last executing test programs:

12.739297982s ago: executing program 4 (id=3085):
unshare(0x6a040000) (async)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
syslog(0x3, 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) (async)
ioctl$PPPIOCSMRU1(r2, 0x80047458, &(0x7f0000000300)=0x5)

10.388071816s ago: executing program 4 (id=3089):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4f21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x9}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000002200", "f4bd000000801900", [0x0, 0x2000000000001]}})

10.083428619s ago: executing program 4 (id=3092):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff)
write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001ff020000000000000000000000000001000107144e230005000000003a000000eb2128175268a9dc901d30d7cdf7fcf93be51887225ee81de7ea1ea879ddb03364dde7860858942304d868582de7f0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @broadcast, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x3f, 0x44, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x3, 0x1d}, @noop]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0)
sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}})
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae256", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528", 0x8}, {&(0x7f0000000380)="863df713b27092133340", 0xa}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc62c34db799cceacb", 0x61}], 0x3}}], 0x3, 0x4004)
sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x321000, 0x0)

8.70360054s ago: executing program 2 (id=3066):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
fsopen(0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x27}, 0xfffffffd})
getgid()
fsopen(&(0x7f0000000240)='efs\x00', 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000)

7.037451295s ago: executing program 2 (id=3096):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xd, @empty, 0x8}, {0xa, 0x4e24, 0xce, @empty, 0x4}, 0xffffffffffffffff, 0xfffffffb}}, 0x48)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x252, 0x1, 0x1, "3258ae1e008faa000000000000000000000000417b5c835566568b00", 0x32314d59})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

6.69006947s ago: executing program 4 (id=3098):
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0)
pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {&(0x7f00000001c0)="f16827f8710e2b21cdd3e87fca0cf15f", 0x10}, {&(0x7f0000000680)="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", 0x151}, {&(0x7f0000000280)="3a5cbe", 0x3}], 0x4, 0x87, 0x2)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)={0x0, 0x6, 0x2, "d860"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x1, 0x47e, &(0x7f0000000980)={{0x12, 0x1, 0x200, 0x14, 0x38, 0x5f, 0x20, 0x1608, 0x201, 0xcaa9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46c, 0x2, 0xcf, 0x4, 0x40, 0x1, [{{0x9, 0x4, 0x32, 0x7f, 0x1, 0x16, 0x93, 0x4, 0x3, [], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x7, 0x2, 0x81}}]}}, {{0x9, 0x4, 0xc, 0xc, 0x10, 0x42, 0x8c, 0x50, 0xf0, [@generic={0x6c, 0x30, "19c1bd96683733ab1bffaa010fa66f9622e373c94e05e0a936debb24f7023ba6402179907902eccf1904cde474664f8361116c335902dbb5cdd8ea990df623c69b262c349308d6ad058205f6069873d254513d31c77da0ff564221886c827a5476022b80c5407a364470"}], [{{0x9, 0x5, 0x4, 0x1, 0x10, 0x7a, 0xfb, 0xd, [@generic={0xfb, 0x5, "bd927063a4e45e7f9b2f7b79a3cb6bea03250c5d170a9be9296aa23e849f2995c1b485dd9f0bfd37b322d54162fd5d7d0621b405078c96d4c47a8dfc2411ce6d3b1d2fc462f822fa07b09609718cda33d9f602de23f1b3a615415108dc714f20696e42d127e2cf8cbac361b74352fb92286975468b07f999db7079e45e25f7e7e67dea7b50b1e0b103e0a956c7b2b6c68dbab7e1c8f400dbc27f9dc5a70e94d66da4ea360f66a2b73e07fc132301e3ab4eb816f81f24a0c5ed87c2674b9f42e0116f658c3c08fbc1c1b5743ab7f1fb0e601bcbf332641c635a8317cd0f80c2d3e2094b1cb5a02a43cfe7fd4e83418973bf94e8f13adada3925"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x8, 0x5, 0x8}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x43, 0x6, 0xc2}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0xb, 0xfe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x18adf313a9612c07, 0xc0, 0x7}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x7, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5a, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0xe, 0xd, 0x9}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x3, 0x9, 0x1, [@generic={0x32, 0x22, "c54d9abe7c16413f7b3b5070037b052531470c78b69a81640c2f2c7657c9f4c1ef13f806d4f5e2b91ef38b9911724696"}, @generic={0x8f, 0x10, "de104e79919c2900081d18ea62b65d2f9e5e2c897edfa4b0fe210dc133fafa94bdde10a9dbd8198d8db856b1a8e9917390a90ef74643f1181fe9a9a5952eb39be9fa5054509472314512df309fc7d34943313d2f833f588a7674ca9624099d084a2f77f68609baa57d66fc1990a469e7642e33c97b6391c0c4da0d744ee612e19271b26a402ddc0fdc485abc48"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x10, 0xc8, 0x7, [@generic={0x45, 0x21, "ddbc9e86b1b718a8944bfde5a8f729dd4e98ba93265726439288ad6c5484283d9cba3ea8b325a8e2337a586d179e0608dc96c48faebaa605d21cb339be159403d02567"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x81, 0xf, 0x1}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x7f, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x6}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x0, 0x1, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4e96}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x4, 0x0, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x7ff}, @generic={0xad, 0x5, "3e706867a90caaa394d11baa383c791d9102056286bd3c093af16e623e082847a94fc8a05f6d23ea33e78d4c1670ed890bd38901060b6a256c5bced3291433d21b06718472b14292c1489eea3362457512f9aeaa0771f65e9a7d3778bee839ab52318e8cf3942d46ea973c2c8940039b6c5bdc15beb8eb3b78d8d5f2a1d10188974b2d44f9baf28e1482e202c3fe6c41a7006aea4156a8babcefa445316ededf7dc76aa52fc189c2d6a6b1"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x4, 0xee, 0x6}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x5, 0x8d, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x57e6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xb, 0x3, 0xea, [@generic={0x66, 0xe, "8539c80717ba441bfac6ff9878636f81dc7c27a2cf6736007ee11177c10f7fbe6fbdef45e927c3f20c85ecd1a87fd000af68ad4fffdb4d546ff51176f4cd227e4d33d2440db09d43305c21a11bb303bf492d92fb70c30b7945f6d28e12204fa519f1a9c2"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x3, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xd, 0x7, 0x3, 0x10, 0x1}, 0x48, &(0x7f00000000c0)={0x5, 0xf, 0x48, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0xc, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0x9e, 0x200}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0xe, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x8, 0x0, 0x400, [0xffc0c0, 0x3fc7, 0xf, 0x1803f, 0x3f00, 0xff00af]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x5, 0x4, 0xfff7}]}, 0x2, [{0x43, &(0x7f0000000140)=@string={0x43, 0x3, "908861b8af1d01a1ad54268361eea8e3904e9e1013be6e8b3cbc36e235f8432475ba681d39d556a368f125ffd531f81fb61905e035dc925b45aeccab63730f4f61"}}, {0x82, &(0x7f00000002c0)=@string={0x82, 0x3, "a1a455360b89bea9c936a74228a47becc1f068babdea7b3953b93dc103a824aa11afc6f19179ce747da5b3fdf35e2c86ac572535aa69294422f371e199d473652e1655e0f09335eb40742927b41a1c30dbd3fd37ad6cafa0ba86d44156d97fe731ca72b4e0522600658d7ddfdfc95c53719507b2a6f96ccd675561aadb08c992"}}]})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="5c08010000008e"], 0x0, 0x0, 0x0, 0x0})

6.427116975s ago: executing program 1 (id=3100):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x2000, &(0x7f00000001c0)='\x00'}, {0x2, 0x4000, 0x0, 0x0}], 0x2})
io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f0000000180)={&(0x7f0000000000)={&(0x7f00000000c0)="5b94ebacc884a3755efc0e34313dbcd596d48900c3cc6898876392b69a21b1fc6143e7722a2f248fe36b531346b0f4a5f8a22e7cb90dbb35ea9105027e18810cb96403b395a52dabd7955567f1f7bad5486af822689ba777cd5952160fe6ad17aca40173aa684960402caaa63369b836dc97886e1661348746ebcd0aa78123678ffbb4ff9fffb009861309665016d923b11b4f9a8aac0f5e4538c1c04277d62ceb2e244bd81933c72c5dd04f6b8b792a2e25313f8d55", 0xb6, 0x0, 0x0, 0x7}}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r1, 0x2a5d, 0x0, 0x0, 0x0, 0x8)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

6.112298804s ago: executing program 2 (id=3103):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000004c0)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0xad, 0xce, 0x1c, 0x89, 0xa4, 0x27, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x19, 0x3fb})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
socket$nl_audit(0x10, 0x3, 0x9)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
writev(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)="a621e72aa70cf181df353617ad131d65c71e3a36a2edc5558f2f5d0073856ccd1d2386d2d44242cd1ea927e203934f266bc87be1cbe19ef2639ede03345e51a29d4785497d705c6eee949e8e16c6f4ac8595c46d380b490c50bf6ba741d4269df5cead878c475fac4a04bd28b6fac824de387675f04e7ac7da729433e7ae3ca0b3aa958f7b1cbb1c80a4e30f3cfd71dac897c9a7d4338a6599b1034fd312205a7c45d74e34756b9c6dcc84bdd3ed1b63", 0xb0}, {&(0x7f0000000180)="f86fce5a9f57ac6417002cb95d1bc2d5574cf61b8bbc08af7be59ea52b16ac0422f7b2eb210bd042287c63d2276662e75a6d357f57816ccfa37714d3641740af49e9129786ad15cda227826821fdd74f4bdf2b79f7b48b469d5617db6c6aaff24d05679b785227e75fdd2135f35b6d48ae83257964c1ca3f1f18c1c8f3383d", 0x7f}, {&(0x7f0000000280)="7c2c0e686d28a296eb9ee78f832b0bd515370919557aff67e5bb925f2e0dadf8786b4818723533d71af23f6b781162cccb56823f9b1234881a92ebcb071f72a1ce9b9dd90a26aaa799aaa283c63f112ac31564fe13c0745286b96d0121103d0ff39dee3d86d27eacb6974187049a0a18c8e95049a94ef43868db9ac74a58b6a699633bcc732955fac41bfe58ca314d824354cd4bf40c4b4933de311f1b67120a5fc30701ec3a4dd0b908c141f46e581925e2a3a3ca8195d370536551c3292c1c278d0c0addbd13796c6aee8e180b82726319bc7a11123eddffb98c7008eb0580c76048365776f1fe5448c2e1b89a3965a77ecc7e01db7c99a2cf29e9a61a5c3457aa1c2bd8942662ebe6bafe25419f8ab6e490e88d12f7b20d5b206ed3cd566107d6f08b6cecfee9db9562b44658b4baeafa4a7d4f8ae347f57fba5ea5aeb44f9120e6b29c9b85baf5e8b00f51d9f3b4e49bba4600ec2a3ef7bf166affa80af3c8b67802dc17f4d3a42857b4876b8dae6b618c83dc15e945a1631cd74b71d31562d53910b45190c95f06d16975d2e5fe0646ae408a9ce04fc2e8f936cf3f219bfd0a2f3fe028f3fa86d491dcb4aae22ec57b44ace5fc764a4193d1580a9c438ba38a7c54a61a55a8f4cacfaa28115ea187c4fbd98f9a910195cf03450e117a51cc037068df29136b975cd54f456038fb9b521c50e5d25c8fa47f5e6fe6da92eb51c9899dc12a58df6cc9368cd1008792b4af2b88fa7b0c3a3650fefaad6e2bb1223c91a6b530397a1b2f58f8be1eac82dafe8b7bd10a4216c448ff11a6935e1b55624d7265af67057ce8da28a65331d9c8f5e1b0f1bcb34782e821ee1f2c8170e1f304276fa38315dddf4f99960a7d202bd2cfce7ddc7ed98e368885c135640619b47affb910ed0337e0ce95e8ae3d9e6ce514d422e9daaa5b4bd1d889e774b399a31fb86735447afa646cc076e069e5b0610943ff547b79b4f3d6b3edf2bad5ccb4b9cb7e63a82de1831bd6f314b40b75f4d426a29b53bd838f921903dfb8f705c3916f02e494551c9428ce775b94bda59a4e65742b72474ac87cf0b6586a97bfa353098b32a3159866c153dd3ff3b7cef46c541f57fec833d11af9b6fd1cae20c1ba08460ef579a524df170630e08fcbdeb6a2b9f40e3933a79f60e4c39f73e32235e3f2c309975e872ab7acdff9059a22e14e4de1480ad4a6d2814203888983e520ba44171f9f2e3ce6462fbeb6375471dc913967569170fe4d2266ed6b84f61b5e3cbb7bc55a6ff0eacede75ef4f006431c9899c57e283f13e73439dfdcfbe5297b16fa8a3cf930c5a23b17c9b584f53ea20a491743b3910cf6b6881d3329b2964e55af4271fa20ba75e1e7ba12637583795e168a94990fe5a6748c62a17e0ae0488773364b2c455f807ece8ddbf3db3031b0be334563d16cbf70e99f691c8d5d92e8e6825f81bdba5319b98872f13044f3905017de5a969beccef20cb97424a48136f74fff293027b430b149fa4721b9a49a2d70f8a48a96aed288081ac923c4796cbcc60a59509f7e5c11dbf3bc600731ab54e52ae17bdf611923ecb4ace24bfa279a5c1b4d30a33a381c9953c38af6d1b35515255ef2c3794b45a70d973e61792c273e171c0c9f60c41136f468382973047fe928aa36f0291613c9144b14dd69779f1a1d4ca5d19e4c77577c6c4a003896e23ef26b8b5fa794f33ec7c4c537b5ac328a7511b88a96576e5a1ff056af8e1c1d9ceb6562a9169938381badab258f1a5ce6be02a5f934315856496fcf583277251dec0fe962d81ee609c77625d6b6a50505d2ebba9d741d8787ea7f2d118d98309e2daebf28f9323556e53e3ccd0ce9dae2e5f68c440b1e0a42b408b1670ebaec2328381251c7f23c30ca467038b9d2e372c2c1f7177e249bc3e2746e0a1bcc23e13aa6e12f9ad3d2bb57fdf1a09fe4d5964eb14d810d45085f6993e3b78def9786df486ee03eaa19e77b5fdf3b8b42a2acaf77acf443dc494e93bb82a89d086d0ac15195f2adbcfe1875369b8658af35095f012cd27af705b422c67939c2379c1fb767b9cdf5ce74ffefaabe55a47a18dc21d629efb2a38066a41ee28e5b5c21aba184f68ab1052e26a981b63a7b45d87333da641f970df82d2821e0c7ce18dfdb0eed268d3d7e0135523e993a6f3cf152171cd58b9dffe8ab9ecca4d7d10fcc58b973e8a153fc2acab19d057b673cdaa2985e59350ad0ec47ba6ac1b62b13646f8bf5dc22c88780bbb0cef8f9fe71e1375f6d87a2d086701824a576b1f9780628d6a43ea69857b404d07fd200f3025e7362f8614439446c45ac8832f530f00ca3e0d55d3a4fff41b1d38e3874ee753f96a01f602320efe4042ead1983c5b8b3ab513a0e5bd6cbe46417c77ffc1549de776421e1044ebf98e1c4d53dcd31bd845feadad09deb9ee3ca61050273516c93a76cf80af3f60257d8c37aa19", 0x6d2}, {}], 0x4)

5.740812295s ago: executing program 2 (id=3106):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$amidi(&(0x7f0000000140), 0x0, 0x400)
syz_open_dev$video(0x0, 0x100000001, 0xce026f94cf5762b8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$dri(0x0, 0x7, 0x200)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x14)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)

4.198955003s ago: executing program 4 (id=3108):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff)
write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001ff020000000000000000000000000001000107144e230005000000003a000000eb2128175268a9dc901d30d7cdf7fcf93be51887225ee81de7ea1ea879ddb03364dde7860858942304d868582de7f0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @broadcast, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x3f, 0x44, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x3, 0x1d}, @noop]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0)
sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}})
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae256", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528", 0x8}, {&(0x7f0000000380)="863df713b27092133340", 0xa}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc62c34db799cceacb", 0x61}], 0x3}}], 0x3, 0x4004)
sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x321000, 0x0)

