last executing test programs:

4m56.36826206s ago: executing program 2 (id=5865):
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xa000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

4m54.550707677s ago: executing program 2 (id=5872):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18)
syz_emit_ethernet(0xbf, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607679042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}, "97"}}}}}, 0x0)

4m54.439716231s ago: executing program 2 (id=5873):
recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002880)=""/247, 0xf7}], 0x1}, 0x80}], 0x1, 0x162, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000001c0)=0x205, 0x3)
r1 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x0, &(0x7f0000000080))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'gre0\x00', &(0x7f0000000840)={'syztnl2\x00', <r2=>0x0, 0x700, 0x23b8f07fe2524b96, 0x3a, 0x3, {{0x17, 0x4, 0x0, 0x4, 0x5c, 0x64, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x18, 0xcc, 0x0, 0x1, [0x4, 0x7fff, 0xc7, 0x100, 0x80000000]}, @rr={0x7, 0x27, 0x4, [@remote, @private=0xa010100, @rand_addr=0x64010102, @remote, @empty, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @generic={0x86, 0x5, "dae75e"}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000900)={'team0\x00', <r3=>0x0})
sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x3}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="23493b84d0825be9478c35944023e5c404c365d78202e9718ae345a914ec8edc6d3f6121e7345862774649ace16001482bf271d784c3b608cf275e7f8b798e311b7aa6a4ecf6cb5fdbabf76c7ef6f5d7e330e215508713367bfa9e1824d26fa15bdfb611e0c2c8a27d27613a5eb93e5b532ce6fd67a94ceb360e44e8aeca638caa40a5783dd8479471fcc0d476535b2f03077e6f", 0x94}], 0x1, &(0x7f0000000240)=[@rthdr={{0xb8, 0x29, 0x39, {0x2f, 0x14, 0x2, 0xe, 0x0, [@loopback, @local, @mcast2, @remote, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @mcast2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x88, 0x10, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, @loopback, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x67, 0x4, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @flowinfo={{0x14}}], 0x1b8}}, {{&(0x7f0000000400)={0xa, 0x4e22, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000440)="9c77f3085fcf084d1e6f", 0xa}, {&(0x7f0000000480)="39624e37c403e2320598f0c3df767fc120ba89f81dc8547f965ecb", 0x1b}, {&(0x7f00000004c0)="40e626afc33b50c5d250", 0xa}, {&(0x7f0000000500)="b39cb77b3ea85bfcf30f2d32737925f2556f5214da02d3935f70a6eee7786e229fad8b723a9fa198359357804ee89497c0afe3f718e56e5c78ecd24117719d", 0x3f}, {&(0x7f0000000540)="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", 0xff}, {&(0x7f0000000640)="1f791fcc15b747256efd6e04f7f0eb4c1ed884522cda051ba3b2e5846a6978419df5928a2e26768ac3c52540e9b4664e6a29b4296c6a5618e4db29fda2c28723ea6fdbef47b5285d5318e16eb268c19d63b30940442ca4687ee1baffc823c8496b", 0x61}, {&(0x7f00000006c0)="f2aa6b078ce82dc6c6f4635b202da283a1842e3bc71f2cfbb10603b80892dbe638f4f8ad16ee3d06690e442eb92f8d02664a55977da763aea6da9f3ad118bf6d72ce853d6f8d22a0f82360a0f8742c3ed18caf4f1084e0526cb7941d492f4745d204783149e5ef76bfdf4a530b534896aace3418a865f5fe9d344b16afe6a8c45f698aa018b4673c80c4f9ea67211fa6168d367a8fb8b9519f2032a5272762b0e433fab349bed01e0764ca3887cf3d5a1dda8998fd623d22a1ae6b2af479d57861590c7894c8a53bf3bc7d52447089f1fad4155d0232e8c4ed7526a1ed0cc1eabdc3", 0xe2}], 0x7, &(0x7f0000000940)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r2}}}, @hoplimit={{0x14, 0x29, 0x34, 0x10000}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x6, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @pad1, @generic={0x2, 0x5a, "acdc408c46350ec71d604bf9a2a1b993b2d98e5cc3ea3d24b3c21345425e342790f29177d07d937aa4d32c8ff27649a8faedcd73fee6da182725e10b2340643e3ef65c765914972ebd59405abfd13263bb48dd455bd962f2990a"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x25}}, @generic={0x2, 0x3, "81959b"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r3}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x148}}, {{&(0x7f0000000ac0)={0xa, 0x4e24, 0x8, @empty, 0x8}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000000b00)="d940cf91072e49b9cb5d74aee5667c09a7016d210b2ee82a4266398f90abbc27a600f7240a07f90870df80", 0x2b}, {&(0x7f0000000b40)="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", 0x1000}], 0x2, &(0x7f0000001b80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4b}}, @dstopts={{0x100, 0x29, 0x37, {0xc, 0x1c, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6000}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x50, 0xc9, "d50c5139bd76c716490a9cf4442cf5ea7e9dcb4ed8ff4b0f0fcc5e7f06b7fea6b9983e484e24b1810dd5b2a0104784d9c96faf23f2c34a7ff021e1a581b376e316440d57cf10837b07a517d2fdb9b85ee9f4b03091b2597a18f4c9da13aefe744f551d2e45d2798ff0fca3cf9aeda3a364b5021928dce985797eff73845ccf50b39d2c0759c5ad5480fe8093ca8192bd5b85ad7492297f12eb95418bd5cd6fa469b3dc1c643e0539b6616c27c5da1e30286e743ce231640deae213333970eba15feec234247337cc89"}, @enc_lim={0x4, 0x1, 0x4}]}}}], 0x118}}], 0x3, 0xc004)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8, 0x2, 0x2, 0x2, 0x8, 0x4}, &(0x7f0000000040)=0x20)

4m54.196421953s ago: executing program 2 (id=5875):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="e1cfe95cb48a589ace906ebde8b0df6f70ae03d9c7910d58566470f5f0b69884549632a69c97309083cacabd428617e98795db73b8508a1efc95241b71578df407aad48aad32f9c11d0237d5df1900711391cc17581bc7e70290c2859f9b167014aa0fdc8d884030", @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="080005000b000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000a08000/0x8000)=nil, 0x8000, 0x3000, 0x3, &(0x7f0000bde000/0x3000)=nil)
setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r7, &(0x7f0000000100)='./file0\x00', 0x6e)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a20303030303030050030303030303030303430393300"], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

4m53.176677502s ago: executing program 2 (id=5878):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x8, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0x9, 0x4, 0xfffffffd}}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x3c}}, 0x44000)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"])
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
write$tun(r3, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x52, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[@routing={0x2c, 0x2, 0x0, 0xfa, 0x0, [@empty]}, @dstopts={0x2}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x7a)

4m52.332606754s ago: executing program 2 (id=5879):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94)

4m51.37237915s ago: executing program 32 (id=5879):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94)

14.319970057s ago: executing program 5 (id=7047):
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x3, &(0x7f0000000600)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000380)='{\x00'], 0x0, 0x80000000}}, 0x30)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000e40)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000010c0)="8fa8176522e4377489899d8869ccaebfaa64b3dde27ef32df48912abc0824a0af22f39f32ed4859870009db15a427c6d0547d54acc3593e4d913acf568e192bd591c8f1364775d9068886566a6a7f301d0759ab06729b54f8ff8208d25acdf638c16c2b8f9d88eafb16b5297675cb25e36b271c172", 0x75}, {0x0, 0xffffffa3}, {&(0x7f00000003c0)="22df674570035577bd8854d06ba95b0e8c95bff06d1b30b0028b6321af68f41b85546e7b48c71c97cec7c061d429481252dd51fdba04040b95de6ba099f96e4ad6ed87de48b0d2ec7c29f36539ec50205019a0fc5a2780b81251ba853be70cc24cd17bcb9273018737ad06dc2a899e5a2914d252a3951dd3d5c5655bb9eda97d7840d4f96273ddc51459b5bcfd60d1a7dc8cabcf997bab7e2f996a547ee94c78c0187f8c"}, {&(0x7f0000000480)="3093110c32bde2fdede03457b1c1b00f9e24b9d3e5a7dd3f2ac80c1f8d6e2edff03e023360b5bfe76012e911ff377ed9d239dd774188300189cb2e72b916c01bb02656d4f90c7124c4e078ec2776fa385adcdd4f5c9f527eb6f4d6c997a624730a5a76978e8344cdb94ffd93aaf480b37ea176d54480f3ae6f0b7fb843577b3c79a3c074e90fb3020b4a8b32770438041ce2d7caa8d5a281c349dbd7efe042036fd590de521655b7d0109d04a34d1a6b08985906fa2c2d88174f1676fa14e1fb1cd641edc8fce62b"}, {&(0x7f0000000640)="cfaa1b2cc348f6e77e8cc4d09ef6e699e35b8c20d3420be7b5912537ebd0dfbc42c05aaa95519751d1e53b382244f0753f6da4517c9cdbd59c82bef5a4f59e40fa214e373c0fbe0809df6904d40957cc63a502a7abd165e368106c9613e025ea9d15f54fe0f7b2b060f3313cce8d2f4540f1dce1a2fec216e225a66476b172fb10457892631aeb3eb483b901a60ab12f09f0af59189c19436e88e1c1b0"}], 0x2}}], 0x3fffffffffffe83, 0x4000045)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
socket(0xa, 0x3, 0x3e)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)=0x800)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000080201, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0xfe8e, 0x12)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210)

12.8269766s ago: executing program 5 (id=7052):
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x9802)
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x8}]}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x3a, &(0x7f0000000280)=""/58, 0x41000, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000010c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0)

12.798734908s ago: executing program 4 (id=7053):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x3)
openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/139, 0x8b}], 0x1b)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000140)=0x2, 0x0, 0x4)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x8000, {0x34}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe}}, './file0\x00'})

12.475909645s ago: executing program 4 (id=7054):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0xbf, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}, "97"}}}}}, 0x0)

12.475529882s ago: executing program 4 (id=7055):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x201, 0xa7, 0xb1, 0x91, 0x10, 0x7ca, 0xa867, 0x244f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x90, 0x1, "", [{{0x9, 0x4, 0xd0, 0xff, 0x0, 0x38, 0x1a, 0x8a, 0xba}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xfc, {"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", 0x1000}}, 0x1006)
syz_emit_ethernet(0x76, &(0x7f0000000500)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x6, 0x6, "c1665d", 0xfffb, 0x0, 0x1, @loopback, @mcast2, [@routing={0x33, 0x0, 0x0, 0x46}, @fragment={0x33, 0x0, 0xcf, 0x1, 0x0, 0x1e, 0x64}]}}}}}}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001140)={'syzkaller1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0xb881}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844)
sendto$packet(r7, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x14}], 0x1}, 0x4)
syz_usb_disconnect(r0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x1, 0x11, {0x11, 0x31, "6042e203ac08c0e0b791585545d0e2"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}}, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x14, 0x4, "c2c71fb6"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x58}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xce}, &(0x7f0000000180)={0xc0, 0x5, 0x3, "d74039"}, &(0x7f00000001c0)={0x40, 0x5, 0x4, "27610661"}})

11.773991526s ago: executing program 1 (id=7059):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f00000005c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x3, @mcast2, 0x9}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000300)="5a288357fff7700606c5354365a073cfa3b7493bc63d8c8fda180b841d3195ba01725f1d3ca6bb0e107cf0abbddc8eeacd70e0f4900ba010eee4db1214560ea109169d91539b96f003a8509d38c7e9b501fef04c17d881dab2089af70963d2b13a61fa4bd44045e241dcec2ca04dab076dba891e001d51e1ece37f01bae7eff4b2609b1c333efa40491fec4250f29fd88b64c8ad7f090405c2e0d5f2522169c64d6d", 0xa2}, {&(0x7f0000000200)="8adfb462a5c5ce7e933723389db0fa8b9f41b4f6e2c3", 0x16}, {&(0x7f00000004c0)="125a18dc76e4df622f4835371fd0cc71e6f2e8bde1288c9dd42091a08014654f04e75d3aafedf9a35e0cf54e1264485b83dc74a176dcccab65b43c9f3af5f1852ebe02cebc02e9aae53f6c46985436d33c78cb224dd1204d2d336b33d77c895fe8dec3a622c6ab5947ecbf330c1165801eaec96fb74f48ca1d3c3ea10f123ac960fdc4e3deef392dc670bc72ba710c27ff33348e674444fe9d0cc0de0e7340a047a58674f86a6fb3d8768dc3434af195adfd4981d405b44692d5abeca8115002c1e7b845d3e62f1875dbc0a3479874da03c6df35f888", 0xd6}, {&(0x7f00000003c0)="81f28c93f2ee647ff0872f7c3a4ca9d4a22835e1394e58392fb95730071af186d4eb0c6cb44057f163e2e5d016ddd673afef85e095a02792465769bb3af5190e0e289e5bb99e77398b7a52ce74fb90b9", 0x50}, {&(0x7f0000000880)="a40ee9522bc09544875e43b4c98d41bbb5f3607cc8b71aa51466521f056e72033ee8d01735b590ea0b5e1ab759f184f4ef98f4f49f0b3d7fff415a06579c2412ac742c5c54b0ad87e4a716d2793a56b914a74f56215aec0c1425a0d6e1b89802d3ef2efa3061f776f416b43ef65baa6d6bb7e0a6ca5a5cb7e6663cb405a4d1f5217414b470ea5cd0b0bfa8fb43b38e9847617b864faf70a89f11ab6f55a3529c9866eddeed8e57983963f1cf2964c09bb65cee827c0cdd7cc64c24ff0054294229cbbad81a81ee777c9413cd8487aa", 0xcf}, {&(0x7f0000000a00)="9c200a7390b3a204485fd4c8b0d8380c01ec5e5e1e6b04d0342fb860936f879a7c901b44a6f285ee78f05a582d14e1abac3e4fc5f042004e7e00957c7041c2f7305319782eec799ee823682b3207893487979f0155cb9fa00693d3fb5036ebf6bee2714d9106cfeac149008f29a3c5bc0adae787c91fa78bde2e26e93ca42611c33144b2ea5c75dd4a75df6e88691e5d02d23395fb62e9e0d1068a1d57d3f7c4745cb9322fb478dec19a7d62a142c1a28b1d1e967da98906b46ae871d7a972aad4fc9233917e965b18efe802e79baaade29a35191e27f7e7dcc9ac944462afd22f4edcb27235887290b740", 0xeb}, {&(0x7f0000000680)="0cc283eeb6b09b44c10a4ac10bc03237b66a6c017da0f6e7e1eb47eb44114aee0d1e804a1e53f565b8574bda3580b459e9890fc2d417a4f15233e8a90b7803db07fb758056fb7a9e7beefec9714ce4c107cf102c2fd6f46c7c4df852a2beb1517a104f6982d2cf5ef394906ff753389fbbca8b79fb81e625e17d", 0x7a}, {&(0x7f0000000b00)="c38131cb8b1d5028c8b74d40c504cf58282e845d6333436561da9893a31b98bf92b8e1b31064eef2d9f672bbb9911403202a3e5d7ed9cb8a4d3b10c93bffd674fd2096", 0x43}, {&(0x7f0000000240)}, {&(0x7f0000000b80)="1d3b1392951b8c025791dbb5972a285c157cebe30d0b060c84841d9f0728ad3fba7526ad2e91293ebcfb43fa0303f42226334d98bebd8144961851ddcc60afd328664c3cb18613ea53", 0x49}], 0xa}}], 0x1, 0x2000c8c0)
syz_emit_ethernet(0x46, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000010380)="d800000018007b29e00212ba0d8105040a601800fe0f041c067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262fbb9ad8ffd5e1cace81ccd40dd601edef3d9393f975307ff0ff0e97031e9f05e9f16e9c95115568624f7ab5000000000000000000000000000000000000000000007a630a5092", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x2000c844)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@add_del={0x2, &(0x7f00000000c0)='hsr0\x00'})

10.836845878s ago: executing program 5 (id=7060):
syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
request_key(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='*\x00', 0xfffffffffffffffe)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0xfffffffeffffffff)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffc8a}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x3}, 0x8}, 0x94)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x300, 0x70bd2d, 0x25dfdbff, {0x10, 0x9, 0x0, 0x0, 0xffff, 0xfffffffa, 0x4, 0x9, 0x0, 0x4, 0x1}}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040110)

9.058349729s ago: executing program 1 (id=7063):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_trace_dev_match', 0x141580, 0xa6)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d00000006000000040000000180000001000000", @ANYRES32=r2, @ANYBLOB="0000000000464000000040df4daf0000000000000000c100723c58cc05ba", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000007b7429f0f0d4c6a0000000", @ANYRESHEX=r1, @ANYRES16=r0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0xffffffffffffffff, 0x4}, 0x38)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

8.899253237s ago: executing program 1 (id=7065):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
socket(0x2b, 0x80801, 0x1)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket(0x2000000000000021, 0x2, 0x2)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc00fc00080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

8.827534282s ago: executing program 3 (id=7067):
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8041, 0x0, 0x5441, 0x0, 0xfffffe0000000001, 0x9, 0xf7ffffff}, 0x0)
fsopen(&(0x7f0000000040)='cgroup\x00', 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202)
ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000003c0)={0x0, "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"})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r4, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000780)={0x30, r5, 0x0, 0x0, 0x0, 0x84, 0xa9, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
socket$alg(0x26, 0x5, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00')
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r10, 0xffffffffffffffff, 0x0)

7.180442133s ago: executing program 3 (id=7068):
syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x6a040000)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000140)={'ipvlan0\x00', {0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xa}}})
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0xc, 0xa, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0)
syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002)

3.907216935s ago: executing program 1 (id=7072):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000000000fff5000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

3.878005022s ago: executing program 4 (id=7073):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000000bf"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) (fail_nth: 54)

