt power cycle
[  121.155806][ T7009] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.399'.
[  121.332141][ T1211] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  121.372277][ T5942] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  121.408606][ T5942] usb 4-1: device descriptor read/8, error -71
[  121.482378][ T1211] usb 3-1: Using ep0 maxpacket: 16
[  121.496285][ T1211] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  121.828561][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.844181][ T1211] usb 3-1: Product: syz
[  121.853321][ T1211] usb 3-1: Manufacturer: syz
[  121.866405][ T1211] usb 3-1: SerialNumber: syz
[  121.896117][ T1211] r8152-cfgselector 3-1: Unknown version 0x0000
[  121.909920][ T1211] r8152-cfgselector 3-1: config 0 descriptor??
[  121.942168][ T5928] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  121.942543][ T5942] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  121.964248][ T5942] usb 4-1: device descriptor read/8, error -71
[  121.965480][   T30] audit: type=1326 audit(1755620708.214:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  121.965662][   T30] audit: type=1326 audit(1755620708.214:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  121.966056][   T30] audit: type=1326 audit(1755620708.214:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  121.966301][   T30] audit: type=1326 audit(1755620708.214:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  121.966517][   T30] audit: type=1326 audit(1755620708.214:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  121.966939][   T30] audit: type=1326 audit(1755620708.214:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  121.967539][   T30] audit: type=1326 audit(1755620708.214:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  121.967718][   T30] audit: type=1326 audit(1755620708.214:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  121.968120][   T30] audit: type=1326 audit(1755620708.214:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  121.968613][   T30] audit: type=1326 audit(1755620708.214:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  122.008118][ T7023] input: syz0 as /devices/virtual/input/input7
[  122.074182][ T5942] usb usb4-port1: unable to enumerate USB device
[  122.125569][    C0] vkms_vblank_simulate: vblank timer overrun
[  122.170982][    C0] vkms_vblank_simulate: vblank timer overrun
[  122.238882][    C0] vkms_vblank_simulate: vblank timer overrun
[  122.288301][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.288499][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.313948][ T5928] usb 1-1: config 0 has an invalid interface number: 197 but max is 0
[  122.362311][ T5928] usb 1-1: config 0 has no interface number 0
[  122.362355][ T5928] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[  122.362380][ T5928] usb 1-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  122.362406][ T5928] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[  122.364286][ T5928] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42
[  122.466279][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.480648][ T5928] usb 1-1: Product: syz
[  122.491656][ T5928] usb 1-1: Manufacturer: syz
[  122.506863][ T5928] usb 1-1: SerialNumber: syz
[  122.522504][ T5928] usb 1-1: config 0 descriptor??
[  122.533355][ T7021] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  122.541217][ T7021] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  122.753049][ T7021] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  122.811138][ T7021] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  122.834552][ T5928] qmi_wwan 1-1:0.197: probe with driver qmi_wwan failed with error -22
[  122.916126][ T7032] netlink: 44 bytes leftover after parsing attributes in process `syz.1.407'.
[  123.097490][ T7040] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.410'.
[  123.633259][ T7068] netlink: 44 bytes leftover after parsing attributes in process `syz.1.421'.
[  123.658355][ T7070] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.422'.
[  123.698010][   T43] usb 1-1: USB disconnect, device number 17
[  123.795012][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'.
[  123.976567][ T7090] netlink: 'syz.0.432': attribute type 5 has an invalid length.
[  124.118600][ T5914] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  124.147923][ T7100] netlink: 'syz.4.437': attribute type 12 has an invalid length.
[  124.156791][ T1211] r8152-cfgselector 3-1: Unknown version 0x0000
[  124.157798][ T7100] netlink: 'syz.4.437': attribute type 29 has an invalid length.
[  124.181855][ T1211] r8152-cfgselector 3-1: bad CDC descriptors
[  124.189089][ T7100] netlink: 148 bytes leftover after parsing attributes in process `syz.4.437'.
[  124.210141][ T1211] r8152-cfgselector 3-1: USB disconnect, device number 18
[  124.246997][ T7105] netlink: 'syz.4.437': attribute type 12 has an invalid length.
[  124.260922][ T7105] netlink: 'syz.4.437': attribute type 29 has an invalid length.
[  124.271890][ T7105] netlink: 148 bytes leftover after parsing attributes in process `syz.4.437'.
[  124.286231][ T5942] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  124.333269][ T5914] usb 2-1: Using ep0 maxpacket: 8
[  124.351442][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short
[  124.382480][ T5914] usb 2-1: config 4 interface 0 has no altsetting 0
[  124.396763][ T5914] usb 2-1: string descriptor 0 read error: -22
[  124.422932][ T5914] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  124.443490][ T5914] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  124.468476][ T5942] usb 4-1: no configurations
[  124.474153][ T5942] usb 4-1: can't read configurations, error -22
[  124.489227][ T5914] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  124.498151][ T7118] netlink: 'syz.2.444': attribute type 12 has an invalid length.
[  124.516750][ T7118] netlink: 'syz.2.444': attribute type 29 has an invalid length.
[  124.526167][ T5914] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  124.556005][ T5914] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  124.565063][ T5914] usb 2-1: media controller created
[  124.565136][ T7115] fuse: Unknown parameter 'ft'
[  124.608836][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  124.611782][ T7124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.662386][ T5942] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  124.690824][ T5914] zl10353_read_register: readreg error (reg=127, ret==0)
[  124.772416][ T5914] usb 2-1: USB disconnect, device number 16
[  124.835762][ T5942] usb 4-1: no configurations
[  124.842353][ T5942] usb 4-1: can't read configurations, error -22
[  124.856315][ T5942] usb usb4-port1: attempt power cycle
[  125.072440][ T1211] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  125.212314][ T5942] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  125.232101][ T1211] usb 5-1: Using ep0 maxpacket: 8
[  125.255700][ T5942] usb 4-1: no configurations
[  125.256578][ T1211] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  125.277379][ T1211] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  125.281930][ T5942] usb 4-1: can't read configurations, error -22
[  125.324011][ T1211] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  125.342718][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.365321][ T1211] usbtmc 5-1:16.0: bulk endpoints not found
[  125.432109][ T5942] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  125.491497][ T5942] usb 4-1: no configurations
[  125.496374][ T5942] usb 4-1: can't read configurations, error -22
[  125.522625][ T5942] usb usb4-port1: unable to enumerate USB device
[  125.593848][ T7156] netlink: 'syz.2.457': attribute type 12 has an invalid length.
