last executing test programs:

11m4.965770606s ago: executing program 32 (id=4027):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0)
socket(0x1d, 0x2, 0x6)
pipe(&(0x7f0000000600)={<r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x7f, 0x5, 0x101, 0x1, 0x7, '\x00', 0x0, r4, 0x3, 0x1, 0x1, 0x2}, 0x50)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000)
r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xdc, r9, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4a9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @empty, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0)
r10 = syz_open_dev$vim2m(&(0x7f0000000180), 0x100007, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})

11m4.960297401s ago: executing program 2 (id=4030):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000000c0)={0x1, 0x8, [0x5, 0xd]})
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10)
sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00')
execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x480, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a600050", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff0000000008000800090300"], 0x34}}, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000000)={&(0x7f0000000200)=[{0x29, 0x7801, 0x0, 0x0}, {0x1, 0x8000, 0x0, 0x0}], 0x2})
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000180)={@remote, @private=0xa010102, 0x0, "614af285791a63abd0f993af8077b5cd01e02d642831683fdc3fd440829c82ae", 0x6, 0x0, 0x0, 0x192c}, 0x3c)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00')
preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1)
r8 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r8)
fcntl$setstatus(r8, 0x4, 0x2c00)
r9 = gettid()
fcntl$setown(r8, 0x8, r9)
syz_open_procfs(r9, &(0x7f0000000100)='net/rfcomm\x00')

11m2.008007441s ago: executing program 2 (id=4043):
syz_open_dev$video4linux(0x0, 0xb9000000, 0xc00c0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
unshare(0x8040480)
socket$unix(0x1, 0x1, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
fsopen(&(0x7f0000000080)='qnx4\x00', 0x1)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0)

11m1.630610097s ago: executing program 2 (id=4045):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x5c, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x6, 0x7, 0x72}, 0x2c)

11m1.374118652s ago: executing program 2 (id=4047):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/144]}, 0x108)
socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x8044080)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d03e, 0x0, 0x0, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000180a01080000000000000a000002140000001100010000000000000000000500002a0000"], 0x3c}}, 0x800)
sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[], 0x70}}, 0x200080d7)
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0xe000, 0x1000, 0xfffffdfe, 0x1, 0x3})
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x53abd162a59540ea, 0xf)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
pwritev(r4, &(0x7f0000000a80)=[{&(0x7f0000001580)="963444eb6d3ecee79c84a9a9ee388e7f2471453c0f2775bd8b33316828de0c4127cd8616a3b5756b6b8fa54c1d6d3b43770f5d3c92445d5f57cfd4551184d0986a439649ba9180a0fcf86fd6a2bf23edb3ece357bf0c34af42fb32af54bc4387ec26e592b30a24f6c68574a30c2b9295b4d441b7dfc06bfd147bc15f0201f779cbf416d2fd0ae906f2f26e46586d5849656c83ff51f52beecdb3cc73895763e2dee0a98a67a2fc128c24c396bdb8a7baf94c7cb2619c4ecb706b3e0e3b52b721dc2256a667cf03616bed56a5c205f4b6ce6fa360329a5e6a7685df63efe6077ce2c18e54fc72c512852c1a168e96b2aac9e85cadef4848f6a197af5a6ef19fa021f495620d999b682889d003a4d85cb9e7aeb8e1904fa4689651b3f42291a5acffd95e32dbbcc12050d8973c8affad217c71142205098a390139e5459640f6f8211099c4d5676a95f74257a7ccac2764ed4bdc1a8b9856eda6a43ac1f5f269e298f882f8aa8ca1eb06912e51a6cb53bda50b8e7a15537ced73c8fb6cb0676afb9a61dffb45406ad6f0c04d771c073abf0dd898e8d14524c4062fdbb71f1a820263068cea1d15eb47b88d9d9d5ac7170438bb9daf751f371b2130b6e90ce1df294e5c66ff0f603ec6ad5e6d38ce53e91c7cfc8184809085b22b37d8ccdddd23e95e5d1b3915ab0d0e5177193575cd5a7c06d948763f7ef3f9fcbc0f6d023cb42b1c91ae2ed5215e49ab8a2faa0856af32b585170ea17f24c83abe5763ae342b3b2c84d2aea46ba1f88e1973d8f4478944e2ef6d4363c89d6eea5f3b36d9b14f1656b706877981ee1f33b4c3d0e278330596ca6ebaeb3ee16bb2d8f8378d3b1cbd9832364a585980f2714f4d29f984728d54de34921f1f4a2d1f38fa572fb20c7b8b2b22312f8abee87c181519daecaae20bf89e7140a39fc1a6c5165efbeda0a402a321537a51e521bd76067d77420836ef475e4cf751c52d42eb3cf15a9e4e042a1e4e50b99915fea196d4c2159f7793fd901445c07b5d53426ebe7039c5cdb51093cf7e8f6a9777a59a7d303936268955e25c6d2e409adac11deba28cd9b0395caf64af193c907f1ebf53cd25aaf6ae77984310ca23ecceb4e9996afcbf788c550b2c7edea4e08fb691631968a2eafaabcfe5054903d6187e6e7c63befbc46b05714469b529db229a0476cacd8c5c19feb365f5d0c27790b7e30e31c2811954fa2b2c7b5487a609f483db9d0feaf5046b5114c79afcc1164425446fbb9f307166b211104ee13f9a05b6748456dcd389eca04e273bbac4c021625dab59d0e5ccf2a4bc73d9ab389703fe6de20a23518df0dfbdadecd03e8cc5f737fc6fe024a12e723f08d8993dccbe713ce3bcad5bf40fb99963a3368789c79c02842a809a11f5dd8b5a862a514e138fe5da787484db8da97ba0c3b42f9da680519d4bbc398a90e2cd7a82198752685eba456aa4dde9f4fa5fd9cf5058b2afd4a960af04d3450bde98537009ea992c222267bde6dbf588d690ad0f63570cc68e5d41f68c8c4857c609fab15711278f97a4f2311877ca454ee883e8a822d7dfaa72790682b778aaade13a162e0b221ae68d168771b4ced9113acefb784fe1c74ce789d13b2621883e00b8323bf55030b8fd39b744e41361d4f574d8eb4f2afa41ed4d36a6f32940f228c7a92adaf874e5333f248dd67b97605fa8b2ba16eb6ffb35fb1e27e0eabf272916066cc3b0dc12203180e16e797f63045f2722c75c04b9c86b95c929e71f32eac9ee621e03a1dcb5dd71d562a509934fccfd26ebf8142aeee1c81819867eaffcf5f1a9d5ec13acfdc9df54f328d1ee2ec4cc4847ca3da55014e3b9a80807424b1973e54ff9488497beff2698d1d51f2458cece5c2c08ea925c2c8a9beb8857542017a6dbfca644bf97781c16e12bb333373a4b32d3447a3a30cbe152d47aa9fd02bf7827409733789723fd312f10eebdab5e03fdbf0cb3508ad6fffd09da05901872db0705722b65502cbc35d1f16d4449bc095374bfac1bbc347bafe985a53eaa9db40eea2e710cbbda92bff1dda5e8f88920ba92db8316f5c13de1d0a7c4dcb32f59c40b6f4b9845e5132b4c3bd4eec312c88307d52182dcd0b153d52b9173534067bdcc13793d1f48685215876d5a2684b2224066ff880fad56a1554ac507287736beeef6820df80419a60a653c5ce8c530359be34ba86caa04f6229a10f6075e0915063b7a880cc23fadb8c1a0a6ef4ffa6e16954b08c13f99378daf617aaa82201c70bbedc50bd1b066299503f718d44744827cf8e10b54b1a6a6c4f82db651c29e9a32ffc0a5d5a9ca46ced983cc53172bd7154093279cf7433c0da9422db4489d29e22f1a0e71b2f485df6bb29f7cc9e8cd94cf6c5cdcb8058d97fa67f5a0ce30e30c639f4dd5ab46f4386e282653bf8ced95a0ea123e920a6a9ebee0fe279543d47869999e67750cbbe1e192d72b7f3a8b5756d46a810b35b48b3b8d21ff0819b4c0d25a3a20b5c4b5a920054c3e9091b70e01c774c53b929208b03503505eab97259a3fad9c84d238b5a96eb9e38d212eea2c7d2b20e50466318f52635589e012ad047c284e187d75859f701e2a256619bf04e51dd6eb27cdeaac6994516efe0ff34b287a96a13f4121fe2d77d16e19319aaace8d24ea37e4d891f8e9c1a933582e7ac1c15f47da7794f2bcf9ff988cdc3f8213a45f7db1d28919f2f6b1a210735cacff924d35c9185c320111fc1175a514758c47990c9e7ddd348bca4658c58e115466e479f29a3040cb32a240d2a1745e47946a2e277fc09e3570e79f7b0023200d380d106fc11b595c693e0224555088c9f4709e647fe7c172fa04b33385acb6bca60026b7dc2621cf84492a537cd860dc8f8eb6cf9e4a5ae7cba3004d7bc0281abda106852d6f38f0a8bf240af0861a3c8f00eb7e5479fd925d9d13a79990798371633e4c313f3a2052652bd990b53330e04dd9a2eea906f8f2b186e7f17992fd232e862801af3a45d2ed4774ae650f7c5bd6d138f689072827a5ad8f5d0fb3a7a3d3a7cbf49d21357abe1af74417a3d7e76cc6556975888bfa1b03149ec856c78fd6e30c3672732f0842f11fb9a6bf646d3e2c85c2787ad6dc843219813193d9805df8ff363380d54c5f118bda4287f35fba961f995e286e828464df6cd4731eec6913f96d4e992102c3ffca521563b435d50553abcfc49b8a1e879f4d377fa3d7652293ea5e52741277ce9b001a7c231983b92b44742189c425175b36883bff29643afcc4d6b8830e1e638c3a1060122dfb3310efcc2d18efcf5467df69f0b4dbf676f73a365b8f69891d4d33f0e64eedf26e7300bc7bc742516d458d51888e6a00029e5798c90c453142189e007a5971e96a18bb095f7048224cf20bd4ff4e29f85aa371ac3375e20b33cebd473b31d2c3b8ab31262c7498d047fa0af21b2000358544cbee14f9aa2440692e5dcd3ce565c20bd9211fddc45ab0f02facf1e7df04df6bc7e377a84daef24b4a1cdb6267a5482fe40ec479be0e0845e409bc49b4be0270972d51e568811cf1bbac5687c24be7c5cbf7678c18b4650f3eaec16346830ace6c0701c5ad862ffc4562ac0bea7172c010c892dd3f58cf942a126ee3089275535c8540542c05f8b9d094cfcf6a588bb9bc620c286bad9963b05b1e99203e6bf52b48289757f1f4a9b76732e4247a5bf5defba855941dbca2faeaad8d4f14aa4b9a228c00116da4ea1dee2d171c20d0a1e9b17f95af457ebdd8c61a37fb776e9788f3fa072f6c2d3d7925108f4f1476af1d6e3e9113f5b3cc5f36caad94110feaeb6c477edac4a9d8b03d23fc6ddad773edd2e706ab300b32e2c05bf16a6b8dc3ba1466f1cb0bce5e553e294dbeb03cd6f5cf0c9f4dfa3d4f5bfec47e350f703dcd05433f37d9054d5c88e0a3b57a146be520b94b006b96bbb91174e55ea6581d383f2670ce09d41eb5fd132fa17309cc47e6ddde4ae09fb12dd83c2d69e370a8f3919dde3c51e4a9d7b206cd9d9eb20fb185f3c2d891e4648d44b3bc387e51f90856840fec6a77ec79140f536e259117c4efe4b2b5de9142e1370b0a49470e46543070bbcc62b8bdbc760ec610083feec0bbac512529c8db7359ee567c571c9578a1348eb312d2b9cd39d948332e875e64b50ce9d783d40da76ad9ec85c60cb1e578fda81a3043e6bc4685b79f038410a7663489d04809372939cc8dfd6f792e0bb7de2c37ed48a9325d1accdad58348cd1984af1417feda33548d52451954ae822944eeaa81c9fb97962f9741eebba263f97adc0f7fd40f4077a8e1d93abfdf5afa1a636f40d4c419874d594a20b1323e571ceaca7ff904cba7e4f33480ded0b0be8f2b8c3c2beacd083aa4d2b11354b6b80a5cec4596c8b293fbba8c9f0f4a3c026a5c44f5829f11e3cc750820441df06fe29cc45179b59b3a7756d778f4fe1fc6b59239e5dad6a48d42f67bbb071f0fe60eaf149bf7e3d02b591658865b9c730110d8571de2996f422858ae0810d9f785ca9f3b4d768214ebd2f9869f23b3a68c4d63dacb2d8c75da4efe66e1bbebad8ece91c5d7d33dd169d3d4cb4a4f1f32336745f7743227255750e8aece1162e08b4c8e72b6aa21704d951543496c0c3cc721b31c425578ff44e3dc67bcc8711cc1ba58e45d4e29326143c4a851d8a70faa7755a1b958854d637415bcb1aeacb24100c5947a73b7857478b8c4d8e46c46a449e7f699dd4f43f4f5a3a37157d49fbc5ddc26ca8c86e8928670b343eee05afaf84235f292f2509337b135a00bf46af64e6bc7dab03cb185c92a1c603d7c5c17e0b1a699702fb2af6a18c9e0453be4fca4ff72d89707afe0baacd9eb63fbb0acc54a00f844ce95d6f8f7b50a950d2167c3e8693b826fdd23ff61d70001182f7b94b609b339ef97243f401f17b6e8a38b3f03416c0d0ec380e497457428101b1d499bf47e9590b3df30e3dc0b3810dbdf848c6ec04fa58013adcd3fcb638904151900a1456f775a4a95c944cba7d1c248b1f937f04ffce2d93069a2736daeea196ad58827440a6fb719e3c72d627f0e4334489daaf182be19f1718535e0ba63916e38b2dd24a5149f40538d4821b286cb545dfff57311a3d0473abcf81fd9fde4ab085eefc6231d1729c85e6fe652d9d5d708c20902d36af87410ecf48065ee855abdac9c9fcac3ffde144bce927cd47902ab309f9d3bd797a29e99a8b1f6f97328313c9dc26510e9848d5ded401ab3bb08b28f96c0f76291918597c455d2108cc308deecdb9453a99807811b1df288121859088368d52a0e7b17b91315d5ae581d78e81c42b29c067660534d9337f729cd5d36eb6266bb0df5886937a8ac11ebb7dbaa5159bfe8a96c5cd550a45b0eceb5554d17c884632c441b68687f4e5e0fab8cc5647cc4d630d8974b5e5e1b3db8ab2fad5c641674428be52d174c94b275892cbccfd217d90f029f409698c045b01fe1ef5dfe95f2aab5849cfa545d7aa77f709f556d735587adaef684693b9bb83c8f66ac18f88561dbd1193616f5fd512a78c11a8e5036de0e30c29aa132a7ef4aef381f53243f3cb7a2ec303ad9201d61f8440eefe130cc3b460ff07c51b257504efcc824aaf7965a38d14ccd9b14acfe3ea52288118a9a42c725a2b9bfc85ef88be38f288d191dd3b568bf987a0a69c4bef278b21b84942745f7ff4efad2535890518024f19257b2504cb74844e4bc74cd567bbaf73cb404ab93ff45c914d5d421172dc136e2e70a445dd769d4d7a385bf0887065fa8a36d63331e5122d99d", 0x1000}, {&(0x7f00000004c0)="d2734045bbc81d0c736f7a3887539fae42ec18f5a52668f1662727743701f8ec0c75522b87dc426ba3209cd65fb0c0265ed459df8773fa5043cb16a52ba0b761ee51504c85f1502264335355058dc5b6aab788af9e44a3ff7bb624393199c723b39c4d6928509466a25405c31528fdcc5cc567c37f8f45eb0ee2c1a5757a60edb81f92b27706f73e2fca7a355e5faf3ec2ec41c2205eb8a8b79ea770ecb4c048a7f6f30affab2ebca508a745221ca4278259ec8cf7311f84fb3b6cf40c14f45e90b48ab32733c0eea9f5486efa84942d13e534db17e4103e8dd1fcffec6f046417731c89ce399c6fe8d15555d8ddb20df3c114df7bef8c5f", 0xf8}, {&(0x7f0000000900)="e7effc8d42715d316e24ba267749f4ff7bf716fb0a3b850f46bc1c1c6aa0ab66a405e58a8b10a8a825eb2e90a0991338132b12ac4945cb5dfb97e3b19310fe2f6a8bb4fed8eee2388523a3db62cf912a2651b7651bdeb32881241d3caf817f700c01353b211ac12ccb3b8472ba4c10689ac25e5697f5ca765c6cc7902bfe629ab5e3f7175acbf2b71279042b403f6b5d6825e51ab55b2b741a5f26fd7ca86b653272edc55b57bb71a29ef278efbfac9bf99a6476dbd7f82dd119306dc95dd8af97901254c47aa69828449a1e4fbfd45c89550559034d71e456ee6e42b16afaa89fbf48815d52bedcca3550b55c0b28e6a8fd", 0xf2}, {&(0x7f0000000600)="ed28fdb6cb955f3e28a89ab34e63c0413580da32b331584bf7f5d45babaeef05f58de2c59569b2", 0x27}, {&(0x7f0000000a00)="c653d387677b2e2c1866f80c68d3b3e48f2319d33b054507e55c2a96c28fe563270de74c2ad90a7cae4506db4188fce4d5d2f04abd86df4e8bdcf287d6fab3f16bc738", 0x43}, {&(0x7f0000000680)="8e1ef8e44a4229b01efcb8f75fa1e37d0e32b6d1f1a375d9e27384a09cba4a620c48f5fd38af33334b9a38f966a31d762f24d13f8573556e", 0x38}], 0x6, 0x2, 0x80000001)
r9 = socket$packet(0x11, 0x2, 0x300)
syz_mount_image$fuse(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x1ac21, &(0x7f0000000800)=ANY=[@ANYRESDEC=r3, @ANYRES8=r1, @ANYBLOB="0da4d1fe4719daff3ce849d8c214a91aa120661ec3f61ccabfe9d1e63dc0a056dcbc06eab8941e0fa391267523278194631a825dfea278e1ee02fabf1897645b1f5e2eda29b5aecaccea75381a1ef5a88eac96b47973afe600935612de73748af787e7ea818033e937e353ebad1d7871c7c6d127311500b4e897faade7bd92146423793e728a2cd296cd92aa8f53df729c24f6", @ANYRESDEC=0x0, @ANYRES8, @ANYRES8, @ANYRES64=r1, @ANYRES8=r5, @ANYRES32=r9, @ANYRESDEC=r7], 0x1, 0x0, &(0x7f0000000340)="11adb9084e3694d5838666985d02edee187124695e6bd1100eeabdd12d2b07ef43f5a81e89b92abf00e5fc550d56ff3e0631de3463727ecc1f24b3a548403d580f35a82122307fdd6e72b632927f80546927db408aec93a830af")

11m0.8631725s ago: executing program 2 (id=4052):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2a02, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@hash}, {@smackfshat}, {@fowner_gt}]}}, 0x1, 0x0, &(0x7f0000000100))
symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r6, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb, 0x5f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x700)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, r8, 0x2)
r9 = fanotify_init(0x200, 0x2)
fanotify_mark(r9, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

11m0.589216167s ago: executing program 3 (id=4056):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x5c, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x6, 0x7, 0x72}, 0x2c)

11m0.473704919s ago: executing program 3 (id=4057):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = syz_io_uring_setup(0x4aa, 0x0, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}})
io_uring_enter(r1, 0x38c5, 0x2000000, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2, 0xfffffffc}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

11m0.339808791s ago: executing program 2 (id=4058):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001c80)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, 0x0}}], 0x1, 0x20004840)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x28a, 0x0, 0x5401691f}]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
shutdown(r0, 0x1)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r9, 0x0, 0x7ffff000, 0x0)

10m59.868454989s ago: executing program 33 (id=4058):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001c80)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, 0x0}}], 0x1, 0x20004840)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x28a, 0x0, 0x5401691f}]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
shutdown(r0, 0x1)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r9, 0x0, 0x7ffff000, 0x0)

10m59.843751957s ago: executing program 3 (id=4060):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a70002", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x80000003, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) (async)
getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)

10m59.539003164s ago: executing program 3 (id=4061):
r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d03e, 0x0, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x53abd162a59540ea, 0xf)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
r6 = socket$packet(0x11, 0x2, 0x300)
syz_mount_image$fuse(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x1ac21, &(0x7f0000000800)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYBLOB="0da4d1fe4719daff3ce849d8c214a91aa120661ec3f61ccabfe9d1e63dc0a056dcbc06eab8941e0fa391267523278194631a825dfea278e1ee02fabf1897645b1f5e2eda29b5aecaccea75381a1ef5a88eac96b47973afe600935612de73748af787e7ea818033e937e353ebad1d7871c7c6d127311500b4e897faade7bd92146423793e728a2cd296cd92aa8f53df729c24f6", @ANYRESDEC=0x0, @ANYRES8, @ANYRES8, @ANYRES64=r0, @ANYRES8=r3, @ANYRES32=r6, @ANYRESDEC=r5], 0x1, 0x0, &(0x7f0000000340)="11adb9084e3694d5838666985d02edee187124695e6bd1100eeabdd12d2b07ef43f5a81e89b92abf00e5fc550d56ff3e0631de3463727ecc1f24b3a548403d580f35a82122307fdd6e72b632927f80546927db408aec93a830af")

10m58.899936354s ago: executing program 3 (id=4062):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = add_key(&(0x7f00000002c0)='.dead\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x47)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lchown(0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}, 0x1, 0x0, 0x0, 0x1c4}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020400000c00024000000000000000010900010073797a30000000002cff7f00000a0000000900010073797a30000000000900030073797a32f02008bce71fd70c3f2f5508a254cfbd68c3d906c0c01ff9985ba8174ce552ece3f455177cfac65fadcfaf0fb59ed93256ea"], 0x80}}, 0x810)
sched_setattr(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf25010000000800070009000000540008804c000080240002009959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb73370600459b3922040000801400020077673100"/126], 0x84}}, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)

10m58.331905382s ago: executing program 3 (id=4063):
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fsopen(&(0x7f0000000000)='overlay\x00', 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x8000000000, &(0x7f0000002100)=ANY=[@ANYBLOB="c51f57f5837ad321f63f0e5631977c479f2a823c62ff64957c2570f992d44bd0536ee56c2f46897f364fb80d9e8d6cf5bb2278d4767c51540f639972a66efe69598ad657ee94a9aa631307d9a9d678eb8dbe591c38eb2e4780bb3818d010a05853ff6ce0ac8533e8b5e716f76b676e4b5e66da9a72bf2da235378cdec2402c"])