3.608704362s ago: executing program 5 (id=7074):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @remote}], 0x10)
pipe2(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede)
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x1000000000000000)
fcntl$setpipe(r2, 0x407, 0x100000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x83}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_DESC={0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWFLOWTABLE={0x88, 0x16, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWSET={0x174, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x33}, @NFTA_SET_DESC={0x150, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x90, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x82}, @NFTA_SET_DESC_CONCAT={0xa4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcafd}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x9c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}]}, @NFTA_CHAIN_USERDATA={0x13, 0xc, "ff2735a49c996b3c512e5a6521c3e2"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_USERDATA={0x29, 0xc, "c944521512574b7959ddc2a544c6ba451a7dd432735f2f2a85f05bd3b8e0a946838053b1fe"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2e8}, 0x1, 0x0, 0x0, 0x40400c8}, 0x4010)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0xf7e, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
connect$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x3}}, 0x10)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000b80)=@getsadinfo={0x1e0, 0x23, 0x400, 0x70bd26, 0x25dfdbff, 0x0, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @extra_flags={0x8, 0x18, 0x8}, @algo_aead={0xee, 0x12, {{'morus1280\x00'}, 0x510, 0xa0, "8e1205f9610ca38e6812693976be10e192bec79b73cd43759739db44b0c68e51cf1a68e6a9f0cdc5b11552d20c67a7a1d52da3784189b57117f28ae20a5a12b1859cf2c73e2652d789e298a2488f4dbdb2944d8afcee17bfb15914cb9d2d92525bee105d78e82bc286cd60a75464281527cc6277e00a51f19981997975bfb2623809b673ba2fd6f2376eae1b5e101e6ea359e85f247c2b3601aa66cb9e8cf9625718"}}, @lastused={0xc, 0xf, 0xfffffffffffffff9}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e20, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x3a}}}, @offload={0xc}, @address_filter={0x28, 0x1a, {@in=@loopback, @in6=@mcast1, 0x2, 0x81}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8001}, @tmpl={0x44, 0x5, [{{@in6=@empty, 0x4d5, 0xff}, 0x2, @in=@loopback, 0x3502, 0x2, 0x1, 0x4, 0x3d, 0x40, 0x3}]}, @lifetime_val={0x24, 0x9, {0x4800000000000, 0x2e, 0x4f, 0x8000000000000000}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0xc010}, 0x8000)

3.499128397s ago: executing program 4 (id=7075):
socket(0x10, 0x80002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000170100000300000001020000000000001800000000000000170100000400000000000100000000"], 0x70, 0x40040}], 0x1, 0x40800)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x9, 0x8001, 0x0, 0x9, 0x0, 0x9, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000200)=0xb)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@euid_lt}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x36, 0x34, 0x66, 0x30, 0x32, 0x37], 0x2d, [0x31, 0x30, 0x36, 0x62], 0x2d, [0x65, 0x30, 0x32, 0x32], 0x2d, [0x30, 0x34, 0x38, 0x31], 0x2d, [0x66, 0x33, 0x65, 0x63, 0x36, 0x65, 0x38, 0x38]}}}, {@euid_eq}, {@euid_lt}, {@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\xae85+d\"\xdcR\x02\xf3\x00T\xe9C=f\xf2xC+\xdd\x86\x8a\xf7\xef\xfd\x85\x82\xe6\x9ecv\x00\x01\x04v=\a\xd9E\x8f\xff\x8c,<\x1f\x06\xcal\x1eE){\x9b\xf1Y\xc9C\x04\xdf\x8f\t4RYjQ\x00\x05\x15\xff`\x88\x9c\xb2\x0f\x8a\xc1\xb3\x00c@+.J,\x8b'}}]}})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000020a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0xc4)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0))
syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd67b1593700303a0020010000000000000000000000080000fe8000000000000000000000000000aa01019078b2000900648b77d207e9840000000000001eff01fc010000000000000000000000000000bdface1f6f40d80000000000000000"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x4, 0x0, 0x3}, 0xc)

3.494353528s ago: executing program 0 (id=7076):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_trace_dev_match', 0x141580, 0xa6)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d00000006000000040000000180000001000000", @ANYRES32=r2, @ANYBLOB="0000000000464000000040df4daf0000000000000000c100723c58cc05ba", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000007b7429f0f0d4c6a0000000", @ANYRESHEX=r1, @ANYRES16=r0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0xffffffffffffffff, 0x4}, 0x38)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c)
recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

3.455577457s ago: executing program 1 (id=7077):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', <r1=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000001c0)='\x00', 0x1)
syz_open_procfs$namespace(0x0, 0x0)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
shutdown(r4, 0x0)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r5, 0x5609, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x47b, 0x2)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$mixer_OSS_GETVERSION(r6, 0x80086303, &(0x7f0000000180))
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1e)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x8, 0xd)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x276, 0x0, 0xe6}]})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000)

2.700957922s ago: executing program 5 (id=7078):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r3, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x7, 0x3}, 0x8)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
r4 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfct\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xa5\xfa\xb9\xc8\x85\x16\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7\x0e\xe7v\xb2{\xaa\xfc)\xcb\xd4D\xf6#%I\xad\xaap\xddX\x14e\x11\xd8\xb3\xe9\xf2@\x97\xfa\x16\xe9\xb4l\x0e9\xf4\x9e\xefT\xfd\x9d\x18\xba\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X\xc1\x9c\xd7\xed\xad*\xc6\xc9\xd6\xe6\xfe*t\x06\xeb]\vr-\x04{\x86\xcb\xbb4?\xa1\xb5S\xb8\x10pg\xbd\xce\x84\xe9\xfdZ\f\xeb\xd0c\x02\xdc\x90\t\x9fRAC8\xa8', 0x2)
fcntl$addseals(r4, 0x409, 0xe)
ftruncate(r4, 0xb)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x0, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x3, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0xd678, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x7, 0x0, 0x18e, 0x6, 0x6, 0x454f, 0x7, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x7, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x382, 0x4, 0xd, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0xfffffb82, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x21, 0x8008, 0x86, 0x13, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x201, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0xfffffffc, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x2, 0x6, 0x8004, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x0, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0x1, 0x8, 0x5, 0x5, 0xc8, 0x0, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0xdc15, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x400005, 0x803, 0xd3, 0x200, 0xb, 0xfff]}, 0x45c)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x1000, 0x4, 0xfffc, 0x9}, 'syz1\x00', 0x9})
ioctl$UI_DEV_CREATE(r5, 0x5501)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000040)="ddbf693a3d709aaa35a1cb86b08cc057fa263faf098e0000e03f2c", 0x1b}], 0x1)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d40)={@map, 0xffffffffffffffff, 0x15, 0x2000}, 0x20)
ioctl$sock_SIOCETHTOOL(r7, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}})

2.680049026s ago: executing program 0 (id=7079):
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x15f2})
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
clock_gettime(0x5, &(0x7f00000000c0))
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xff, 0xa001)
recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f00000002c0)}], 0x2, &(0x7f0000000340)=""/98, 0x62}, 0x9}, {{&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/99, 0x63}], 0x1, &(0x7f0000000500)=""/200, 0xc8}, 0x2}], 0x2, 0x2000, &(0x7f0000000680))
clock_gettime(0x6, &(0x7f00000006c0))
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000700)={0x3ad0, 0xa, 0x59, 0x7, 0x8})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={<r3=>0x0}, &(0x7f0000000780)=0xc)
fcntl$lock(r0, 0x26, &(0x7f00000007c0)={0x0, 0x0, 0x1, 0x9, r3})
ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000840)=@userptr={0x6, 0x9, 0x4, 0x100, 0x9, {0x0, 0x2710}, {0x0, 0x2, 0x2, 0x46, 0x4, 0x0, "ec527316"}, 0x2, 0x2, {&(0x7f0000000800)}, 0x6, 0x0, <r4=>r2})
listen(0xffffffffffffffff, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f00000008c0)={{r1}, 0x0, 0x14, @unused=[0x10, 0xd, 0x8001], @subvolid=0x101})
r5 = dup3(r1, r1, 0x80000)
socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000018c0)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x4, 0x7fff, 0x6, 0x480, 0x3, 0x40400010})
fanotify_mark(r5, 0x200, 0x30, r0, &(0x7f0000001940)='./file0\x00')
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001980)={0x1b, 0x0, 0x0, 0x2, 0x0, r5, 0x1, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x50)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000001a00)={0x0, 0x8, 0x1})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000001a40)={0xffffffffffffff15, <r7=>0x0})
ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, &(0x7f0000001a80)={0x0, r7})
faccessat(r0, &(0x7f0000001ac0)='./file0\x00', 0x102)
ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000001b00)={0xb375, 0x100000001, 0xff, 0x7, 0x6})
pipe(&(0x7f0000001b40)={<r8=>0xffffffffffffffff})
setsockopt$inet6_int(r8, 0x29, 0x3a, &(0x7f0000001b80)=0xffffcba9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, <r9=>r1, {0x6, 0x4}}, './file0\x00'})
ioctl$DRM_IOCTL_GET_MAP(r9, 0xc0286404, &(0x7f0000001c00)={&(0x7f0000ffa000/0x3000)=nil})
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000001c40)=0x1)

2.1484432s ago: executing program 0 (id=7080):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000180)=""/13, 0x200000, 0x1000, 0x8}, 0x20)
r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x8, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x80, 0x453, 0x100, 0x70bd26, 0x25dfdbff, "252bf31185486b49e82ce2811b895a0be8e611dd569607127fbe5757c2d8fc25ce4948dd04cd029b94bc20ea51cee175dc499d6e8c04baa3388817df4dbf4608a54924c1bcde7c0bd3d8fe27370e5a952da51a553509f8729726583b7200d62d1eb913e6471f49a6a059824c90", ["", "", "", "", "", "", ""]}, 0x80}, 0x1, 0x0, 0x0, 0x20000}, 0x4000800)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000007c0)={0x0, 0x4, 0x2018})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00'})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6(0xa, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$inet(0x2, 0x3, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x7, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r5, 0x8001}}, 0x48)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2.145198439s ago: executing program 3 (id=7081):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4888}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x3, 0x0, {0x80, 0x0, 0x300}}, 0x14}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="031200004d8a0400140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

2.033689429s ago: executing program 0 (id=7082):
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x200)
syz_usb_connect(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0)

1.707432502s ago: executing program 4 (id=7083):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(0x0, 0x1d24, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c)
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000000c0)={0x0, 0x7e})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
sendfile(r4, r4, 0x0, 0x2000fb)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

1.536020783s ago: executing program 3 (id=7084):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r2, 0x1, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x0) (fail_nth: 7)

969.373567ms ago: executing program 5 (id=7085):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x40, 0x4f}, {0x0, 0x0, 0x0, 0x9}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x1000000, 0x0, 0x0, 0x0, 0x40000000}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee23404aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459664124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe10, 0x10, &(0x7f0000000040), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x42)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0)
openat2(r3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x80480, 0x2}, 0x18)
r4 = syz_open_dev$vim2m(&(0x7f0000000bc0), 0xbd8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000680)=@multiplanar_mmap={0x1, 0x1, 0x4, 0x2, 0x5, {}, {0x5, 0x0, 0x7, 0x1, 0x6, 0xa, "23a7bcee"}, 0x0, 0x1, {0x0}, 0x1})
pwritev2(r3, &(0x7f0000000b00)=[{&(0x7f00000008c0)='&', 0x1}, {&(0x7f0000000300)="6557c5667f0461408d5e0d39a60ceda9875bf8912615c0daad68da27706852caee17d89c6a368afbb6ec0003f991893d68836de50e040f06bda7e7e1abbc7a6713dd0a526bb2481ac3d9ac427c6b4111195e3e7862b3869ccf866b", 0x5b}, {&(0x7f0000000380)="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", 0xfa}, {&(0x7f0000000900)="2053c3e3fd6adbee83ca69bb82a22f601bb9072fdf00ac2be85b38fb08a748b2871dfa41e090e17a6659f4e3a16c6d37b1b11300d449ea1128e602afbb726c301af58c1468b87c6d8612a796022e26e26ad21c800199829f758570431e39d777c634fd554dea10df854ad749a0359e551827082b1f9b1ebed0f8879436bbd4d3d23675b2b0766dd560f91e9024c509de30f487d47f76a07fca6c1132811b", 0x9e}, {&(0x7f0000000840)="7a9ba5b8ac8d022e80601cfa3db5ca6704745527829ce0604b260fe24d4142cf827ebae7bc0a2f90f555d2e45cfada83ee1fac139a12a2cdef81b712beb8b3a8f9c065e8c6c6d76ccc9ec764000eaf6da79bdb69f32cb5bac17677510fec74d5394c01ae21722fd38774e1b3", 0x6c}, {&(0x7f00000009c0)="452c406c6b58626d14998b4368ea7c57d0830cd21df6d948951fe533b2f5a84bac18a638a964fec6896b69faa148534ee36d2b7b13b1533d7cdb2f1c72941eafad86379e2ec6f7f4d03a994366899aa3d4641c879683de4b2a8161d1476570347483da810c38975a09bcdaacc13e5a9c1fcb7cad759733714c", 0x79}, {&(0x7f0000000b80)="d879d1aef2d78348c7ce281f68773c452039acbc59ab242f011b94e24cd9d3df8c221b163cdcba947c0f8614f46547ec8e407a411a27ceec8b2ad417db9f745118161197ccb72b4e5b1e0672845ff3caf35c9f9fcf301c5c54890a5cebf704f14f0a9837a7998825bbdea0e294d0b7f8e39a439c75b4463e739578d12e7297fe4bb664a52c1d1b769af55866e7bbd5925f8cf09d0db12c730420b110ba04379543c8464bdf4e671329dea47feceb01433caf310f0d3e74471b168e752b26c884bb0967bd1cf2186499e14a3a31087e8dee0b5fccafe7212c9692682352ed87aae9a50f6334ab0dede9e4cd416adcc4c8f4676ba3f01890", 0xf7}, {&(0x7f0000000140)="00596a25f65bbdf2d71292ed71e042710081a4031a89b6f528dd05d6501d0142e0b3333e02706934090ab47bbf39f51be696e9b55ddb93fb8842afc7a6637d6a", 0x40}], 0x8, 0x8, 0x0, 0x14)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8071, 0xffffffffffffffff, 0x50182000)
signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x7]}, 0x8, 0x800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50)
io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
listen(r5, 0xa)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
close(0x3)

962.31572ms ago: executing program 3 (id=7086):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000001900000a20000000020a01040000000000000000010080000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b00010065787468647200002c0002800800014000000008080003400000200d080004500000006a080006400000000405000200830000000900010073797a30"], 0xdc}}, 0x0)

595.142157ms ago: executing program 0 (id=7087):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x6], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9e, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffff9, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000004000000000104004e200023b0"], 0x0)

451.888555ms ago: executing program 3 (id=7088):
syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x6a040000)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000140)={'ipvlan0\x00', {0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xa}}})
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0xc, 0xa, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0)
syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002)

381.014652ms ago: executing program 0 (id=7089):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_trace_dev_match', 0x141580, 0xa6)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d00000006000000040000000180000001000000", @ANYRES32=r2, @ANYBLOB="0000000000464000000040df4daf0000000000000000c100723c58cc05ba", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000007b7429f0f0d4c6a0000000", @ANYRESHEX=r1, @ANYRES16=r0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0xffffffffffffffff, 0x4}, 0x38)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c)
recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

0s ago: executing program 1 (id=7090):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000680)=0x800001)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES8], 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000480)={0x5, 0x2, 0x1, 0x0, 0x7})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[<r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000340)={r2, r3, r4, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=<r5=>0x0)
ioctl(r1, 0x4, &(0x7f00000004c0)="69f2c7c1368848700bc647a084e2847d16eb6ec8ec77fed430851ce5b1496b0fff83f2e89439f05dd72c53324bce992307ee8d387406f21937b2136f485b433c2382edd5b73953530ebf529674cc0a1b462bffe32df5512061e4817910c93c2bafdfcdf45b58787494a6d208d732e3e48a82d9fa86e5b7adcca7d36c0dfec634ed6326bd5cbaadd5")
ptrace$getsig(0x4202, r5, 0xffffffffffffffff, &(0x7f00000003c0))
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/130, 0x47}], 0x1)
r6 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendto$inet(r6, &(0x7f00000005c0)="a88ba7af2756354f44f1c91b74f8ce70dc769a92f8b019025f46bbfd659c644a598a6386e8f070c0b4b81039e51ea8df911bf245b1893b05ec36528758d3a598660d607c915c78c7e058ae5f59fd5525761827df9950394f57e048ef99335260751a1a", 0x63, 0x8084, &(0x7f0000000640)={0x2, 0x4e22, @multicast1}, 0x10)

kernel console output (not intermixed with test programs):