[  125.621307][ T7156] netlink: 'syz.2.457': attribute type 29 has an invalid length.
[  125.649808][ T7156] __nla_validate_parse: 2 callbacks suppressed
[  125.649830][ T7156] netlink: 148 bytes leftover after parsing attributes in process `syz.2.457'.
[  125.667549][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'.
[  125.710158][ T7136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.728146][ T7136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.770931][ T7167] netlink: 'syz.2.460': attribute type 12 has an invalid length.
[  125.782326][ T7167] netlink: 148 bytes leftover after parsing attributes in process `syz.2.460'.
[  125.797855][ T5914] usb 5-1: USB disconnect, device number 12
[  125.825243][ T7167] netlink: 148 bytes leftover after parsing attributes in process `syz.2.460'.
[  125.860308][ T7169] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  125.880145][ T7169] gretap1: entered allmulticast mode
[  126.128213][ T7191] QAT: failed to copy from user cfg_data.
[  126.222136][ T5943] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  126.306441][ T7193] program syz.2.469 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  126.493937][ T5943] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  126.509670][ T5943] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  126.509859][ T7195] netlink: 148 bytes leftover after parsing attributes in process `syz.4.470'.
[  126.549677][ T5943] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  126.651259][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.668839][ T7176] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  126.689930][ T5943] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  126.891631][ T5943] usb 1-1: USB disconnect, device number 18
[  127.026494][ T7207] netlink: 148 bytes leftover after parsing attributes in process `syz.3.474'.
[  127.035862][ T5942] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  127.044556][ T7207] netlink: 148 bytes leftover after parsing attributes in process `syz.3.474'.
[  127.179355][ T5942] usb 5-1: device descriptor read/64, error -71
[  127.217807][ T7220] kAFS: unable to lookup cell '(/c¾ûL'
[  127.233387][ T7220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.475'.
[  127.382087][    T9] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[  127.572143][ T5943] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  127.718238][ T5942] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  127.782092][    T9] usb 1-1: device descriptor read/64, error -71
[  127.799356][ T7224] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  127.852101][ T5942] usb 5-1: device descriptor read/64, error -71
[  127.883620][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  127.933330][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  127.949781][ T5943] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  127.966916][ T5943] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  127.972503][ T5942] usb usb5-port1: attempt power cycle
[  127.984708][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.002774][ T5943] usb 4-1: config 0 descriptor??
[  128.019202][ T7223] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  128.062108][    T9] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[  128.202151][    T9] usb 1-1: device descriptor read/64, error -71
[  128.311784][ T5943] usbhid 4-1:0.0: can't add hid device: -71
[  128.327513][    T9] usb usb1-port1: attempt power cycle
[  128.332824][ T5943] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  128.333196][ T5942] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  128.351039][ T5943] usb 4-1: USB disconnect, device number 26
[  128.397105][ T5942] usb 5-1: device descriptor read/8, error -71
[  128.438162][ T7238] netlink: 44 bytes leftover after parsing attributes in process `syz.3.485'.
[  128.548609][ T7245] netlink: 148 bytes leftover after parsing attributes in process `syz.3.487'.
[  128.712506][ T5942] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  128.723069][    T9] usb 1-1: new low-speed USB device number 21 using dummy_hcd
[  128.743243][ T5942] usb 5-1: device descriptor read/8, error -71
[  128.752539][    T9] usb 1-1: device descriptor read/8, error -71
[  128.792165][  T979] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  128.852933][ T5942] usb usb5-port1: unable to enumerate USB device
[  128.957970][  T979] usb 2-1: Using ep0 maxpacket: 32
[  128.977364][  T979] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  128.992892][    T9] usb 1-1: new low-speed USB device number 22 using dummy_hcd
[  129.084060][  T979] usb 2-1: config 0 has no interface number 0
[  129.097889][  T979] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  129.107446][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.116874][  T979] usb 2-1: Product: syz
[  129.121682][  T979] usb 2-1: Manufacturer: syz
[  129.128399][  T979] usb 2-1: SerialNumber: syz
[  129.221857][  T979] usb 2-1: config 0 descriptor??
[  129.230091][  T979] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  129.262244][    T9] usb 1-1: device not accepting address 22, error -71
[  129.269736][    T9] usb usb1-port1: unable to enumerate USB device
[  129.430011][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.441413][  T979] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  129.451485][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.464716][  T979] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  129.476207][ T7262] process 'syz.3.491' launched './file0' with NULL argv: empty string added
[  129.970638][ T7278] validate_nla: 13 callbacks suppressed
[  129.978842][ T7278] netlink: 'syz.4.500': attribute type 12 has an invalid length.
[  130.013397][ T7278] netlink: 'syz.4.500': attribute type 29 has an invalid length.
[  130.122111][  T979] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  130.284907][  T979] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  130.306862][  T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.356653][  T979] usb 1-1: config 0 descriptor??
[  130.384078][  T979] gspca_main: cpia1-2.14.0 probing 0813:0001
[  130.794625][ T7308] netlink: 'syz.2.512': attribute type 12 has an invalid length.
[  130.808418][ T7308] netlink: 'syz.2.512': attribute type 29 has an invalid length.
[  130.816888][ T7308] __nla_validate_parse: 8 callbacks suppressed
[  130.816905][ T7308] netlink: 148 bytes leftover after parsing attributes in process `syz.2.512'.
[  130.820304][  T979] gspca_cpia1: usb_control_msg 03, error -32
[  130.841714][  T979] gspca_cpia1: usb_control_msg 03, error -71
[  130.852732][  T979] gspca_cpia1: usb_control_msg 01, error -71
[  130.859235][  T979] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  130.897435][  T979] usb 1-1: USB disconnect, device number 23
[  131.163547][ T7314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.193082][ T7314] syzkaller0: entered promiscuous mode
[  131.199180][ T7314] syzkaller0: entered allmulticast mode
[  131.216902][ T7314] tipc: Resetting bearer <eth:syzkaller0>
[  131.232350][ T7313] tipc: Resetting bearer <eth:syzkaller0>
[  131.244454][ T7313] tipc: Disabling bearer <eth:syzkaller0>
[  131.598296][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  131.622520][ T7333] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.522'.
