last executing test programs:

2m51.032955302s ago: executing program 2 (id=364):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xe, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca}}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e1d, 0x3, @loopback, 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)}], 0x1}, 0x4004000)
io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0xb4}}, 0x400c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x8080000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x3, 0x0, 0x30, 0x19}, {0x41000, 0xa000, 0xd, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3}, {0xffff1000, 0x10000, 0xe, 0x5, 0x3, 0x2, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x82}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x3f, 0x3, 0xfa, 0x80, 0xb, 0xe, 0xff}, {0x0, 0x8000000, 0xb, 0x1, 0x3, 0x87, 0xab, 0x8, 0x7, 0x83, 0x3, 0x82}, {0x60000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xf, 0x4, 0xfd}, {0x54000, 0xeeee0000, 0x4, 0x5, 0x9, 0x2, 0xb, 0x0, 0x5, 0x8, 0xff, 0x5}, {0xd000, 0x1000, 0xb, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x3, 0x9}, {0xb000, 0x2d}, {0x30000, 0x7fff}, 0x80000031, 0x0, 0x54000, 0x42024, 0x400000000000000b, 0x1, 0x70000, [0x6840000000000002, 0x7fffffffffffffff, 0x10de, 0xff]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8054)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="13000000200001"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b240605", @ANYRES64], 0x0)

2m47.212772499s ago: executing program 2 (id=371):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b29010001000000010902200001010080320904000002ffffff00070501020002"], 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)

2m43.952925636s ago: executing program 2 (id=379):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000001c0)="11dbb0d3", 0x4}], 0x1}}], 0x1, 0x4000010)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xa7}, &(0x7f00000000c0)=0x8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_INTERRUPT(r6, 0x4004ae86, 0x0)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000001340))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000000c0)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044090}, 0xc4)
syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000680)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}}, 0x8000)

2m41.988463284s ago: executing program 2 (id=397):
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1ff}}, './file0\x00'})
openat(r0, &(0x7f0000000080)='./file0\x00', 0x84000, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x71)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3)
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[], 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
sendmmsg$inet(r1, &(0x7f00000001c0), 0x0, 0x24048084)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x14, 0x9}})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000092}]})
lsetxattr(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000540)=@random={'system.', '[\\*}\x00'}, 0x0, 0x44, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x1c1c00)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1500}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x4004000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
poll(&(0x7f0000000040)=[{r5, 0x15a4}], 0x1, 0xb9)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r9, 0x0)

2m38.851716564s ago: executing program 2 (id=417):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804)
sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae35902b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0d04000000ac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9bc6ec163917bee3f5602f840a1759670ea43b7f596b347d8b9116506356d0279d21f6a0cab3056c27dec074e8dac12c1d99afcd84f82a47a0cb5093c7a221f7fb624e2f6e9eeca4e5050fc3be50bbdc62d41333b4243336a5590e49658a10b5c8624eb2410d68e64f230fdcf4689495ca41e818d4808b18592610bf62403c2eaad20d1d8fb185ebefac64aa0eb1d36ccacf61ec28b4ec24dba53b21ed5c5f727cccb0d614884908957138d2c30560e88f128af21ccc9fd64d229f35b2f76d0ee9e25f9e4390a55a8600449774ca116e3ba523c9c5d39abcf09a76127c17fc6194711f20307ead0d5bbbe2aa3f677156b8856411a8045159df771ac3e3d5828e359c24a59d65e92f4112fb697ab825536751f82e9d55e89853a03c693d418c4d2cccb61c6f60ad304a68d15fc20edaec9af4725f47c8e1724cfd5099a59147bcc872fafe7565f98c3c3edb83c96b0aff30779783467d4348d5e28d9afd5e77ce5dabc1c4d5d790339490703d9050ef8d919d5d5f71a26bd9b72ea53933eecb6cd8a09bc67f5a6b0450fbfcce6837ab696975ba8387815bfa1c497f37ed8b9151bb1105d5efbf3b5034e5bdde5fdb60f996c1fcf75201c52d47ab3b31a4112d6cb61c3beaeb97d03744cfb01409dd1b1258e0d5856df535c241017509a193043296e202834cc4eb50417c56f93093ca61a9c1373904faa2564ad469d8329dd1256f9648af69d6007d8bca7b566cee8a263c07021e9f71b82c07ca8fbe3", 0x3f3}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400)
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0xd000, 0x80a0000, 0x40, 0x0, 0x8})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x6, {{0xa, 0x4e20, 0x7ff, @private1, 0xd5}}, 0x0, 0x4, [{{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4}}, {{0xa, 0x4e20, 0x5, @local, 0x4}}, {{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x7fff}}, {{0xa, 0x4e23, 0x2, @empty, 0x4}}]}, 0x290)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r3, 0x0, 0x0)
sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x0)

2m38.53870441s ago: executing program 2 (id=419):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
epoll_create1(0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200020d4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}})
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x2e8, 0x258, 0x258, 0x2e8, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x6c4, 0x7, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e20, 0x4e22, 0x4e23, 0x4e21, 0x4e22, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x11, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1], 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x418)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80)
r3 = socket(0x1e, 0x1, 0x0)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r4, 0x2219, 0xcf76, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})

2m23.466417304s ago: executing program 32 (id=419):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
epoll_create1(0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200020d4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}})
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x2e8, 0x258, 0x258, 0x2e8, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x6c4, 0x7, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e20, 0x4e22, 0x4e23, 0x4e21, 0x4e22, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x11, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1], 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x418)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80)
r3 = socket(0x1e, 0x1, 0x0)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r4, 0x2219, 0xcf76, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})

6.206819625s ago: executing program 0 (id=1240):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8000, 0xfa, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x7d, 0xc4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xcc1d, 0x1000, 0xfffffffd, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
r8 = dup(r7)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x7fffffff, @mcast2, 0x9}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, 0x0, 0x0)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x400, 0x3, 0x259, 0x0, r1}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x69d8, 0x40, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x4, 0x0, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x4, 0x254}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r11=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x84000, 0xffffffffffffffaa, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x5, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0x10, 0x0, 0xa, 0x7fe}]})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)

5.841278714s ago: executing program 5 (id=1243):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000980)={0x3, 0x1, @stop_pts=0x40})
pipe2(&(0x7f0000002300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r1, 0x0, 0x93, 0x0)
write$FUSE_ENTRY(r4, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x2, 0x5, 0x5, 0xfffffffa, 0x3, {0x4, 0x80f, 0x7fff, 0x7, 0xa, 0x1, 0x8, 0x800, 0x6, 0xa000, 0x80002, 0x0, 0x0, 0x6704, 0x4919}}}, 0x90)
landlock_restrict_self(r0, 0xe)

5.475248431s ago: executing program 5 (id=1245):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0)
open(&(0x7f00000001c0)='./net/netfilter/nfnetlink_queue\x00', 0x8080, 0x12e) (fail_nth: 16)

5.252285077s ago: executing program 5 (id=1247):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27031c00160014000000002f1eafacf706e105400000886400050004ee0b00218ddbba9b37242d37a518fc9c5be50eaf07c36505963444125d7d4e2402c959a35e7a0ce9696a5224ce10bf629184338228555fe4", 0x54}], 0x1}, 0x4)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x8001, 0x4, 0xfffffffffffff8e3, 0x8, 0x401, 0x2, 0x92ad, 0x9, 0x3, 0x7e, 0x8c7, 0xffffffff, 0x3, 0x6, 0x3], 0xe000, 0x21080})

4.967327423s ago: executing program 5 (id=1248):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}, {0x28, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x4080)

4.860009546s ago: executing program 5 (id=1249):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x8, @loopback, 0x6}, @in6={0xa, 0x4e24, 0x1c000, @mcast2, 0x7}], 0x38)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0x60b, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100003042cbd70003f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88100000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="05001100e094a991b8c17ad9c45aef15920900000008001b0002000000"], 0x48}, 0x1, 0x300000000000000, 0x0, 0x4000}, 0x0)

4.389007526s ago: executing program 3 (id=1251):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x6}, 0x10, 0xffffffffffffffff}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000002060101000000000000000007000002df96b605a417b37b042e45877f8140691eef82dc7f89e2b48d55af6eba803f9c31bfdb3b231c949c22170fd47710e1310c612a61faa5ddb401fe598aa00b"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x4f8, 0xffffffff, 0x1e0, 0x0, 0x358, 0xfeffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0x1a0, 0x1e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3d11b30a, 0x8, 0x2, 0x1, 'syz0\x00', 0x4}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8)
fallocate(r3, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r3, 0x2000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x400, 0x18000011, r4, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x60a02, 0x0)
sendfile(r8, r8, 0x0, 0x3)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206050300000000000000000000000005000400000000000900020073797a32000000000c0007800800064000000fff0500050002b18a93bd7fd88da53a0c0e761d13000000050001000600000013000300686173682c6e65742c69666163650000402712ce5e7cd8dbc601e8ede4f0e704e0b34f53c58f692be1bd52c4ee1df921fec145f74210f365238d20f25ec50d61d7ad0673fa17ba7d09c4044b444fbcafe1a1a1ae580442dd9db5ce"], 0x58}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4000002}, 0x28)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
gettid()
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)

4.388879906s ago: executing program 1 (id=1252):
r0 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1}) (fail_nth: 15)

4.147760465s ago: executing program 1 (id=1253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00')
read$FUSE(r2, &(0x7f00000095c0)={0x2020}, 0x2020)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={<r4=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000040)=0x10)
shutdown(r3, 0x2)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000000c0)={r4}, &(0x7f0000000140)=0x8)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001940)=ANY=[@ANYBLOB="38010000100005000100000000000000000000000000000000000000000000010000000000000000000000000000000100000800000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="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"], 0x138}}, 0x0)
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af83, &(0x7f0000000740))
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000020605021c0000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000001c02080006400000000005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x48010}, 0x20004100)
r7 = io_uring_setup(0x56fe, &(0x7f0000000180)={0x0, 0x1150, 0x1000, 0x0, 0x306})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9567, 0x40, 0x0, 0x2a, 0x0, r7}, <r8=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x399a, 0x80000, 0x0, 0x27f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7e53, 0x8a68, 0x0, 0x25a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3f25, 0x80, 0x1, 0x132}}], 0x4, &(0x7f0000001780)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x0, 0x52a, 0x0, &(0x7f0000000780)=@buf_512="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"}}, &(0x7f0000001800))
io_uring_register$IORING_REGISTER_SEND_MSG_RING(r8, 0x1f, &(0x7f0000001900)={0x28, 0x21, 0x0, 0xffffffffffffffff, &(0x7f0000001840)="a0d1472cae6c9cb0d576febb70fa5b2a6c0e040915f65a05ccc9f363f002055b84f2235f894d4696c34948441eabe66db4c92ddd3b5bf16066e813e3495e73dc3d37e8ede52fde4655326280595595b37be46d9621bd296feddccda439396cfff59862e737a84b185239dc432626d2ba35cae3dc873cf6033ec78be6c875a57a9057d86d4d0a161f0e34e16c8e1df9877ccf314304210c067b", 0x1, 0x8, 0x2, 0x1, {0x0, 0x0, r1, 0xfffffffffffffffc}}, 0x1)

3.995679448s ago: executing program 4 (id=1254):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x56, 0x1, 0x5, 0x1010, 0xa})
rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2, 0xa, 0x1, 0xfff}, 0x1}, 0x20, 0x0, 0x0)
rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5, 0xd7, 0x2, 0x1ff}, 0x1}, 0x20, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x100010, 0xffffffffffffffff, 0xde734000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={<r2=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18)
rseq(&(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x5, 0x38, 0x5f3, 0xb75}, 0x7}, 0x20, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x5, 0x8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x7800, 0x1, 0x1f5, 0x80}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r7=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={<r8=>0x0, @dev, @local}, &(0x7f0000000700)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', <r9=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000780)={@initdev, @multicast2, <r10=>0x0}, &(0x7f00000007c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', <r11=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000840)={'gretap0\x00', <r12=>0x0, 0x1, 0x700, 0x0, 0x1, {{0x22, 0x4, 0x0, 0x8, 0x88, 0x65, 0x7fff, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, {[@timestamp_addr={0x44, 0x3c, 0xbf, 0x1, 0x1, [{@loopback, 0x81f}, {@multicast2, 0x1}, {@multicast1}, {@empty, 0x10000}, {@local, 0x14}, {@loopback, 0x5}, {@local, 0xd}]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x10, "3ce76f32b297c65aaf4c63623f7c"}, @timestamp_prespec={0x44, 0x24, 0x99, 0x3, 0xf, [{@multicast2, 0x1}, {@multicast1, 0x380}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x7e}, {@multicast2, 0xfffffc01}]}]}}}}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000940)={@rand_addr, @empty, <r13=>0x0}, &(0x7f0000000980)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000f40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f00000009c0)={0x528, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffe}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffeffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x528}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040040)
syz_open_dev$rtc(&(0x7f0000000f80), 0x3, 0x80000)
r14 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r14, 0x11b, 0x4, &(0x7f0000001080)={&(0x7f0000000fc0)=""/148, 0x0, 0x1000, 0x0, 0x3}, 0x20)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), r3)
getsockname$packet(r1, &(0x7f0000001140)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001180)=0x14)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000001340)={&(0x7f00000010c0), 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x108, r15, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
r17 = openat2(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x200, 0xc0, 0x2}, 0x18)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r17, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x54, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1000}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x671}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x100}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8204b12e53da8100}, 0x20004010)
sendmsg$tipc(r17, &(0x7f0000002780)={&(0x7f0000001540)=@name={0x1e, 0x2, 0x2, {{0x41}, 0x3}}, 0x10, &(0x7f0000002640)=[{&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="57cfc34fa39806c7c8ec0319437d23ac9dcfef1ec967cddec258da6ee6069cca9635c8501926a9834ff4a6c5924de8596b0fcce9c9cfbda9ea2436c806d2fd53eae4ba3bbf80ae443d86774c41aeabd55a11a59c5f840e4cbc94be82e9a0878cefd865e35c5931", 0x67}, {&(0x7f0000002600)="1395c1519bee0d799964de91ed72b4cf02", 0x11}], 0x3, &(0x7f0000002680)="a2538dcdf0c835647f93bdf0394ba090de036b8a2eebb8aed3fd690e2cec357924b0d3bc5bc9bc70c27ea24ba2ee65602629adca39e006369c3d5d9d33472885c207eb0e8d2d3232a4a48ad009fe860c71c4a56c494e4856e2604503cb8eed799341e1d4ae475fe1a35c759adfe00b9aa76c434e028fd71fc220b7cd540162d8341c01153fb61e1cfc993da7be25c9fdb70f3fa016ffd521dc5e732b7fe5e46c83bf9524d58fbfa67d7ce08fe68887fb61352e89f3f5103458bd05a6628482e05b287215d09565769a98c0", 0xcb, 0x10}, 0x10)

3.575112762s ago: executing program 4 (id=1255):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
r1 = fcntl$dupfd(r0, 0x406, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000073013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/mdstat\x00', 0x0, 0x0)
r3 = epoll_create(0x7)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r4, 0x5501)
write$input_event(r4, &(0x7f0000000180)={{}, 0x12, 0x1, 0x7}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x30000018})
read$FUSE(r1, 0x0, 0x0)

2.989194788s ago: executing program 0 (id=1256):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0, 0x6000}}, {{&(0x7f0000000680)={0xa, 0x4e20, 0x3, @mcast2, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00'], 0x60}}], 0x2, 0x24014401)

2.918128272s ago: executing program 1 (id=1257):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00')
read$FUSE(r2, &(0x7f00000095c0)={0x2020}, 0x2020)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={<r4=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000040)=0x10)
shutdown(r3, 0x2)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000000c0)={r4}, &(0x7f0000000140)=0x8)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001940)=ANY=[@ANYBLOB="38010000100005000100000000000000000000000000000000000000000000010000000000000000000000000000000100000800000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="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"], 0x138}}, 0x0)
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af83, &(0x7f0000000740))
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000020605021c0000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000001c02080006400000000005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x48010}, 0x20004100) (fail_nth: 3)
r7 = io_uring_setup(0x56fe, &(0x7f0000000180)={0x0, 0x1150, 0x1000, 0x0, 0x306})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9567, 0x40, 0x0, 0x2a, 0x0, r7}, <r8=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x399a, 0x80000, 0x0, 0x27f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7e53, 0x8a68, 0x0, 0x25a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3f25, 0x80, 0x1, 0x132}}], 0x4, &(0x7f0000001780)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x0, 0x52a, 0x0, &(0x7f0000000780)=@buf_512="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"}}, &(0x7f0000001800))
io_uring_register$IORING_REGISTER_SEND_MSG_RING(r8, 0x1f, &(0x7f0000001900)={0x28, 0x21, 0x0, 0xffffffffffffffff, &(0x7f0000001840)="a0d1472cae6c9cb0d576febb70fa5b2a6c0e040915f65a05ccc9f363f002055b84f2235f894d4696c34948441eabe66db4c92ddd3b5bf16066e813e3495e73dc3d37e8ede52fde4655326280595595b37be46d9621bd296feddccda439396cfff59862e737a84b185239dc432626d2ba35cae3dc873cf6033ec78be6c875a57a9057d86d4d0a161f0e34e16c8e1df9877ccf314304210c067b", 0x1, 0x8, 0x2, 0x1, {0x0, 0x0, r1, 0xfffffffffffffffc}}, 0x1)

2.834584248s ago: executing program 0 (id=1258):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @request_death], 0xfffc, 0x0, 0x0})

2.746392633s ago: executing program 0 (id=1259):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}, {0x28, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x4080)