b 6-1: USB disconnect, device number 35
[ 1602.584635][T28666] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1602.645445][ T5910] usb 5-1: new full-speed USB device number 115 using dummy_hcd
[ 1602.906163][ T5910] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1602.940242][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1603.036526][ T5910] usb 5-1: Product: syz
[ 1603.050561][T28674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6688'.
[ 1603.071439][T28673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6689'.
[ 1603.082521][ T5910] usb 5-1: Manufacturer: syz
[ 1603.087594][T28674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6688'.
[ 1603.121117][ T5910] usb 5-1: SerialNumber: syz
[ 1603.150487][ T5910] usb 5-1: config 0 descriptor??
[ 1603.378456][ T5910] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1603.586923][T16485] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1603.818862][T16485] usb 6-1: Using ep0 maxpacket: 8
[ 1603.830705][T16485] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1603.840782][T16485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1603.869428][T16485] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1603.878951][T16485] pvrusb2: **********
[ 1603.892699][T16485] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1603.929489][T16485] pvrusb2: Important functionality might not be entirely working.
[ 1603.954019][T16485] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1603.998269][T16485] pvrusb2: **********
[ 1604.170607][ T2346] pvrusb2: Invalid write control endpoint
[ 1604.456064][T16485] usb 6-1: USB disconnect, device number 36
[ 1604.632023][ T2346] pvrusb2: Invalid write control endpoint
[ 1604.660925][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1604.708919][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1604.738375][T28691] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1604.760013][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1604.790305][ T2346] pvrusb2: Device being rendered inoperable
[ 1604.815094][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1604.830825][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1604.901619][ T2346] pvrusb2: Attached sub-driver cx25840
[ 1604.920958][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1604.953722][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1605.021634][T28695] tipc: Cannot configure node identity twice
[ 1605.114211][T28695] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6694'.
[ 1605.190975][T28695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1605.226602][T28695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1605.253257][T28695] bond0 (unregistering): Released all slaves
[ 1605.379320][T28705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6697'.
[ 1605.399723][T28705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6697'.
[ 1605.495012][T16485] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[ 1605.691079][ T5910] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1605.707038][T16485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1605.708827][ T5910] usb 5-1: USB disconnect, device number 115
[ 1605.771000][T16485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1605.823189][T16485] usb 6-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[ 1605.942545][T16485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1605.978380][T16485] usb 6-1: config 0 descriptor??
[ 1605.998836][T28700] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1606.411017][T28723] blktrace: Concurrent blktraces are not allowed on loop4
[ 1607.311038][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.321045][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.393298][T28728] netlink: 'syz.4.6703': attribute type 1 has an invalid length.
[ 1607.448266][T28728] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1607.601741][T28735] bond3: (slave veth5): Enslaving as an active interface with a down link
[ 1607.815335][ T5910] usb 5-1: new full-speed USB device number 116 using dummy_hcd
[ 1607.879467][T28732] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1607.970947][ T5910] usb 5-1: config 8 has an invalid interface number: 223 but max is 0
[ 1607.980954][ T5910] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[ 1607.993574][ T5910] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1608.046288][ T5910] usb 5-1: config 8 has no interface number 0
[ 1608.072728][ T5910] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1608.210698][ T5910] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[ 1608.234120][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1608.744768][ T5910] usb 5-1: Product: syz
[ 1608.950752][ T5910] usb 5-1: Manufacturer: syz
[ 1609.062403][ T5910] usb 5-1: SerialNumber: syz
[ 1609.080672][T16485] usbhid 6-1:0.0: can't add hid device: -71
[ 1609.108470][T16485] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1609.155909][T16485] usb 6-1: USB disconnect, device number 37
[ 1609.505948][T16485] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1609.727033][T16485] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1609.738092][T16485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1609.773405][T16485] usb 6-1: Product: syz
[ 1609.789100][T16485] usb 6-1: Manufacturer: syz
[ 1609.803952][T16485] usb 6-1: SerialNumber: syz
[ 1609.970596][T16485] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1609.991340][ T5877] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1610.195547][T24224] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1610.540940][ T5910] usb 5-1: USB disconnect, device number 116
[ 1610.591474][T28769] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6708'.
[ 1610.620733][T28769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1610.629750][T24224] usb 4-1: Using ep0 maxpacket: 16
[ 1610.643654][T28769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1610.700510][T24224] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1610.713813][T24224] usb 4-1: config 0 has no interface number 0
[ 1610.764331][T24224] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1610.793695][ T5910] usb 6-1: USB disconnect, device number 38
[ 1610.872071][T24224] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1610.911984][T24224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1611.006464][T24224] usb 4-1: config 0 descriptor??
[ 1611.042221][   T47] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1611.053798][T24224] usbhid 4-1:0.1: couldn't find an input interrupt endpoint
[ 1611.067482][ T5877] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1611.077962][ T5877] ath9k_htc: Failed to initialize the device
[ 1611.107973][ T5910] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1611.197137][   T47] usb 2-1: Using ep0 maxpacket: 8
[ 1611.203899][   T47] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1611.225466][   T47] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1611.259541][   T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1611.275623][   T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1611.292901][   T47] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1611.308334][   T47] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1611.318482][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1611.546009][ T5904] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1612.049942][ T5904] usb 5-1: Using ep0 maxpacket: 16
[ 1612.072440][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1612.114389][ T5904] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1612.124087][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1612.133298][ T5904] usb 5-1: Product: syz
[ 1612.141456][ T5904] usb 5-1: Manufacturer: syz
[ 1612.158170][ T5904] usb 5-1: SerialNumber: syz
[ 1612.163498][   T47] usb 2-1: GET_CAPABILITIES returned 0
[ 1612.170588][   T47] usbtmc 2-1:16.0: can't read capabilities
[ 1612.187698][ T5904] usb 5-1: config 0 descriptor??
[ 1612.217957][ T5904] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1612.238015][ T5904] em28xx 5-1:0.0: DVB interface 0 found: bulk
[ 1612.330886][T28790] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1612.451021][   T47] usb 2-1: USB disconnect, device number 84
[ 1612.873199][ T5904] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1612.891177][ T5877] usb 4-1: USB disconnect, device number 37
[ 1613.309344][ T5904] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1613.321056][ T5904] em28xx 5-1:0.0: board has no eeprom
[ 1613.344995][ T5877] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[ 1613.371269][T28784] em28xx 5-1:0.0: reading from i2c device at 0xfffe failed (error=-5)
[ 1613.517546][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1613.539975][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1613.578751][ T5877] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[ 1613.610728][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1613.645249][ T5904] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1613.653182][ T5904] em28xx 5-1:0.0: dvb set to bulk mode.
[ 1613.660377][   T47] em28xx 5-1:0.0: Binding DVB extension
[ 1613.671911][ T5904] usb 5-1: USB disconnect, device number 117
[ 1613.766511][ T5877] usb 4-1: config 0 descriptor??
[ 1613.776932][T28794] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1613.856902][ T5904] em28xx 5-1:0.0: Disconnecting em28xx
[ 1613.873524][   T47] em28xx 5-1:0.0: Registering input extension
[ 1613.896770][ T5904] em28xx 5-1:0.0: Closing input extension
[ 1613.923426][ T5904] em28xx 5-1:0.0: Freeing device
[ 1614.124199][T28807] blktrace: Concurrent blktraces are not allowed on loop4
[ 1614.244572][T28812] netlink: 'syz.1.6721': attribute type 3 has an invalid length.
[ 1614.563594][T28817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6723'.
[ 1614.703713][T28817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6723'.
[ 1614.712864][T26667] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1614.722424][T26667] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1614.747781][T26667] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1614.783811][T26667] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1616.265680][T24224] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1616.427118][ T5877] usbhid 4-1:0.0: can't add hid device: -71
[ 1616.435865][ T5877] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1616.455455][T24224] usb 2-1: Using ep0 maxpacket: 16
[ 1616.456910][ T5877] usb 4-1: USB disconnect, device number 38
[ 1616.476771][T24224] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7
[ 1616.567770][T24224] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40
[ 1616.721206][T24224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1616.772871][T24224] usb 2-1: Product: syz
[ 1617.022985][T24224] usb 2-1: Manufacturer: syz
[ 1617.028977][T24224] usb 2-1: SerialNumber: syz
[ 1617.314748][T24224] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1617.353615][T28845] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1617.400424][T24224] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71
[ 1617.538480][T24224] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71
[ 1617.885916][T24224] usb 2-1: USB disconnect, device number 85
[ 1618.245837][T28848] syzkaller0: entered promiscuous mode
[ 1618.283838][T28848] syzkaller0: entered allmulticast mode
[ 1619.227628][T28874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6738'.
[ 1619.365677][   T29] kauditd_printk_skb: 32 callbacks suppressed
[ 1619.365696][   T29] audit: type=1326 audit(1774283306.999:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28871 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1619.532132][   T29] audit: type=1326 audit(1774283307.009:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28871 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1619.565341][   T29] audit: type=1326 audit(1774283307.009:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28871 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1619.589235][   T29] audit: type=1326 audit(1774283307.009:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28871 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1619.612003][   T29] audit: type=1326 audit(1774283307.009:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28871 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1619.638211][   T29] audit: type=1326 audit(1774283307.009:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28871 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1619.766909][   T29] audit: type=1326 audit(1774283307.009:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28871 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1619.818907][T24224] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[ 1619.887459][   T29] audit: type=1326 audit(1774283307.009:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28871 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1619.930736][T28882] xt_HMARK: spi-set and port-set can't be combined
[ 1619.960772][   T29] audit: type=1326 audit(1774283307.009:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28871 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1619.987115][T24224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1620.005574][T24224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1620.013460][   T29] audit: type=1326 audit(1774283307.009:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28871 comm="syz.0.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1620.120334][T24224] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[ 1620.156055][T24224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1620.245518][   T47] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1620.273640][T24224] usb 4-1: config 0 descriptor??
[ 1620.314317][T28878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1620.500081][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1620.521898][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1620.561573][   T47] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1620.576603][T28886] netlink: 'syz.1.6743': attribute type 1 has an invalid length.
[ 1620.585956][   T47] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1620.594069][   T47] usb 5-1: Manufacturer: syz
[ 1620.607378][T28886] netlink: 'syz.1.6743': attribute type 2 has an invalid length.
[ 1620.617502][   T47] usb 5-1: config 0 descriptor??
[ 1620.688876][T28890] blktrace: Concurrent blktraces are not allowed on loop4
[ 1620.854518][T28892] trusted_key: encrypted_key: insufficient parameters specified
[ 1620.883138][T28892] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6746'.
[ 1622.248706][   T47] uclogic 0003:256C:006D.0044: failed retrieving Huion firmware version: -71
[ 1622.258824][   T47] uclogic 0003:256C:006D.0044: failed probing parameters: -71
[ 1622.296563][   T47] uclogic 0003:256C:006D.0044: probe with driver uclogic failed with error -71
[ 1622.373301][   T47] usb 5-1: USB disconnect, device number 118
[ 1622.648855][T24224] usbhid 4-1:0.0: can't add hid device: -71
[ 1622.655674][T24224] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1622.744756][T24224] usb 4-1: USB disconnect, device number 39
[ 1623.330500][T28908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1623.515480][T28913] FAULT_INJECTION: forcing a failure.
[ 1623.515480][T28913] name failslab, interval 1, probability 0, space 0, times 0
[ 1623.640782][T28914] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1623.650644][T28913] CPU: 1 UID: 0 PID: 28913 Comm: syz.0.6751 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1623.650681][T28913] Tainted: [L]=SOFTLOCKUP
[ 1623.650687][T28913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1623.650697][T28913] Call Trace:
[ 1623.650704][T28913]  <TASK>
[ 1623.650714][T28913]  dump_stack_lvl+0xe8/0x150
[ 1623.650743][T28913]  should_fail_ex+0x412/0x560
[ 1623.650770][T28913]  should_failslab+0xa8/0x100
[ 1623.650792][T28913]  __kvmalloc_node_noprof+0x178/0x8a0
[ 1623.650811][T28913]  ? rhashtable_init_noprof+0x52e/0xa70
[ 1623.650828][T28913]  ? rhashtable_init_noprof+0x12d/0xa70
[ 1623.650846][T28913]  rhashtable_init_noprof+0x52e/0xa70
[ 1623.650866][T28913]  rhltable_init_noprof+0x1e/0x60
[ 1623.650882][T28913]  nf_tables_newtable+0x68f/0x1910
[ 1623.650995][T28913]  nfnetlink_rcv+0x1240/0x27b0
[ 1623.651045][T28913]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1623.651078][T28913]  ? ref_tracker_free+0x693/0x840
[ 1623.651123][T28913]  ? __netlink_deliver_tap+0x807/0x850
[ 1623.651145][T28913]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1623.651180][T28913]  netlink_unicast+0x80f/0x9b0
[ 1623.651208][T28913]  ? __pfx_netlink_unicast+0x10/0x10
[ 1623.651230][T28913]  ? netlink_sendmsg+0x650/0xb40
[ 1623.651242][T28913]  ? skb_put+0x11b/0x210
[ 1623.651261][T28913]  netlink_sendmsg+0x813/0xb40
[ 1623.651284][T28913]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1623.651301][T28913]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1623.651325][T28913]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1623.651346][T28913]  ____sys_sendmsg+0x972/0x9f0
[ 1623.651372][T28913]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1623.651397][T28913]  ? import_iovec+0x73/0xa0
[ 1623.651417][T28913]  ___sys_sendmsg+0x2a5/0x360
[ 1623.651438][T28913]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1623.651486][T28913]  ? __fget_files+0x2a/0x420
[ 1623.651506][T28913]  ? __fget_files+0x3a0/0x420
[ 1623.651536][T28913]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1623.651557][T28913]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1623.651582][T28913]  ? __pfx_ksys_write+0x10/0x10
[ 1623.651609][T28913]  do_syscall_64+0x14d/0xf80
[ 1623.651627][T28913]  ? trace_irq_disable+0x3b/0x150
[ 1623.651647][T28913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1623.651663][T28913]  ? clear_bhb_loop+0x40/0x90
[ 1623.651692][T28913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1623.651707][T28913] RIP: 0033:0x7fe6eb19c799
[ 1623.651724][T28913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1623.651737][T28913] RSP: 002b:00007fe6e93f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1623.651756][T28913] RAX: ffffffffffffffda RBX: 00007fe6eb415fa0 RCX: 00007fe6eb19c799
[ 1623.651767][T28913] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[ 1623.651776][T28913] RBP: 00007fe6e93f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1623.651785][T28913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1623.651794][T28913] R13: 00007fe6eb416038 R14: 00007fe6eb415fa0 R15: 00007fe6eb53fa48
[ 1623.651819][T28913]  </TASK>
[ 1623.652102][T28913] netlink: 'syz.0.6751': attribute type 1 has an invalid length.
[ 1624.033802][T28913] netlink: 'syz.0.6751': attribute type 2 has an invalid length.
[ 1624.348091][T28920] IPv6: addrconf: prefix option has invalid lifetime
[ 1624.676382][T28924] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1625.734978][  T795] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1625.890705][  T795] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1625.905673][  T795] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 1625.933026][  T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1625.966129][  T795] usb 4-1: config 0 descriptor??
[ 1626.012190][  T795] smsusb:smsusb_probe: board id=8, interface number 0
[ 1626.024366][  T795] smsusb:smsusb_probe: Device initialized with return code -19
[ 1627.279021][T28918] tipc: Started in network mode
[ 1627.284155][T28918] tipc: Node identity U, cluster identity 4711
[ 1627.294402][T28918] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1627.308717][  T795] usb 4-1: USB disconnect, device number 40
[ 1627.620040][T28940] netlink: 'syz.4.6761': attribute type 3 has an invalid length.
[ 1627.674946][  T795] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1627.912907][  T795] usb 2-1: Using ep0 maxpacket: 8
[ 1627.954944][  T795] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1627.964293][  T795] usb 2-1: config 11 has an invalid interface number: 242 but max is 0
[ 1627.979950][  T795] usb 2-1: config 11 has no interface number 0
[ 1627.997169][  T795] usb 2-1: config 11 interface 242 altsetting 225 has an endpoint descriptor with address 0x7B, changing to 0xB
[ 1628.118756][  T795] usb 2-1: config 11 interface 242 altsetting 225 bulk endpoint 0xB has invalid maxpacket 8
[ 1628.146592][  T795] usb 2-1: config 11 interface 242 altsetting 225 endpoint 0x6 has invalid maxpacket 15735, setting to 64
[ 1628.186751][  T795] usb 2-1: config 11 interface 242 altsetting 225 endpoint 0xE has invalid wMaxPacketSize 0