[  131.635542][  T979] usb 2-1: USB disconnect, device number 17
[  131.670763][  T979] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  131.766804][  T979] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  131.797725][  T979] quatech2 2-1:0.51: device disconnected
[  131.803893][ T5942] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  131.947958][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  131.947977][   T30] audit: type=1326 audit(1755620718.194:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  132.031148][ T7350] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component
[  132.136449][ T5942] usb 3-1: no configurations
[  132.141262][ T5942] usb 3-1: can't read configurations, error -22
[  132.160354][   T30] audit: type=1326 audit(1755620718.244:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  132.284455][ T5914] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  132.288511][ T5942] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  132.326501][   T30] audit: type=1326 audit(1755620718.244:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  132.410817][   T30] audit: type=1326 audit(1755620718.244:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  132.652409][ T5914] usb 4-1: Using ep0 maxpacket: 16
[  132.667507][ T5914] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  132.692208][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.719101][   T30] audit: type=1326 audit(1755620718.244:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  132.725971][ T5914] usb 4-1: Product: syz
[  132.853509][ T5914] usb 4-1: Manufacturer: syz
[  132.854352][ T5942] usb 3-1: no configurations
[  132.885965][ T5942] usb 3-1: can't read configurations, error -22
[  132.893086][ T5942] usb usb3-port1: attempt power cycle
[  132.898973][   T30] audit: type=1326 audit(1755620718.244:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  132.908706][ T5914] usb 4-1: SerialNumber: syz
[  132.936887][ T7379] netlink: 'syz.4.541': attribute type 12 has an invalid length.
[  132.952139][ T7379] netlink: 'syz.4.541': attribute type 29 has an invalid length.
[  132.960136][   T30] audit: type=1326 audit(1755620718.244:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  132.970692][ T5914] r8152-cfgselector 4-1: Unknown version 0x0000
[  132.993271][ T5914] r8152-cfgselector 4-1: config 0 descriptor??
[  133.012212][ T7379] netlink: 148 bytes leftover after parsing attributes in process `syz.4.541'.
[  133.046496][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  133.062116][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  133.063346][   T30] audit: type=1326 audit(1755620718.244:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  133.110379][   T30] audit: type=1326 audit(1755620718.244:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  133.162862][   T30] audit: type=1326 audit(1755620718.244:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a78ebe9 code=0x7ffc0000
[  133.223450][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.234309][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.302189][ T5942] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  133.336496][ T5942] usb 3-1: no configurations
[  133.341365][ T5942] usb 3-1: can't read configurations, error -22
[  133.363512][ T7388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.545'.
[  133.767401][ T5942] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  133.805014][ T5942] usb 3-1: no configurations
[  133.810164][ T5942] usb 3-1: can't read configurations, error -22
[  133.834350][ T5942] usb usb3-port1: unable to enumerate USB device
[  133.872802][ T5943] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  134.028722][ T7415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.558'.
[  134.040635][ T7417] netlink: 36 bytes leftover after parsing attributes in process `syz.4.557'.
[  134.044555][ T5943] usb 2-1: unable to get BOS descriptor or descriptor too short
[  134.059258][ T5943] usb 2-1: config 13 has an invalid interface number: 50 but max is 3
[  134.068462][ T5943] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  134.089421][ T5943] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4
[  134.109735][ T5943] usb 2-1: config 13 has no interface number 0
[  134.129265][ T7419] netlink: 44 bytes leftover after parsing attributes in process `syz.4.559'.
[  134.132152][ T5943] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  134.158735][ T5943] usb 2-1: config 13 interface 50 has no altsetting 0
[  134.174811][ T5943] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8
[  134.185358][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.195834][ T5943] usb 2-1: Product: syz
[  134.205652][ T5943] usb 2-1: Manufacturer: syz
[  134.211235][ T5943] usb 2-1: SerialNumber: syz
[  134.213652][ T7423] netlink: 'syz.4.561': attribute type 12 has an invalid length.
[  134.226529][ T7423] netlink: 'syz.4.561': attribute type 29 has an invalid length.
[  134.234573][ T7423] netlink: 148 bytes leftover after parsing attributes in process `syz.4.561'.
[  134.246000][ T7423] netlink: 'syz.4.561': attribute type 12 has an invalid length.
[  134.254575][ T7423] netlink: 'syz.4.561': attribute type 29 has an invalid length.
[  134.264691][ T7423] netlink: 148 bytes leftover after parsing attributes in process `syz.4.561'.
[  134.695484][ T5943] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  134.695757][   T36] usb 2-1: Failed to submit usb control message: -71
[  134.711938][ T5943] usb 2-1: USB disconnect, device number 18
[  134.791440][   T36] usb 2-1: unable to send the bmi data to the device: -71
[  134.802466][   T36] usb 2-1: unable to get target info from device
[  134.816418][   T36] usb 2-1: could not get target info (-71)
[  134.827309][   T36] usb 2-1: could not probe fw (-71)
[  134.914505][ T7432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.922937][ T7432] syzkaller0: entered promiscuous mode
[  134.928688][ T7432] syzkaller0: entered allmulticast mode
[  134.946077][ T7430] tipc: Resetting bearer <eth:syzkaller0>
[  134.956108][ T7430] tipc: Disabling bearer <eth:syzkaller0>
[  135.156420][ T7436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.564'.
[  135.202174][ T5914] r8152-cfgselector 4-1: Unknown version 0x0000
[  135.239352][ T5914] r8152-cfgselector 4-1: bad CDC descriptors
[  135.260985][ T5914] r8152-cfgselector 4-1: USB disconnect, device number 27
[  135.527789][ T7457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.537470][ T7457] syzkaller0: entered promiscuous mode
[  135.547875][ T7457] syzkaller0: entered allmulticast mode
[  135.565776][ T7456] tipc: Resetting bearer <eth:syzkaller0>
[  135.584008][ T7456] tipc: Disabling bearer <eth:syzkaller0>
[  135.642455][ T5914] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  135.804084][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short
[  135.819433][ T5914] usb 4-1: not running at top speed; connect to a high speed hub
[  135.837808][ T5914] usb 4-1: config 0 has an invalid interface number: 93 but max is 0
[  135.851625][ T5914] usb 4-1: config 0 has no interface number 0
[  135.858609][ T5914] usb 4-1: config 0 interface 93 has no altsetting 0
[  135.871560][ T5914] usb 4-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b
[  135.881460][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.894547][ T5914] usb 4-1: Product: syz
[  135.904801][ T5914] usb 4-1: Manufacturer: syz
[  135.925213][ T5914] usb 4-1: SerialNumber: syz
[  135.949178][ T5914] usb 4-1: config 0 descriptor??