4.131625051s ago: executing program 3 (id=3109):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x1ae, &(0x7f00000003c0)=""/4085, 0x0, 0x0, '\x00', 0x0, 0xa000000}, 0x94)

3.823041164s ago: executing program 2 (id=3110):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0xa, 0x5f, {0x5f, 0x21, "97aa815508d6a9df01f37c5ed36fedbbcdb3aa0f79ac8404481d606ff502a261953f5969b1f91bd21a23a62b6b46a5901781304db9553ea1680bb7fcdc61a45a16816e0e6f78c3be4173b100806ff414b32a0a9fe4e671d8e48a5bb8c2"}}, 0x0}, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000000, 0x5d031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
r2 = semget$private(0x0, 0x7, 0x180)
semtimedop(r2, &(0x7f0000000040)=[{0x1, 0x3ff, 0x800}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e}, {0x1, 0x4, 0x1800}, {0x0, 0x5, 0x800}, {0x2, 0x800, 0x800}, {0x4, 0x5a38, 0x3000}], 0x14, 0x0)
semctl$GETNCNT(r2, 0x0, 0xe, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r3)
close(r3)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x100000, {r3}}, 0x20)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x3000000, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

3.75602853s ago: executing program 3 (id=3111):
socket$nl_generic(0x11, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x33)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28880, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
socket$inet(0x2, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988002000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}}, 0x0)

3.544123731s ago: executing program 3 (id=3112):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f00000000c0)=0x6)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x5c, 0x66, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)

3.431917831s ago: executing program 3 (id=3113):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xd, @empty, 0x8}, {0xa, 0x4e24, 0xce, @empty, 0x4}, 0xffffffffffffffff, 0xfffffffb}}, 0x48)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x252, 0x1, 0x1, "3258ae1e008faa000000000000000000000000417b5c835566568b00", 0x32314d59})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

3.367276105s ago: executing program 0 (id=3114):
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xaee5, 0x0, 0x2, 0x9f6}, &(0x7f0000000000), &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

3.148078406s ago: executing program 0 (id=3115):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(r0, r1, 0x2)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async)
getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000100)=0x18)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (async, rerun: 64)
ioctl$KVM_CREATE_DEVICE(r6, 0xc018aec0, &(0x7f0000000040)={0x1}) (async, rerun: 64)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff40001f803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd0900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r8, 0x12000}, 0x8)

2.610209426s ago: executing program 1 (id=3116):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x22000, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000140))
write$P9_RLOPEN(r6, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x2, 0x3, 0x6}, 0x8}}, 0x18)

2.436800508s ago: executing program 3 (id=3117):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0xffff1000, 0xddccb000, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x5000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x9, 0x44, 0xe, 0x0, 0x2}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x6, 0x2}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfd, 0x0, 0x2, 0xfc, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x80, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x84, 0xfe}, {0xeeee8000, 0x80a0000, 0x0, 0x1, 0x0, 0x6, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xd000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe, 0x2}, {0x6000}, {0x1, 0xff4d}, 0x60000021, 0x0, 0x0, 0x10, 0x14000000c, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]})
ioctl$KVM_SET_MSRS(r5, 0x4140aecd, &(0x7f0000000100))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0})
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})

2.288085398s ago: executing program 1 (id=3118):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
socket$inet(0x2, 0x3, 0x2)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r8 = getpgrp(0x0)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r9, 0x0)
rt_tgsigqueueinfo(r8, r9, 0x1d, &(0x7f0000000380)={0x13, 0x6, 0xf})
setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}}}, 0x24}}, 0x0)

2.187890949s ago: executing program 0 (id=3119):
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"])
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00000000000000fffffffe00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

1.859010712s ago: executing program 2 (id=3120):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000040)={&(0x7f0000001c00)=[{0xfffb, 0x2000, 0x17, &(0x7f00000004c0)="c748aa5debfd6ce52a80b33e464344f8d30b88a21f015e"}, {0x8, 0x801, 0x7f, &(0x7f00000005c0)="d006857c87e43d6a8a4de16105212793b1475337f0f15f482fa1bbdbfb4fb49d63c7c34e2c0754e7f0d4b1c9d000009fcffeeffc75f11a4b8003dc53720f7f76cc237b5245fbca1d353853475db96e954ad7a98948679a9f2f72bb58e83a94952ea912c1497035fa237abbfa889fd427d01094cf11ff45999f3b0014f8f530"}, {0x67, 0xa00, 0xe6, &(0x7f0000000640)="70cccc80d9e995cd20008777de0ccfb5158ecc8740c17dfc1ad68ff78ae6943e2955226ed47a6000b74b6a4ca2afc58faa839183a1c15caaae2b4f20f1ebfe117f96ae78c659bee3eb78fa44387ebd4d659757d8bb0727edbea36370e750b29a93a29d62a7ba151496cc02efb098119caabcd9fa8ce5bea8da2feaf87c936b9d9e0dcc81d298a9297d8f8e4d722687eb941dfc546e0e7af932e9f01481ddbe761e1c80b060f03b5d4b317e3167ad8766595798f2e9f65dbb4d49815bfc1971f292340ee2851b9cd51d71d0992204d3fdd6132b87fca0db87c05ce1e0b48105fe362e6eccadb6"}, {0xf800, 0xa400, 0x54, &(0x7f00000007c0)="1fd6a80ea9999e88f963c37237216e0eac3f4c88da007f9dd27ae7902afdc40bd74d6629045921cdf84bf47f419d93d65b5e8ad9a93b09e55327099a8194b7ce144bfb132b93a39ac7d9f33672457238bf550115"}, {0x9, 0x9210, 0x7d, &(0x7f0000000880)="c613da49bb09a0c72e36a5c44164e884ef3b909c8becb7f7ffc160ee141e9b966162256011426a2b43692a2bb23afbc583c063c3c0ebf3f87b4004d7bd025b65a7b25a0ce6df5d69a353c821026ef128085280f29968e815edfbaa927431944cb4389f565a573e0b211b7be978770ebcf220f0a6e9b77e76f2c0b5b61b"}, {0x9, 0x4a00, 0x5b, &(0x7f0000000900)="762194a7ba1641b3e211cfe9930a41c705f197d523b3fb81b91814541ddf15b833ec8c44e49394e6946e15e7aa2371d89297633b4909bf113feeb6fba15db6c9b2d38efad51a8462490f30b663bbd8ab80da506d504c0f0b20c4e5"}, {0x1, 0xc200, 0x2a, &(0x7f0000000500)="0790c663dd92405e77e4edea71e5128ebdbebd8891d7649299975215cae3ee968757596a9c9153d65603"}, {0x4, 0xc01, 0x8c, &(0x7f00000019c0)="dc7f47ae39e53830f9fd523d55593421afd948ca8a42cd51f40562b5a50b53d0c3679588666ad7c5860d463d300a8ed899f648308a423687b587198785448f8e8bc919237945cbe81847a14b384e62722b613e026632b0d90e53c704e94335bb665cf2f3eb95721b8f993542eaa234b1fb4e52236c35567dd28a07e652edf83e4f88616156632d08994213bd"}, {0xff, 0x2001, 0xa4, &(0x7f0000001ac0)="4bfbb5cfaff7d5fa27155ff5a8a9a9bd48804e05d58efbfca4414cb1e437bf022ed6ee550454d13a2bf86963d006bbe3bcd992d05a5294e3f0613e3bd4a13868f1ec88181c0e277ee88c6601eaa6347760e2cf0af59170e214d2241c4629251cc576ba3562bc51fcdd371b48c4da60f7fd4274d22048fbf994526a527103f6b947c79d2afb8f615ff2813f5d6a9926742264d8c66bf1fef9088a9bb5859fb2e03953834b"}], 0x9})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000002140)={'filter\x00', 0xb001, 0x4, 0x3a0, 0x1d0, 0x0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@local, @private=0xa010101, 0xffffffff, 0xff, 0x7, 0xe, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x82, 0xe, 0x8, 0xf48a, 0x900, 0x5, 'veth1_to_hsr\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0)
r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {<r2=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000080)=[{{0x80000000, <r3=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000340)={{0x80000000, 0x0, 0x3, [0x5e, 0x4]}, {r2, r3, 0x2, [0x1, 0x1000]}, 0x2, [0xffffffff, 0x5]})
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = accept$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10)
sendmmsg$alg(r5, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000063c0)="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", 0xfff}, {&(0x7f0000000540)='Cs', 0x2}], 0x2, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x81}], 0x1, 0x20041000)
recvmsg(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/203, 0xcb}, {&(0x7f0000001dc0)=""/223, 0xdf}, {&(0x7f0000001ec0)=""/240, 0xf0}, {&(0x7f0000001fc0)=""/254, 0xfe}], 0x5}, 0x12143)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
madvise(&(0x7f00004c3000/0x3000)=nil, 0x3000, 0x2)
setsockopt$inet6_int(r6, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c)
recvmsg(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x102)
r7 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
fcntl$addseals(r7, 0x409, 0x8)
fallocate(r7, 0x3, 0x9100, 0x3)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$packet(0x11, 0x3, 0x300)

1.523125062s ago: executing program 3 (id=3121):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000000101040000000000000000030000034c000d80140004002001000000000000000000000000000214000380060001004e220000060002024e23000008000200ac1414aa0c000380060002004e2100000c000380060001004e210000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b}, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x54, 0x2000, @fd=r3, 0x6, 0x3, 0x2, 0x9, 0x1, {0x802, r7}})
syz_io_uring_submit(r1, r2, &(0x7f0000000c80)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r0, 0x0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)="22511d77083c3cc9f3d48f6125650c8e9191f3ae4aa069bc4f954aebd2748b71426c948bebecef8490899cd16b6c3cdad3e13bb55101decae03de76feec9d1c911109b84ee82f7d85156da584a323915fb0c1ad9073847d2e5c80b3932a5e420ad0760998bb6f9b5800d0418b837b18fcf3cfd23171fd052b79c5fe1c0acce55ca2713a00d3d9f733565fc9065e361029547a16434491f128ac2f90ca4d907e68361a3f808a2bdc4f8402e23e5bf3dbd4aed5be70954ebebb9aa027b9117b7b2f9dfcba0a251bef1dec5847d02e97ae091ca122306b37ff0424d", 0xda}, {&(0x7f0000000200)="10a2244a089b90a171373ee37191bd1430854f19c195148d8286a56c07000000000000004e0b", 0x26}, {&(0x7f0000000280)="3846a2360ebfbed4f2cb8e6192eb96e7ef35d9233939ed191b9e93d115500e0f3461cf266d875bfae548a48c0118cdf2", 0x30}, {&(0x7f00000005c0)="a1b86ddb5cc4eb80af21cc6bb11c2c2f4c69062191e18ce67ad034853e94d442ded7129aac94bb97e5d517c6d55bc4b5bfe2c7fc581d41c47a856c18a23a78b27324e304b19057c2af6876744e083d8cb478890dc122c694d2d11a240514285a9a727cebdecf29dc06085f1abc4b5447e0474da60615bb265d73b531253d8068d7b4b89d901e46f124c2d12cb438f96769606e395b05dabab111d6c507850c350dcc38758a5578b8afe64b5190a1b68f6b3ce9774779bbebf1115619b78bfc71bc8f16c3966d4b6b92f48fe3ea1fc1071a7505130bf1", 0xd6}, {&(0x7f00000006c0)="74b21d54a9cb753f2ebba04e4d7f299e2fd120164afe8337bc2c62d76209de16ee87cc05ccd85d087c729a2489ea8a5ad059562193461ebae5f7126d2a2f5c8b39bacfe8a44a653935dc36d86c04de04f2d971c10888a8d13ffd77a63a254d8b9420b72f91aa59ffabb53c87ca5fae590570590727cb014f449050418c6439fd65b9785219e87b73246652de8b33d73056c09d1bdd667f35f2bdae25f3ca36f6e01097628f311d531a79f38b27c3c286f7ff6c2adbbd8d6df06cef4e20ed83ef48daf1fc07ef95c64a211a08b0cf01", 0xcf}, {&(0x7f00000003c0)="13657abb71319e311bd68debbf5a131a9471a22c788978e0c37f2efd1c8f", 0x1e}, {&(0x7f00000007c0)="d67b833da0e074d50054b839c67afde3ced6d86c0a96071dcbbdeba3ad701704dc468791f9bd31a41a2edf4a3bc136849f068c4c5e63e23d05fcac127aa690f80343af4aeec691a31f74a2ac206e5edbddc60044b52c83e41cd4697d6801d4eb072e468173f9f3b028a3fa6670f088c160f6e1ace20a2d179245cdf763dca22fec9161d1c68707af21d06fecb071d362cf62fd6cbabc1fec152d0c145bc9d06a947f4935e47a46f7346b72aea765dbff31f0204557478c6943e18bb00c0da7e5f22745f1001b16d210cdec3d48f310a2a6a38d30b250f41e80a6e29ceb66bd29f93a93a40e4f58e33dce45a2d3e77624288dd455e4ae890fea", 0xf9}, {&(0x7f00000008c0)="c8b92ed7dfc5ea0cbfd61ee7d83a545b90451a3f3657e45bf1587d05f44746dcfc98a6b21bc73d42cd78cf6223a5779cb584361e8ae87b955d3232bbf993e68e308613c7265596f88948db2ab6c1e79d23d1bf4884ffb46cd9058927106bdf35a1af5149fa9ecd1ab9bb408ed5e0b639f11b1f2895d3a486af2f9942fea8cd989641109f0b5f7a19680f6d05799c24e3e6eaa8a7fcc4ef694e39212c390c5ac9bd09c7f4f61681b751b1cf8c174489984e1699b80fdfe4836ac1b01e63384977a181d69c07ba99f28455be33a4692e17442cc4d7769d80449db5579e9c707c4543b94d17c972a5dd7542a136aae5e0e001a4", 0xf2}], 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="b800000000000000840000000000000076f8938492028e0d0948a15daf03b5375fd2d851916610e23e2738caaa0e9bfddb5290b1451af3e5514b5e48cc25e1ca3525d689a3b90b5d048dee93d713f3a645eed4979b98455aad338e4d0948e45241a24a1a846952ce1f70690b5a59b4de77863cca96c3083d544c4ddb8a7cc8a4a6af9f921f1fd30bd8b1c1d90c4cc08364a9091ffc6e1c649e44e0d3b470ddf2095accc6b8a698acd87d4a4d730126ae9e8a76e2ab000000f8000000000000001101000001040000a5baf65a36e4d595eb6181c1f19a2201a1e75660587c5e72d9c15d9fb9672a423693e9667cfcb26c5178726091f3e75cb068d86f47cca465786e0c5c2cb7161c1c79c7de5f9a952fb664b7f9cd0cd20f728f8d169a810e6cd6a2e11f4ddbd393b68322d36450d50ba0908f65436d7abd43b8ab02e3593d0ada77fad946cf623258e8a82498a2407dc973087eb59be20082dd4cb06b54e5d1d0a659957a2c65f8bf296d9a3f5cbd9e380ab1d71afad121fa4a545e8df68f51e395ad0f6ebca17c01eea8632eadca53cfd1c2a5a03e5651aee75d16d8508023fcb1c45d39e8e027a9e5eab2c2000000a000000008000000c176ef27080000006e93f4f3ffffffffffff0434e8c3d17049be67ab9f17e7e3b906edac80105a298965df43881114f225646bcb18bab30cb94a97748bdd0f8716a070828ff635fb77c94e950e02ce8b6ab7e6ed9c56477c9b8f58755841bd81edd09e84c8d519357e0a1232fb7f3010692146fbed4f4752438b1f517410815b322dd00fec58c1ceb1709a701c1458b90ff5af0abfa6aa00"], 0x250}, 0x0, 0x44, 0x0, {0x0, r7}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x8, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0xfffffffd, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x7, 0xd, 0x4, 0x12a3, 0x4, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x6, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2006, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x3, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x5, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x9, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0x3, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xfffffffc, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd7d, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x100bfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0xdb5, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0x9, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x7, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x200000, 0x1800, 0x7, 0x1}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x100)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r13 = dup(r12)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r12, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)