[ 1628.224875][  T795] usb 2-1: config 11 interface 242 has no altsetting 0
[ 1628.259092][T28956] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1628.268580][ T5877] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1628.336223][T28958] binder: 28957:28958 ioctl 8933 200000000300 returned -22
[ 1628.394567][  T795] usb 2-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=38.8a
[ 1628.453766][  T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1628.471792][  T795] usb 2-1: Product: syz
[ 1628.480250][  T795] usb 2-1: Manufacturer: syz
[ 1628.490401][  T795] usb 2-1: SerialNumber: syz
[ 1628.623352][T28932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1628.637198][ T5877] usb 5-1: Using ep0 maxpacket: 32
[ 1628.751127][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1628.775021][ T5877] usb 5-1: config 0 has no interfaces?
[ 1628.788524][ T5877] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 1628.811690][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1628.831358][ T5877] usb 5-1: config 0 descriptor??
[ 1628.893426][T28967] CUSE: info not properly terminated
[ 1629.074229][   T47] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1629.374309][   T47] usb 6-1: Using ep0 maxpacket: 32
[ 1629.383761][   T47] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 1629.417597][   T47] usb 6-1: config 0 has no interface number 0
[ 1629.442769][   T47] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1629.480053][   T47] usb 6-1: config 0 interface 89 has no altsetting 0
[ 1629.501529][   T47] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 1629.521881][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1629.545514][   T47] usb 6-1: Product: syz
[ 1629.559246][   T47] usb 6-1: Manufacturer: syz
[ 1629.580615][   T47] usb 6-1: SerialNumber: syz
[ 1629.603212][   T47] usb 6-1: config 0 descriptor??
[ 1629.638235][   T47] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1629.661980][   T47] em28xx 6-1:0.89: Video interface 89 found:
[ 1630.230656][   T47] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[ 1630.353069][T28966] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1630.428306][T24224] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1630.461832][  T795] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk.
[ 1630.481300][  T795] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 14 is not bulk.
[ 1630.512866][  T795] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out.
[ 1630.585562][T24224] usb 4-1: Using ep0 maxpacket: 16
[ 1630.611952][T24224] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1630.623360][T24224] usb 4-1: config 0 has no interface number 0
[ 1630.631179][T24224] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1630.637008][  T795] usb 2-1: USB disconnect, device number 86
[ 1630.659441][T24224] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1630.693533][T24224] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1630.716582][T24224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1630.802770][T28984] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[ 1630.861490][T24224] usb 4-1: config 0 descriptor??
[ 1630.938702][ T5904] usb 5-1: USB disconnect, device number 119
[ 1631.420371][T28992] netlink: 272 bytes leftover after parsing attributes in process `syz.0.6775'.
[ 1631.982353][   T47] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 1631.999353][   T47] em28xx 6-1:0.89: board has no eeprom
[ 1632.169994][   T47] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[ 1632.191437][   T47] em28xx 6-1:0.89: analog set to bulk mode.
[ 1632.219175][ T5904] em28xx 6-1:0.89: Registering V4L2 extension
[ 1632.248275][   T47] usb 6-1: USB disconnect, device number 39
[ 1632.273084][T29007] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1632.289751][   T47] em28xx 6-1:0.89: Disconnecting em28xx
[ 1632.401303][ T5904] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[ 1632.409355][ T5904] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[ 1632.427330][ T5904] em28xx 6-1:0.89: No AC97 audio processor
[ 1632.504374][T29013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6780'.
[ 1632.513774][T29013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6780'.
[ 1632.615461][T29012] netlink: 'syz.0.6780': attribute type 4 has an invalid length.
[ 1632.649151][ T5904] usb 6-1: Decoder not found
[ 1632.656457][ T5904] em28xx 6-1:0.89: failed to create media graph
[ 1632.795405][ T5904] em28xx 6-1:0.89: V4L2 device video103 deregistered
[ 1632.818997][ T5904] em28xx 6-1:0.89: Registering snapshot button...
[ 1632.828641][ T5904] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input120
[ 1632.846964][ T5904] em28xx 6-1:0.89: Remote control support is not available for this card.
[ 1632.858812][   T47] em28xx 6-1:0.89: Closing input extension
[ 1632.864727][   T47] em28xx 6-1:0.89: Deregistering snapshot button
[ 1632.924538][   T47] em28xx 6-1:0.89: Freeing device
[ 1633.122428][   T29] kauditd_printk_skb: 36 callbacks suppressed
[ 1633.122447][   T29] audit: type=1326 audit(1774283320.779:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29017 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1633.355593][   T29] audit: type=1326 audit(1774283320.779:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29017 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1633.479441][   T29] audit: type=1326 audit(1774283320.779:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29017 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1633.586488][   T29] audit: type=1326 audit(1774283320.779:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29017 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1633.698112][   T29] audit: type=1326 audit(1774283320.779:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29017 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1633.794400][   T29] audit: type=1326 audit(1774283320.779:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29017 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1633.889977][   T29] audit: type=1326 audit(1774283320.779:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29017 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1634.024401][   T29] audit: type=1326 audit(1774283320.779:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29017 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1634.166735][T24224] usbhid 4-1:0.1: can't add hid device: -71
[ 1634.188305][T24224] usbhid 4-1:0.1: probe with driver usbhid failed with error -71
[ 1634.214109][   T29] audit: type=1326 audit(1774283320.779:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29017 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1634.262266][T24224] usb 4-1: USB disconnect, device number 41
[ 1634.278173][   T29] audit: type=1326 audit(1774283320.779:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29017 comm="syz.5.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1634.341339][T29026] loop5: detected capacity change from 0 to 7
[ 1634.376783][T29026] Dev loop5: unable to read RDB block 7
[ 1634.404311][T29026]  loop5: unable to read partition table
[ 1634.436946][T29026] loop5: partition table beyond EOD, truncated
[ 1634.462292][T29026] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1634.486692][T29030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6788'.
[ 1634.543479][T29030] ipvlan2: entered allmulticast mode
[ 1634.568592][T29030] hsr0: entered allmulticast mode
[ 1634.580892][T29030] hsr_slave_0: entered allmulticast mode
[ 1634.605498][T29030] hsr_slave_1: entered allmulticast mode
[ 1635.026001][  T795] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1635.193851][  T795] usb 1-1: Using ep0 maxpacket: 32
[ 1635.238481][  T795] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[ 1635.241343][T29052] netlink: 'syz.3.6794': attribute type 2 has an invalid length.
[ 1635.262849][T29052] : entered promiscuous mode
[ 1635.270025][  T795] usb 1-1: config 0 has no interface number 0
[ 1635.275844][T29052] netlink: 'syz.3.6794': attribute type 2 has an invalid length.
[ 1635.285720][T29052] : left promiscuous mode
[ 1635.314715][  T795] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1635.335839][  T795] usb 1-1: config 0 interface 89 has no altsetting 0
[ 1635.488451][  T795] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 1635.529230][  T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1635.550282][  T795] usb 1-1: Product: syz
[ 1635.572555][  T795] usb 1-1: Manufacturer: syz
[ 1635.591986][  T795] usb 1-1: SerialNumber: syz
[ 1635.694531][  T795] usb 1-1: config 0 descriptor??
[ 1635.730365][  T795] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1635.773269][  T795] em28xx 1-1:0.89: Video interface 89 found:
[ 1636.584473][  T795] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[ 1636.677001][T29071] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1636.969483][T29040] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1637.132821][T29075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6802'.
[ 1637.384334][T29077] netlink: 300 bytes leftover after parsing attributes in process `syz.5.6803'.
[ 1637.712060][T16485] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1637.880937][T16485] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1637.904266][T16485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1637.913150][T16485] usb 5-1: Product: syz
[ 1637.917909][T16485] usb 5-1: Manufacturer: syz
[ 1637.922648][T16485] usb 5-1: SerialNumber: syz
[ 1638.221867][  T795] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 1638.230691][  T795] em28xx 1-1:0.89: board has no eeprom
[ 1638.306300][  T795] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[ 1638.313638][  T795] em28xx 1-1:0.89: analog set to bulk mode.
[ 1638.322868][T15487] em28xx 1-1:0.89: Registering V4L2 extension
[ 1638.335787][  T795] usb 1-1: USB disconnect, device number 93
[ 1638.354217][  T795] em28xx 1-1:0.89: Disconnecting em28xx
[ 1638.362255][T16485] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1638.379869][T16485] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1638.403872][T15487] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[ 1638.411646][T15487] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[ 1638.419272][T15487] em28xx 1-1:0.89: No AC97 audio processor
[ 1638.435259][T15487] usb 1-1: Decoder not found
[ 1638.440081][T15487] em28xx 1-1:0.89: failed to create media graph
[ 1638.448938][ T5877] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1638.459350][T15487] em28xx 1-1:0.89: V4L2 device video103 deregistered
[ 1638.476062][T15487] em28xx 1-1:0.89: Registering snapshot button...
[ 1638.502742][T15487] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input121
[ 1638.526545][T15487] em28xx 1-1:0.89: Remote control support is not available for this card.
[ 1638.536534][  T795] em28xx 1-1:0.89: Closing input extension
[ 1638.542472][  T795] em28xx 1-1:0.89: Deregistering snapshot button
[ 1638.581396][  T795] em28xx 1-1:0.89: Freeing device
[ 1638.626700][ T5877] usb 4-1: Using ep0 maxpacket: 16
[ 1638.634247][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1638.650082][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1638.665933][ T5877] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 1638.676867][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1638.685911][ T5877] usb 4-1: Product: syz
[ 1638.692987][ T5877] usb 4-1: Manufacturer: syz
[ 1638.699427][ T5877] usb 4-1: SerialNumber: syz
[ 1638.719483][ T5877] usb 4-1: config 0 descriptor??
[ 1638.880621][T29096] netlink: 'syz.1.6811': attribute type 39 has an invalid length.
[ 1638.932402][T29087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1638.946354][T29087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1638.956932][T29087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6807'.
[ 1638.972630][ T5877] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22
[ 1638.994212][ T5877] usb 4-1: USB disconnect, device number 42
[ 1639.456429][T16485] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[ 1639.513687][T16485] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1639.530168][T16485] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1639.545488][T16485] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[ 1639.559070][T16485] usb 5-1: USB disconnect, device number 120
[ 1639.766508][T24224] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1639.975697][T24224] usb 6-1: Using ep0 maxpacket: 16
[ 1640.003064][T24224] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1640.011531][T24224] usb 6-1: config 0 has no interface number 0
[ 1640.017598][T29119] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1640.021273][T29119] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1640.045252][T24224] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1640.080194][T24224] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1640.100524][T24224] usb 6-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1640.130373][T24224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1640.241125][T16485] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1640.249764][T24224] usb 6-1: config 0 descriptor??
[ 1640.429004][T16485] usb 2-1: Using ep0 maxpacket: 8
[ 1640.457867][T16485] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 1640.486766][T16485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1640.508767][T16485] usb 2-1: Product: syz
[ 1640.522141][T16485] usb 2-1: Manufacturer: syz
[ 1640.544178][T16485] usb 2-1: SerialNumber: syz
[ 1640.583238][T16485] usb 2-1: config 0 descriptor??
[ 1640.650887][T16485] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 1641.102729][   T29] kauditd_printk_skb: 19 callbacks suppressed
[ 1641.102747][   T29] audit: type=1326 audit(1774283328.759:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29125 comm="syz.0.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1641.188831][   T29] audit: type=1326 audit(1774283328.759:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29125 comm="syz.0.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1641.215369][T26950] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[ 1641.246264][   T29] audit: type=1326 audit(1774283328.759:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29125 comm="syz.0.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1641.303971][T29129] binder: 29127:29129 ioctl 8933 200000000300 returned -22
[ 1641.316283][   T29] audit: type=1326 audit(1774283328.799:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29125 comm="syz.0.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1641.375598][   T29] audit: type=1326 audit(1774283328.799:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29125 comm="syz.0.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1641.419367][T26950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1641.427039][   T29] audit: type=1326 audit(1774283328.799:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29125 comm="syz.0.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1641.484650][T26950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1641.494613][   T29] audit: type=1326 audit(1774283328.799:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29125 comm="syz.0.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1641.529800][T26950] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[ 1641.539535][T26950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1641.552452][   T29] audit: type=1326 audit(1774283328.799:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29125 comm="syz.0.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1641.552882][T26950] usb 4-1: config 0 descriptor??
[ 1641.590867][T29124] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1641.610666][   T29] audit: type=1326 audit(1774283328.799:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29125 comm="syz.0.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1641.666565][   T29] audit: type=1326 audit(1774283328.799:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29125 comm="syz.0.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb19c799 code=0x7ffc0000
[ 1641.679299][T16485] gspca_sonixj: reg_w1 err -71
[ 1641.755108][T16485] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[ 1641.782446][T16485] usb 2-1: USB disconnect, device number 87
[ 1642.030360][T29133] blktrace: Concurrent blktraces are not allowed on loop4
[ 1642.205011][ T5877] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1642.352307][T24224] usbhid 6-1:0.1: can't add hid device: -71
[ 1642.358976][T24224] usbhid 6-1:0.1: probe with driver usbhid failed with error -71
[ 1642.384566][T24224] usb 6-1: USB disconnect, device number 40
[ 1642.509619][ T5877] usb 1-1: Using ep0 maxpacket: 32
[ 1642.565806][ T5877] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[ 1642.585156][ T5877] usb 1-1: config 0 has no interface number 0
[ 1642.596359][ T5877] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1642.633009][ T5877] usb 1-1: config 0 interface 89 has no altsetting 0
[ 1642.662288][ T5877] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 1642.681327][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1642.703671][ T5877] usb 1-1: Product: syz
[ 1642.724366][ T5877] usb 1-1: Manufacturer: syz
[ 1642.756739][ T5877] usb 1-1: SerialNumber: syz
[ 1642.775641][ T5877] usb 1-1: config 0 descriptor??
[ 1642.789354][ T5877] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1642.824772][ T5877] em28xx 1-1:0.89: Video interface 89 found:
[ 1642.855223][  T795] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1642.890203][T24224] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1643.035135][  T795] usb 5-1: Using ep0 maxpacket: 8
[ 1643.043870][  T795] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[ 1643.052663][  T795] usb 5-1: config 0 has no interface number 0
[ 1643.055481][T24224] usb 6-1: Using ep0 maxpacket: 32
[ 1643.059386][  T795] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1643.078873][  T795] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1643.083105][T24224] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1643.089341][  T795] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1643.116092][  T795] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1643.129423][  T795] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1643.142715][T24224] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1643.142746][T24224] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1643.142772][T24224] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1643.198627][T24224] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1643.208527][T24224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1643.222420][T24224] usb 6-1: config 0 descriptor??
[ 1643.269147][  T795] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1643.286212][  T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1643.294324][  T795] usb 5-1: Product: syz
[ 1643.311649][  T795] usb 5-1: Manufacturer: syz
[ 1643.334748][  T795] usb 5-1: SerialNumber: syz
[ 1643.350677][  T795] usb 5-1: config 0 descriptor??
[ 1643.406351][ T5877] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[ 1643.499760][T24224] usbhid 6-1:0.0: can't add hid device: -71
[ 1643.511723][T24224] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1643.561955][T24224] usb 6-1: USB disconnect, device number 41
[ 1643.579326][T29131] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1643.824762][  T795] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[ 1643.852146][  T795] usb 5-1: USB disconnect, device number 121
[ 1644.164950][T16485] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1644.324965][T16485] usb 6-1: Using ep0 maxpacket: 32
[ 1644.332549][T16485] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 128, changing to 11
[ 1644.361839][T16485] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[ 1644.380081][T16485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1644.410758][T16485] usb 6-1: Product: syz
[ 1644.429170][T16485] usb 6-1: Manufacturer: syz
[ 1644.433849][T16485] usb 6-1: SerialNumber: syz
[ 1644.511767][T29166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6829'.
[ 1644.690591][T16485] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1644.704184][ T5877] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 1644.719838][ T5877] em28xx 1-1:0.89: board has no eeprom
[ 1644.728303][T16485] usb 6-1: MIDIStreaming interface descriptor not found
[ 1644.805069][ T5877] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[ 1644.831448][ T5877] em28xx 1-1:0.89: analog set to bulk mode.