[  135.971173][ T7478] __nla_validate_parse: 6 callbacks suppressed
[  135.971195][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.583'.
[  136.112153][ T1211] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  136.434562][ T7465] syz.0.577 (7465): drop_caches: 1
[  136.502439][ T7462] syz.0.577 (7462): drop_caches: 1
[  136.520251][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'.
[  136.533409][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'.
[  136.552630][ T7483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.585'.
[  136.594953][ T1211] usb 3-1: no configurations
[  136.613257][ T1211] usb 3-1: can't read configurations, error -22
[  136.645841][ T7487] netlink: 44 bytes leftover after parsing attributes in process `syz.0.587'.
[  136.742103][ T1211] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  136.916168][ T1211] usb 3-1: no configurations
[  136.953954][ T1211] usb 3-1: can't read configurations, error -22
[  136.985608][ T1211] usb usb3-port1: attempt power cycle
[  137.009143][ T5914] usb 4-1: unknown interface protocol 0x1a, assuming v1
[  137.018580][ T5914] usb 4-1: cannot find UAC_HEADER
[  137.049303][ T5914] snd-usb-audio 4-1:0.93: probe with driver snd-usb-audio failed with error -22
[  137.155157][ T5914] usb 4-1: USB disconnect, device number 28
[  137.217818][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.93/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  137.244409][ T7507] netlink: 'syz.3.593': attribute type 5 has an invalid length.
[  137.343638][ T1211] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  137.374966][ T1211] usb 3-1: no configurations
[  137.381990][ T1211] usb 3-1: can't read configurations, error -22
[  137.422252][ T7514] fuse: Unknown parameter 'grou`cid'
[  137.524374][ T1211] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  137.533718][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.597'.
[  137.568784][ T1211] usb 3-1: no configurations
[  137.582333][ T1211] usb 3-1: can't read configurations, error -22
[  137.604682][ T1211] usb usb3-port1: unable to enumerate USB device
[  137.682390][    T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  137.697907][ T7520] netlink: 'syz.1.599': attribute type 5 has an invalid length.
[  137.748954][ T7524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.601'.
[  137.817489][ T7528] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.603'.
[  137.844915][    T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  137.880113][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.906253][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  137.925059][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9649, setting to 1024
[  137.945146][    T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  137.962949][    T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  137.973402][    T9] usb 4-1: Product: syz
[  137.977709][    T9] usb 4-1: Manufacturer: syz
[  137.984046][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'.
[  137.997376][ T7514] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  138.021416][    T9] cdc_wdm 4-1:1.0: skipping garbage
[  138.032081][    T9] cdc_wdm 4-1:1.0: skipping garbage
[  138.040237][    T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  138.052219][    T9] cdc_wdm 4-1:1.0: Unknown control protocol
[  138.211308][ T7538] tipc: Started in network mode
[  138.219744][ T7538] tipc: Node identity , cluster identity 4711
[  138.225928][ T7538] tipc: Failed to obtain node identity
[  138.231576][ T7538] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  138.293628][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  138.300559][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  138.306891][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  138.313600][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  138.320046][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  138.326677][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  138.333058][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  138.339661][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  138.346008][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  138.352883][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  138.359322][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  138.366012][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  138.372434][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  138.379838][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  138.386400][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  138.393648][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  138.400232][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  138.406876][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  138.413242][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  138.419956][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  138.863192][ T7549] netlink: 'syz.4.609': attribute type 13 has an invalid length.
[  139.111494][    T9] usb 4-1: USB disconnect, device number 29
[  139.380824][ T7562] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.615'.
[  139.731972][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  139.731990][   T30] audit: type=1326 audit(1755620725.974:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50338ebe9 code=0x7ffc0000
[  139.762939][    C1] vkms_vblank_simulate: vblank timer overrun
[  139.851708][   T30] audit: type=1326 audit(1755620725.974:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50338ebe9 code=0x7ffc0000
[  139.935350][   T30] audit: type=1326 audit(1755620726.044:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe50338d457 code=0x7ffc0000
[  140.297400][   T30] audit: type=1326 audit(1755620726.044:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe50339038a code=0x7ffc0000
[  140.320420][    C1] vkms_vblank_simulate: vblank timer overrun
[  140.382161][ T5914] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  140.394062][   T30] audit: type=1326 audit(1755620726.044:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50338ebe9 code=0x7ffc0000
[  140.435323][   T30] audit: type=1326 audit(1755620726.044:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50338ebe9 code=0x7ffc0000
[  140.586323][ T5914] usb 5-1: too many configurations: 213, using maximum allowed: 8
[  140.639010][ T5914] usb 5-1: unable to read config index 0 descriptor/start: -61
[  140.693871][ T5914] usb 5-1: can't read configurations, error -61
[  140.702928][   T30] audit: type=1326 audit(1755620726.074:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fe50338ebe9 code=0x7ffc0000
[  140.729749][   T30] audit: type=1326 audit(1755620726.074:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50338ebe9 code=0x7ffc0000
[  140.752390][    C1] vkms_vblank_simulate: vblank timer overrun
[  140.788636][   T30] audit: type=1326 audit(1755620726.074:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50338ebe9 code=0x7ffc0000
[  140.862122][ T5914] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  140.975089][ T7599] __nla_validate_parse: 1 callbacks suppressed
[  140.975107][ T7599] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.628'.
[  140.991376][ T7605] netlink: 'syz.3.631': attribute type 12 has an invalid length.
[  141.001376][ T7605] netlink: 'syz.3.631': attribute type 29 has an invalid length.
[  141.011580][ T7605] netlink: 148 bytes leftover after parsing attributes in process `syz.3.631'.
[  141.021051][ T5914] usb 5-1: too many configurations: 213, using maximum allowed: 8
[  141.038003][ T7606] netlink: 'syz.3.631': attribute type 12 has an invalid length.
[  141.047546][ T7606] netlink: 'syz.3.631': attribute type 29 has an invalid length.
[  141.077654][ T5914] usb 5-1: unable to read config index 0 descriptor/start: -61
[  141.093040][ T7606] netlink: 148 bytes leftover after parsing attributes in process `syz.3.631'.
[  141.117638][ T5914] usb 5-1: can't read configurations, error -61
[  141.146346][ T5914] usb usb5-port1: attempt power cycle
[  141.411180][ T7616] netlink: 212316 bytes leftover after parsing attributes in process `syz.3.635'.