10m57.949128047s ago: executing program 34 (id=4063):
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fsopen(&(0x7f0000000000)='overlay\x00', 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x8000000000, &(0x7f0000002100)=ANY=[@ANYBLOB="c51f57f5837ad321f63f0e5631977c479f2a823c62ff64957c2570f992d44bd0536ee56c2f46897f364fb80d9e8d6cf5bb2278d4767c51540f639972a66efe69598ad657ee94a9aa631307d9a9d678eb8dbe591c38eb2e4780bb3818d010a05853ff6ce0ac8533e8b5e716f76b676e4b5e66da9a72bf2da235378cdec2402c"])

10m57.923587787s ago: executing program 0 (id=4065):
socket$inet_udplite(0x2, 0x2, 0x88)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000540)='./file1/file2\x00', 0xc6000849)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

10m57.738802556s ago: executing program 0 (id=4067):
r0 = io_uring_setup(0x4f99, &(0x7f0000000540)={0x0, 0x4, 0x40, 0x3, 0x2e7})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x260302)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{0xa7, 0x1}, 0x0, 0x3, 0xffffffff, {0x4, 0x8}, 0x44, 0x4})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)

10m57.592935233s ago: executing program 0 (id=4069):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@host})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x0, 0xcd6, 0x4000000000000e9, 0x1000000, 0x10000})

10m57.483165725s ago: executing program 0 (id=4070):
r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d03e, 0x0, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x53abd162a59540ea, 0xf)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
syz_mount_image$fuse(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x1ac21, &(0x7f0000000800)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYBLOB="0da4d1fe4719daff3ce849d8c214a91aa120661ec3f61ccabfe9d1e63dc0a056dcbc06eab8941e0fa391267523278194631a825dfea278e1ee02fabf1897645b1f5e2eda29b5aecaccea75381a1ef5a88eac96b47973afe600935612de73748af787e7ea818033e937e353ebad1d7871c7c6d127311500b4e897faade7bd92146423793e728a2cd296cd92aa8f53df729c24f6", @ANYRESDEC=0x0, @ANYRES8, @ANYRES8, @ANYRES64=r0, @ANYRES8=r3, @ANYRES32, @ANYRESDEC=r5], 0x1, 0x0, &(0x7f0000000340)="11adb9084e3694d5838666985d02edee187124695e6bd1100eeabdd12d2b07ef43f5a81e89b92abf00e5fc550d56ff3e0631de3463727ecc1f24b3a548403d580f35a82122307fdd6e72b632927f80546927db408aec93a830af")

10m57.247030971s ago: executing program 0 (id=4072):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0)
r3 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x80086601, 0x0)
fsopen(&(0x7f0000000000)='ufs\x00', 0x1)
r6 = fsopen(&(0x7f0000000480)='rpc_pipefs\x00', 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
recvmsg(r7, 0x0, 0x40000000)
r9 = fsmount(r6, 0x0, 0x0)
r10 = openat$cgroup_pressure(r9, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r10, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14)
r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r12, &(0x7f0000000040)=0x900, 0x12)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000200)={'erspan0\x00', r11, 0x10, 0x80, 0xdd7, 0x2, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0x1f, 0xd, [@broadcast, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x28}]}, @rr={0x7, 0x7, 0xe0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x7}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x103, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0)

10m54.95209272s ago: executing program 0 (id=4077):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg(r1, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ec", 0x1}], 0x1}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, 0x0, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4e, 0x0, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f00000002c0)="10eba9fdb4cbab48929e1af15100"/28, 0x1c}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp, @window={0x3, 0x2, 0x2}, @mss={0x2, 0x8}, @timestamp], 0x5)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24)
r7 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
close(0x3)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x6, 0x0, 0x0)

10m54.577095067s ago: executing program 35 (id=4077):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg(r1, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ec", 0x1}], 0x1}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, 0x0, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4e, 0x0, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f00000002c0)="10eba9fdb4cbab48929e1af15100"/28, 0x1c}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp, @window={0x3, 0x2, 0x2}, @mss={0x2, 0x8}, @timestamp], 0x5)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24)
r7 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
close(0x3)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x6, 0x0, 0x0)

2m33.188281219s ago: executing program 5 (id=6196):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x440c0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x12c, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x3000000}, 0x1c)

2m32.093188207s ago: executing program 5 (id=6202):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000040000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740"], 0x558}}, 0x40)

2m31.891777515s ago: executing program 5 (id=6203):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x5d, 0xd, 0x72, 0x20, 0x4f1, 0x3012, 0xb594, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x32, 0x4, 0x2, 0x1, 0x58, 0xdc, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x13c, &(0x7f0000000440)={[{0x79, 0x4e00, "a5f5f90caec237784cc45637f2602abf0c798aec2adb5b6988ef0981dd067af051e498e2f65138f47e5942945ce9613d4c239d837c1f99e8dcac636b678f0f8a004914fba910b6fe9935ece668beb9391e816b83bf6950e9aa6920c9f841bb0e1614fc17ec5dae4fec131ed4a688ec6d6f3e46cbf87c016815"}, {0xb7, 0x4e00, "9f3336ff5407e59836e32ad8fecfb5cc5cee7c2d8f7d6ffe6836492543349b0c4f830aabd68ac7b843a17e4db782a3d82efa8b2f46329885ab34244eb6e4f1c5c8482afd77195a6ac3f5a6adeb2b27f1ea0bc8ce137bec90d45d879477515b0b710e45eb7894bff3265b977fd2a706758b02f9b35afa0f21aaa11d187e0dc83c21aba551beacca27f077b4c10f9e32e17b2ca40d2871e5948e78319d4456dc70628ecd6c9ad4e6b7dbb549516a7000bf7565c8f5242d8f"}]})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e021c000002cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "1800"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000240)={0x0, 0xd, 0x46, {0x46, 0x2, "43a3cd9ce6aed4d99791e843337d735e5933db3015f06374916fae3caad6d03c915428fab013c8755f225dbea267abf79e94bd56ce5b513bd787901c10fd75aa3b4d9e97"}}, &(0x7f0000000000)={0x0, 0x3, 0x35, @string={0x35, 0x3, "c632908f5fc02dfa2590f3da1e0d53c92367a76b6e8ffb963eed6874dbbbd64de0eb5c36a5447cd1a5abacb79055ad2c434fce"}}}, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x0, 0x13, 0x1f, "9ecf40bf08e456bd3868780fc2e27061fe2e79683ca6d9ab13d1b519b64244"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0xc0, 0x5, 0x2, "942d"}, &(0x7f00000003c0)={0x40, 0x5, 0x6, "16f4be7f7ab0"}})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000027c0)={0x18, &(0x7f0000002600)=ANY=[@ANYBLOB="201814"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r6 = pidfd_getfd(0xffffffffffffffff, r5, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r6, &(0x7f0000000080)={0x10, 0x0, r7}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x400}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x805}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="40011f0000007073349dc1432dfa3d115140e798b3580eef349b9c71000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

2m28.218686725s ago: executing program 5 (id=6223):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0d00000000000000500012800b000100697036746e6c000040000280140003000602000000000000000011000000000014000200fe8000000000000000000000000000bb080007000600000004001300080001006d"], 0x70}}, 0x0)

2m27.960565468s ago: executing program 5 (id=6226):
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)={"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"}) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e7de1429c6040905", @ANYBLOB="b7"], 0x0) (async)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
socket$packet(0x11, 0xa, 0x300)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34162, 0x0) (async)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)=@buf={0x14, &(0x7f00000000c0)="fae15e8c6a78cd8e84c267762d10e8d979fc2f76"}) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, 0x0, 0x0)
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) (async)
pipe(&(0x7f0000000140)) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x400, @loopback, 0x15}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r1=>0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf000000040000", @ANYRES32, @ANYBLOB="0000080000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x600000)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) (async)
recvfrom$inet6(r0, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0xa) (async)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xaee2, 0x10000, 0x2, 0xbfdffffc}, &(0x7f0000000200)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
dup(r7)

2m27.5042319s ago: executing program 5 (id=6228):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, 0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000001c0)={0x1, 0xb2, 0x5, &(0x7f0000000180)={0x16, "247f23e017bb456c5c4b7165a6d6af0b920bf04121f03300"}})
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000019c0)=ANY=[@ANYBLOB="240000005e00010304000000000000000c000000000080050001"], 0x24}], 0x1}, 0x8000)

2m12.356870375s ago: executing program 36 (id=6228):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, 0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000001c0)={0x1, 0xb2, 0x5, &(0x7f0000000180)={0x16, "247f23e017bb456c5c4b7165a6d6af0b920bf04121f03300"}})
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000019c0)=ANY=[@ANYBLOB="240000005e00010304000000000000000c000000000080050001"], 0x24}], 0x1}, 0x8000)

1m19.884562843s ago: executing program 4 (id=6480):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r0=>0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0x7, 0x0, 0x1, 0xffffffff}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000100)=""/3, 0x2}, 0x20)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x62d3, 0x5})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
mlock(&(0x7f0000008000/0x3000)=nil, 0x3000)
getsockopt$bt_hci(r2, 0x84, 0x3, 0x0, &(0x7f0000000080)=0xfffffffffffffd96)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1m19.621214599s ago: executing program 4 (id=6482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000002000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f0000010000000000000000200002000a"], 0x60}}, 0x0)

1m19.395889232s ago: executing program 4 (id=6483):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000000c0)={0x1, 0x8, [0x5, 0xd]})
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0x5, 0x82c1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0xc0085666, &(0x7f0000000080)={0x2, 0x4})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0xee, 0xfffffcbb}})
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10)
sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00')
execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0)
r4 = syz_usb_connect$hid(0xa, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a600050", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff0000000008000800090300"], 0x34}}, 0x0)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000000)={&(0x7f0000000200)=[{0x29, 0x7801, 0x0, 0x0}, {0x1, 0x8000, 0x0, 0x0}], 0x2})
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000180)={@remote, @private=0xa010102, 0x0, "614af285791a63abd0f993af8077b5cd01e02d642831683fdc3fd440829c82ae", 0x6, 0x0, 0x0, 0x192c}, 0x3c)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00')
preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1)
r10 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r10)

1m18.63190064s ago: executing program 4 (id=6489):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300001800000000000000000000000400030000000000fdffffffffffffff07000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000001700000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a00000000000000ff010000000000000000000000000001000000000000000002"], 0xc0}}, 0x0)

1m18.319520579s ago: executing program 4 (id=6492):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net\x00')
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8003, 0x547040)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x3, 0x3cf281)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2982, 0x0)
close(r4)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
getpid()
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000120029272cbd70000000000028002100ff020000000000000000000000000001fe8000000000000000000000040000e20000000035ecff26bfe95b73adbc419f080fb178790c8e37ba3489f0162274b114a554c81e6a2ce9c0991687502c934fa3bf603ce875ffd44c2025bd6176ccda21be7cd564326fe1b148dd2f378e4c471b6243e5c9147afc7d41000c6ffa14cf962255feae7a1ad9d2d188307faa93e331427939c789fd959c62b92fe3c76e2709e9e1f5d5c4cb55a9c27b1e2f9ab3e417c7b8602d2821272b59417bf0bcc0c590da552b493793c8a21e142b81e15305f711"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040c0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000380)=0x3c0f, 0x4)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

1m16.644120999s ago: executing program 4 (id=6501):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[], 0x44}}, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb1c7}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m1.411233393s ago: executing program 37 (id=6501):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[], 0x44}}, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb1c7}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13.4823268s ago: executing program 8 (id=6726):
syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet(0x2, 0x4000000000000001, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
r2 = syz_clone3(0x0, 0xece4d5001dc477b6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x436db2976e3de818, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xfffffffffffffff9})
socket$inet6_sctp(0xa, 0x1, 0x84)
userfaultfd(0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xfffffe0000000002, 0x3fb, 0xffffffff}, 0x0)

10.484801331s ago: executing program 8 (id=6740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00')
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r3, 0xc0cc5640, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@gettaction={0x70, 0x32, 0x1, 0x72bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}, {0x0, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'bpf\x00'}}, {0x0, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}, {0x0, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xce}}, {0x0, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}, {0x0, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x777}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r7=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x10000, 0xf7ff, 0x70c3, 0x1ff, 0x4000001})
ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, 0x0)
r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r7, <r9=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000540)={&(0x7f0000000500)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x7, 0x0, [], [0xc3, 0x0, 0x0, 0x3], [0x2]})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010428bd70000500000000000000", @ANYRES32=0x0, @ANYBLOB="00000000051c00002c0012800e00010069703665727370616e0000001800028004001200060018000300000005002e0002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12)

10.136852087s ago: executing program 6 (id=6742):
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000060c01013dd4e4661eb6bf1b050900090500010007010000"], 0x1c}, 0x1, 0x0, 0x0, 0x440}, 0x40851) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x141080, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x1c) (async)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3}], 0x1, 0x40800) (async)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000000200)=0x9, 0x4) (async)
listen(r4, 0x0) (async)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async)
r6 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef6a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) (async)
r7 = dup(r6) (async)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280), 0xc02, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xb9) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r10 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0xf401) (async)
close_range(r9, 0xffffffffffffffff, 0x0)
prctl$PR_GET_FP_MODE(0x2e) (async)
read$FUSE(r7, &(0x7f0000003c40)={0x2020}, 0xffffff0a)

9.485630918s ago: executing program 1 (id=6747):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/231, 0x37}, 0x275a}], 0x1, 0x60010020, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
fchdir(r4)
ioprio_set$pid(0x3, 0x0, 0x0)
r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03)
sendto$inet6(r4, &(0x7f0000000280)="d9803f88931cbad8757b831ae6dfdc22f6378318d7f71ba0679033bf706d7712d2977b42227cdf388027d7dc15673515e33f576f9c2da4df07180f0c", 0x3c, 0x40000, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @empty, 0x2}, 0x1c)
bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
socket$kcm(0x2, 0x3, 0x84)

8.462587433s ago: executing program 6 (id=6754):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x490, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0xa}, {0xffff, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x16, 0x8}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x80000001, 0x6}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfa}, @TCA_U32_CLASSID={0x8, 0x1, {0xd, 0xd}}, @TCA_U32_POLICE={0x64, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x22, 0x8, 0x3, 0x8, 0x2, {0x80, 0x1, 0x9d, 0x3ff, 0x3, 0x9}, {0x80, 0x1, 0xfeff, 0x0, 0x7, 0x8}, 0xfffffff7, 0x8, 0x200}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}]}, @TCA_U32_MARK={0x10, 0xa, {0xa, 0x6e9}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x3ac, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x5, 0x5}}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0x6}}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_SEL={0x364, 0x5, {0xe, 0x7, 0x5, 0xfff, 0xfff, 0x9f, 0x2, 0x4, [{0x4, 0x4, 0x10001, 0x401}, {0x3, 0xbd5, 0x2, 0x9}, {0x8, 0x10, 0x2, 0x9}, {0x7, 0x7, 0x8e, 0x401}, {0x7, 0x3b0000, 0x0, 0x800}, {0xbd, 0x7f, 0x3, 0x800}, {0xffffffff, 0x0, 0x2, 0x3}, {0xfed9, 0x0, 0x2, 0x8}, {0x3, 0x1, 0x2, 0x2}, {0x3, 0x5, 0xffffff8b, 0x10000}, {0xca07, 0x10000, 0x2}, {0x7f, 0xf, 0x8, 0x5}, {0x2cc8, 0xbb, 0x3, 0x3}, {0x7, 0x8, 0x7}, {0x0, 0x1, 0xffffffff}, {0x9, 0x8f54, 0x43de6f9b, 0x1}, {0x3f, 0x9, 0xb, 0xa28f}, {0x4, 0x9, 0x6, 0x1}, {0x8, 0x1, 0x9, 0x57}, {0x2, 0x3, 0x9, 0x833}, {0xb0, 0x0, 0x28d, 0x3}, {0x8000, 0xd, 0xff, 0x9}, {0x6, 0xe, 0x285d, 0x7}, {0x6d5, 0x9, 0x7, 0x401}, {0x8, 0xeac, 0x4, 0xfffffffd}, {0x81, 0x8, 0xfffff000, 0x5}, {0xf6a1, 0x7, 0xa, 0xf}, {0x3, 0x80000000, 0xffff4993, 0x1}, {0x7, 0x1, 0x7ff, 0x3}, {0x7, 0x4, 0x10000, 0x10001}, {0x7, 0x282a08bd, 0x8, 0xffff}, {0xef, 0x100, 0xfffffffb, 0x4}, {0x4, 0x5, 0x80000000}, {0xfffffff8, 0xd, 0x5, 0x2}, {0xfffffff9, 0xd6, 0x2a9, 0x639e}, {0x4, 0x9, 0x4, 0xa90}, {0x544a, 0xff, 0xf0, 0x146}, {0x4, 0xffffffff, 0x4}, {0x8000, 0x6, 0x7fffffff, 0xfffffffc}, {0x7, 0x89, 0x80000001, 0x2e}, {0x7, 0x4, 0x7fffffff, 0x7}, {0x7, 0x2, 0x4, 0x8aa}, {0x2, 0x4, 0x365, 0xa2}, {0x80000000, 0x1, 0x8001, 0x4}, {0x6, 0xd57, 0x1000, 0xffff}, {0x100, 0x52c70683, 0x1a, 0x398}, {0x6, 0x3, 0x9, 0x5}, {0x7, 0x6686, 0xfff, 0x100}, {0xf, 0x101, 0x81, 0x7fffffff}, {0x7, 0x800, 0x5e1, 0x9}, {0x1ff, 0x2, 0x6, 0xffff}, {0x1, 0x3, 0x4, 0x31a}, {0xea8, 0x3, 0x9, 0x40}]}}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg1\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x490}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2a, 0x7ffff, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {0x5, 0xffff}, {0xc, 0x7}}, [@TCA_RATE={0xffffffffffffffcd, 0x5, {0x6b, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x240000c0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5)
unshare(0x2040400)
r8 = socket$inet(0x2, 0x2, 0x0)
r9 = syz_io_uring_setup(0x48b9, &(0x7f0000000180)={0x0, 0x1204, 0x100, 0x2, 0x261}, &(0x7f0000000080), &(0x7f0000000200))
r10 = syz_io_uring_setup(0x315b, &(0x7f00000003c0)={0x0, 0xb952, 0x10, 0x0, 0x2bb, 0x0, r9}, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000040)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r10, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r10, 0x18, 0x0, 0x1)
bind$inet(r8, &(0x7f0000000280)={0x2, 0x5e21, @loopback}, 0x2)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r12 = epoll_create1(0x80000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
epoll_pwait(r12, &(0x7f0000000540)=[{}], 0x1, 0x7, 0x0, 0x0)
getsockopt(r11, 0xff, 0x1, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)

7.220765509s ago: executing program 8 (id=6759):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x4, 0x3, [0xd, 0x5, 0x1c, 0x14, 0x3a, 0x2, 0x16, 0x3a, 0xb, 0x3e, 0x27, 0xf, 0x2b, 0x35, 0x1c, 0x3d], 0x1, 0x200, 0xb914}}}, {{@ip={@local, @empty, 0xff, 0xffffff00, 'bridge0\x00', 'bridge_slave_0\x00', {}, {}, 0x84, 0x2b0204beda83a977}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98, 0x3000000}, {0x28}}}}, 0x260)

7.120160876s ago: executing program 8 (id=6760):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980912})
r4 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x6e6bb2, 0x1, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
r7 = semget(0x1, 0x1, 0x39c)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140))
semctl$IPC_RMID(r7, 0x0, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"})
syz_open_pts(r8, 0x0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0xfffe, @multicast1}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup2(r0, r9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="540500001e000701fefffffffcdbdf25017c0000040045803c0501"], 0x554}, 0x1, 0x0, 0x0, 0xc004}, 0xc044)
r11 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x1, 0x60100)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r11, 0xc0305602, &(0x7f00000007c0)={0x0, 0x4, 0x2018})

7.086492325s ago: executing program 1 (id=6761):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c00, 0x20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x5}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x4c}}, 0x0)

4.149207772s ago: executing program 6 (id=6763):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x30, @in6=@private1, 0x0, 0x5, 0x0, 0x0, 0x500}]}]}, 0x1bc}}, 0x40800)

4.015321801s ago: executing program 6 (id=6765):
r0 = syz_open_dev$vcsu(&(0x7f0000000380), 0x8001, 0x400)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="24dee186", @ANYRES16=r1, @ANYBLOB="00022bbd7000ffdbdf256b00000008000300", @ANYRES32=r2, @ANYBLOB="0c00990005000000320000000a001a000802110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0x20000080)
r3 = socket(0x2, 0x5, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0)
sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
io_setup(0x42, &(0x7f0000000100)=<r6=>0x0)
sendmmsg$alg(r5, 0x0, 0x0, 0x5)
io_submit(r6, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
read$FUSE(r9, &(0x7f0000000080)={0x2020}, 0x2020)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000040109021b00010000800009040bfd013377610009051302"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)

3.908145621s ago: executing program 8 (id=6766):
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000)
inotify_init()
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000)
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'vlan1\x00', &(0x7f00000002c0)=@ethtool_drvinfo={0x3, "8ddc01e3806ae0be78c923b2be0aeb1b8f82680115eb01164102429befb98520", "79fe21381c836398f488b6da745522a12848eec13e6610bdede76da06175358a", "acaada9b90ce97af608edc0ea65c759465a0f26d0a1987551e88bb012270e016", "944f4f662e51841e2a5bb5cdf65986d9d849bf9fda59405ddb5cf16cae80cd75", "2f3a22b2aed7475fb98fa54b6d5873e6a4d3355a8994976e059873ea30503aad", "0140dc190bacf9ccd4d969a5", 0xffffffff, 0x7, 0xfffffff3, 0x11d, 0x9}})
write$dsp(r0, &(0x7f0000002200)='D', 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
sendmsg$nl_route(r3, 0x0, 0x40014)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000540))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000963000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
exit(0xffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
pwrite64(0xffffffffffffffff, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000180)={0x0, 0xfffe, 0x0, 0x1ffff, 0x7537}, &(0x7f00000001c0)=0x18)

3.907873719s ago: executing program 1 (id=6767):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000a80050001000000000024000180140001"], 0x80}}, 0x0)

3.779838034s ago: executing program 1 (id=6769):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140))
read$dsp(r0, &(0x7f0000001300)=""/4096, 0x1000) (async)
read$dsp(r0, &(0x7f0000001300)=""/4096, 0x1000)

3.640052107s ago: executing program 9 (id=6771):
mlockall(0x2)
r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) (async)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x6, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})
shmat(0x0, &(0x7f0000175000/0x4000)=nil, 0xffffffffffffffff)

3.513121132s ago: executing program 7 (id=6772):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000))
unshare(0x400)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) (async)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async)
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$KVM_SET_ONE_REG(r3, 0x4048aecb, &(0x7f00000002c0)=@arm64_ccsidr={0x6020000000110005, 0x0}) (async)
ioctl$KVM_SET_ONE_REG(r3, 0x4048aecb, &(0x7f00000002c0)=@arm64_ccsidr={0x6020000000110005, 0x0})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000200)={0x2, 0x6, 0x7fffffff, 0x800})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB="140012800b0001006d6163736563"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB="140012800b0001006d6163736563"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