[ 1644.859825][T25378] em28xx 1-1:0.89: Registering V4L2 extension
[ 1644.903588][ T5877] usb 1-1: USB disconnect, device number 94
[ 1644.936186][ T5877] em28xx 1-1:0.89: Disconnecting em28xx
[ 1644.959559][T16485] usb 6-1: USB disconnect, device number 42
[ 1645.083866][T25378] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[ 1645.091207][T25378] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[ 1645.098600][T26950] usbhid 4-1:0.0: can't add hid device: -71
[ 1645.104738][T26950] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1645.124954][T25378] em28xx 1-1:0.89: No AC97 audio processor
[ 1645.133637][T26950] usb 4-1: USB disconnect, device number 43
[ 1645.160706][T25378] usb 1-1: Decoder not found
[ 1645.174579][T25378] em28xx 1-1:0.89: failed to create media graph
[ 1645.188868][T25378] em28xx 1-1:0.89: V4L2 device video103 deregistered
[ 1645.307269][T25378] em28xx 1-1:0.89: Registering snapshot button...
[ 1645.339411][T25378] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input123
[ 1645.392632][T25378] em28xx 1-1:0.89: Remote control support is not available for this card.
[ 1645.434595][T29185] xfrm1: entered allmulticast mode
[ 1645.450086][ T5877] em28xx 1-1:0.89: Closing input extension
[ 1645.465828][ T5877] em28xx 1-1:0.89: Deregistering snapshot button
[ 1645.671166][ T5877] em28xx 1-1:0.89: Freeing device
[ 1646.113627][T29202] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6835'.
[ 1646.135535][ T5877] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1646.353077][ T5877] usb 1-1: Using ep0 maxpacket: 16
[ 1646.393543][ T5877] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1646.412476][T29207] FAULT_INJECTION: forcing a failure.
[ 1646.412476][T29207] name failslab, interval 1, probability 0, space 0, times 0
[ 1646.443348][T29207] CPU: 1 UID: 0 PID: 29207 Comm: syz.4.6837 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1646.443372][T29207] Tainted: [L]=SOFTLOCKUP
[ 1646.443376][T29207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1646.443383][T29207] Call Trace:
[ 1646.443388][T29207]  <TASK>
[ 1646.443393][T29207]  dump_stack_lvl+0xe8/0x150
[ 1646.443413][T29207]  should_fail_ex+0x412/0x560
[ 1646.443432][T29207]  should_failslab+0xa8/0x100
[ 1646.443445][T29207]  ? security_inode_alloc+0x39/0x310
[ 1646.443462][T29207]  kmem_cache_alloc_noprof+0x87/0x650
[ 1646.443473][T29207]  ? __pfx_make_kgid+0x10/0x10
[ 1646.443492][T29207]  security_inode_alloc+0x39/0x310
[ 1646.443508][T29207]  inode_init_always_gfp+0x9ed/0xdc0
[ 1646.443526][T29207]  ? __pfx_proc_alloc_inode+0x10/0x10
[ 1646.443566][T29207]  alloc_inode+0x82/0x1b0
[ 1646.443580][T29207]  new_inode+0x22/0x170
[ 1646.443597][T29207]  proc_pid_make_inode+0x21/0x130
[ 1646.443609][T29207]  proc_fd_instantiate+0x54/0x2f0
[ 1646.443622][T29207]  ? fput+0xa0/0xd0
[ 1646.443637][T29207]  proc_lookupfd_common+0x13e/0x250
[ 1646.443651][T29207]  ? __pfx_proc_fd_instantiate+0x10/0x10
[ 1646.443663][T29207]  ? __pfx_proc_lookupfd_common+0x10/0x10
[ 1646.443677][T29207]  ? __init_waitqueue_head+0xa9/0x150
[ 1646.443691][T29207]  __lookup_slow+0x2b7/0x410
[ 1646.443709][T29207]  ? __pfx___lookup_slow+0x10/0x10
[ 1646.443730][T29207]  ? down_read+0x272/0x2e0
[ 1646.443745][T29207]  lookup_slow+0x53/0x70
[ 1646.443755][T29207]  path_lookupat+0x3f5/0x8c0
[ 1646.443778][T29207]  filename_lookup+0x256/0x5d0
[ 1646.443795][T29207]  ? __pfx_filename_lookup+0x10/0x10
[ 1646.443816][T29207]  ? __pfx_kfree_link+0x10/0x10
[ 1646.443833][T29207]  ? kmem_cache_alloc_noprof+0x307/0x650
[ 1646.443842][T29207]  ? do_getname_kernel+0x54/0x230
[ 1646.443855][T29207]  ? do_getname_kernel+0x97/0x230
[ 1646.443868][T29207]  ? __asan_memcpy+0x40/0x70
[ 1646.443879][T29207]  ? do_getname_kernel+0x183/0x230
[ 1646.443894][T29207]  kern_path+0x3d/0x150
[ 1646.443910][T29207]  tomoyo_realpath_nofollow+0x93/0x110
[ 1646.443921][T29207]  ? __pfx_tomoyo_realpath_nofollow+0x10/0x10
[ 1646.443937][T29207]  tomoyo_find_next_domain+0x259/0x1aa0
[ 1646.443958][T29207]  ? __pfx_tomoyo_find_next_domain+0x10/0x10
[ 1646.443974][T29207]  ? tomoyo_bprm_check_security+0xef/0x180
[ 1646.443985][T29207]  tomoyo_bprm_check_security+0x11b/0x180
[ 1646.443997][T29207]  security_bprm_check+0x85/0x240
[ 1646.444012][T29207]  bprm_execve+0x896/0x1460
[ 1646.444030][T29207]  ? __pfx_bprm_execve+0x10/0x10
[ 1646.444043][T29207]  ? alloc_bprm+0x508/0x5c0
[ 1646.444052][T29207]  ? count+0x1cb/0x230
[ 1646.444064][T29207]  do_execveat_common+0x50d/0x690
[ 1646.444081][T29207]  __x64_sys_execveat+0xc7/0xf0
[ 1646.444094][T29207]  do_syscall_64+0x14d/0xf80
[ 1646.444105][T29207]  ? trace_irq_disable+0x3b/0x150
[ 1646.444120][T29207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1646.444130][T29207]  ? clear_bhb_loop+0x40/0x90
[ 1646.444142][T29207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1646.444152][T29207] RIP: 0033:0x7fb10659c799
[ 1646.444163][T29207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1646.444172][T29207] RSP: 002b:00007fb1073e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[ 1646.444185][T29207] RAX: ffffffffffffffda RBX: 00007fb106815fa0 RCX: 00007fb10659c799
[ 1646.444193][T29207] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1646.444200][T29207] RBP: 00007fb1073e7090 R08: 0000000000001000 R09: 0000000000000000
[ 1646.444206][T29207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1646.444212][T29207] R13: 00007fb106816038 R14: 00007fb106815fa0 R15: 00007fb10693fa48
[ 1646.444229][T29207]  </TASK>
[ 1646.845450][T29211] syzkaller0: entered promiscuous mode
[ 1646.850937][T29211] syzkaller0: entered allmulticast mode
[ 1646.914919][ T5877] usb 1-1: config 0 has no interface number 0
[ 1646.936054][ T5877] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1647.011719][ T5877] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1647.088039][ T5877] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1647.148253][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1647.205861][ T5877] usb 1-1: config 0 descriptor??
[ 1647.465674][T25378] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1647.655031][T25378] usb 6-1: Using ep0 maxpacket: 16
[ 1647.662322][T25378] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1647.672267][T25378] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1647.682943][T25378] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1647.702233][T25378] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1647.728302][T25378] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 1647.755424][T25378] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1647.783185][T25378] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1647.835419][T25378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1647.864239][T25378] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[ 1647.975810][T29225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6841'.
[ 1648.088820][T25378] scsi host1: usb-storage 6-1:1.0
[ 1648.146210][T16485] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[ 1648.310777][  T795] usb 6-1: USB disconnect, device number 43
[ 1648.339725][T16485] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[ 1648.348809][T16485] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1648.371182][T16485] usb 4-1: config 0 has no interface number 0
[ 1648.378699][T16485] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0
[ 1648.562461][T16485] usb 4-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1648.688952][T16485] usb 4-1: config 0 interface 2 has no altsetting 0
[ 1648.700811][T16485] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f
[ 1648.710578][T16485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1648.719022][T16485] usb 4-1: Product: syz
[ 1648.727174][T16485] usb 4-1: Manufacturer: syz
[ 1648.732942][T16485] usb 4-1: SerialNumber: syz
[ 1648.742603][T16485] usb 4-1: config 0 descriptor??
[ 1648.795086][T26950] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1648.963420][ T5877] usbhid 1-1:0.1: can't add hid device: -71
[ 1648.970125][ T5877] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[ 1648.986630][T16485] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1648.995900][T26950] usb 5-1: Using ep0 maxpacket: 32
[ 1649.011821][T26950] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[ 1649.021132][T26950] usb 5-1: config 0 has no interface number 0
[ 1649.041229][ T5877] usb 1-1: USB disconnect, device number 95
[ 1649.048439][T26950] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1649.095168][T26950] usb 5-1: config 0 interface 89 has no altsetting 0
[ 1649.148678][T26950] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 1649.218644][T26950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1649.272773][T26950] usb 5-1: Product: syz
[ 1649.284903][T26950] usb 5-1: Manufacturer: syz
[ 1649.342940][T29235] sctp: [Deprecated]: syz.3.6842 (pid 29235) Use of int in maxseg socket option.
[ 1649.342940][T29235] Use struct sctp_assoc_value instead
[ 1649.383514][T29238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1649.395107][T26950] usb 5-1: SerialNumber: syz
[ 1649.403340][T29238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1649.431661][T16485] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -12
[ 1649.443954][T26950] usb 5-1: config 0 descriptor??
[ 1649.479922][T29239] syzkaller0: entered promiscuous mode
[ 1649.486390][T29239] syzkaller0: entered allmulticast mode
[ 1649.519889][T26950] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1649.532048][T26950] em28xx 5-1:0.89: Video interface 89 found:
[ 1649.765297][T29240] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1650.119652][T26950] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[ 1650.258579][T29229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1651.889772][T29264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6852'.
[ 1651.913268][T26950] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 1651.924274][ T5906] usb 4-1: USB disconnect, device number 44
[ 1651.940188][T26950] em28xx 5-1:0.89: board has no eeprom
[ 1652.025256][T26950] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[ 1652.037146][T26950] em28xx 5-1:0.89: analog set to bulk mode.
[ 1652.054430][ T5877] em28xx 5-1:0.89: Registering V4L2 extension
[ 1652.128551][ T5877] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[ 1652.164993][ T5877] em28xx 5-1:0.89: reading from i2c device at 0x48 failed (error=-5)
[ 1652.215215][ T5877] em28xx 5-1:0.89: reading from i2c device at 0x42 failed (error=-5)
[ 1652.392216][ T5906] usb 5-1: USB disconnect, device number 122
[ 1652.407473][ T5906] em28xx 5-1:0.89: Disconnecting em28xx
[ 1652.471649][T29277] FAULT_INJECTION: forcing a failure.
[ 1652.471649][T29277] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1652.474939][ T5877] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[ 1652.578112][T29277] CPU: 0 UID: 0 PID: 29277 Comm: syz.1.6856 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1652.578144][T29277] Tainted: [L]=SOFTLOCKUP
[ 1652.578151][T29277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1652.578162][T29277] Call Trace:
[ 1652.578171][T29277]  <TASK>
[ 1652.578179][T29277]  dump_stack_lvl+0xe8/0x150
[ 1652.578211][T29277]  should_fail_ex+0x412/0x560
[ 1652.578251][T29277]  _copy_from_user+0x2d/0xb0
[ 1652.578273][T29277]  ___sys_recvmsg+0x175/0x590
[ 1652.578297][T29277]  ? __lock_acquire+0x6b5/0x2cf0
[ 1652.578325][T29277]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1652.578381][T29277]  do_recvmmsg+0x334/0x800
[ 1652.578410][T29277]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1652.578443][T29277]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1652.578484][T29277]  __x64_sys_recvmmsg+0x198/0x250
[ 1652.578509][T29277]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1652.578544][T29277]  do_syscall_64+0x14d/0xf80
[ 1652.578564][T29277]  ? trace_irq_disable+0x3b/0x150
[ 1652.578591][T29277]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1652.578611][T29277]  ? clear_bhb_loop+0x40/0x90
[ 1652.578633][T29277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1652.578653][T29277] RIP: 0033:0x7fb7ac79c799
[ 1652.578671][T29277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1652.578688][T29277] RSP: 002b:00007fb7ad651028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1652.578710][T29277] RAX: ffffffffffffffda RBX: 00007fb7aca15fa0 RCX: 00007fb7ac79c799
[ 1652.578724][T29277] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000003
[ 1652.578738][T29277] RBP: 00007fb7ad651090 R08: 0000000000000000 R09: 0000000000000000
[ 1652.578751][T29277] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002
[ 1652.578764][T29277] R13: 00007fb7aca16038 R14: 00007fb7aca15fa0 R15: 00007fb7acb3fa48
[ 1652.578794][T29277]  </TASK>
[ 1652.975873][ T5877] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[ 1652.993681][ T5877] em28xx 5-1:0.89: No AC97 audio processor
[ 1653.206626][T29279] netlink: zone id is out of range
[ 1653.215487][ T5877] usb 5-1: Decoder not found
[ 1653.220119][ T5877] em28xx 5-1:0.89: failed to create media graph
[ 1653.257270][ T5877] em28xx 5-1:0.89: V4L2 device video103 deregistered
[ 1653.396965][T16485] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1653.424272][ T5877] em28xx 5-1:0.89: Registering snapshot button...
[ 1653.446332][ T5877] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input124
[ 1653.528491][T29290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6860'.
[ 1653.543588][ T5877] em28xx 5-1:0.89: Remote control support is not available for this card.
[ 1653.545273][T29290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6860'.
[ 1653.597444][ T5906] em28xx 5-1:0.89: Closing input extension
[ 1653.614927][T16485] usb 1-1: Using ep0 maxpacket: 16
[ 1653.624717][T16485] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1653.644085][T16485] usb 1-1: config 0 has no interface number 0
[ 1653.657098][ T5906] em28xx 5-1:0.89: Deregistering snapshot button
[ 1653.687533][T16485] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1653.734999][ T5877] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1653.752385][ T5906] em28xx 5-1:0.89: Freeing device
[ 1653.757951][T16485] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1653.825233][T16485] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1653.889550][T16485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1653.915158][ T5877] usb 2-1: Using ep0 maxpacket: 32
[ 1653.922919][T16485] usb 1-1: config 0 descriptor??
[ 1653.942851][ T5877] usb 2-1: config 2 has an invalid interface number: 13 but max is 0
[ 1653.964991][ T5877] usb 2-1: config 2 has no interface number 0
[ 1653.989457][ T5877] usb 2-1: config 2 interface 13 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1654.054629][ T5877] usb 2-1: config 2 interface 13 has no altsetting 0
[ 1654.109520][ T5877] usb 2-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=52.92
[ 1654.118186][T29300] syzkaller0: entered promiscuous mode
[ 1654.131025][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1654.158667][T29300] syzkaller0: entered allmulticast mode
[ 1654.183270][ T5877] usb 2-1: Product: syz
[ 1654.200917][T29299] netlink: 'syz.4.6863': attribute type 30 has an invalid length.
[ 1654.211803][ T5877] usb 2-1: Manufacturer: syz
[ 1654.220779][ T5877] usb 2-1: SerialNumber: syz
[ 1655.025584][ T5877] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1655.195330][T25378] IPVS: starting estimator thread 0...
[ 1655.286763][T29311] IPVS: using max 33 ests per chain, 79200 per kthread
[ 1655.535115][ T5877] usb 2-1: USB disconnect, device number 88
[ 1655.817553][T16485] usbhid 1-1:0.1: can't add hid device: -71
[ 1655.832214][T16485] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[ 1655.853802][T16485] usb 1-1: USB disconnect, device number 96
[ 1656.045138][ T5877] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1656.495537][ T5877] usb 2-1: Using ep0 maxpacket: 8
[ 1656.528911][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1656.569270][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1656.599879][ T5877] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[ 1656.674888][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1656.734373][ T5877] usb 2-1: config 0 descriptor??
[ 1657.175438][ T5877] cherry 0003:046A:0027.0045: unknown main item tag 0x3
[ 1657.186950][T29346] xt_CT: No such helper "snmp"
[ 1657.194353][ T5877] cherry 0003:046A:0027.0045: unknown main item tag 0x1
[ 1657.227886][ T5877] cherry 0003:046A:0027.0045: bogus close delimiter
[ 1657.267111][ T5877] cherry 0003:046A:0027.0045: item 0 0 2 10 parsing failed
[ 1657.292810][ T5877] cherry 0003:046A:0027.0045: probe with driver cherry failed with error -22
[ 1657.355479][ T5906] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 1657.442349][T29353] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1657.561709][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1657.625405][ T5906] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1657.673757][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1657.697985][ T5906] usb 1-1: config 0 descriptor??
[ 1658.411529][ T5906] keytouch 0003:0926:3333.0046: fixing up Keytouch IEC report descriptor
[ 1658.489446][T25378] usb 2-1: USB disconnect, device number 89
[ 1658.519552][T29342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1658.541953][T29342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1658.591155][ T5906] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0046/input/input125
[ 1658.877527][T16485] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1658.948886][T29371] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1659.102252][T29371] syz.0.6873 (29371): drop_caches: 2
[ 1659.167710][T16485] usb 5-1: Using ep0 maxpacket: 16
[ 1659.212892][T16485] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1659.236773][T16485] usb 5-1: config 0 has no interface number 0
[ 1659.267752][T16485] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1659.309122][ T5906] keytouch 0003:0926:3333.0046: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[ 1659.347647][T16485] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1659.435312][T16485] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1659.480361][T16485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1659.505023][   T47] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1659.527976][ T5906] usb 1-1: USB disconnect, device number 97
[ 1659.601653][T16485] usb 5-1: config 0 descriptor??
[ 1659.673967][   T47] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1659.692812][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1659.752662][   T47] usb 2-1: Product: syz
[ 1659.841069][   T47] usb 2-1: Manufacturer: syz
[ 1659.861278][   T47] usb 2-1: SerialNumber: syz
[ 1659.896804][   T47] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1659.955629][T24224] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1660.176270][T25378] usb 2-1: USB disconnect, device number 90
[ 1660.645526][   T47] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1660.706212][T29391] Cannot find add_set index 1 as target
[ 1660.775500][   T47] usb 6-1: device descriptor read/64, error -71
[ 1660.917900][T29393] binder: BINDER_SET_CONTEXT_MGR already set
[ 1660.923920][T29393] binder: 29392:29393 ioctl 4018620d 200000000040 returned -16
[ 1660.945549][T29393] binder: 29392:29393 ioctl c0306201 2000000003c0 returned -14
[ 1661.066776][T24224] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1661.079383][T24224] ath9k_htc: Failed to initialize the device
[ 1661.102769][T25378] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1661.455878][   T47] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1661.625768][   T47] usb 6-1: device descriptor read/64, error -71
[ 1661.706356][T29402] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1661.774248][   T47] usb usb6-port1: attempt power cycle
[ 1661.780447][   T29] kauditd_printk_skb: 60 callbacks suppressed
[ 1661.780463][   T29] audit: type=1326 audit(1774283349.359:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29399 comm="syz.1.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1661.888446][   T29] audit: type=1326 audit(1774283349.359:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29399 comm="syz.1.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1661.920637][T16485] usbhid 5-1:0.1: can't add hid device: -71
[ 1661.935619][T16485] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[ 1661.967682][T16485] usb 5-1: USB disconnect, device number 123