2.670517425s ago: executing program 0 (id=1260):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000ec0)={0xa, @pix_mp={0x0, 0x4000, 0x35303553, 0x2, 0x1, [{0x40000}, {0x0, 0x80}, {0xb6e7}, {0x0, 0xffffffff}, {0x5, 0xdfc}, {0xa8}, {0x3, 0x1ffa}], 0x0, 0x0, 0x0, 0x2, 0x2}})
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00')
lseek(r1, 0x100000001, 0x0)
r2 = socket(0x2b, 0x1, 0x1)
fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb)
unlink(0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = gettid()
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setuid(0xee01)
ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000080)=0xfffffffb, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="dd6b69fa402410d516091d4cc0e8a0399d6f21e7cb76bddf4370d2e9f6bd8680601ef1423aa3667ad02d774e72e69f0480cf99449c2fddbfa0e6fb9ec0e92744b6a8f8ecd03487e0300453cd1c0e62c1860c97b76a5c8409579b1cd9d67c8f0de177fd27bc2da95a5b13c0abbe8a9aa130d71315b218a113ef973ce27039e01b73aee4ccfc421866f5dcbedf1c46d40f633aab3d684eed68f255db456d3d", 0x9e}, {&(0x7f0000000440)="48582d6dc94e59129dfb39da4e7b4270e2a6d3ef2f73c589c2302eb460f3a150e8973dff948dd2b06023086dbb687e2c5cb62e760266a3ccfe15d26f08c5408c0e8ec77ac019546c2cc6768fe7c655107de2084f5649aa0291bf66f11a8762e29c20c6", 0x63}, {&(0x7f0000000580)="478c7f3d20c211bee07362522a13dc5b2920527bb78b76a0e78e2565242bfb07ed9a51a25b17bbf3b3f8f9b805969122316789c8e4412431ecfbf70761c29e97f26f9ba68dcbc262abe1d7ee391d2e407081b054c659e585844d549031ba811d3e9aaef284ea0fc77fbb74080bc5062c338c6af80222e48fc2092a3454904a256f41197970b13a6b6da78e53579e9952c354d8bb2fe198a04105e3351810066fcedc7250f6727f98cd435a1cd8880e2ee16018357e0b39a06be0519b117aceca2c840d4843cb9a9a4a", 0xc9}, {&(0x7f0000000680)="7cf4ef014c865d7d9e6c8cfef3cb968b4b9a2acf1fc55a832dae11e5a7a2a30b48762dbaf3c55237696e549e7f08731e532c2d70f4366df32e97d0c2a57428602ab509c0f7ba8eb562551678625dc3a5588f8e6fbabbe40aad1464dac2468b1c661dae48b2308263c395850245d7b1aad73a0362eec1a906c58b6f78465b561fef5d8cb56739124703ac956140164ad12e5e2e03567a9efc15affa1e22f36f3c5ca8776060af6d98e8417190279eadb643ae2b81fc6003b86ae9c2e81092a26e", 0xc0}, {&(0x7f0000000740)="09c5553cb83a59d97f22169f7a248b267983c8a7a6d83e4459264e9d9ba074950fc76af94c2672018c7a454081d90532688af520c3f309a6dad142f4664d291ce1b9c4c0efb87dabb60ef863c0bdbe0c56f628443c99e5419c622e76d3f3998792c275a0a0f16ae00a48f0fbd179", 0x6e}, {&(0x7f00000007c0)="cd90c08c12b7ea960f62ae470d83a0f2fab7679ca78f8b71138d0c665fbf42dc7057de96221dbe95a4bf13f21c5af6313bb8d1b67ab5d9a466d1d55297263602b4dff6f8f2aa5cda12c3babafa2e83ae64808110f8df12d15be27c1c1fd127d442e7773209146b75d5a36875e40bba5723a9f556888b4fe1ad4859936757af65fab252c9b0a335", 0x87}, {&(0x7f0000000880)="57b34dd4d15ce88629e8fa8f1aaee4089a03316f1c607861fbc983fcbc8460f904", 0x21}], 0x8, &(0x7f0000000b00)=[@rights={{0x28, 0x1, 0x1, [r2, r2, r7, r7, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x48, 0x4010}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000c00)="ae1cb2", 0x3}, {&(0x7f0000000c40)="5f8c462a16f7963cfe658b9a814709dc1dc9c4e129c807175f674749dce386e10de7289e78e4d273b0a7c8a2b7468343a6d229911e8ed09cda88208ccdd39848c004737a751307b3a26b", 0x4a}, {&(0x7f0000000cc0)="283865bfb0169f62957c15155f35a67bfc3a", 0x12}, {&(0x7f0000000d00)="5136c01e928dee73690861093a278961be25849a8ba9fe76185efc9aabcb3338c65523119931321efadce6bc15b73b77cd81f384170e44bfa8c66120f6a591fa72612ec6f8ad580ca9c1a9fb856a49ce65a114e15f8b788a7a720b2efc17714685cf95995276bdb1628bacd13fe10403790ad0c06881ec0a14fc7ef38e23e6d88befcb9c08a9b9493d2629976cc74aeadfbe079137f7b82813f839ce53c80b4667a6b7b8a60a6f62444b7fe1d70e3ef814d8ec8c98372d694596e27243da552f8f4bafba8994291751de583e91cdef91871b992f4c6e1b403239b54552eaa365150601766c66bef846b6318de7", 0xed}, {&(0x7f0000000e00)="fba5b62ee4be2e584591cce3fd8bfce5e71854418cc0c901f866f0", 0x1b}], 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000f2ffffff2e2252813f6f4e3aff530000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r7, @ANYRES32, @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x8000}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001080)="38717044934b39c332a17333a2ee79c267a751eb0a9e09d0ea6c4093d457d06ae6aeaccbdff848c30d9c91134d8c3fa3d8caef0c69109b57f19876220f971f08bb324a79b5e3b152211c5f7582892805f99aea528f159ae9aa26b3d89b059386172d894af9a775582fc6670fa09294addcf88dda4654bce16ec0d9ef27b77f52f7fe976d740285ee72a83c059cd8d6b01245af38d7488281129b8dc9c1bda19193746ea5649a70817e149e077b421fece98994fe1d0a132b229f64301eb4c79abe213a5c0784e8", 0xc7}, {&(0x7f0000001180)="119fc052be05bb1ced6b36b0588458321680cfa6add3c2c0690c36fc7351c3907f59ff75353512b0ee29a2649d84ee5d0d8cb1e3be5252893b7bc38d8bc4776c9c8b29c2c47ea44b30ae426397b1a4937bdaf6981ea36229", 0x58}, {&(0x7f0000001240)="f8cd646ed1cb866c3ce77027dddf3baaec7b8b747c028ea270a01aca", 0x1c}, {&(0x7f0000001280)="76d70453c9badff17da964", 0xb}, {0x0}, {&(0x7f0000001340)="4a16c35906a9f4b8b91a5cec54be6d850aff8ed86aa619ec61fde4313a6c9dd96cb9fbba3d10cde27f2e3c9a496f7bc360911f2dbd9f3bee9e7a43588f6d26b2dbc8498902b48c70aebb8ec8c609d00a2f3cef0c37b8f841ebf2d8aa5a8378", 0x5f}], 0x6, &(0x7f0000001440)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58, 0xd1}}, {{&(0x7f00000014c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007200)=[{&(0x7f0000001540)="dd8e58c1efeb76c09935c0a49a46a2994cbd7c8c3997104218b441ec88", 0x1d}, {&(0x7f0000006200)="61e47f7c3b49511eadf1cccc940b31b43da03fb6258dde4f352d5fd9f8744c34a2e0e1838712af915f8f55020bba00e4462545b37572cecbb952085d422689fb5778ff7b2d7e2c038c3ca1861dd5603d7eca4616f78ecc3e9761da0ce38571bd438db8c23d9af6eb8eb3c02fc0b0ae48cc5676cd355a83b64685e032238ff16a538e6c0264238c38c4142ec361553ed08c6032c99ffe12951f36c700051e383debfa3641cb9c9bba45df3364d9cae785a3a2993a4cc7b56fed0b27974a8e4d7e2aa3b5edc4693837b61a021bb992c155d44a0e80c5df1ce0e4d3846c5d25f36aa232e460de38f5e0f528ce0f50308d448bafd6c7c5ba808b63fca36d35aa4f408432ba9c9892b0cb4ca5ec87b0d80679069483294564de5871c00db8cef16a7cca00fa46601a46976a9119b49865fa563431b94b2aa1fe118e43c0906ea8936c9d42e083c343544df9f5ed52cdbde9e98c76a6bc1a686cca7dd09531f444883c05c85349ca84fe7bfa252aa116b490a0fa3399f07a35dbe1de675e1bb339076fef61086d7ec58f455b7ba83db5240b802a5b498a6725d5c4aa014def9c51d2160eee2186cbea401d1966dc8e7c49a45a3027e27ec587b94b70de322b5b4bebf846521c17cdc6bec69f6a0d3341b7e6bd5eda94b4812ecade94aef4eb1da2aefaaabeae62a6df73de2be349ff34faf524b9d5c5ed74e8de1b07b61e8d80fecedc140b1cab008a43b7319bd380c02b54c85fed2c56c3202ce9733fbcb7cc9131ad0c506786032d423bf982f56401d7d4b2931d7365ebca61bd56410af4748e83d7e58cf2a836a06198464ee75bd61042df2a1ace191ad4866d023be276c5e09e4bce0cf3e1066b861abc4a9d293c26f8c5dd457e79d6a8d433a85aff221662e83281dbb621022ac63a7034696ad5b31d4e9535147edf4c90489864d9eb633e1f63f929d67608932962004c886bc5fd8e50e0550419149828d77ff473c014ed06e8e7e8e91f18bc7248ff300df3db0993b74ebd1f5271507d044c809d30c233213a4bcbdcf9d80e678ff3c27256415c733a5bdd874e61b8749314f3e44e1e6c37e11eef17918a0fa224fb3b1bf8586884717fae466972b5fa31c359321e0f0da97f6c15dbf0c0fc57e304765b754a8ee606f71ad02c66200d260f7eee5389f54177e5777d529ee0aa57e524505a2401d30e86bb53b763b72cc594e9bc1d062550c612e5b667abcb9fd312eec3934ecb59a4df52353945e5c4f7dac9036b1ba7a3c3c6d78bde931c403fc5c20e988810b81c643a26e0c2013b557e31c4d7126820bb9075b8d8c2349a8a3e85b7a6a94d28acda9fe6f1df755ea732967d7daf4d399318339ece9e131323fda9958974a58e001b81d96454f49e51b05d4bc02ce3788219572a9d170196d980f5bd5254cdb34c969456431fadd2129141b10ea7137282287d635338a1d68ef9f1826098c2c76709016edd19445a13022d6776434460cac49cc61330317c9a9bd08c74d6f5cb085900ca5d1f8bdbeb91f9627818f88991c4a67d770cd9ff3909597d224d7f19fa4cab65f23a7dfcb10d04b2d159f2dee71aa3675342a76f5d60686a7d485beeb0b33f3b7a87d8b51313cea68f24807866f546d939668720bd7ad02d0542ef5a37e0393d76a9f4da9681cfb682260ce89ea856e35d81239981a3658c9ae854484bd55f8ed3ac48a19cc620fb7c864799f6b9cd80ec5d658f1af2d0bfbaa3a81316d997ad75777347bc7dfdccaceb5dd810dcd2a2db8e1b2e0f851ac721744a310db72ed60aeaa8492e3d59e021907430ac766d0b5fd7480fd35e19ac770c366453d72c9678ec617955826db1974e9fabae50f22087998b8d59431020427fd7fbaf88e3ee3764ad36c81a38004fa7f83016d436f9a26b871bceae044fa3d58c32e56e4cf4de30816c142ceda79b8f846038ea643cef01dda2f7ed28fc0a39dd645d96600cda093dd832b79286798bf2da5ac68e2ffc76dfbbb98a6e44f01d0b867081c5733f5a74ae2f3b6924b6fa84663fae5e8cdc57534bbfbbd22ada84f91a6f5afc0e4714ade82e6b608393c0391a5a308cc63a9e4c1bb48b89b34a47e0ec7849ef06c6d2215d6ae3f53bdb62476cdaee64764092b8b20c7e8b9555bda4793c4a02b265ddca71ad4049f2da899506c1827007983e843387b4f4ff8a6eb8200a4c5c5eead535f04269dc965cc445c97d8776fb358b008476ff17f6263cdd9fc72f2957757b37dd3db78fd14d26f75a1506b2810639fa86b6bdd78a541d5b44c6ab2b7a184f3e99ac0f6013f7b6480e5b62d29f2d80060f6605af4e405e56ec6939584156345cf0a424549e3f4e99a829f95c743c0c85d7730244065c6f56fa345b90ec4f8851cb4db3ece75de9a69d4b17fe3d801959adb888b98b7135147eb3ea1451c65a540559c36ea384cd63e13512c14f50ee840b4996d5ddcbeeafeace9a6c064e1254602e823119d8cac047e1bf22286c4ef3dfd83a11fa7ecabc7e4d142bdb1f346c4e34dc350ebb61a54222932e603489764b1413cde4da2fd1e0dc211143b3e0e020f9a8af7186d207afdad8cc49bc506450e21229963a05d85ca31534ec72a8d2bc0173ccc4e18314ed7c99d205e690aa4762587fb1469857051144dcbc6bae8329c4109ef81bc84e08bb34b78a51615e11f7c6bcd71f2d1b9be687f94a8c8ef95c91d3b7469ddf0a043d5c59dfdbe2c1b634b545971e164a48300ce894d8e9434ef2ac0393ae54a06ccf6a543257d7a32079520290bce91c8b0c970bdd6d01856ddaa530551bf6964c6817270352a3fc4bf281bf78dd6231c077951f9c598ec6b7c2db1d4f68bec909b05cca687d2ece0eea9dc72236e45031c8a7336183e1fc221b415ec7f50231fb2daca0083373802c0a06060f93b57c159c1ea17675e172a4b6749660a514492c1069e84be200fc94ac825bf9b967be80f9c9de921cddadcf34d84e04f88271b24a078b747f2a5bdf3b8d08228186fd50387e4c38e2b0015787ac4a593adb9e1988824b75fbefe10addb80f2867d4e958541792a15f8751a17bd45c189c65f798235d832ed68c13705ca9cade827a7fd23466b4cf5b13bfff6ec48692bd1571604fe38eeecdd36ff90cc93658b009996618fae56d829570502fda65f94604f777eede37395d7410ec738af470b471e3ff86c1597d38af93a1704620ffc7760a5abad40a5ba8df653ab906e279bfbeb9fd65404919f0cff91bc1d684240cdd819c48c7e4b37adc8eb4abd5ccd0fd0981e5e541fd66628778d9ef78a98bdcf696b1275e6ef264f9edbb3b8c51624e54fe18c67d70365d36602b17dd9b34c479ae9f401bf24be00fbd850945d2cdcfb400bfc676e3aba9eb798fbb709cc48327c81fe367df81c159fc166a559025880cbc7b3a99c6ff55db10dbb38c2a96fa6f84c33021614ff1c4d734b3a56a971e75c19aae5749f5d7a94815e3286eab619768fb6c076c9a60055a2257ed75cc2a141b82a42c9ff99d50fc330aaac25220fe12549acf8536cfe0a76816ecb1842662a0deffe729c3c757d0a2c02bd09150be76205ce0a0345ff965c756b6dd3f1612bf3b67a268e245ec2d57e6bd9a90ce5f2b8868ba73a0f094ef736ec366400d28698d3354a451b4004a695adc2ae8c79355e9fd0d45500a5ed36b5baef186ed0eb70e4747fac7802bb0af9658dcba20185eae7590e6ed642c444ac8de00d21815aa7746737d752cdd32d8c6680dc7d001b02e6b667e161e29178495c27f2f7a003c643e85dd546233feb38b00b53639d238cde423e5a8ff526fbc5d0f86e3feb9f07d8d0fb37e2d9f930c0c02a9631990270ca139ccc820338883a2ec4aef325fe7a07ab83f4e4b625de2cea247afa8c92da305f0a19ae97f5bd9ec19d32a260a57666c2d71e4be2182233c73044ee91dfbc33b8216ff4fdac72c4c8a09530bcf90ab8710affc471ef9d38bdd499b5587720f1ff59136b5b5e539211d154a9968c643834d27f53661e41f4dd3bdad45059f576b6b8d02c6c5edbdf34f4ddf59aa93dcab568a7dff9d0044b17caeb9fdf76971e351a2a3a6e5656ab579d29b78d915c3efbeaad7bc5e4806214d020caf99b1f33e2b27f852ba92deae93390bd051e6966f68cde19e970207fc3f4d5c2511b264c3ac77414d4fef393fdd62048a37eaff4a545a43df5f7e879af9434b5dad5831997f5a948dea259d51dfcf79171a4fee8385e575b49ac244f43eb1ce16fa7fcb07593901a84778c7375fc7d0bb6444683ccbeff776fa5a0f6617b0cd9aaace8887ce7d62a8965536c8a70b23c3abb8a91a8478eda998efab55ba366bea74cafcb2f3aa0f01a24151c100aa73af700a173bbeef2e87b1e9f0e4e46f3649acbc61130884f6d6decafb0bff57e410e5e39f3f952f55599668aee8c4e09d9ed0caefbc4c8be976646556fa8fbbc4cbbd33d1144c34e88fd43d4b274f09a1fba3627e7d625e9a6bacd1b6c9888d10341926e547e37ddcf99c24edbad87b009e263be3a3b4b8d74071025db6eec53a6bdc1ff9abbe73f86cfeff86911c97831ce9e55f903041bf6f24aa47659bcc5b6008249fa417f58672bfc3ec065fa69f7ac848ba54029b049ecc1e5807746e2bcf525fbd51e5ad9c35a6fa04c8ec9500a3f431288b2174ee4ae6b7b81eedfaae868b285b973b4caa023ca26238720a25b3ebb759e3e64d9820321c9297a0aa68cad21444b5f242f6715f840ff308b0523ddd130f07dd59d8aee38bd609b70f9540a112298f84ec42175801066e104d41020ba81e2155947e2f20c3b539f217ec6d2e7b51ff6b48d3087038f134432a104b3ecc52c7a582ea9d750e5f693c9aa309c1e7e5cba55895fc50cb1f898736d316d4709250d4e643a1e759183c08b8d5aa3202e6392d31b87540b5b4d964a7c332d44e034b4e611aded268b5ff63b7105c32acd51d3a07fe1db72acc9468a87cf511fb63cbcc104741049d717f3f6a77f1615eb82322e3399ba0d31b9754d1933d81b72269c926faec24df3ae22bf120388df37b7ce564544ec86d51b26138575bdfbcc1dbf2cfd99527d9f44107eb223f02d93adfc85b0233e37610d1496fc163499d1c9eeff4ea3eea26bb6fbbd96cb6814550dbf7d4d0d208f2f1edba85a9400f299af70ce795d86d8ec9ad7a3311ecbab5c3a399433e171fcb1970705d0260372b2e45aa7b4a7549c1f9f2deb7da8056560811b6d40a9b8765f243d972e44fc622fbed4f9b2e73c64bd61ee06c47b9f973af2780293fda0a9542dc1ca656a57421bf32c517a81cda96b0439529738066a6624f7f36f1ee1b1e90050804b3b4beb02a387cd573abef6df4552278dd951cf6424748a809e365f1584afb40099e2c44016cdcf923ab9efe8a0a5d8f3c705d7b62e0dcc193f9ecab705679ae0e091ded83acbea4d479f90fd2ed7ebd985f807f60d9d07842995813df53e8a766ea88bd2e3d7acdface523b7e853f753e14c206ef014b8c299039efefa805bb7c60e7aad17150e61fb689c010dee8690b34686ac1d544b6ead27acfc73cb89fe6fca31498aaf032647033b263b91ad928d4757ce12187a0eca9f959b402a230f4b793655ee66b8f82ee275d6fa9526fb38562efb180da91b38775cdbae66c216f5261189505bcff59609dbfcf34f409138521c6212a7a98201854cccbf36ea574b14db96d08d269d467fc7b87cda0ac0e749ba47bcf9012d1c3760ef67c8bf58eb105ae47172d8c4af03d7d2d6003d1ea3ba1137e2f9e946e636152d8eeb120c211bf60c6b0", 0x1000}], 0x2, 0x0, 0x0, 0x16}}, {{0x0, 0x0, &(0x7f0000008380)=[{&(0x7f0000007240)="a4c5a33a95fab2a95be44a2de917b94636ca931fbd6098c74840e15020b4699ba26ed3d256d3b2bfcbe570b82846794e6f73d11a9925f40a546327b7d6a434e723db72721640c5ebf02a46b3a51e4b11ab6f10cf28dadfe8d5def36106f26648e74483ad29db3c7272911ad11572ded7d0b4c86fdb0ee776fde44155bb3c628be0184a2a2efcafc2affce7", 0x8b}, {&(0x7f0000007300)="6a20163f7b34197d0e290725bb2e48fa16792bb6303f92f6694ab14f0bcba6c50d6ada4ebea9ab4826ca0756cb23dddc055bcdefbf603f84fbd4979791cb6bbf85980f4d2cd7e9d2ae8825b5d6c8416c6654867f5a4a0659765f5d6045434747b149fa11966e1724a128b722af46e734", 0x70}, {&(0x7f0000007380)="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", 0x1000}], 0x3, 0x0, 0x0, 0x4000040}}, {{&(0x7f00000083c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008480)=[{&(0x7f0000008440)="ae894d84bf66", 0x6}], 0x1, &(0x7f0000008580)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8, r8]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r7]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0x128, 0x1}}], 0x6, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604110, &(0x7f0000000000)={0xffffffff, [[0x65ab, 0x0, 0x0, 0xc, 0x40000200, 0x0, 0x54bf, 0xfffffffd], [0x800004, 0x0, 0x101, 0xfffffffc, 0x80, 0x0, 0x9, 0x8], [0x2, 0x4000008, 0x44, 0x2, 0x1, 0x7, 0x8]], '\x00', [{0x0, 0x3}, {0x3}, {0x400}, {0x1}, {0x7fffffbf}, {0x2, 0x22c685d5}, {0xf68b}, {0xc, 0xfffffff8}, {0xc51, 0x2}, {0x7334486a}, {0x9}, {0xffffffff, 0xffffffff}], '\x00', 0x0, 0x0, 0x0, 0x20})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f00004da000/0x4000)=nil, 0x4000, 0xf)
landlock_create_ruleset(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

2.511260288s ago: executing program 4 (id=1261):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x8)
sendto$inet6(r0, &(0x7f0000000140)="8269b66f", 0x20, 0x3a00000000000000, 0x0, 0x0)

2.482869226s ago: executing program 4 (id=1262):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x4e23, 0x10000, @empty, 0xfffffffc}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x0, 0x50, 0x5]}}, 0x5c)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480ff7f0905811765"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fsync(r1)

2.316457565s ago: executing program 1 (id=1263):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f00000005c0)=<r7=>0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x3c9}}}, &(0x7f0000000300)=<r8=>0x0)
syz_ublk_setup_queues(r3, r8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80000, 0xfffffffd, 0x69, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x40}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x80000, 0x3, 0xffffffff, 0x0, r3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a})

2.01435667s ago: executing program 0 (id=1264):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x3ff, 0x0, 0x1c, 0x5, 0x2, 0x40, 0x1, 0xf9, 0x3, 0x7f, 0x4, 0x6}, {0x6, 0x6, 0xb, 0xc4, 0x2, 0x7, 0x7, 0xf1, 0x8, 0xff, 0x43, 0x81}, {0x601e, 0x4, 0x1, 0x9, 0x2, 0x6, 0x8, 0xb, 0xff, 0x6, 0x3, 0x7, 0x8}]})
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
bind$can_raw(r1, &(0x7f00000000c0), 0x10)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0xdddd7ffc, 0xf000, 0x8})
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0xf}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x2}]}}]}, 0x44}}, 0x24040084)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000), 0x0)
sendmmsg$sock(r0, &(0x7f0000005f00), 0x0, 0x240000c0)

1.929252334s ago: executing program 1 (id=1265):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$inet(0x2, 0x2, 0x0)
r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0)
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x400000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x3, 0x944, 0x0, 0x0, 0x1000, 0x3, 0xffffffffffffffff, 0x0, 0x14d}}}, &(0x7f0000000480)=<r12=>0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
r14 = dup(r13)
syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x2, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x8, 0x2, 0x15e, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x92, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0)

1.803182928s ago: executing program 4 (id=1266):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8000, 0xfa, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x7d, 0xc4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xcc1d, 0x1000, 0xfffffffd, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
r8 = dup(r7)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x7fffffff, @mcast2, 0x9}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, 0x0, 0x0)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x400, 0x3, 0x259, 0x0, r1}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x69d8, 0x40, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x4, 0x0, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x4, 0x254}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r11=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x84000, 0xffffffffffffffaa, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x5, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0x10, 0x0, 0xa, 0x7fe}]})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)

1.702522036s ago: executing program 5 (id=1267):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x202, 0x0)
ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000740)={0x0, 0xffffffffffffff08})
getpgrp(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x7, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x24008811)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_EXPR={0x34, 0x7, 0x0, 0x1, {{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, @NFTA_DYNSET_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x3)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040))
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d00700100010203010902270001010080320904000003080650000705010200020007058202000200070583"], 0x0)
ioctl(r6, 0x40047438, &(0x7f0000000040))
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000540)={0x17, 0x2d, 0x11, 0xc, 0xb, 0xbec4, 0x3, 0x9f})
ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f00000000c0))
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xfff, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0xa, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xa, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66ca, 0x8, 0x8, 0x5, 0x1fc, 0x9, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
write(r3, 0x0, 0x0)

1.143159615s ago: executing program 3 (id=1268):
inotify_init()
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000100))
r2 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0xbb, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@mcast2, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x80000001, 0x400804, 0x9, 0x292}, {0x3}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x68, 0x2, {{'cbc(twofish)\x00'}, 0x100, "1a000b0000849a7390450024000000004403000000c3d6db74b3850000000040"}}]}, 0x158}}, 0x44050)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$UBLK_U_CMD_START_USER_RECOVERY(r2, 0xc0207510, &(0x7f00000000c0)={<r4=>0x0})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040), 0x0)
statfs(0x0, 0x0)
syz_open_dev$ublk_bdev(&(0x7f0000000080), r4, 0x80000)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)