1.45845273s ago: executing program 0 (id=3122):
socket$nl_generic(0x11, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x33)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28880, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
socket$inet(0x2, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bff57002c1097f92e91002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8096d5742db41bd61080dcbe40e0f802fc12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1531497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1ea"], 0x0}, 0x94)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda9880ffe00002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}}, 0x0)

1.133297343s ago: executing program 4 (id=3123):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x2901802, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000002c0)})
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4})
getpriority(0x2, 0x0)

935.554135ms ago: executing program 0 (id=3124):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x5c, 0x66, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0x5, r5})

623.456628ms ago: executing program 1 (id=3125):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r6, @ANYBLOB="08009bba", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x40a002, 0x0)
ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000380)=<r9=>0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000190001092abd700080000000021810000000fd010000000008001e00f5b0e12300000000ac14143a"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$TIOCSPGRP(r8, 0x5410, &(0x7f00000003c0)=r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_mr_vif\x00')
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r11, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x0, 0x10000, 0x6, <r13=>0x0})
r14 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0)
r15 = fsmount(r14, 0x0, 0x86)
fchdir(r15)
r16 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x99)
getdents(r16, &(0x7f0000000180)=""/49, 0x2d)
getdents(r16, 0xfffffffffffffffd, 0x58)
sendmsg$nl_generic(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0400004200040025bdd3d9fcdbdf2513000000d500188007a3a215224fbf6d5b8d9a444e10450039007babd1d6c5e16d7eebb9f60800d3df2ae08dc2", @ANYRES32=r13, @ANYBLOB="55c62aaa465ca237d5d5ce2865bafe84c714e48abe99ecbc290f9246f246327511bbfc063618d09a3f4608b7abd4759c794a566d6ce4ab3774f448383944cd5d97d373cf0e87e488dc52b99c79d0b08b4cf3e5378d3143d2c32a3b1233230406ad4444f7b184f265b0f13d7521873ce911ff9621de1b1f750e3e73dcdabb62f3e471ff6cc96b59e963ea7f8a99f6cbac04596e175d7ffb998252270c520400bb8008005700", @ANYRES32=r7, @ANYBLOB="0400168008003a00", @ANYRESOCT=r2, @ANYRES32=r10, @ANYRES32, @ANYBLOB="adbdff8ac777b9c7ebbec0edd7c52918174198b60c5da87168930fd1ff09f5814e55a3ca1716eab9da05b22daa5226455cee2cec963da61f4763ad6884d77b392b62d1454b459576b7eb74a558d4e0a91cbfdf04c686da605e69d102be02aa01183e33fa875312ad3c6c7feae78f463c109652d4395eafe642fd995d1147b5b2aac40e2c5858c1e8d69f380cc28b10a4e0b3eccc1b0ef73e9b190d9bec69d0971866cc5c0d435d4b87ae4b90f4ca0228daadc61d3bcc89f316cdd217ae2e61b12ec3814e908a6620f7cb8d26dd0fe4b0dacfca8def0ad48f70f306294733ee79a65f2ada7bb126c0ab1a9059c7c4c9d2692e1d5daf303bdc9a0b42840e950be4eaffcef642496e5ae2272bbccc3e15f30c6ba512c327c567e7b931263f965a4ade347c49eefadfb1dce14a3c82eca5ca9503cdcf8092361939c2a138074de8d809dec5642817532bb0528bb0c49c3ca64ba70031cef19737a654e43bf8c9dd29678ae75316205bc5804f19966164acb3fbd38da5ec96fef9c930624fe94b82a722202efa91336329ebdc9ade10bd9ff1f48de76eb8991090ec6d910108743ab20107263aee8fbb538a431e0e94b1575dffcd32ef43b4cadea203a03fb0a123a5cc0b88ccecdac10d8908668615d221e6373577bd3d24f31638e299cbd96ed908006200", @ANYRES32=r7, @ANYBLOB="0101"], 0x45c}, 0x1, 0x0, 0x0, 0x8001}, 0x24008000)

605.428858ms ago: executing program 0 (id=3126):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@loopback, @broadcast, <r3=>0x0}, &(0x7f0000000240)=0xc)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000002c0)={r3, 0x1, 0x6}, 0x10)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7f, 0x9, 0x8, 0x0, 0x7}, 0x0)
recvmmsg(r1, &(0x7f0000003640), 0x0, 0x10040, 0x0)
accept4$unix(r1, &(0x7f00000003c0)=@abs, &(0x7f0000000140)=0x6e, 0x800)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={<r4=>0x0}, &(0x7f0000000340)=0xc)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x4, 0x6, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'})
close_range(r5, 0xffffffffffffffff, 0x400000000000000)
sched_setattr(r4, &(0x7f0000000380)={0x38, 0x0, 0x4, 0x7f, 0x0, 0x2, 0x80, 0xfd23, 0x3c2, 0x9f5}, 0x0)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x101}, 0x14}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xebda8}]}}}]}, 0x40}}, 0x41)

144.558653ms ago: executing program 1 (id=3128):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x5c, 0x66, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x4000004)

0s ago: executing program 1 (id=3129):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
lseek(r0, 0x9, 0x0)

kernel console output (not intermixed with test programs):