[ 1661.994316][   T29] audit: type=1326 audit(1774283349.359:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29399 comm="syz.1.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1662.070496][   T29] audit: type=1326 audit(1774283349.359:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29399 comm="syz.1.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1662.184780][   T47] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1662.226381][   T47] usb 6-1: device descriptor read/8, error -71
[ 1662.242032][   T29] audit: type=1326 audit(1774283349.359:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29399 comm="syz.1.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1662.294145][   T29] audit: type=1326 audit(1774283349.359:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29399 comm="syz.1.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1662.445007][T16485] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1662.526615][   T47] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1662.566425][   T47] usb 6-1: device descriptor read/8, error -71
[ 1662.576028][   T29] audit: type=1326 audit(1774283349.359:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29399 comm="syz.1.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1662.621854][   T29] audit: type=1326 audit(1774283349.359:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29399 comm="syz.1.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1662.646165][T16485] usb 5-1: Using ep0 maxpacket: 32
[ 1662.688875][   T47] usb usb6-port1: unable to enumerate USB device
[ 1662.711276][T16485] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1662.746380][   T29] audit: type=1326 audit(1774283349.379:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29399 comm="syz.1.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1662.756442][T16485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1662.825915][T29408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6889'.
[ 1662.848547][   T29] audit: type=1326 audit(1774283349.379:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29399 comm="syz.1.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1662.849063][T16485] usb 5-1: Product: syz
[ 1662.912796][T16485] usb 5-1: Manufacturer: syz
[ 1662.924089][T16485] usb 5-1: SerialNumber: syz
[ 1662.949919][T16485] usb 5-1: config 0 descriptor??
[ 1662.967473][T16485] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1663.379969][T29423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6894'.
[ 1663.675761][ T5906] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1663.772110][T29404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1663.782018][T29404] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1663.825475][ T5906] usb 6-1: device descriptor read/64, error -71
[ 1664.086036][ T5906] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1664.111467][T29436] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1664.239372][ T5906] usb 6-1: device descriptor read/64, error -71
[ 1664.355843][ T5906] usb usb6-port1: attempt power cycle
[ 1664.365476][T24224] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1664.489637][ T5877] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 1664.495451][T24224] usb 4-1: device descriptor read/64, error -71
[ 1664.657885][ T5877] usb 1-1: Using ep0 maxpacket: 16
[ 1664.667676][ T5877] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1664.677183][ T5877] usb 1-1: config 0 has no interface number 0
[ 1664.683364][ T5877] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1664.694945][ T5906] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1664.713682][ T5877] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1664.731580][ T5906] usb 6-1: device descriptor read/8, error -71
[ 1664.738599][T24224] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1664.744721][ T5877] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1664.775320][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1664.797361][ T5877] usb 1-1: config 0 descriptor??
[ 1664.895555][T24224] usb 4-1: device descriptor read/64, error -71
[ 1664.988787][ T5906] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1665.006591][T24224] usb usb4-port1: attempt power cycle
[ 1665.036467][ T5906] usb 6-1: device descriptor read/8, error -71
[ 1665.149367][ T5906] usb usb6-port1: unable to enumerate USB device
[ 1665.230248][T29441] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1665.262285][T16485] gspca_ov534_9: sccb_write failed
[ 1665.375147][T24224] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1665.397234][T24224] usb 4-1: device descriptor read/8, error -71
[ 1665.463248][T16485] gspca_ov534_9: reg_w failed -71
[ 1665.484986][T25378] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1665.671318][T25378] usb 2-1: Using ep0 maxpacket: 8
[ 1665.679861][T25378] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1665.707701][T24224] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1665.737194][T16485] gspca_ov534_9: Unknown sensor 0000
[ 1665.737265][T16485] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[ 1665.753830][T25378] usb 2-1: config 0 has no interfaces?
[ 1665.788747][T16485] usb 5-1: USB disconnect, device number 124
[ 1665.799212][T24224] usb 4-1: device descriptor read/8, error -71
[ 1665.811245][T25378] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[ 1665.846280][T25378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1665.867722][T25378] usb 2-1: Product: syz
[ 1665.882342][T25378] usb 2-1: Manufacturer: syz
[ 1665.889309][T25378] usb 2-1: SerialNumber: syz
[ 1665.905488][T25378] usb 2-1: config 0 descriptor??
[ 1665.925753][T24224] usb usb4-port1: unable to enumerate USB device
[ 1667.271340][ T5877] usbhid 1-1:0.1: can't add hid device: -71
[ 1667.278873][ T5877] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[ 1667.298859][ T5877] usb 1-1: USB disconnect, device number 98
[ 1667.588899][T29463] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[ 1667.606331][T29463] fuse: Unknown parameter '
'
[ 1667.673691][   T29] kauditd_printk_skb: 65 callbacks suppressed
[ 1667.681309][   T29] audit: type=1326 audit(1774283355.269:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.3.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5999c799 code=0x7ffc0000
[ 1667.705823][T29463] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[ 1667.747794][T29463] bond0 (unregistering): Released all slaves
[ 1667.800706][   T29] audit: type=1326 audit(1774283355.269:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.3.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5999c799 code=0x7ffc0000
[ 1667.855003][ T5877] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 1667.884231][   T29] audit: type=1326 audit(1774283355.269:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.3.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c5999c799 code=0x7ffc0000
[ 1667.927511][   T29] audit: type=1326 audit(1774283355.269:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.3.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5999c799 code=0x7ffc0000
[ 1668.024801][T25378] usb 2-1: USB disconnect, device number 91
[ 1668.034991][ T5877] usb 1-1: Using ep0 maxpacket: 32
[ 1668.048251][ T5877] usb 1-1: config 0 has an invalid interface number: 202 but max is 1
[ 1668.057128][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1668.126976][   T29] audit: type=1326 audit(1774283355.269:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.3.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5999c799 code=0x7ffc0000
[ 1668.155393][ T5877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1668.285227][ T5877] usb 1-1: config 0 has no interface number 0
[ 1668.291417][ T5877] usb 1-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30
[ 1668.312768][   T29] audit: type=1326 audit(1774283355.269:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.3.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4c5999c799 code=0x7ffc0000
[ 1668.366840][ T5877] usb 1-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64
[ 1668.385746][ T5877] usb 1-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182
[ 1668.396751][   T29] audit: type=1326 audit(1774283355.269:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.3.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5999c799 code=0x7ffc0000
[ 1668.399258][ T5877] usb 1-1: config 0 interface 202 has no altsetting 0
[ 1668.578143][   T29] audit: type=1326 audit(1774283355.269:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.3.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5999c799 code=0x7ffc0000
[ 1668.690875][ T5877] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[ 1668.704955][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1668.736626][   T29] audit: type=1326 audit(1774283355.269:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.3.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c5999c799 code=0x7ffc0000
[ 1668.763013][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.763108][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1668.766870][ T5877] usb 1-1: Product: syz
[ 1668.822242][ T5877] usb 1-1: Manufacturer: syz
[ 1668.844970][ T5877] usb 1-1: SerialNumber: syz
[ 1668.875335][   T29] audit: type=1326 audit(1774283355.269:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.3.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5999c799 code=0x7ffc0000
[ 1668.911695][ T5877] usb 1-1: config 0 descriptor??
[ 1668.958131][ T5877] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1669.082641][T29480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6907'.
[ 1669.134103][T29480] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6907'.
[ 1669.193880][T29482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6909'.
[ 1669.209221][T29461] loop2: detected capacity change from 0 to 7
[ 1669.217297][T29461]  loop2: [POWERTEC] p1 p2
[ 1669.225609][T29461] loop2: p1 size 131072 extends beyond EOD, truncated
[ 1669.243428][T29461] loop2: p2 start 16974337 is beyond EOD, truncated
[ 1669.250912][T29482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6909'.
[ 1669.265956][T27034] usb 1-1: Failed to submit usb control message: -71
[ 1669.266267][ T5904] usb 1-1: USB disconnect, device number 99
[ 1669.280296][T29480] vlan6: entered allmulticast mode
[ 1669.286145][T27034] usb 1-1: unable to send the bmi data to the device: -71
[ 1669.310914][T27034] usb 1-1: unable to get target info from device
[ 1669.318250][T29480] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[ 1669.330361][T27034] usb 1-1: could not get target info (-71)
[ 1669.341589][T27034] usb 1-1: could not probe fw (-71)
[ 1669.419584][T29482] bridge0: entered promiscuous mode
[ 1669.426922][T29482] ip6gretap0: entered promiscuous mode
[ 1669.436972][T29482] debugfs: 'hsr1' already exists in 'hsr'
[ 1669.448175][T29482] Cannot create hsr debugfs directory
[ 1669.454366][T29482] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[ 1669.521051][T29486] xt_CT: No such helper "snmp"
[ 1669.750700][T29499] netlink: 'syz.1.6915': attribute type 2 has an invalid length.
[ 1669.788521][T29499] : entered promiscuous mode
[ 1669.867087][T29499] netlink: 'syz.1.6915': attribute type 1 has an invalid length.
[ 1669.928427][T29504] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6917'.
[ 1670.031323][ T5904] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1670.130903][T29512] Cannot find del_set index 4 as target
[ 1670.221989][ T5904] usb 4-1: Using ep0 maxpacket: 16
[ 1670.238063][ T5904] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1670.251912][ T5904] usb 4-1: config 0 has no interface number 0
[ 1670.272819][ T5904] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1670.317147][ T5904] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1670.349696][T29519] netlink: 'syz.1.6922': attribute type 1 has an invalid length.
[ 1670.365437][ T5904] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1670.386752][T29519] netlink: 'syz.1.6922': attribute type 2 has an invalid length.
[ 1670.402786][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1670.434713][ T5904] usb 4-1: config 0 descriptor??
[ 1670.587722][T29524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6924'.
[ 1670.885829][T24224] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1671.045457][T24224] usb 2-1: Using ep0 maxpacket: 16
[ 1671.056342][T24224] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1671.064411][T24224] usb 2-1: config 0 has no interface number 0
[ 1671.092332][T24224] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1671.120323][T24224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1671.161052][T24224] usb 2-1: Product: syz
[ 1671.170812][T24224] usb 2-1: Manufacturer: syz
[ 1671.180739][T24224] usb 2-1: SerialNumber: syz
[ 1671.202864][T24224] usb 2-1: config 0 descriptor??
[ 1671.227344][T24224] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1671.401406][T29538] netlink: 'syz.4.6930': attribute type 10 has an invalid length.
[ 1671.412888][   T47] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 1671.627982][   T47] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1671.642351][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1671.693035][   T47] usb 1-1: config 0 descriptor??
[ 1671.718295][   T47] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1672.044970][ T5877] usb 5-1: new full-speed USB device number 125 using dummy_hcd
[ 1672.197880][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1672.209423][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1672.226692][ T5877] usb 5-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[ 1672.250239][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1672.281676][ T5877] usb 5-1: config 0 descriptor??
[ 1672.294151][T29542] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 1673.165799][T24224] gspca_spca1528: reg_w err -110
[ 1673.229131][T24224] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110
[ 1673.242712][T29549] blktrace: Concurrent blktraces are not allowed on loop4
[ 1673.515917][ T5904] usbhid 4-1:0.1: can't add hid device: -71
[ 1673.522122][ T5904] usbhid 4-1:0.1: probe with driver usbhid failed with error -71
[ 1673.550883][ T5904] usb 4-1: USB disconnect, device number 49
[ 1673.618690][T29554] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6935'.
[ 1673.899466][ T5904] usb 2-1: USB disconnect, device number 92
[ 1674.024051][T24224] IPVS: starting estimator thread 0...
[ 1674.119694][T29562] IPVS: using max 34 ests per chain, 81600 per kthread
[ 1674.940162][   T47] gspca_stv06xx: I2C: Read error writing address: -71
[ 1674.994154][   T47] usb 1-1: USB disconnect, device number 100
[ 1675.046235][T29574] syzkaller0: entered promiscuous mode
[ 1675.096675][ T5877] usbhid 5-1:0.0: can't add hid device: -71
[ 1675.102728][ T5877] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1675.169195][ T5877] usb 5-1: USB disconnect, device number 125
[ 1675.189693][T29576] x_tables: duplicate underflow at hook 1
[ 1675.538999][T29591] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1675.973537][T25378] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1676.226573][T29601] FAULT_INJECTION: forcing a failure.
[ 1676.226573][T29601] name failslab, interval 1, probability 0, space 0, times 0
[ 1676.275545][T25378] usb 2-1: Using ep0 maxpacket: 16
[ 1676.305944][T29601] CPU: 1 UID: 0 PID: 29601 Comm: syz.3.6950 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1676.305973][T29601] Tainted: [L]=SOFTLOCKUP
[ 1676.305979][T29601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1676.305991][T29601] Call Trace:
[ 1676.306000][T29601]  <TASK>
[ 1676.306008][T29601]  dump_stack_lvl+0xe8/0x150
[ 1676.306042][T29601]  should_fail_ex+0x412/0x560
[ 1676.306076][T29601]  should_failslab+0xa8/0x100
[ 1676.306102][T29601]  __kvmalloc_node_noprof+0x178/0x8a0
[ 1676.306125][T29601]  ? rhashtable_init_noprof+0x52e/0xa70
[ 1676.306144][T29601]  ? rhashtable_init_noprof+0x12d/0xa70
[ 1676.306166][T29601]  rhashtable_init_noprof+0x52e/0xa70
[ 1676.306188][T29601]  nf_flow_table_init+0x17f/0x2a0
[ 1676.306304][T29601]  nf_tables_newflowtable+0x149f/0x23d0
[ 1676.306343][T29601]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[ 1676.306379][T29601]  ? __nla_parse+0x40/0x60
[ 1676.306402][T29601]  nfnetlink_rcv+0x1240/0x27b0
[ 1676.306458][T29601]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1676.306498][T29601]  ? ref_tracker_free+0x693/0x840
[ 1676.306557][T29601]  ? __netlink_deliver_tap+0x807/0x850
[ 1676.306585][T29601]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1676.306627][T29601]  netlink_unicast+0x80f/0x9b0
[ 1676.306659][T29601]  ? __pfx_netlink_unicast+0x10/0x10
[ 1676.306685][T29601]  ? netlink_sendmsg+0x650/0xb40
[ 1676.306701][T29601]  ? skb_put+0x11b/0x210
[ 1676.306724][T29601]  netlink_sendmsg+0x813/0xb40
[ 1676.306750][T29601]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1676.306771][T29601]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1676.306800][T29601]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1676.306825][T29601]  ____sys_sendmsg+0x972/0x9f0
[ 1676.306855][T29601]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1676.306885][T29601]  ? import_iovec+0x73/0xa0
[ 1676.306908][T29601]  ___sys_sendmsg+0x2a5/0x360
[ 1676.306935][T29601]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1676.306992][T29601]  ? __fget_files+0x2a/0x420
[ 1676.307018][T29601]  ? __fget_files+0x3a0/0x420
[ 1676.307053][T29601]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1676.307077][T29601]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1676.307107][T29601]  ? __pfx_ksys_write+0x10/0x10
[ 1676.307138][T29601]  do_syscall_64+0x14d/0xf80
[ 1676.307159][T29601]  ? trace_irq_disable+0x3b/0x150
[ 1676.307185][T29601]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1676.307204][T29601]  ? clear_bhb_loop+0x40/0x90
[ 1676.307227][T29601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1676.307245][T29601] RIP: 0033:0x7f4c5999c799
[ 1676.307263][T29601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1676.307278][T29601] RSP: 002b:00007f4c5a7ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1676.307297][T29601] RAX: ffffffffffffffda RBX: 00007f4c59c15fa0 RCX: 00007f4c5999c799
[ 1676.307310][T29601] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[ 1676.307322][T29601] RBP: 00007f4c5a7ba090 R08: 0000000000000000 R09: 0000000000000000
[ 1676.307332][T29601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1676.307343][T29601] R13: 00007f4c59c16038 R14: 00007f4c59c15fa0 R15: 00007f4c59d3fa48
[ 1676.307372][T29601]  </TASK>
[ 1676.310191][T29601] netlink: 'syz.3.6950': attribute type 1 has an invalid length.
[ 1676.663220][T25378] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1676.771478][T25378] usb 2-1: config 0 has no interface number 0
[ 1676.831358][T25378] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1676.882735][T25378] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1676.969300][T25378] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1677.004876][T25378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1677.075837][T25378] usb 2-1: config 0 descriptor??
[ 1677.147829][T29601] netlink: 'syz.3.6950': attribute type 2 has an invalid length.
[ 1677.697316][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6954'.
[ 1678.439766][T29635] kvm: user requested TSC rate below hardware speed
[ 1678.855264][T29638] input: syz0 as /devices/virtual/input/input126
[ 1679.107895][T25378] usbhid 2-1:0.1: can't add hid device: -71
[ 1679.129135][T25378] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[ 1679.170757][T25378] usb 2-1: USB disconnect, device number 93
[ 1679.265019][   T47] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[ 1679.437242][   T47] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[ 1679.459459][   T47] usb 4-1: config 0 has no interface number 0
[ 1679.479528][   T47] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 1679.523469][   T47] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1679.541547][T29660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6966'.
[ 1679.551407][T29660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6966'.
[ 1679.602955][T29660] netlink: 'syz.4.6966': attribute type 4 has an invalid length.
[ 1679.656318][   T47] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[ 1679.670453][   T47] usb 4-1: config 0 interface 2 has no altsetting 0
[ 1679.678249][T29661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6965'.
[ 1679.712381][   T47] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f