3.276341473s ago: executing program 9 (id=6773):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x5, 0x240, 0x39}, 0x4, [0x4a, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x5, 0x10, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbc2, 0x4a732f64, 0x1000, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x8, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ffc, 0x5, 0x7, 0x81, 0x6, 0xf9a2, 0x80000001, 0x7, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x800, 0x200b398, 0x400000, 0x0, 0x2, 0x5, 0x28, 0x1, 0x82, 0x54f5bad8, 0x8, 0xfffffffd, 0x402, 0x0, 0x4c2336d3, 0x4, 0x3, 0x7ffffff8, 0x401, 0x46, 0xf1, 0x2, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x7fffffff, 0x1ff, 0x1, 0x1000, 0x10, 0x1cb, 0x1, 0x4, 0x6, 0x436, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf785, 0x80000001, 0xb, 0x3, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x18c, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x6, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x0, 0x2000002, 0x802, 0x9, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x800077, 0x9, 0xf66, 0x810000, 0x1, 0x5, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x208, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8008, 0x40f1, 0x2, 0x3, 0x101, 0x3b, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xa, 0x7f, 0x1000, 0x1ff, 0x5, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x401, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1})
io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.123897231s ago: executing program 7 (id=6774):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001a80)=ANY=[@ANYBLOB="000000001a0000012cbd4df45f7800fddbdf2500597669749feb7d85f4f1d63979c1cc0cdd0f82513f9fc84c2d3f9d4403bb660070208b8f9bcf91efc86fe9a5c38280675645fc17dfe8ea923fbac4935f1706bbe2f64950197e09f90ffb9a6c234afa7d3642b027340e7b2189d1d4a6c132e7e6870eeb9128e6552c7b93492a8d30e92d5c77166d5c5a9780d885ede0b283db21675fcb60763e1ba89c023ce6d53800d5f20f76b8fc284ec64ade585051248a"], 0x50}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000001240))
unshare(0x2040400)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), 0x4)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x44, 0x2}]}, {0x0, [0x61, 0xbcc78f9b5a864e3a]}}, &(0x7f0000000080)=""/42, 0x50, 0x2a, 0x1, 0x3, 0x10000, @value=r2}, 0x28)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r3, 0xff, 0x1, 0x0, 0x0)
pipe(0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000001180)={&(0x7f0000000180)=""/4096, 0x320000, 0x1000, 0x2, 0x1}, 0x20)

3.116887864s ago: executing program 1 (id=6775):
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e000000200000000ffffffffac14140c"], 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r5=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002800800", @ANYRES32=r8, @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x100000}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1f4, 0xd, 0x7, 0x4}, 0x9c)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0x10}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH(r9, 0x3, &(0x7f0000000040)='/dev/ttyS3\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c)

3.018033375s ago: executing program 9 (id=6776):
r0 = socket(0x200000000000011, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0x14, &(0x7f0000000280)={0x0}}, 0x1)

2.992769366s ago: executing program 7 (id=6777):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r10 = io_uring_setup(0xd71, &(0x7f00000002c0)={0x0, 0xb6c4, 0x2, 0x800003, 0x1000})
io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0), 0x0)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
fsopen(&(0x7f00000029c0)='cifs\x00', 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)

2.807716112s ago: executing program 9 (id=6778):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r0)
shutdown(r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
unshare(0x2000400)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x11)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r8, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x80)
ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000140)={{0xfec00000, 0x1000, 0x8, 0x9, 0x80, 0xb, 0x0, 0xff, 0x0, 0x86, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x83, 0x7, 0x6, 0x7f, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x60000, 0x4, 0x4, 0x10, 0xa1, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x5000, 0xf, 0x7, 0x1, 0x3e, 0x1, 0x0, 0xfd, 0x29, 0x0, 0x9}, {0x80a0000, 0x0, 0xc, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x59004, 0xdddd1000, 0xd, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0x4000, 0x10000, 0xb, 0x0, 0xcd, 0xe4, 0x5, 0x26, 0x8, 0xcd, 0xfc, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1005a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x1c, &(0x7f0000000640)=[@in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r10=>r9, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8)
r11 = socket(0x200000000000011, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000000440)={<r12=>r10, 0xa5, "ceaaabb1a44a47b54959899d2bd216acb5c8d3e3ad9adb38f3935bdfa8802d4482b47f325ad6920e14d4d6b268f3e5c695c0d2409e74ea9009f6be7b02c96b98f8299622bfe56ee1ce6319de9e2056caecd9a75cb63324d557afa7feef6e0d4094f8c89e5ff2b2a5058e66874424576314c35a38e5d09b3d1a82d07f2a8ad8b2b2dfba3668cba430b8955aca49b540077f37f3c89fb9087e447169ccc28aaee6885f1df66c"}, &(0x7f0000000000)=0xad)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r12, 0x100, 0xc}, 0x8)
r13 = socket(0x28, 0x4, 0x7)
setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r11, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0}}, 0x1)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x1403, 0x200, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2.302190817s ago: executing program 9 (id=6779):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f6873720000000008000300030000001800038014000380"], 0x4c}, 0x1, 0x0, 0x6000, 0x818}, 0x20000004)

2.043611846s ago: executing program 9 (id=6780):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x177)
syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = io_uring_setup(0x111b, &(0x7f0000000280)={0x0, 0xb71a, 0x400, 0x1, 0x3d7})
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f00000000c0)={0x1, 0x2, 0xa}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$dsp(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x145, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)

911.804151ms ago: executing program 1 (id=6781):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcfa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = socket(0x28, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4)
write$FUSE_STATFS(r3, 0x0, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x22, 0x0, r1, 0x0, 0x0, 0x0, 0x2121, 0x0, {0x3, r2}}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
timer_create(0x832936f98ed548f6, 0x0, &(0x7f0000000300)=<r5=>0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = syz_usb_connect(0x3, 0x3f, &(0x7f0000002140)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESHEX=0x0, @ANYBLOB="277f5cc4c1a5873b94ebf27f218cf4966202d586938835a1ec593ba5f039ff789c5abd75b541c92d95a161ba67b9414baa69d31fe694f64c2aa550525017a0034b1ede863d588b44499a872c49a9f9b4b3424066d5ea0bac5e173b26bbdcb9d434b171dedaac4612893df5427a9c06caa68eadab33a777fa2025b8eda551d2b12481798c8c3449ea631de0b1a180f353aed61017460b6a5ab02f72d791617e8231fd45d2b00737e38efabba84f626442d7f9d6830b22f0da353b0409efb3199ac1ba4427c94e3732371f1767c268491796706ab48ee3e0648e7b6c95d3be1017d3aa604271ee9ecf5643267e2ea84ee1f8002eeddf28c45322e7489f42827cffe4cda96cd2138c19ee820129d0098713a28eda6a027cd73b787c1be65aaf18ef4ad874759a54e1ff7a5a6b24b4ef554013d9899765c96e73760f1d01085f05d775c632b50cc6bcb6ca99cfe85a7a34189f7d9a681142ecb85057a34d75106b3df83ad7b74dacfe158ccfef388e25df7ffaf8c2039b73f059dd954c6f13303ddba4da0d92d3fa5405bb747766f7855799b760f8d163c54e9954c71173ce8660ace72b3c6557e5c578fbfafff9f1ee6e1f4f5840d81ba34a6af441c935745409c9c7ba63132dcce3311946a6f0cd3e91733f9df0e8761bcecb6d94c6f9e23fc440381d4acf618593cfa2747d6718f1f198f371cb91405fff20fec85414d7ddfb1c5d377f56fbadc396367618292815e84399e748310ed83cfa15f99736f0e612992a7c9349cc4070cc23743a664665580c285bd4e3cfe1af017a15b712211674d2df12e15a3149fada1318022f3993e956c324ecde47e9f58a72e37dc171d0685c97fb425b0d997e81a442d7c4d96aa7ce3fcec06b3f824eeb6ec875df718e9e7cdab86e774564a085fb3e4fb428547ce84578faf427ca477fab0bc7c87d9788a3b795e73529ee099834dcf45a1dc73b14ee289112506292238f3620bad5aac2a2d0c1361a8562b5d4a7e98344d27b1faf58746696bba4c60357d1334c429ff0b6f5b92a7c1cbf0532e94d46687ad5937317483491dbcbdf44fe154b0ec89774239539437b9977438e1ab971a3773b20d21534ba8b78ec88f8d23b8008dd41afa9fede0f1180460a74192c605a9e39fea8099530212dada5fe47900a0e25577d2cb7889d45d26eb10545a094e5bb70f76cd30d00c082f69c1cc15bb845b1b592cd236c90bff2d303e30c730d4ecaf8e40beb726645d8e5d4f6fdc0293274f25af1a7b4445bbf2182c846daec29cfc6ceb156634fd341b3d81795184058132e2cf2ae782d06bae38112187af42143b2b0272151fef97816a75af0d729696a8904344ec6e0dfbe4f771ff37e6eafdfb52abc9b93c4d18e75bc9269f45997751057c38a650739900faa8277cf372ad19938a817ed8a8d426b595af9fac114eeda827b9f53ae8b77a044da3ffd0e3cfc37b7c37bd6115f1ee4e237cfe4efe5f88005e78c7847e8585b1ea13e792c4d466eb5ee47eec6852c4f127808df26429a637a36c5546592a6c07c4772c4f723ff17ef709d8219dea5d18eafce99b56cc3b68c55a45364fc6e458cd392da84e05a99f92cb56b9e9f982ece18dca4a9fd34dd910f877ebb338549b1f76b38267098ccff824c7b97133d6e22fddefded0e404399adc437be801d3b8dec2f984779ebfc85f0169b5774f0af6ef3f5963c65f2ab0e472363ad0b92f7974c9dc89c03d4125744020f3120610c3ae6e8695ee03d7d310474090a0a362efbb7d1b9a882ecf2f89d3b85592f03d88f558d3e97b5c25a3def3efe23b37c4b038d36ed55dedc2aee70a43065ffee09c4d31160b7e4e7beda8785b2f196c1d4b889215329c16117305d5cf30e038c1f5f757371c56eec3725aaa7716be3443181fbc64f48a1182ed7917ffae5415e86057a5dbed3c0ba743a85aae0feb256e860a9693f3d2da8e388a28a5fdedce8f63e5f0e12e262220943f70bc57d1ee5a2a3e7453cfe483733859ba5b8a0e9e02a48f98876464bc715f8b60beac16981ee74679e73e3a87e38b06cbbc5f74076b9574f47e7ddf92f7ecaa85da75b4a48f3937a6603e4075ed7b6f9ba89a885f166ed950cc6fa11f62e03fff8476bf041e4d580c0d5922da70b2f8768c4dd4cbd0f4591d01112bbb018e4a715698b141384eaa8d08160db6872815e413cf79cca24a6f3656057bf68e05e3d36840f244e6529b852800f979a117b751a4a847f0b7d66227d7aea9ed1b8dabbc2642d9f1237a1d745aa9c970825e03c9832ffad4e9e8c7af68763367c9aa976e52d865de1a26144786cfbcff77138b65bbb3f1d96381f2f8d582435aeadcb151ad247363807977cd83b6029d1d7f78be6d24aa96df81babc76c7f99acb1694bef0a4a46aa5d72bbbe80994663b786963925c9663b109d420153dfa75e0b8e54bf1fc16586038de929ccc8379228ab8014fb46f379170c6f1f100019e4f0e63d7875bd2dcea35e59cd333692ddf6b1507b905ba85f63e1b47eade3d37140b9f3bf2644fa874bfb7529188afdb73508fb426cdd7cc38178e03e0ce7538676baa5c1ee488993617043bb02632bd2bf25614d67a47131894c1221b1614d14cb16f07f2554baae073438dc25fdd790ca5516401c933078a28d2e16dd605ef146151e3abbe57cf9512bc2674b663f616a0a4ea64b2c7467a67573a42f50e28ed1f9bd684c5100f14fc24183b61a854cdf0b280829d5d455977c0aee9eaa4d60f6829ffd51b58fdbeff3e1fb0f0d97c78343e846d54ba8cdafd8cf79914054ba9d3c307638d71f4e9cb907813e81888be6ad18b39efcaa5cc4629cfc0b2eeb40d620b64591192c961cfe51ac1d58374c6a8b8bf6185f9e58179ce6cf147ffea7d6adbc3b3dfadd97d4cb7f276255620b21ad75b8b667bbb4de9a435d0611ba7c82de65a29eb7267057fcdee32313462a3d70742e697439f081f77c09b5135a5ad5bf1da8b858e65507090de7b4de085943537fb45d7112caf4980549eee0aef075716b7fcc30a7b5634a5db076b8c8d173a4565a3258b0a09f449122bf0bce20bfa840d3b6707bda905fc8f3b4c6eaf409471407eccc5d7d58723fbc6e55ec3e279acd", @ANYRES32, @ANYRESDEC=r5], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$FS_IOC_GETVERSION(r8, 0x40025b0c, &(0x7f0000000040)) (async)
r9 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f"], 0x0)
syz_usb_control_io(r9, 0x0, 0x0) (async)
r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000000)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async)
ioctl$FS_IOC_GETVERSION(r10, 0xc0145b0d, &(0x7f0000000040))
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x29, {[@local=@item_4={0x3, 0x2, 0x1, "4000d7ab"}, @global=@item_4={0x3, 0x1, 0x1, "477678ed"}, @local=@item_4={0x3, 0x2, 0x8}, @local=@item_012={0x2, 0x2, 0x2, "a3a6"}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0xd, "b6587b62"}, @local=@item_4={0x3, 0x2, 0x2}, @global=@item_4={0x3, 0x1, 0x2, "0481643b"}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x9, '~\fZ*'}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0)

788.390083ms ago: executing program 8 (id=6782):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) (async)
ioctl$TCSETSW2(r0, 0x5434, 0x0)
mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) (async)
syz_usb_connect(0x2, 0x607, &(0x7f0000000b40)=ANY=[@ANYBLOB="120110019177a610f70a01013491010203010902f505040004f004090441"], 0x0)

286.239571ms ago: executing program 7 (id=6783):
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000004540)="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", 0x40c}, {&(0x7f0000000b00)="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", 0x179}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x1000000000000000)

235.916465ms ago: executing program 6 (id=6784):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000008a000000180818000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x64, &(0x7f000000cf3d)=""/195}, 0x23)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', <r1=>0x0, 0x2f, 0x4, 0x4, 0x6, 0x22, @private1, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x80, 0x700, 0x4, 0x200}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'tunl0\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'sit0\x00', <r3=>0x0, 0x40, 0x1, 0xf, 0x7, {{0x34, 0x4, 0x1, 0x6, 0xd0, 0x68, 0x0, 0x81, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0xc2, 0x3, 0xf, [{@local, 0xfffffffa}, {@loopback, 0x3}]}, @lsrr={0x83, 0xb, 0x3f, [@dev={0xac, 0x14, 0x14, 0x3e}, @multicast2]}, @timestamp_prespec={0x44, 0x4c, 0xa0, 0x3, 0x8, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x800}, {@private=0xa010100, 0x9}, {@rand_addr=0x64010102, 0x9}, {@loopback, 0x3}, {@multicast1, 0x9}, {@private=0xa010101, 0x57}, {@local, 0x7}, {@local, 0x1}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x57, 0x3, 0x0, [{@private=0xa010102, 0x5}, {@multicast1}, {@empty, 0x10}, {@local, 0x7fff}]}, @noop, @ssrr={0x89, 0x2b, 0xa8, [@local, @empty, @local, @dev={0xac, 0x14, 0x14, 0x27}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @empty, @loopback]}]}}}}})
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r7=>0x0, 0x29, 0xb6, 0x80, 0xffffff2e, 0x1, @local, @mcast1, 0x7800, 0x80, 0xffffffff, 0xfffffffa}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x20}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x50}}, 0x8000)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe4, r0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x200480c1)

190.463611ms ago: executing program 7 (id=6785):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
io_submit(0x0, 0x0, 0x0)

64.711361ms ago: executing program 7 (id=6786):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x3000000, 0x0, 0x2004d808}, 0x0)

0s ago: executing program 6 (id=6787):
add_key$user(0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0) (async)
r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r6, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) (async)
io_uring_enter(r3, 0x3514, 0x9141, 0x69, 0x0, 0x0) (async)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async)
r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0xffffffff, 0x299})
add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0xffffffffffffffde, 0xfffffffffffffffe) (async)
io_uring_enter(r7, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@getaddr={0x14, 0x16, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000014)
unshare(0x6a040000) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20001a00}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