[  141.665525][ T5914] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  141.676448][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'.
[  141.693397][ T5914] usb 5-1: too many configurations: 213, using maximum allowed: 8
[  141.713357][ T5914] usb 5-1: unable to read config index 0 descriptor/start: -61
[  141.721988][ T5914] usb 5-1: can't read configurations, error -61
[  141.736250][ T7629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.640'.
[  141.766892][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.778413][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.788644][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'.
[  141.799223][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.822358][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.832317][ T7629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.640'.
[  141.872659][ T5914] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  141.890687][ T7636] syzkaller0: entered promiscuous mode
[  141.896395][ T7636] syzkaller0: entered allmulticast mode
[  141.907581][ T5914] usb 5-1: too many configurations: 213, using maximum allowed: 8
[  141.925040][ T5914] usb 5-1: unable to read config index 0 descriptor/start: -61
[  141.938628][ T5914] usb 5-1: can't read configurations, error -61
[  141.952356][ T5914] usb usb5-port1: unable to enumerate USB device
[  142.022121][   T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  142.036843][ T7644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.647'.
[  142.244748][   T24] usb 2-1: Using ep0 maxpacket: 8
[  142.250443][   T24] usb 2-1: too many configurations: 35, using maximum allowed: 8
[  142.260918][   T24] usb 2-1: config 174 has an invalid descriptor of length 161, skipping remainder of the config
[  142.273411][   T24] usb 2-1: config 174 has 0 interfaces, different from the descriptor's value: 1
[  142.285863][   T24] usb 2-1: config 174 has an invalid descriptor of length 161, skipping remainder of the config
[  142.300204][   T24] usb 2-1: config 174 has 0 interfaces, different from the descriptor's value: 1
[  142.311216][   T24] usb 2-1: config 174 has an invalid descriptor of length 161, skipping remainder of the config
[  142.325227][   T24] usb 2-1: config 174 has 0 interfaces, different from the descriptor's value: 1
[  142.337020][   T24] usb 2-1: config 174 has an invalid descriptor of length 161, skipping remainder of the config
[  142.349566][   T24] usb 2-1: config 174 has 0 interfaces, different from the descriptor's value: 1
[  142.362947][   T24] usb 2-1: config 174 has an invalid descriptor of length 161, skipping remainder of the config
[  142.375552][   T24] usb 2-1: config 174 has 0 interfaces, different from the descriptor's value: 1
[  142.387146][   T24] usb 2-1: config 174 has an invalid descriptor of length 161, skipping remainder of the config
[  142.402394][   T24] usb 2-1: config 174 has 0 interfaces, different from the descriptor's value: 1
[  142.413446][   T24] usb 2-1: config 174 has an invalid descriptor of length 161, skipping remainder of the config
[  142.428682][   T24] usb 2-1: config 174 has 0 interfaces, different from the descriptor's value: 1
[  142.440418][   T24] usb 2-1: config 174 has an invalid descriptor of length 161, skipping remainder of the config
[  142.452340][   T24] usb 2-1: config 174 has 0 interfaces, different from the descriptor's value: 1
[  142.464796][   T24] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[  142.475748][   T24] usb 2-1: New USB device strings: Mfr=83, Product=137, SerialNumber=22
[  142.486357][   T24] usb 2-1: Product: syz
[  142.490929][   T24] usb 2-1: Manufacturer: syz
[  142.497240][   T24] usb 2-1: SerialNumber: syz
[  143.110485][ T7664] syzkaller1: entered promiscuous mode
[  143.116310][ T7664] syzkaller1: entered allmulticast mode
[  143.502316][ T5928] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  143.527849][ T7671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.655'.
[  144.002086][ T5928] usb 4-1: Using ep0 maxpacket: 16
[  144.053406][ T7680] netlink: 'syz.0.658': attribute type 12 has an invalid length.
[  144.068462][ T7680] netlink: 'syz.0.658': attribute type 29 has an invalid length.
[  144.140438][   T24] usb 2-1: USB disconnect, device number 19
[  144.160731][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.170294][ T7680] netlink: 'syz.0.658': attribute type 12 has an invalid length.
[  144.178545][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.187417][ T7680] netlink: 'syz.0.658': attribute type 29 has an invalid length.
[  144.209729][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.243866][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.263401][   T30] audit: type=1326 audit(1755620730.504:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45298ebe9 code=0x7ffc0000
[  144.294603][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.315665][ T7681] syz.3.651 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  144.338244][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.843740][ T7702] FAULT_INJECTION: forcing a failure.
[  144.843740][ T7702] name failslab, interval 1, probability 0, space 0, times 0
[  144.906089][ T7702] CPU: 0 UID: 0 PID: 7702 Comm: syz.2.666 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) 
[  144.906125][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  144.906137][ T7702] Call Trace:
[  144.906144][ T7702]  <TASK>
[  144.906152][ T7702]  dump_stack_lvl+0x189/0x250
[  144.906179][ T7702]  ? __pfx____ratelimit+0x10/0x10
[  144.906206][ T7702]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.906227][ T7702]  ? __pfx__printk+0x10/0x10
[  144.906253][ T7702]  ? fs_reclaim_acquire+0x7d/0x100
[  144.906280][ T7702]  ? rcu_is_watching+0x15/0xb0
[  144.906299][ T7702]  ? __pfx___might_resched+0x10/0x10
[  144.906315][ T7702]  ? lock_acquire+0x5f/0x360
[  144.906343][ T7702]  should_fail_ex+0x414/0x560
[  144.906369][ T7702]  should_failslab+0xa8/0x100
[  144.906398][ T7702]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  144.906425][ T7702]  ? __alloc_skb+0x112/0x2d0
[  144.906454][ T7702]  __alloc_skb+0x112/0x2d0
[  144.906483][ T7702]  netlink_sendmsg+0x5c6/0xb30
[  144.906526][ T7702]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.906556][ T7702]  ? aa_sock_msg_perm+0xf1/0x1d0
[  144.906575][ T7702]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  144.906596][ T7702]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.906623][ T7702]  __sock_sendmsg+0x219/0x270
[  144.906649][ T7702]  ____sys_sendmsg+0x505/0x830
[  144.906671][ T7702]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.906695][ T7702]  ? import_iovec+0x74/0xa0
[  144.906717][ T7702]  ___sys_sendmsg+0x21f/0x2a0
[  144.906737][ T7702]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.906770][ T7702]  ? __fget_files+0x2a/0x420
[  144.906787][ T7702]  ? __fget_files+0x3a0/0x420
[  144.906805][ T7702]  __x64_sys_sendmsg+0x19b/0x260
[  144.906837][ T7702]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  144.906860][ T7702]  ? __pfx_ksys_write+0x10/0x10
[  144.906883][ T7702]  ? rcu_is_watching+0x15/0xb0
[  144.906903][ T7702]  ? rcu_is_watching+0x15/0xb0
[  144.906923][ T7702]  do_syscall_64+0xfa/0x3b0
[  144.906950][ T7702]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.906970][ T7702]  ? clear_bhb_loop+0x60/0xb0
[  144.906991][ T7702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.907009][ T7702] RIP: 0033:0x7fd9a918ebe9
[  144.907027][ T7702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.907044][ T7702] RSP: 002b:00007fd9a9fd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.907067][ T7702] RAX: ffffffffffffffda RBX: 00007fd9a93b5fa0 RCX: 00007fd9a918ebe9
[  144.907081][ T7702] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  144.907092][ T7702] RBP: 00007fd9a9fd3090 R08: 0000000000000000 R09: 0000000000000000
[  144.907104][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.907115][ T7702] R13: 00007fd9a93b6038 R14: 00007fd9a93b5fa0 R15: 00007fd9a94dfa28
[  144.907134][ T7702]  </TASK>
[  145.493245][ T7712] netlink: 'syz.2.670': attribute type 12 has an invalid length.