881.984996ms ago: executing program 3 (id=1269):
r0 = gettid()
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x38, 0x4, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000480)=0x3, 0x4)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x29d6, 0x4)
sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24004800)
recvmmsg(r4, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40012000, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={<r6=>0x0}, &(0x7f0000000040)=0x8)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x24068090}, 0x0)
r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x10000)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000480)=0x6002, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000fbdbdf250600000008000300", @ANYRES32=r11, @ANYBLOB="0301059a03000040"], 0x24}}, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @multicast, @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "dacd8f803e274e5a"}}}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f0000000300)={r6, <r12=>0xffffffffffffffff, 0x800}, &(0x7f0000000340)=0xc)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r12, 0x84, 0x73, &(0x7f0000000380)={r6, 0x2, 0x30, 0x4, 0x4}, &(0x7f0000000400)=0x18)
syz_io_uring_setup(0x2f8d, &(0x7f0000000180)={0x0, 0xc383, 0x0, 0x0, 0x200004}, &(0x7f0000000240), &(0x7f0000000140), &(0x7f0000000000))

561.409438ms ago: executing program 3 (id=1270):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}, {0x28, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x4080)

393.386536ms ago: executing program 1 (id=1271):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0))
r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r1, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_usb_connect(0x3, 0x32, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000023c0)={&(0x7f00007b3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096, 0x1000, 0x1, &(0x7f00000013c0)=""/4096, 0x1000}, &(0x7f0000002400)=0x40)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (fail_nth: 6)

391.457382ms ago: executing program 3 (id=1272):
r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, 0x0})
openat$kvm(0xffffffffffffff9c, 0x0, 0x28040, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e24, @empty}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000500050002000000050004"], 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3602}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0)
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000300)=""/139, 0x8b}, {0x0}], 0x2, 0x84, 0x47)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r9, 0x0, 0x25, 0x0, 0x0)
gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x6, 0x21, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xa}, 0x20)
getsockopt$inet6_tcp_buf(r10, 0x6, 0x21, 0x0, &(0x7f0000000280))
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="f502b4643b30f8254bbdb5e7c4fc6cf70396720300000000000000651b69fa51f046f58172c9210f8b505eccfa8715afd582dec7b0b63d31205d608580af77446f88235e2e4dbd2978defd8907c7c63b4de4c88959d9867b8df83c251cc685a50a6f90b1fda94f9cda96cfc632684178337b05e742722dc7d65810e368276ea8c3048d0e9ec515203d84ac8ee66f807442e9000000a05582be2816d8ffa11bde46f50243b300b6e8b1f51737", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000060000880280000802400010000000000000000000000000000000000000000000000000000000000000000003400008024000100000000000000000000000000000000000000000000000000000000000000000004000980060005000900000008000500010000001400020077673200"/138], 0x90}, 0x1, 0x0, 0x0, 0x4000008}, 0x20008040)
socket$inet6(0x10, 0x2, 0x4)

251.299231ms ago: executing program 3 (id=1273):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
set_mempolicy_home_node(&(0x7f000014a000/0x3000)=nil, 0x3000, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r3 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)
r4 = syz_ublk_setup_io_uring(0x2399, &(0x7f0000001280)={0x0, 0xc48c, 0xaf04, 0x3, 0x15b}, &(0x7f00000011c0), &(0x7f0000001180), &(0x7f0000001100))
socket$pppl2tp(0x18, 0x1, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000)
io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x842, 0xffffffffffffffff, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x1}])
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x330, 0x1f0, 0xa8, 0xfeffffff, 0x0, 0x148, 0x298, 0x298, 0xffffffff, 0x298, 0x298, 0x5, 0x0, {[{{@ip={@broadcast, @broadcast, 0xffffff00, 0xff000000, 'netdevsim0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x8, 0x1, 0x26}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0xb1, {0x1b633403eb653ce6, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@remote, @empty, 0xffffff, 0xffffff00, 'ipvlan1\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x1, 0x1, 0x43}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x7}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x4, 0xe4447d2cdf7ef33e}, {0x3, 0x2, 0x7}, 0x9, 0x5e4}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xd, @rand_addr, @local}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @gre_key=0x7, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390)
syz_ublk_setup_queues(r6, 0x0, &(0x7f0000001040)={0x0, 0x2391, 0x40, 0x3, 0x20000255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe54, 0x80, 0x2100, 0x10000013, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e1, 0x20, 0xffffdffe, 0x34e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x980c, 0x8, 0x1, 0x1b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1a, 0x2000, 0x2, 0x23e, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x735, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
fcntl$lock(r8, 0x26, &(0x7f0000001000)={0x0, 0x0, 0x80000001, 0xfffffffffffffff7, 0xffffffffffffffff})
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00003d5000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

0s ago: executing program 4 (id=1274):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x7e)
sendmmsg$inet6(r0, &(0x7f0000007100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) (fail_nth: 4)

kernel console output (not intermixed with test programs):

exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f436639e199 code=0x7ffc0000
[  241.342150][   T10] usb 2-1: USB disconnect, device number 42
[  241.407240][   T31] audit: type=1326 audit(1791341080.615:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.3.921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436639e199 code=0x7ffc0000
[  241.407289][   T31] audit: type=1326 audit(1791341080.705:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.3.921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436639e199 code=0x7ffc0000
[  241.513964][   T31] audit: type=1326 audit(1791341080.775:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.3.921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f436639e199 code=0x7ffc0000
[  241.515769][   T31] audit: type=1326 audit(1791341080.805:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.3.921" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436639e199 code=0x7ffc0000
[  241.994479][ T8756] syz_tun: entered promiscuous mode
[  242.503909][   T25] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  242.562194][    T9] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  242.663001][   T25] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  242.666677][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.666706][   T25] usb 2-1: Product: syz
[  242.666720][   T25] usb 2-1: Manufacturer: syz
[  242.666733][   T25] usb 2-1: SerialNumber: syz
[  242.671366][   T25] usb 2-1: config 0 descriptor??
[  242.712232][    T9] usb 6-1: device descriptor read/64, error -71
[  242.715408][   T25] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  242.738877][   T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  242.741236][   T25] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  242.741292][   T25] usb 2-1: media controller created
[  242.779423][   T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  242.863646][ T5687] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  242.952671][    T9] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  242.973394][   T25] DVB: Unable to find symbol mt352_attach()
[  243.014041][ T5687] usb 1-1: Using ep0 maxpacket: 8
[  243.019248][ T5687] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  243.020408][ T5687] usb 1-1: config 0 has an invalid interface number: 186 but max is 0
[  243.020433][ T5687] usb 1-1: config 0 has no interface number 0
[  243.020466][ T5687] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  243.020485][ T5687] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8
[  243.020510][ T5687] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  243.020532][ T5687] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  243.020553][ T5687] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  243.020668][ T8786] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  243.030784][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.030812][ T5687] usb 1-1: Product: syz
[  243.030823][ T5687] usb 1-1: Manufacturer: syz
[  243.030835][ T5687] usb 1-1: SerialNumber: syz
[  243.052871][ T5687] usb 1-1: config 0 descriptor??
[  243.112495][    T9] usb 6-1: device descriptor read/64, error -71
[  243.168151][   T25] DVB: Unable to find symbol nxt6000_attach()
[  243.168170][   T25] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  243.195161][   T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24
[  243.219797][   T25] dvb-usb: schedule remote query interval to 1000 msecs.
[  243.219822][   T25] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  243.219838][   T25] dvb-usb: bulk message failed: -22 (7/0)
[  243.219875][   T25] dvb-usb: bulk message failed: -22 (7/0)
[  243.226588][    T9] usb usb6-port1: attempt power cycle
[  243.260225][   T25] usb 2-1: USB disconnect, device number 43
[  243.314554][ T5687] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  243.339154][   T25] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  243.403104][ T5609] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  243.546995][ T5609] usb 4-1: device descriptor read/64, error -71
[  243.551713][   T25] usb 1-1: USB disconnect, device number 53
[  243.573933][    T9] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  243.594996][    T9] usb 6-1: device descriptor read/8, error -71
[  243.709765][ T8794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.935'.
[  243.807617][ T5609] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  243.842179][    T9] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  243.865076][    T9] usb 6-1: device descriptor read/8, error -71
[  243.954652][ T5609] usb 4-1: device descriptor read/64, error -71
[  243.973047][    T9] usb usb6-port1: unable to enumerate USB device
[  243.991485][ T8801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.991969][ T8801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.027605][ T8801] FAULT_INJECTION: forcing a failure.
[  244.027605][ T8801] name failslab, interval 1, probability 0, space 0, times 0
[  244.027656][ T8801] CPU: 1 UID: 0 PID: 8801 Comm: syz.4.938 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  244.027681][ T8801] Tainted: [L]=SOFTLOCKUP
[  244.027687][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  244.027703][ T8801] Call Trace:
[  244.027711][ T8801]  <TASK>
[  244.027719][ T8801]  dump_stack_lvl+0xe8/0x150
[  244.027750][ T8801]  should_fail_ex+0x410/0x560
[  244.027775][ T8801]  ? __alloc_skb+0x1db/0x7a0
[  244.027799][ T8801]  should_failslab+0xa8/0x100
[  244.027825][ T8801]  ? __alloc_skb+0x1db/0x7a0
[  244.027845][ T8801]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  244.027865][ T8801]  ? __alloc_skb+0x18d/0x7a0
[  244.027889][ T8801]  ? __alloc_skb+0x1db/0x7a0
[  244.027918][ T8801]  __alloc_skb+0x1db/0x7a0
[  244.027945][ T8801]  netlink_sendmsg+0x5d4/0xb40
[  244.027974][ T8801]  ? __pfx_netlink_sendmsg+0x10/0x10
[  244.028001][ T8801]  ? apparmor_socket_sendmsg+0x98/0x360
[  244.028027][ T8801]  ? __pfx_netlink_sendmsg+0x10/0x10
[  244.028045][ T8801]  sock_sendmsg_nosec+0x13a/0x180
[  244.028070][ T8801]  ____sys_sendmsg+0x54e/0x850
[  244.028101][ T8801]  ? __pfx_____sys_sendmsg+0x10/0x10
[  244.028136][ T8801]  ? import_iovec+0x73/0xa0
[  244.028164][ T8801]  ___sys_sendmsg+0x2a5/0x360
[  244.028189][ T8801]  ? __lock_acquire+0x747/0x2de0
[  244.028213][ T8801]  ? __pfx____sys_sendmsg+0x10/0x10
[  244.028267][ T8801]  ? __fget_files+0x2a/0x420
[  244.028289][ T8801]  ? __fget_files+0x3a2/0x420
[  244.028319][ T8801]  __x64_sys_sendmsg+0x1b1/0x290
[  244.028343][ T8801]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  244.028390][ T8801]  do_syscall_64+0x166/0x520
[  244.028415][ T8801]  ? trace_irq_disable+0x3b/0x140
[  244.028442][ T8801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.028460][ T8801]  ? clear_bhb_loop+0x70/0xc0
[  244.028482][ T8801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.028501][ T8801] RIP: 0033:0x7f3486d9e199
[  244.028518][ T8801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.028534][ T8801] RSP: 002b:00007f3487d4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  244.028554][ T8801] RAX: ffffffffffffffda RBX: 00007f3487025fa0 RCX: 00007f3486d9e199
[  244.028567][ T8801] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000011
[  244.028579][ T8801] RBP: 00007f3487d4d090 R08: 0000000000000000 R09: 0000000000000000
[  244.028591][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.028601][ T8801] R13: 00007f3487026038 R14: 00007f3487025fa0 R15: 00007f348714fa48
[  244.028630][ T8801]  </TASK>
[  244.072484][ T5609] usb usb4-port1: attempt power cycle
[  244.202837][   T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  244.402214][   T25] usb 2-1: Using ep0 maxpacket: 16
[  244.403063][   T25] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  244.404399][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.408346][   T25] usb 2-1: config 0 descriptor??
[  244.412625][ T5609] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  244.451899][ T5609] usb 4-1: device descriptor read/8, error -71
[  244.694030][ T5609] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  244.716815][ T5609] usb 4-1: device descriptor read/8, error -71
[  244.824595][ T5609] usb usb4-port1: unable to enumerate USB device
[  244.830065][ T8803] overlay: Unknown parameter 'N�R?Ë­þÿS_%¼ƒN‡hÙ¦§Žp©â(`ÃjrGp´]äM¶¿!þó*�[6Ù
O8þà6_–;*…çØ\34u¹¾Ý7"1o"—t'
[  245.301113][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'.
[  245.320597][ T8815] bridge0: port 4(team0) entered disabled state
[  245.320804][ T8815] bridge0: port 3(veth0) entered disabled state
[  245.320969][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.321430][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.478431][ T8818] netlink: 'syz.5.945': attribute type 1 has an invalid length.
[  245.520536][ T8818] bond2: entered promiscuous mode
[  245.521318][ T8818] 8021q: adding VLAN 0 to HW filter on device bond2
[  245.580905][ T8818] 8021q: adding VLAN 0 to HW filter on device bond2
[  245.581409][ T8818] bond2: (slave gre1): The slave device specified does not support setting the MAC address
[  245.581429][ T8818] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  245.618468][ T8818] bond2: (slave gre1): making interface the new active one
[  245.618520][ T8818] gre1: entered promiscuous mode
[  245.635840][ T8818] bond2: (slave gre1): Enslaving as an active interface with an up link
[  245.908524][ T8828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.909002][ T8828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.962282][ T5701] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  246.114220][ T5701] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  246.132757][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.132781][ T5701] usb 1-1: Product: syz
[  246.132794][ T5701] usb 1-1: Manufacturer: syz
[  246.132808][ T5701] usb 1-1: SerialNumber: syz
[  246.141140][ T5701] usb 1-1: config 0 descriptor??
[  246.270357][ T8832] all: renamed from ip6gretap0 (while UP)
[  246.533801][ T8830] kvm_intel: kvm [8829]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x660b
[  246.554644][ T8830] kvm [8829]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a06
[  246.561032][ T8830] kvm [8829]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x262e
[  246.999728][   T25] usbhid 2-1:0.0: can't add hid device: -71
[  246.999829][   T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  247.029842][   T25] usb 2-1: USB disconnect, device number 44
[  247.133101][ T8844] loop5: detected capacity change from 0 to 7
[  247.199265][ T8824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.199494][ T8824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.201163][ T8844] Dev loop5: unable to read RDB block 7
[  247.201207][ T8844]  loop5: unable to read partition table
[  247.201384][ T8844] loop5: partition table beyond EOD, truncated
[  247.201418][ T8844] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  247.436741][    T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  247.593956][    T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  247.597776][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  247.597799][    T9] usb 6-1: config 0 has no interface number 0
[  247.620419][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.620445][    T9] usb 6-1: Product: syz
[  247.620467][    T9] usb 6-1: Manufacturer: syz
[  247.620480][    T9] usb 6-1: SerialNumber: syz
[  247.662923][ T5609] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  247.666131][    T9] usb 6-1: config 0 descriptor??
[  247.844590][ T5609] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  247.847917][ T5609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.847950][ T5609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.847971][ T5609] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  247.848033][ T5609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.858912][ T5723] usb 1-1: USB disconnect, device number 54
[  247.885980][ T5609] usb 4-1: config 0 descriptor??
[  247.951056][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.5.955'.
[  247.987980][    T9] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  248.056317][    T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  248.058793][    T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  248.058869][    T9] usb 6-1: media controller created
[  248.131850][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  248.132460][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  248.221996][    T9] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  248.341750][ T5609] hid_parser_main: 91 callbacks suppressed
[  248.341776][ T5609] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  248.341806][ T5609] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  248.342452][ T5609] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  248.342482][ T5609] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  248.342509][ T5609] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  248.342535][ T5609] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  248.342560][ T5609] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x2
[  248.342585][ T5609] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  248.342610][ T5609] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  248.342635][ T5609] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  248.395922][ T5609] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  248.400785][    T9] usb 6-1: USB disconnect, device number 29
[  248.665110][ T1217] hid-generic 0008:046D:C082.000B: hidraw1: <UNKNOWN> HID v0.04 Device [syz0] on syz0
[  248.885761][ T8873] fido_id[8873]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  249.064700][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.967'.
[  250.283065][    T9] usb 4-1: reset high-speed USB device number 45 using dummy_hcd
[  250.938493][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.969'.
[  250.972688][   T31] kauditd_printk_skb: 22 callbacks suppressed
[  250.972706][   T31] audit: type=1326 audit(1791341090.275:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8902 comm="syz.5.969" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1b79e199 code=0x7ffc0000
[  250.972750][   T31] audit: type=1326 audit(1791341090.275:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8902 comm="syz.5.969" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1b79e199 code=0x7ffc0000
[  251.053366][   T31] audit: type=1326 audit(1791341090.355:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8902 comm="syz.5.969" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f2e1b79e199 code=0x7ffc0000
[  251.053413][   T31] audit: type=1326 audit(1791341090.355:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8902 comm="syz.5.969" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1b79e199 code=0x7ffc0000
[  251.053452][   T31] audit: type=1326 audit(1791341090.355:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8902 comm="syz.5.969" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1b79e199 code=0x7ffc0000
[  251.216414][ T1217] usb 4-1: USB disconnect, device number 45
[  251.273913][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.274340][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.571944][ T8918] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  252.344839][ T8925] ip_tables: iptables: counters copy to user failed while replacing table
[  252.345367][ T8925] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s)
[  252.397048][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'.
[  252.397532][ T8928] FAULT_INJECTION: forcing a failure.
[  252.397532][ T8928] name failslab, interval 1, probability 0, space 0, times 0
[  252.397561][ T8928] CPU: 0 UID: 0 PID: 8928 Comm: syz.0.977 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  252.397585][ T8928] Tainted: [L]=SOFTLOCKUP
[  252.397592][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  252.397603][ T8928] Call Trace:
[  252.397610][ T8928]  <TASK>
[  252.397619][ T8928]  dump_stack_lvl+0xe8/0x150
[  252.397650][ T8928]  should_fail_ex+0x410/0x560
[  252.397679][ T8928]  should_failslab+0xa8/0x100
[  252.397706][ T8928]  __kmalloc_cache_node_noprof+0xaa/0x620
[  252.397731][ T8928]  ? __alloc_workqueue+0x746/0x1fe0
[  252.397751][ T8928]  ? __alloc_workqueue+0x746/0x1fe0
[  252.397777][ T8928]  __alloc_workqueue+0x746/0x1fe0
[  252.397797][ T8928]  ? ____sys_sendmsg+0x54e/0x850
[  252.397824][ T8928]  ? __sys_sendmmsg+0x273/0x4d0
[  252.397850][ T8928]  ? do_syscall_64+0x166/0x520
[  252.397887][ T8928]  alloc_workqueue_noprof+0xe3/0x210
[  252.397907][ T8928]  ? net_generic+0x1e/0x240
[  252.397931][ T8928]  ? net_generic+0x1e/0x240
[  252.397963][ T8928]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  252.397984][ T8928]  ? net_generic+0x1e/0x240
[  252.398007][ T8928]  ? net_generic+0x1e/0x240
[  252.398038][ T8928]  bond_init+0xd4/0x8b0
[  252.398065][ T8928]  ? __pfx_bond_init+0x10/0x10
[  252.398085][ T8928]  ? __kmalloc_cache_noprof+0x14d/0x600
[  252.398101][ T8928]  ? register_netdevice+0x57e/0x1eb0
[  252.398118][ T8928]  ? register_netdevice+0x57e/0x1eb0
[  252.398139][ T8928]  register_netdevice+0x6a1/0x1eb0
[  252.398152][ T8928]  ? trace_kmalloc+0x2a/0xf0
[  252.398163][ T8928]  ? alloc_netdev_mqs+0xd44/0x12a0
[  252.398174][ T8928]  ? __kvmalloc_node_noprof+0x52f/0x820
[  252.398189][ T8928]  ? __pfx_register_netdevice+0x10/0x10
[  252.398203][ T8928]  ? validate_linkmsg+0x765/0x950
[  252.398220][ T8928]  bond_newlink+0x48/0xd0
[  252.398234][ T8928]  ? __pfx_bond_newlink+0x10/0x10
[  252.398249][ T8928]  rtnl_newlink_create+0x305/0x7b0
[  252.398262][ T8928]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  252.398273][ T8928]  ? __pfx___mutex_lock+0x10/0x10
[  252.398294][ T8928]  ? ns_capable+0x89/0xe0
[  252.398310][ T8928]  rtnl_newlink+0x166d/0x1c30
[  252.398333][ T8928]  ? __pfx_rtnl_newlink+0x10/0x10
[  252.398346][ T8928]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  252.398354][ T8928]  ? do_syscall_64+0x166/0x520
[  252.398368][ T8928]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.398396][ T8928]  ? kasan_quarantine_put+0xbb/0x1f0
[  252.398408][ T8928]  ? lockdep_hardirqs_on+0x7b/0x110
[  252.398424][ T8928]  ? nlmon_xmit+0xb0/0x100
[  252.398436][ T8928]  ? kmem_cache_free+0x182/0x650
[  252.398455][ T8928]  ? __lock_acquire+0x747/0x2de0
[  252.398473][ T8928]  ? __local_bh_enable_ip+0xd6/0x140
[  252.398487][ T8928]  ? lockdep_hardirqs_on+0x7b/0x110
[  252.398501][ T8928]  ? __dev_queue_xmit+0x29b/0x3920
[  252.398511][ T8928]  ? __local_bh_enable_ip+0xd6/0x140
[  252.398528][ T8928]  ? lock_acquire+0x115/0x350
[  252.398546][ T8928]  ? __pfx_rtnl_newlink+0x10/0x10
[  252.398560][ T8928]  rtnetlink_rcv_msg+0x802/0xc00
[  252.398577][ T8928]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  252.398591][ T8928]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  252.398605][ T8928]  ? ref_tracker_free+0x689/0x830
[  252.398620][ T8928]  ? __pfx_ref_tracker_free+0x10/0x10
[  252.398639][ T8928]  netlink_rcv_skb+0x226/0x4a0
[  252.398651][ T8928]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  252.398667][ T8928]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  252.398684][ T8928]  ? netlink_deliver_tap+0x2e/0x1b0
[  252.398695][ T8928]  ? netlink_deliver_tap+0x2e/0x1b0
[  252.398709][ T8928]  netlink_unicast+0x7bd/0x940
[  252.398725][ T8928]  netlink_sendmsg+0x813/0xb40
[  252.398741][ T8928]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.398757][ T8928]  ? apparmor_socket_sendmsg+0x98/0x360
[  252.398772][ T8928]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.398782][ T8928]  sock_sendmsg_nosec+0x13a/0x180
[  252.398796][ T8928]  ____sys_sendmsg+0x54e/0x850
[  252.398815][ T8928]  ? __pfx_____sys_sendmsg+0x10/0x10
[  252.398835][ T8928]  ? import_iovec+0x73/0xa0
[  252.398851][ T8928]  ___sys_sendmsg+0x2a5/0x360
[  252.398866][ T8928]  ? __lock_acquire+0x747/0x2de0
[  252.398879][ T8928]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.398898][ T8928]  ? kstrtouint+0x6e/0xe0
[  252.398922][ T8928]  ? __fget_files+0x2a/0x420
[  252.398937][ T8928]  ? __fget_files+0x3a2/0x420
[  252.398963][ T8928]  __sys_sendmmsg+0x273/0x4d0
[  252.398982][ T8928]  ? __pfx___sys_sendmmsg+0x10/0x10
[  252.399002][ T8928]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  252.399024][ T8928]  ? ksys_write+0x242/0x270
[  252.399036][ T8928]  ? __pfx_ksys_write+0x10/0x10
[  252.399049][ T8928]  __x64_sys_sendmmsg+0xa0/0xc0
[  252.399060][ T8928]  do_syscall_64+0x166/0x520
[  252.399074][ T8928]  ? trace_irq_disable+0x3b/0x140
[  252.399086][ T8928]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.399096][ T8928]  ? clear_bhb_loop+0x70/0xc0
[  252.399109][ T8928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.399119][ T8928] RIP: 0033:0x7efc5ad9e199
[  252.399131][ T8928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.399140][ T8928] RSP: 002b:00007efc5bcd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  252.399152][ T8928] RAX: ffffffffffffffda RBX: 00007efc5b025fa0 RCX: 00007efc5ad9e199
[  252.399160][ T8928] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[  252.399166][ T8928] RBP: 00007efc5bcd2090 R08: 0000000000000000 R09: 0000000000000000
[  252.399173][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  252.399179][ T8928] R13: 00007efc5b026038 R14: 00007efc5b025fa0 R15: 00007efc5b14fa48
[  252.399195][ T8928]  </TASK>
[  253.333085][    T9] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  253.419522][ T8940] FAULT_INJECTION: forcing a failure.
[  253.419522][ T8940] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  253.419559][ T8940] CPU: 0 UID: 0 PID: 8940 Comm: syz.3.981 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  253.419584][ T8940] Tainted: [L]=SOFTLOCKUP
[  253.419590][ T8940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  253.419602][ T8940] Call Trace:
[  253.419609][ T8940]  <TASK>
[  253.419618][ T8940]  dump_stack_lvl+0xe8/0x150
[  253.419648][ T8940]  should_fail_ex+0x410/0x560
[  253.419676][ T8940]  _copy_to_user+0x31/0xb0
[  253.419705][ T8940]  snd_ctl_ioctl+0x1316/0x1e00
[  253.419736][ T8940]  ? stack_trace_save+0xa9/0x100
[  253.419763][ T8940]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  253.419789][ T8940]  ? kasan_save_track+0x4f/0x80
[  253.419813][ T8940]  ? stack_depot_save_flags+0x33/0x7f0
[  253.419835][ T8940]  ? __lock_acquire+0x747/0x2de0
[  253.419858][ T8940]  ? kasan_save_track+0x4f/0x80
[  253.419878][ T8940]  ? kasan_save_track+0x3e/0x80
[  253.419895][ T8940]  ? kasan_save_free_info+0x40/0x50
[  253.419911][ T8940]  ? __kasan_slab_free+0x5c/0x80
[  253.419931][ T8940]  ? kfree+0x1c5/0x650
[  253.419946][ T8940]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  253.419967][ T8940]  ? security_file_ioctl+0xc3/0x2a0
[  253.419987][ T8940]  ? __se_sys_ioctl+0x47/0x170
[  253.420004][ T8940]  ? do_syscall_64+0x166/0x520
[  253.420029][ T8940]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.420084][ T8940]  ? kasan_quarantine_put+0xbb/0x1f0
[  253.420111][ T8940]  ? tomoyo_path_number_perm+0x219/0x5f0
[  253.420134][ T8940]  ? tomoyo_path_number_perm+0x219/0x5f0
[  253.420167][ T8940]  ? do_vfs_ioctl+0x116f/0x1530
[  253.420206][ T8940]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  253.420256][ T8940]  ? __fget_files+0x2a/0x420
[  253.420391][ T8940]  ? __fget_files+0x2a/0x420
[  253.420412][ T8940]  ? __fget_files+0x3a2/0x420
[  253.420433][ T8940]  ? __fget_files+0x2a/0x420
[  253.420463][ T8940]  ? bpf_lsm_file_ioctl+0x9/0x20
[  253.420493][ T8940]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  253.420521][ T8940]  __se_sys_ioctl+0xfc/0x170
[  253.420549][ T8940]  do_syscall_64+0x166/0x520
[  253.420576][ T8940]  ? trace_irq_disable+0x3b/0x140
[  253.420595][ T8940]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.420615][ T8940]  ? clear_bhb_loop+0x70/0xc0
[  253.420637][ T8940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.420655][ T8940] RIP: 0033:0x7f436639e199
[  253.420673][ T8940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.420686][ T8940] RSP: 002b:00007f4367256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  253.420707][ T8940] RAX: ffffffffffffffda RBX: 00007f4366625fa0 RCX: 00007f436639e199
[  253.420719][ T8940] RDX: 0000200000000040 RSI: 00000000c1105511 RDI: 0000000000000004
[  253.420820][ T8940] RBP: 00007f4367256090 R08: 0000000000000000 R09: 0000000000000000
[  253.420832][ T8940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.420844][ T8940] R13: 00007f4366626038 R14: 00007f4366625fa0 R15: 00007f436674fa48
[  253.420878][ T8940]  </TASK>
[  253.484985][    T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  253.487910][    T9] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[  253.487936][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.487953][    T9] usb 1-1: config 0 has no interface number 0
[  253.487988][    T9] usb 1-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  253.513354][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.513382][    T9] usb 1-1: Product: syz
[  253.513395][    T9] usb 1-1: Manufacturer: syz
[  253.513408][    T9] usb 1-1: SerialNumber: syz
[  253.532500][    T9] usb 1-1: config 0 descriptor??
[  254.573232][    T9] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[  254.573362][    T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 82
[  254.585098][    T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[  254.585182][    T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[  254.585256][    T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[  254.627080][    T9] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  254.684318][    T9] usb 1-1: USB disconnect, device number 55