d6 (unregistering): Released all slaves
[ 1747.481998][T27196] netlink: 116 bytes leftover after parsing attributes in process `syz.8.6179'.
[ 1747.998668][T27212] netlink: 'syz.7.6183': attribute type 16 has an invalid length.
[ 1748.124826][T27179] Bluetooth: hci1: command 0x0406 tx timeout
[ 1748.761522][T27233] netlink: 'syz.6.6191': attribute type 10 has an invalid length.
[ 1748.802882][T27233] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6191'.
[ 1748.844660][T27179] Bluetooth: hci3: command 0x0406 tx timeout
[ 1748.858068][T27233] team0: Failed to send options change via netlink (err -105)
[ 1748.889240][T27233] team0: Port device geneve0 added
[ 1748.924967][T27179] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1748.933467][T27179] Bluetooth: hci0: command 0x0406 tx timeout
[ 1748.939914][ T5147] Bluetooth: hci4: command 0x0406 tx timeout
[ 1749.273538][T27215] [U] 
[ 1749.597196][T27250] pimreg: entered allmulticast mode
[ 1749.790061][T27255] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6199'.
[ 1749.816100][T27255] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6199'.
[ 1749.916458][   T10] usb 9-1: new high-speed USB device number 90 using dummy_hcd
[ 1750.095128][   T10] usb 9-1: Using ep0 maxpacket: 16
[ 1750.115440][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1750.149710][   T30] audit: type=1326 audit(1770003539.427:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27258 comm="syz.7.6201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb6b6394cd7 code=0x0
[ 1750.183719][   T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1750.215733][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6201'.
[ 1750.244492][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1750.257517][T27261] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6201'.
[ 1750.298233][   T10] usb 9-1: config 0 descriptor??
[ 1750.574097][T27264] netlink: 996 bytes leftover after parsing attributes in process `syz.5.6202'.
[ 1750.749890][   T10] mcp2221 0003:04D8:00DD.0062: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0
[ 1750.934192][T27250] i2c i2c-1: unsupported multi-msg i2c transaction
[ 1750.966322][ T5890] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1751.004643][ T5147] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1751.034797][   T10] usb 9-1: USB disconnect, device number 90
[ 1751.167423][ T5890] usb 6-1: Using ep0 maxpacket: 32
[ 1751.181439][ T5890] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[ 1751.205840][ T5890] usb 6-1: config 0 has no interface number 0
[ 1751.211987][ T5890] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1751.242606][ T5890] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1751.256372][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1751.264735][ T5890] usb 6-1: Product: syz
[ 1751.269032][ T5890] usb 6-1: Manufacturer: syz
[ 1751.273695][ T5890] usb 6-1: SerialNumber: syz
[ 1751.305548][ T5890] usb 6-1: config 0 descriptor??
[ 1751.331376][T27266] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1751.546861][T27266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1751.557912][T27266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1751.566267][T26839] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1751.616730][T27266] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1751.767087][T26839] usb 5-1: Using ep0 maxpacket: 16
[ 1751.811004][T26839] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1751.852298][T26839] usb 5-1: config 0 has no interface number 0
[ 1751.876918][T26839] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1751.916148][ T5890] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1751.926824][T26839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1751.944902][ T5890] asix 6-1:0.188: probe with driver asix failed with error -61
[ 1751.954268][T26839] usb 5-1: Product: syz
[ 1751.964699][T26839] usb 5-1: Manufacturer: syz
[ 1751.969358][T26839] usb 5-1: SerialNumber: syz
[ 1752.006341][T26839] usb 5-1: config 0 descriptor??
[ 1752.028183][T26839] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1752.384541][T10420] usb 9-1: new high-speed USB device number 91 using dummy_hcd
[ 1752.554494][T10420] usb 9-1: Using ep0 maxpacket: 16
[ 1752.568661][T10420] usb 9-1: config 0 has no interfaces?
[ 1752.597746][T10420] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1752.614588][T10420] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1752.628017][T10420] usb 9-1: Manufacturer: syz
[ 1752.648132][T10420] usb 9-1: config 0 descriptor??
[ 1752.724769][   T43] usb 8-1: new high-speed USB device number 69 using dummy_hcd
[ 1752.884518][   T43] usb 8-1: Using ep0 maxpacket: 16
[ 1752.915857][   T43] usb 8-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2
[ 1752.943690][   T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1752.969880][   T43] usb 8-1: Product: syz
[ 1752.992809][   T43] usb 8-1: Manufacturer: syz
[ 1753.000145][   T43] usb 8-1: SerialNumber: syz
[ 1753.013734][   T43] usb 8-1: config 0 descriptor??
[ 1753.058242][   T43] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[ 1753.072013][T27276] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1753.135278][   T43] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1753.229724][T19894] udevd[19894]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1753.341901][T10420] usb 8-1: USB disconnect, device number 69
[ 1753.381490][T27305] program syz.6.6216 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1753.904731][T26839] gspca_spca1528: reg_r err -71
[ 1753.909874][T26839] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71
[ 1753.950818][T26839] usb 5-1: USB disconnect, device number 99
[ 1754.071092][T27318] syzkaller0: entered promiscuous mode
[ 1754.083204][T27318] syzkaller0: entered allmulticast mode
[ 1754.331534][ T5890] usb 6-1: USB disconnect, device number 98
[ 1754.680046][   T30] audit: type=1800 audit(1770003543.957:1079): pid=27330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6225" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[ 1754.918458][ T5890] usb 9-1: USB disconnect, device number 91
[ 1755.024718][T10420] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1755.341603][T27347] netlink: 'syz.6.6220': attribute type 4 has an invalid length.
[ 1755.467590][T27350] netlink: 'syz.6.6220': attribute type 4 has an invalid length.
[ 1755.494627][T10420] usb 6-1: device descriptor read/64, error -71
[ 1755.572368][T27353] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6230'.
[ 1755.754594][T10420] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1755.974593][T10420] usb 6-1: Using ep0 maxpacket: 32
[ 1756.040740][T10420] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1756.093178][T10420] usb 6-1: config 0 has no interface number 0
[ 1756.124817][ T5890] usb 9-1: new high-speed USB device number 92 using dummy_hcd
[ 1756.136663][T10420] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1756.166596][T10420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1756.197069][T10420] usb 6-1: Product: syz
[ 1756.211802][T10420] usb 6-1: Manufacturer: syz
[ 1756.234484][T10420] usb 6-1: SerialNumber: syz
[ 1756.253072][T10420] usb 6-1: config 0 descriptor??
[ 1756.282915][T10420] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1756.295292][ T5890] usb 9-1: Using ep0 maxpacket: 32
[ 1756.323976][T10420] usb 6-1: selecting invalid altsetting 1
[ 1756.350336][T10420] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1756.382129][T10420] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1756.385546][ T5890] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1756.426323][T10420] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1756.457317][ T5890] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1756.474627][ T5890] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1756.482155][T10420] usb 6-1: media controller created
[ 1756.489638][T27345] usb 6-1: dvb_usb_ce6230: I2C read not implemented
[ 1756.490385][T27345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6228'.
[ 1756.525114][ T5890] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1756.563416][ T5890] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1756.600511][T10420] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1756.629787][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1756.658120][ T5890] usb 9-1: Product: syz
[ 1756.670855][ T5890] usb 9-1: Manufacturer: syz
[ 1756.682018][ T5890] usb 9-1: SerialNumber: syz
[ 1756.908551][T27361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1756.936535][T27361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1756.967165][ T5890] usb 9-1: 2:1 : format type 0 is detected, processed as PCM
[ 1756.988946][ T5890] usb 9-1: 2:1 : invalid channels 0
[ 1757.053796][T27369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1757.097796][T27369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1757.130340][ T5890] usb 9-1: USB disconnect, device number 92
[ 1757.198062][T19898] udevd[19898]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1757.497780][T27377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6236'.
[ 1757.984682][T10420] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1757.999518][T10420] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1758.064191][T27369] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[ 1758.077018][T27383] bond0: option arp_interval: invalid value (18446744072418280577)
[ 1758.103112][T27372] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[ 1758.112407][T27383] bond0: option arp_interval: allowed values 0 - 2147483647
[ 1758.382884][ T5890] usb 8-1: new high-speed USB device number 70 using dummy_hcd
[ 1758.535085][T27390] netlink: 'syz.6.6240': attribute type 10 has an invalid length.
[ 1758.544484][T27390] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6240'.
[ 1758.566637][T27390] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1758.674579][ T5890] usb 8-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[ 1758.693920][ T5890] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1758.782078][ T5890] usb 8-1: config 0 descriptor??
[ 1759.252261][ T5890] usbhid 8-1:0.0: can't add hid device: -71
[ 1759.259295][ T5890] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1759.307344][ T5890] usb 8-1: USB disconnect, device number 70
[ 1759.964271][T27397] sctp: [Deprecated]: syz.7.6243 (pid 27397) Use of int in max_burst socket option.
[ 1759.964271][T27397] Use struct sctp_assoc_value instead
[ 1759.984672][   T43] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1760.078447][T27402] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[ 1760.167724][   T43] usb 5-1: config 0 has no interfaces?
[ 1760.180219][   T43] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1760.192020][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1760.203031][   T43] usb 5-1: Product: syz
[ 1760.210265][   T43] usb 5-1: Manufacturer: syz
[ 1760.215420][   T43] usb 5-1: SerialNumber: syz
[ 1760.222995][   T43] usb 5-1: config 0 descriptor??
[ 1760.282258][T27406] macsec1: entered promiscuous mode
[ 1760.290944][T27406] vlan0: entered promiscuous mode
[ 1760.298735][T27406] macsec1: entered allmulticast mode
[ 1760.304995][T27406] vlan0: entered allmulticast mode
[ 1760.310162][T27406] veth0_vlan: entered allmulticast mode
[ 1760.318886][T27406] vlan0: left allmulticast mode
[ 1760.323901][T27406] veth0_vlan: left allmulticast mode
[ 1760.330137][T27406] vlan0: left promiscuous mode
[ 1760.449248][T27395] syz_tun: entered allmulticast mode
[ 1760.471972][T27395] dvmrp6: entered allmulticast mode
[ 1760.483535][T26839] usb 5-1: USB disconnect, device number 100
[ 1760.938435][T27415] netlink: 356 bytes leftover after parsing attributes in process `syz.8.6248'.
[ 1761.704476][   T43] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 1761.907239][   T43] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1761.935938][T27429] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6254'.
[ 1761.953584][   T43] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1761.984538][T27429] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6254'.
[ 1761.999064][   T43] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1762.045616][   T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00
[ 1762.123048][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1762.170676][   T43] usb 5-1: config 0 descriptor??
[ 1762.213193][   T43] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input125
[ 1762.508235][T27434] binfmt_misc: register: failed to install interpreter file ./file0
[ 1764.049092][T27443] syz_tun: left promiscuous mode
[ 1764.197659][T27443] macvlan0: left promiscuous mode
[ 1764.226449][T27443] ipvlan1: left promiscuous mode
[ 1764.246741][T27443] ipvlan1: left allmulticast mode
[ 1764.257583][T27443] veth0_vlan: left allmulticast mode
[ 1764.317010][ T5181] bcm5974 5-1:0.0: could not read from device
[ 1764.324163][   T24] usb 5-1: USB disconnect, device number 101
[ 1764.333888][T27443] xfrm1: left allmulticast mode
[ 1764.354626][T19897] bcm5974 5-1:0.0: could not read from device
[ 1765.024605][ T5877] usb 9-1: new low-speed USB device number 93 using dummy_hcd
[ 1765.188371][ T5877] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1765.214606][   T24] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1765.223302][ T5877] usb 9-1: config 0 has no interface number 0
[ 1765.254657][ T5877] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1765.267451][ T5890] usb 8-1: new high-speed USB device number 71 using dummy_hcd
[ 1765.274653][ T5877] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1765.308772][ T5877] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1765.318917][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1765.335155][ T5877] usb 9-1: config 0 descriptor??
[ 1765.343929][T27446] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1765.355910][ T5877] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1765.396280][   T24] usb 5-1: config 10 has an invalid interface number: 234 but max is 0
[ 1765.407713][   T24] usb 5-1: config 10 has no interface number 0
[ 1765.413959][   T24] usb 5-1: config 10 interface 234 has no altsetting 0
[ 1765.426642][   T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=6251, bcdDevice=25.db
[ 1765.437979][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1765.447991][ T5890] usb 8-1: config 0 has no interfaces?
[ 1765.454206][   T24] usb 5-1: Product: syz
[ 1765.464788][   T24] usb 5-1: Manufacturer: syz
[ 1765.469790][   T24] usb 5-1: SerialNumber: syz
[ 1765.476309][ T5890] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1765.493347][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1765.511086][T27454] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1765.522386][ T5890] usb 8-1: Product: syz
[ 1765.533615][ T5890] usb 8-1: Manufacturer: syz
[ 1765.544489][ T5890] usb 8-1: SerialNumber: syz
[ 1765.573878][ T5890] usb 8-1: config 0 descriptor??
[ 1765.638676][   T43] usb 9-1: USB disconnect, device number 93
[ 1765.638915][    C0] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1765.717331][   T24] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6251
[ 1765.733201][   T24] gspca_sn9c20x: Write register 1000 failed -71
[ 1765.741011][   T24] gspca_sn9c20x: Device initialization failed
[ 1765.747875][   T24] gspca_sn9c20x 5-1:10.234: probe with driver gspca_sn9c20x failed with error -71
[ 1765.761039][   T24] usb 5-1: USB disconnect, device number 102
[ 1765.804026][ T5890] usb 8-1: USB disconnect, device number 71
[ 1766.440585][   T30] audit: type=1326 audit(1770003555.717:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27457 comm="syz.4.6263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7ffb8db94cd7 code=0x0
[ 1766.508048][T27461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6263'.
[ 1766.508075][T27461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6263'.
[ 1767.546362][T27482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6271'.
[ 1768.574553][   T43] usb 9-1: new high-speed USB device number 94 using dummy_hcd
[ 1768.768811][   T43] usb 9-1: config 0 has no interfaces?
[ 1768.778142][   T43] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1768.791077][   T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1768.803439][   T43] usb 9-1: Product: syz
[ 1768.810872][   T43] usb 9-1: Manufacturer: syz
[ 1768.825436][   T43] usb 9-1: SerialNumber: syz
[ 1768.841353][   T43] usb 9-1: config 0 descriptor??
[ 1768.884525][ T5890] usb 8-1: new high-speed USB device number 72 using dummy_hcd
[ 1769.094985][ T5890] usb 8-1: Using ep0 maxpacket: 16
[ 1769.107237][T25573] usb 9-1: USB disconnect, device number 94
[ 1769.155299][ T5890] usb 8-1: config 0 has no interfaces?
[ 1769.183129][ T5890] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1769.211517][ T5890] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1769.235439][ T5890] usb 8-1: Manufacturer: syz
[ 1769.269845][ T5890] usb 8-1: config 0 descriptor??
[ 1769.485985][T27500] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1770.024070][T27511] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6280'.
[ 1770.034304][T27512] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6280'.
[ 1770.049903][T27511] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6280'.
[ 1770.059853][T27512] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6280'.
[ 1770.604656][ T5890] usb 9-1: new high-speed USB device number 95 using dummy_hcd
[ 1770.771818][T27179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1770.794584][T27179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1770.811364][ T5890] usb 9-1: Using ep0 maxpacket: 32
[ 1770.811488][T27179] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1770.832648][T27179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1770.840920][T27179] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1770.853541][ T5890] usb 9-1: config 0 has an invalid interface number: 23 but max is 0
[ 1770.887198][ T5890] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1770.937215][ T5890] usb 9-1: config 0 has no interface number 0
[ 1770.959202][ T5890] usb 9-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1771.006098][ T5890] usb 9-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1771.048352][ T5890] usb 9-1: config 0 interface 23 altsetting 2 endpoint 0xC has invalid maxpacket 1143, setting to 64
[ 1771.088569][ T5890] usb 9-1: config 0 interface 23 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[ 1771.135141][ T5890] usb 9-1: config 0 interface 23 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64
[ 1771.170865][ T5890] usb 9-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[ 1771.206617][ T5890] usb 9-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1771.274493][ T5890] usb 9-1: config 0 interface 23 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 15
[ 1771.331841][ T5890] usb 9-1: config 0 interface 23 has no altsetting 0
[ 1771.367361][ T5890] usb 9-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b
[ 1771.411675][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1771.476293][ T5890] usb 9-1: config 0 descriptor??
[ 1771.483108][T27518] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1771.707125][T27525] chnl_net:caif_netlink_parms(): no params data found
[ 1771.782180][T27518] Invalid logical block size (4194304)
[ 1771.816936][ T5890] usb 9-1: string descriptor 0 read error: -71
[ 1771.852246][ T5890] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[ 1771.910896][ T5890] gspca_mr97310a: reg write [21] error -8
[ 1771.921062][ T5890] mr97310a 9-1:0.23: probe with driver mr97310a failed with error -8
[ 1771.941781][T20820] usb 8-1: USB disconnect, device number 72
[ 1771.982254][ T5890] usb 9-1: USB disconnect, device number 95
[ 1772.204122][T27525] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1772.223398][T27525] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1772.241315][T27525] bridge_slave_0: entered allmulticast mode
[ 1772.253945][T27525] bridge_slave_0: entered promiscuous mode
[ 1772.263619][T27525] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1772.271647][T27525] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1772.280048][T27525] bridge_slave_1: entered allmulticast mode
[ 1772.289277][T27525] bridge_slave_1: entered promiscuous mode
[ 1772.340694][T27525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1772.372113][T27525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1772.454484][T20820] usb 8-1: new high-speed USB device number 73 using dummy_hcd
[ 1772.483865][T27525] team0: Port device team_slave_0 added
[ 1772.506296][T27525] team0: Port device team_slave_1 added
[ 1772.608115][T27525] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1772.623303][T27548] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6291'.
[ 1772.636141][T20820] usb 8-1: config 0 has no interfaces?
[ 1772.641756][T27525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1772.679415][T27525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1772.698300][T20820] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1772.698604][T27525] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1772.715046][T27525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1772.742855][T20820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1772.751998][T27525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1772.761838][T20820] usb 8-1: Product: syz
[ 1772.771899][T20820] usb 8-1: Manufacturer: syz
[ 1772.782030][T20820] usb 8-1: SerialNumber: syz
[ 1772.806742][T20820] usb 8-1: config 0 descriptor??
[ 1772.925538][T27179] Bluetooth: hci2: command tx timeout
[ 1772.971382][T27525] hsr_slave_0: entered promiscuous mode
[ 1772.990296][T27525] hsr_slave_1: entered promiscuous mode
[ 1773.011350][T27525] debugfs: 'hsr0' already exists in 'hsr'
[ 1773.042476][T27525] Cannot create hsr debugfs directory
[ 1773.066691][T20820] usb 8-1: USB disconnect, device number 73
[ 1773.957116][T27570] kAFS: unable to lookup cell 'ÿ'
[ 1773.988614][T27570] kAFS: unable to lookup cell '(,c¾Ì'
[ 1774.006349][T27525] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1774.081939][T27525] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1774.646488][T27572] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1774.687216][T27525] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1774.781767][T27525] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1775.006018][T27179] Bluetooth: hci2: command tx timeout
[ 1775.425722][T27525] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1775.557719][T27525] 8021q: adding VLAN 0 to HW filter on device team0
[ 1775.588582][T19733] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1775.595975][T19733] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1775.675448][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1775.682623][ T8109] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1775.922935][T27525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1776.061138][   T43] hid-generic 00A0:0006:0003.0063: unknown main item tag 0x0
[ 1776.093768][   T43] hid-generic 00A0:0006:0003.0063: unknown main item tag 0x0
[ 1776.116548][T27525] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1776.144512][   T43] hid-generic 00A0:0006:0003.0063: unknown main item tag 0x0
[ 1776.186633][   T43] hid-generic 00A0:0006:0003.0063: unknown main item tag 0x0
[ 1776.206774][T27600] FAULT_INJECTION: forcing a failure.
[ 1776.206774][T27600] name failslab, interval 1, probability 0, space 0, times 0
[ 1776.220050][T27600] CPU: 1 UID: 0 PID: 27600 Comm: syz.7.6303 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1776.220083][T27600] Tainted: [L]=SOFTLOCKUP
[ 1776.220091][T27600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1776.220104][T27600] Call Trace:
[ 1776.220118][T27600]  <TASK>
[ 1776.220125][T27600]  dump_stack_lvl+0xe8/0x150
[ 1776.220155][T27600]  should_fail_ex+0x412/0x560
[ 1776.220178][T27600]  should_failslab+0xa8/0x100
[ 1776.220197][T27600]  __kmalloc_cache_noprof+0x83/0x6e0
[ 1776.220214][T27600]  ? tipc_nametbl_insert_publ+0x64/0x1360
[ 1776.220239][T27600]  tipc_nametbl_insert_publ+0x64/0x1360
[ 1776.220263][T27600]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1776.220282][T27600]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1776.220300][T27600]  ? tipc_net+0x45/0x270
[ 1776.220319][T27600]  ? tipc_net+0x45/0x270
[ 1776.220339][T27600]  ? tipc_nametbl_publish+0x77/0x1f0
[ 1776.220361][T27600]  tipc_nametbl_publish+0xc7/0x1f0
[ 1776.220386][T27600]  tipc_sk_publish+0x17b/0x3c0
[ 1776.220416][T27600]  ? __pfx_tipc_sk_publish+0x10/0x10
[ 1776.220438][T27600]  ? tipc_nametbl_build_group+0x4c8/0x500
[ 1776.220458][T27600]  ? tipc_nametbl_build_group+0x2e/0x500
[ 1776.220484][T27600]  tipc_sk_join+0x3ab/0x6a0
[ 1776.220500][T27600]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1776.220519][T27600]  ? __pfx_tipc_sk_join+0x10/0x10
[ 1776.220537][T27600]  ? __local_bh_enable_ip+0xd0/0x130
[ 1776.220554][T27600]  tipc_setsockopt+0x73e/0x990
[ 1776.220575][T27600]  ? __pfx_tipc_setsockopt+0x10/0x10
[ 1776.220591][T27600]  ? __fget_files+0x2a/0x420
[ 1776.220607][T27600]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1776.220629][T27600]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1776.220645][T27600]  ? __pfx_tipc_setsockopt+0x10/0x10
[ 1776.220661][T27600]  do_sock_setsockopt+0x17c/0x1b0
[ 1776.220685][T27600]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1776.220709][T27600]  do_syscall_64+0xe2/0xf80
[ 1776.220725][T27600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1776.220739][T27600]  ? trace_irq_disable+0x37/0x100
[ 1776.220755][T27600]  ? clear_bhb_loop+0x60/0xb0
[ 1776.220773][T27600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1776.220788][T27600] RIP: 0033:0x7fb6b639aeb9
[ 1776.220802][T27600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1776.220815][T27600] RSP: 002b:00007fb6b7342028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1776.220832][T27600] RAX: ffffffffffffffda RBX: 00007fb6b6615fa0 RCX: 00007fb6b639aeb9
[ 1776.220843][T27600] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004
[ 1776.220852][T27600] RBP: 00007fb6b7342090 R08: 0000000000000010 R09: 0000000000000000
[ 1776.220862][T27600] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001
[ 1776.220872][T27600] R13: 00007fb6b6616038 R14: 00007fb6b6615fa0 R15: 00007fb6b673fa48
[ 1776.220895][T27600]  </TASK>
[ 1776.501843][   T43] hid-generic 00A0:0006:0003.0063: unknown main item tag 0x0
[ 1776.511249][   T43] hid-generic 00A0:0006:0003.0063: unknown main item tag 0x0