[  145.506459][ T7712] netlink: 'syz.2.670': attribute type 29 has an invalid length.
[  145.515975][ T7712] netlink: 'syz.2.670': attribute type 12 has an invalid length.
[  145.526963][ T7712] netlink: 'syz.2.670': attribute type 29 has an invalid length.
[  146.147042][ T7729] syzkaller0: entered promiscuous mode
[  146.191622][ T7729] syzkaller0: entered allmulticast mode
[  146.399921][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short
[  146.436145][ T5928] usb 4-1: unable to read config index 0 descriptor/start: -71
[  146.534735][ T5928] usb 4-1: can't read configurations, error -71
[  146.551062][ T7747] netlink: 'syz.0.677': attribute type 13 has an invalid length.
[  146.998431][ T7764] netlink: 'syz.0.685': attribute type 5 has an invalid length.
[  147.099936][ T7762] __nla_validate_parse: 10 callbacks suppressed
[  147.099953][ T7762] netlink: 212316 bytes leftover after parsing attributes in process `syz.3.684'.
[  147.172977][ T7767] FAULT_INJECTION: forcing a failure.
[  147.172977][ T7767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.191870][ T7767] CPU: 1 UID: 0 PID: 7767 Comm: syz.0.686 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) 
[  147.191903][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  147.191915][ T7767] Call Trace:
[  147.191923][ T7767]  <TASK>
[  147.191931][ T7767]  dump_stack_lvl+0x189/0x250
[  147.191960][ T7767]  ? __pfx____ratelimit+0x10/0x10
[  147.191987][ T7767]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.192014][ T7767]  ? __pfx__printk+0x10/0x10
[  147.192036][ T7767]  ? __might_fault+0xb0/0x130
[  147.192061][ T7767]  ? rcu_is_watching+0x15/0xb0
[  147.192081][ T7767]  should_fail_ex+0x414/0x560
[  147.192106][ T7767]  _copy_from_iter+0x1db/0x16f0
[  147.192127][ T7767]  ? rcu_is_watching+0x15/0xb0
[  147.192146][ T7767]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  147.192172][ T7767]  ? __pfx__copy_from_iter+0x10/0x10
[  147.192191][ T7767]  ? __build_skb_around+0x257/0x3e0
[  147.192231][ T7767]  ? netlink_sendmsg+0x642/0xb30
[  147.192259][ T7767]  ? skb_put+0x11b/0x210
[  147.192277][ T7767]  netlink_sendmsg+0x6b2/0xb30
[  147.192310][ T7767]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.192339][ T7767]  ? aa_sock_msg_perm+0xf1/0x1d0
[  147.192358][ T7767]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  147.192380][ T7767]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.192408][ T7767]  __sock_sendmsg+0x219/0x270
[  147.192434][ T7767]  ____sys_sendmsg+0x505/0x830
[  147.192456][ T7767]  ? __pfx_____sys_sendmsg+0x10/0x10
[  147.192477][ T7767]  ? import_iovec+0x74/0xa0
[  147.192499][ T7767]  ___sys_sendmsg+0x21f/0x2a0
[  147.192520][ T7767]  ? __pfx____sys_sendmsg+0x10/0x10
[  147.192551][ T7767]  ? __fget_files+0x2a/0x420
[  147.192568][ T7767]  ? __fget_files+0x3a0/0x420
[  147.192589][ T7767]  __x64_sys_sendmsg+0x19b/0x260
[  147.192610][ T7767]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  147.192634][ T7767]  ? __pfx_ksys_write+0x10/0x10
[  147.192659][ T7767]  ? rcu_is_watching+0x15/0xb0
[  147.192679][ T7767]  ? rcu_is_watching+0x15/0xb0
[  147.192699][ T7767]  do_syscall_64+0xfa/0x3b0
[  147.192727][ T7767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.192746][ T7767]  ? clear_bhb_loop+0x60/0xb0
[  147.192767][ T7767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.192786][ T7767] RIP: 0033:0x7fdaf478ebe9
[  147.192805][ T7767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.192822][ T7767] RSP: 002b:00007fdaf568b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.192845][ T7767] RAX: ffffffffffffffda RBX: 00007fdaf49b5fa0 RCX: 00007fdaf478ebe9
[  147.192859][ T7767] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  147.192872][ T7767] RBP: 00007fdaf568b090 R08: 0000000000000000 R09: 0000000000000000
[  147.192885][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.192897][ T7767] R13: 00007fdaf49b6038 R14: 00007fdaf49b5fa0 R15: 00007fdaf4adfa28
[  147.192917][ T7767]  </TASK>
[  147.482737][    C1] vkms_vblank_simulate: vblank timer overrun
[  147.514488][ T7769] syzkaller0: entered promiscuous mode
[  147.520160][ T7769] syzkaller0: entered allmulticast mode
[  147.786232][ T7775] bond0: Caught tx_queue_len zero misconfig
[  147.965313][ T7782] FAULT_INJECTION: forcing a failure.