681229][T15945]  ? clear_bhb_loop+0x60/0xb0
[  924.681252][T15945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  924.681271][T15945] RIP: 0033:0x7f9e3c38f749
[  924.681301][T15945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  924.681318][T15945] RSP: 002b:00007f9e3d2d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  924.681338][T15945] RAX: ffffffffffffffda RBX: 00007f9e3c5e5fa0 RCX: 00007f9e3c38f749
[  924.681353][T15945] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000003
[  924.681366][T15945] RBP: 00007f9e3d2d6090 R08: 0000000000000000 R09: 0000000000000000
[  924.681379][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  924.681390][T15945] R13: 00007f9e3c5e6038 R14: 00007f9e3c5e5fa0 R15: 00007f9e3c70fa28
[  924.681423][T15945]  </TASK>
[  924.685774][ T5923] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  924.877050][ T5893] usb 2-1: USB disconnect, device number 28
[  925.130986][T15949] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2729'.
[  925.160560][ T5923] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input62
[  926.490472][T15993] syzkaller0: entered promiscuous mode
[  926.496191][T15993] syzkaller0: entered allmulticast mode
[  926.542099][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  926.542112][   T30] audit: type=1400 audit(1765989031.320:768): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="]" pid=15985 comm="syz.0.2739"
[  926.677327][ T5923] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  926.930948][ T5923] usb 2-1: Using ep0 maxpacket: 32
[  926.941420][ T5923] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  926.951150][ T5923] usb 2-1: config 0 has no interface number 0
[  926.957426][ T5923] usb 2-1: config 0 interface 89 has no altsetting 0
[  926.967919][ T5923] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  926.978591][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.987846][ T5923] usb 2-1: Product: syz
[  926.992216][ T5923] usb 2-1: Manufacturer: syz
[  926.996978][ T5923] usb 2-1: SerialNumber: syz
[  927.043116][ T5923] usb 2-1: config 0 descriptor??
[  927.076139][ T5923] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  927.096839][ T5923] em28xx 2-1:0.89: Video interface 89 found: bulk
[  927.157981][ T5921] usb 5-1: USB disconnect, device number 29
[  927.684315][ T5923] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  927.862447][T15990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  927.901931][T15990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  928.506112][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2748'.
[  928.841804][ T5923] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  928.857966][ T5923] em28xx 2-1:0.89: board has no eeprom
[  928.919012][ T5923] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  928.926291][ T5923] em28xx 2-1:0.89: analog set to bulk mode.
[  928.934981][ T5921] em28xx 2-1:0.89: Registering V4L2 extension
[  928.947793][ T5923] usb 2-1: USB disconnect, device number 29
[  928.960155][ T5823] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  928.971349][ T5923] em28xx 2-1:0.89: Disconnecting em28xx
[  929.012982][ T5921] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  929.022172][ T5921] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  929.029937][ T5921] em28xx 2-1:0.89: No AC97 audio processor
[  929.038170][ T5921] usb 2-1: Decoder not found
[  929.050405][ T5921] em28xx 2-1:0.89: failed to create media graph
[  929.056698][ T5921] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  929.067451][ T5921] em28xx 2-1:0.89: Registering snapshot button...
[  929.080060][ T5921] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input63
[  929.101127][ T5921] em28xx 2-1:0.89: Remote control support is not available for this card.
[  929.111544][ T5923] em28xx 2-1:0.89: Closing input extension
[  929.118263][ T5923] em28xx 2-1:0.89: Deregistering snapshot button
[  929.130097][ T5823] usb 5-1: Using ep0 maxpacket: 32
[  929.137720][ T5823] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[  929.160833][ T5923] em28xx 2-1:0.89: Freeing device
[  929.167746][ T5823] usb 5-1: config 0 has no interface number 0
[  929.175609][ T5823] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  929.193128][ T5823] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  929.207814][ T5823] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  929.217801][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.226873][ T5823] usb 5-1: Product: syz
[  929.235822][ T5823] usb 5-1: Manufacturer: syz
[  929.241740][T12617] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  929.259488][ T5823] usb 5-1: SerialNumber: syz
[  929.271389][ T5823] usb 5-1: config 0 descriptor??
[  929.277265][T16024] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  929.302087][T16024] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  929.322960][ T5823] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  929.409616][T12617] usb 3-1: Using ep0 maxpacket: 8
[  929.422320][T12617] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  929.434033][T12617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.475091][T12617] usb 3-1: Product: syz
[  929.480847][T12617] usb 3-1: Manufacturer: syz
[  929.486168][T12617] usb 3-1: SerialNumber: syz
[  929.530573][T12617] usb 3-1: config 0 descriptor??
[  929.570141][T16024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  929.586987][T16024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  929.597846][ T5823] usb 5-1: USB disconnect, device number 30
[  929.613331][T12617] gspca_main: sq930x-2.14.0 probing 2770:930c
[  929.834058][T16033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  929.845933][T12617] gspca_sq930x: reg_r 001f failed -32
[  929.943879][T12617] sq930x 3-1:0.0: probe with driver sq930x failed with error -32
[  929.967670][T16033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  930.370273][T12617] usb 3-1: USB disconnect, device number 19
[  931.162567][T16069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  931.425698][T16071] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2767'.
[  931.483772][T16073] syzkaller0: entered promiscuous mode
[  931.498682][T16073] syzkaller0: entered allmulticast mode
[  931.576575][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2770'.
[  931.860121][T16091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2769'.
[  931.884586][T16083] xt_CT: No such helper "snmp_trap"
[  932.079775][ T6305] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  932.229714][ T6305] usb 4-1: Using ep0 maxpacket: 8
[  932.237223][ T6305] usb 4-1: unable to get BOS descriptor or descriptor too short
[  932.247565][ T6305] usb 4-1: config 0 has an invalid interface number: 165 but max is 0
[  932.256893][ T6305] usb 4-1: config 0 has no interface number 0
[  932.263755][ T6305] usb 4-1: config 0 interface 165 has no altsetting 0
[  932.274257][ T6305] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e
[  932.284634][ T6305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.293365][ T6305] usb 4-1: Product: syz
[  932.297915][ T6305] usb 4-1: Manufacturer: syz
[  932.303306][ T6305] usb 4-1: SerialNumber: syz
[  932.312883][ T6305] usb 4-1: config 0 descriptor??
[  932.510815][T16098] delete_channel: no stack
[  932.523343][T16101] loop8: detected capacity change from 0 to 8
[  932.540387][T16101] Dev loop8: unable to read RDB block 8
[  932.551720][T16101]  loop8: unable to read partition table
[  932.555353][ T6305] ni6501 4-1:0.165: driver 'ni6501' failed to auto-configure device.
[  932.558469][T16101] loop8: partition table beyond EOD, truncated
[  932.575811][T16101] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  932.605019][ T6305] usb 4-1: USB disconnect, device number 22
[  932.807828][T16107] syzkaller0: entered promiscuous mode
[  932.814224][T16107] syzkaller0: entered allmulticast mode
[  932.826037][T16107] FAULT_INJECTION: forcing a failure.
[  932.826037][T16107] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  933.192023][T16107] CPU: 1 UID: 0 PID: 16107 Comm: syz.4.2778 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  933.192045][T16107] Tainted: [L]=SOFTLOCKUP
[  933.192050][T16107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  933.192059][T16107] Call Trace:
[  933.192065][T16107]  <TASK>
[  933.192071][T16107]  dump_stack_lvl+0x189/0x250
[  933.192091][T16107]  ? __pfx____ratelimit+0x10/0x10
[  933.192111][T16107]  ? __pfx_dump_stack_lvl+0x10/0x10
[  933.192126][T16107]  ? __pfx__printk+0x10/0x10
[  933.192152][T16107]  should_fail_ex+0x414/0x560
[  933.192175][T16107]  _copy_to_user+0x31/0xb0
[  933.192192][T16107]  simple_read_from_buffer+0xe1/0x170
[  933.192212][T16107]  proc_fail_nth_read+0x1b3/0x220
[  933.192228][T16107]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  933.192244][T16107]  ? rw_verify_area+0x2a6/0x4d0
[  933.192255][T16107]  ? tun_chr_write_iter+0xe0/0x200
[  933.192270][T16107]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  933.192284][T16107]  vfs_read+0x200/0xa30
[  933.192295][T16107]  ? fdget_pos+0x247/0x320
[  933.192314][T16107]  ? __pfx___mutex_lock+0x10/0x10
[  933.192328][T16107]  ? __pfx_vfs_read+0x10/0x10
[  933.192341][T16107]  ? __fget_files+0x2a/0x420
[  933.192360][T16107]  ? __fget_files+0x3a0/0x420
[  933.192375][T16107]  ? __fget_files+0x2a/0x420
[  933.192401][T16107]  ksys_read+0x145/0x250
[  933.192415][T16107]  ? __pfx_ksys_read+0x10/0x10
[  933.192429][T16107]  ? do_syscall_64+0xbe/0xf80
[  933.192445][T16107]  do_syscall_64+0xfa/0xf80
[  933.192459][T16107]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.192472][T16107]  ? clear_bhb_loop+0x60/0xb0
[  933.192488][T16107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.192500][T16107] RIP: 0033:0x7fab6b38e15c
[  933.192512][T16107] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  933.192523][T16107] RSP: 002b:00007fab6c218030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  933.192537][T16107] RAX: ffffffffffffffda RBX: 00007fab6b5e5fa0 RCX: 00007fab6b38e15c
[  933.192565][T16107] RDX: 000000000000000f RSI: 00007fab6c2180a0 RDI: 0000000000000006
[  933.192574][T16107] RBP: 00007fab6c218090 R08: 0000000000000000 R09: 0000000000000000
[  933.192583][T16107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  933.192591][T16107] R13: 00007fab6b5e6038 R14: 00007fab6b5e5fa0 R15: 00007fab6b70fa28
[  933.192613][T16107]  </TASK>
[  933.738261][T16113] FAULT_INJECTION: forcing a failure.
[  933.738261][T16113] name failslab, interval 1, probability 0, space 0, times 0
[  933.764428][T16113] CPU: 0 UID: 0 PID: 16113 Comm: syz.4.2779 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  933.764457][T16113] Tainted: [L]=SOFTLOCKUP
[  933.764465][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  933.764476][T16113] Call Trace:
[  933.764484][T16113]  <TASK>
[  933.764492][T16113]  dump_stack_lvl+0x189/0x250
[  933.764519][T16113]  ? __pfx____ratelimit+0x10/0x10
[  933.764549][T16113]  ? __pfx_dump_stack_lvl+0x10/0x10
[  933.764570][T16113]  ? __pfx__printk+0x10/0x10
[  933.764615][T16113]  should_fail_ex+0x414/0x560
[  933.764647][T16113]  should_failslab+0xa8/0x100
[  933.764670][T16113]  __kmalloc_cache_noprof+0x84/0x700
[  933.764689][T16113]  ? sctp_add_bind_addr+0x8c/0x370
[  933.764719][T16113]  sctp_add_bind_addr+0x8c/0x370
[  933.764749][T16113]  sctp_copy_local_addr_list+0x30b/0x4e0
[  933.764777][T16113]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  933.764803][T16113]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  933.764830][T16113]  ? sctp_v6_is_any+0x64/0x80
[  933.764858][T16113]  ? sctp_copy_one_addr+0x93/0x360
[  933.764886][T16113]  sctp_bind_addr_copy+0xb3/0x3c0
[  933.764912][T16113]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  933.764938][T16113]  sctp_connect_new_asoc+0x2e0/0x690
[  933.764960][T16113]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  933.764980][T16113]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  933.764999][T16113]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  933.765016][T16113]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  933.765035][T16113]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  933.765055][T16113]  ? security_sctp_bind_connect+0x7e/0x2e0
[  933.765076][T16113]  sctp_sendmsg+0x155c/0x2840
[  933.765106][T16113]  ? __pfx_sctp_sendmsg+0x10/0x10
[  933.765121][T16113]  ? aa_sk_perm+0x15f/0x920
[  933.765145][T16113]  ? aa_sk_perm+0x7ee/0x920
[  933.765171][T16113]  ? __pfx_aa_sk_perm+0x10/0x10
[  933.765195][T16113]  ? sock_rps_record_flow+0x19/0x410
[  933.765223][T16113]  ? inet_sendmsg+0x2f4/0x370
[  933.765245][T16113]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  933.765265][T16113]  __sock_sendmsg+0x19c/0x270
[  933.765295][T16113]  ____sys_sendmsg+0x505/0x820
[  933.765323][T16113]  ? __pfx_____sys_sendmsg+0x10/0x10
[  933.765354][T16113]  ? import_iovec+0x74/0xa0
[  933.765379][T16113]  ___sys_sendmsg+0x21f/0x2a0
[  933.765403][T16113]  ? __pfx____sys_sendmsg+0x10/0x10
[  933.765432][T16113]  ? rcu_read_lock_any_held+0xb3/0x120
[  933.765481][T16113]  ? __fget_files+0x2a/0x420
[  933.765504][T16113]  ? __fget_files+0x3a0/0x420
[  933.765537][T16113]  __x64_sys_sendmsg+0x19b/0x260
[  933.765561][T16113]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  933.765598][T16113]  ? __pfx_ksys_write+0x10/0x10
[  933.765620][T16113]  ? do_syscall_64+0xbe/0xf80
[  933.765643][T16113]  do_syscall_64+0xfa/0xf80
[  933.765664][T16113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.765682][T16113]  ? clear_bhb_loop+0x60/0xb0
[  933.765704][T16113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.765721][T16113] RIP: 0033:0x7fab6b38f749
[  933.765738][T16113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  933.765754][T16113] RSP: 002b:00007fab6c218038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  933.765774][T16113] RAX: ffffffffffffffda RBX: 00007fab6b5e5fa0 RCX: 00007fab6b38f749
[  933.765788][T16113] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000003
[  933.765800][T16113] RBP: 00007fab6c218090 R08: 0000000000000000 R09: 0000000000000000
[  933.765812][T16113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  933.765823][T16113] R13: 00007fab6b5e6038 R14: 00007fab6b5e5fa0 R15: 00007fab6b70fa28
[  933.765854][T16113]  </TASK>
[  934.209856][ T6305] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  934.371868][ T6305] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  934.382457][ T6305] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  934.395669][ T6305] usb 4-1: string descriptor 0 read error: -22
[  934.405763][ T6305] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  934.415664][ T6305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.446010][ T6305] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  934.646156][ T5923] usb 4-1: USB disconnect, device number 23
[  934.743692][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'.
[  934.870274][T16130] delete_channel: no stack
[  934.998845][T16133] loop6: detected capacity change from 0 to 524288000
[  935.090231][ T5923] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  935.270413][ T5923] usb 5-1: Using ep0 maxpacket: 32
[  935.345065][ T5923] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  935.562951][ T5923] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  935.674313][ T5923] usb 5-1: config 0 interface 0 has no altsetting 0
[  935.726915][ T5923] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  935.741168][ T5923] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  935.755377][ T5923] usb 5-1: Product: syz
[  935.836618][ T5923] usb 5-1: Manufacturer: syz
[  935.857420][ T5923] usb 5-1: SerialNumber: syz
[  935.895803][ T5923] usb 5-1: config 0 descriptor??
[  936.032542][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'.
[  936.058680][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'.
[  936.156189][T16129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  936.200195][T16129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  936.415040][ T5923] gs_usb 5-1:0.0: Couldn't get device config: (err=-71)
[  936.437256][ T5923] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  936.468077][ T5923] usb 5-1: USB disconnect, device number 31
[  936.727080][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  936.740150][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  937.606962][T16157] batadv_slave_1: entered promiscuous mode
[  937.620347][T16159] FAULT_INJECTION: forcing a failure.
[  937.620347][T16159] name failslab, interval 1, probability 0, space 0, times 0
[  937.662095][T16159] CPU: 1 UID: 0 PID: 16159 Comm: syz.4.2796 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  937.662127][T16159] Tainted: [L]=SOFTLOCKUP
[  937.662134][T16159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  937.662146][T16159] Call Trace:
[  937.662153][T16159]  <TASK>
[  937.662162][T16159]  dump_stack_lvl+0x189/0x250
[  937.662188][T16159]  ? __pfx____ratelimit+0x10/0x10
[  937.662216][T16159]  ? __pfx_dump_stack_lvl+0x10/0x10
[  937.662239][T16159]  ? __pfx__printk+0x10/0x10
[  937.662279][T16159]  should_fail_ex+0x414/0x560
[  937.662312][T16159]  should_failslab+0xa8/0x100
[  937.662337][T16159]  __kmalloc_cache_noprof+0x84/0x700
[  937.662357][T16159]  ? sctp_add_bind_addr+0x8c/0x370
[  937.662388][T16159]  sctp_add_bind_addr+0x8c/0x370
[  937.662418][T16159]  sctp_copy_local_addr_list+0x30b/0x4e0
[  937.662447][T16159]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  937.662473][T16159]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  937.662500][T16159]  ? sctp_v6_is_any+0x64/0x80
[  937.662527][T16159]  ? sctp_copy_one_addr+0x93/0x360
[  937.662556][T16159]  sctp_bind_addr_copy+0xb3/0x3c0
[  937.662582][T16159]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  937.662608][T16159]  sctp_connect_new_asoc+0x2e0/0x690
[  937.662630][T16159]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  937.662650][T16159]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  937.662670][T16159]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  937.662687][T16159]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  937.662706][T16159]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  937.662726][T16159]  ? security_sctp_bind_connect+0x7e/0x2e0
[  937.662747][T16159]  sctp_sendmsg+0x155c/0x2840
[  937.662777][T16159]  ? __pfx_sctp_sendmsg+0x10/0x10
[  937.662793][T16159]  ? aa_sk_perm+0x15f/0x920
[  937.662816][T16159]  ? aa_sk_perm+0x7ee/0x920
[  937.662842][T16159]  ? __pfx_aa_sk_perm+0x10/0x10
[  937.662867][T16159]  ? sock_rps_record_flow+0x19/0x410
[  937.662894][T16159]  ? inet_sendmsg+0x2f4/0x370
[  937.662916][T16159]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  937.662937][T16159]  __sock_sendmsg+0x19c/0x270
[  937.662968][T16159]  ____sys_sendmsg+0x505/0x820
[  937.662996][T16159]  ? __pfx_____sys_sendmsg+0x10/0x10
[  937.663027][T16159]  ? import_iovec+0x74/0xa0
[  937.663061][T16159]  ___sys_sendmsg+0x21f/0x2a0
[  937.663086][T16159]  ? __pfx____sys_sendmsg+0x10/0x10
[  937.663115][T16159]  ? rcu_read_lock_any_held+0xb3/0x120
[  937.663163][T16159]  ? __fget_files+0x2a/0x420
[  937.663186][T16159]  ? __fget_files+0x3a0/0x420
[  937.663220][T16159]  __x64_sys_sendmsg+0x19b/0x260
[  937.663245][T16159]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  937.663276][T16159]  ? __pfx_ksys_write+0x10/0x10
[  937.663298][T16159]  ? do_syscall_64+0xbe/0xf80
[  937.663321][T16159]  do_syscall_64+0xfa/0xf80
[  937.663341][T16159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.663359][T16159]  ? clear_bhb_loop+0x60/0xb0
[  937.663381][T16159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.663398][T16159] RIP: 0033:0x7fab6b38f749
[  937.663416][T16159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  937.663431][T16159] RSP: 002b:00007fab6c218038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  937.663451][T16159] RAX: ffffffffffffffda RBX: 00007fab6b5e5fa0 RCX: 00007fab6b38f749
[  937.663465][T16159] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000003
[  937.663477][T16159] RBP: 00007fab6c218090 R08: 0000000000000000 R09: 0000000000000000
[  937.663488][T16159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  937.663499][T16159] R13: 00007fab6b5e6038 R14: 00007fab6b5e5fa0 R15: 00007fab6b70fa28
[  937.663529][T16159]  </TASK>
[  938.086770][T16157] batadv_slave_1: left promiscuous mode
[  938.200264][T16163] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  938.892315][T16185] syzkaller0: entered promiscuous mode
[  938.905255][T16185] syzkaller0: entered allmulticast mode
[  938.934173][ T5893] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  939.089661][ T5893] usb 2-1: device descriptor read/64, error -71