[ 1776.519368][   T43] hid-generic 00A0:0006:0003.0063: unknown main item tag 0x0
[ 1776.527010][   T43] hid-generic 00A0:0006:0003.0063: unknown main item tag 0x0
[ 1776.534517][   T43] hid-generic 00A0:0006:0003.0063: unknown main item tag 0x7
[ 1776.606860][   T43] hid-generic 00A0:0006:0003.0063: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz0
[ 1776.691915][T27525] veth0_vlan: entered promiscuous mode
[ 1776.706423][T27525] veth1_vlan: entered promiscuous mode
[ 1776.796312][T27525] veth0_macvtap: entered promiscuous mode
[ 1776.826809][T27525] veth1_macvtap: entered promiscuous mode
[ 1776.906261][T27525] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1776.938736][T27525] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1777.021874][T14875] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1777.049879][T14875] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1777.085508][T27179] Bluetooth: hci2: command tx timeout
[ 1777.115787][T21707] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1777.166929][T21707] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1777.444752][ T5877] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1777.557968][T19733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1777.589565][T19733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1777.614657][ T5877] usb 5-1: Using ep0 maxpacket: 16
[ 1777.634630][ T5877] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[ 1777.667656][ T5877] usb 5-1: config 0 has no interface number 0
[ 1777.705052][ T5877] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1777.745528][ T5877] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1777.758502][T19733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1777.778770][ T5877] usb 5-1: config 0 interface 41 has no altsetting 0
[ 1777.784995][T19733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1777.818404][ T5877] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1777.850629][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1777.895115][ T5877] usb 5-1: Product: syz
[ 1777.911336][ T5877] usb 5-1: Manufacturer: syz
[ 1777.919729][ T5877] usb 5-1: SerialNumber: syz
[ 1777.950549][ T5877] usb 5-1: config 0 descriptor??
[ 1777.996858][T27602] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1778.024224][T27602] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1778.146621][T27617] fuse: Bad value for 'fd'
[ 1778.295742][T27602] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1778.341277][T27602] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1778.755777][T27614] fuse: Bad value for 'fd'
[ 1779.165068][T27179] Bluetooth: hci2: command tx timeout
[ 1780.873699][ T5877] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[ 1780.889718][ T5877] usb 5-1: USB disconnect, device number 103
[ 1781.082198][T27643] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[ 1781.172804][T27643] bond1 (unregistering): Released all slaves
[ 1781.307950][T27646] syz_tun: entered allmulticast mode
[ 1781.449307][T27649] dvmrp6: entered allmulticast mode
[ 1781.875287][   T10] usb 8-1: new high-speed USB device number 74 using dummy_hcd
[ 1781.900474][T27662] netlink: 'syz.6.6321': attribute type 1 has an invalid length.
[ 1782.056173][   T10] usb 8-1: Using ep0 maxpacket: 16
[ 1782.072027][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1782.095834][   T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1782.115075][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1782.168508][   T10] usb 8-1: config 0 descriptor??
[ 1782.591030][   T10] mcp2221 0003:04D8:00DD.0064: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[ 1782.634240][T27685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6329'.
[ 1782.883769][ T5877] usb 8-1: USB disconnect, device number 74
[ 1783.134907][T27691] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1783.414482][ T5913] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1783.552763][T27691] tipc: Enabling of bearer <ib:wg1> rejected, already enabled
[ 1783.645614][T20820] usb 9-1: new full-speed USB device number 96 using dummy_hcd
[ 1783.754498][ T5913] usb 10-1: Using ep0 maxpacket: 8
[ 1783.806958][T20820] usb 9-1: config 0 has an invalid interface number: 133 but max is 0
[ 1783.838700][T27702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1783.848760][T20820] usb 9-1: config 0 has no interface number 0
[ 1783.892463][T20820] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 1783.905129][T27702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1783.926281][T20820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1783.958253][T20820] usb 9-1: Product: syz
[ 1783.974017][T20820] usb 9-1: Manufacturer: syz
[ 1783.981656][T20820] usb 9-1: SerialNumber: syz
[ 1784.017349][T20820] usb 9-1: config 0 descriptor??
[ 1784.664453][ T5877] usb 8-1: new high-speed USB device number 75 using dummy_hcd
[ 1784.845678][ T5877] usb 8-1: Using ep0 maxpacket: 16
[ 1784.883725][ T5877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1784.936316][ T5877] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1784.982614][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1785.023596][ T5877] usb 8-1: config 0 descriptor??
[ 1785.102353][T27714] FAULT_INJECTION: forcing a failure.
[ 1785.102353][T27714] name failslab, interval 1, probability 0, space 0, times 0
[ 1785.131817][T27714] CPU: 1 UID: 0 PID: 27714 Comm: syz.6.6339 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1785.131853][T27714] Tainted: [L]=SOFTLOCKUP
[ 1785.131862][T27714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1785.131878][T27714] Call Trace:
[ 1785.131886][T27714]  <TASK>
[ 1785.131897][T27714]  dump_stack_lvl+0xe8/0x150
[ 1785.131930][T27714]  should_fail_ex+0x412/0x560
[ 1785.131962][T27714]  should_failslab+0xa8/0x100
[ 1785.131989][T27714]  kmem_cache_alloc_noprof+0x87/0x6e0
[ 1785.132019][T27714]  ? __netlink_lookup+0xc6/0x8b0
[ 1785.132045][T27714]  ? skb_clone+0x212/0x3a0
[ 1785.132079][T27714]  skb_clone+0x212/0x3a0
[ 1785.132113][T27714]  __netlink_deliver_tap+0x404/0x850
[ 1785.132149][T27714]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1785.132173][T27714]  netlink_deliver_tap+0x19c/0x1b0
[ 1785.132197][T27714]  netlink_unicast+0x7e3/0x9b0
[ 1785.132239][T27714]  ? __pfx_netlink_unicast+0x10/0x10
[ 1785.132276][T27714]  ? __alloc_skb+0x193/0x390
[ 1785.132301][T27714]  ? netlink_sendmsg+0x650/0xb40
[ 1785.132326][T27714]  ? skb_put+0x11b/0x210
[ 1785.132357][T27714]  netlink_sendmsg+0x813/0xb40
[ 1785.132390][T27714]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1785.132416][T27714]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1785.132446][T27714]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1785.132479][T27714]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1785.132502][T27714]  ____sys_sendmsg+0xa68/0xad0
[ 1785.132530][T27714]  ? __might_fault+0xaf/0x130
[ 1785.132570][T27714]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1785.132608][T27714]  ? import_iovec+0x73/0xa0
[ 1785.132653][T27714]  ___sys_sendmsg+0x2a5/0x360
[ 1785.132679][T27714]  ? __lock_acquire+0x6b5/0x2cf0
[ 1785.132714][T27714]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1785.132781][T27714]  ? __fget_files+0x2a/0x420
[ 1785.132804][T27714]  ? __fget_files+0x3a0/0x420
[ 1785.132838][T27714]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1785.132871][T27714]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1785.132910][T27714]  ? __pfx_ksys_write+0x10/0x10
[ 1785.132951][T27714]  do_syscall_64+0xe2/0xf80
[ 1785.132975][T27714]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1785.133002][T27714]  ? trace_irq_disable+0x37/0x100
[ 1785.133022][T27714]  ? clear_bhb_loop+0x60/0xb0
[ 1785.133048][T27714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1785.133070][T27714] RIP: 0033:0x7fe16b99aeb9
[ 1785.133090][T27714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1785.133109][T27714] RSP: 002b:00007fe16c828028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1785.133133][T27714] RAX: ffffffffffffffda RBX: 00007fe16bc15fa0 RCX: 00007fe16b99aeb9
[ 1785.133149][T27714] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1785.133163][T27714] RBP: 00007fe16c828090 R08: 0000000000000000 R09: 0000000000000000
[ 1785.133177][T27714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1785.133191][T27714] R13: 00007fe16bc16038 R14: 00007fe16bc15fa0 R15: 00007fe16bd3fa48
[ 1785.133225][T27714]  </TASK>
[ 1785.766300][T20820] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected
[ 1785.792326][T20820] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81
[ 1785.845568][T20820] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1
[ 1785.870315][T20820] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2
[ 1785.906331][T20820] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1785.951172][T20820] usb 9-1: USB disconnect, device number 96
[ 1786.023224][T20820] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1786.036332][ T5877] mcp2221 0003:04D8:00DD.0065: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[ 1786.070538][T20820] keyspan 9-1:0.133: device disconnected
[ 1786.120122][T27721] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1786.139015][ T5913] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1786.161513][ T5913] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1786.169655][ T5913] usb 10-1: can't read configurations, error -71
[ 1786.197228][ T5877] usb 8-1: USB disconnect, device number 75
[ 1786.343381][T27721] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1786.383994][T27721] netlink: 'syz.8.6342': attribute type 21 has an invalid length.
[ 1786.461428][T27721] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1786.537777][T27721] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[ 1787.225463][ T5890] usb 8-1: new high-speed USB device number 76 using dummy_hcd
[ 1787.407838][ T5890] usb 8-1: config index 0 descriptor too short (expected 39, got 27)
[ 1787.452362][ T5890] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1787.523224][ T5890] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1787.563585][ T5890] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1787.593239][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1787.624576][ T5890] usb 8-1: Product: syz
[ 1787.628798][ T5890] usb 8-1: Manufacturer: syz
[ 1787.633427][ T5890] usb 8-1: SerialNumber: syz
[ 1787.705140][ T5890] usb 8-1: config 0 descriptor??
[ 1787.725487][ T5890] hub 8-1:0.0: bad descriptor, ignoring hub
[ 1787.734930][ T5913] usb 9-1: new high-speed USB device number 97 using dummy_hcd
[ 1787.754528][ T5890] hub 8-1:0.0: probe with driver hub failed with error -5
[ 1787.805253][ T5890] usb 8-1: selecting invalid altsetting 0
[ 1787.920516][ T5913] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1787.937779][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1787.950720][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1787.971165][ T5913] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1787.985401][ T5913] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1787.995085][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1788.035868][ T5913] usb 9-1: config 0 descriptor??
[ 1788.434692][T27739] usb 8-1: reset high-speed USB device number 76 using dummy_hcd
[ 1788.480054][ T5913] plantronics 0003:047F:FFFF.0066: ignoring exceeding usage max
[ 1788.500966][ T5913] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1788.622015][T27739] usb 8-1: device firmware changed
[ 1788.639164][ T5877] usb 8-1: USB disconnect, device number 76
[ 1788.840865][T27768] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1788.914595][ T5877] usb 8-1: new high-speed USB device number 77 using dummy_hcd
[ 1789.054975][T25573] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1789.066474][ T5877] usb 8-1: config index 0 descriptor too short (expected 39, got 27)
[ 1789.075138][ T5877] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1789.092996][ T5877] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1789.105201][ T5877] usb 8-1: string descriptor 0 read error: -22
[ 1789.111886][ T5877] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1789.121815][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1789.138927][ T5877] usb 8-1: config 0 descriptor??
[ 1789.168157][ T5877] hub 8-1:0.0: bad descriptor, ignoring hub
[ 1789.174260][ T5877] hub 8-1:0.0: probe with driver hub failed with error -5
[ 1789.190765][ T5877] usb 8-1: selecting invalid altsetting 0
[ 1789.204645][T25573] usb 5-1: Using ep0 maxpacket: 32
[ 1789.218046][T25573] usb 5-1: config 0 has an invalid interface number: 23 but max is 0
[ 1789.234910][T25573] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1789.284671][T25573] usb 5-1: config 0 has no interface number 0
[ 1789.301041][T25573] usb 5-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1789.317247][T25573] usb 5-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1789.331128][T25573] usb 5-1: config 0 interface 23 altsetting 2 endpoint 0xC has invalid maxpacket 1143, setting to 64
[ 1789.342588][T25573] usb 5-1: config 0 interface 23 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[ 1789.361700][T25573] usb 5-1: config 0 interface 23 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64
[ 1789.373906][T25573] usb 5-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[ 1789.388681][T25573] usb 5-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1789.399901][T25573] usb 5-1: config 0 interface 23 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 15
[ 1789.427181][T25573] usb 5-1: config 0 interface 23 has no altsetting 0
[ 1789.444691][T25573] usb 5-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b
[ 1789.453819][T25573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1789.481144][T25573] usb 5-1: config 0 descriptor??
[ 1789.489591][T27771] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[ 1789.503078][T27777] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6362'.
[ 1789.513398][T20820] usb 8-1: USB disconnect, device number 77
[ 1789.702250][T27771] Invalid logical block size (50331648)
[ 1789.709346][T25573] usb 5-1: string descriptor 0 read error: -71
[ 1789.723132][T25573] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[ 1789.731060][T25573] gspca_mr97310a: reg write [21] error -8
[ 1789.737160][T25573] mr97310a 5-1:0.23: probe with driver mr97310a failed with error -8
[ 1789.752451][T25573] usb 5-1: USB disconnect, device number 104
[ 1789.844863][T20820] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1790.007188][T20820] usb 10-1: config 0 has an invalid interface number: 190 but max is 0
[ 1790.017530][T20820] usb 10-1: config 0 has no interface number 0
[ 1790.026812][T20820] usb 10-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=71.eb
[ 1790.038548][T20820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1790.047038][T20820] usb 10-1: Product: syz
[ 1790.051498][T20820] usb 10-1: Manufacturer: syz
[ 1790.056728][T20820] usb 10-1: SerialNumber: syz
[ 1790.063607][T20820] usb 10-1: config 0 descriptor??
[ 1790.076834][T20820] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.190/input/input128
[ 1790.241899][T25573] usb 8-1: new high-speed USB device number 78 using dummy_hcd
[ 1790.293132][T27785] loop4: detected capacity change from 0 to 1
[ 1790.300013][T27779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1790.311366][T27779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1790.347052][T27785] Dev loop4: unable to read RDB block 1
[ 1790.357824][ T5181] bcm5974 10-1:0.190: could not read from device
[ 1790.365753][T27785]  loop4: unable to read partition table
[ 1790.387541][T27785] loop4: partition table beyond EOD, truncated
[ 1790.393906][T27785] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{
WÎÉ´å) failed (rc=-5)
[ 1790.410912][ T5181] bcm5974 10-1:0.190: could not read from device
[ 1790.422901][T20820] usb 10-1: USB disconnect, device number 4
[ 1790.429856][ T5181] bcm5974 10-1:0.190: could not read from device
[ 1790.447388][T25573] usb 8-1: Using ep0 maxpacket: 16
[ 1790.474883][T25573] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1790.498424][T25573] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1790.522524][T25573] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1790.546978][ T5913] usb 9-1: USB disconnect, device number 97
[ 1790.564534][T25573] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 50939, setting to 1024
[ 1790.592113][T25573] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1790.625913][T25573] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1790.642976][T25573] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1790.652564][T25573] usb 8-1: Manufacturer: syz
[ 1790.661220][T25573] usb 8-1: config 0 descriptor??
[ 1790.869760][T27798] dvmrp12: entered allmulticast mode
[ 1790.884831][T25573] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1790.895192][T27797] dvmrp12: left allmulticast mode
[ 1791.055170][T25573] usb 5-1: Using ep0 maxpacket: 32
[ 1791.104144][T25573] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1791.126564][T27804] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6373'.
[ 1791.135622][T25573] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[ 1791.135657][T25573] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20
[ 1791.172056][T25573] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1791.195840][T25573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1791.203984][T25573] usb 5-1: SerialNumber: syz
[ 1791.260052][T27792] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1791.272387][T27808] FAULT_INJECTION: forcing a failure.
[ 1791.272387][T27808] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1791.297815][T27808] CPU: 0 UID: 0 PID: 27808 Comm: syz.8.6374 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1791.297849][T27808] Tainted: [L]=SOFTLOCKUP
[ 1791.297857][T27808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1791.297876][T27808] Call Trace:
[ 1791.297883][T27808]  <TASK>
[ 1791.297889][T27808]  dump_stack_lvl+0xe8/0x150
[ 1791.297914][T27808]  should_fail_ex+0x412/0x560
[ 1791.297960][T27808]  _copy_from_iter+0x1d3/0x1670
[ 1791.297994][T27808]  ? trace_kmem_cache_alloc+0x1f/0xb0
[ 1791.298035][T27808]  ? __pfx__copy_from_iter+0x10/0x10
[ 1791.298056][T27808]  ? __build_skb_around+0x22d/0x3c0
[ 1791.298090][T27808]  ? __alloc_skb+0x193/0x390
[ 1791.298116][T27808]  ? netlink_sendmsg+0x650/0xb40
[ 1791.298137][T27808]  ? skb_put+0x11b/0x210
[ 1791.298165][T27808]  netlink_sendmsg+0x6c0/0xb40
[ 1791.298196][T27808]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1791.298215][T27808]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1791.298249][T27808]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1791.298274][T27808]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1791.298297][T27808]  ____sys_sendmsg+0xa68/0xad0
[ 1791.298325][T27808]  ? __might_fault+0xaf/0x130
[ 1791.298361][T27808]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1791.298402][T27808]  ? import_iovec+0x73/0xa0
[ 1791.298450][T27808]  ___sys_sendmsg+0x2a5/0x360
[ 1791.298476][T27808]  ? __lock_acquire+0x6b5/0x2cf0
[ 1791.298512][T27808]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1791.298558][T27808]  ? __fget_files+0x2a/0x420
[ 1791.298592][T27808]  ? __fget_files+0x3a0/0x420
[ 1791.298625][T27808]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1791.298656][T27808]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1791.298690][T27808]  ? __pfx_ksys_write+0x10/0x10
[ 1791.298720][T27808]  do_syscall_64+0xe2/0xf80
[ 1791.298756][T27808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1791.298776][T27808]  ? trace_irq_disable+0x37/0x100
[ 1791.298796][T27808]  ? clear_bhb_loop+0x60/0xb0
[ 1791.298824][T27808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1791.298843][T27808] RIP: 0033:0x7f3624b9aeb9
[ 1791.298857][T27808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1791.298871][T27808] RSP: 002b:00007f36259e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1791.298906][T27808] RAX: ffffffffffffffda RBX: 00007f3624e15fa0 RCX: 00007f3624b9aeb9
[ 1791.298921][T27808] RDX: 000000000400c880 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1791.298935][T27808] RBP: 00007f36259e1090 R08: 0000000000000000 R09: 0000000000000000
[ 1791.298947][T27808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1791.298959][T27808] R13: 00007f3624e16038 R14: 00007f3624e15fa0 R15: 00007f3624f3fa48
[ 1791.298992][T27808]  </TASK>
[ 1791.580444][T25573] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[ 1791.884331][T27800] [U] 
[ 1791.925123][T25573] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[ 1791.976719][T25573] usb 5-1: USB disconnect, device number 105
[ 1792.543699][T27817] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1792.552165][T27817] syzkaller0: entered promiscuous mode
[ 1792.558870][T27817] syzkaller0: entered allmulticast mode
[ 1792.604138][T27817] tipc: Resetting bearer <eth:syzkaller0>
[ 1793.317659][T27816] tipc: Resetting bearer <eth:syzkaller0>
[ 1793.531062][T25573] usb 8-1: USB disconnect, device number 78
[ 1793.999847][T27816] tipc: Disabling bearer <eth:syzkaller0>
[ 1794.165413][T27831] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6379'.
[ 1794.205029][T27831] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6379'.
[ 1794.370106][T27840] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6384'.
[ 1794.555621][T27845] tipc: Publication distribution failure
[ 1794.562758][T27850] netlink: 'syz.4.6382': attribute type 10 has an invalid length.
[ 1794.580642][T27850] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6382'.
[ 1794.612918][T27849] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6386'.
[ 1794.675248][T27842] ip6gre2: left promiscuous mode
[ 1794.778413][T27850] ipvlan1: entered promiscuous mode
[ 1794.789374][T27850] ipvlan1: entered allmulticast mode
[ 1794.807255][T27850] veth0_vlan: entered allmulticast mode
[ 1794.866270][T27850] bridge0: port 3(ipvlan1) entered blocking state
[ 1794.891797][T27850] bridge0: port 3(ipvlan1) entered disabled state
[ 1794.916453][T27850] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1795.374565][T20820] usb 8-1: new high-speed USB device number 79 using dummy_hcd
[ 1795.544503][T20820] usb 8-1: Using ep0 maxpacket: 16
[ 1795.602813][T20820] usb 8-1: config 0 has no interfaces?
[ 1795.640860][T20820] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1795.723713][T20820] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1795.752439][T20820] usb 8-1: Manufacturer: syz
[ 1795.866387][T20820] usb 8-1: config 0 descriptor??
[ 1796.500535][T27861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1796.702830][T27862] [U] 
[ 1796.806627][T27887] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6395'.
[ 1796.833597][T27887] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6395'.
[ 1796.929861][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1796.937423][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1797.269161][T27898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1798.579019][T27912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6400'.
[ 1798.616302][T27915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1798.649954][T27915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1798.706726][T20820] usb 8-1: USB disconnect, device number 79
[ 1798.777248][T27917] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1798.874548][ T5877] usb 9-1: new high-speed USB device number 98 using dummy_hcd
[ 1799.701477][T27947] team_slave_0: entered promiscuous mode
[ 1799.728664][T27947] team_slave_0: entered allmulticast mode
[ 1799.742801][T27949] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6411'.
[ 1799.837480][T27952] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6414'.
[ 1800.139431][T27928] [U] 
[ 1800.416608][T27960] overlayfs: missing 'lowerdir'
[ 1800.706698][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6419'.
[ 1800.744304][T27967] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1800.916658][T27967] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1801.014590][   T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1801.295542][   T24] usb 5-1: Using ep0 maxpacket: 16
[ 1801.338163][   T24] usb 5-1: config 0 has no interfaces?
[ 1801.358996][   T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1801.412925][   T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1801.421906][   T24] usb 5-1: Manufacturer: syz
[ 1801.430942][   T24] usb 5-1: config 0 descriptor??
[ 1801.773133][   T30] audit: type=1326 audit(1770003591.047:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27981 comm="syz.7.6424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb6b6394cd7 code=0x0
[ 1801.857548][T27968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1801.873102][ T5890] usb 9-1: new high-speed USB device number 99 using dummy_hcd
[ 1801.889362][T27985] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6424'.
[ 1801.926850][T27985] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6424'.
[ 1802.024654][ T5890] usb 9-1: Using ep0 maxpacket: 16
[ 1802.108494][ T5890] usb 9-1: config 0 has no interfaces?
[ 1802.130529][ T5890] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1802.167059][ T5890] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1802.233157][ T5890] usb 9-1: Manufacturer: syz
[ 1802.295387][ T5890] usb 9-1: config 0 descriptor??
[ 1803.469006][T27995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1803.939097][T27998] dvmrp12: entered allmulticast mode
[ 1803.990495][T27996] dvmrp12: left allmulticast mode
[ 1804.326474][   T24] usb 5-1: USB disconnect, device number 106
[ 1804.551348][T28006] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6429'.
[ 1804.785143][ T5877] usb 8-1: new high-speed USB device number 80 using dummy_hcd
[ 1805.019177][ T5877] usb 8-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[ 1805.046860][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1805.159303][ T5877] usb 8-1: Product: syz
[ 1805.202092][ T5877] usb 8-1: Manufacturer: syz
[ 1805.205189][ T5890] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1805.267729][ T5877] usb 8-1: SerialNumber: syz
[ 1805.372314][T20820] usb 9-1: USB disconnect, device number 99
[ 1805.384489][ T5890] usb 10-1: Using ep0 maxpacket: 32
[ 1805.402451][ T5890] usb 10-1: config 0 has an invalid interface number: 23 but max is 0
[ 1805.431256][ T5890] usb 10-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1805.463769][ T5890] usb 10-1: config 0 has no interface number 0
[ 1805.480976][T28007] [U] 