[  254.791149][    T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  254.812438][    T9] keyspan 1-1:0.133: device disconnected
[  254.962611][ T5723] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  255.004205][ T5609] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  255.112969][ T5723] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  255.114973][ T8959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.986'.
[  255.138024][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  255.138054][ T5723] usb 4-1: Product: syz
[  255.138067][ T5723] usb 4-1: SerialNumber: syz
[  255.163450][ T5609] usb 2-1: Using ep0 maxpacket: 16
[  255.163977][ T5609] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  255.167332][ T5723] usb 4-1: config 0 descriptor??
[  255.170005][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.204220][ T5609] usb 2-1: config 0 descriptor??
[  255.377749][ T5618] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  255.815591][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  255.817214][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  256.074606][ T5723] usb 4-1: USB disconnect, device number 46
[  256.431731][ T8980] syz_tun: entered allmulticast mode
[  258.018564][ T5609] usbhid 2-1:0.0: can't add hid device: -71
[  258.018692][ T5609] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  258.029993][ T5609] usb 2-1: USB disconnect, device number 45
[  258.147293][ T8992] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  258.573985][   T31] audit: type=1326 audit(1791341097.875:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.3.999" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f436639e199 code=0x0
[  258.942434][ T5609] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  259.102218][ T5609] usb 4-1: Using ep0 maxpacket: 16
[  259.102961][ T5609] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  259.182702][ T5609] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  259.182729][ T5609] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  259.236855][ T5609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  259.236883][ T5609] usb 4-1: SerialNumber: syz
[  259.310582][ T5609] usb 4-1: 0:2 : does not exist
[  259.760464][ T9017] FAULT_INJECTION: forcing a failure.
[  259.760464][ T9017] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  259.760488][ T9017] CPU: 1 UID: 0 PID: 9017 Comm: syz.0.1003 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  259.760502][ T9017] Tainted: [L]=SOFTLOCKUP
[  259.760506][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  259.760512][ T9017] Call Trace:
[  259.760517][ T9017]  <TASK>
[  259.760523][ T9017]  dump_stack_lvl+0xe8/0x150
[  259.760552][ T9017]  should_fail_ex+0x410/0x560
[  259.760568][ T9017]  _copy_to_iter+0x1e4/0x1810
[  259.760581][ T9017]  ? __pfx_filemap_get_entry+0x10/0x10
[  259.760601][ T9017]  ? aa_file_perm+0x18b/0x15f0
[  259.760618][ T9017]  ? __pfx__copy_to_iter+0x10/0x10
[  259.760630][ T9017]  ? folio_mark_accessed+0x425/0x8b0
[  259.760648][ T9017]  ? __pfx_folio_mark_accessed+0x10/0x10
[  259.760666][ T9017]  copy_page_to_iter+0x23f/0x330
[  259.760681][ T9017]  shmem_file_read_iter+0x4f2/0x8a0
[  259.760706][ T9017]  do_iter_readv_writev+0x612/0x8c0
[  259.760719][ T9017]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  259.760734][ T9017]  ? rw_verify_area+0x24a/0x4c0
[  259.760746][ T9017]  vfs_readv+0x28d/0x850
[  259.760763][ T9017]  ? __pfx_vfs_readv+0x10/0x10
[  259.760782][ T9017]  ? __fget_files+0x2a/0x420
[  259.760800][ T9017]  ? __fget_files+0x3a2/0x420
[  259.760814][ T9017]  ? __fget_files+0x2a/0x420
[  259.760832][ T9017]  __x64_sys_preadv+0x19c/0x2b0
[  259.760845][ T9017]  ? __pfx___x64_sys_preadv+0x10/0x10
[  259.760861][ T9017]  do_syscall_64+0x166/0x520
[  259.760877][ T9017]  ? trace_irq_disable+0x3b/0x140
[  259.760889][ T9017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.760899][ T9017]  ? clear_bhb_loop+0x70/0xc0
[  259.760912][ T9017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.760922][ T9017] RIP: 0033:0x7efc5ad9e199
[  259.760932][ T9017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.760942][ T9017] RSP: 002b:00007efc5bcb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  259.760954][ T9017] RAX: ffffffffffffffda RBX: 00007efc5b026090 RCX: 00007efc5ad9e199
[  259.760961][ T9017] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000004
[  259.760968][ T9017] RBP: 00007efc5bcb1090 R08: 0000000000000000 R09: 0000000000000000
[  259.760974][ T9017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  259.760980][ T9017] R13: 00007efc5b026128 R14: 00007efc5b026090 R15: 00007efc5b14fa48
[  259.760996][ T9017]  </TASK>
[  259.779188][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.779579][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.337048][ T9027] netlink: ct_mark mask cannot be 0
[  260.337070][ T9027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.502659][ T5687] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  260.521887][ T9032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.533131][ T9032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.565713][ T9027] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x00000000000000090x000000000000000500000000000000000000'
[  260.592175][   T25] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  260.635164][   T31] audit: type=1326 audit(1791341099.935:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.4.1008" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3486d9e199 code=0x7ffc0000
[  260.635546][   T31] audit: type=1326 audit(1791341099.935:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.4.1008" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3486d9e199 code=0x7ffc0000
[  260.638925][   T31] audit: type=1326 audit(1791341099.935:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.4.1008" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3486d9e199 code=0x7ffc0000
[  260.642496][   T31] audit: type=1326 audit(1791341099.945:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.4.1008" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3486d9e199 code=0x7ffc0000
[  260.652834][   T31] audit: type=1326 audit(1791341099.955:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.4.1008" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3486d9e199 code=0x7ffc0000
[  260.652881][   T31] audit: type=1326 audit(1791341099.955:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.4.1008" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3486d9e199 code=0x7ffc0000
[  260.652917][   T31] audit: type=1326 audit(1791341099.955:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.4.1008" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3486d9e199 code=0x7ffc0000
[  260.654834][   T31] audit: type=1326 audit(1791341099.955:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.4.1008" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3486d5e9ce code=0x7ffc0000
[  260.655246][   T31] audit: type=1326 audit(1791341099.955:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.4.1008" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3486d9e199 code=0x7ffc0000
[  260.720342][ T5687] usb 6-1: Using ep0 maxpacket: 16
[  260.796757][ T5687] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  260.891168][ T5687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.906544][ T5687] usb 6-1: config 0 descriptor??
[  261.498118][ T5609] usb 4-1: USB disconnect, device number 47
[  261.531820][   T25] usb 1-1: unable to get BOS descriptor or descriptor too short
[  261.531857][   T25] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  261.551688][   T25] usb 1-1: unable to read config index 0 descriptor/start: -71
[  261.551725][   T25] usb 1-1: can't read configurations, error -71
[  262.062692][ T9043] sctp: [Deprecated]: syz.0.1012 (pid 9043) Use of struct sctp_assoc_value in delayed_ack socket option.
[  262.062692][ T9043] Use struct sctp_sack_info instead
[  262.092347][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'.
[  262.125989][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'.
[  262.503097][    T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  262.654017][    T9] usb 4-1: Using ep0 maxpacket: 16
[  262.660707][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  262.660756][    T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  262.663886][    T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  262.671916][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.671943][    T9] usb 4-1: Product: syz
[  262.671957][    T9] usb 4-1: Manufacturer: syz
[  262.671969][    T9] usb 4-1: SerialNumber: syz
[  262.989414][    T9] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  262.989814][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  263.521216][    T9] usb 4-1: 2:1 : can't get Cluster Descriptor
[  264.132474][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  264.295372][    T9] usb 4-1: USB disconnect, device number 48
[  264.468833][ T9078] input: syz1 as /devices/virtual/input/input25
[  264.545679][ T9081] FAULT_INJECTION: forcing a failure.
[  264.545679][ T9081] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  264.545718][ T9081] CPU: 0 UID: 0 PID: 9081 Comm: syz.1.1025 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  264.545743][ T9081] Tainted: [L]=SOFTLOCKUP
[  264.545750][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  264.545760][ T9081] Call Trace:
[  264.545768][ T9081]  <TASK>
[  264.545776][ T9081]  dump_stack_lvl+0xe8/0x150
[  264.545807][ T9081]  should_fail_ex+0x410/0x560
[  264.545835][ T9081]  _copy_from_user+0x2d/0xb0
[  264.545863][ T9081]  input_event_from_user+0xb1/0x290
[  264.545887][ T9081]  ? __pfx_input_event_from_user+0x10/0x10
[  264.545920][ T9081]  uinput_write+0x281/0xfe0
[  264.545952][ T9081]  ? __pfx_uinput_write+0x10/0x10
[  264.545975][ T9081]  ? bpf_lsm_file_permission+0x9/0x20
[  264.546000][ T9081]  ? security_file_permission+0x75/0x260
[  264.546022][ T9081]  ? rw_verify_area+0x203/0x4c0
[  264.546040][ T9081]  ? __pfx_uinput_write+0x10/0x10
[  264.546070][ T9081]  vfs_write+0x296/0xba0
[  264.546096][ T9081]  ? __pfx_vfs_write+0x10/0x10
[  264.546113][ T9081]  ? __fget_files+0x2a/0x420
[  264.546137][ T9081]  ? __fget_files+0x2a/0x420
[  264.546160][ T9081]  ? __fget_files+0x3a2/0x420
[  264.546184][ T9081]  ? __fget_files+0x2a/0x420
[  264.546218][ T9081]  ksys_write+0x150/0x270
[  264.546238][ T9081]  ? __pfx_ksys_write+0x10/0x10
[  264.546267][ T9081]  do_syscall_64+0x166/0x520
[  264.546293][ T9081]  ? trace_irq_disable+0x3b/0x140
[  264.546312][ T9081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.546329][ T9081]  ? clear_bhb_loop+0x70/0xc0
[  264.546350][ T9081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.546368][ T9081] RIP: 0033:0x7fdf8c99e199
[  264.546386][ T9081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.546400][ T9081] RSP: 002b:00007fdf8d8aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  264.546420][ T9081] RAX: ffffffffffffffda RBX: 00007fdf8cc26090 RCX: 00007fdf8c99e199
[  264.546433][ T9081] RDX: 00000000ffffff2c RSI: 0000200000000180 RDI: 0000000000000003
[  264.546444][ T9081] RBP: 00007fdf8d8aa090 R08: 0000000000000000 R09: 0000000000000000
[  264.546455][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  264.546466][ T9081] R13: 00007fdf8cc26128 R14: 00007fdf8cc26090 R15: 00007fdf8cd4fa48
[  264.546495][ T9081]  </TASK>
[  265.601318][ T9098] FAULT_INJECTION: forcing a failure.
[  265.601318][ T9098] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  265.601374][ T9098] CPU: 1 UID: 0 PID: 9098 Comm: syz.0.1030 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  265.601398][ T9098] Tainted: [L]=SOFTLOCKUP
[  265.601405][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  265.601416][ T9098] Call Trace:
[  265.601422][ T9098]  <TASK>
[  265.601429][ T9098]  dump_stack_lvl+0xe8/0x150
[  265.601459][ T9098]  should_fail_ex+0x410/0x560
[  265.601486][ T9098]  _copy_from_user+0x2d/0xb0
[  265.601512][ T9098]  __copy_msghdr+0x390/0x590
[  265.601553][ T9098]  ___sys_sendmsg+0x213/0x360
[  265.601578][ T9098]  ? __lock_acquire+0x747/0x2de0
[  265.601602][ T9098]  ? __pfx____sys_sendmsg+0x10/0x10
[  265.601633][ T9098]  ? kstrtouint+0x6e/0xe0
[  265.601671][ T9098]  ? __fget_files+0x2a/0x420
[  265.601693][ T9098]  ? __fget_files+0x3a2/0x420
[  265.601727][ T9098]  __sys_sendmmsg+0x273/0x4d0
[  265.601758][ T9098]  ? __pfx___sys_sendmmsg+0x10/0x10
[  265.601791][ T9098]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  265.601826][ T9098]  ? ksys_write+0x242/0x270
[  265.601845][ T9098]  ? __pfx_ksys_write+0x10/0x10
[  265.601866][ T9098]  __x64_sys_sendmmsg+0xa0/0xc0
[  265.601882][ T9098]  do_syscall_64+0x166/0x520
[  265.601903][ T9098]  ? trace_irq_disable+0x3b/0x140
[  265.601920][ T9098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.601938][ T9098]  ? clear_bhb_loop+0x70/0xc0
[  265.601960][ T9098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.601976][ T9098] RIP: 0033:0x7efc5ad9e199
[  265.601993][ T9098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.602008][ T9098] RSP: 002b:00007efc5bcd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  265.602027][ T9098] RAX: ffffffffffffffda RBX: 00007efc5b025fa0 RCX: 00007efc5ad9e199
[  265.602040][ T9098] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003
[  265.602051][ T9098] RBP: 00007efc5bcd2090 R08: 0000000000000000 R09: 0000000000000000
[  265.602061][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.602071][ T9098] R13: 00007efc5b026038 R14: 00007efc5b025fa0 R15: 00007efc5b14fa48
[  265.602095][ T9098]  </TASK>
[  266.170406][ T9110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1032'.
[  266.318764][ T9110] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1032'.
[  266.377139][ T9114] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  266.482202][ T5609] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  266.538727][ T9110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.551347][ T9110] bond_slave_0: left promiscuous mode
[  266.591123][ T9110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.614019][ T9110] bond_slave_1: left promiscuous mode
[  266.619001][ T9110] bond0 (unregistering): Released all slaves
[  266.647143][ T5609] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  266.651479][ T5609] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  266.651527][ T5609] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  266.651566][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.832666][ T5674] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  266.925356][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'.
[  266.968049][ T9109] vlan2: entered promiscuous mode
[  266.968073][ T9109] bond0: entered promiscuous mode
[  266.995597][ T5674] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  267.001630][ T5674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.001657][ T5674] usb 4-1: Product: syz
[  267.001671][ T5674] usb 4-1: Manufacturer: syz
[  267.001708][ T5674] usb 4-1: SerialNumber: syz
[  267.085669][ T9118] netlink: 'syz.4.1036': attribute type 2 has an invalid length.
[  267.135623][ T9120] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1035'.
[  267.168874][ T9109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.171543][ T9109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.265231][ T5609] rtsx_usb 2-1:1.0: probe with driver rtsx_usb failed with error -71
[  267.317305][ T5609] usb 2-1: USB disconnect, device number 46
[  267.333416][ T5687] usbhid 6-1:0.0: can't add hid device: -32
[  267.333506][ T5687] usbhid 6-1:0.0: probe with driver usbhid failed with error -32
[  267.492240][ T5674] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  267.492295][ T5674] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  268.252195][ T5687] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  268.270660][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1042'.
[  268.402194][ T5687] usb 2-1: Using ep0 maxpacket: 32
[  268.402920][ T5687] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  268.403443][ T5687] usb 2-1: config 0 has no interfaces?
[  268.404443][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  268.404465][ T5687] usb 2-1: SerialNumber: syz
[  268.405364][ T9139] dummy0: mtu less than device minimum
[  268.407241][ T5687] usb 2-1: config 0 descriptor??
[  268.568133][ T5687] usb 6-1: USB disconnect, device number 30
[  268.620402][ T1217] usb 2-1: USB disconnect, device number 47
[  269.454970][ T9155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1047'.
[  269.734078][ T9160] syz.1.1049 (9160): attempted to duplicate a private mapping with mremap.  This is not supported.
[  270.009110][ T8897] syz.5.966 (8897) used greatest stack depth: 15848 bytes left
[  270.106005][ T5687] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  270.252959][ T5687] usb 6-1: Using ep0 maxpacket: 32
[  270.254631][ T5687] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  270.256500][ T5687] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  270.294223][ T5687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.294251][ T5687] usb 6-1: Product: syz
[  270.294264][ T5687] usb 6-1: Manufacturer: syz
[  270.294277][ T5687] usb 6-1: SerialNumber: syz
[  270.300706][ T5687] usb 6-1: config 0 descriptor??
[  270.323304][ T9158] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  270.342721][ T5687] hub 6-1:0.0: bad descriptor, ignoring hub
[  270.342749][ T5687] hub 6-1:0.0: probe with driver hub failed with error -5
[  270.370106][ T5687] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input27
[  270.590798][ T5674] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  270.590856][ T5674] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  270.720077][ T5674] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  270.724753][ T9158] sctp: [Deprecated]: syz.5.1048 (pid 9158) Use of int in maxseg socket option.
[  270.724753][ T9158] Use struct sctp_assoc_value instead
[  270.810704][ T5674] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  270.843773][ T5723] usb 6-1: USB disconnect, device number 31
[  270.843787][    C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  270.899824][ T5674] usb 4-1: USB disconnect, device number 49
[  271.276499][ T9186] netlink: ct_mark mask cannot be 0
[  271.276532][ T9186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.385123][ T9189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.385567][ T9189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.432187][ T5687] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  271.582370][ T5687] usb 2-1: Using ep0 maxpacket: 16
[  271.585744][ T5687] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  271.588397][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.592952][ T5687] usb 2-1: config 0 descriptor??
[  272.051957][ T9199] usb 5-1: USB disconnect, device number 17
[  274.244332][ T5687] usbhid 2-1:0.0: can't add hid device: -71
[  274.244443][ T5687] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  274.269131][ T5687] usb 2-1: USB disconnect, device number 48
[  274.377102][ T9253] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1076'.
[  274.438274][ T9250] FAULT_INJECTION: forcing a failure.
[  274.438274][ T9250] name failslab, interval 1, probability 0, space 0, times 0
[  274.438304][ T9250] CPU: 0 UID: 0 PID: 9250 Comm: syz.4.1075 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  274.438329][ T9250] Tainted: [L]=SOFTLOCKUP
[  274.438335][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  274.438343][ T9250] Call Trace:
[  274.438350][ T9250]  <TASK>
[  274.438357][ T9250]  dump_stack_lvl+0xe8/0x150
[  274.438386][ T9250]  should_fail_ex+0x410/0x560
[  274.438410][ T9250]  ? __alloc_skb+0x1db/0x7a0
[  274.438431][ T9250]  should_failslab+0xa8/0x100
[  274.438454][ T9250]  ? __alloc_skb+0x1db/0x7a0
[  274.438471][ T9250]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  274.438487][ T9250]  ? __alloc_skb+0x18d/0x7a0
[  274.438506][ T9250]  ? __alloc_skb+0x1db/0x7a0
[  274.438529][ T9250]  __alloc_skb+0x1db/0x7a0
[  274.438551][ T9250]  alloc_skb_with_frags+0xc6/0x760
[  274.438595][ T9250]  sock_alloc_send_pskb+0x878/0x990
[  274.438635][ T9250]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  274.438660][ T9250]  ? iov_iter_advance+0x8b/0x1c0
[  274.438684][ T9250]  tun_get_user+0x8fb/0x44d0
[  274.438716][ T9250]  ? aa_file_perm+0x18b/0x15f0
[  274.438752][ T9250]  ? aa_file_perm+0x4ed/0x15f0
[  274.438775][ T9250]  ? __pfx_tun_get_user+0x10/0x10
[  274.438805][ T9250]  ? __lock_acquire+0x747/0x2de0
[  274.438842][ T9250]  ? kstrtoull+0x137/0x1d0
[  274.438870][ T9250]  ? ref_tracker_alloc+0x341/0x4b0
[  274.438893][ T9250]  ? lock_acquire+0x115/0x350
[  274.438919][ T9250]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  274.438943][ T9250]  ? lock_acquire+0x115/0x350
[  274.438969][ T9250]  ? tun_get+0x1c/0x2f0
[  274.438996][ T9250]  ? tun_get+0x1c/0x2f0
[  274.439019][ T9250]  ? tun_get+0x1c/0x2f0
[  274.439042][ T9250]  tun_chr_write_iter+0x113/0x200
[  274.439064][ T9250]  vfs_write+0x612/0xba0
[  274.439089][ T9250]  ? __pfx_vfs_write+0x10/0x10
[  274.439113][ T9250]  ? __fget_files+0x2a/0x420
[  274.439145][ T9250]  ksys_write+0x150/0x270
[  274.439166][ T9250]  ? __pfx_ksys_write+0x10/0x10
[  274.439194][ T9250]  do_syscall_64+0x166/0x520
[  274.439225][ T9250]  ? trace_irq_disable+0x3b/0x140
[  274.439252][ T9250]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.439275][ T9250]  ? clear_bhb_loop+0x70/0xc0
[  274.439302][ T9250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.439320][ T9250] RIP: 0033:0x7f3486d9e199
[  274.439343][ T9250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.439359][ T9250] RSP: 002b:00007f3487d4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  274.439394][ T9250] RAX: ffffffffffffffda RBX: 00007f3487025fa0 RCX: 00007f3486d9e199
[  274.439412][ T9250] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003
[  274.439424][ T9250] RBP: 00007f3487d4d090 R08: 0000000000000000 R09: 0000000000000000
[  274.439436][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.439451][ T9250] R13: 00007f3487026038 R14: 00007f3487025fa0 R15: 00007f348714fa48
[  274.439479][ T9250]  </TASK>
[  275.269131][ T9275] FAULT_INJECTION: forcing a failure.
[  275.269131][ T9275] name failslab, interval 1, probability 0, space 0, times 0
[  275.269165][ T9275] CPU: 0 UID: 0 PID: 9275 Comm: syz.4.1084 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  275.269190][ T9275] Tainted: [L]=SOFTLOCKUP
[  275.269196][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  275.269208][ T9275] Call Trace:
[  275.269215][ T9275]  <TASK>
[  275.269222][ T9275]  dump_stack_lvl+0xe8/0x150
[  275.269254][ T9275]  should_fail_ex+0x410/0x560
[  275.269280][ T9275]  ? __alloc_skb+0x1db/0x7a0
[  275.269304][ T9275]  should_failslab+0xa8/0x100
[  275.269333][ T9275]  ? __alloc_skb+0x1db/0x7a0
[  275.269354][ T9275]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  275.269374][ T9275]  ? __alloc_skb+0x18d/0x7a0
[  275.269398][ T9275]  ? __alloc_skb+0x1db/0x7a0
[  275.269426][ T9275]  __alloc_skb+0x1db/0x7a0
[  275.269454][ T9275]  alloc_skb_with_frags+0xc6/0x760
[  275.269482][ T9275]  ? __lock_acquire+0x747/0x2de0
[  275.269509][ T9275]  sock_alloc_send_pskb+0x878/0x990
[  275.269545][ T9275]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  275.269565][ T9275]  ? __lock_acquire+0x747/0x2de0
[  275.269595][ T9275]  __ip6_append_data+0x2de9/0x40c0
[  275.269639][ T9275]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  275.269677][ T9275]  ? ip6_mtu+0x7d/0x4a0
[  275.269703][ T9275]  ? __pfx___ip6_append_data+0x10/0x10
[  275.269725][ T9275]  ? ip6_mtu+0x38c/0x4a0
[  275.269748][ T9275]  ? __pfx_ip6_mtu+0x10/0x10
[  275.269769][ T9275]  ? ip6_setup_cork+0x631/0xfb0
[  275.269792][ T9275]  ? lock_acquire+0x115/0x350
[  275.269815][ T9275]  ip6_make_skb+0x2af/0x320
[  275.269849][ T9275]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  275.269874][ T9275]  ? __pfx_ip6_make_skb+0x10/0x10
[  275.269897][ T9275]  ? ip6_dst_check+0x5e4/0x7e0
[  275.269928][ T9275]  ? ip6_sk_dst_lookup_flow+0x6f3/0xa50
[  275.269960][ T9275]  udpv6_sendmsg+0x1dfb/0x2610
[  275.270000][ T9275]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  275.270047][ T9275]  ? __pfx_current_check_autobind_udp_socket+0x10/0x10
[  275.270088][ T9275]  ? inet_send_prepare+0x5b/0x260
[  275.270112][ T9275]  ? inet6_sendmsg+0xe4/0x120
[  275.270133][ T9275]  ? __pfx_inet6_sendmsg+0x10/0x10
[  275.270152][ T9275]  sock_sendmsg_nosec+0x90/0x180
[  275.270176][ T9275]  ____sys_sendmsg+0x54e/0x850
[  275.270208][ T9275]  ? __pfx_____sys_sendmsg+0x10/0x10
[  275.270243][ T9275]  ? import_iovec+0x73/0xa0
[  275.270271][ T9275]  ___sys_sendmsg+0x2a5/0x360
[  275.270297][ T9275]  ? __lock_acquire+0x747/0x2de0
[  275.270320][ T9275]  ? __pfx____sys_sendmsg+0x10/0x10
[  275.270351][ T9275]  ? kstrtouint+0x6e/0xe0
[  275.270393][ T9275]  ? __fget_files+0x2a/0x420
[  275.270419][ T9275]  ? __fget_files+0x3a2/0x420
[  275.270451][ T9275]  __sys_sendmmsg+0x273/0x4d0
[  275.270481][ T9275]  ? __pfx___sys_sendmmsg+0x10/0x10
[  275.270510][ T9275]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  275.270545][ T9275]  ? ksys_write+0x242/0x270
[  275.270564][ T9275]  ? __pfx_ksys_write+0x10/0x10
[  275.270586][ T9275]  __x64_sys_sendmmsg+0xa0/0xc0
[  275.270606][ T9275]  do_syscall_64+0x166/0x520
[  275.270630][ T9275]  ? trace_irq_disable+0x3b/0x140
[  275.270650][ T9275]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.270669][ T9275]  ? clear_bhb_loop+0x70/0xc0