[  939.329946][ T5893] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  939.509739][ T5893] usb 2-1: device descriptor read/64, error -71
[  939.702442][ T5893] usb usb2-port1: attempt power cycle
[  940.070042][ T5893] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  940.104023][ T5893] usb 2-1: device descriptor read/8, error -71
[  940.401267][ T5893] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  940.495020][ T5893] usb 2-1: device descriptor read/8, error -71
[  940.624074][ T5893] usb usb2-port1: unable to enumerate USB device
[  942.147872][T16210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2809'.
[  942.688392][T16203] pim6reg: entered allmulticast mode
[  943.013031][T16227] loop8: detected capacity change from 0 to 8
[  943.023474][T16227] Dev loop8: unable to read RDB block 8
[  943.034780][ T5923] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  943.049918][T16227]  loop8: unable to read partition table
[  943.055946][T16227] loop8: partition table beyond EOD, truncated
[  943.066296][T16225] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  943.102693][T16227] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  943.207147][ T5923] usb 2-1: device descriptor read/64, error -71
[  943.235921][T16232] fuse: Bad value for 'fd'
[  943.279617][ T5893] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  943.437818][ T5893] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  943.454541][ T5893] usb 4-1: config 0 has no interface number 0
[  943.469520][ T5923] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  943.471761][ T5893] usb 4-1: config 0 interface 41 has no altsetting 0
[  943.504543][ T5893] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  943.517536][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.527782][ T5893] usb 4-1: Product: syz
[  943.537795][ T5893] usb 4-1: Manufacturer: syz
[  943.543340][ T5893] usb 4-1: SerialNumber: syz
[  943.551638][ T5893] usb 4-1: config 0 descriptor??
[  943.640917][ T5923] usb 2-1: device descriptor read/64, error -71
[  943.758881][ T5923] usb usb2-port1: attempt power cycle
[  943.880452][T16252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2824'.
[  944.109608][ T5923] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  944.130445][ T5923] usb 2-1: device descriptor read/8, error -71
[  944.171731][T16263] vlan0: entered promiscuous mode
[  944.369619][ T5923] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  944.390065][ T5923] usb 2-1: device descriptor read/8, error -71
[  944.419755][ T7190] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  944.499986][ T5923] usb usb2-port1: unable to enumerate USB device
[  944.581305][ T7190] usb 3-1: config index 0 descriptor too short (expected 1051, got 27)
[  944.591761][ T7190] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  944.601476][ T7190] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  944.611667][ T7190] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149
[  944.623169][ T7190] usb 3-1: config 0 interface 0 has no altsetting 0
[  944.633788][ T7190] usb 3-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3
[  944.644830][ T7190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.653815][ T7190] usb 3-1: Product: syz
[  944.658249][ T7190] usb 3-1: Manufacturer: syz
[  944.668645][ T7190] usb 3-1: SerialNumber: syz
[  944.684723][ T7190] usb 3-1: config 0 descriptor??
[  944.691250][T16267] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  944.905380][T16267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  944.918079][T16267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  944.930339][T16267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  944.939548][T16267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  944.950310][T16267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  944.960660][T16267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  944.978382][T16267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  944.998189][T16267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  945.020656][T16267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  945.040531][T16267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  945.086556][ T7190] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected
[  945.101510][ T7190] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  945.115287][ T7190] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  945.124219][ T7190] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  945.136420][ T7190] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  945.149561][ T7190] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82
[  945.221949][ T7190] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  945.234976][ T7190] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  945.257885][ T7190] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  945.266490][ T7190] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  945.292377][ T7190] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  945.307980][ T7190] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84
[  945.317672][ T7190] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[  945.331967][ T7190] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  945.350440][ T7190] usb 3-1: USB disconnect, device number 20
[  945.415712][ T7190] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  945.443256][ T7190] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  945.467715][ T7190] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  945.485802][ T7190] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  945.501039][ T7190] keyspan 3-1:0.0: device disconnected
[  945.966663][T16288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2834'.
[  945.977934][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2834'.
[  946.050422][ T5893] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  946.098537][ T5893] usb 4-1: USB disconnect, device number 24
[  946.190260][T16293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2836'.
[  946.371850][T16298] ip6tnl0: Caught tx_queue_len zero misconfig
[  946.378599][T16298] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2837'.
[  946.611415][ T5893] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  946.759594][ T5893] usb 4-1: device descriptor read/64, error -71
[  946.954498][T13984] tipc: Resetting bearer <eth:syzkaller0>
[  947.009711][ T5893] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  947.031449][ T5151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  947.043309][ T5151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  947.053497][ T5151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  947.062011][ T5151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  947.071505][ T5151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  947.150179][T13159] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  947.160092][ T5893] usb 4-1: device descriptor read/64, error -71
[  947.181239][T13159] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  947.207354][T13159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  947.215984][T13159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  947.225201][T13159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  947.280801][ T5893] usb usb4-port1: attempt power cycle
[  947.366467][T13984] tipc: Disabling bearer <eth:syzkaller0>
[  947.375909][T16309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2841'.
[  947.596490][T16309] bond6: Unable to set down delay as MII monitoring is disabled
[  947.624786][T16309] bond6 (unregistering): Released all slaves
[  947.642336][ T5893] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  947.670578][ T5893] usb 4-1: device descriptor read/8, error -71
[  947.823891][T16314] input: syz0 as /devices/virtual/input/input64
[  947.930185][ T5893] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  948.000570][ T5893] usb 4-1: device descriptor read/8, error -71
[  948.122039][ T7190] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  948.130401][ T5893] usb usb4-port1: unable to enumerate USB device
[  948.152152][T16308] chnl_net:caif_netlink_parms(): no params data found
[  948.244607][T16308] bridge0: port 1(bridge_slave_0) entered blocking state
[  948.252028][T16308] bridge0: port 1(bridge_slave_0) entered disabled state
[  948.259850][T16308] bridge_slave_0: entered allmulticast mode
[  948.267155][T16308] bridge_slave_0: entered promiscuous mode
[  948.275834][T16308] bridge0: port 2(bridge_slave_1) entered blocking state
[  948.283976][T16308] bridge0: port 2(bridge_slave_1) entered disabled state
[  948.292038][T16308] bridge_slave_1: entered allmulticast mode
[  948.292331][ T7190] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  948.301317][T16308] bridge_slave_1: entered promiscuous mode
[  948.309754][ T7190] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  948.325208][ T7190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.352108][ T7190] gspca_main: stv0680-2.14.0 probing 041e:4007
[  948.366973][T16308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  948.381474][T16308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  948.446381][T16308] team0: Port device team_slave_0 added
[  948.455583][T16308] team0: Port device team_slave_1 added
[  948.504628][T16308] batman_adv: batadv0: Adding interface: batadv_slave_0
[  948.513873][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  948.541138][T16308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  948.574551][T16308] batman_adv: batadv0: Adding interface: batadv_slave_1
[  948.582061][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  948.609692][T16308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  948.624895][ T6856] bridge_slave_1: left allmulticast mode
[  948.631549][ T6856] bridge_slave_1: left promiscuous mode
[  948.639193][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state
[  948.650636][ T6856] bridge_slave_0: left allmulticast mode
[  948.656312][ T6856] bridge_slave_0: left promiscuous mode
[  948.662667][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state
[  948.837661][ T6856] erspan0 (unregistering): left promiscuous mode
[  948.867941][ T6856] gretap0 (unregistering): left promiscuous mode
[  949.285079][T13159] Bluetooth: hci5: command tx timeout
[  949.335685][ T6856] bond0 (unregistering): left promiscuous mode
[  949.342799][ T6856] bond_slave_0: left promiscuous mode
[  949.354644][ T6856] bond_slave_1: left promiscuous mode
[  949.361063][ T7190] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  949.372497][ T7190] stv0680 3-1:4.0: STV(e): camera ping failed!!
[  949.385258][ T7190] stv0680 3-1:4.0: last error: 0,  command = 0x0
[  949.398337][ T6856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  949.411601][ T6856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  949.430241][ T6856] bond0 (unregistering): Released all slaves
[  949.544838][ T6856] bond1 (unregistering): (slave bond2): Releasing backup interface
[  949.554373][ T6856] bond2 (unregistering): left promiscuous mode
[  949.572884][ T6856] bond1 (unregistering): Released all slaves
[  949.848789][ T6856] bond2 (unregistering): Released all slaves
[  949.981123][T16346] netlink: 'syz.3.2849': attribute type 1 has an invalid length.
[  950.026810][ T6856] tipc: Left network mode
[  950.070436][T16346] 8021q: adding VLAN 0 to HW filter on device bond5
[  950.082405][T16308] hsr_slave_0: entered promiscuous mode
[  950.099130][T16346] netlink: 'syz.3.2849': attribute type 17 has an invalid length.
[  950.101058][T16308] hsr_slave_1: entered promiscuous mode
[  950.107310][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'.
[  950.122657][T16346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2849'.
[  950.169751][T16350] macvlan3: entered promiscuous mode
[  950.175235][T16350] macvlan3: entered allmulticast mode
[  950.181478][T16350] bond5: entered allmulticast mode
[  950.186674][T16350] bond5: entered promiscuous mode
[  950.192785][T16350] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  950.201209][   T30] audit: type=1326 audit(1765989054.980:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.0.2850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e3c38f749 code=0x0
[  950.226901][T16350] team0: Port device macvlan3 added
[  950.324363][T16353] bond5: (slave gretap1): making interface the new active one
[  950.342666][T16353] gretap1: entered promiscuous mode
[  950.348053][T16353] gretap1: entered allmulticast mode
[  950.356203][T16353] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  950.551195][T16357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2850'.
[  950.857105][ T7190] usb 3-1: USB disconnect, device number 21
[  951.369594][T13159] Bluetooth: hci5: command tx timeout
[  951.467513][T16373] delete_channel: no stack
[  951.808453][ T6856] hsr_slave_0: left promiscuous mode
[  951.867161][ T6856] hsr_slave_1: left promiscuous mode
[  951.920179][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_1
[  952.969881][T16401] loop8: detected capacity change from 0 to 9
[  953.001195][T16401] Dev loop8: unable to read RDB block 9
[  953.006793][T16401]  loop8: unable to read partition table
[  953.047542][T16401] loop8: partition table beyond EOD, truncated
[  953.069581][T16401] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  953.447284][T13159] Bluetooth: hci5: command tx timeout
[  953.605490][ T7190] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  953.782543][ T7190] usb 4-1: Using ep0 maxpacket: 32
[  953.904725][ T7190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  953.925243][ T7190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  953.935780][ T7190] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  953.945367][ T7190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.961168][ T7190] usb 4-1: config 0 descriptor??
[  953.977085][ T7190] hub 4-1:0.0: USB hub found
[  954.168834][ T7190] hub 4-1:0.0: 1 port detected
[  954.260248][ T7190] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  954.266968][ T7190] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  954.308295][ T7190] usbhid 4-1:0.0: can't add hid device: -71
[  954.335117][ T7190] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  954.366275][ T6856] team0 (unregistering): Port device team_slave_1 removed
[  954.377990][ T7190] usb 4-1: USB disconnect, device number 29
[  954.471348][ T6856] team0 (unregistering): Port device team_slave_0 removed
[  955.519679][T13159] Bluetooth: hci5: command tx timeout
[  955.557452][T16407] veth1: Caught tx_queue_len zero misconfig
[  955.563920][T16407] sch_tbf: burst 0 is lower than device veth1 mtu (1514) !
[  955.573165][T16410] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  955.843273][T16443] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[  955.853919][T16440] loop6: detected capacity change from 0 to 7
[  955.874141][T16440]  loop6:
[  955.877152][T16440] loop6: partition table partially beyond EOD, truncated
[  956.966713][T16308] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  957.038769][T16308] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  957.151632][T16308] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  957.274591][T16308] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  957.853529][T16308] 8021q: adding VLAN 0 to HW filter on device bond0
[  957.900196][ T6856] IPVS: stop unused estimator thread 0...
[  958.057418][T16308] 8021q: adding VLAN 0 to HW filter on device team0
[  958.097351][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state
[  958.104589][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state
[  958.162946][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state
[  958.170137][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state
[  958.780402][ T5893] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  959.009412][ T5893] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  959.020626][ T5893] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  959.060449][ T5893] usb 4-1: config 220 has no interface number 2
[  959.065602][T16308] 8021q: adding VLAN 0 to HW filter on device batadv0
[  959.087850][ T5893] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  959.124461][ T5893] usb 4-1: config 220 interface 0 has no altsetting 0
[  959.164796][ T5893] usb 4-1: config 220 interface 76 has no altsetting 0
[  959.195671][ T5893] usb 4-1: config 220 interface 1 has no altsetting 0
[  959.235856][ T5893] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  959.246342][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.276764][ T5893] usb 4-1: Product: syz
[  959.298433][ T5893] usb 4-1: Manufacturer: syz
[  959.317969][ T5893] usb 4-1: SerialNumber: syz
[  959.432612][T16308] veth0_vlan: entered promiscuous mode
[  959.487861][T16308] veth1_vlan: entered promiscuous mode
[  959.529668][ T7190] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  959.638103][T16308] veth0_macvtap: entered promiscuous mode
[  959.697096][T16308] veth1_macvtap: entered promiscuous mode
[  959.704909][ T7190] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  959.722179][ T7190] usb 3-1: config 0 has no interface number 0
[  959.746723][ T7190] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  959.781275][T16308] batman_adv: batadv0: Interface activated: batadv_slave_0
[  959.802721][ T7190] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice=cf.00
[  959.826141][T16308] batman_adv: batadv0: Interface activated: batadv_slave_1
[  959.838150][ T7190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.883626][ T7190] usb 3-1: Product: syz
[  959.899679][ T5980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  959.904019][ T7190] usb 3-1: Manufacturer: syz
[  959.941371][ T5980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  959.962736][ T7190] usb 3-1: SerialNumber: syz
[  959.991389][ T7190] usb 3-1: config 0 descriptor??
[  959.991785][ T5980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  960.014144][T16508] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  960.062139][ T5980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  960.347735][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  960.387909][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  960.515536][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  960.540826][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  960.653228][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2882'.
[  960.684995][T16523] input: syz1 as /devices/virtual/input/input65
[  960.926085][T16529] netlink: 'syz.1.2839': attribute type 9 has an invalid length.
[  960.953678][T16529] netlink: 'syz.1.2839': attribute type 11 has an invalid length.
[  960.981098][T16529] netlink: 'syz.1.2839': attribute type 12 has an invalid length.
[  961.013719][T16529] netlink: 184628 bytes leftover after parsing attributes in process `syz.1.2839'.
[  961.477312][ T5893] usb 4-1: selecting invalid altsetting 0
[  961.484835][ T5893] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  961.502545][ T5893] uvcvideo 4-1:220.0: No valid video chain found.
[  961.551029][ T5893] usb 4-1: selecting invalid altsetting 0
[  961.567797][ T5893] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  961.603973][ T5893] usb 4-1: USB disconnect, device number 30
[  961.765296][T16550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2885'.
[  962.047703][T16552] team_slave_0: entered promiscuous mode
[  962.053708][T16552] team_slave_1: entered promiscuous mode
[  962.084321][T16552] macsec1: entered promiscuous mode
[  962.097960][T16552] team0: entered promiscuous mode
[  962.111036][T16552] team0: Device macsec1 is already an upper device of the team interface
[  962.200655][T16552] team0: left promiscuous mode
[  962.214861][T16552] team_slave_0: left promiscuous mode
[  962.220372][T16552] team_slave_1: left promiscuous mode
[  962.328118][ T5823] usb 3-1: USB disconnect, device number 22
[  962.778765][T16564] binder: 16557:16564 ioctl c0306201 0 returned -14
[  962.880063][T16563] loop8: detected capacity change from 0 to 9
[  963.115838][T16572] pimreg3: entered allmulticast mode
[  963.747641][T16581] loop8: detected capacity change from 0 to 8
[  963.776564][ T6958] Dev loop8: unable to read RDB block 8
[  963.782837][ T6958]  loop8: unable to read partition table
[  963.796343][ T6958] loop8: partition table beyond EOD, truncated
[  963.833524][T16581] Dev loop8: unable to read RDB block 8
[  963.849616][  T795] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  963.849986][T16581]  loop8: unable to read partition table