[ 1805.484719][ T5890] usb 10-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1805.496186][T28015] netlink: 'syz.8.6431': attribute type 15 has an invalid length.
[ 1805.517553][ T5877] usb 8-1: config 0 descriptor??
[ 1805.524137][ T5890] usb 10-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1805.567092][ T5877] hub 8-1:0.0: bad descriptor, ignoring hub
[ 1805.573259][ T5890] usb 10-1: config 0 interface 23 altsetting 2 endpoint 0xC has invalid maxpacket 1143, setting to 64
[ 1805.616979][ T5890] usb 10-1: config 0 interface 23 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[ 1805.666473][ T5877] hub 8-1:0.0: probe with driver hub failed with error -5
[ 1805.687022][ T5890] usb 10-1: config 0 interface 23 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64
[ 1805.696702][ T5877] f81232 8-1:0.0: f81534a converter detected
[ 1805.716587][T28018] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6432'.
[ 1805.736333][ T5890] usb 10-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[ 1805.772354][T28018] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6432'.
[ 1805.773128][ T5890] usb 10-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1805.783532][ T5877] f81534a ttyUSB0: f81232_set_register failed status: -71
[ 1805.842325][ T5890] usb 10-1: config 0 interface 23 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 15
[ 1805.882459][ T5890] usb 10-1: config 0 interface 23 has no altsetting 0
[ 1805.901393][ T5877] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[ 1805.915563][ T5890] usb 10-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b
[ 1805.934599][ T5890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1805.964154][ T5890] usb 10-1: config 0 descriptor??
[ 1805.978467][T28012] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1805.994629][ T5877] usb 8-1: USB disconnect, device number 80
[ 1806.044258][ T5877] f81232 8-1:0.0: device disconnected
[ 1806.090389][T28021] overlayfs: missing 'lowerdir'
[ 1806.230738][T28012] Invalid logical block size (100663296)
[ 1806.252466][ T5890] usb 10-1: string descriptor 0 read error: -71
[ 1806.277234][ T5890] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[ 1806.334773][ T5890] gspca_mr97310a: reg write [21] error -8
[ 1806.341597][ T5890] mr97310a 10-1:0.23: probe with driver mr97310a failed with error -8
[ 1806.395107][ T5890] usb 10-1: USB disconnect, device number 5
[ 1807.276097][T28028] team0 (unregistering): Port device team_slave_0 removed
[ 1807.397985][T28028] team0 (unregistering): Port device team_slave_1 removed
[ 1807.516466][T28028] team0 (unregistering): Port device geneve0 removed
[ 1807.846222][T28028] team0 (unregistering): Port device netdevsim0 removed
[ 1807.891266][T28040] dvmrp12: entered allmulticast mode
[ 1807.922348][T28038] dvmrp12: left allmulticast mode
[ 1809.063924][T28066] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1809.070436][T28066] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1809.374750][T25573] usb 9-1: new high-speed USB device number 100 using dummy_hcd
[ 1809.546540][T25573] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1809.561755][T25573] usb 9-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b
[ 1809.583163][T25573] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1809.606040][T25573] usb 9-1: config 0 descriptor??
[ 1809.627392][T20820] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1809.646296][T25573] usb 9-1: selecting invalid altsetting 0
[ 1809.652181][T25573] usb 9-1: can't set first interface for hiFace device.
[ 1809.673151][T25573] snd-usb-hiface 9-1:0.0: probe with driver snd-usb-hiface failed with error -5
[ 1809.815240][T20820] usb 5-1: Using ep0 maxpacket: 8
[ 1809.825257][T20820] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1809.834982][T20820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1809.843022][T20820] usb 5-1: Product: syz
[ 1809.851286][ T5877] usb 9-1: USB disconnect, device number 100
[ 1809.856587][T20820] usb 5-1: Manufacturer: syz
[ 1809.873238][T20820] usb 5-1: SerialNumber: syz
[ 1809.899668][T20820] usb 5-1: config 0 descriptor??
[ 1810.089300][T28082] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6449'.
[ 1810.107527][T28082] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6449'.
[ 1810.140394][T28083] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6449'.
[ 1810.179703][T20820] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1810.200135][T28083] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6449'.
[ 1810.731713][T28088] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6451'.
[ 1811.267766][T25573] usb 9-1: new high-speed USB device number 101 using dummy_hcd
[ 1811.509457][T25573] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1811.771478][T25573] usb 9-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1811.794875][T25573] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1811.801745][T25573] usb 9-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00
[ 1811.816873][T25573] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1811.830922][T25573] usb 9-1: config 0 descriptor??
[ 1811.851018][T25573] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input132
[ 1812.377377][T20820] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1812.764604][T20820] usb 5-1: USB disconnect, device number 107
[ 1813.312135][T28098] binder: 28094:28098 ioctl 400c620e 200000000100 returned -22
[ 1813.480046][T28098] batadv_slave_1: entered promiscuous mode
[ 1813.609794][ T5877] usb 9-1: USB disconnect, device number 101
[ 1813.629291][ T5181] bcm5974 9-1:0.0: could not read from device
[ 1813.713711][ T5181] bcm5974 9-1:0.0: could not read from device
[ 1813.822214][T19838] bcm5974 9-1:0.0: could not read from device
[ 1813.937214][   T24] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[ 1814.182055][   T24] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1814.272838][   T24] usb 10-1: not running at top speed; connect to a high speed hub
[ 1814.351193][   T24] usb 10-1: config 9 has an invalid interface number: 198 but max is 0
[ 1814.384661][   T24] usb 10-1: config 9 has no interface number 0
[ 1814.430023][   T24] usb 10-1: config 9 interface 198 has no altsetting 0
[ 1814.494571][   T24] usb 10-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b
[ 1814.548726][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1814.584422][   T24] usb 10-1: Product: syz
[ 1814.623441][   T24] usb 10-1: Manufacturer: syz
[ 1814.652708][   T24] usb 10-1: SerialNumber: syz
[ 1815.257228][   T10] usb 9-1: new high-speed USB device number 102 using dummy_hcd
[ 1815.435300][   T10] usb 9-1: Using ep0 maxpacket: 16
[ 1815.485404][T28112] [U] 
[ 1815.515325][   T10] usb 9-1: config 0 has no interfaces?
[ 1815.549129][   T10] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1815.573063][   T10] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1815.595383][   T10] usb 9-1: Manufacturer: syz
[ 1815.617185][   T10] usb 9-1: config 0 descriptor??
[ 1816.077674][T28120] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1816.627474][T28120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1816.664078][   T24] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[ 1816.699490][   T24] dvb-usb: bulk message failed: -22 (3/0)
[ 1816.792404][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1816.850337][   T24] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[ 1816.890910][   T24] dvb_usb_umt_010 10-1:9.198: probe with driver dvb_usb_umt_010 failed with error -22
[ 1816.985234][   T24] usb 10-1: USB disconnect, device number 6
[ 1817.384634][T28140] netlink: 7060 bytes leftover after parsing attributes in process `syz.7.6463'.
[ 1817.691853][   T30] audit: type=1326 audit(1770003606.917:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28145 comm="syz.7.6465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb6b6394cd7 code=0x0
[ 1818.455643][   T24] usb 9-1: USB disconnect, device number 102
[ 1818.879896][T28152] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6466'.
[ 1820.686245][T28162] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1821.454699][T28176] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6472'.
[ 1822.396836][   T30] audit: type=1326 audit(1770003611.667:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28185 comm="syz.7.6477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb6b6394cd7 code=0x0
[ 1822.947718][T28177] [U] 
[ 1823.040828][T28202] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1823.859020][T28218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6488'.
[ 1823.878110][T28218] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6488'.
[ 1823.904653][   T10] usb 8-1: new full-speed USB device number 81 using dummy_hcd
[ 1824.067551][   T10] usb 8-1: not running at top speed; connect to a high speed hub
[ 1824.092931][   T10] usb 8-1: config 1 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1824.117651][   T10] usb 8-1: config 1 interface 0 has no altsetting 0
[ 1824.129188][   T10] usb 8-1: New USB device found, idVendor=056a, idProduct=0024, bcdDevice= 0.40
[ 1824.159975][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1824.200631][   T10] usb 8-1: Product: syz
[ 1824.220588][   T10] usb 8-1: Manufacturer: syz
[ 1824.256847][   T10] usb 8-1: SerialNumber: syz
[ 1824.306543][T28210] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1824.340503][T28221] binder: 28220:28221 ioctl c0306201 200000000240 returned -14
[ 1824.590756][   T10] usbhid 8-1:1.0: can't add hid device: -71
[ 1824.606304][   T10] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[ 1824.690915][   T10] usb 8-1: USB disconnect, device number 81
[ 1824.771792][T28238] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1824.989105][T28240] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1826.286950][T27780] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1826.390422][T28243] [U] 
[ 1826.467805][T27780] usb 10-1: Using ep0 maxpacket: 16
[ 1826.504696][T27780] usb 10-1: config 0 has no interfaces?
[ 1826.515177][T27780] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1826.584519][T27780] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1826.624464][T27780] usb 10-1: Manufacturer: syz
[ 1826.690709][T27780] usb 10-1: config 0 descriptor??
[ 1827.053309][T28256] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1827.428630][T28279] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1829.744463][T27780] usb 10-1: USB disconnect, device number 7
[ 1830.130173][T28304] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[ 1830.398995][   T30] audit: type=1326 audit(1770003619.677:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28308 comm="syz.6.6515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fe16b994cd7 code=0x0
[ 1830.813796][T28303] [U] 
[ 1831.029333][T28321] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1831.074619][   T10] usb 8-1: new high-speed USB device number 82 using dummy_hcd
[ 1831.115400][T28321] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1831.146830][T28321] netlink: 'syz.9.6520': attribute type 21 has an invalid length.
[ 1831.172865][T28321] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1831.191194][T28321] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[ 1831.201187][T28321] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1831.224128][T28321] kvm: requested 8380 ns i8254 timer period limited to 200000 ns
[ 1831.281202][   T10] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[ 1831.310830][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1831.353235][   T10] usb 8-1: Product: syz
[ 1831.368505][   T10] usb 8-1: Manufacturer: syz
[ 1831.378251][   T10] usb 8-1: SerialNumber: syz
[ 1831.389664][   T10] usb 8-1: config 0 descriptor??
[ 1831.416830][   T10] gspca_main: sq905c-2.14.0 probing 2770:9052
[ 1831.750379][T28335] netlink: 996 bytes leftover after parsing attributes in process `syz.9.6523'.
[ 1831.948977][   T10] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[ 1832.000498][   T10] sq905c 8-1:0.0: Get version command failed
[ 1832.034537][   T10] sq905c 8-1:0.0: probe with driver sq905c failed with error -110
[ 1832.457697][T28336] sctp: [Deprecated]: syz.7.6517 (pid 28336) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1832.457697][T28336] Use struct sctp_sack_info instead
[ 1833.588589][T28346] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present
[ 1833.794930][   T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1833.854308][T28356] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1833.881816][T26838] usb 8-1: USB disconnect, device number 82
[ 1833.915073][T20820] usb 9-1: new high-speed USB device number 103 using dummy_hcd
[ 1833.978049][   T10] usb 10-1: config index 0 descriptor too short (expected 45, got 36)
[ 1833.996584][   T10] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1834.022142][   T10] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1834.059748][   T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1834.072127][T20820] usb 9-1: device descriptor read/64, error -71
[ 1834.088500][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1834.114020][   T10] usb 10-1: config 0 descriptor??
[ 1834.138984][   T10] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1834.324450][T20820] usb 9-1: new high-speed USB device number 104 using dummy_hcd
[ 1834.455975][T20820] usb 9-1: device descriptor read/64, error -71
[ 1834.574872][T20820] usb usb9-port1: attempt power cycle
[ 1834.713181][T28361] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1834.796791][T28357] [U] 
[ 1834.874125][T28366] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1834.924753][T20820] usb 9-1: new high-speed USB device number 105 using dummy_hcd
[ 1834.945666][T20820] usb 9-1: device descriptor read/8, error -71
[ 1835.194580][T20820] usb 9-1: new high-speed USB device number 106 using dummy_hcd
[ 1835.227765][T20820] usb 9-1: device descriptor read/8, error -71
[ 1835.337501][T20820] usb usb9-port1: unable to enumerate USB device
[ 1835.362999][T28372] netlink: 'syz.7.6533': attribute type 6 has an invalid length.
[ 1835.673560][T28380] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1836.440363][ T5877] usb 10-1: USB disconnect, device number 8
[ 1837.124834][ T5877] usb 8-1: new high-speed USB device number 83 using dummy_hcd
[ 1837.294976][ T5877] usb 8-1: Using ep0 maxpacket: 32
[ 1837.314891][ T5877] usb 8-1: config 0 has an invalid interface number: 23 but max is 0
[ 1837.346470][ T5877] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1837.395899][ T5877] usb 8-1: config 0 has no interface number 0
[ 1837.422117][ T5877] usb 8-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1837.464998][ T5877] usb 8-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1837.486475][ T5877] usb 8-1: config 0 interface 23 altsetting 2 endpoint 0xC has invalid maxpacket 1143, setting to 64
[ 1837.508238][ T5877] usb 8-1: config 0 interface 23 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[ 1837.535753][ T5877] usb 8-1: config 0 interface 23 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64
[ 1837.554232][ T5877] usb 8-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[ 1837.576145][ T5877] usb 8-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1837.600104][ T5877] usb 8-1: config 0 interface 23 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 15
[ 1837.619067][ T5877] usb 8-1: config 0 interface 23 has no altsetting 0
[ 1837.642406][ T5877] usb 8-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b
[ 1837.653079][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1837.734983][ T5877] usb 8-1: config 0 descriptor??
[ 1837.767632][T28396] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1838.021223][T28396] Invalid logical block size (318767104)
[ 1838.037827][ T5877] usb 8-1: string descriptor 0 read error: -71
[ 1838.058288][ T5877] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[ 1838.074712][ T5877] gspca_mr97310a: reg write [21] error -8
[ 1838.082597][T28403] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[ 1838.093607][ T5877] mr97310a 8-1:0.23: probe with driver mr97310a failed with error -8
[ 1838.108858][T28403] bond1 (unregistering): Released all slaves
[ 1838.118314][ T5877] usb 8-1: USB disconnect, device number 83
[ 1838.383575][T28408] netlink: 'syz.9.6544': attribute type 10 has an invalid length.
[ 1838.393081][T28408] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6544'.
[ 1838.403214][T28408] ipvlan1: entered promiscuous mode
[ 1838.408858][T28408] ipvlan1: entered allmulticast mode
[ 1838.414826][T28408] veth0_vlan: entered allmulticast mode
[ 1838.423646][T28408] bridge0: port 3(ipvlan1) entered blocking state
[ 1838.431964][T28408] bridge0: port 3(ipvlan1) entered disabled state
[ 1838.459544][T28408] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1838.614032][T28399] [U] 
[ 1838.741579][T28413] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1838.791639][T28413] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1838.848540][T28413] netlink: 'syz.8.6546': attribute type 21 has an invalid length.
[ 1838.873852][T28413] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1838.902920][T28413] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[ 1838.923143][T28413] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1838.964577][   T24] usb 8-1: new high-speed USB device number 84 using dummy_hcd
[ 1839.124574][   T24] usb 8-1: Using ep0 maxpacket: 16
[ 1839.144195][   T24] usb 8-1: config 0 descriptor has 1 excess byte, ignoring
[ 1839.174672][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1839.210741][   T24] usb 8-1: New USB device found, idVendor=04c8, idProduct=00dd, bcdDevice= 0.00
[ 1839.234417][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1839.295154][   T24] usb 8-1: config 0 descriptor??
[ 1839.321227][   T24] usbhid 8-1:0.0: can't add hid device: -22
[ 1839.358959][   T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -22
[ 1839.397686][T28419] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1839.425645][T28421] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6548'.
[ 1839.473180][T28419] dvmrp12: entered allmulticast mode
[ 1839.526017][T28418] dvmrp12: left allmulticast mode
[ 1839.808230][T28430] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6550'.
[ 1839.828170][T28429] tipc: Started in network mode
[ 1839.828187][T28429] tipc: Node identity , cluster identity 4711
[ 1839.828198][T28429] tipc: Failed to set node id, please configure manually
[ 1839.828227][T28429] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1840.530234][T28449] netlink: 'syz.6.6557': attribute type 10 has an invalid length.
[ 1840.544654][T28449] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6557'.
[ 1840.559765][T28449] ipvlan1: entered promiscuous mode
[ 1840.565731][T28449] ipvlan1: entered allmulticast mode
[ 1840.571358][T28449] veth0_vlan: entered allmulticast mode
[ 1840.580209][T28449] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1841.057771][T28442] [U] 
[ 1841.329702][ T5147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1841.346950][ T5147] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1841.358383][ T5147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1841.367774][ T5147] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1841.379158][ T5147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1841.693477][T28458] chnl_net:caif_netlink_parms(): no params data found
[ 1841.752163][   T10] usb 8-1: USB disconnect, device number 84
[ 1841.924945][T26838] usb 9-1: new high-speed USB device number 107 using dummy_hcd
[ 1841.997993][T28470] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1842.009847][T28473] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1842.097773][T26838] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1842.116471][T26838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1842.129579][T26838] usb 9-1: config 0 descriptor??
[ 1842.155905][T26838] cp210x 9-1:0.0: cp210x converter detected
[ 1842.204004][T28474] dvmrp12: entered allmulticast mode
[ 1842.221875][T28458] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1842.236949][T28473] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1842.245162][T28458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1842.252511][T28458] bridge_slave_0: entered allmulticast mode
[ 1842.275837][T28473] netlink: 'syz.9.6561': attribute type 21 has an invalid length.
[ 1842.296866][T28458] bridge_slave_0: entered promiscuous mode
[ 1842.312868][T28473] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1842.329337][T28458] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1842.350270][T28473] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[ 1842.359061][T28458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1842.375412][T28458] bridge_slave_1: entered allmulticast mode
[ 1842.383321][T28458] bridge_slave_1: entered promiscuous mode
[ 1842.395052][T28473] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1842.451154][T28469] dvmrp12: left allmulticast mode
[ 1842.581715][T26838] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1842.598420][T28458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1842.639653][T26838] usb 9-1: cp210x converter now attached to ttyUSB0
[ 1842.662155][T28458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1842.843412][T28458] team0: Port device team_slave_0 added
[ 1842.862882][T28458] team0: Port device team_slave_1 added
[ 1842.948543][T28458] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1842.977549][T28458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1843.044807][T28458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1843.058520][T28458] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1843.073501][T28458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1843.126222][T28458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1843.213206][T28458] hsr_slave_0: entered promiscuous mode
[ 1843.220152][T28458] hsr_slave_1: entered promiscuous mode
[ 1843.238672][T28497] sg_write: data in/out 393439/136 bytes for SCSI command 0xc7-- guessing data in;
[ 1843.238672][T28497]    program syz.9.6567 not setting count and/or reply_len properly
[ 1843.274095][T28458] debugfs: 'hsr0' already exists in 'hsr'
[ 1843.287536][T28458] Cannot create hsr debugfs directory
[ 1843.384586][T26838] usb 8-1: new high-speed USB device number 85 using dummy_hcd
[ 1843.487112][T27179] Bluetooth: hci6: command tx timeout
[ 1843.565158][T26838] usb 8-1: Using ep0 maxpacket: 8
[ 1843.578182][T26838] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1843.603859][T26838] usb 8-1: config 11 has an invalid interface number: 244 but max is 0
[ 1843.631098][T26838] usb 8-1: config 11 has no interface number 0
[ 1843.661117][T26838] usb 8-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1843.710394][T26838] usb 8-1: config 11 interface 244 has no altsetting 0
[ 1843.745364][T26838] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a
[ 1843.787749][T26838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1843.830889][T26838] usb 8-1: Product: syz
[ 1843.844511][T26838] usb 8-1: Manufacturer: syz
[ 1843.854226][T26838] usb 8-1: SerialNumber: syz
[ 1844.138335][T26838] usb 8-1: USB disconnect, device number 85
[ 1844.349088][   T10] usb 9-1: USB disconnect, device number 107
[ 1844.415646][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1844.467197][   T10] cp210x 9-1:0.0: device disconnected
[ 1845.377376][ T5877] usb 8-1: new high-speed USB device number 86 using dummy_hcd
[ 1845.505355][T28458] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1845.564797][T27179] Bluetooth: hci6: command tx timeout
[ 1845.586980][ T5877] usb 8-1: Using ep0 maxpacket: 16
[ 1845.649046][ T5877] usb 8-1: config 0 has no interfaces?
[ 1845.703389][ T5877] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1845.756456][ T5877] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1845.814604][ T5877] usb 8-1: Manufacturer: syz
[ 1845.874835][ T5877] usb 8-1: config 0 descriptor??
[ 1845.998367][T28458] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1846.051016][T28458] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1846.093644][T28534] fuse: Bad value for 'user_id'
[ 1846.100835][T28458] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1846.113750][T28534] fuse: Bad value for 'user_id'
[ 1846.259143][T28535] dvmrp12: entered allmulticast mode
[ 1846.281447][T28533] dvmrp12: left allmulticast mode
[ 1846.570511][T28523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1846.788135][T28545] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1847.079941][T28560] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6579'.
[ 1847.497434][T28572] sctp: [Deprecated]: syz.9.6581 (pid 28572) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1847.497434][T28572] Use struct sctp_sack_info instead
[ 1847.628082][T28458] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1847.644888][T27179] Bluetooth: hci6: command tx timeout
[ 1847.797752][T28458] 8021q: adding VLAN 0 to HW filter on device team0
[ 1847.894441][T14875] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1847.901675][T14875] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1847.976392][T14875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1847.983680][T14875] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1848.284565][ T5877] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1848.362548][T28458] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1848.464543][ T5877] usb 10-1: Using ep0 maxpacket: 32
[ 1848.493351][ T5877] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1848.522989][ T5877] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1848.588515][ T5877] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1848.631747][ T5877] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1848.688441][ T5877] usb 10-1: Product: syz
[ 1848.692761][ T5877] usb 10-1: Manufacturer: syz
[ 1848.724172][ T5877] hub 10-1:4.0: USB hub found
[ 1848.794888][T27780] usb 8-1: USB disconnect, device number 86
[ 1848.888719][T28458] veth0_vlan: entered promiscuous mode
[ 1848.923476][ T5877] hub 10-1:4.0: 2 ports detected
[ 1848.951591][T28458] veth1_vlan: entered promiscuous mode
[ 1848.974873][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6588'.
[ 1848.996670][T28601] netlink: 'syz.7.6588': attribute type 2 has an invalid length.
[ 1849.057107][T28458] veth0_macvtap: entered promiscuous mode
[ 1849.106431][T28458] veth1_macvtap: entered promiscuous mode