[  275.270691][ T9275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.270709][ T9275] RIP: 0033:0x7f3486d9e199
[  275.270727][ T9275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.270742][ T9275] RSP: 002b:00007f3487d4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  275.270763][ T9275] RAX: ffffffffffffffda RBX: 00007f3487025fa0 RCX: 00007f3486d9e199
[  275.270776][ T9275] RDX: 0000000000000001 RSI: 0000200000007100 RDI: 0000000000000003
[  275.270788][ T9275] RBP: 00007f3487d4d090 R08: 0000000000000000 R09: 0000000000000000
[  275.270800][ T9275] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001
[  275.270812][ T9275] R13: 00007f3487026038 R14: 00007f3487025fa0 R15: 00007f348714fa48
[  275.270850][ T9275]  </TASK>
[  275.605186][ T9272] netlink: 'syz.0.1082': attribute type 34 has an invalid length.
[  275.605206][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'.
[  275.724530][ T9284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.724766][ T9284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.692839][ T5687] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  276.843318][ T5687] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  276.845145][ T5687] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.845177][ T5687] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[  276.849153][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.849169][ T5687] usb 4-1: Product: syz
[  276.849177][ T5687] usb 4-1: Manufacturer: syz
[  276.849184][ T5687] usb 4-1: SerialNumber: syz
[  276.885940][ T5687] sisusb 4-1:1.0: Invalid USB2VGA device
[  276.885966][ T5687] sisusb 4-1:1.0: probe with driver sisusb failed with error -22
[  277.443369][ T5674] usb 4-1: USB disconnect, device number 50
[  277.514335][ T9303] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 8 out of range (51000000..2150000000)
[  278.167645][ T9318] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1096'.
[  278.290992][ T9322] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1099'.
[  278.291964][ T9322] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1099'.
[  279.603323][ T9343] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 8 out of range (51000000..2150000000)
[  279.643229][ T9352] netlink: 'syz.1.1110': attribute type 21 has an invalid length.
[  279.643257][ T9352] IPv6: NLM_F_CREATE should be specified when creating new route
[  279.643319][ T9352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  279.643324][ T9352] IPv6: NLM_F_CREATE should be set when creating new route
[  279.643397][ T9352] IPv6: NLM_F_CREATE should be set when creating new route
[  279.643516][ T9352] IPv6: NLM_F_CREATE should be set when creating new route
[  279.659487][ T9352] netlink: 'syz.1.1110': attribute type 21 has an invalid length.
[  279.659544][ T9352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  279.748938][ T9350] bridge4: entered promiscuous mode
[  279.748956][ T9350] bridge4: entered allmulticast mode
[  280.051205][ T9363] FAULT_INJECTION: forcing a failure.
[  280.051205][ T9363] name failslab, interval 1, probability 0, space 0, times 0
[  280.051228][ T9363] CPU: 0 UID: 0 PID: 9363 Comm: syz.4.1113 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  280.051243][ T9363] Tainted: [L]=SOFTLOCKUP
[  280.051247][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  280.051256][ T9363] Call Trace:
[  280.051260][ T9363]  <TASK>
[  280.051266][ T9363]  dump_stack_lvl+0xe8/0x150
[  280.051286][ T9363]  should_fail_ex+0x410/0x560
[  280.051303][ T9363]  should_failslab+0xa8/0x100
[  280.051318][ T9363]  ? skb_clone+0x212/0x3a0
[  280.051328][ T9363]  kmem_cache_alloc_noprof+0xa1/0x600
[  280.051339][ T9363]  ? lock_acquire+0x115/0x350
[  280.051351][ T9363]  ? skb_clone+0x212/0x3a0
[  280.051364][ T9363]  skb_clone+0x212/0x3a0
[  280.051373][ T9363]  ? dev_queue_xmit_nit+0x25c/0xac0
[  280.051390][ T9363]  dev_queue_xmit_nit+0x28d/0xac0
[  280.051405][ T9363]  ? dev_queue_xmit_nit+0x2d/0xac0
[  280.051423][ T9363]  dev_hard_start_xmit+0x1c1/0x830
[  280.051441][ T9363]  __dev_queue_xmit+0x14d1/0x3920
[  280.051452][ T9363]  ? do_syscall_64+0x166/0x520
[  280.051469][ T9363]  ? __dev_queue_xmit+0x29b/0x3920
[  280.051488][ T9363]  ? __pfx___dev_queue_xmit+0x10/0x10
[  280.051505][ T9363]  ? __copy_skb_header+0xa3/0x4a0
[  280.051519][ T9363]  ? __skb_clone+0x449/0x6c0
[  280.051531][ T9363]  ? skb_clone+0x246/0x3a0
[  280.051543][ T9363]  __netlink_deliver_tap+0x5b4/0x860
[  280.051560][ T9363]  ? netlink_deliver_tap+0x2e/0x1b0
[  280.051572][ T9363]  netlink_deliver_tap+0x19c/0x1b0
[  280.051583][ T9363]  netlink_unicast+0x781/0x940
[  280.051599][ T9363]  netlink_sendmsg+0x813/0xb40
[  280.051618][ T9363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.051634][ T9363]  ? apparmor_socket_sendmsg+0x18b/0x360
[  280.051649][ T9363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.051660][ T9363]  sock_sendmsg_nosec+0x13a/0x180
[  280.051674][ T9363]  ____sys_sendmsg+0x54e/0x850
[  280.051693][ T9363]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.051713][ T9363]  ? import_iovec+0x73/0xa0
[  280.051729][ T9363]  ___sys_sendmsg+0x2a5/0x360
[  280.051748][ T9363]  ? __pfx____sys_sendmsg+0x10/0x10
[  280.051789][ T9363]  ? do_sys_openat2+0x14e/0x200
[  280.051807][ T9363]  __x64_sys_sendmsg+0x1b1/0x290
[  280.051825][ T9363]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  280.051847][ T9363]  ? __seccomp_permit_syscall+0xe7/0x2b0
[  280.051864][ T9363]  do_syscall_64+0x166/0x520
[  280.051886][ T9363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.051903][ T9363]  ? clear_bhb_loop+0x70/0xc0
[  280.051925][ T9363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.051941][ T9363] RIP: 0033:0x7f3486d9e199
[  280.051958][ T9363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.051973][ T9363] RSP: 002b:00007f3487d4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.051991][ T9363] RAX: ffffffffffffffda RBX: 00007f3487025fa0 RCX: 00007f3486d9e199
[  280.052004][ T9363] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 000000000000000a
[  280.052015][ T9363] RBP: 00007f3487d4d090 R08: 0000000000000000 R09: 0000000000000000
[  280.052026][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  280.052037][ T9363] R13: 00007f3487026038 R14: 00007f3487025fa0 R15: 00007f348714fa48
[  280.052064][ T9363]  </TASK>
[  280.684515][ T9375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.686823][ T9375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.721736][ T9375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.722445][ T9375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.822209][ T5723] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  280.889492][ T9380] FAULT_INJECTION: forcing a failure.
[  280.889492][ T9380] name failslab, interval 1, probability 0, space 0, times 0
[  280.889525][ T9380] CPU: 0 UID: 0 PID: 9380 Comm: syz.0.1118 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  280.889549][ T9380] Tainted: [L]=SOFTLOCKUP
[  280.889556][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  280.889567][ T9380] Call Trace:
[  280.889574][ T9380]  <TASK>
[  280.889582][ T9380]  dump_stack_lvl+0xe8/0x150
[  280.889612][ T9380]  should_fail_ex+0x410/0x560
[  280.889640][ T9380]  should_failslab+0xa8/0x100
[  280.889667][ T9380]  ? vm_area_dup+0x28/0x760
[  280.889685][ T9380]  kmem_cache_alloc_noprof+0xa1/0x600
[  280.889706][ T9380]  ? vm_area_dup+0x28/0x760
[  280.889731][ T9380]  vm_area_dup+0x28/0x760
[  280.889761][ T9380]  ? __split_vma+0x1b7/0xa60
[  280.889789][ T9380]  __split_vma+0x1d7/0xa60
[  280.889817][ T9380]  ? mas_next_slot+0xc91/0xd70
[  280.889845][ T9380]  ? __pfx___split_vma+0x10/0x10
[  280.889882][ T9380]  ? mas_find+0x6d6/0xcb0
[  280.889912][ T9380]  vms_gather_munmap_vmas+0x4e3/0x1370
[  280.889950][ T9380]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  280.889992][ T9380]  do_vmi_align_munmap+0x2b4/0x4b0
[  280.890032][ T9380]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  280.890081][ T9380]  ? mas_walk+0x37e/0x490
[  280.890106][ T9380]  ? mas_find+0x642/0xcb0
[  280.890135][ T9380]  do_vmi_munmap+0x252/0x2d0
[  280.890164][ T9380]  move_vma+0x11bd/0x1850
[  280.890214][ T9380]  ? arch_get_unmapped_area_topdown+0x269/0xc30
[  280.890236][ T9380]  ? __pfx_move_vma+0x10/0x10
[  280.890265][ T9380]  ? mtree_load+0x12a/0x780
[  280.890300][ T9380]  ? cap_mmap_addr+0xaf/0x100
[  280.890322][ T9380]  ? bpf_lsm_mmap_addr+0x9/0x50
[  280.890360][ T9380]  mremap_to+0x7f9/0x8d0
[  280.890387][ T9380]  ? __pfx_mremap_to+0x10/0x10
[  280.890413][ T9380]  ? __pfx_check_prep_vma+0x10/0x10
[  280.890439][ T9380]  ? mas_walk+0x37e/0x490
[  280.890465][ T9380]  ? mas_find+0x642/0xcb0
[  280.890495][ T9380]  __se_sys_mremap+0xd30/0x12d0
[  280.890529][ T9380]  ? __pfx___se_sys_mremap+0x10/0x10
[  280.890561][ T9380]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  280.890589][ T9380]  ? __fget_files+0x3a2/0x420
[  280.890630][ T9380]  ? __pfx_ksys_write+0x10/0x10
[  280.890654][ T9380]  ? __x64_sys_mremap+0x20/0xc0
[  280.890679][ T9380]  do_syscall_64+0x166/0x520
[  280.890703][ T9380]  ? trace_irq_disable+0x3b/0x140
[  280.890722][ T9380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.890741][ T9380]  ? clear_bhb_loop+0x70/0xc0
[  280.890763][ T9380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.890781][ T9380] RIP: 0033:0x7efc5ad9e199
[  280.890799][ T9380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.890814][ T9380] RSP: 002b:00007efc5bcd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  280.890834][ T9380] RAX: ffffffffffffffda RBX: 00007efc5b025fa0 RCX: 00007efc5ad9e199
[  280.890847][ T9380] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 00002000000d5000
[  280.890859][ T9380] RBP: 00007efc5bcd2090 R08: 0000200000ffd000 R09: 0000000000000000
[  280.890872][ T9380] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002
[  280.890882][ T9380] R13: 00007efc5b026038 R14: 00007efc5b025fa0 R15: 00007efc5b14fa48
[  280.890910][ T9380]  </TASK>
[  281.022926][ T5723] usb 4-1: Using ep0 maxpacket: 16
[  281.036761][ T5723] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  281.062654][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.264619][ T5723] usb 4-1: config 0 descriptor??
[  281.315266][ T9382] FAULT_INJECTION: forcing a failure.
[  281.315266][ T9382] name failslab, interval 1, probability 0, space 0, times 0
[  281.315300][ T9382] CPU: 1 UID: 0 PID: 9382 Comm: syz.5.1119 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  281.315324][ T9382] Tainted: [L]=SOFTLOCKUP
[  281.315330][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  281.315341][ T9382] Call Trace:
[  281.315348][ T9382]  <TASK>
[  281.315356][ T9382]  dump_stack_lvl+0xe8/0x150
[  281.315388][ T9382]  should_fail_ex+0x410/0x560
[  281.315415][ T9382]  should_failslab+0xa8/0x100
[  281.315441][ T9382]  __kvmalloc_node_noprof+0x176/0x820
[  281.315463][ T9382]  ? __kmalloc_cache_noprof+0x321/0x600
[  281.315486][ T9382]  ? __kmalloc_cache_noprof+0x14d/0x600
[  281.315504][ T9382]  ? percpu_ref_init+0xc5/0x350
[  281.315531][ T9382]  ? io_alloc_cache_init+0x42/0x140
[  281.315550][ T9382]  ? io_alloc_cache_init+0x42/0x140
[  281.315576][ T9382]  io_alloc_cache_init+0x42/0x140
[  281.315598][ T9382]  io_ring_ctx_alloc+0x508/0xb80
[  281.315630][ T9382]  io_uring_create+0x50/0x990
[  281.315660][ T9382]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  281.315683][ T9382]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  281.315712][ T9382]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  281.315749][ T9382]  ? __pfx_ksys_write+0x10/0x10
[  281.315778][ T9382]  do_syscall_64+0x166/0x520
[  281.315803][ T9382]  ? trace_irq_disable+0x3b/0x140
[  281.315822][ T9382]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.315841][ T9382]  ? clear_bhb_loop+0x70/0xc0
[  281.315863][ T9382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.315881][ T9382] RIP: 0033:0x7f2e1b79e199
[  281.315898][ T9382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.315914][ T9382] RSP: 002b:00007f2e1c63eee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  281.315933][ T9382] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f2e1b79e199
[  281.315947][ T9382] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000e26
[  281.315960][ T9382] RBP: 0000200000000a80 R08: 0000200000000340 R09: 0000000000000000
[  281.315972][ T9382] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  281.315984][ T9382] R13: 0000200000000b10 R14: 00007f2e1c63efd8 R15: 0000000000000000
[  281.316013][ T9382]  </TASK>
[  282.018926][ T9396] fuse: Unknown parameter '�¾'
[  282.602745][ T9399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.607295][ T9399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.796482][ T9407] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  282.874878][  T147] IPVS: starting estimator thread 0...
[  282.925032][ T9413] FAULT_INJECTION: forcing a failure.
[  282.925032][ T9413] name failslab, interval 1, probability 0, space 0, times 0
[  282.925058][ T9413] CPU: 0 UID: 0 PID: 9413 Comm: syz.5.1129 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  282.925074][ T9413] Tainted: [L]=SOFTLOCKUP
[  282.925077][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  282.925084][ T9413] Call Trace:
[  282.925088][ T9413]  <TASK>
[  282.925093][ T9413]  dump_stack_lvl+0xe8/0x150
[  282.925116][ T9413]  should_fail_ex+0x410/0x560
[  282.925133][ T9413]  should_failslab+0xa8/0x100
[  282.925149][ T9413]  __kmalloc_cache_noprof+0xa3/0x600
[  282.925162][ T9413]  ? __kmalloc_cache_noprof+0x14d/0x600
[  282.925173][ T9413]  ? sctp_add_bind_addr+0x8c/0x370
[  282.925184][ T9413]  ? sctp_add_bind_addr+0x8c/0x370
[  282.925198][ T9413]  sctp_add_bind_addr+0x8c/0x370
[  282.925211][ T9413]  sctp_copy_local_addr_list+0x31a/0x4e0
[  282.925225][ T9413]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  282.925237][ T9413]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  282.925249][ T9413]  ? sctp_v6_is_any+0x64/0x80
[  282.925262][ T9413]  ? sctp_copy_one_addr+0x93/0x360
[  282.925275][ T9413]  sctp_bind_addr_copy+0xb3/0x3c0
[  282.925286][ T9413]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  282.925304][ T9413]  sctp_connect_new_asoc+0x2ff/0x6b0
[  282.925319][ T9413]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  282.925336][ T9413]  ? __local_bh_enable_ip+0xd6/0x140
[  282.925349][ T9413]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  282.925364][ T9413]  ? security_sctp_bind_connect+0x7e/0x2c0
[  282.925378][ T9413]  sctp_sendmsg+0x159b/0x2d00
[  282.925398][ T9413]  ? __pfx_sctp_sendmsg+0x10/0x10
[  282.925414][ T9413]  ? __lock_acquire+0x747/0x2de0
[  282.925432][ T9413]  ? aa_sock_msg_perm+0xf5/0x210
[  282.925447][ T9413]  ? sock_rps_record_flow+0x19/0x350
[  282.925468][ T9413]  ? inet_sendmsg+0x298/0x320
[  282.925481][ T9413]  ? __pfx_inet_sendmsg+0x10/0x10
[  282.925492][ T9413]  sock_sendmsg_nosec+0x10e/0x180
[  282.925507][ T9413]  ____sys_sendmsg+0x54e/0x850
[  282.925525][ T9413]  ? __pfx_____sys_sendmsg+0x10/0x10
[  282.925546][ T9413]  ? import_iovec+0x73/0xa0
[  282.925562][ T9413]  ___sys_sendmsg+0x2a5/0x360
[  282.925577][ T9413]  ? __lock_acquire+0x747/0x2de0
[  282.925590][ T9413]  ? __pfx____sys_sendmsg+0x10/0x10
[  282.925608][ T9413]  ? kstrtouint+0x6e/0xe0
[  282.925632][ T9413]  ? __fget_files+0x2a/0x420
[  282.925647][ T9413]  ? __fget_files+0x3a2/0x420
[  282.925678][ T9413]  __sys_sendmmsg+0x273/0x4d0
[  282.925710][ T9413]  ? __pfx___sys_sendmmsg+0x10/0x10
[  282.925744][ T9413]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  282.925783][ T9413]  ? ksys_write+0x242/0x270
[  282.925805][ T9413]  ? __pfx_ksys_write+0x10/0x10
[  282.925830][ T9413]  __x64_sys_sendmmsg+0xa0/0xc0
[  282.925850][ T9413]  do_syscall_64+0x166/0x520
[  282.925876][ T9413]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.925893][ T9413]  ? clear_bhb_loop+0x70/0xc0
[  282.925906][ T9413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.925916][ T9413] RIP: 0033:0x7f2e1b79e199
[  282.925927][ T9413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  282.925936][ T9413] RSP: 002b:00007f2e1c63f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  282.925949][ T9413] RAX: ffffffffffffffda RBX: 00007f2e1ba25fa0 RCX: 00007f2e1b79e199
[  282.925959][ T9413] RDX: 03ffffffffffffd1 RSI: 0000200000000000 RDI: 0000000000000003
[  282.925966][ T9413] RBP: 00007f2e1c63f090 R08: 0000000000000000 R09: 0000000000000000
[  282.925973][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  282.925979][ T9413] R13: 00007f2e1ba26038 R14: 00007f2e1ba25fa0 R15: 00007f2e1bb4fa48
[  282.925995][ T9413]  </TASK>
[  282.945539][ T9400] IPVS: set_ctl: invalid protocol: 44 172.30.1.5:19999
[  282.945687][ T9400] IPVS: set_ctl: invalid protocol: 135 172.20.20.13:20001
[  282.945734][ T9403] IPVS: set_ctl: invalid protocol: 135 172.20.20.13:20001
[  282.972508][ T9410] IPVS: using max 31 ests per chain, 74400 per kthread
[  283.714555][ T5723] usbhid 4-1:0.0: can't add hid device: -71
[  283.714653][ T5723] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  283.739797][ T5723] usb 4-1: USB disconnect, device number 51
[  283.848683][ T9417] FAULT_INJECTION: forcing a failure.
[  283.848683][ T9417] name failslab, interval 1, probability 0, space 0, times 0
[  283.848717][ T9417] CPU: 1 UID: 0 PID: 9417 Comm: syz.3.1132 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  283.848751][ T9417] Tainted: [L]=SOFTLOCKUP
[  283.848758][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  283.848769][ T9417] Call Trace:
[  283.848776][ T9417]  <TASK>
[  283.848784][ T9417]  dump_stack_lvl+0xe8/0x150
[  283.848831][ T9417]  should_fail_ex+0x410/0x560
[  283.848857][ T9417]  ? __alloc_skb+0x1db/0x7a0
[  283.848881][ T9417]  should_failslab+0xa8/0x100
[  283.848906][ T9417]  ? __alloc_skb+0x1db/0x7a0
[  283.848928][ T9417]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  283.848948][ T9417]  ? __alloc_skb+0x18d/0x7a0
[  283.848972][ T9417]  ? __alloc_skb+0x1db/0x7a0
[  283.849006][ T9417]  __alloc_skb+0x1db/0x7a0
[  283.849033][ T9417]  alloc_skb_with_frags+0xc6/0x760
[  283.849069][ T9417]  sock_alloc_send_pskb+0x878/0x990
[  283.849108][ T9417]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  283.849138][ T9417]  ? iov_iter_advance+0x8b/0x1c0
[  283.849163][ T9417]  tun_get_user+0x8fb/0x44d0
[  283.849199][ T9417]  ? aa_file_perm+0x18b/0x15f0
[  283.849230][ T9417]  ? aa_file_perm+0x4ed/0x15f0
[  283.849255][ T9417]  ? __pfx_tun_get_user+0x10/0x10
[  283.849279][ T9417]  ? __lock_acquire+0x747/0x2de0
[  283.849301][ T9417]  ? kstrtoull+0x137/0x1d0
[  283.849325][ T9417]  ? ref_tracker_alloc+0x341/0x4b0
[  283.849347][ T9417]  ? lock_acquire+0x115/0x350
[  283.849366][ T9417]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  283.849391][ T9417]  ? lock_acquire+0x115/0x350
[  283.849410][ T9417]  ? tun_get+0x1c/0x2f0
[  283.849434][ T9417]  ? tun_get+0x1c/0x2f0
[  283.849453][ T9417]  ? tun_get+0x1c/0x2f0
[  283.849477][ T9417]  tun_chr_write_iter+0x113/0x200
[  283.849500][ T9417]  vfs_write+0x612/0xba0
[  283.849524][ T9417]  ? __pfx_vfs_write+0x10/0x10
[  283.849549][ T9417]  ? __fget_files+0x2a/0x420
[  283.849583][ T9417]  ksys_write+0x150/0x270
[  283.849604][ T9417]  ? __pfx_ksys_write+0x10/0x10
[  283.849643][ T9417]  do_syscall_64+0x166/0x520
[  283.849667][ T9417]  ? trace_irq_disable+0x3b/0x140
[  283.849685][ T9417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.849701][ T9417]  ? clear_bhb_loop+0x70/0xc0
[  283.849729][ T9417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.849747][ T9417] RIP: 0033:0x7f436639e199
[  283.849762][ T9417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  283.849777][ T9417] RSP: 002b:00007f4367256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  283.849797][ T9417] RAX: ffffffffffffffda RBX: 00007f4366625fa0 RCX: 00007f436639e199
[  283.849810][ T9417] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003
[  283.849823][ T9417] RBP: 00007f4367256090 R08: 0000000000000000 R09: 0000000000000000
[  283.849835][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.849845][ T9417] R13: 00007f4366626038 R14: 00007f4366625fa0 R15: 00007f436674fa48
[  283.849874][ T9417]  </TASK>
[  284.484222][ T9423] fuse: Unknown parameter './file0'
[  284.999302][ T9437] netlink: 'syz.0.1138': attribute type 3 has an invalid length.
[  284.999341][ T9437] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1138'.
[  285.092602][ T5701] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  285.242277][ T5701] usb 4-1: Using ep0 maxpacket: 16
[  285.243813][ T5701] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  285.247194][ T5701] usb 4-1: config 252 has an invalid interface number: 15 but max is 0
[  285.247221][ T5701] usb 4-1: config 252 has no interface number 0
[  285.247260][ T5701] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  285.258371][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.258395][ T5701] usb 4-1: Product: syz
[  285.258409][ T5701] usb 4-1: Manufacturer: syz
[  285.258422][ T5701] usb 4-1: SerialNumber: syz
[  285.416898][ T5701] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  285.566504][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.566818][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.609098][ T6785] usb 4-1: Failed to submit usb control message: -71
[  285.609137][ T6785] usb 4-1: unable to send the bmi data to the device: -71
[  285.609154][ T6785] usb 4-1: unable to get target info from device
[  285.609188][ T6785] usb 4-1: could not get target info (-71)
[  285.634630][ T6785] usb 4-1: could not probe fw (-71)
[  285.649548][   T10] usb 4-1: USB disconnect, device number 52
[  285.782200][ T5723] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  285.943383][ T9459] FAULT_INJECTION: forcing a failure.
[  285.943383][ T9459] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  285.943418][ T9459] CPU: 1 UID: 0 PID: 9459 Comm: syz.1.1144 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  285.943443][ T9459] Tainted: [L]=SOFTLOCKUP
[  285.943449][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  285.943460][ T9459] Call Trace:
[  285.943467][ T9459]  <TASK>
[  285.943475][ T9459]  dump_stack_lvl+0xe8/0x150
[  285.943506][ T9459]  should_fail_ex+0x410/0x560
[  285.943538][ T9459]  _copy_from_user+0x2d/0xb0
[  285.943564][ T9459]  dev_ifconf+0xdb/0x300
[  285.943590][ T9459]  ? hook_file_ioctl+0x1f2/0x600
[  285.943611][ T9459]  ? __pfx_dev_ifconf+0x10/0x10
[  285.943630][ T9459]  sock_ioctl+0x1dd/0x7e0
[  285.943644][ T9459]  ? __pfx_sock_ioctl+0x10/0x10
[  285.943655][ T9459]  ? ksys_write+0x1fc/0x270
[  285.943669][ T9459]  ? bpf_lsm_file_ioctl+0x9/0x20
[  285.943686][ T9459]  ? __pfx_sock_ioctl+0x10/0x10
[  285.943697][ T9459]  __se_sys_ioctl+0xfc/0x170
[  285.943714][ T9459]  do_syscall_64+0x166/0x520
[  285.943729][ T9459]  ? trace_irq_disable+0x3b/0x140
[  285.943741][ T9459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.943751][ T9459]  ? clear_bhb_loop+0x70/0xc0
[  285.943763][ T9459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.943773][ T9459] RIP: 0033:0x7fdf8c99e199
[  285.943784][ T9459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.943794][ T9459] RSP: 002b:00007fdf8d8cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  285.943806][ T9459] RAX: ffffffffffffffda RBX: 00007fdf8cc25fa0 RCX: 00007fdf8c99e199
[  285.943813][ T9459] RDX: 0000000000000000 RSI: 0000000000008912 RDI: 0000000000000003
[  285.943819][ T9459] RBP: 00007fdf8d8cb090 R08: 0000000000000000 R09: 0000000000000000
[  285.943825][ T9459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.943831][ T9459] R13: 00007fdf8cc26038 R14: 00007fdf8cc25fa0 R15: 00007fdf8cd4fa48
[  285.943846][ T9459]  </TASK>
[  285.965703][ T6785] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96
[  285.982011][ T5723] usb 1-1: Using ep0 maxpacket: 16
[  285.997514][ T5723] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  286.030368][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.208801][ T5723] usb 1-1: config 0 descriptor??
[  287.293989][   T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  287.443434][   T10] usb 2-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed
[  287.444735][   T10] usb 2-1: config index 0 descriptor too short (expected 60495, got 18)
[  287.444761][   T10] usb 2-1: config 218 has too many interfaces: 104, using maximum allowed: 32
[  287.444779][   T10] usb 2-1: config 218 has an invalid descriptor of length 110, skipping remainder of the config
[  287.444805][   T10] usb 2-1: config 218 has 0 interfaces, different from the descriptor's value: 104
[  287.448297][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.448322][   T10] usb 2-1: Product: syz
[  287.448359][   T10] usb 2-1: Manufacturer: syz
[  287.448371][   T10] usb 2-1: SerialNumber: syz
[  287.806864][ T9486] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  287.864149][ T9506] GUP no longer grows the stack in syz.5.1157 (9506): 200000033000-200000200000 (20000002f000)
[  287.864196][ T9506] CPU: 1 UID: 0 PID: 9506 Comm: syz.5.1157 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  287.864221][ T9506] Tainted: [L]=SOFTLOCKUP
[  287.864228][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  287.864238][ T9506] Call Trace:
[  287.864246][ T9506]  <TASK>
[  287.864254][ T9506]  dump_stack_lvl+0xe8/0x150
[  287.864297][ T9506]  __get_user_pages+0x23b6/0x2750
[  287.864354][ T9506]  get_user_pages_remote+0x307/0xb10
[  287.864381][ T9506]  ? __pfx_mtree_load+0x10/0x10
[  287.864416][ T9506]  ? __pfx_get_user_pages_remote+0x10/0x10
[  287.864443][ T9506]  ? __access_remote_vm+0xa3/0x6f0
[  287.864473][ T9506]  ? __access_remote_vm+0x42c/0x6f0