[  963.880995][T16581] loop8: partition table beyond EOD, truncated
[  963.909871][T16581] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  964.016090][  T795] usb 5-1: unable to get BOS descriptor or descriptor too short
[  964.025014][  T795] usb 5-1: not running at top speed; connect to a high speed hub
[  964.052036][  T795] usb 5-1: config 3 has an invalid interface number: 101 but max is 0
[  964.078043][  T795] usb 5-1: config 3 has an invalid interface association descriptor of length 2, skipping
[  964.118698][  T795] usb 5-1: config 3 has no interface number 0
[  964.160991][  T795] usb 5-1: config 3 interface 101 has no altsetting 0
[  964.190154][  T795] usb 5-1: New USB device found, idVendor=1bc7, idProduct=8b81, bcdDevice=3f.77
[  964.222991][  T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.258554][  T795] usb 5-1: Product: syz
[  964.274621][  T795] usb 5-1: Manufacturer: syz
[  964.296219][  T795] usb 5-1: SerialNumber: syz
[  964.541127][  T795] cdc_ether 5-1:3.101: invalid descriptor buffer length
[  964.556983][  T795] usb 5-1: bad CDC descriptors
[  964.604827][  T795] usb 5-1: USB disconnect, device number 32
[  964.629958][ T6305] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  964.819760][ T6305] usb 2-1: Using ep0 maxpacket: 16
[  964.848594][ T6305] usb 2-1: unable to get BOS descriptor or descriptor too short
[  964.881568][ T6305] usb 2-1: config 6 has an invalid interface number: 46 but max is 0
[  964.899636][ T6305] usb 2-1: config 6 has an invalid interface association descriptor of length 5, skipping
[  964.926415][ T6305] usb 2-1: config 6 has an invalid descriptor of length 13, skipping remainder of the config
[  964.960195][ T6305] usb 2-1: config 6 has no interface number 0
[  964.966365][ T6305] usb 2-1: config 6 interface 46 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  965.002481][ T6305] usb 2-1: config 6 interface 46 has no altsetting 0
[  965.049677][ T6305] usb 2-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=e0.c5
[  965.058794][ T6305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.102974][ T6305] usb 2-1: Product: syz
[  965.107206][ T6305] usb 2-1: Manufacturer: syz
[  965.138498][ T6305] usb 2-1: SerialNumber: syz
[  965.526916][ T6305] usb 2-1: USB disconnect, device number 38
[  965.986933][T16606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'.
[  966.163801][T16611] netlink: 'syz.0.2905': attribute type 1 has an invalid length.
[  966.231147][T16614] loop8: detected capacity change from 0 to 8
[  966.259364][T16614] Dev loop8: unable to read RDB block 8
[  966.263455][T16611] bond6: (slave bridge4): making interface the new active one
[  966.265061][T16614]  loop8: unable to read partition table
[  966.273940][ T5893] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  966.290478][T16611] bond6: (slave bridge4): Enslaving as an active interface with an up link
[  966.341213][T16614] loop8: partition table beyond EOD, truncated
[  966.370088][T16614] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  966.439165][ T5893] usb 4-1: Using ep0 maxpacket: 8
[  966.476001][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  966.497280][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  966.526171][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  966.566757][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  966.588703][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  966.609749][ T5893] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  966.650520][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.692449][ T5893] usb 4-1: config 0 descriptor??
[  966.861065][T13159] Bluetooth: hci4: urb ffff888020f9c400 submission failed (90)
[  967.053204][ T5923] usb 4-1: USB disconnect, device number 31
[  967.242217][T16631] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2910'.
[  967.919035][ T6856] wlan0: Trigger new scan to find an IBSS to join
[  968.493222][ T5893] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  968.649524][ T5893] usb 5-1: Using ep0 maxpacket: 16
[  968.658769][ T5893] usb 5-1: config 8 has an invalid interface number: 113 but max is 0
[  968.658795][ T5893] usb 5-1: config 8 has no interface number 0
[  968.658822][ T5893] usb 5-1: config 8 interface 113 has no altsetting 0
[  968.661992][ T5893] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0193, bcdDevice=67.68
[  968.662019][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.662039][ T5893] usb 5-1: Product: syz
[  968.662054][ T5893] usb 5-1: Manufacturer: syz
[  968.662068][ T5893] usb 5-1: SerialNumber: syz
[  968.884419][T16655] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  968.884474][T16655] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  968.895603][T16658] fuse: Bad value for 'fd'
[  970.073138][ T6305] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  970.255219][ T6305] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  970.288549][ T6305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.318836][ T6305] usb 3-1: Product: syz
[  970.344148][ T6305] usb 3-1: Manufacturer: syz
[  970.356944][ T6305] usb 3-1: SerialNumber: syz
[  970.393927][ T6305] usb 3-1: config 0 descriptor??
[  970.593997][T16671] fuse: Bad value for 'fd'
[  970.664077][T16667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  970.687826][T16667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  970.701225][ T6305] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  970.716700][ T6305] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  970.733636][ T6305] usb 3-1: USB disconnect, device number 23
[  971.287503][T16676] xt_l2tp: missing protocol rule (udp|l2tpip)
[  971.457694][ T5893] ftdi_sio 5-1:8.113: FTDI USB Serial Device converter detected
[  971.540378][ T5893] ftdi_sio ttyUSB0: unknown device type: 0x6768
[  971.565599][ T5893] usb 5-1: USB disconnect, device number 33
[  971.639761][ T5893] ftdi_sio 5-1:8.113: device disconnected
[  971.972395][T16689] loop8: detected capacity change from 0 to 8
[  972.023202][T16689] Dev loop8: unable to read RDB block 8
[  972.064975][T16689]  loop8: unable to read partition table
[  972.206387][T16689] loop8: partition table beyond EOD, truncated
[  972.309674][T16689] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  972.664685][T16703] FAULT_INJECTION: forcing a failure.
[  972.664685][T16703] name failslab, interval 1, probability 0, space 0, times 0
[  972.718643][T16703] CPU: 0 UID: 0 PID: 16703 Comm: syz.1.2930 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  972.718666][T16703] Tainted: [L]=SOFTLOCKUP
[  972.718671][T16703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  972.718679][T16703] Call Trace:
[  972.718685][T16703]  <TASK>
[  972.718691][T16703]  dump_stack_lvl+0x189/0x250
[  972.718711][T16703]  ? __pfx____ratelimit+0x10/0x10
[  972.718733][T16703]  ? __pfx_dump_stack_lvl+0x10/0x10
[  972.718748][T16703]  ? __pfx__printk+0x10/0x10
[  972.718776][T16703]  should_fail_ex+0x414/0x560
[  972.718799][T16703]  should_failslab+0xa8/0x100
[  972.718816][T16703]  __kmalloc_cache_noprof+0x84/0x700
[  972.718829][T16703]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[  972.718848][T16703]  ? sctp_add_bind_addr+0x8c/0x370
[  972.718868][T16703]  sctp_add_bind_addr+0x8c/0x370
[  972.718895][T16703]  sctp_copy_local_addr_list+0x30b/0x4e0
[  972.718924][T16703]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  972.718948][T16703]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  972.718974][T16703]  ? sctp_v6_is_any+0x64/0x80
[  972.719000][T16703]  ? sctp_copy_one_addr+0x93/0x360
[  972.719027][T16703]  sctp_bind_addr_copy+0xb3/0x3c0
[  972.719053][T16703]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  972.719079][T16703]  sctp_connect_new_asoc+0x2e0/0x690
[  972.719100][T16703]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  972.719119][T16703]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  972.719137][T16703]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  972.719154][T16703]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  972.719170][T16703]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  972.719189][T16703]  ? security_sctp_bind_connect+0x7e/0x2e0
[  972.719209][T16703]  sctp_sendmsg+0x155c/0x2840
[  972.719237][T16703]  ? __pfx_sctp_sendmsg+0x10/0x10
[  972.719253][T16703]  ? aa_sk_perm+0x15f/0x920
[  972.719276][T16703]  ? aa_sk_perm+0x7ee/0x920
[  972.719301][T16703]  ? __pfx_aa_sk_perm+0x10/0x10
[  972.719326][T16703]  ? sock_rps_record_flow+0x19/0x410
[  972.719353][T16703]  ? inet_sendmsg+0x2f4/0x370
[  972.719374][T16703]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  972.719395][T16703]  __sock_sendmsg+0x19c/0x270
[  972.719425][T16703]  ____sys_sendmsg+0x505/0x820
[  972.719452][T16703]  ? __pfx_____sys_sendmsg+0x10/0x10
[  972.719483][T16703]  ? import_iovec+0x74/0xa0
[  972.719508][T16703]  ___sys_sendmsg+0x21f/0x2a0
[  972.719532][T16703]  ? __pfx____sys_sendmsg+0x10/0x10
[  972.719561][T16703]  ? rcu_read_lock_any_held+0xb3/0x120
[  972.719610][T16703]  ? __fget_files+0x2a/0x420
[  972.719639][T16703]  ? __fget_files+0x3a0/0x420
[  972.719671][T16703]  __x64_sys_sendmsg+0x19b/0x260
[  972.719694][T16703]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  972.719725][T16703]  ? __pfx_ksys_write+0x10/0x10
[  972.719747][T16703]  ? do_syscall_64+0xbe/0xf80
[  972.719770][T16703]  do_syscall_64+0xfa/0xf80
[  972.719790][T16703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  972.719808][T16703]  ? clear_bhb_loop+0x60/0xb0
[  972.719829][T16703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  972.719846][T16703] RIP: 0033:0x7fba0ef8f749
[  972.719862][T16703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  972.719878][T16703] RSP: 002b:00007fba0d1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  972.719897][T16703] RAX: ffffffffffffffda RBX: 00007fba0f1e5fa0 RCX: 00007fba0ef8f749
[  972.719911][T16703] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000003
[  972.719922][T16703] RBP: 00007fba0d1f6090 R08: 0000000000000000 R09: 0000000000000000
[  972.719933][T16703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  972.719944][T16703] R13: 00007fba0f1e6038 R14: 00007fba0f1e5fa0 R15: 00007fba0f30fa28
[  972.719974][T16703]  </TASK>
[  972.879143][ T3587] wlan0: Trigger new scan to find an IBSS to join
[  974.335489][ T3859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  974.850421][T16733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2941'.
[  974.900754][T16737] loop8: detected capacity change from 0 to 8
[  974.921732][ T6958] Dev loop8: unable to read RDB block 8
[  974.931879][ T6958]  loop8: unable to read partition table
[  974.937895][ T6958] loop8: partition table beyond EOD, truncated
[  974.945410][T16737] Dev loop8: unable to read RDB block 8
[  974.971034][T16737]  loop8: unable to read partition table
[  974.978007][T16737] loop8: partition table beyond EOD, truncated
[  975.028174][T16737] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  975.058722][T16741] FAULT_INJECTION: forcing a failure.
[  975.058722][T16741] name failslab, interval 1, probability 0, space 0, times 0
[  975.158631][T16741] CPU: 1 UID: 0 PID: 16741 Comm: syz.2.2944 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  975.158661][T16741] Tainted: [L]=SOFTLOCKUP
[  975.158669][T16741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  975.158680][T16741] Call Trace:
[  975.158688][T16741]  <TASK>
[  975.158696][T16741]  dump_stack_lvl+0x189/0x250
[  975.158723][T16741]  ? __pfx____ratelimit+0x10/0x10
[  975.158752][T16741]  ? __pfx_dump_stack_lvl+0x10/0x10
[  975.158774][T16741]  ? __pfx__printk+0x10/0x10
[  975.158813][T16741]  should_fail_ex+0x414/0x560
[  975.158845][T16741]  should_failslab+0xa8/0x100
[  975.158868][T16741]  __kmalloc_cache_noprof+0x84/0x700
[  975.158892][T16741]  ? sctp_add_bind_addr+0x8c/0x370
[  975.158921][T16741]  sctp_add_bind_addr+0x8c/0x370
[  975.158948][T16741]  sctp_copy_local_addr_list+0x30b/0x4e0
[  975.158975][T16741]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  975.158999][T16741]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  975.159025][T16741]  ? sctp_v6_is_any+0x64/0x80
[  975.159051][T16741]  ? sctp_copy_one_addr+0x93/0x360
[  975.159078][T16741]  sctp_bind_addr_copy+0xb3/0x3c0
[  975.159103][T16741]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  975.159128][T16741]  sctp_connect_new_asoc+0x2e0/0x690
[  975.159148][T16741]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  975.159167][T16741]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  975.159185][T16741]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  975.159201][T16741]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  975.159219][T16741]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  975.159237][T16741]  ? security_sctp_bind_connect+0x7e/0x2e0
[  975.159257][T16741]  sctp_sendmsg+0x155c/0x2840
[  975.159285][T16741]  ? __pfx_sctp_sendmsg+0x10/0x10
[  975.159300][T16741]  ? aa_sk_perm+0x15f/0x920
[  975.159321][T16741]  ? aa_sk_perm+0x7ee/0x920
[  975.159345][T16741]  ? __pfx_aa_sk_perm+0x10/0x10
[  975.159369][T16741]  ? sock_rps_record_flow+0x19/0x410
[  975.159396][T16741]  ? inet_sendmsg+0x2f4/0x370
[  975.159418][T16741]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  975.159438][T16741]  __sock_sendmsg+0x19c/0x270
[  975.159475][T16741]  ____sys_sendmsg+0x505/0x820
[  975.159503][T16741]  ? __pfx_____sys_sendmsg+0x10/0x10
[  975.159534][T16741]  ? import_iovec+0x74/0xa0
[  975.159560][T16741]  ___sys_sendmsg+0x21f/0x2a0
[  975.159582][T16741]  ? __pfx____sys_sendmsg+0x10/0x10
[  975.159609][T16741]  ? rcu_read_lock_any_held+0xb3/0x120
[  975.159658][T16741]  ? __fget_files+0x2a/0x420
[  975.159681][T16741]  ? __fget_files+0x3a0/0x420
[  975.159713][T16741]  __x64_sys_sendmsg+0x19b/0x260
[  975.159737][T16741]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  975.159768][T16741]  ? __pfx_ksys_write+0x10/0x10
[  975.159790][T16741]  ? do_syscall_64+0xbe/0xf80
[  975.159813][T16741]  do_syscall_64+0xfa/0xf80
[  975.159832][T16741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.159850][T16741]  ? clear_bhb_loop+0x60/0xb0
[  975.159871][T16741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.159887][T16741] RIP: 0033:0x7f422158f749
[  975.159903][T16741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  975.159919][T16741] RSP: 002b:00007f4222429038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  975.159939][T16741] RAX: ffffffffffffffda RBX: 00007f42217e5fa0 RCX: 00007f422158f749
[  975.159953][T16741] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000003
[  975.159965][T16741] RBP: 00007f4222429090 R08: 0000000000000000 R09: 0000000000000000
[  975.159976][T16741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  975.159987][T16741] R13: 00007f42217e6038 R14: 00007f42217e5fa0 R15: 00007f422190fa28
[  975.160017][T16741]  </TASK>
[  975.563662][T16744] loop8: detected capacity change from 0 to 8
[  975.576271][ T6958] Dev loop8: unable to read RDB block 8
[  975.582626][ T6958]  loop8: unable to read partition table
[  975.588422][ T6958] loop8: partition table beyond EOD, truncated
[  975.651703][T16744] Dev loop8: unable to read RDB block 8
[  975.658489][T16746] syzkaller1: entered promiscuous mode
[  975.664051][T16746] syzkaller1: entered allmulticast mode
[  975.687889][T16744]  loop8: unable to read partition table
[  975.689309][T16746] Dead loop on virtual device ip6_vti0, fix it urgently!
[  975.733343][T16744] loop8: partition table beyond EOD, truncated
[  975.741169][T16748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2948'.
[  975.755437][T16744] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  975.941632][T16755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2950'.
[  976.045064][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'.
[  976.087513][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'.
[  976.678827][T16775] loop8: detected capacity change from 0 to 8
[  976.686888][ T6958]  loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12
[  976.695493][ T6958] loop8: p1 start 1701603686 is beyond EOD, truncated
[  976.702651][ T6958] loop8: p2 start 3872895774 is beyond EOD, truncated
[  976.709829][ T6958] loop8: p3 start 2561007017 is beyond EOD, truncated
[  976.717296][ T6958] loop8: p4 start 2432665254 is beyond EOD, truncated
[  976.726866][ T6958] loop8: p5 start 3922843517 is beyond EOD, truncated
[  976.741570][ T6958] loop8: p6 start 1499266338 is beyond EOD, truncated
[  976.748538][ T6958] loop8: p7 start 3132875511 is beyond EOD, truncated
[  976.756047][ T6958] loop8: p8 start 4293599519 is beyond EOD, truncated
[  976.763458][ T6958] loop8: p9 start 1953740414 is beyond EOD, truncated
[  976.774455][ T6958] loop8: p10 start 1771393324 is beyond EOD, truncated
[  976.781774][ T6958] loop8: p11 start 2100272536 is beyond EOD, truncated
[  976.788862][ T6958] loop8: p12 start 3258933002 is beyond EOD, truncated
[  976.810439][T16775]  loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12
[  976.844135][T16775] loop8: p1 start 1701603686 is beyond EOD, truncated
[  976.864375][T16775] loop8: p2 start 3872895774 is beyond EOD, truncated
[  976.883057][T16775] loop8: p3 start 2561007017 is beyond EOD, truncated
[  976.900428][T16775] loop8: p4 start 2432665254 is beyond EOD, truncated
[  976.907374][T16775] loop8: p5 start 3922843517 is beyond EOD, truncated
[  976.928063][T16775] loop8: p6 start 1499266338 is beyond EOD, truncated
[  976.936155][T16775] loop8: p7 start 3132875511 is beyond EOD, truncated
[  976.943622][T16775] loop8: p8 start 4293599519 is beyond EOD, truncated
[  976.958970][T16775] loop8: p9 start 1953740414 is beyond EOD, truncated
[  976.976095][T16775] loop8: p10 start 1771393324 is beyond EOD, truncated
[  977.016583][T16775] loop8: p11 start 2100272536 is beyond EOD, truncated
[  977.041497][T16775] loop8: p12 start 3258933002 is beyond EOD, truncated
[  977.301907][T16785] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  977.354970][T16789] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2961'.
[  977.609698][T12214] usb 2-1: new low-speed USB device number 39 using dummy_hcd
[  977.772984][T12214] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  977.781288][T12214] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  977.793450][T12214] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  977.805734][T12214] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  977.830223][T12214] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  977.857853][T12214] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  977.869784][T16798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  977.877452][T16798] IPv6: NLM_F_CREATE should be set when creating new route
[  977.879090][T12214] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  977.884745][T16798] IPv6: NLM_F_CREATE should be set when creating new route
[  977.902631][T16798] IPv6: NLM_F_CREATE should be set when creating new route
[  978.005346][T12214] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  978.028059][T12214] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  978.078958][T12214] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  978.139187][T12214] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  978.156873][T12214] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  978.178746][T12214] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  978.201231][T12214] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  978.240022][T12214] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  978.277779][T12214] usb 2-1: string descriptor 0 read error: -22
[  978.292599][T12214] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  978.320621][T12214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.415106][T12214] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  978.750256][T16792] program syz.1.2962 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  979.340656][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  979.352780][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  979.360885][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  979.369761][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  979.378615][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  979.394886][T13159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  979.403744][T13159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  979.413513][T13159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  979.422943][T13159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  979.431194][T13159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  979.577554][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'.