[ 1849.190940][T28458] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1849.230424][T28458] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1849.286229][T21719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1849.304906][T21707] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1849.444588][   T10] usb 8-1: new high-speed USB device number 87 using dummy_hcd
[ 1849.604517][T20820] usb 9-1: new full-speed USB device number 108 using dummy_hcd
[ 1849.614537][   T10] usb 8-1: Using ep0 maxpacket: 8
[ 1849.624672][   T10] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1849.644830][   T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1849.666906][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[ 1849.694580][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[ 1849.714501][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1849.734522][T20820] usb 9-1: device descriptor read/64, error -71
[ 1849.734734][T27179] Bluetooth: hci6: command tx timeout
[ 1849.759794][   T10] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1849.787859][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1849.820537][   T10] usb 8-1: Product: syz
[ 1849.836880][   T10] usb 8-1: Manufacturer: syz
[ 1849.841552][   T10] usb 8-1: SerialNumber: syz
[ 1849.886722][   T10] usb 8-1: config 0 descriptor??
[ 1849.918329][   T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input138
[ 1849.943898][T21719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1849.977691][T20820] usb 9-1: new full-speed USB device number 109 using dummy_hcd
[ 1850.003205][T21719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1850.115780][ T5890] usb 8-1: USB disconnect, device number 87
[ 1850.164570][T20820] usb 9-1: device descriptor read/64, error -71
[ 1850.175601][ T5877] hub 10-1:4.0: activate --> -90
[ 1850.294973][T20820] usb usb9-port1: attempt power cycle
[ 1850.314603][T14870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1850.358135][T14870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1850.458092][T14875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1850.477284][T14875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1850.634750][T20820] usb 9-1: new full-speed USB device number 110 using dummy_hcd
[ 1850.725821][T20820] usb 9-1: device descriptor read/8, error -71
[ 1850.797427][T28636] openvswitch: netlink: Message has 2 unknown bytes.
[ 1850.804311][T28636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1850.827151][T28634] team_slave_0: left promiscuous mode
[ 1850.887571][T28634] team_slave_0: left allmulticast mode
[ 1851.014667][T20820] usb 9-1: new full-speed USB device number 111 using dummy_hcd
[ 1851.030450][T28634] ipvlan1: left promiscuous mode
[ 1851.035888][T28634] ipvlan1: left allmulticast mode
[ 1851.046416][T28634] veth0_vlan: left allmulticast mode
[ 1851.075578][T20820] usb 9-1: device descriptor read/8, error -71
[ 1851.208607][T20820] usb usb9-port1: unable to enumerate USB device
[ 1851.352414][T28646] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6595'.
[ 1851.408758][ T5877] usb 10-1-port2: cannot warm reset (err = -32)
[ 1851.421372][T28646] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6595'.
[ 1851.441570][ T5877] usb 10-1-port2: cannot warm reset (err = -32)
[ 1851.452657][ T5877] usb 10-1-port2: Cannot enable. Maybe the USB cable is bad?
[ 1851.460993][ T5877] usb 10-1-port2: cannot disable (err = -32)
[ 1851.909527][T28659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6598'.
[ 1852.654623][T20820] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1852.679742][ T5890] usb 10-1: USB disconnect, device number 9
[ 1852.868118][T20820] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1852.921344][T20820] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1853.000864][T20820] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1853.023073][T20820] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00
[ 1853.032862][ T5890] usb 8-1: new high-speed USB device number 88 using dummy_hcd
[ 1853.088482][T20820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1853.155011][T20820] usb 2-1: config 0 descriptor??
[ 1853.214583][ T5890] usb 8-1: Using ep0 maxpacket: 16
[ 1853.306761][ T5890] usb 8-1: config 0 has no interfaces?
[ 1853.325549][T20820] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input139
[ 1853.351073][ T5890] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1853.442231][ T5890] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1853.512313][ T5890] usb 8-1: Manufacturer: syz
[ 1853.539030][T28691] fuse: Bad value for 'fd'
[ 1853.627210][ T5890] usb 8-1: config 0 descriptor??
[ 1854.771067][ T5181] bcm5974 2-1:0.0: could not read from device
[ 1854.802376][ T5181] bcm5974 2-1:0.0: could not read from device
[ 1854.866091][T20820] usb 2-1: USB disconnect, device number 32
[ 1855.688923][T26838] usb 8-1: USB disconnect, device number 88
[ 1855.870543][T28721] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6605'.
[ 1856.094579][T28728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6610'.
[ 1856.210091][T28728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6610'.
[ 1856.678427][T28745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6613'.
[ 1856.768395][   T30] audit: type=1400 audit(1770003646.047:1085): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=28747 comm="syz.8.6614"
[ 1856.834472][   T30] audit: type=1400 audit(1770003646.047:1086): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=28747 comm="syz.8.6614"
[ 1856.941674][T28753] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[ 1856.978877][T28753] bond1 (unregistering): Released all slaves
[ 1857.405566][T28770] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6617'.
[ 1857.517550][T28770] netlink: 'syz.9.6617': attribute type 2 has an invalid length.
[ 1857.718964][T28774] fuse: Bad value for 'fd'
[ 1857.921703][T28785] netlink: 'syz.7.6619': attribute type 5 has an invalid length.
[ 1857.942751][T28786] netlink: 'syz.6.6620': attribute type 10 has an invalid length.
[ 1857.952177][T28786] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6620'.
[ 1858.068832][T28786] ipvlan1: entered promiscuous mode
[ 1858.074415][T28786] ipvlan1: entered allmulticast mode
[ 1858.144985][T28786] veth0_vlan: entered allmulticast mode
[ 1858.364648][T28786] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1858.392638][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1858.412118][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1858.420205][T28789] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1858.479655][T28785] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6619'.
[ 1859.746352][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6623'.
[ 1859.787139][T28810] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[ 1859.804126][T28810] bond1 (unregistering): Released all slaves
[ 1859.832736][T28792] tipc: Enabling of bearer <ib:wg1> rejected, already enabled
[ 1860.216477][T28826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6625'.
[ 1860.456560][T28832] netlink: 'syz.9.6622': attribute type 4 has an invalid length.
[ 1860.540687][T28835] netlink: 'syz.9.6622': attribute type 4 has an invalid length.
[ 1861.196704][T28841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6629'.
[ 1863.223289][T28885] fuse: Bad value for 'fd'
[ 1864.476812][T28902] FAULT_INJECTION: forcing a failure.
[ 1864.476812][T28902] name failslab, interval 1, probability 0, space 0, times 0
[ 1864.508281][T28902] CPU: 0 UID: 0 PID: 28902 Comm: syz.9.6636 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1864.508317][T28902] Tainted: [L]=SOFTLOCKUP
[ 1864.508326][T28902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1864.508340][T28902] Call Trace:
[ 1864.508349][T28902]  <TASK>
[ 1864.508371][T28902]  dump_stack_lvl+0xe8/0x150
[ 1864.508405][T28902]  should_fail_ex+0x412/0x560
[ 1864.508437][T28902]  should_failslab+0xa8/0x100
[ 1864.508463][T28902]  __kmalloc_node_track_caller_noprof+0xe1/0x7f0
[ 1864.508485][T28902]  ? __kasan_kmalloc+0x93/0xb0
[ 1864.508506][T28902]  ? __request_module+0x2ec/0x610
[ 1864.508524][T28902]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[ 1864.508549][T28902]  kstrdup+0x42/0x100
[ 1864.508575][T28902]  __request_module+0x2ec/0x610
[ 1864.508602][T28902]  ? __pfx___request_module+0x10/0x10
[ 1864.508626][T28902]  ? xfrm_state_get_afinfo+0x2e/0x1b0
[ 1864.508663][T28902]  ? __xfrm_init_state+0x842/0x1460
[ 1864.508689][T28902]  __xfrm_init_state+0x8a5/0x1460
[ 1864.508708][T28902]  ? __xfrm_init_state+0x842/0x1460
[ 1864.508734][T28902]  xfrm_init_state+0x18/0xa0
[ 1864.508763][T28902]  pfkey_add+0x1d34/0x2df0
[ 1864.508795][T28902]  ? kasan_quarantine_put+0x15f/0x1f0
[ 1864.508843][T28902]  ? __pfx_pfkey_add+0x10/0x10
[ 1864.508861][T28902]  ? pfkey_broadcast+0x3c2/0x3e0
[ 1864.508905][T28902]  pfkey_sendmsg+0xc56/0x1120
[ 1864.508923][T28902]  ? unwind_next_frame+0xa5/0x23c0
[ 1864.508961][T28902]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1864.509008][T28902]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1864.509037][T28902]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1864.509062][T28902]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1864.509081][T28902]  ____sys_sendmsg+0xa68/0xad0
[ 1864.509110][T28902]  ? __might_fault+0xaf/0x130
[ 1864.509148][T28902]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1864.509186][T28902]  ? import_iovec+0x73/0xa0
[ 1864.509223][T28902]  ___sys_sendmsg+0x2a5/0x360
[ 1864.509250][T28902]  ? __lock_acquire+0x6b5/0x2cf0
[ 1864.509284][T28902]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1864.509351][T28902]  ? __fget_files+0x2a/0x420
[ 1864.509374][T28902]  ? __fget_files+0x3a0/0x420
[ 1864.509408][T28902]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1864.509440][T28902]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1864.509479][T28902]  ? __pfx_ksys_write+0x10/0x10
[ 1864.509524][T28902]  do_syscall_64+0xe2/0xf80
[ 1864.509547][T28902]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1864.509567][T28902]  ? trace_irq_disable+0x37/0x100
[ 1864.509584][T28902]  ? clear_bhb_loop+0x60/0xb0
[ 1864.509609][T28902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1864.509630][T28902] RIP: 0033:0x7fe72499aeb9
[ 1864.509650][T28902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1864.509669][T28902] RSP: 002b:00007fe725801028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1864.509692][T28902] RAX: ffffffffffffffda RBX: 00007fe724c15fa0 RCX: 00007fe72499aeb9
[ 1864.509709][T28902] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003
[ 1864.509723][T28902] RBP: 00007fe725801090 R08: 0000000000000000 R09: 0000000000000000
[ 1864.509737][T28902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1864.509750][T28902] R13: 00007fe724c16038 R14: 00007fe724c15fa0 R15: 00007fe724d3fa48
[ 1864.509785][T28902]  </TASK>
[ 1865.378487][T28919] netlink: 'syz.9.6641': attribute type 1 has an invalid length.
[ 1865.395447][ T5877] usb 9-1: new high-speed USB device number 112 using dummy_hcd
[ 1865.586405][ T5877] usb 9-1: config index 0 descriptor too short (expected 45, got 36)
[ 1865.601139][ T5877] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1865.627148][ T5877] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1865.656141][ T5877] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1865.676331][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1865.702267][ T5877] usb 9-1: config 0 descriptor??
[ 1865.740941][ T5877] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1868.187355][T28965] netlink: 'syz.1.6647': attribute type 1 has an invalid length.
[ 1868.242722][   T24] usb 9-1: USB disconnect, device number 112
[ 1868.258656][T28969] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1868.267184][T28965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6647'.
[ 1868.575348][T28974] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 2, id = 0
[ 1868.837168][T28960] netlink: 'syz.9.6643': attribute type 4 has an invalid length.
[ 1869.104576][T26838] usb 9-1: new high-speed USB device number 113 using dummy_hcd
[ 1869.294967][T26838] usb 9-1: Using ep0 maxpacket: 32
[ 1869.311360][T26838] usb 9-1: config 0 has an invalid interface number: 23 but max is 0
[ 1869.334524][T26838] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1869.400235][T26838] usb 9-1: config 0 has no interface number 0
[ 1869.426389][T26838] usb 9-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1869.444965][T26838] usb 9-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1869.478699][T26838] usb 9-1: config 0 interface 23 altsetting 2 endpoint 0xC has invalid maxpacket 1143, setting to 64
[ 1869.537952][T26838] usb 9-1: config 0 interface 23 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[ 1869.550216][T26838] usb 9-1: config 0 interface 23 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64
[ 1869.620464][T26838] usb 9-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[ 1869.811377][T26838] usb 9-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1869.893410][T26838] usb 9-1: config 0 interface 23 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 15
[ 1869.905318][T25573] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1870.116846][T26838] usb 9-1: config 0 interface 23 has no altsetting 0
[ 1870.184417][T26838] usb 9-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b
[ 1870.204069][T25573] usb 2-1: Using ep0 maxpacket: 16
[ 1870.209722][T26838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1870.251133][T28992] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6653'.
[ 1870.268652][T25573] usb 2-1: config 0 has no interfaces?
[ 1870.286642][T26838] usb 9-1: config 0 descriptor??
[ 1870.301910][T28992] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6653'.
[ 1870.327936][T25573] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1870.344603][T25573] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1870.367719][T25573] usb 2-1: Manufacturer: syz
[ 1870.388126][T25573] usb 2-1: config 0 descriptor??
[ 1870.408142][T28980] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1870.741644][T28980] Invalid logical block size (-2130706433)
[ 1870.788056][T26838] usb 9-1: string descriptor 0 read error: -71
[ 1870.816986][T28994] fuse: Bad value for 'fd'
[ 1870.840711][T26838] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[ 1870.864990][T28988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1870.880800][T26838] gspca_mr97310a: reg write [21] error -8
[ 1870.897133][T26838] mr97310a 9-1:0.23: probe with driver mr97310a failed with error -8
[ 1870.982338][T26838] usb 9-1: USB disconnect, device number 113
[ 1871.913373][T29015] netlink: 'syz.9.6657': attribute type 9 has an invalid length.
[ 1872.048489][T29018] delete_channel: no stack
[ 1872.579825][T29022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6659'.
[ 1873.180584][ T5890] usb 2-1: USB disconnect, device number 33
[ 1874.154616][T29037] netlink: 'syz.9.6664': attribute type 11 has an invalid length.
[ 1874.172487][T29037] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6664'.
[ 1874.185451][T29039] FAULT_INJECTION: forcing a failure.
[ 1874.185451][T29039] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1874.219607][T29039] CPU: 0 UID: 0 PID: 29039 Comm: syz.8.6665 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1874.219642][T29039] Tainted: [L]=SOFTLOCKUP
[ 1874.219651][T29039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1874.219665][T29039] Call Trace:
[ 1874.219675][T29039]  <TASK>
[ 1874.219684][T29039]  dump_stack_lvl+0xe8/0x150
[ 1874.219718][T29039]  should_fail_ex+0x412/0x560
[ 1874.219750][T29039]  _copy_from_user+0x2d/0xb0
[ 1874.219790][T29039]  dev_write+0xc6/0xe70
[ 1874.219818][T29039]  ? __lock_acquire+0x6b5/0x2cf0
[ 1874.219849][T29039]  ? __pfx_dev_write+0x10/0x10
[ 1874.219882][T29039]  ? bpf_lsm_file_permission+0x9/0x20
[ 1874.219907][T29039]  ? security_file_permission+0x75/0x260
[ 1874.219930][T29039]  ? rw_verify_area+0x255/0x4d0
[ 1874.219960][T29039]  ? __pfx_dev_write+0x10/0x10
[ 1874.219991][T29039]  vfs_write+0x29a/0xb90
[ 1874.220029][T29039]  ? __pfx_vfs_write+0x10/0x10
[ 1874.220061][T29039]  ? __fget_files+0x2a/0x420
[ 1874.220087][T29039]  ? __fget_files+0x2a/0x420
[ 1874.220109][T29039]  ? __fget_files+0x3a0/0x420
[ 1874.220130][T29039]  ? __fget_files+0x2a/0x420
[ 1874.220163][T29039]  ksys_write+0x150/0x270
[ 1874.220197][T29039]  ? __pfx_ksys_write+0x10/0x10
[ 1874.220239][T29039]  do_syscall_64+0xe2/0xf80
[ 1874.220263][T29039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1874.220283][T29039]  ? trace_irq_disable+0x37/0x100
[ 1874.220304][T29039]  ? clear_bhb_loop+0x60/0xb0
[ 1874.220329][T29039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1874.220350][T29039] RIP: 0033:0x7f3624b9aeb9
[ 1874.220370][T29039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1874.220394][T29039] RSP: 002b:00007f36259e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1874.220418][T29039] RAX: ffffffffffffffda RBX: 00007f3624e15fa0 RCX: 00007f3624b9aeb9
[ 1874.220433][T29039] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003
[ 1874.220447][T29039] RBP: 00007f36259e1090 R08: 0000000000000000 R09: 0000000000000000
[ 1874.220461][T29039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1874.220474][T29039] R13: 00007f3624e16038 R14: 00007f3624e15fa0 R15: 00007f3624f3fa48
[ 1874.220508][T29039]  </TASK>
[ 1874.585209][T29044] sctp: [Deprecated]: syz.6.6666 (pid 29044) Use of int in max_burst socket option deprecated.
[ 1874.585209][T29044] Use struct sctp_assoc_value instead
[ 1874.602180][T29044] dlm: plock device version mismatch: kernel (1.2.0), user (3378402320.2433348068.3798167407)
[ 1874.785009][T25573] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1874.984832][T25573] usb 2-1: Using ep0 maxpacket: 32
[ 1875.002530][T25573] usb 2-1: config 0 has an invalid interface number: 23 but max is 0
[ 1875.035862][T25573] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1875.090886][T25573] usb 2-1: config 0 has no interface number 0
[ 1875.137850][T25573] usb 2-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1875.192494][T25573] usb 2-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1875.237608][T25573] usb 2-1: config 0 interface 23 altsetting 2 endpoint 0xC has invalid maxpacket 1143, setting to 64
[ 1875.280755][T29055] fuse: Bad value for 'fd'
[ 1875.289880][T25573] usb 2-1: config 0 interface 23 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[ 1875.327211][T25573] usb 2-1: config 0 interface 23 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64
[ 1875.358255][T25573] usb 2-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[ 1875.439967][T25573] usb 2-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1875.498373][T25573] usb 2-1: config 0 interface 23 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 15
[ 1875.542603][T25573] usb 2-1: config 0 interface 23 has no altsetting 0
[ 1875.582798][T25573] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b
[ 1875.603740][T25573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1875.630397][T25573] usb 2-1: config 0 descriptor??
[ 1875.663963][T29042] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1875.902669][T29042] Invalid logical block size (-905969665)
[ 1875.952690][T25573] usb 2-1: string descriptor 0 read error: -71
[ 1875.993338][T25573] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[ 1876.023052][T29066] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6668'.
[ 1876.032846][ T5877] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1876.050949][T25573] gspca_mr97310a: reg write [21] error -8
[ 1876.065394][T25573] mr97310a 2-1:0.23: probe with driver mr97310a failed with error -8
[ 1876.184754][T25573] usb 2-1: USB disconnect, device number 34
[ 1876.224717][ T5877] usb 10-1: Using ep0 maxpacket: 16
[ 1876.264135][ T5877] usb 10-1: config 0 has no interfaces?
[ 1876.447496][ T5877] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1876.467397][ T5877] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1876.478681][ T5877] usb 10-1: Manufacturer: syz
[ 1876.489758][ T5877] usb 10-1: config 0 descriptor??
[ 1876.852744][T29081] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6675'.
[ 1877.048486][T29086] netlink: 'syz.1.6676': attribute type 1 has an invalid length.
[ 1877.133666][T29064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1877.685121][T29096] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6679'.
[ 1877.723999][T29096] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1877.966872][T29099] FAULT_INJECTION: forcing a failure.
[ 1877.966872][T29099] name failslab, interval 1, probability 0, space 0, times 0
[ 1878.030355][T29099] CPU: 1 UID: 0 PID: 29099 Comm: syz.6.6680 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1878.030381][T29099] Tainted: [L]=SOFTLOCKUP
[ 1878.030387][T29099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1878.030397][T29099] Call Trace:
[ 1878.030404][T29099]  <TASK>
[ 1878.030411][T29099]  dump_stack_lvl+0xe8/0x150
[ 1878.030434][T29099]  should_fail_ex+0x412/0x560
[ 1878.030456][T29099]  should_failslab+0xa8/0x100
[ 1878.030475][T29099]  kmem_cache_alloc_noprof+0x87/0x6e0
[ 1878.030500][T29099]  ? skb_clone+0x212/0x3a0
[ 1878.030525][T29099]  skb_clone+0x212/0x3a0
[ 1878.030544][T29099]  ? pfkey_broadcast_one+0x7d/0x360
[ 1878.030570][T29099]  pfkey_broadcast_one+0x9b/0x360
[ 1878.030592][T29099]  ? pfkey_broadcast+0x39c/0x3e0
[ 1878.030616][T29099]  pfkey_broadcast+0x3a9/0x3e0
[ 1878.030640][T29099]  ? pfkey_broadcast+0x48/0x3e0
[ 1878.030665][T29099]  pfkey_sendmsg+0xe75/0x1120
[ 1878.030678][T29099]  ? unwind_next_frame+0xa5/0x23c0
[ 1878.030705][T29099]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1878.030742][T29099]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1878.030763][T29099]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1878.030780][T29099]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1878.030793][T29099]  ____sys_sendmsg+0xa68/0xad0
[ 1878.030813][T29099]  ? __might_fault+0xaf/0x130
[ 1878.030840][T29099]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1878.030867][T29099]  ? import_iovec+0x73/0xa0
[ 1878.030892][T29099]  ___sys_sendmsg+0x2a5/0x360
[ 1878.030911][T29099]  ? __lock_acquire+0x6b5/0x2cf0
[ 1878.030936][T29099]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1878.030981][T29099]  ? __fget_files+0x2a/0x420
[ 1878.030997][T29099]  ? __fget_files+0x3a0/0x420
[ 1878.031020][T29099]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1878.031042][T29099]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1878.031069][T29099]  ? __pfx_ksys_write+0x10/0x10
[ 1878.031100][T29099]  do_syscall_64+0xe2/0xf80
[ 1878.031116][T29099]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1878.031130][T29099]  ? trace_irq_disable+0x37/0x100
[ 1878.031145][T29099]  ? clear_bhb_loop+0x60/0xb0
[ 1878.031163][T29099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1878.031178][T29099] RIP: 0033:0x7fe16b99aeb9
[ 1878.031191][T29099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1878.031205][T29099] RSP: 002b:00007fe16c828028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1878.031222][T29099] RAX: ffffffffffffffda RBX: 00007fe16bc15fa0 RCX: 00007fe16b99aeb9
[ 1878.031233][T29099] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003
[ 1878.031247][T29099] RBP: 00007fe16c828090 R08: 0000000000000000 R09: 0000000000000000
[ 1878.031257][T29099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1878.031266][T29099] R13: 00007fe16bc16038 R14: 00007fe16bc15fa0 R15: 00007fe16bd3fa48
[ 1878.031288][T29099]  </TASK>
[ 1879.382919][T29113] fuse: Bad value for 'fd'
[ 1879.883155][   T24] usb 10-1: USB disconnect, device number 10
[ 1880.527038][T29127] trusted_key: syz.7.6687 sent an empty control message without MSG_MORE.
[ 1880.899458][T29136] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6690'.
[ 1881.084786][   T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1881.234554][ T5877] usb 9-1: new high-speed USB device number 114 using dummy_hcd
[ 1881.256161][   T10] usb 10-1: config 0 has no interfaces?
[ 1881.266165][   T10] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1881.304646][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1881.371820][   T10] usb 10-1: Product: syz
[ 1881.380227][   T10] usb 10-1: Manufacturer: syz
[ 1881.395581][   T10] usb 10-1: SerialNumber: syz
[ 1881.428274][ T5877] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1881.447654][ T5877] usb 9-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1881.462910][ T5877] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1881.472780][ T5877] usb 9-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00
[ 1881.482568][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1881.503758][ T5877] usb 9-1: config 0 descriptor??
[ 1881.521506][ T5877] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input140
[ 1881.576433][   T10] usb 10-1: config 0 descriptor??
[ 1881.615692][T29144] macsec1: entered promiscuous mode
[ 1881.629508][T29144] vlan0: entered promiscuous mode
[ 1881.660488][T29144] macsec1: entered allmulticast mode
[ 1881.685278][T29144] vlan0: entered allmulticast mode
[ 1881.698502][T29144] veth0_vlan: entered allmulticast mode
[ 1881.767218][T29144] vlan0: left allmulticast mode
[ 1881.795908][T29144] veth0_vlan: left allmulticast mode
[ 1881.825691][T29144] vlan0: left promiscuous mode
[ 1882.101812][T29130] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1882.294571][ T5890] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1882.511017][ T5890] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[ 1882.531917][ T5890] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1882.566096][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1882.566155][ T5890] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1882.566188][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1882.580702][ T5890] usb 2-1: config 0 descriptor??
[ 1882.599355][ T5890] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1882.669992][ T5877] usb 8-1: new high-speed USB device number 89 using dummy_hcd
[ 1882.870311][ T5877] usb 8-1: Using ep0 maxpacket: 16
[ 1882.898917][ T5877] usb 8-1: config 0 has no interfaces?
[ 1882.947342][ T5877] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1883.013878][ T5877] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1883.064369][ T5877] usb 8-1: Manufacturer: syz
[ 1883.149353][ T5877] usb 8-1: config 0 descriptor??
[ 1883.551457][T29156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1883.756665][ T5181] bcm5974 9-1:0.0: could not read from device
[ 1883.762943][ T5877] usb 9-1: USB disconnect, device number 114