[ 1679.738298][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1679.856397][ T5910] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 1679.895431][   T47] usb 4-1: Product: syz
[ 1679.899649][   T47] usb 4-1: Manufacturer: syz
[ 1679.904251][   T47] usb 4-1: SerialNumber: syz
[ 1679.915660][   T47] usb 4-1: config 0 descriptor??
[ 1679.921474][T29638] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1679.929384][T29638] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1680.045429][ T5910] usb 1-1: Using ep0 maxpacket: 16
[ 1680.052242][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1680.082152][ T5910] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1680.102008][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1680.117847][T29669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6969'.
[ 1680.136317][ T5910] usb 1-1: Product: syz
[ 1680.140980][ T5910] usb 1-1: Manufacturer: syz
[ 1680.153657][ T5910] usb 1-1: SerialNumber: syz
[ 1680.178047][ T5910] usb 1-1: config 0 descriptor??
[ 1680.196794][ T5910] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1680.366876][ T5910] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1680.856457][ T5910] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1681.118757][T29682] net veth1_virt_wifi ªªªªª»: renamed from virt_wifi0
[ 1681.271356][ T5910] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1681.279951][ T5910] em28xx 1-1:0.0: board has no eeprom
[ 1681.553938][   T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1681.714968][ T5877] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1681.785745][ T5910] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1681.800313][ T5910] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1681.825935][T24224] em28xx 1-1:0.0: Binding DVB extension
[ 1681.885482][ T5877] usb 2-1: Using ep0 maxpacket: 16
[ 1681.923836][ T5877] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1681.942193][T29693] xt_CT: No such helper "snmp"
[ 1681.980204][ T5877] usb 2-1: config 0 has no interface number 0
[ 1682.009379][ T5877] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1682.054876][ T5877] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1682.104036][ T5877] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1682.143534][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1682.195715][   T47] usb 4-1: USB disconnect, device number 50
[ 1682.204768][T29698] Cannot find del_set index 4 as target
[ 1682.223431][ T5877] usb 2-1: config 0 descriptor??
[ 1682.961262][T29708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6981'.
[ 1683.146495][T29690] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[ 1683.163878][ T5904] usb 1-1: USB disconnect, device number 101
[ 1683.172303][ T5904] em28xx 1-1:0.0: Disconnecting em28xx
[ 1683.317727][T24224] em28xx 1-1:0.0: Registering input extension
[ 1683.333115][ T5904] em28xx 1-1:0.0: Closing input extension
[ 1683.356163][ T5904] em28xx 1-1:0.0: Freeing device
[ 1683.479486][T29725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6985'.
[ 1683.489126][T29725] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6985'.
[ 1683.526247][T16485] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1683.780747][T16485] usb 4-1: Using ep0 maxpacket: 32
[ 1683.868656][T16485] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1683.892594][T16485] usb 4-1: can't read configurations, error -61
[ 1684.065008][T16485] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1684.121731][T29732] Cannot find add_set index 1 as target
[ 1684.335009][T16485] usb 4-1: Using ep0 maxpacket: 32
[ 1684.382590][T16485] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1684.415886][T16485] usb 4-1: can't read configurations, error -61
[ 1684.460817][T16485] usb usb4-port1: attempt power cycle
[ 1684.915049][T16485] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1684.992176][T16485] usb 4-1: Using ep0 maxpacket: 32
[ 1685.028549][T16485] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1685.057085][T16485] usb 4-1: can't read configurations, error -61
[ 1685.243628][T16485] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1685.347224][ T5877] usbhid 2-1:0.1: can't add hid device: -71
[ 1685.375019][ T5877] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[ 1685.415757][T16485] usb 4-1: Using ep0 maxpacket: 32
[ 1685.439415][ T5877] usb 2-1: USB disconnect, device number 94
[ 1685.575596][   T29] kauditd_printk_skb: 33 callbacks suppressed
[ 1685.575614][   T29] audit: type=1326 audit(1774283373.189:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.5.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1685.914235][   T29] audit: type=1326 audit(1774283373.189:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.5.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1685.938390][   T29] audit: type=1326 audit(1774283373.189:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.5.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1686.008578][   T29] audit: type=1326 audit(1774283373.209:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.5.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1686.046892][T16485] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1686.050955][   T29] audit: type=1326 audit(1774283373.209:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.5.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1686.234905][T16485] usb 4-1: can't read configurations, error -61
[ 1686.237119][   T29] audit: type=1326 audit(1774283373.209:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.5.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1686.268453][   T29] audit: type=1326 audit(1774283373.209:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.5.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1686.268994][T16485] usb usb4-port1: unable to enumerate USB device
[ 1686.515335][   T29] audit: type=1326 audit(1774283373.219:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.5.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1686.640261][   T29] audit: type=1326 audit(1774283373.219:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.5.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1686.735016][   T29] audit: type=1326 audit(1774283373.239:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.5.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe46b79c799 code=0x7ffc0000
[ 1687.152865][T29768] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1688.315515][T24224] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1688.490332][T24224] usb 4-1: Using ep0 maxpacket: 32
[ 1688.535798][T24224] usb 4-1: config index 0 descriptor too short (expected 3659, got 75)
[ 1688.548273][T24224] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1688.595874][T24224] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[ 1688.605478][T24224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1688.613465][T24224] usb 4-1: Product: syz
[ 1688.635306][T24224] usb 4-1: Manufacturer: syz
[ 1688.639934][T24224] usb 4-1: SerialNumber: syz
[ 1688.657161][T24224] usb 4-1: config 0 descriptor??
[ 1688.675420][T24224] gspca_main: sunplus-2.14.0 probing 08ca:2060
[ 1688.943168][T24224] gspca_sunplus: reg_r err -32
[ 1689.615731][T29820] netlink: 'syz.3.7015': attribute type 10 has an invalid length.
[ 1690.024410][T29837] FAULT_INJECTION: forcing a failure.
[ 1690.024410][T29837] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1690.049767][T29837] CPU: 0 UID: 0 PID: 29837 Comm: syz.3.7019 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1690.049796][T29837] Tainted: [L]=SOFTLOCKUP
[ 1690.049802][T29837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1690.049812][T29837] Call Trace:
[ 1690.049819][T29837]  <TASK>
[ 1690.049827][T29837]  dump_stack_lvl+0xe8/0x150
[ 1690.049859][T29837]  should_fail_ex+0x412/0x560
[ 1690.049888][T29837]  _copy_to_user+0x31/0xb0
[ 1690.049911][T29837]  drm_ioctl+0x6da/0xb80
[ 1690.050016][T29837]  ? __pfx_drm_mode_getproperty_ioctl+0x10/0x10
[ 1690.050075][T29837]  ? __pfx_drm_ioctl+0x10/0x10
[ 1690.050105][T29837]  ? __fget_files+0x2a/0x420
[ 1690.050134][T29837]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1690.050158][T29837]  ? __pfx_drm_ioctl+0x10/0x10
[ 1690.050175][T29837]  __se_sys_ioctl+0xfc/0x170
[ 1690.050199][T29837]  do_syscall_64+0x14d/0xf80
[ 1690.050219][T29837]  ? trace_irq_disable+0x3b/0x150
[ 1690.050244][T29837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1690.050263][T29837]  ? clear_bhb_loop+0x40/0x90
[ 1690.050286][T29837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1690.050304][T29837] RIP: 0033:0x7f4c5999c799
[ 1690.050322][T29837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1690.050337][T29837] RSP: 002b:00007f4c5a7ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1690.050357][T29837] RAX: ffffffffffffffda RBX: 00007f4c59c15fa0 RCX: 00007f4c5999c799
[ 1690.050371][T29837] RDX: 00002000000003c0 RSI: 00000000c04064aa RDI: 0000000000000003
[ 1690.050383][T29837] RBP: 00007f4c5a7ba090 R08: 0000000000000000 R09: 0000000000000000
[ 1690.050394][T29837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1690.050406][T29837] R13: 00007f4c59c16038 R14: 00007f4c59c15fa0 R15: 00007f4c59d3fa48
[ 1690.050434][T29837]  </TASK>
[ 1690.075852][T24224] sunplus 4-1:0.0: probe with driver sunplus failed with error -32
[ 1690.265622][ T5877] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1690.276040][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1690.355669][T24224] usb 4-1: USB disconnect, device number 55
[ 1690.639244][T29849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7024'.
[ 1690.711827][T29849] chnl_net:caif_netlink_parms(): no params data found
[ 1690.809004][T29856] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1691.115863][T16485] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1691.167257][T29861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7027'.
[ 1691.199279][T29861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7027'.
[ 1691.238829][T29861] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[ 1691.291470][T16485] usb 2-1: Using ep0 maxpacket: 32
[ 1691.302334][T16485] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1691.328473][T16485] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1691.338009][T16485] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1691.369116][T16485] usb 2-1: Product: syz
[ 1691.392241][T16485] usb 2-1: Manufacturer: syz
[ 1691.488025][T16485] usb 2-1: SerialNumber: syz
[ 1691.504990][ T5877] usb 5-1: new full-speed USB device number 127 using dummy_hcd
[ 1691.522426][T16485] usb 2-1: config 0 descriptor??
[ 1691.539391][T29855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1691.541024][T16485] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1691.541052][T16485] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1691.748680][ T5877] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[ 1691.748708][ T5877] usb 5-1: config 0 has no interface number 0
[ 1691.750712][ T5877] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1691.750743][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1691.750764][ T5877] usb 5-1: Product: syz
[ 1691.750780][ T5877] usb 5-1: Manufacturer: syz
[ 1691.750796][ T5877] usb 5-1: SerialNumber: syz
[ 1691.753689][ T5877] usb 5-1: config 0 descriptor??
[ 1692.021051][ T5877] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1692.059517][ T5877] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[ 1692.102264][ T5877] asix 5-1:0.251: probe with driver asix failed with error -5
[ 1692.156093][ T5877] usb 5-1: USB disconnect, device number 127
[ 1692.534639][T29889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7036'.
[ 1692.543814][T29889] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7036'.
[ 1692.800058][T29893] netlink: 'syz.5.7038': attribute type 1 has an invalid length.
[ 1692.808875][T29893] netlink: 'syz.5.7038': attribute type 2 has an invalid length.
[ 1692.895594][T29895] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7039'.
[ 1692.990221][T29897] syzkaller0: entered promiscuous mode
[ 1692.997190][T29897] syzkaller0: entered allmulticast mode
[ 1693.005706][T24224] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1693.172472][T24224] usb 4-1: no configurations
[ 1693.179369][T24224] usb 4-1: can't read configurations, error -22
[ 1693.315984][T24224] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1693.360035][T29907] Cannot find add_set index 1 as target
[ 1693.517580][T24224] usb 4-1: no configurations
[ 1693.522315][T24224] usb 4-1: can't read configurations, error -22
[ 1693.557651][T24224] usb usb4-port1: attempt power cycle
[ 1693.762678][T29918] usb usb8: selecting invalid altsetting 2047
[ 1693.795756][ T5904] usb 2-1: USB disconnect, device number 95
[ 1693.905083][T24224] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1693.926294][T24224] usb 4-1: no configurations
[ 1693.931072][T24224] usb 4-1: can't read configurations, error -22
[ 1694.140006][T24224] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1694.198398][   T29] kauditd_printk_skb: 37 callbacks suppressed
[ 1694.198413][   T29] audit: type=1326 audit(1774283381.849:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1694.249552][T24224] usb 4-1: no configurations
[ 1694.254306][T24224] usb 4-1: can't read configurations, error -22
[ 1694.262697][T24224] usb usb4-port1: unable to enumerate USB device
[ 1694.307994][   T29] audit: type=1326 audit(1774283381.849:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1694.515373][   T29] audit: type=1326 audit(1774283381.849:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1694.539041][   T29] audit: type=1326 audit(1774283381.849:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1694.611608][T29925] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1694.637943][   T29] audit: type=1326 audit(1774283381.849:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1694.661516][   T29] audit: type=1326 audit(1774283381.849:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1694.698021][   T29] audit: type=1326 audit(1774283381.849:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1694.886144][   T29] audit: type=1326 audit(1774283381.849:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1695.145073][   T29] audit: type=1326 audit(1774283381.849:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1695.256312][   T29] audit: type=1326 audit(1774283381.849:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ac79c799 code=0x7ffc0000
[ 1695.455446][ T5904] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1695.607446][ T5904] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1695.636252][T29945] FAULT_INJECTION: forcing a failure.
[ 1695.636252][T29945] name failslab, interval 1, probability 0, space 0, times 0
[ 1695.650099][T29945] CPU: 1 UID: 0 PID: 29945 Comm: syz.0.7056 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1695.650129][T29945] Tainted: [L]=SOFTLOCKUP
[ 1695.650137][T29945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1695.650156][T29945] Call Trace:
[ 1695.650165][T29945]  <TASK>
[ 1695.650173][T29945]  dump_stack_lvl+0xe8/0x150
[ 1695.650205][T29945]  should_fail_ex+0x412/0x560
[ 1695.650234][T29945]  should_failslab+0xa8/0x100
[ 1695.650257][T29945]  __kmalloc_cache_noprof+0x88/0x660
[ 1695.650277][T29945]  ? keyctl_watch_key+0x180/0x4a0
[ 1695.650302][T29945]  keyctl_watch_key+0x180/0x4a0
[ 1695.650325][T29945]  __se_sys_keyctl+0x12f/0x9e0
[ 1695.650344][T29945]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 1695.650364][T29945]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1695.650385][T29945]  ? __fget_files+0x3a0/0x420
[ 1695.650410][T29945]  ? fput+0xa0/0xd0
[ 1695.650429][T29945]  ? ksys_write+0x242/0x270
[ 1695.650445][T29945]  ? __pfx_ksys_write+0x10/0x10
[ 1695.650464][T29945]  ? __x64_sys_keyctl+0x20/0xc0
[ 1695.650483][T29945]  do_syscall_64+0x14d/0xf80
[ 1695.650498][T29945]  ? trace_irq_disable+0x3b/0x150
[ 1695.650517][T29945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1695.650531][T29945]  ? clear_bhb_loop+0x40/0x90
[ 1695.650547][T29945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1695.650561][T29945] RIP: 0033:0x7fe6eb19c799
[ 1695.650575][T29945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1695.650587][T29945] RSP: 002b:00007fe6e93b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1695.650603][T29945] RAX: ffffffffffffffda RBX: 00007fe6eb416180 RCX: 00007fe6eb19c799
[ 1695.650613][T29945] RDX: 0000000000000007 RSI: 000000001a1b97fe RDI: 0000000000000020
[ 1695.650622][T29945] RBP: 00007fe6e93b4090 R08: 0000000000000000 R09: 0000000000000000
[ 1695.650631][T29945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1695.650639][T29945] R13: 00007fe6eb416218 R14: 00007fe6eb416180 R15: 00007fe6eb53fa48
[ 1695.650661][T29945]  </TASK>
[ 1695.935331][T24224] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1695.949611][ T5904] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1695.972947][ T5904] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1695.983109][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1695.991782][ T5904] usb 6-1: SerialNumber: syz
[ 1696.105550][T24224] usb 5-1: Using ep0 maxpacket: 16
[ 1696.112916][T24224] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1696.124543][T24224] usb 5-1: config 8 has an invalid interface number: 208 but max is 0
[ 1696.124952][ T5877] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 1696.151468][T24224] usb 5-1: config 8 has no interface number 0
[ 1696.162795][T24224] usb 5-1: config 8 interface 208 has no altsetting 0
[ 1696.176831][T24224] usb 5-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=24.4f
[ 1696.186739][T24224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1696.195403][T24224] usb 5-1: Product: syz
[ 1696.206006][T24224] usb 5-1: Manufacturer: syz
[ 1696.285091][T24224] usb 5-1: SerialNumber: syz
[ 1696.307302][ T5904] usb 6-1: 0:2 : does not exist
[ 1696.315280][ T5877] usb 1-1: Using ep0 maxpacket: 16
[ 1696.323714][T29955] fuse: Bad value for 'fd'
[ 1696.358817][T29956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7059'.
[ 1696.371017][T29956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7059'.
[ 1696.390143][ T5904] usb 6-1: 0:0: failed to get current value for ch 0 (-22)
[ 1696.413203][ T5877] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1696.429092][ T5877] usb 1-1: config 0 has no interface number 0
[ 1696.513257][ T5877] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1696.645127][ T5877] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1696.663246][ T5877] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[ 1696.688701][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1696.721293][ T5877] usb 1-1: config 0 descriptor??
[ 1696.745380][T29941] syzkaller0: entered promiscuous mode
[ 1696.779468][T24224] usb 5-1: USB disconnect, device number 2
[ 1696.786661][T29941] syzkaller0: entered allmulticast mode
[ 1696.858730][ T5904] usb 6-1: USB disconnect, device number 52
[ 1697.622504][T29966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7060'.
[ 1698.347264][T29969] FAULT_INJECTION: forcing a failure.
[ 1698.347264][T29969] name failslab, interval 1, probability 0, space 0, times 0
[ 1698.393669][T29969] CPU: 1 UID: 0 PID: 29969 Comm: syz.3.7061 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1698.393689][T29969] Tainted: [L]=SOFTLOCKUP
[ 1698.393693][T29969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1698.393699][T29969] Call Trace:
[ 1698.393713][T29969]  <TASK>
[ 1698.393718][T29969]  dump_stack_lvl+0xe8/0x150
[ 1698.393746][T29969]  should_fail_ex+0x412/0x560
[ 1698.393778][T29969]  should_failslab+0xa8/0x100
[ 1698.393804][T29969]  __kmalloc_noprof+0xe8/0x760
[ 1698.393824][T29969]  ? copy_from_kernel_nofault+0x1eb/0x310
[ 1698.393837][T29969]  ? tomoyo_encode+0x28b/0x550
[ 1698.393855][T29969]  tomoyo_encode+0x28b/0x550
[ 1698.393873][T29969]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1698.393906][T29969]  tomoyo_find_next_domain+0x30f/0x1aa0
[ 1698.393946][T29969]  ? __pfx_tomoyo_find_next_domain+0x10/0x10
[ 1698.393974][T29969]  ? tomoyo_bprm_check_security+0xef/0x180
[ 1698.393985][T29969]  tomoyo_bprm_check_security+0x11b/0x180
[ 1698.393998][T29969]  security_bprm_check+0x85/0x240
[ 1698.394012][T29969]  bprm_execve+0x896/0x1460
[ 1698.394032][T29969]  ? __pfx_bprm_execve+0x10/0x10
[ 1698.394055][T29969]  ? alloc_bprm+0x508/0x5c0
[ 1698.394073][T29969]  ? count+0x1cb/0x230
[ 1698.394096][T29969]  do_execveat_common+0x50d/0x690
[ 1698.394122][T29969]  __x64_sys_execveat+0xc7/0xf0
[ 1698.394135][T29969]  do_syscall_64+0x14d/0xf80