[  980.014467][T16834] FAULT_INJECTION: forcing a failure.
[  980.014467][T16834] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  980.063397][T16834] CPU: 1 UID: 0 PID: 16834 Comm: syz.3.2979 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  980.063426][T16834] Tainted: [L]=SOFTLOCKUP
[  980.063434][T16834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  980.063446][T16834] Call Trace:
[  980.063453][T16834]  <TASK>
[  980.063462][T16834]  dump_stack_lvl+0x189/0x250
[  980.063489][T16834]  ? __pfx____ratelimit+0x10/0x10
[  980.063519][T16834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  980.063540][T16834]  ? __pfx__printk+0x10/0x10
[  980.063567][T16834]  ? __might_fault+0xb0/0x130
[  980.063604][T16834]  should_fail_ex+0x414/0x560
[  980.063636][T16834]  _copy_from_user+0x2d/0xb0
[  980.063658][T16834]  __sys_bpf+0x1e3/0x860
[  980.063687][T16834]  ? __pfx___sys_bpf+0x10/0x10
[  980.063726][T16834]  ? ksys_write+0x22a/0x250
[  980.063746][T16834]  ? __pfx_ksys_write+0x10/0x10
[  980.063770][T16834]  __x64_sys_bpf+0x7c/0x90
[  980.063793][T16834]  do_syscall_64+0xfa/0xf80
[  980.063812][T16834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  980.063837][T16834]  ? clear_bhb_loop+0x60/0xb0
[  980.063860][T16834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  980.063878][T16834] RIP: 0033:0x7f1d63d8f749
[  980.063894][T16834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  980.063910][T16834] RSP: 002b:00007f1d64c2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  980.063931][T16834] RAX: ffffffffffffffda RBX: 00007f1d63fe5fa0 RCX: 00007f1d63d8f749
[  980.063945][T16834] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000009
[  980.063957][T16834] RBP: 00007f1d64c2b090 R08: 0000000000000000 R09: 0000000000000000
[  980.063969][T16834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  980.063983][T16834] R13: 00007f1d63fe6038 R14: 00007f1d63fe5fa0 R15: 00007f1d6410fa28
[  980.064013][T16834]  </TASK>
[  980.309896][T16833] delete_channel: no stack
[  980.546275][T16838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2980'.
[  980.582781][T16822] chnl_net:caif_netlink_parms(): no params data found
[  980.801627][T16822] bridge0: port 1(bridge_slave_0) entered blocking state
[  980.809533][T16822] bridge0: port 1(bridge_slave_0) entered disabled state
[  980.817151][T16822] bridge_slave_0: entered allmulticast mode
[  980.841580][ T5893] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  980.853283][T16822] bridge_slave_0: entered promiscuous mode
[  980.861780][T16822] bridge0: port 2(bridge_slave_1) entered blocking state
[  980.873865][T16822] bridge0: port 2(bridge_slave_1) entered disabled state
[  980.882027][ T6305] usb 2-1: USB disconnect, device number 39
[  980.930090][T16822] bridge_slave_1: entered allmulticast mode
[  980.941734][T16822] bridge_slave_1: entered promiscuous mode
[  980.979791][ T5893] usb 4-1: device descriptor read/64, error -71
[  980.987126][T16849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  981.025061][T16822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  981.079267][T16822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  981.145256][T16822] team0: Port device team_slave_0 added
[  981.154672][T16822] team0: Port device team_slave_1 added
[  981.219622][ T5893] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  981.404447][T16822] batman_adv: batadv0: Adding interface: batadv_slave_0
[  981.409755][ T5893] usb 4-1: device descriptor read/64, error -71
[  981.417745][T16822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  981.467875][T16822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  981.517026][T16822] batman_adv: batadv0: Adding interface: batadv_slave_1
[  981.520297][ T5893] usb usb4-port1: attempt power cycle
[  981.524452][ T5151] Bluetooth: hci4: command tx timeout
[  981.545018][T16822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  981.582470][T16822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  981.664875][   T75] bridge_slave_1: left allmulticast mode
[  981.670895][   T75] bridge_slave_1: left promiscuous mode
[  981.676927][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  981.687466][   T75] bridge_slave_0: left allmulticast mode
[  981.693346][   T75] bridge_slave_0: left promiscuous mode
[  981.699751][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  981.721971][T16856] loop8: detected capacity change from 0 to 8
[  981.729738][T16856]  loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12
[  981.744123][   T75] tipc: Resetting bearer <eth:syzkaller0>
[  981.753032][T16856] loop8: p1 start 1701603686 is beyond EOD, truncated
[  981.782398][T16856] loop8: p2 start 3872895774 is beyond EOD, truncated
[  981.807108][T16856] loop8: p3 start 2561007017 is beyond EOD, truncated
[  981.841018][T16856] loop8: p4 start 2432665254 is beyond EOD, truncated
[  981.867961][T16856] loop8: p5 start 3922843517 is beyond EOD, truncated
[  981.889473][ T5893] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  981.910275][T16856] loop8: p6 start 1499266338 is beyond EOD, truncated
[  981.928633][ T5893] usb 4-1: device descriptor read/8, error -71
[  981.946581][T16856] loop8: p7 start 3132875511 is beyond EOD, truncated
[  981.973273][T16856] loop8: p8 start 4293599519 is beyond EOD, truncated
[  982.000435][T16856] loop8: p9 start 1953740414 is beyond EOD, truncated
[  982.027708][T16856] loop8: p10 start 1771393324 is beyond EOD, truncated
[  982.062986][T16856] loop8: p11 start 2100272536 is beyond EOD, truncated
[  982.099606][T16856] loop8: p12 start 3258933002 is beyond EOD, truncated
[  982.199574][ T5893] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  982.220656][ T5893] usb 4-1: device descriptor read/8, error -71
[  982.303308][   T75] tipc: Disabling bearer <eth:syzkaller0>
[  982.339783][ T5893] usb usb4-port1: unable to enumerate USB device
[  982.655205][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  982.665761][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  982.675446][   T75] bond0 (unregistering): Released all slaves
[  982.853524][   T75] bond1 (unregistering): Released all slaves
[  982.947654][T16822] hsr_slave_0: entered promiscuous mode
[  983.001885][T16822] hsr_slave_1: entered promiscuous mode
[  983.020122][T16822] debugfs: 'hsr0' already exists in 'hsr'
[  983.027213][T16822] Cannot create hsr debugfs directory
[  983.106876][   T75] : left promiscuous mode
[  983.385161][   T75] tipc: Left network mode
[  983.419515][ T5893] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  983.603838][ T5893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  983.610173][ T5151] Bluetooth: hci4: command tx timeout
[  983.622430][ T5893] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  983.635415][ T5893] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  983.754082][ T5893] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  983.778440][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.803798][T16877] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  983.957701][ T5893] hub 3-1:1.0: bad descriptor, ignoring hub
[  983.977158][ T5893] hub 3-1:1.0: probe with driver hub failed with error -5
[  984.005962][ T5893] cdc_wdm 3-1:1.0: skipping garbage
[  984.012028][  T795] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  984.049415][ T5893] cdc_wdm 3-1:1.0: skipping garbage
[  984.063430][ T5893] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  984.077366][    C0] wdm_int_callback: 25 callbacks suppressed
[  984.077391][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  984.095788][    C0] wdm_int_callback: 25 callbacks suppressed
[  984.095806][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  984.108892][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  984.115518][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  984.122697][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  984.129318][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  984.139629][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  984.146223][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  984.156898][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  984.163521][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  984.171124][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  984.177759][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  984.184784][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  984.191387][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  984.198248][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  984.204841][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  984.211627][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  984.218213][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  984.224563][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  984.231152][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  984.238438][ T5893] cdc_wdm 3-1:1.0: Unknown control protocol
[  984.252221][  T795] usb 4-1: config 5 has an invalid interface number: 123 but max is 0
[  984.261654][  T795] usb 4-1: config 5 has no interface number 0
[  984.277692][  T795] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  984.310480][  T795] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  984.379704][  T795] usb 4-1: config 5 interface 123 has no altsetting 0
[  984.414763][  T795] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  984.436399][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  984.459383][  T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.473547][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  984.497792][  T795] usb 4-1: Product: syz
[  984.504884][ T5893] usb 3-1: USB disconnect, device number 24
[  984.519649][  T795] usb 4-1: Manufacturer: syz
[  984.524636][  T795] usb 4-1: SerialNumber: syz
[  984.605998][   T75] pimreg3 (unregistering): left allmulticast mode
[  984.720804][   T75] pim6reg (unregistering): left allmulticast mode
[  984.828980][T12214] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  984.991585][T12214] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  985.002583][T12214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  985.014362][   T75] team0 (unregistering): Port device batadv3 removed
[  985.029057][T12214] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  985.070786][T12214] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  985.099534][T12214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.140509][T16875] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  985.179281][T12214] hub 3-1:1.0: bad descriptor, ignoring hub
[  985.213012][T12214] hub 3-1:1.0: probe with driver hub failed with error -5
[  985.226579][   T75] team0 (unregistering): Port device batadv2 removed
[  985.234315][T12214] cdc_wdm 3-1:1.0: skipping garbage
[  985.239793][T12214] cdc_wdm 3-1:1.0: skipping garbage
[  985.263663][T12214] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  985.273969][   T75] pimreg (unregistering): left allmulticast mode
[  985.679550][ T5151] Bluetooth: hci4: command tx timeout
[  986.291671][   T75] team0 (unregistering): Port device team_slave_1 removed
[  986.356399][   T75] team0 (unregistering): Port device team_slave_0 removed
[  987.274087][T16920] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2998'.
[  987.490146][T12214] usb 3-1: USB disconnect, device number 25
[  987.722341][  T795] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device.
[  987.745454][  T795] usb 4-1: USB disconnect, device number 36
[  987.849249][ T5151] Bluetooth: hci4: command tx timeout
[  988.029136][T16933] veth1_to_bond: entered allmulticast mode
[  988.071003][   T30] audit: type=1326 audit(1765989092.830:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[  988.234430][   T30] audit: type=1326 audit(1765989092.830:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[  988.337340][   T30] audit: type=1326 audit(1765989092.830:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[  988.427539][   T30] audit: type=1326 audit(1765989092.830:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[  988.635663][   T75] IPVS: stop unused estimator thread 0...
[  988.644914][T16822] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  988.688134][T16822] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  988.765624][T16822] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  988.794076][T16822] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  989.087715][T16822] 8021q: adding VLAN 0 to HW filter on device bond0
[  989.155083][T16822] 8021q: adding VLAN 0 to HW filter on device team0
[  989.196107][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  989.203305][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  989.291873][ T6801] bridge0: port 2(bridge_slave_1) entered blocking state
[  989.299064][ T6801] bridge0: port 2(bridge_slave_1) entered forwarding state
[  989.625539][T16822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  989.743699][T16822] veth0_vlan: entered promiscuous mode
[  989.773291][T16822] veth1_vlan: entered promiscuous mode
[  990.144059][T16822] veth0_macvtap: entered promiscuous mode
[  990.215134][T16822] veth1_macvtap: entered promiscuous mode
[  990.332514][T16960] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  990.521260][T16960] bond7 (unregistering): Released all slaves
[  990.664683][T16822] batman_adv: batadv0: Interface activated: batadv_slave_0
[  990.723061][T16822] batman_adv: batadv0: Interface activated: batadv_slave_1
[  990.842844][ T1140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  990.866957][ T1140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  990.903068][ T1140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  990.972346][ T1140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  991.381783][T16932] veth1_to_bond: left allmulticast mode
[  991.458221][T10717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  991.487943][T10717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  991.691373][T10717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  991.877970][T10717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  992.399686][T12214] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  992.569091][T12214] usb 5-1: Using ep0 maxpacket: 32
[  992.576372][T12214] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  992.586029][T12214] usb 5-1: config 0 has no interface number 0
[  992.602984][T12214] usb 5-1: config 0 interface 12 has no altsetting 0
[  992.641894][T12214] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  992.682303][T12214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  992.728768][T12214] usb 5-1: Product: syz
[  992.751710][T12214] usb 5-1: Manufacturer: syz
[  992.786509][T12214] usb 5-1: SerialNumber: syz
[  992.816935][T12214] usb 5-1: config 0 descriptor??
[  993.107283][T12214] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  993.135320][T12214] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  993.193978][T12214] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  993.231298][T12214] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  993.287009][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'.
[  993.297093][T12214] usb 5-1: USB disconnect, device number 34
[  993.401065][T17024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'.
[  993.542380][T13159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  993.554641][T13159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  993.563263][T13159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  993.573614][T13159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  993.584366][T13159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  993.819259][T12214] usb 5-1: new low-speed USB device number 35 using dummy_hcd
[  993.985976][T12214] usb 5-1: device descriptor read/64, error -71
[  994.240366][T12214] usb 5-1: new low-speed USB device number 36 using dummy_hcd
[  994.379174][T12214] usb 5-1: device descriptor read/64, error -71
[  994.499744][T12214] usb usb5-port1: attempt power cycle
[  994.859004][T12214] usb 5-1: new low-speed USB device number 37 using dummy_hcd
[  994.889706][T12214] usb 5-1: device descriptor read/8, error -71
[  995.158990][T12214] usb 5-1: new low-speed USB device number 38 using dummy_hcd
[  995.209793][T12214] usb 5-1: device descriptor read/8, error -71
[  995.319628][T12214] usb usb5-port1: unable to enumerate USB device
[  995.515157][ T3859] bond4 (unregistering): (slave gretap1): Releasing active interface
[  995.630850][ T3859] dvmrp1 (unregistering): left allmulticast mode
[  995.691168][ T5151] Bluetooth: hci1: command tx timeout
[  995.935345][ T3859] bond4 (unregistering): (slave bridge2): Releasing active interface
[  996.148805][ T3859] bond6 (unregistering): (slave bridge4): Releasing active interface
[  996.435730][ T3859] bond0 (unregistering): Released all slaves
[  996.475400][ T3859] bond1 (unregistering): Released all slaves
[  996.531498][ T3859] bond2 (unregistering): Released all slaves
[  996.610879][T17084] FAULT_INJECTION: forcing a failure.
[  996.610879][T17084] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  996.650723][T17084] CPU: 0 UID: 0 PID: 17084 Comm: syz.4.3023 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  996.650746][T17084] Tainted: [L]=SOFTLOCKUP
[  996.650750][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  996.650759][T17084] Call Trace:
[  996.650765][T17084]  <TASK>
[  996.650772][T17084]  dump_stack_lvl+0x189/0x250
[  996.650791][T17084]  ? __pfx____ratelimit+0x10/0x10
[  996.650817][T17084]  ? __pfx_dump_stack_lvl+0x10/0x10
[  996.650833][T17084]  ? __pfx__printk+0x10/0x10
[  996.650853][T17084]  ? __might_fault+0xb0/0x130
[  996.650879][T17084]  should_fail_ex+0x414/0x560
[  996.650902][T17084]  _copy_from_iter+0x4ff/0x1630
[  996.650924][T17084]  ? __pfx__copy_from_iter+0x10/0x10
[  996.650938][T17084]  ? rcu_is_watching+0x15/0xb0
[  996.650954][T17084]  ? file_tty_write+0x328/0xa20
[  996.650973][T17084]  ? rcu_is_watching+0x15/0xb0
[  996.650988][T17084]  ? file_tty_write+0x328/0xa20
[  996.651005][T17084]  ? kfree+0x4d/0x660
[  996.651026][T17084]  file_tty_write+0x4c1/0xa20
[  996.651050][T17084]  do_iter_readv_writev+0x623/0x8c0
[  996.651069][T17084]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  996.651082][T17084]  ? common_file_perm+0x1b5/0x220
[  996.651101][T17084]  ? bpf_lsm_file_permission+0x9/0x20
[  996.651114][T17084]  ? security_file_permission+0x75/0x290
[  996.651128][T17084]  ? rw_verify_area+0x255/0x4d0
[  996.651142][T17084]  vfs_writev+0x31a/0x960
[  996.651158][T17084]  ? vfs_write+0x956/0xb30
[  996.651174][T17084]  ? __pfx_vfs_writev+0x10/0x10
[  996.651199][T17084]  ? __fget_files+0x2a/0x420
[  996.651218][T17084]  ? __fget_files+0x3a0/0x420
[  996.651233][T17084]  ? __fget_files+0x2a/0x420
[  996.651254][T17084]  do_writev+0x14d/0x2d0
[  996.651272][T17084]  ? __pfx_do_writev+0x10/0x10
[  996.651290][T17084]  ? do_syscall_64+0xbe/0xf80
[  996.651305][T17084]  do_syscall_64+0xfa/0xf80
[  996.651319][T17084]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  996.651331][T17084]  ? clear_bhb_loop+0x60/0xb0
[  996.651347][T17084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  996.651360][T17084] RIP: 0033:0x7fc4ba78f749
[  996.651372][T17084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  996.651383][T17084] RSP: 002b:00007fc4bb622038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  996.651397][T17084] RAX: ffffffffffffffda RBX: 00007fc4ba9e5fa0 RCX: 00007fc4ba78f749
[  996.651407][T17084] RDX: 0000000000000003 RSI: 0000200000001300 RDI: 0000000000000003
[  996.651416][T17084] RBP: 00007fc4bb622090 R08: 0000000000000000 R09: 0000000000000000
[  996.651423][T17084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  996.651431][T17084] R13: 00007fc4ba9e6038 R14: 00007fc4ba9e5fa0 R15: 00007fc4bab0fa28
[  996.651452][T17084]  </TASK>
[  997.200367][ T3859] bond3 (unregistering): Released all slaves
[  997.232641][ T3859] bond4 (unregistering): Released all slaves
[  997.759072][ T5151] Bluetooth: hci1: command tx timeout
[  997.803589][ T3859] bond5 (unregistering): Released all slaves
[  997.821626][ T3859] bond6 (unregistering): Released all slaves
[  998.150839][ T3859] tipc: Left network mode
[  998.174178][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  998.180700][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  998.294803][T17031] chnl_net:caif_netlink_parms(): no params data found
[  998.441436][T17122] loop6: detected capacity change from 0 to 7
[  998.448622][T17122]  loop6:
[  998.453113][T17122] loop6: partition table partially beyond EOD, truncated