[  147.965313][ T7782] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.978648][ T7782] CPU: 1 UID: 0 PID: 7782 Comm: syz.3.695 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) 
[  147.978666][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  147.978674][ T7782] Call Trace:
[  147.978680][ T7782]  <TASK>
[  147.978685][ T7782]  dump_stack_lvl+0x189/0x250
[  147.978704][ T7782]  ? __pfx____ratelimit+0x10/0x10
[  147.978720][ T7782]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.978733][ T7782]  ? __pfx__printk+0x10/0x10
[  147.978748][ T7782]  ? __might_fault+0xb0/0x130
[  147.978764][ T7782]  ? rcu_is_watching+0x15/0xb0
[  147.978776][ T7782]  should_fail_ex+0x414/0x560
[  147.978793][ T7782]  _copy_from_user+0x2d/0xb0
[  147.978807][ T7782]  ___sys_sendmsg+0x158/0x2a0
[  147.978820][ T7782]  ? __pfx____sys_sendmsg+0x10/0x10
[  147.978838][ T7782]  ? __fget_files+0x2a/0x420
[  147.978848][ T7782]  ? __fget_files+0x3a0/0x420
[  147.978860][ T7782]  __x64_sys_sendmsg+0x19b/0x260
[  147.978872][ T7782]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  147.978885][ T7782]  ? __pfx_ksys_write+0x10/0x10
[  147.978899][ T7782]  ? rcu_is_watching+0x15/0xb0
[  147.978911][ T7782]  ? rcu_is_watching+0x15/0xb0
[  147.978922][ T7782]  do_syscall_64+0xfa/0x3b0
[  147.978939][ T7782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.978950][ T7782]  ? clear_bhb_loop+0x60/0xb0
[  147.978962][ T7782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.978973][ T7782] RIP: 0033:0x7ff45298ebe9
[  147.978984][ T7782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.978995][ T7782] RSP: 002b:00007ff45371e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.979009][ T7782] RAX: ffffffffffffffda RBX: 00007ff452bb5fa0 RCX: 00007ff45298ebe9
[  147.979018][ T7782] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[  147.979026][ T7782] RBP: 00007ff45371e090 R08: 0000000000000000 R09: 0000000000000000
[  147.979033][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.979040][ T7782] R13: 00007ff452bb6038 R14: 00007ff452bb5fa0 R15: 00007ff452cdfa28
[  147.979052][ T7782]  </TASK>
[  148.193817][    C1] vkms_vblank_simulate: vblank timer overrun
[  148.489847][ T7788] netlink: 148 bytes leftover after parsing attributes in process `syz.3.696'.
[  148.494656][ T7791] netlink: 44 bytes leftover after parsing attributes in process `syz.0.697'.
[  148.654005][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'.
[  148.665284][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'.
[  148.691761][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.703550][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.713290][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'.
[  148.734708][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'.
[  148.762654][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.786543][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.856822][ T7803] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.928930][ T7803] bond1: (slave geneve2): making interface the new active one
[  148.969033][ T7803] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  149.037145][ T7805] 8021q: adding VLAN 0 to HW filter on device bond1
[  149.055304][ T7805] bond1: (slave gretap1): making interface the new active one
[  149.072733][ T7805] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  149.115327][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'.
[  149.129864][ T7803] syz.2.702 (7803) used greatest stack depth: 17264 bytes left
[  149.170910][ T7811] validate_nla: 6 callbacks suppressed
[  149.170931][ T7811] netlink: 'syz.2.704': attribute type 2 has an invalid length.
[  149.188056][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'.
[  149.214317][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'.
[  149.233512][ T7813] bond0: Caught tx_queue_len zero misconfig
[  149.317376][ T7816] netlink: 'syz.2.706': attribute type 30 has an invalid length.
[  149.404441][ T7824] netlink: 'syz.2.709': attribute type 13 has an invalid length.
[  149.605439][   T60] ==================================================================
[  149.613860][   T60] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x698/0x7e0
[  149.621967][   T60] Read of size 1 at addr ffff88804cbeccc1 by task kworker/u8:4/60
[  149.630596][   T60] 
[  149.633254][   T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) 
[  149.633283][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  149.633306][   T60] Workqueue: events_unbound linkwatch_event
[  149.633337][   T60] Call Trace:
[  149.633346][   T60]  <TASK>
[  149.633354][   T60]  dump_stack_lvl+0x189/0x250
[  149.633383][   T60]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.633406][   T60]  ? lock_release+0x4b/0x3e0
[  149.633434][   T60]  ? __virt_addr_valid+0x4a5/0x5c0
[  149.633461][   T60]  print_report+0xca/0x240
[  149.633479][   T60]  ? __linkwatch_run_queue+0x698/0x7e0
[  149.633501][   T60]  kasan_report+0x118/0x150
[  149.633530][   T60]  ? __linkwatch_run_queue+0x698/0x7e0
[  149.633664][   T60]  __linkwatch_run_queue+0x698/0x7e0
[  149.633702][   T60]  ? __pfx___linkwatch_run_queue+0x10/0x10
[  149.633724][   T60]  ? rcu_is_watching+0x15/0xb0
[  149.633741][   T60]  ? process_scheduled_works+0x9ef/0x17b0
[  149.633760][   T60]  ? process_scheduled_works+0x9ef/0x17b0
[  149.633778][   T60]  linkwatch_event+0x4c/0x60
[  149.633798][   T60]  process_scheduled_works+0xade/0x17b0
[  149.633840][   T60]  ? __pfx_process_scheduled_works+0x10/0x10
[  149.633871][   T60]  worker_thread+0x8a0/0xda0
[  149.633891][   T60]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  149.633918][   T60]  ? __kthread_parkme+0x7b/0x200
[  149.633942][   T60]  kthread+0x70e/0x8a0
[  149.633966][   T60]  ? __pfx_worker_thread+0x10/0x10
[  149.633985][   T60]  ? __pfx_kthread+0x10/0x10
[  149.634009][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  149.634030][   T60]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.634057][   T60]  ? __pfx_kthread+0x10/0x10