[ 1698.394147][T29969]  ? trace_irq_disable+0x3b/0x150
[ 1698.394160][T29969]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1698.394170][T29969]  ? clear_bhb_loop+0x40/0x90
[ 1698.394186][T29969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1698.394203][T29969] RIP: 0033:0x7f4c5999c799
[ 1698.394220][T29969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1698.394235][T29969] RSP: 002b:00007f4c5a7ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[ 1698.394252][T29969] RAX: ffffffffffffffda RBX: 00007f4c59c15fa0 RCX: 00007f4c5999c799
[ 1698.394264][T29969] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1698.394275][T29969] RBP: 00007f4c5a7ba090 R08: 0000000000001000 R09: 0000000000000000
[ 1698.394287][T29969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1698.394298][T29969] R13: 00007f4c59c16038 R14: 00007f4c59c15fa0 R15: 00007f4c59d3fa48
[ 1698.394329][T29969]  </TASK>
[ 1698.394349][T29969] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1698.691665][ T5877] usbhid 1-1:0.1: can't add hid device: -71
[ 1698.711855][ T5877] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[ 1698.796695][ T5877] usb 1-1: USB disconnect, device number 102
[ 1699.526286][T29985] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1703.864464][T29967] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7060'.
[ 1704.070493][T30003] FAULT_INJECTION: forcing a failure.
[ 1704.070493][T30003] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1704.098548][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7072'.
[ 1704.145140][T30003] CPU: 0 UID: 0 PID: 30003 Comm: syz.4.7073 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1704.145169][T30003] Tainted: [L]=SOFTLOCKUP
[ 1704.145176][T30003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1704.145187][T30003] Call Trace:
[ 1704.145194][T30003]  <TASK>
[ 1704.145202][T30003]  dump_stack_lvl+0xe8/0x150
[ 1704.145230][T30003]  should_fail_ex+0x412/0x560
[ 1704.145261][T30003]  _copy_from_user+0x2d/0xb0
[ 1704.145283][T30003]  ___sys_recvmsg+0x175/0x590
[ 1704.145304][T30003]  ? __lock_acquire+0x6b5/0x2cf0
[ 1704.145332][T30003]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1704.145387][T30003]  do_recvmmsg+0x334/0x800
[ 1704.145416][T30003]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1704.145449][T30003]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1704.145486][T30003]  __x64_sys_recvmmsg+0x198/0x250
[ 1704.145511][T30003]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1704.145543][T30003]  do_syscall_64+0x14d/0xf80
[ 1704.145563][T30003]  ? trace_irq_disable+0x3b/0x150
[ 1704.145589][T30003]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1704.145607][T30003]  ? clear_bhb_loop+0x40/0x90
[ 1704.145637][T30003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1704.145655][T30003] RIP: 0033:0x7fb10659c799
[ 1704.145673][T30003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1704.145688][T30003] RSP: 002b:00007fb1073e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1704.145708][T30003] RAX: ffffffffffffffda RBX: 00007fb106815fa0 RCX: 00007fb10659c799
[ 1704.145721][T30003] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000003
[ 1704.145734][T30003] RBP: 00007fb1073e7090 R08: 0000000000000000 R09: 0000000000000000
[ 1704.145745][T30003] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002
[ 1704.145757][T30003] R13: 00007fb106816038 R14: 00007fb106815fa0 R15: 00007fb10693fa48
[ 1704.145783][T30003]  </TASK>
[ 1704.145968][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7072'.
[ 1704.563603][T30015] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1704.685771][T30019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7077'.
[ 1705.517880][T30027] input: syz1 as /devices/virtual/input/input128
[ 1705.841815][T30032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7081'.
[ 1705.869797][T30027] bridge0: port 3(hsr0) entered blocking state
[ 1705.887592][T30027] bridge0: port 3(hsr0) entered disabled state
[ 1705.898066][T30027] hsr0: entered allmulticast mode
[ 1705.907765][T30027] hsr_slave_0: entered allmulticast mode
[ 1705.913465][T30027] hsr_slave_1: entered allmulticast mode
[ 1705.923314][T30027] hsr0: entered promiscuous mode
[ 1705.929885][T30027] bridge0: port 3(hsr0) entered blocking state
[ 1705.936133][T30027] bridge0: port 3(hsr0) entered forwarding state
[ 1706.182759][T30032] ipvlan3: entered allmulticast mode
[ 1706.363359][T30038] FAULT_INJECTION: forcing a failure.
[ 1706.363359][T30038] name failslab, interval 1, probability 0, space 0, times 0
[ 1706.399484][T30038] CPU: 0 UID: 0 PID: 30038 Comm: syz.3.7084 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1706.399515][T30038] Tainted: [L]=SOFTLOCKUP
[ 1706.399521][T30038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1706.399531][T30038] Call Trace:
[ 1706.399539][T30038]  <TASK>
[ 1706.399547][T30038]  dump_stack_lvl+0xe8/0x150
[ 1706.399578][T30038]  should_fail_ex+0x412/0x560
[ 1706.399610][T30038]  should_failslab+0xa8/0x100
[ 1706.399636][T30038]  __kmalloc_cache_noprof+0x88/0x660
[ 1706.399659][T30038]  ? nl80211_get_station+0x21e/0x6c0
[ 1706.399692][T30038]  nl80211_get_station+0x21e/0x6c0
[ 1706.399716][T30038]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1706.399744][T30038]  ? __pfx_nl80211_get_station+0x10/0x10
[ 1706.399766][T30038]  ? __mutex_lock+0x319/0x1300
[ 1706.399825][T30038]  ? nl80211_pre_doit+0x4f1/0x930
[ 1706.399853][T30038]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1706.399892][T30038]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1706.399936][T30038]  genl_rcv_msg+0x61c/0x7a0
[ 1706.399963][T30038]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1706.399984][T30038]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1706.400004][T30038]  ? __pfx_nl80211_get_station+0x10/0x10
[ 1706.400026][T30038]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1706.400048][T30038]  ? __lock_acquire+0x6b5/0x2cf0
[ 1706.400082][T30038]  netlink_rcv_skb+0x232/0x4b0
[ 1706.400111][T30038]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1706.400134][T30038]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1706.400177][T30038]  ? down_read+0x272/0x2e0
[ 1706.400198][T30038]  ? genl_rcv+0xd/0x40
[ 1706.400220][T30038]  genl_rcv+0x28/0x40
[ 1706.400240][T30038]  netlink_unicast+0x80f/0x9b0
[ 1706.400273][T30038]  ? __pfx_netlink_unicast+0x10/0x10
[ 1706.400299][T30038]  ? netlink_sendmsg+0x650/0xb40
[ 1706.400314][T30038]  ? skb_put+0x11b/0x210
[ 1706.400338][T30038]  netlink_sendmsg+0x813/0xb40
[ 1706.400364][T30038]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1706.400384][T30038]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1706.400412][T30038]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1706.400436][T30038]  ____sys_sendmsg+0x972/0x9f0
[ 1706.400466][T30038]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1706.400497][T30038]  ? import_iovec+0x73/0xa0
[ 1706.400521][T30038]  ___sys_sendmsg+0x2a5/0x360
[ 1706.400546][T30038]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1706.400601][T30038]  ? __fget_files+0x2a/0x420
[ 1706.400626][T30038]  ? __fget_files+0x3a0/0x420
[ 1706.400662][T30038]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1706.400686][T30038]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1706.400714][T30038]  ? __pfx_ksys_write+0x10/0x10
[ 1706.400746][T30038]  do_syscall_64+0x14d/0xf80
[ 1706.400766][T30038]  ? trace_irq_disable+0x3b/0x150
[ 1706.400792][T30038]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1706.400810][T30038]  ? clear_bhb_loop+0x40/0x90
[ 1706.400833][T30038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1706.400851][T30038] RIP: 0033:0x7f4c5999c799
[ 1706.400876][T30038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1706.400892][T30038] RSP: 002b:00007f4c5a7ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1706.400912][T30038] RAX: ffffffffffffffda RBX: 00007f4c59c15fa0 RCX: 00007f4c5999c799
[ 1706.400925][T30038] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[ 1706.400937][T30038] RBP: 00007f4c5a7ba090 R08: 0000000000000000 R09: 0000000000000000
[ 1706.400949][T30038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1706.400959][T30038] R13: 00007f4c59c16038 R14: 00007f4c59c15fa0 R15: 00007f4c59d3fa48
[ 1706.400990][T30038]  </TASK>
[ 1706.828427][ T5906] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[ 1707.017241][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1707.165618][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1707.183813][ T5906] usb 5-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[ 1707.205764][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1707.348521][ T5906] usb 5-1: config 0 descriptor??
[ 1707.369179][T30036] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1707.716007][T30054] blktrace: Concurrent blktraces are not allowed on loop4
[ 1707.865158][    C1] 
[ 1707.867522][    C1] ============================================
[ 1707.873750][    C1] WARNING: possible recursive locking detected
[ 1707.879950][    C1] syzkaller #0 Tainted: G             L     
[ 1707.885922][    C1] --------------------------------------------
[ 1707.892055][    C1] syz-executor/26419 is trying to acquire lock:
[ 1707.898271][    C1] ffff888097eb4fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[ 1707.907441][    C1] 
[ 1707.907441][    C1] but task is already holding lock:
[ 1707.914803][    C1] ffff888053798fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0
[ 1707.925096][    C1] 
[ 1707.925096][    C1] other info that might help us debug this:
[ 1707.933141][    C1]  Possible unsafe locking scenario:
[ 1707.933141][    C1] 
[ 1707.940634][    C1]        CPU0
[ 1707.943912][    C1]        ----
[ 1707.947217][    C1]   lock(&hsr->seqnr_lock);
[ 1707.951724][    C1]   lock(&hsr->seqnr_lock);
[ 1707.956205][    C1] 
[ 1707.956205][    C1]  *** DEADLOCK ***
[ 1707.956205][    C1] 
[ 1707.964324][    C1]  May be due to missing lock nesting notation
[ 1707.964324][    C1] 
[ 1707.972621][    C1] 13 locks held by syz-executor/26419:
[ 1707.978056][    C1]  #0: ffff888028d9a420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1707.987242][    C1]  #1: ffff888028d51ca8 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610
[ 1707.998015][    C1]  #2: ffffffff8ee76998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560
[ 1708.007213][    C1]  #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: prepend_path+0x4d/0x830
[ 1708.016323][    C1]  #4: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: prepend_path+0x4d/0x830
[ 1708.025436][    C1]  #5: ffffc90000a08ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640
[ 1708.035417][    C1]  #6: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370
[ 1708.044528][    C1]  #7: ffff888053798fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0
[ 1708.055202][    C1]  #8: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860
[ 1708.064666][    C1]  #9: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890
[ 1708.074578][    C1]  #10: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980
[ 1708.083966][    C1]  #11: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890
[ 1708.093958][    C1]  #12: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[ 1708.103160][    C1] 
[ 1708.103160][    C1] stack backtrace:
[ 1708.109030][    C1] CPU: 1 UID: 0 PID: 26419 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1708.109046][    C1] Tainted: [L]=SOFTLOCKUP
[ 1708.109050][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1708.109057][    C1] Call Trace:
[ 1708.109065][    C1]  <IRQ>
[ 1708.109070][    C1]  dump_stack_lvl+0xe8/0x150
[ 1708.109088][    C1]  print_deadlock_bug+0x279/0x290
[ 1708.109105][    C1]  __lock_acquire+0x253f/0x2cf0
[ 1708.109120][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[ 1708.109134][    C1]  lock_acquire+0xf0/0x2e0
[ 1708.109146][    C1]  ? hsr_dev_xmit+0x237/0x360
[ 1708.109162][    C1]  ? hsr_dev_xmit+0x237/0x360
[ 1708.109175][    C1]  _raw_spin_lock_bh+0x36/0x50
[ 1708.109186][    C1]  ? hsr_dev_xmit+0x237/0x360
[ 1708.109198][    C1]  hsr_dev_xmit+0x237/0x360
[ 1708.109211][    C1]  ? hsr_dev_xmit+0x2d/0x360
[ 1708.109225][    C1]  dev_hard_start_xmit+0x2d8/0x870
[ 1708.109245][    C1]  __dev_queue_xmit+0x16d1/0x3890
[ 1708.109259][    C1]  ? __dev_queue_xmit+0x277/0x3890
[ 1708.109272][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1708.109283][    C1]  ? ebt_do_table+0x2665/0x2830
[ 1708.109298][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[ 1708.109313][    C1]  ? ebt_do_table+0x2665/0x2830
[ 1708.109328][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1708.109345][    C1]  ? br_nf_post_routing+0x219/0xfe0
[ 1708.109360][    C1]  br_dev_queue_push_xmit+0x370/0x4a0
[ 1708.109373][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[ 1708.109386][    C1]  NF_HOOK+0x360/0x3f0
[ 1708.109398][    C1]  ? NF_HOOK+0xa2/0x3f0
[ 1708.109409][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[ 1708.109420][    C1]  ? read_seqbegin+0xf9/0x180
[ 1708.109433][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[ 1708.109447][    C1]  br_forward_finish+0xd3/0x130
[ 1708.109458][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[ 1708.109470][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[ 1708.109482][    C1]  NF_HOOK+0x360/0x3f0
[ 1708.109494][    C1]  ? NF_HOOK+0xa2/0x3f0
[ 1708.109505][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[ 1708.109517][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[ 1708.109529][    C1]  ? __skb_clone+0x483/0x7a0
[ 1708.109540][    C1]  ? br_handle_vlan+0x61/0x530
[ 1708.109612][    C1]  __br_forward+0x397/0x540
[ 1708.109624][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[ 1708.109636][    C1]  br_flood+0x6ee/0xb80
[ 1708.109651][    C1]  ? br_dev_xmit+0x193/0x1980
[ 1708.109666][    C1]  br_dev_xmit+0x12bd/0x1980
[ 1708.109680][    C1]  ? br_dev_xmit+0x193/0x1980
[ 1708.109696][    C1]  ? __pfx_br_dev_xmit+0x10/0x10
[ 1708.109710][    C1]  ? __skb_get_hash_net+0x13f/0x2e0
[ 1708.109750][    C1]  ? __pfx___skb_get_hash_net+0x10/0x10
[ 1708.109761][    C1]  ? qdisc_pkt_len_segs_init+0x2c4/0x970
[ 1708.109774][    C1]  ? skb_network_protocol+0x234/0x3f0
[ 1708.109786][    C1]  ? __pfx_passthru_features_check+0x10/0x10
[ 1708.109799][    C1]  dev_hard_start_xmit+0x2d8/0x870
[ 1708.109814][    C1]  __dev_queue_xmit+0x16d1/0x3890
[ 1708.109826][    C1]  ? handle_softirqs+0x22a/0x870
[ 1708.109839][    C1]  ? read_seqbegin+0xf9/0x180
[ 1708.109850][    C1]  ? prepend_path+0x22a/0x830
[ 1708.109862][    C1]  ? __dev_queue_xmit+0x277/0x3890
[ 1708.109873][    C1]  ? __se_sys_unlink+0x2e/0x140
[ 1708.109886][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1708.109898][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1708.109912][    C1]  ? __copy_skb_header+0xa3/0x4a0
[ 1708.109923][    C1]  ? __asan_memcpy+0x40/0x70
[ 1708.109932][    C1]  ? __skb_clone+0x63/0x7a0
[ 1708.109944][    C1]  ? __skb_clone+0x483/0x7a0
[ 1708.109954][    C1]  ? hsr_addr_subst_dest+0x30d/0xa90
[ 1708.109968][    C1]  ? skb_clone+0x246/0x3a0
[ 1708.109980][    C1]  hsr_forward_skb+0x157b/0x2860
[ 1708.109991][    C1]  ? hsr_forward_skb+0xb3/0x2860
[ 1708.110001][    C1]  ? __pfx_hsr_forward_skb+0x10/0x10
[ 1708.110009][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1708.110020][    C1]  ? __asan_memset+0x22/0x50
[ 1708.110029][    C1]  ? __skb_pad+0x405/0x610
[ 1708.110042][    C1]  send_hsr_supervision_frame+0x731/0xcb0
[ 1708.110059][    C1]  ? __pfx_send_hsr_supervision_frame+0x10/0x10
[ 1708.110074][    C1]  hsr_announce+0x1db/0x370
[ 1708.110087][    C1]  ? hsr_announce+0x89/0x370
[ 1708.110100][    C1]  ? __pfx_hsr_announce+0x10/0x10
[ 1708.110115][    C1]  call_timer_fn+0x192/0x640
[ 1708.110128][    C1]  ? __pfx_hsr_announce+0x10/0x10
[ 1708.110141][    C1]  ? call_timer_fn+0xd4/0x640
[ 1708.110153][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 1708.110168][    C1]  ? __pfx_hsr_announce+0x10/0x10
[ 1708.110181][    C1]  __run_timer_base+0x652/0x8b0
[ 1708.110193][    C1]  ? ktime_get+0x45/0x200
[ 1708.110204][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1708.110217][    C1]  ? sched_clock_cpu+0x74/0x440
[ 1708.110236][    C1]  run_timer_softirq+0xb7/0x170
[ 1708.110248][    C1]  handle_softirqs+0x22a/0x870
[ 1708.110261][    C1]  ? __irq_exit_rcu+0x5f/0x150
[ 1708.110275][    C1]  __irq_exit_rcu+0x5f/0x150
[ 1708.110288][    C1]  irq_exit_rcu+0x9/0x30
[ 1708.110300][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1708.110312][    C1]  </IRQ>
[ 1708.110316][    C1]  <TASK>
[ 1708.110320][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1708.110332][    C1] RIP: 0010:read_seqbegin+0xf9/0x180
[ 1708.110346][    C1] Code: 85 e4 75 16 e8 48 09 72 ff eb 15 e8 41 09 72 ff e8 9c 19 5b 09 4d 85 e4 74 ea e8 32 09 72 ff fb 49 be 00 00 00 00 00 fc ff df <49> 89 df 49 c1 ef 03 43 0f b6 04 37 84 c0 75 2a 8b 2b 89 ee 83 e6
[ 1708.110355][    C1] RSP: 0018:ffffc900051ff8c8 EFLAGS: 00000293
[ 1708.110365][    C1] RAX: ffffffff825398fe RBX: ffffffff8e416880 RCX: ffff88801b778000
[ 1708.110373][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1708.110380][    C1] RBP: ffffc900051ff9c8 R08: ffffffff9011b2b7 R09: 1ffffffff2023656
[ 1708.110388][    C1] R10: dffffc0000000000 R11: fffffbfff2023657 R12: 0000000000000200
[ 1708.110395][    C1] R13: ffff888051138098 R14: dffffc0000000000 R15: ffffffff8253799a
[ 1708.110403][    C1]  ? prepend_path+0x22a/0x830
[ 1708.110415][    C1]  ? read_seqbegin+0xee/0x180
[ 1708.110428][    C1]  ? read_seqbegin+0xee/0x180
[ 1708.110440][    C1]  prepend_path+0x22a/0x830
[ 1708.110452][    C1]  ? prepend_path+0x4d/0x830
[ 1708.110465][    C1]  d_absolute_path+0xa1/0x140
[ 1708.110477][    C1]  tomoyo_realpath_from_path+0x2c8/0x5d0
[ 1708.110496][    C1]  tomoyo_path_perm+0x283/0x560
[ 1708.110509][    C1]  ? tomoyo_path_perm+0x251/0x560
[ 1708.110522][    C1]  ? __pfx_tomoyo_path_perm+0x10/0x10
[ 1708.110539][    C1]  ? __d_lookup+0x66/0x780
[ 1708.110550][    C1]  ? __pfx_current_check_access_path+0x10/0x10
[ 1708.110594][    C1]  ? __d_lookup+0x66/0x780
[ 1708.110605][    C1]  ? __d_lookup+0x66/0x780
[ 1708.110615][    C1]  ? __d_lookup+0x6df/0x780
[ 1708.110625][    C1]  tomoyo_path_unlink+0xaa/0xf0
[ 1708.110636][    C1]  ? __pfx_tomoyo_path_unlink+0x10/0x10
[ 1708.110647][    C1]  ? d_lookup+0x80/0xa0
[ 1708.110658][    C1]  security_path_unlink+0x15f/0x330
[ 1708.110669][    C1]  filename_unlinkat+0x349/0x610
[ 1708.110683][    C1]  ? __pfx_filename_unlinkat+0x10/0x10
[ 1708.110697][    C1]  ? do_getname+0x151/0x250
[ 1708.110710][    C1]  __se_sys_unlink+0x2e/0x140
[ 1708.110723][    C1]  do_syscall_64+0x14d/0xf80
[ 1708.110735][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1708.110745][    C1]  ? clear_bhb_loop+0x40/0x90
[ 1708.110757][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1708.110767][    C1] RIP: 0033:0x7fb7ac79b887
[ 1708.110778][    C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1708.110787][    C1] RSP: 002b:00007fb7acb3ecb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[ 1708.110797][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb7ac79b887
[ 1708.110804][    C1] RDX: 00007fb7acb3ece0 RSI: 00007fb7acb3ed70 RDI: 00007fb7acb3ed70
[ 1708.110811][    C1] RBP: 00007fb7acb3ed70 R08: 00007fb7acb3fd70 R09: 00000000ffffffff
[ 1708.110818][    C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fb7acb3fe00
[ 1708.110825][    C1] R13: 00007fb7ac832050 R14: 00000000001a06df R15: 00007fb7acb3fe40
[ 1708.110835][    C1]  </TASK>
[ 1710.456785][ T5904] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1710.622053][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[ 1710.658921][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1710.702612][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1710.766935][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1710.786679][ T5906] usbhid 5-1:0.0: can't add hid device: -71
[ 1710.792670][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1710.807892][ T5904] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 1710.818180][ T5906] usb 5-1: USB disconnect, device number 3
[ 1710.836478][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1710.858834][ T5904] usb 2-1: Product: syz
[ 1710.872482][ T5904] usb 2-1: Manufacturer: syz
[ 1710.883964][ T5904] usb 2-1: SerialNumber: syz
[ 1710.897318][ T5904] usb 2-1: config 0 descriptor??
[ 1710.912538][ T5904] iguanair 2-1:0.0: failed to get version
[ 1710.927683][ T5904] iguanair 2-1:0.0: probe with driver iguanair failed with error -90
[ 1711.133031][ T5877] usb 2-1: USB disconnect, device number 96