[ 1883.800963][ T5890] usb 10-1: USB disconnect, device number 11
[ 1883.810826][T19897] bcm5974 9-1:0.0: could not read from device
[ 1884.473501][T29170] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[ 1884.511295][T29170] bond2 (unregistering): Released all slaves
[ 1884.603910][T29176] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1884.711273][T29178] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6699'.
[ 1884.983649][   T24] usb 2-1: USB disconnect, device number 35
[ 1885.278011][T29183] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1885.296014][T29183] netlink: 'syz.8.6703': attribute type 21 has an invalid length.
[ 1885.340601][T29183] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1885.390647][   T24] usb 8-1: USB disconnect, device number 89
[ 1885.620773][T29186] macsec1: entered promiscuous mode
[ 1885.627235][T29186] vlan0: entered promiscuous mode
[ 1885.632790][T29186] macsec1: entered allmulticast mode
[ 1885.640096][T29186] vlan0: entered allmulticast mode
[ 1885.646086][T29186] veth0_vlan: entered allmulticast mode
[ 1885.663018][T29186] vlan0: left allmulticast mode
[ 1885.673626][T29186] veth0_vlan: left allmulticast mode
[ 1885.679069][T29186] vlan0: left promiscuous mode
[ 1885.794874][   T24] usb 8-1: new high-speed USB device number 90 using dummy_hcd
[ 1885.994659][   T24] usb 8-1: Using ep0 maxpacket: 32
[ 1886.005976][T29209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6709'.
[ 1886.021959][   T24] usb 8-1: config 0 has an invalid interface number: 23 but max is 0
[ 1886.033944][   T24] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1886.064415][   T24] usb 8-1: config 0 has no interface number 0
[ 1886.095093][   T24] usb 8-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1886.122957][   T24] usb 8-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1886.142935][   T24] usb 8-1: config 0 interface 23 altsetting 2 endpoint 0xC has invalid maxpacket 1143, setting to 64
[ 1886.155053][   T24] usb 8-1: config 0 interface 23 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[ 1886.171581][   T24] usb 8-1: config 0 interface 23 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64
[ 1886.181711][   T24] usb 8-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[ 1886.194688][   T24] usb 8-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1886.206755][   T24] usb 8-1: config 0 interface 23 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 15
[ 1886.277891][   T24] usb 8-1: config 0 interface 23 has no altsetting 0
[ 1886.314907][   T24] usb 8-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b
[ 1886.341155][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1886.381770][   T24] usb 8-1: config 0 descriptor??
[ 1886.395389][T29198] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1886.465128][T29221] netlink: 'syz.9.6712': attribute type 16 has an invalid length.
[ 1886.488037][T29217] netlink: 'syz.8.6711': attribute type 10 has an invalid length.
[ 1886.505083][T29217] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6711'.
[ 1886.711695][T29225] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[ 1886.726834][T29198] Invalid logical block size (-285212673)
[ 1886.757213][   T24] usb 8-1: string descriptor 0 read error: -71
[ 1886.782417][   T24] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[ 1886.814278][   T24] gspca_mr97310a: reg write [21] error -8
[ 1886.840373][T29225] bond2 (unregistering): Released all slaves
[ 1886.848046][   T24] mr97310a 8-1:0.23: probe with driver mr97310a failed with error -8
[ 1886.917634][   T24] usb 8-1: USB disconnect, device number 90
[ 1887.180788][T29228] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6715'.
[ 1887.999808][T29237] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6718'.
[ 1888.836862][T29252] dlm: plock device version mismatch: kernel (1.2.0), user (2113596900.1440493157.2329622676)
[ 1888.970341][T29248] netlink: 'syz.7.6720': attribute type 4 has an invalid length.
[ 1889.064001][T29245] netlink: 'syz.7.6720': attribute type 4 has an invalid length.
[ 1890.734799][T29282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6731'.
[ 1890.784606][T29282] netem: invalid attributes len -7
[ 1890.789780][T29282] netem: change failed
[ 1891.037431][T29288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6733'.
[ 1891.078084][T29288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6733'.
[ 1892.391272][T29310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6741'.
[ 1892.410073][T29310] netlink: 'syz.1.6741': attribute type 2 has an invalid length.
[ 1892.474437][ T5890] usb 9-1: new high-speed USB device number 115 using dummy_hcd
[ 1892.520996][T29316] netlink: 'syz.9.6743': attribute type 1 has an invalid length.
[ 1892.533001][T29312] loop5: detected capacity change from 0 to 4095
[ 1892.656390][ T5890] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1892.674461][ T5890] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1892.703751][ T5890] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[ 1892.725542][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1892.733604][ T5890] usb 9-1: Product: syz
[ 1892.758624][ T5890] usb 9-1: Manufacturer: syz
[ 1892.763360][ T5890] usb 9-1: SerialNumber: syz
[ 1892.795470][ T5890] usb 9-1: config 0 descriptor??
[ 1892.838636][ T5890] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[ 1892.891443][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1892.950798][T29324] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6745'.
[ 1892.960535][T29324] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6745'.
[ 1892.962328][ T5890] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[ 1893.045881][ T5890] usb 9-1: media controller created
[ 1893.112107][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1893.126765][T29325] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6740'.
[ 1893.355356][ T5890] DVB: Unable to find symbol tda10046_attach()
[ 1893.361610][ T5890] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[ 1893.414531][ T5890] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[ 1894.532533][T29351] syzkaller0: entered promiscuous mode
[ 1894.542267][T29351] syzkaller0: entered allmulticast mode
[ 1894.580855][T29356] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.6756'.
[ 1895.313447][ T5890] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[ 1895.375162][ T5890] usb 9-1: USB disconnect, device number 115
[ 1895.709564][T29374] netlink: 'syz.8.6760': attribute type 1 has an invalid length.
[ 1896.284832][ T5147] Bluetooth: hci2: command 0x0406 tx timeout
[ 1898.332060][T29372] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[ 1898.399061][T29372] bond2 (unregistering): Released all slaves
[ 1899.150204][   T30] audit: type=1800 audit(1770003688.427:1087): pid=29401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6771" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[ 1899.666886][T29421] netlink: 'syz.1.6775': attribute type 16 has an invalid length.
[ 1899.894112][T29427] syzkaller0: entered promiscuous mode
[ 1899.902597][T29427] syzkaller0: entered allmulticast mode
[ 1902.214910][T25573] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1902.284668][ T5877] usb 9-1: new full-speed USB device number 116 using dummy_hcd
[ 1902.376528][T25573] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1902.401979][T25573] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1902.415216][T25573] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1902.421992][T25573] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00
[ 1902.432038][ T5877] usb 9-1: device descriptor read/64, error -71
[ 1902.439798][T25573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1902.461855][T25573] usb 2-1: config 0 descriptor??
[ 1902.530446][   T31] INFO: task kworker/1:2:10420 blocked for more than 143 seconds.
[ 1902.546380][   T31]       Tainted: G             L      syzkaller #0
[ 1902.568308][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1902.577284][T29454] macsec1: entered promiscuous mode
[ 1902.582538][T29454] vlan0: entered promiscuous mode
[ 1902.588376][   T31] task:kworker/1:2     state:D stack:21760 pid:10420 tgid:10420 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1902.600902][T29454] macsec1: entered allmulticast mode
[ 1902.609849][T29454] vlan0: entered allmulticast mode
[ 1902.617542][T29454] veth0_vlan: entered allmulticast mode
[ 1902.625422][   T31] Workqueue: usb_hub_wq hub_event
[ 1902.631557][   T31] Call Trace:
[ 1902.638029][   T31]  <TASK>
[ 1902.641982][   T31]  __schedule+0x14ea/0x5050
[ 1902.649080][   T31]  ? __pfx___schedule+0x10/0x10
[ 1902.656282][   T31]  ? schedule+0x90/0x360
[ 1902.660729][   T31]  schedule+0x164/0x360
[ 1902.672086][   T31]  schedule_timeout+0xc3/0x2c0
[ 1902.677242][ T5877] usb 9-1: new full-speed USB device number 117 using dummy_hcd
[ 1902.699327][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1902.719021][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1902.730427][T25573] usbhid 2-1:0.0: can't add hid device: -71
[ 1902.740904][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1902.753101][T25573] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1902.769459][   T31]  ? wait_for_completion+0x274/0x5e0
[ 1902.778328][   T31]  wait_for_completion+0x2cc/0x5e0
[ 1902.787082][T25573] usb 2-1: USB disconnect, device number 36
[ 1902.793057][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 1902.800709][   T31]  i2c_del_adapter+0x5c0/0x790
[ 1902.811605][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1902.817249][   T31]  ? dvb_usbv2_exit+0x4d9/0xb60
[ 1902.822540][   T31]  ? kfree+0x1be/0x650
[ 1902.830620][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[ 1902.836264][ T5877] usb 9-1: device descriptor read/64, error -71
[ 1902.847350][   T31]  ? dvb_usbv2_exit+0x935/0xb60
[ 1902.853011][   T31]  dvb_usbv2_probe+0x4c0/0x3c20
[ 1902.860500][   T31]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[ 1902.868362][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1902.876943][   T31]  ? __pm_runtime_set_status+0x9d4/0xcd0
[ 1902.883620][   T31]  usb_probe_interface+0x668/0xc90
[ 1902.892135][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1902.899379][   T31]  really_probe+0x267/0xaf0
[ 1902.905767][   T31]  __driver_probe_device+0x18c/0x320
[ 1902.912776][   T31]  driver_probe_device+0x4f/0x240
[ 1902.921954][   T31]  __device_attach_driver+0x279/0x430
[ 1902.931271][   T31]  bus_for_each_drv+0x258/0x2f0
[ 1902.942412][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1902.952662][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1902.960029][ T5877] usb usb9-port1: attempt power cycle
[ 1902.968310][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1902.978102][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1902.987378][   T31]  __device_attach+0x2c5/0x450
[ 1902.996067][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1903.003100][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1903.021336][   T31]  device_initial_probe+0xa1/0xd0
[ 1903.030798][   T31]  bus_probe_device+0x12a/0x220
[ 1903.039385][   T31]  ? device_add+0x726/0xb70
[ 1903.053965][   T31]  device_add+0x7b6/0xb70
[ 1903.069058][   T31]  usb_set_configuration+0x1a87/0x2110
[ 1903.078330][   T31]  usb_generic_driver_probe+0x8d/0x150
[ 1903.088193][   T31]  usb_probe_device+0x1c4/0x3b0
[ 1903.096403][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[ 1903.102317][   T31]  really_probe+0x267/0xaf0
[ 1903.108114][   T31]  __driver_probe_device+0x18c/0x320
[ 1903.114121][   T31]  driver_probe_device+0x4f/0x240
[ 1903.120054][   T31]  __device_attach_driver+0x279/0x430
[ 1903.127106][   T31]  bus_for_each_drv+0x258/0x2f0
[ 1903.132957][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1903.141691][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1903.150301][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1903.159750][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1903.169208][   T31]  __device_attach+0x2c5/0x450
[ 1903.174067][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1903.196701][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1903.202610][   T31]  device_initial_probe+0xa1/0xd0
[ 1903.210881][   T31]  bus_probe_device+0x12a/0x220
[ 1903.217075][   T31]  ? device_add+0x726/0xb70
[ 1903.221903][   T31]  device_add+0x7b6/0xb70
[ 1903.228251][   T31]  usb_new_device+0xa08/0x16f0
[ 1903.234270][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 1903.241218][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1903.250862][   T31]  hub_event+0x2a1c/0x4f30
[ 1903.259014][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1903.267262][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 1903.277819][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 1903.283813][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 1903.292082][   T31]  process_scheduled_works+0xaec/0x17a0
[ 1903.299790][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1903.306145][ T5877] usb 9-1: new full-speed USB device number 118 using dummy_hcd
[ 1903.316271][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1903.322660][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1903.329653][   T31]  ? schedule+0x90/0x360
[ 1903.335154][   T31]  worker_thread+0xda6/0x1360
[ 1903.340714][ T5877] usb 9-1: device descriptor read/8, error -71
[ 1903.347127][   T31]  kthread+0x726/0x8b0
[ 1903.352968][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1903.360924][   T31]  ? __pfx_kthread+0x10/0x10
[ 1903.366891][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1903.372931][   T31]  ? __pfx_kthread+0x10/0x10
[ 1903.382334][   T31]  ret_from_fork+0x51b/0xa40
[ 1903.389119][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1903.396777][   T31]  ? __switch_to+0xc82/0x1410
[ 1903.403754][   T31]  ? __pfx_kthread+0x10/0x10
[ 1903.411836][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1903.418079][   T31]  </TASK>
[ 1903.422881][   T31] INFO: task syz.5.6228:27344 blocked for more than 144 seconds.
[ 1903.430208][T29454] vlan0: left allmulticast mode
[ 1903.436810][   T31]       Tainted: G             L      syzkaller #0
[ 1903.444209][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1903.444479][T29454] veth0_vlan: left allmulticast mode
[ 1903.454803][   T31] task:syz.5.6228      state:D stack:28184 pid:27344 tgid:27343 ppid:19436  task_flags:0x400040 flags:0x00080002
[ 1903.472180][   T31] Call Trace:
[ 1903.480261][   T31]  <TASK>
[ 1903.487750][   T31]  __schedule+0x14ea/0x5050
[ 1903.489075][T29454] vlan0: left promiscuous mode
[ 1903.495134][   T31]  ? __pfx___schedule+0x10/0x10
[ 1903.502544][   T31]  ? schedule+0x90/0x360
[ 1903.508340][   T31]  schedule+0x164/0x360
[ 1903.512576][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1903.518658][   T31]  __mutex_lock+0x7fe/0x1300
[ 1903.523886][   T31]  ? __mutex_lock+0x5ac/0x1300
[ 1903.529647][   T31]  ? usbdev_open+0x182/0x770
[ 1903.536058][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1903.543292][   T31]  ? bus_find_device+0x27d/0x2d0
[ 1903.555971][   T31]  ? __pfx_bus_find_device+0x10/0x10
[ 1903.572313][   T31]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1903.581485][   T31]  ? usbdev_open+0xa7/0x770
[ 1903.588614][   T31]  usbdev_open+0x182/0x770
[ 1903.594536][ T5877] usb 9-1: new full-speed USB device number 119 using dummy_hcd
[ 1903.607702][   T31]  ? kobject_get_unless_zero+0x167/0x1f0
[ 1903.613856][   T31]  ? __pfx_usbdev_open+0x10/0x10
[ 1903.624417][   T31]  ? do_raw_spin_unlock+0xf5/0x210
[ 1903.631191][   T31]  chrdev_open+0x4cd/0x5e0
[ 1903.637810][ T5877] usb 9-1: device descriptor read/8, error -71
[ 1903.647142][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1903.652938][   T31]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[ 1903.664456][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1903.670275][   T31]  do_dentry_open+0x7ce/0x1420
[ 1903.677333][   T31]  vfs_open+0x3b/0x340
[ 1903.682027][   T31]  ? path_openat+0x346e/0x3e20
[ 1903.689379][   T31]  path_openat+0x3486/0x3e20
[ 1903.695559][   T31]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[ 1903.701725][   T31]  ? getname_flags+0xb7/0x540
[ 1903.709946][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1903.715916][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[ 1903.723551][   T31]  do_filp_open+0x22d/0x490
[ 1903.733089][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1903.740335][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1903.746094][   T31]  ? alloc_fd+0x64b/0x6c0
[ 1903.755080][ T5877] usb usb9-port1: unable to enumerate USB device
[ 1903.761586][   T31]  do_sys_openat2+0x12f/0x220
[ 1903.769492][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1903.776452][   T31]  ? exc_page_fault+0x6a/0xc0
[ 1903.782455][   T31]  ? do_user_addr_fault+0xc7c/0x1360
[ 1903.790114][   T31]  __x64_sys_openat+0x138/0x170
[ 1903.796924][   T31]  do_syscall_64+0xe2/0xf80
[ 1903.802781][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1903.815545][   T31]  ? trace_irq_disable+0x37/0x100
[ 1903.820821][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1903.826202][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1903.832609][   T31] RIP: 0033:0x7f94bd55b78e
[ 1903.840831][   T31] RSP: 002b:00007f94be3dfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1903.851242][   T31] RAX: ffffffffffffffda RBX: 00007f94be3e06c0 RCX: 00007f94bd55b78e
[ 1903.861375][   T31] RDX: 0000000000000002 RSI: 00007f94be3dfc00 RDI: ffffffffffffff9c
[ 1903.871046][   T31] RBP: 00007f94be3dfc00 R08: 0000000000000000 R09: 0000000000000000
[ 1903.880698][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1903.890589][   T31] R13: 00007f94bd816038 R14: 00007f94bd815fa0 R15: 00007f94bd93fa48
[ 1903.901756][   T31]  </TASK>
[ 1903.905473][   T31] 
[ 1903.905473][   T31] Showing all locks held in the system:
[ 1903.913332][   T31] 1 lock held by khungtaskd/31:
[ 1903.919020][   T31]  #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1903.930590][   T31] 2 locks held by getty/5585:
[ 1903.935715][   T31]  #0: ffff888035c5a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1903.950340][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 1903.961942][   T31] 3 locks held by kworker/u8:5/8109:
[ 1903.983593][   T31]  #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[ 1903.998766][   T31]  #1: ffffc9000bea7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[ 1904.011419][   T31]  #2: ffffffff8f9ac148 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1904.020926][   T31] 5 locks held by kworker/1:2/10420:
[ 1904.026925][   T31]  #0: ffff888020aebd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[ 1904.039175][   T31]  #1: ffffc9001a3efbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[ 1904.057859][   T31]  #2: ffff888028f57198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[ 1904.067250][   T31]  #3: ffff88807e4be198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[ 1904.077978][   T31]  #4: ffff888034ce3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[ 1904.088922][   T31] 4 locks held by kworker/u8:15/14875:
[ 1904.095801][   T31]  #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140
[ 1904.108642][   T31]  #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[ 1904.118888][   T31]  #2: ffff8880b86260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30
[ 1904.129117][   T31]  #3: ffffffff9a2cdea0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580
[ 1904.140359][   T31] 4 locks held by udevd/19894:
[ 1904.145640][   T31]  #0: ffff8880474130a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[ 1904.154878][   T31]  #1: ffff8880595fd888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[ 1904.165218][   T31]  #2: ffff88802835f1e8 (kn->active#20){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[ 1904.175523][   T31]  #3: ffff88807e4be198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 1904.185393][   T31] 5 locks held by kworker/u8:8/21709:
[ 1904.190817][   T31] 3 locks held by kworker/u8:17/21719:
[ 1904.197477][   T31]  #0: ffff8880307d4948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[ 1904.223545][   T31]  #1: ffffc90004f27bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[ 1904.236814][   T31]  #2: ffffffff8f9ac148 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0
[ 1904.246599][   T31] 1 lock held by syz.5.6228/27344:
[ 1904.251756][   T31]  #0: ffff888028f57198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770
[ 1904.261196][   T31] 1 lock held by syz.4.6501/28259:
[ 1904.266573][   T31]  #0: ffff888028f57198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770
[ 1904.276417][   T31] 3 locks held by syz.7.6786/29454:
[ 1904.281669][   T31]  #0: ffffffff8fef5990 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1904.291845][   T31]  #1: ffffffff8f9ac148 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[ 1904.301268][   T31]  #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[ 1904.312740][   T31] 
[ 1904.315420][   T31] =============================================
[ 1904.315420][   T31] 
[ 1904.323932][   T31] NMI backtrace for cpu 1
[ 1904.323956][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1904.323982][   T31] Tainted: [L]=SOFTLOCKUP
[ 1904.323988][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1904.323999][   T31] Call Trace:
[ 1904.324006][   T31]  <TASK>
[ 1904.324014][   T31]  dump_stack_lvl+0xe8/0x150
[ 1904.324042][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 1904.324067][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1904.324095][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1904.324121][   T31]  sys_info+0x135/0x170
[ 1904.324150][   T31]  watchdog+0xf90/0xfe0
[ 1904.324172][   T31]  ? watchdog+0x209/0xfe0
[ 1904.324195][   T31]  kthread+0x726/0x8b0
[ 1904.324217][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1904.324234][   T31]  ? __pfx_kthread+0x10/0x10
[ 1904.324255][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1904.324281][   T31]  ? __pfx_kthread+0x10/0x10
[ 1904.324305][   T31]  ret_from_fork+0x51b/0xa40
[ 1904.324339][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1904.324368][   T31]  ? __switch_to+0xc82/0x1410
[ 1904.324399][   T31]  ? __pfx_kthread+0x10/0x10
[ 1904.324423][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1904.324468][   T31]  </TASK>
[ 1904.446833][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1904.452125][    C0] NMI backtrace for cpu 0
[ 1904.452147][    C0] CPU: 0 UID: 0 PID: 14870 Comm: kworker/u8:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1904.452172][    C0] Tainted: [L]=SOFTLOCKUP
[ 1904.452179][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1904.452192][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[ 1904.452226][    C0] RIP: 0010:debug_check_no_obj_freed+0x1d9/0x550
[ 1904.452252][    C0] Code: 00 00 48 ba 00 00 00 00 00 fc ff df ff c3 48 8b 04 24 48 89 c5 48 85 c0 0f 84 44 03 00 00 49 89 ee 49 c1 ee 03 41 80 3c 16 00 <74> 12 48 89 ef e8 5d f0 81 fd 48 ba 00 00 00 00 00 fc ff df 48 8b
[ 1904.452267][    C0] RSP: 0018:ffffc9000427f7f0 EFLAGS: 00000046
[ 1904.452282][    C0] RAX: ffff888057500c08 RBX: 0000000000000001 RCX: 0000000000000001
[ 1904.452295][    C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000427f760
[ 1904.452308][    C0] RBP: ffff888057500c08 R08: 0000000000000003 R09: 0000000000000004
[ 1904.452320][    C0] R10: dffffc0000000000 R11: fffff5200084feec R12: ffff888094929000
[ 1904.452333][    C0] R13: ffff888094928000 R14: 1ffff1100aea0181 R15: ffff88805d9f5240
[ 1904.452347][    C0] FS:  0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000
[ 1904.452362][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1904.452375][    C0] CR2: 00007fe16bbe0ad8 CR3: 000000006a30a000 CR4: 00000000003526f0
[ 1904.452391][    C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951
[ 1904.452403][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1904.452414][    C0] Call Trace:
[ 1904.452421][    C0]  <TASK>
[ 1904.452435][    C0]  ? skb_release_data+0x6b5/0x8e0
[ 1904.452460][    C0]  kfree+0x139/0x650
[ 1904.452488][    C0]  skb_release_data+0x6b5/0x8e0
[ 1904.452517][    C0]  __kfree_skb+0x5d/0x210
[ 1904.452539][    C0]  nsim_dev_trap_report_work+0x7cf/0xb80
[ 1904.452580][    C0]  ? process_scheduled_works+0xa0f/0x17a0
[ 1904.452608][    C0]  process_scheduled_works+0xaec/0x17a0
[ 1904.452648][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1904.452673][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1904.452695][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1904.452715][    C0]  ? schedule+0x90/0x360
[ 1904.452736][    C0]  worker_thread+0xda6/0x1360
[ 1904.452776][    C0]  kthread+0x726/0x8b0
[ 1904.452797][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1904.452824][    C0]  ? __pfx_kthread+0x10/0x10
[ 1904.452845][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1904.452873][    C0]  ? __pfx_kthread+0x10/0x10
[ 1904.452892][    C0]  ret_from_fork+0x51b/0xa40
[ 1904.452921][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1904.452947][    C0]  ? __switch_to+0xc82/0x1410
[ 1904.452972][    C0]  ? __pfx_kthread+0x10/0x10
[ 1904.452992][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1904.453025][    C0]  </TASK>
[ 1904.729404][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1904.736380][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1904.747076][   T31] Tainted: [L]=SOFTLOCKUP
[ 1904.751425][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1904.761689][   T31] Call Trace:
[ 1904.764995][   T31]  <TASK>
[ 1904.767937][   T31]  vpanic+0x1e0/0x670
[ 1904.771969][   T31]  panic+0xc5/0xd0
[ 1904.775705][   T31]  ? __pfx_panic+0x10/0x10
[ 1904.780157][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1904.785569][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1904.791813][   T31]  watchdog+0xfda/0xfe0
[ 1904.796012][   T31]  ? watchdog+0x209/0xfe0
[ 1904.800370][   T31]  kthread+0x726/0x8b0
[ 1904.804462][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1904.809160][   T31]  ? __pfx_kthread+0x10/0x10
[ 1904.813779][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1904.819045][   T31]  ? __pfx_kthread+0x10/0x10
[ 1904.823659][   T31]  ret_from_fork+0x51b/0xa40
[ 1904.828284][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1904.833423][   T31]  ? __switch_to+0xc82/0x1410
[ 1904.838134][   T31]  ? __pfx_kthread+0x10/0x10
[ 1904.842748][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1904.847548][   T31]  </TASK>
[ 1904.851177][   T31] Kernel Offset: disabled
[ 1904.855511][   T31] Rebooting in 86400 seconds..