[  287.864509][ T9506]  __access_remote_vm+0x222/0x6f0
[  287.864545][ T9506]  ? __pfx___access_remote_vm+0x10/0x10
[  287.864576][ T9506]  ? rep_movs_alternative+0x4a/0xa0
[  287.864604][ T9506]  proc_pid_cmdline_read+0x46b/0x900
[  287.864623][ T9506]  ? __asan_memset+0x22/0x50
[  287.864650][ T9506]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  287.864673][ T9506]  ? rw_verify_area+0x24a/0x4c0
[  287.864695][ T9506]  vfs_readv+0x57c/0x850
[  287.864722][ T9506]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  287.864745][ T9506]  ? __pfx_vfs_readv+0x10/0x10
[  287.864782][ T9506]  ? __fget_files+0x2a/0x420
[  287.864814][ T9506]  ? __fget_files+0x3a2/0x420
[  287.864840][ T9506]  ? __fget_files+0x2a/0x420
[  287.864876][ T9506]  __x64_sys_preadv+0x19c/0x2b0
[  287.864901][ T9506]  ? __pfx___x64_sys_preadv+0x10/0x10
[  287.864933][ T9506]  do_syscall_64+0x166/0x520
[  287.864960][ T9506]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.864980][ T9506]  ? clear_bhb_loop+0x70/0xc0
[  287.865003][ T9506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.865021][ T9506] RIP: 0033:0x7f2e1b79e199
[  287.865040][ T9506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  287.865057][ T9506] RSP: 002b:00007f2e1c63f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  287.865078][ T9506] RAX: ffffffffffffffda RBX: 00007f2e1ba25fa0 RCX: 00007f2e1b79e199
[  287.865092][ T9506] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000003
[  287.865105][ T9506] RBP: 00007f2e1b8358e0 R08: 0000000000006a76 R09: 0000000000000000
[  287.865117][ T9506] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000
[  287.865129][ T9506] R13: 00007f2e1ba26038 R14: 00007f2e1ba25fa0 R15: 00007f2e1bb4fa48
[  287.865160][ T9506]  </TASK>
[  287.921268][ T9486] binfmt_misc: register: failed to install interpreter ./file0
[  287.976996][ T9510] sg_write: data in/out 461547/217 bytes for SCSI command 0x0-- guessing data in;
[  287.976996][ T9510]    program syz.4.1158 not setting count and/or reply_len properly
[  288.204549][   T10] usb 2-1: USB disconnect, device number 49
[  288.337430][ T9516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.338323][ T9516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.573123][ T5723] usbhid 1-1:0.0: can't add hid device: -71
[  288.573225][ T5723] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  288.599793][ T5723] usb 1-1: USB disconnect, device number 58
[  289.045016][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.045442][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.425411][ T9536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.456478][ T9536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.476655][ T9536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.477026][ T9536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.564071][ T9530] tipc: Enabling <eth:lo> not permitted
[  289.564106][ T9530] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  289.806650][ T5687] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  289.963357][ T5687] usb 2-1: Using ep0 maxpacket: 32
[  289.964166][ T5687] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  289.965146][ T5687] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  289.965167][ T5687] usb 2-1: config 0 has no interface number 0
[  289.965204][ T5687] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.965229][ T5687] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.965263][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.970844][ T5687] usb 2-1: config 0 descriptor??
[  290.083263][ T5701] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  290.245761][ T5701] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  290.251761][ T5701] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  290.251810][ T5701] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  290.251856][ T5701] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  290.251877][ T5701] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  290.251916][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.320833][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.321340][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.612296][ T9540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.622276][ T9540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.856878][ T5687] usbhid 2-1:0.1: can't add hid device: -71
[  290.856976][ T5687] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[  290.874199][ T5687] usb 2-1: USB disconnect, device number 50
[  291.071580][ T5701] usb 6-1: USB disconnect, device number 32
[  291.209604][ T9559] all: renamed from ip6gretap0 (while UP)
[  291.226728][ T9559] FAULT_INJECTION: forcing a failure.
[  291.226728][ T9559] name failslab, interval 1, probability 0, space 0, times 0
[  291.226764][ T9559] CPU: 1 UID: 0 PID: 9559 Comm: syz.5.1173 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  291.226789][ T9559] Tainted: [L]=SOFTLOCKUP
[  291.226796][ T9559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  291.226807][ T9559] Call Trace:
[  291.226814][ T9559]  <TASK>
[  291.226822][ T9559]  dump_stack_lvl+0xe8/0x150
[  291.226856][ T9559]  should_fail_ex+0x410/0x560
[  291.226883][ T9559]  ? __alloc_skb+0x1db/0x7a0
[  291.226908][ T9559]  should_failslab+0xa8/0x100
[  291.226933][ T9559]  ? __alloc_skb+0x1db/0x7a0
[  291.226956][ T9559]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  291.226976][ T9559]  ? __alloc_skb+0x18d/0x7a0
[  291.227000][ T9559]  ? __alloc_skb+0x1db/0x7a0
[  291.227039][ T9559]  __alloc_skb+0x1db/0x7a0
[  291.227066][ T9559]  rtmsg_ifinfo_build_skb+0x7f/0x260
[  291.227097][ T9559]  rtnetlink_event+0x1b7/0x270
[  291.227127][ T9559]  notifier_call_chain+0x1a5/0x3d0
[  291.227165][ T9559]  netif_change_name+0x5f3/0x970
[  291.227192][ T9559]  ? do_setlink+0xb66/0x4670
[  291.227215][ T9559]  ? __pfx_netif_change_name+0x10/0x10
[  291.227244][ T9559]  ? nla_strscpy+0x10f/0x170
[  291.227272][ T9559]  do_setlink+0xb66/0x4670
[  291.227287][ T9559]  ? unwind_get_return_address+0x4d/0x90
[  291.227324][ T9559]  ? __pfx_do_setlink+0x10/0x10
[  291.227340][ T9559]  ? __lock_acquire+0x747/0x2de0
[  291.227371][ T9559]  ? kasan_save_track+0x4f/0x80
[  291.227390][ T9559]  ? kasan_save_track+0x3e/0x80
[  291.227409][ T9559]  ? __kasan_kmalloc+0x93/0xb0
[  291.227429][ T9559]  ? __kmalloc_cache_noprof+0x321/0x600
[  291.227459][ T9559]  ? __mutex_trylock_common+0x15f/0x270
[  291.227486][ T9559]  ? __pfx___mutex_trylock_common+0x10/0x10
[  291.227512][ T9559]  ? rcu_is_watching+0x16/0xb0
[  291.227535][ T9559]  ? trace_contention_end+0x3d/0x140
[  291.227561][ T9559]  ? __mutex_lock+0x30b/0x1550
[  291.227599][ T9559]  ? rtnl_newlink+0xc10/0x1c30
[  291.227626][ T9559]  ? __pfx___mutex_lock+0x10/0x10
[  291.227662][ T9559]  ? ns_capable+0x89/0xe0
[  291.227687][ T9559]  ? rtnl_nets_add+0x16c/0x300
[  291.227712][ T9559]  ? refcount_inc+0x46/0x70
[  291.227736][ T9559]  rtnl_newlink+0x15a3/0x1c30
[  291.227773][ T9559]  ? __pfx_rtnl_newlink+0x10/0x10
[  291.227796][ T9559]  ? do_syscall_64+0x166/0x520
[  291.227821][ T9559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.227871][ T9559]  ? kasan_quarantine_put+0xbb/0x1f0
[  291.227891][ T9559]  ? lockdep_hardirqs_on+0x7b/0x110
[  291.227920][ T9559]  ? nlmon_xmit+0xb0/0x100
[  291.227940][ T9559]  ? kmem_cache_free+0x182/0x650
[  291.227969][ T9559]  ? __lock_acquire+0x747/0x2de0
[  291.227998][ T9559]  ? __local_bh_enable_ip+0xd6/0x140
[  291.228027][ T9559]  ? lockdep_hardirqs_on+0x7b/0x110
[  291.228050][ T9559]  ? __dev_queue_xmit+0x29b/0x3920
[  291.228067][ T9559]  ? __local_bh_enable_ip+0xd6/0x140
[  291.228096][ T9559]  ? lock_acquire+0x115/0x350
[  291.228116][ T9559]  ? __pfx_rtnl_newlink+0x10/0x10
[  291.228152][ T9559]  ? __pfx_rtnl_newlink+0x10/0x10
[  291.228176][ T9559]  rtnetlink_rcv_msg+0x802/0xc00
[  291.228205][ T9559]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  291.228229][ T9559]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  291.228253][ T9559]  ? ref_tracker_free+0x689/0x830
[  291.228280][ T9559]  ? __pfx_ref_tracker_free+0x10/0x10
[  291.228314][ T9559]  netlink_rcv_skb+0x226/0x4a0
[  291.228336][ T9559]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  291.228363][ T9559]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  291.228395][ T9559]  ? netlink_deliver_tap+0x2e/0x1b0
[  291.228414][ T9559]  ? netlink_deliver_tap+0x2e/0x1b0
[  291.228439][ T9559]  netlink_unicast+0x7bd/0x940
[  291.228468][ T9559]  netlink_sendmsg+0x813/0xb40
[  291.228497][ T9559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.228523][ T9559]  ? apparmor_socket_sendmsg+0x98/0x360
[  291.228546][ T9559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.228565][ T9559]  sock_sendmsg_nosec+0x13a/0x180
[  291.228591][ T9559]  ____sys_sendmsg+0x54e/0x850
[  291.228623][ T9559]  ? __pfx_____sys_sendmsg+0x10/0x10
[  291.228660][ T9559]  ? import_iovec+0x73/0xa0
[  291.228687][ T9559]  ___sys_sendmsg+0x2a5/0x360
[  291.228713][ T9559]  ? __lock_acquire+0x747/0x2de0
[  291.228737][ T9559]  ? __pfx____sys_sendmsg+0x10/0x10
[  291.228797][ T9559]  ? __fget_files+0x2a/0x420
[  291.228823][ T9559]  ? __fget_files+0x3a2/0x420
[  291.228859][ T9559]  __x64_sys_sendmsg+0x1b1/0x290
[  291.228888][ T9559]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  291.228935][ T9559]  do_syscall_64+0x166/0x520
[  291.228960][ T9559]  ? trace_irq_disable+0x3b/0x140
[  291.228980][ T9559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.228999][ T9559]  ? clear_bhb_loop+0x70/0xc0
[  291.229051][ T9559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.229069][ T9559] RIP: 0033:0x7f2e1b79e199
[  291.229088][ T9559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.229104][ T9559] RSP: 002b:00007f2e1c63f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.229125][ T9559] RAX: ffffffffffffffda RBX: 00007f2e1ba25fa0 RCX: 00007f2e1b79e199
[  291.229139][ T9559] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000005
[  291.229151][ T9559] RBP: 00007f2e1c63f090 R08: 0000000000000000 R09: 0000000000000000
[  291.229162][ T9559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  291.229173][ T9559] R13: 00007f2e1ba26038 R14: 00007f2e1ba25fa0 R15: 00007f2e1bb4fa48
[  291.229202][ T9559]  </TASK>
[  292.162193][   T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  292.323314][   T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  292.324499][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  292.324548][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.331224][   T10] usb 1-1: config 0 descriptor??
[  292.373116][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  292.396141][ T5701] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  292.544096][ T5701] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00
[  292.545064][ T5701] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  292.545087][ T5701] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  292.546054][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  292.546076][ T5701] usb 2-1: SerialNumber: syz
[  292.567947][ T5701] usb 2-1: 0:2 : does not exist
[  292.748023][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  292.749532][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  292.751918][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  292.775014][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[  292.779788][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[  292.781085][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[  292.803244][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[  292.833482][ T9579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.833962][ T9579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.987813][    T9] usb 2-1: USB disconnect, device number 51
[  293.069743][ T9582] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  293.583178][   T10] pwc: recv_control_msg error -71 req 04 val 1500
[  293.585203][   T10] pwc: recv_control_msg error -71 req 02 val 2500
[  293.587446][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[  293.589411][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[  293.591342][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[  293.591769][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  293.641931][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  293.649141][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  293.684216][   T10] pwc: Registered as video103.
[  293.687658][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28
[  293.714724][   T10] usb 1-1: USB disconnect, device number 59
[  293.856164][ T9606] netlink: 'syz.0.1189': attribute type 1 has an invalid length.
[  294.082477][ T5701] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  294.212519][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  294.212615][ T5701] usb 6-1: device descriptor read/64, error -71
[  294.282162][ T1217] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  294.442541][ T1217] usb 1-1: Using ep0 maxpacket: 16
[  294.443664][ T1217] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  294.444694][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.448847][ T1217] usb 1-1: config 0 descriptor??
[  294.464328][ T5701] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  294.604357][ T5701] usb 6-1: device descriptor read/64, error -71
[  294.655807][ T9621] netlink: 'syz.3.1195': attribute type 2 has an invalid length.
[  294.717570][ T5701] usb usb6-port1: attempt power cycle
[  295.053965][ T5701] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  295.075056][ T5701] usb 6-1: device descriptor read/8, error -71
[  295.312825][ T5701] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  295.336361][ T5701] usb 6-1: device descriptor read/8, error -71
[  295.443005][ T5701] usb usb6-port1: unable to enumerate USB device
[  295.704204][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1199'.
[  295.764308][ T9636] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1199'.
[  295.811913][ T9636] bond0 (unregistering): Released all slaves
[  296.006086][ T1217] usbhid 1-1:0.0: can't add hid device: -71
[  296.006181][ T1217] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  296.015254][ T1217] usb 1-1: USB disconnect, device number 60
[  296.041574][ T9641] tipc: Started in network mode
[  296.041602][ T9641] tipc: Node identity 1001001, cluster identity 4711
[  296.041615][ T9641] tipc: Node number set to 16781313
[  296.065915][ T9641] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  296.177000][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1201'.
[  296.235847][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'.
[  297.202621][ T9673] syzkaller0: entered promiscuous mode
[  297.202644][ T9673] syzkaller0: entered allmulticast mode
[  297.312776][ T1217] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  297.467133][ T1217] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  297.476853][ T1217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.476880][ T1217] usb 6-1: Product: syz
[  297.476893][ T1217] usb 6-1: Manufacturer: syz
[  297.476906][ T1217] usb 6-1: SerialNumber: syz
[  297.549279][ T1217] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  297.591681][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.593097][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.604364][ T9682] sctp: [Deprecated]: syz.1.1214 (pid 9682) Use of int in max_burst socket option deprecated.
[  297.604364][ T9682] Use struct sctp_assoc_value instead
[  297.918336][   T10] usb 6-1: USB disconnect, device number 37
[  298.233884][ T5701] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  298.384313][ T5701] usb 4-1: Using ep0 maxpacket: 16
[  298.385133][ T5701] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  298.386297][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.393226][ T5701] usb 4-1: config 0 descriptor??
[  298.614901][ T1217] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  298.615033][ T1217] ath9k_htc: Failed to initialize the device
[  298.615697][   T10] usb 6-1: ath9k_htc: USB layer deinitialized
[  301.061285][ T5701] usbhid 4-1:0.0: can't add hid device: -71
[  301.061385][ T5701] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  301.064437][ T5701] usb 4-1: USB disconnect, device number 53
[  301.260463][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'.
[  301.466205][ T9743] ovs-dp0: left promiscuous mode
[  301.663144][ T9749] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  301.793581][ T5723] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  301.940662][   T31] kauditd_printk_skb: 49 callbacks suppressed
[  301.940682][   T31] audit: type=1800 audit(1791341141.235:2470): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1232" name="/" dev="fuse" ino=1 res=0 errno=0
[  301.968466][ T5723] usb 4-1: Using ep0 maxpacket: 32
[  301.976186][ T5723] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  301.977313][ T5723] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  301.977339][ T5723] usb 4-1: config 0 has no interface number 0
[  301.977376][ T5723] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  301.977398][ T5723] usb 4-1: config 0 interface 85 has no altsetting 0
[  301.980251][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.980277][ T5723] usb 4-1: Product: syz
[  301.980292][ T5723] usb 4-1: Manufacturer: syz
[  301.980306][ T5723] usb 4-1: SerialNumber: syz
[  302.016699][ T9749] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1232'.
[  302.058368][ T5723] usb 4-1: config 0 descriptor??
[  302.144736][ T9738] FAULT_INJECTION: forcing a failure.
[  302.144736][ T9738] name failslab, interval 1, probability 0, space 0, times 0
[  302.144761][ T9738] CPU: 1 UID: 0 PID: 9738 Comm: syz.5.1229 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  302.144782][ T9738] Tainted: [L]=SOFTLOCKUP
[  302.144790][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  302.144801][ T9738] Call Trace:
[  302.144809][ T9738]  <TASK>
[  302.144818][ T9738]  dump_stack_lvl+0xe8/0x150
[  302.144850][ T9738]  should_fail_ex+0x410/0x560
[  302.144872][ T9738]  should_failslab+0xa8/0x100
[  302.144888][ T9738]  __kmalloc_cache_node_noprof+0xaa/0x620
[  302.144901][ T9738]  ? __kasan_slab_free+0x5c/0x80
[  302.144914][ T9738]  ? __get_vm_area_node+0x155/0x2f0
[  302.144937][ T9738]  ? __get_vm_area_node+0x155/0x2f0
[  302.144971][ T9738]  __get_vm_area_node+0x155/0x2f0
[  302.145003][ T9738]  __vmalloc_node_range_noprof+0x343/0x1540
[  302.145019][ T9738]  ? do_replace+0x22f/0x470
[  302.145045][ T9738]  ? lock_acquire+0x115/0x350
[  302.145058][ T9738]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  302.145076][ T9738]  ? do_replace+0x22f/0x470
[  302.145096][ T9738]  __vmalloc_noprof+0xd2/0x120
[  302.145123][ T9738]  ? do_replace+0x22f/0x470
[  302.145151][ T9738]  do_replace+0x22f/0x470
[  302.145171][ T9738]  ? __pfx_do_replace+0x10/0x10
[  302.145190][ T9738]  ? bpf_lsm_capable+0x9/0x20
[  302.145201][ T9738]  ? security_capable+0x7e/0x2c0
[  302.145219][ T9738]  do_ebt_set_ctl+0x2fb/0x1020
[  302.145243][ T9738]  ? __lock_acquire+0x747/0x2de0
[  302.145264][ T9738]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  302.145290][ T9738]  ? __lock_acquire+0x747/0x2de0
[  302.145319][ T9738]  ? __mutex_trylock_common+0x15f/0x270
[  302.145336][ T9738]  ? __pfx___mutex_trylock_common+0x10/0x10
[  302.145351][ T9738]  ? rcu_is_watching+0x16/0xb0
[  302.145365][ T9738]  ? trace_contention_end+0x3d/0x140
[  302.145394][ T9738]  ? nf_setsockopt+0x221/0x290
[  302.145425][ T9738]  ? __mutex_unlock_slowpath+0x731/0x900
[  302.145458][ T9738]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  302.145477][ T9738]  ? __pfx___mutex_lock+0x10/0x10
[  302.145497][ T9738]  nf_setsockopt+0x26f/0x290
[  302.145514][ T9738]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  302.145532][ T9738]  smc_setsockopt+0x232/0xb00
[  302.145565][ T9738]  ? __pfx_smc_setsockopt+0x10/0x10
[  302.145592][ T9738]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  302.145615][ T9738]  ? __pfx_smc_setsockopt+0x10/0x10
[  302.145629][ T9738]  do_sock_setsockopt+0x17c/0x1b0
[  302.145647][ T9738]  __x64_sys_setsockopt+0x13d/0x1b0
[  302.145665][ T9738]  do_syscall_64+0x166/0x520
[  302.145685][ T9738]  ? trace_irq_disable+0x3b/0x140
[  302.145705][ T9738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.145724][ T9738]  ? clear_bhb_loop+0x70/0xc0
[  302.145746][ T9738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.145764][ T9738] RIP: 0033:0x7f2e1b79e199
[  302.145776][ T9738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.145785][ T9738] RSP: 002b:00007f2e1c63f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  302.145797][ T9738] RAX: ffffffffffffffda RBX: 00007f2e1ba25fa0 RCX: 00007f2e1b79e199
[  302.145805][ T9738] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  302.145812][ T9738] RBP: 00007f2e1c63f090 R08: 0000000000000108 R09: 0000000000000000
[  302.145819][ T9738] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  302.145828][ T9738] R13: 00007f2e1ba26038 R14: 00007f2e1ba25fa0 R15: 00007f2e1bb4fa48
[  302.145858][ T9738]  </TASK>
[  302.173083][ T9738] syz.5.1229: vmalloc error: size 128, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  302.173196][ T9738] CPU: 1 UID: 0 PID: 9738 Comm: syz.5.1229 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  302.173222][ T9738] Tainted: [L]=SOFTLOCKUP
[  302.173229][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  302.173240][ T9738] Call Trace:
[  302.173248][ T9738]  <TASK>
[  302.173256][ T9738]  dump_stack_lvl+0xe8/0x150
[  302.173289][ T9738]  warn_alloc+0x24d/0x270
[  302.173309][ T9738]  ? __kasan_kmalloc+0x22/0xb0
[  302.173336][ T9738]  ? __pfx_warn_alloc+0x10/0x10
[  302.173354][ T9738]  ? __get_vm_area_node+0x155/0x2f0
[  302.173387][ T9738]  ? __get_vm_area_node+0x2a9/0x2f0
[  302.173421][ T9738]  __vmalloc_node_range_noprof+0x36b/0x1540
[  302.173460][ T9738]  ? lock_acquire+0x115/0x350
[  302.173483][ T9738]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  302.173512][ T9738]  ? do_replace+0x22f/0x470
[  302.173532][ T9738]  __vmalloc_noprof+0xd2/0x120
[  302.173550][ T9738]  ? do_replace+0x22f/0x470
[  302.173574][ T9738]  do_replace+0x22f/0x470
[  302.173599][ T9738]  ? __pfx_do_replace+0x10/0x10
[  302.173633][ T9738]  ? bpf_lsm_capable+0x9/0x20
[  302.173652][ T9738]  ? security_capable+0x7e/0x2c0
[  302.173682][ T9738]  do_ebt_set_ctl+0x2fb/0x1020
[  302.173707][ T9738]  ? __lock_acquire+0x747/0x2de0
[  302.173727][ T9738]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  302.173756][ T9738]  ? __lock_acquire+0x747/0x2de0
[  302.173790][ T9738]  ? __mutex_trylock_common+0x15f/0x270
[  302.173817][ T9738]  ? __pfx___mutex_trylock_common+0x10/0x10
[  302.173843][ T9738]  ? rcu_is_watching+0x16/0xb0
[  302.173866][ T9738]  ? trace_contention_end+0x3d/0x140
[  302.173898][ T9738]  ? nf_setsockopt+0x221/0x290
[  302.173929][ T9738]  ? __mutex_unlock_slowpath+0x731/0x900
[  302.173961][ T9738]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  302.173988][ T9738]  ? __pfx___mutex_lock+0x10/0x10
[  302.174024][ T9738]  nf_setsockopt+0x26f/0x290
[  302.174052][ T9738]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  302.174076][ T9738]  smc_setsockopt+0x232/0xb00
[  302.174111][ T9738]  ? __pfx_smc_setsockopt+0x10/0x10
[  302.174138][ T9738]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  302.174162][ T9738]  ? __pfx_smc_setsockopt+0x10/0x10
[  302.174185][ T9738]  do_sock_setsockopt+0x17c/0x1b0
[  302.174215][ T9738]  __x64_sys_setsockopt+0x13d/0x1b0
[  302.174245][ T9738]  do_syscall_64+0x166/0x520
[  302.174270][ T9738]  ? trace_irq_disable+0x3b/0x140
[  302.174288][ T9738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.174307][ T9738]  ? clear_bhb_loop+0x70/0xc0
[  302.174329][ T9738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.174347][ T9738] RIP: 0033:0x7f2e1b79e199
[  302.174366][ T9738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.174381][ T9738] RSP: 002b:00007f2e1c63f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  302.174399][ T9738] RAX: ffffffffffffffda RBX: 00007f2e1ba25fa0 RCX: 00007f2e1b79e199
[  302.174413][ T9738] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  302.174424][ T9738] RBP: 00007f2e1c63f090 R08: 0000000000000108 R09: 0000000000000000
[  302.174436][ T9738] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  302.174448][ T9738] R13: 00007f2e1ba26038 R14: 00007f2e1ba25fa0 R15: 00007f2e1bb4fa48
[  302.174477][ T9738]  </TASK>
[  302.180950][ T9738] Mem-Info:
[  302.180966][ T9738] active_anon:24691 inactive_anon:10230 isolated_anon:0
[  302.180966][ T9738]  active_file:3383 inactive_file:65280 isolated_file:0
[  302.180966][ T9738]  unevictable:0 dirty:528 writeback:0
[  302.180966][ T9738]  slab_reclaimable:8784 slab_unreclaimable:104053
[  302.180966][ T9738]  mapped:39336 shmem:22905 pagetables:1548
[  302.180966][ T9738]  sec_pagetables:3 bounce:0
[  302.180966][ T9738]  kernel_misc_reclaimable:0
[  302.180966][ T9738]  free:1232483 free_pcp:26153 free_cma:0
[  302.181016][ T9738] Node 0 active_anon:98764kB inactive_anon:40920kB active_file:13532kB inactive_file:260908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157344kB dirty:2108kB writeback:0kB shmem:91620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:13852kB pagetables:6068kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  302.188573][ T9738] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  302.188631][ T9738] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  302.188685][ T9738] lowmem_reserve[]: 0 2487 2487 2487 2487