[  149.634080][   T60]  ret_from_fork+0x3f9/0x770
[  149.634103][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  149.634125][   T60]  ? __switch_to_asm+0x39/0x70
[  149.634148][   T60]  ? __switch_to_asm+0x33/0x70
[  149.634172][   T60]  ? __pfx_kthread+0x10/0x10
[  149.634194][   T60]  ret_from_fork_asm+0x1a/0x30
[  149.634225][   T60]  </TASK>
[  149.634233][   T60] 
[  149.846648][   T60] The buggy address belongs to the physical page:
[  149.854121][   T60] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804cbecf00 pfn:0x4cbec
[  149.865194][   T60] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  149.872424][   T60] raw: 00fff00000000000 ffffea0001341a08 ffff8880b863fdc0 0000000000000000
[  149.881103][   T60] raw: ffff88804cbecf00 0000000000000000 00000000ffffffff 0000000000000000
[  149.889866][   T60] page dumped because: kasan: bad access detected
[  149.896293][   T60] page_owner tracks the page as freed
[  149.901847][   T60] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 7828, tgid 7821 (syz.2.709), ts 149509356092, free_ts 149593058145
[  149.923643][   T60]  post_alloc_hook+0x240/0x2a0
[  149.928512][   T60]  get_page_from_freelist+0x21e4/0x22c0
[  149.934151][   T60]  __alloc_frozen_pages_noprof+0x181/0x370
[  149.940322][   T60]  alloc_pages_mpol+0x232/0x4a0
[  149.945509][   T60]  ___kmalloc_large_node+0x5f/0x1b0
[  149.950921][   T60]  __kmalloc_large_node_noprof+0x18/0x90
[  149.956595][   T60]  __kvmalloc_node_noprof+0x6d/0x5f0
[  149.961998][   T60]  alloc_netdev_mqs+0xa3/0x11b0
[  149.966876][   T60]  tun_set_iff+0x532/0xef0
[  149.971308][   T60]  __tun_chr_ioctl+0x788/0x1df0
[  149.976266][   T60]  __se_sys_ioctl+0xf9/0x170
[  149.980958][   T60]  do_syscall_64+0xfa/0x3b0
[  149.985753][   T60]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.991750][   T60] page last free pid 7821 tgid 7821 stack trace:
[  149.998256][   T60]  __free_frozen_pages+0xbc4/0xd30
[  150.003477][   T60]  free_large_kmalloc+0x13a/0x1f0
[  150.008774][   T60]  device_release+0x9c/0x1c0
[  150.013475][   T60]  kobject_put+0x22b/0x480
[  150.017932][   T60]  netdev_run_todo+0xd2e/0xea0
[  150.022942][   T60]  tun_chr_close+0x13c/0x1c0
[  150.027643][   T60]  __fput+0x44c/0xa70
[  150.031661][   T60]  task_work_run+0x1d4/0x260
[  150.036277][   T60]  exit_to_user_mode_loop+0xec/0x110
[  150.041589][   T60]  do_syscall_64+0x2bd/0x3b0
[  150.046326][   T60]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.052411][   T60] 
[  150.054753][   T60] Memory state around the buggy address:
[  150.061510][   T60]  ffff88804cbecb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  150.070121][   T60]  ffff88804cbecc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  150.078579][   T60] >ffff88804cbecc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  150.087424][   T60]                                            ^
[  150.094498][   T60]  ffff88804cbecd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  150.102675][   T60]  ffff88804cbecd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  150.111452][   T60] ==================================================================
[  150.127570][   T60] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  150.134966][   T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) 
[  150.147838][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  150.159741][   T60] Workqueue: events_unbound linkwatch_event
[  150.165659][   T60] Call Trace:
[  150.168944][   T60]  <TASK>
[  150.171990][   T60]  dump_stack_lvl+0x99/0x250
[  150.176846][   T60]  ? __asan_memcpy+0x40/0x70
[  150.181651][   T60]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.187080][   T60]  ? __pfx__printk+0x10/0x10
[  150.191980][   T60]  vpanic+0x281/0x750
[  150.196098][   T60]  ? preempt_schedule+0xae/0xc0
[  150.201090][   T60]  ? __pfx_vpanic+0x10/0x10
[  150.205894][   T60]  ? preempt_schedule_common+0x83/0xd0
[  150.211667][   T60]  ? preempt_schedule+0xae/0xc0
[  150.216759][   T60]  ? __pfx_preempt_schedule+0x10/0x10
[  150.222344][   T60]  panic+0xb9/0xc0
[  150.226200][   T60]  ? __pfx_panic+0x10/0x10
[  150.230646][   T60]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  150.236579][   T60]  ? __linkwatch_run_queue+0x698/0x7e0
[  150.242185][   T60]  check_panic_on_warn+0x89/0xb0
[  150.247164][   T60]  ? __linkwatch_run_queue+0x698/0x7e0
[  150.252635][   T60]  end_report+0x78/0x160
[  150.257260][   T60]  kasan_report+0x129/0x150
[  150.261859][   T60]  ? __linkwatch_run_queue+0x698/0x7e0
[  150.267482][   T60]  __linkwatch_run_queue+0x698/0x7e0
[  150.272921][   T60]  ? __pfx___linkwatch_run_queue+0x10/0x10
[  150.278775][   T60]  ? rcu_is_watching+0x15/0xb0
[  150.283847][   T60]  ? process_scheduled_works+0x9ef/0x17b0
[  150.289619][   T60]  ? process_scheduled_works+0x9ef/0x17b0
[  150.295413][   T60]  linkwatch_event+0x4c/0x60
[  150.300072][   T60]  process_scheduled_works+0xade/0x17b0
[  150.305788][   T60]  ? __pfx_process_scheduled_works+0x10/0x10
[  150.311881][   T60]  worker_thread+0x8a0/0xda0
[  150.316521][   T60]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  150.323045][   T60]  ? __kthread_parkme+0x7b/0x200
[  150.328211][   T60]  kthread+0x70e/0x8a0
[  150.332353][   T60]  ? __pfx_worker_thread+0x10/0x10
[  150.337911][   T60]  ? __pfx_kthread+0x10/0x10
[  150.342577][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  150.347822][   T60]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.353151][   T60]  ? __pfx_kthread+0x10/0x10
[  150.357915][   T60]  ret_from_fork+0x3f9/0x770
[  150.362819][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  150.368267][   T60]  ? __switch_to_asm+0x39/0x70
[  150.373158][   T60]  ? __switch_to_asm+0x33/0x70
[  150.378029][   T60]  ? __pfx_kthread+0x10/0x10
[  150.382663][   T60]  ret_from_fork_asm+0x1a/0x30
[  150.387512][   T60]  </TASK>
[  150.402539][   T60] Kernel Offset: disabled
[  150.406932][   T60] Rebooting in 86400 seconds..