[  302.188716][ T9738] Node 0 DMA32 free:1005148kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:98764kB inactive_anon:40920kB active_file:13532kB inactive_file:260908kB unevictable:0kB writepending:2108kB zspages:2860kB present:3129332kB managed:2546824kB mlocked:0kB bounce:0kB free_pcp:71484kB local_pcp:12908kB free_cma:0kB
[  302.188771][ T9738] lowmem_reserve[]: 0 0 0 0 0
[  302.188801][ T9738] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  302.188850][ T9738] lowmem_reserve[]: 0 0 0 0 0
[  302.188880][ T9738] Node 1 Normal free:3909424kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:33508kB local_pcp:96kB free_cma:0kB
[  302.188931][ T9738] lowmem_reserve[]: 0 0 0 0 0
[  302.188961][ T9738] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  302.189105][ T9738] Node 0 DMA32: 222*4kB (UME) 1732*8kB (UM) 387*16kB (UM) 1129*32kB (UME) 1088*64kB (UME) 528*128kB (UME) 221*256kB (UME) 83*512kB (UME) 19*1024kB (UME) 12*2048kB (UM) 163*4096kB (UM) = 1005032kB
[  302.189244][ T9738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  302.189331][ T9738] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 3*16kB (UM) 5*32kB (UM) 4*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 952*4096kB (UM) = 3909476kB
[  302.189467][ T9738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  302.189482][ T9738] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  302.189497][ T9738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  302.189512][ T9738] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  302.189526][ T9738] 91565 total pagecache pages
[  302.189533][ T9738] 1 pages in swap cache
[  302.189539][ T9738] Free swap  = 118984kB
[  302.189546][ T9738] Total swap = 124996kB
[  302.189553][ T9738] 2097051 pages RAM
[  302.189560][ T9738] 0 pages HighMem/MovableOnly
[  302.189567][ T9738] 428729 pages reserved
[  302.189574][ T9738] 0 pages cma reserved
[  302.555135][ T5723] appletouch 4-1:0.85: Failed to request geyser raw mode
[  302.555364][ T5723] appletouch 4-1:0.85: probe with driver appletouch failed with error -5
[  303.077863][ T5723] usb 4-1: USB disconnect, device number 54
[  303.272358][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1238'.
[  303.650238][ T9781] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  303.724804][ T5723] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  303.773151][ T1217] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  303.898021][ T5723] usb 1-1: Using ep0 maxpacket: 16
[  303.898693][ T5723] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  303.904891][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.927341][ T5723] usb 1-1: config 0 descriptor??
[  303.944200][ T1217] usb 2-1: unable to get BOS descriptor or descriptor too short
[  303.944248][ T1217] usb 2-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 4.40
[  303.945177][ T1217] usb 2-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config
[  303.945232][ T1217] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 73, changing to 10
[  304.029691][ T1217] usb 2-1: string descriptor 0 read error: -22
[  304.029830][ T1217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.082388][ T1217] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[  304.082438][ T1217] cdc_ncm 2-1:1.0: bind() failure
[  304.109421][ T9790] FAULT_INJECTION: forcing a failure.
[  304.109421][ T9790] name failslab, interval 1, probability 0, space 0, times 0
[  304.109443][ T9790] CPU: 0 UID: 0 PID: 9790 Comm: syz.5.1245 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  304.109458][ T9790] Tainted: [L]=SOFTLOCKUP
[  304.109462][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  304.109471][ T9790] Call Trace:
[  304.109476][ T9790]  <TASK>
[  304.109481][ T9790]  dump_stack_lvl+0xe8/0x150
[  304.109501][ T9790]  should_fail_ex+0x410/0x560
[  304.109518][ T9790]  should_failslab+0xa8/0x100
[  304.109533][ T9790]  ? __seq_open_private+0x7a/0x1a0
[  304.109549][ T9790]  kmem_cache_alloc_noprof+0xa1/0x600
[  304.109560][ T9790]  ? __kmalloc_noprof+0x38c/0x720
[  304.109571][ T9790]  ? __seq_open_private+0x29/0x1a0
[  304.109584][ T9790]  ? __seq_open_private+0x7a/0x1a0
[  304.109601][ T9790]  __seq_open_private+0x7a/0x1a0
[  304.109616][ T9790]  seq_open_net+0x13e/0x210
[  304.109632][ T9790]  proc_reg_open+0x244/0x530
[  304.109646][ T9790]  ? __pfx_proc_reg_open+0x10/0x10
[  304.109658][ T9790]  do_dentry_open+0x816/0x1380
[  304.109677][ T9790]  vfs_open+0x3b/0x340
[  304.109689][ T9790]  ? path_openat+0x1428/0x1d60
[  304.109702][ T9790]  path_openat+0x1443/0x1d60
[  304.109722][ T9790]  do_file_open+0x23e/0x4a0
[  304.109736][ T9790]  ? __pfx_do_file_open+0x10/0x10
[  304.109752][ T9790]  ? __pfx_proc_put_link+0x10/0x10
[  304.109765][ T9790]  ? __pfx_kfree_link+0x10/0x10
[  304.109776][ T9790]  ? _raw_spin_unlock+0x28/0x50
[  304.109794][ T9790]  ? alloc_fd+0x651/0x6c0
[  304.109814][ T9790]  do_sys_openat2+0x115/0x200
[  304.109829][ T9790]  ? __pfx_do_sys_openat2+0x10/0x10
[  304.109844][ T9790]  ? ksys_write+0x242/0x270
[  304.109855][ T9790]  ? __pfx_ksys_write+0x10/0x10
[  304.109867][ T9790]  __x64_sys_open+0x11e/0x150
[  304.109883][ T9790]  do_syscall_64+0x166/0x520
[  304.109898][ T9790]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.109909][ T9790]  ? clear_bhb_loop+0x70/0xc0
[  304.109921][ T9790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.109931][ T9790] RIP: 0033:0x7f2e1b79e199
[  304.109942][ T9790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.109951][ T9790] RSP: 002b:00007f2e1c63f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  304.109963][ T9790] RAX: ffffffffffffffda RBX: 00007f2e1ba25fa0 RCX: 00007f2e1b79e199
[  304.109970][ T9790] RDX: 000000000000012e RSI: 0000000000008080 RDI: 00002000000001c0
[  304.109977][ T9790] RBP: 00007f2e1c63f090 R08: 0000000000000000 R09: 0000000000000000
[  304.109984][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  304.109990][ T9790] R13: 00007f2e1ba26038 R14: 00007f2e1ba25fa0 R15: 00007f2e1bb4fa48
[  304.110005][ T9790]  </TASK>
[  304.306569][ T1217] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  304.306615][ T1217] cdc_ncm 2-1:1.1: bind() failure
[  304.444324][ T1217] usb 2-1: USB disconnect, device number 52
[  304.972241][ T1217] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  305.124247][ T1217] usb 6-1: Using ep0 maxpacket: 32
[  305.124972][ T1217] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  305.125974][ T1217] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  305.125997][ T1217] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  305.126017][ T1217] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  305.126060][ T1217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  305.126079][ T1217] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  305.126101][ T1217] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  305.126140][ T1217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.131427][ T1217] usb 6-1: config 0 descriptor??
[  305.449236][ T9810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1251'.
[  305.476958][ T1217] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  305.500816][ T1217] usb 6-1: USB disconnect, device number 38
[  305.518021][ T1217] usblp0: removed
[  305.843273][    T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  306.002476][ T1217] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  306.005196][    T9] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  306.009268][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  306.009316][    T9] usb 4-1: can't read configurations, error -61
[  306.119084][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.120267][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.138721][    T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  306.172599][ T1217] usb 6-1: Using ep0 maxpacket: 32
[  306.173909][ T1217] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  306.174911][ T1217] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  306.174935][ T1217] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  306.174956][ T1217] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  306.175000][ T1217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  306.175021][ T1217] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  306.175044][ T1217] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  306.175082][ T1217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.177744][ T1217] usb 6-1: config 0 descriptor??
[  306.301917][ T9821] input: syz1 as /devices/virtual/input/input32
[  306.316094][    T9] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  306.332861][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  306.332901][    T9] usb 4-1: can't read configurations, error -61
[  306.333205][    T9] usb usb4-port1: attempt power cycle
[  306.396384][ T1217] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  306.551499][ T5723] usbhid 1-1:0.0: can't add hid device: -71
[  306.551610][ T5723] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  306.568379][ T5723] usb 1-1: USB disconnect, device number 61
[  306.682305][    T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  306.704419][    T9] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  306.705799][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  306.705837][    T9] usb 4-1: can't read configurations, error -61
[  306.711528][ T9827] binder: 9826:9827 ioctl c0306201 200000000380 returned -14
[  306.761070][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1249'.
[  306.832243][    T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  306.866507][    T9] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  306.867919][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  306.867956][    T9] usb 4-1: can't read configurations, error -61
[  306.869434][    T9] usb usb4-port1: unable to enumerate USB device
[  307.089961][ T9838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.091330][ T9838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.736509][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.736900][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.810507][    T9] usb 6-1: USB disconnect, device number 39
[  307.862165][ T1217] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  307.907005][    T9] usblp0: removed
[  308.013196][ T1217] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  308.014162][ T1217] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  308.014187][ T1217] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  308.014205][ T1217] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  308.014223][ T1217] usb 1-1: config 220 has no interface number 2
[  308.014272][ T1217] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  308.014296][ T1217] usb 1-1: config 220 interface 0 has no altsetting 0
[  308.014314][ T1217] usb 1-1: config 220 interface 76 has no altsetting 0
[  308.014330][ T1217] usb 1-1: config 220 interface 1 has no altsetting 0
[  308.016094][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.016120][ T1217] usb 1-1: Product: syz
[  308.016131][ T1217] usb 1-1: Manufacturer: syz
[  308.016143][ T1217] usb 1-1: SerialNumber: syz
[  308.198592][ T5618] Bluetooth: hci5: SCO packet too small
[  308.512591][    T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  308.685104][    T9] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01
[  308.686048][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  308.687925][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.687950][    T9] usb 6-1: Product: syz
[  308.687964][    T9] usb 6-1: Manufacturer: syz
[  308.687977][    T9] usb 6-1: SerialNumber: syz
[  308.740460][    T9] ums-onetouch 6-1:1.0: USB Mass Storage device detected
[  309.079210][ T9856] nvme_fabrics: missing parameter 'transport=%s'
[  309.079242][ T9856] nvme_fabrics: missing parameter 'nqn=%s'
[  309.080861][ T1217] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  309.080893][ T1217] uvcvideo 1-1:220.0: No valid video chain found.
[  309.080945][ T1217] usb 1-1: selecting invalid altsetting 0
[  309.081128][    T9] usb 6-1: USB disconnect, device number 40
[  309.196502][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1272'.
[  309.218021][ T1217] usb 1-1: selecting invalid altsetting 0
[  309.218049][ T1217] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  309.229188][ T1217] usb 1-1: USB disconnect, device number 62
[  309.379704][ T9882] xt_MASQUERADE: bad rangesize 177
[  309.584155][   T32] INFO: task kworker/0:4:5667 blocked for more than 143 seconds.
[  309.584183][   T32]       Tainted: G             L      syzkaller #0
[  309.584194][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  309.584203][   T32] task:kworker/0:4     state:D stack:20320 pid:5667  tgid:5667  ppid:2      task_flags:0x4208060 flags:0x00080000
[  309.584254][   T32] Workqueue: usb_hub_wq hub_event
[  309.584283][   T32] Call Trace:
[  309.584291][   T32]  <TASK>
[  309.584303][   T32]  __schedule+0x17db/0x58f0
[  309.584357][   T32]  ? __pfx___schedule+0x10/0x10
[  309.584379][   T32]  ? lock_acquire+0x115/0x350
[  309.584415][   T32]  ? schedule+0x90/0x2b0
[  309.584442][   T32]  schedule+0x164/0x2b0
[  309.584469][   T32]  schedule_timeout+0xc0/0x2c0
[  309.584491][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[  309.584515][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  309.584537][   T32]  ? wait_for_completion+0x272/0x5e0
[  309.584562][   T32]  ? preemp
** replaying previous printk message **
[  309.584562][   T32]  ? preempt_schedule_common+0x7f/0xd0
[  309.584587][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  309.584612][   T32]  ? wait_for_completion+0x272/0x5e0
[  309.584638][   T32]  wait_for_completion+0x2ca/0x5e0
[  309.584676][   T32]  ? __pfx_wait_for_completion+0x10/0x10
[  309.584707][   T32]  ? kobject_put+0x50f/0x550
[  309.584733][   T32]  i2c_del_adapter+0x292/0x440
[  309.584760][   T32]  ? __pfx_i2c_del_adapter+0x10/0x10
[  309.584782][   T32]  ? dvb_usbv2_exit+0x94d/0xb80
[  309.584818][   T32]  dvb_usbv2_probe+0x4bb/0x3950
[  309.584866][   T32]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[  309.584891][   T32]  ? __pm_runtime_set_status+0x994/0xc80
[  309.584925][   T32]  usb_probe_interface+0x788/0xe50
[  309.584963][   T32]  ? __pfx_usb_probe_interface+0x10/0x10
[  309.584990][   T32]  ? sysfs_do_create_link_sd+0xe0/0x110
[  309.585010][   T32]  ? driver_sysfs_add+0x1fe/0x210
[  309.585033][   T32]  ? __pfx_usb_probe_interface+0x10/0x10
[  309.585058][   T32]  really_probe+0x254/0xae0
[  309.585088][   T32]  __driver_probe_device+0x1e8/0x360
[  309.585116][   T32]  driver_probe_device+0x4f/0x240
[  309.585144][   T32]  __device_attach_driver+0x270/0x410
[  309.585172][   T32]  bus_for_each_drv+0x258/0x2f0
[  309.585193][   T32]  ? __pfx___device_attach_driver+0x10/0x10
[  309.585219][   T32]  ? __pfx_bus_for_each_drv+0x10/0x10
[  309.585241][   T32]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  309.585268][   T32]  __device_attach+0x2c4/0x450
[  309.585294][   T32]  ? __pfx___device_attach+0x10/0x10
[  309.585316][   T32]  ? do_raw_spin_unlock+0xf5/0x200
[  309.585345][   T32]  ? _raw_spin_unlock+0x28/0x50
[  309.585371][   T32]  device_initial_probe+0xa1/0xd0
[  309.585398][   T32]  bus_probe_device+0x12a/0x220
[  309.585421][   T32]  device_add+0x7d7/0xb80
[  309.585447][   T32]  usb_set_configuration+0x1bb5/0x2260
[  309.589167][   T32]  usb_generic_driver_probe+0x8d/0x150
[  309.589212][   T32]  usb_probe_device+0x1c3/0x3b0
[  309.589243][   T32]  ? __pfx_usb_probe_device+0x10/0x10
[  309.589268][   T32]  really_probe+0x254/0xae0
[  309.589298][   T32]  __driver_probe_device+0x1e8/0x360
[  309.589326][   T32]  driver_probe_device+0x4f/0x240
[  309.589352][   T32]  __device_attach_driver+0x270/0x410
[  309.589378][   T32]  bus_for_each_drv+0x258/0x2f0
[  309.589398][   T32]  ? __pfx___device_attach_driver+0x10/0x10
[  309.589425][   T32]  ? __pfx_bus_for_each_drv+0x10/0x10
[  309.589448][   T32]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  309.589479][   T32]  __device_attach+0x2c4/0x450
[  309.589506][   T32]  ? __pfx___device_attach+0x10/0x10
[  309.589530][   T32]  ? do_raw_spin_unlock+0xf5/0x200
[  309.589561][   T32]  ? _raw_spin_unlock+0x28/0x50
[  309.589588][   T32]  device_initial_probe+0xa1/0xd0
[  309.589615][   T32]  bus_probe_device+0x12a/0x220
[  309.589639][   T32]  device_add+0x7d7/0xb80
[  309.589664][   T32]  usb_new_device+0x9aa/0x1690
[  309.589695][   T32]  ? __pfx_usb_new_device+0x10/0x10
[  309.589722][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  309.589749][   T32]  hub_event+0x28e8/0x4d30
[  309.589829][   T32]  ? __pfx_hub_event+0x10/0x10
[  309.589861][   T32]  ? rcu_is_watching+0x16/0xb0
[  309.589887][   T32]  ? process_scheduled_works+0x97a/0x1630
[  309.589913][   T32]  process_scheduled_works+0xc3d/0x1630
[  309.589968][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  309.589996][   T32]  ? assign_work+0x3cf/0x5d0
[  309.590025][   T32]  worker_thread+0xa47/0xfb0
[  309.590063][   T32]  ? __kthread_parkme+0x71/0x1f0
[  309.590098][   T32]  kthread+0x38b/0x480
[  309.590118][   T32]  ? __pfx_worker_thread+0x10/0x10
[  309.590140][   T32]  ? __pfx_kthread+0x10/0x10
[  309.590160][   T32]  ret_from_fork+0x514/0xb70
[  309.590182][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  309.590201][   T32]  ? __switch_to+0xc89/0x1420
[  309.590229][   T32]  ? __pfx_kthread+0x10/0x10
[  309.590249][   T32]  ret_from_fork_asm+0x1a/0x30
[  309.590293][   T32]  </TASK>
[  309.590365][   T32] 
[  309.590365][   T32] Showing all locks held in the system:
[  309.590375][   T32] locks held by kworker/0:0/9: 2, last CPU#0:
[  309.590389][   T32]  #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  309.590442][   T32]  #1: ffffc900000e7c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  309.590510][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  309.590524][   T32]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  309.590593][   T32] locks held by getty/5368: 2, on CPU#0:
[  309.590606][   T32]  #0: ffff888035cce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  309.682266][   T32]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  309.682320][   T32] locks held by udevd/5622: 4, on CPU#0:
[  309.682333][   T32]  #0: ffff8880293d2758 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[  309.682381][   T32]  #1: ffff888052a3e880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[  309.682457][   T32]  #2: ffff88804c4333c8 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  309.682510][   T32]  #3: ffff888034a011d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  309.682559][   T32] locks held by syz-executor/5627: 4, last CPU#0:
[  309.682573][   T32]  #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480
[  309.682641][   T32]  #1: ffff88802ebe8340 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  309.682684][   T32]  #2: ffff88801222e540 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  309.682729][   T32]  #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  309.682778][   T32] locks held by kworker/0:4/5667: 5, on CPU#0:
[  309.682791][   T32]  #0: ffff8880222f5940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  309.682839][   T32]  #1: ffffc900046d7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  309.682886][   T32]  #2: ffff888029e931d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  309.682933][   T32]  #3: ffff888034a011d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  309.682979][   T32]  #4: ffff888034a071a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  309.683032][   T32] locks held by kworker/u8:21/6776: 2, on CPU#0:
[  309.683045][   T32]  #0: ffff88801eb3a940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  309.683092][   T32]  #1: ffffc9000dda7c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  309.683145][   T32] locks held by syz.0.1264/9859: 2, last CPU#1:
[  309.683158][   T32]  #0: ffff88807e925900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  309.683198][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  309.683253][   T32] locks held by syz.1.1271/9880: 2, last CPU#0:
[  309.683266][   T32]  #0: ffff88807f796460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3764/0x4520
[  309.683318][   T32]  #1: ffff88807719d0f0 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120
[  309.683375][   T32] 
[  309.683380][   T32] =============================================
[  309.683380][   T32] 
[  309.683390][   T32] NMI backtrace for cpu 1
[  309.683405][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  309.683428][   T32] Tainted: [L]=SOFTLOCKUP
[  309.683435][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  309.683446][   T32] Call Trace:
[  309.683456][   T32]  <TASK>
[  309.683464][   T32]  dump_stack_lvl+0xe8/0x150
[  309.683491][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  309.683514][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  309.683547][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  309.683571][   T32]  sys_info+0x135/0x170
[  309.683590][   T32]  watchdog+0xfd7/0x1030
[  309.683617][   T32]  ? watchdog+0x1c7/0x1030
[  309.683640][   T32]  kthread+0x38b/0x480
[  309.683659][   T32]  ? __pfx_watchdog+0x10/0x10
[  309.683676][   T32]  ? __pfx_kthread+0x10/0x10
[  309.683695][   T32]  ret_from_fork+0x514/0xb70
[  309.683716][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  309.683735][   T32]  ? __switch_to+0xc89/0x1420
[  309.683761][   T32]  ? __pfx_kthread+0x10/0x10
[  309.683780][   T32]  ret_from_fork_asm+0x1a/0x30
[  309.683820][   T32]  </TASK>
[  309.683842][   T32] Sending NMI from CPU 1 to CPUs 0:
[  309.683884][    C0] NMI backtrace for cpu 0
[  309.683900][    C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  309.683926][    C0] Tainted: [L]=SOFTLOCKUP
[  309.683933][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  309.683944][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  309.683972][    C0] Code: e8 7e 5a 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 6f c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a a6 76 06 cc 44 89 f9 80 e1 07
[  309.683989][    C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002
[  309.684005][    C0] RAX: 1ffffffff35a8a00 RBX: 00000000000003fd RCX: 0000000000000000
[  309.684019][    C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  309.684031][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  309.684044][    C0] R10: dffffc0000000000 R11: ffffffff8573b3d0 R12: dffffc0000000000
[  309.684058][    C0] R13: 0000000000000000 R14: ffffffff9ad45320 R15: 0000000000000000
[  309.684071][    C0] FS:  0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000
[  309.684087][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  309.684101][    C0] CR2: 00007f3487b556c8 CR3: 000000007f39c000 CR4: 00000000003526f0
[  309.684118][    C0] Call Trace:
[  309.684125][    C0]  <TASK>
[  309.684134][    C0]  wait_for_lsr+0x184/0x2f0
[  309.684158][    C0]  __serial8250_console_fifo_write+0xcd/0x3e0
[  309.684191][    C0]  serial8250_console_write+0xa7e/0x1200
[  309.684214][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  309.684245][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  309.684267][    C0]  ? __schedule+0x17f1/0x58f0
[  309.684299][    C0]  nbcon_emit_next_record+0xef5/0x1a90
[  309.684328][    C0]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  309.684353][    C0]  ? nbcon_context_try_acquire+0x819/0xbd0
[  309.684381][    C0]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  309.684407][    C0]  nbcon_kthread_func+0x679/0x880
[  309.684432][    C0]  ? nbcon_kthread_func+0x163/0x880
[  309.684451][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  309.684475][    C0]  ? __kthread_parkme+0x71/0x1f0
[  309.684502][    C0]  ? __kthread_parkme+0x199/0x1f0
[  309.684530][    C0]  kthread+0x38b/0x480
[  309.684548][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  309.684567][    C0]  ? __pfx_kthread+0x10/0x10
[  309.684585][    C0]  ret_from_fork+0x514/0xb70
[  309.684603][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  309.684620][    C0]  ? __switch_to+0xc89/0x1420
[  309.684647][    C0]  ? __pfx_kthread+0x10/0x10
[  309.684664][    C0]  ret_from_fork_asm+0x1a/0x30
[  309.684699][    C0]  </TASK>
[  309.690062][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  310.741070][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  310.751730][   T32] Tainted: [L]=SOFTLOCKUP
[  310.756036][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  310.766090][   T32] Call Trace:
[  310.769372][   T32]  <TASK>
[  310.772311][   T32]  vpanic+0x56d/0xa60
[  310.776294][   T32]  ? __pfx___schedule+0x10/0x10
[  310.781132][   T32]  ? __pfx_vpanic+0x10/0x10
[  310.785627][   T32]  panic+0xc5/0xd0
[  310.789370][   T32]  ? __pfx_panic+0x10/0x10
[  310.793779][   T32]  ? preempt_schedule_common+0x7f/0xd0
[  310.799243][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  310.804609][   T32]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  310.810779][   T32]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  310.816935][   T32]  watchdog+0x1030/0x1030
[  310.821256][   T32]  ? watchdog+0x1c7/0x1030
[  310.825664][   T32]  kthread+0x38b/0x480
[  310.829722][   T32]  ? __pfx_watchdog+0x10/0x10
[  310.834379][   T32]  ? __pfx_kthread+0x10/0x10
[  310.838953][   T32]  ret_from_fork+0x514/0xb70
[  310.843530][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  310.848628][   T32]  ? __switch_to+0xc89/0x1420
[  310.853295][   T32]  ? __pfx_kthread+0x10/0x10
[  310.857871][   T32]  ret_from_fork_asm+0x1a/0x30
[  310.862643][   T32]  </TASK>
[  310.865955][   T32] Kernel Offset: disabled
[  310.870288][   T32] Rebooting in 86400 seconds..