[  998.820330][T17031] bridge0: port 1(bridge_slave_0) entered blocking state
[  998.860438][T17031] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.880108][T17031] bridge_slave_0: entered allmulticast mode
[  998.889377][ T5893] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  998.910525][T17031] bridge_slave_0: entered promiscuous mode
[  998.935567][T17031] bridge0: port 2(bridge_slave_1) entered blocking state
[  998.967768][T17031] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.981005][T17031] bridge_slave_1: entered allmulticast mode
[  998.988155][T17031] bridge_slave_1: entered promiscuous mode
[  999.071961][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  999.088522][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  999.137475][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  999.172689][ T5893] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  999.188040][T17031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  999.206569][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  999.244082][ T5893] usb 2-1: config 0 descriptor??
[  999.264051][ T5893] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  999.264136][T17031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  999.463858][T17131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  999.481047][T17131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  999.841383][ T5151] Bluetooth: hci1: command tx timeout
[  999.867264][T17153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  999.883202][T17154] FAULT_INJECTION: forcing a failure.
[  999.883202][T17154] name failslab, interval 1, probability 0, space 0, times 0
[  999.890882][T17153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  999.907492][T17154] CPU: 1 UID: 0 PID: 17154 Comm: syz.4.3037 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  999.907520][T17154] Tainted: [L]=SOFTLOCKUP
[  999.907528][T17154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  999.907539][T17154] Call Trace:
[  999.907547][T17154]  <TASK>
[  999.907555][T17154]  dump_stack_lvl+0x189/0x250
[  999.907582][T17154]  ? __pfx____ratelimit+0x10/0x10
[  999.907611][T17154]  ? __pfx_dump_stack_lvl+0x10/0x10
[  999.907633][T17154]  ? __pfx__printk+0x10/0x10
[  999.907662][T17154]  ? __pfx___might_resched+0x10/0x10
[  999.907682][T17154]  ? fs_reclaim_acquire+0x7d/0x100
[  999.907707][T17154]  should_fail_ex+0x414/0x560
[  999.907738][T17154]  should_failslab+0xa8/0x100
[  999.907762][T17154]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  999.907791][T17154]  ? __alloc_skb+0x255/0x430
[  999.907809][T17154]  ? napi_skb_cache_get+0x4a5/0x780
[  999.907826][T17154]  ? napi_skb_cache_get+0x151/0x780
[  999.907848][T17154]  __alloc_skb+0x255/0x430
[  999.907869][T17154]  ? __pfx___alloc_skb+0x10/0x10
[  999.907889][T17154]  ? netlink_autobind+0xdb/0x300
[  999.907912][T17154]  ? netlink_autobind+0x2c2/0x300
[  999.907940][T17154]  netlink_sendmsg+0x5c6/0xb30
[  999.907971][T17154]  ? __pfx_netlink_sendmsg+0x10/0x10
[  999.907995][T17154]  ? aa_sock_msg_perm+0xf1/0x1b0
[  999.908020][T17154]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  999.908037][T17154]  ? __pfx_netlink_sendmsg+0x10/0x10
[  999.908060][T17154]  __sock_sendmsg+0x21c/0x270
[  999.908089][T17154]  ____sys_sendmsg+0x505/0x820
[  999.908116][T17154]  ? __pfx_____sys_sendmsg+0x10/0x10
[  999.908146][T17154]  ? import_iovec+0x74/0xa0
[  999.908172][T17154]  ___sys_sendmsg+0x21f/0x2a0
[  999.908195][T17154]  ? __pfx____sys_sendmsg+0x10/0x10
[  999.908223][T17154]  ? rcu_read_lock_any_held+0xb3/0x120
[  999.908271][T17154]  ? __fget_files+0x2a/0x420
[  999.908292][T17154]  ? __fget_files+0x3a0/0x420
[  999.908332][T17154]  __x64_sys_sendmsg+0x19b/0x260
[  999.908356][T17154]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  999.908386][T17154]  ? __pfx_ksys_write+0x10/0x10
[  999.908407][T17154]  ? do_syscall_64+0xbe/0xf80
[  999.908430][T17154]  do_syscall_64+0xfa/0xf80
[  999.908448][T17154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  999.908465][T17154]  ? clear_bhb_loop+0x60/0xb0
[  999.908482][T17154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  999.908496][T17154] RIP: 0033:0x7fc4ba78f749
[  999.908510][T17154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  999.908523][T17154] RSP: 002b:00007fc4bb601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  999.908538][T17154] RAX: ffffffffffffffda RBX: 00007fc4ba9e6090 RCX: 00007fc4ba78f749
[  999.908549][T17154] RDX: 0000000004000004 RSI: 0000200000000280 RDI: 0000000000000003
[  999.908559][T17154] RBP: 00007fc4bb601090 R08: 0000000000000000 R09: 0000000000000000
[  999.908569][T17154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  999.908578][T17154] R13: 00007fc4ba9e6128 R14: 00007fc4ba9e6090 R15: 00007fc4bab0fa28
[  999.908600][T17154]  </TASK>
[ 1000.639050][T15598] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1000.798641][T15598] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1000.818081][T15598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.846307][T15598] usb 3-1: config 0 descriptor??
[ 1001.465996][T17031] team0: Port device team_slave_0 added
[ 1001.496869][T17031] team0: Port device team_slave_1 added
[ 1001.584638][T17031] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1001.591775][T17031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1001.630241][T17031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1001.650817][T12617] usb 2-1: USB disconnect, device number 40
[ 1001.667800][T17031] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1001.678272][T17031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1001.738381][T17031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1001.922160][T17031] hsr_slave_0: entered promiscuous mode
[ 1001.930148][ T5151] Bluetooth: hci1: command tx timeout
[ 1001.938558][T17031] hsr_slave_1: entered promiscuous mode
[ 1001.948508][T17031] debugfs: 'hsr0' already exists in 'hsr'
[ 1001.959049][T17031] Cannot create hsr debugfs directory
[ 1001.997890][ T3859] IPVS: stop unused estimator thread 0...
[ 1002.051819][T17176] loop6: detected capacity change from 0 to 7
[ 1002.086387][T17176]  loop6:
[ 1002.097497][T17176] loop6: partition table partially beyond EOD, truncated
[ 1002.898665][ T5923] usb 3-1: USB disconnect, device number 26
[ 1003.367650][T17210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3049'.
[ 1003.910607][T17031] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1003.977775][T17031] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1004.040347][T17031] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1004.097805][T17031] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1004.375513][T17031] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1004.456531][T17031] 8021q: adding VLAN 0 to HW filter on device team0
[ 1004.496000][T10717] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1004.503195][T10717] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1004.565322][T10717] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1004.572517][T10717] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1004.849693][T17031] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1005.003076][T17031] veth0_vlan: entered promiscuous mode
[ 1005.066643][T17031] veth1_vlan: entered promiscuous mode
[ 1005.104612][T17249] loop6: detected capacity change from 0 to 7
[ 1005.140660][T17249]  loop6:
[ 1005.158533][T17249] loop6: partition table partially beyond EOD, truncated
[ 1005.183566][T17031] veth0_macvtap: entered promiscuous mode
[ 1005.209438][T17253] Invalid logical block size (33554432)
[ 1005.217017][ T5201]  loop6:
[ 1005.228203][T17031] veth1_macvtap: entered promiscuous mode
[ 1005.238047][ T5201] loop6: partition table partially beyond EOD, truncated
[ 1005.293332][T17031] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1005.370794][T17031] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1005.433658][ T5980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.472584][ T5980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.524122][ T5980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.567337][ T5980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.639710][T16986] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1005.819139][T16986] usb 3-1: Using ep0 maxpacket: 32
[ 1005.862256][T16986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1005.900369][T16986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1005.933672][T10720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1005.942854][T16986] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1005.966733][T10720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.000714][T16986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.049995][T16986] usb 3-1: config 0 descriptor??
[ 1006.080877][T16986] hub 3-1:0.0: USB hub found
[ 1006.089478][T10720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1006.117698][T10720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.263571][T16986] hub 3-1:0.0: 1 port detected
[ 1006.649213][T17288] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3012'.
[ 1007.117895][T15598] hub 3-1:0.0: activate --> -90
[ 1007.124047][T17082] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1008.171159][T15598] hub 3-1:0.0: hub_ext_port_status failed (err = -32)
[ 1008.652710][T16517] usb 3-1: USB disconnect, device number 27
[ 1008.920925][T17318] loop8: detected capacity change from 0 to 8
[ 1008.941128][ T6958]  loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12
[ 1008.969311][ T6958] loop8: p1 start 1701603686 is beyond EOD, truncated
[ 1008.987172][ T6958] loop8: p2 start 3872895774 is beyond EOD, truncated
[ 1009.020901][ T6958] loop8: p3 start 2561007017 is beyond EOD, truncated
[ 1009.048028][ T6958] loop8: p4 start 2432665254 is beyond EOD, truncated
[ 1009.062687][ T6958] loop8: p5 start 3922843517 is beyond EOD, truncated
[ 1009.073211][ T6958] loop8: p6 start 1499266338 is beyond EOD, truncated
[ 1009.099067][ T6958] loop8: p7 start 3132875511 is beyond EOD, truncated
[ 1009.106004][ T6958] loop8: p8 start 4293599519 is beyond EOD, truncated
[ 1009.127017][ T6958] loop8: p9 start 1953740414 is beyond EOD, truncated
[ 1009.146640][ T6958] loop8: p10 start 1771393324 is beyond EOD, truncated
[ 1009.167995][ T6958] loop8: p11 start 2100272536 is beyond EOD, truncated
[ 1009.194691][T13159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1009.214403][ T6958] loop8: p12 start 3258933002 is beyond EOD, truncated
[ 1009.221927][T13159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1009.231849][T13159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1009.239914][T13159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1009.247539][T13159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1009.285641][T17318]  loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12
[ 1009.297428][T17318] loop8: p1 start 1701603686 is beyond EOD, truncated
[ 1009.311754][T17318] loop8: p2 start 3872895774 is beyond EOD, truncated
[ 1009.318554][T17318] loop8: p3 start 2561007017 is beyond EOD, truncated
[ 1009.434088][T17318] loop8: p4 start 2432665254 is beyond EOD, truncated
[ 1009.455983][T17318] loop8: p5 start 3922843517 is beyond EOD, truncated
[ 1009.478995][T17318] loop8: p6 start 1499266338 is beyond EOD, truncated
[ 1009.506003][T17318] loop8: p7 start 3132875511 is beyond EOD, truncated
[ 1009.553800][T17318] loop8: p8 start 4293599519 is beyond EOD, truncated
[ 1009.570864][T17318] loop8: p9 start 1953740414 is beyond EOD, truncated
[ 1009.628342][T17318] loop8: p10 start 1771393324 is beyond EOD, truncated
[ 1009.663114][T17318] loop8: p11 start 2100272536 is beyond EOD, truncated
[ 1009.711436][T17318] loop8: p12 start 3258933002 is beyond EOD, truncated
[ 1010.177171][T17334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1010.316929][ T3744] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1010.363248][T17323] chnl_net:caif_netlink_parms(): no params data found
[ 1010.448568][ T3744] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1010.586855][ T3744] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1011.009343][T17323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1011.029224][T17323] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1011.048159][T17323] bridge_slave_0: entered allmulticast mode
[ 1011.103480][T17323] bridge_slave_0: entered promiscuous mode
[ 1011.144471][ T3744] team0: Port device  removed
[ 1011.157109][ T3744] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1011.220068][T17323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1011.289187][T17323] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1011.296505][T17323] bridge_slave_1: entered allmulticast mode
[ 1011.401811][T17323] bridge_slave_1: entered promiscuous mode
[ 1011.435519][ T5151] Bluetooth: hci0: command tx timeout
[ 1011.445478][T17323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1011.469037][T12617] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1011.478056][T17323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1011.649962][T12617] usb 2-1: Using ep0 maxpacket: 8
[ 1011.657200][T12617] usb 2-1: config 0 has an invalid interface number: 130 but max is 0
[ 1011.672842][T12617] usb 2-1: config 0 has no interface number 0
[ 1011.674331][T17323] team0: Port device team_slave_0 added
[ 1011.705373][T12617] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56
[ 1011.714517][T12617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.729076][T12617] usb 2-1: Product: syz
[ 1011.734743][T12617] usb 2-1: Manufacturer: syz
[ 1011.744221][T12617] usb 2-1: SerialNumber: syz
[ 1011.766944][T12617] usb 2-1: config 0 descriptor??
[ 1011.783835][T12617] as10x_usb: device has been detected
[ 1011.790503][T12617] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[ 1011.818138][T17323] team0: Port device team_slave_1 added
[ 1011.827297][T12617] usb 2-1: DVB: registering adapter 4 frontend 0 (PCTV Systems picoStick (74e))...
[ 1011.892153][T12617] as10x_usb: error during firmware upload part1
[ 1011.916759][T12617] Registered device PCTV Systems picoStick (74e)
[ 1011.971295][T17323] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1012.007871][T17354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1012.017277][T17357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1012.036903][T17354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1012.049345][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1012.076424][T17357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1012.098220][T17323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1012.150277][T17323] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1012.159138][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1012.190689][T17323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1012.203306][ T3744] bridge_slave_1: left allmulticast mode
[ 1012.213410][ T3744] bridge_slave_1: left promiscuous mode
[ 1012.219512][ T3744] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1012.240564][ T3744] bridge_slave_0: left allmulticast mode
[ 1012.247596][ T3744] bridge_slave_0: left promiscuous mode
[ 1012.262874][ T3744] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1012.439132][T12617] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1012.602452][T12617] usb 5-1: Using ep0 maxpacket: 16
[ 1012.620108][T12617] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[ 1012.639078][T12617] usb 5-1: config 0 has no interface number 0
[ 1012.643486][ T5893] usb 2-1: USB disconnect, device number 41
[ 1012.649594][T12617] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1012.689881][ T5893] Unregistered device PCTV Systems picoStick (74e)
[ 1012.693642][ T5893] as10x_usb: device has been disconnected
[ 1012.706325][T12617] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1012.738995][T12617] usb 5-1: config 0 interface 41 has no altsetting 0
[ 1012.786210][T12617] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1012.806137][T12617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1012.817992][T12617] usb 5-1: Product: syz
[ 1012.827920][T12617] usb 5-1: Manufacturer: syz
[ 1012.838077][T12617] usb 5-1: SerialNumber: syz
[ 1012.846785][T12617] usb 5-1: config 0 descriptor??
[ 1012.853162][T17360] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1012.890723][T17360] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1013.078819][T17375] xt_CT: No such helper "snmp_trap"
[ 1013.089910][ T3744] bond0 (unregistering): (slave 
7
0
): Releasing backup interface
[ 1013.105281][T17360] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1013.112673][T17360] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1013.129847][ T3744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1013.151186][ T3744] bond0 (unregistering): Released all slaves
[ 1013.201456][ T3744] bond1 (unregistering): Released all slaves
[ 1013.220711][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3076'.
[ 1013.334535][T17360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1013.349718][T17360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1013.439456][ T3744] !: left promiscuous mode
[ 1013.482590][T17323] hsr_slave_0: entered promiscuous mode
[ 1013.517390][T17323] hsr_slave_1: entered promiscuous mode
[ 1013.527551][ T5151] Bluetooth: hci0: command tx timeout
[ 1013.546499][T17323] debugfs: 'hsr0' already exists in 'hsr'
[ 1013.560521][T12617] Error reading MAC address
[ 1013.565159][T17323] Cannot create hsr debugfs directory
[ 1013.571801][T12617] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71
[ 1013.590577][ T3744] tipc: Disabling bearer <udp:syz2>
[ 1013.593426][   T30] audit: type=1326 audit(1765989118.350:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.3.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[ 1013.622234][T12617] usb 5-1: USB disconnect, device number 39
[ 1013.718019][   T30] audit: type=1326 audit(1765989118.370:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.3.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[ 1013.744926][T17383] loop7: detected capacity change from 0 to 7
[ 1013.761484][T17383] Dev loop7: unable to read RDB block 7
[ 1013.773708][T17387] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3077'.
[ 1013.787625][ T3744] tipc: Left network mode
[ 1013.792348][T17383]  loop7: unable to read partition table
[ 1013.818978][   T30] audit: type=1326 audit(1765989118.520:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.3.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[ 1013.849260][T17383] loop7: partition table beyond EOD, truncated
[ 1013.867511][   T30] audit: type=1326 audit(1765989118.520:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.3.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[ 1013.938946][T17383] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1013.957912][ T3744] IPVS: stopping master sync thread 6179 ...
[ 1013.980367][   T30] audit: type=1326 audit(1765989118.520:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.3.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[ 1014.079005][ T5893] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1014.119308][   T30] audit: type=1326 audit(1765989118.520:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.3.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[ 1014.173384][   T30] audit: type=1326 audit(1765989118.520:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.3.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[ 1014.248952][ T5893] usb 4-1: Using ep0 maxpacket: 16
[ 1014.284706][ T5893] usb 4-1: config 1 interface 0 altsetting 220 bulk endpoint 0x1 has invalid maxpacket 952
[ 1014.326427][ T5893] usb 4-1: config 1 interface 0 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1014.347836][ T5893] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1014.364999][   T30] audit: type=1326 audit(1765989118.520:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.3.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[ 1014.458063][ T5893] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1014.487836][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1014.508095][ T5893] usb 4-1: Product: syz
[ 1014.511951][   T30] audit: type=1326 audit(1765989118.520:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.3.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[ 1014.552253][T17394] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[ 1014.572723][   T30] audit: type=1326 audit(1765989118.520:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.3.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d63d8f749 code=0x7ffc0000
[ 1014.638531][ T5893] usb 4-1: Manufacturer: syz
[ 1014.651494][ T5893] usb 4-1: SerialNumber: syz
[ 1014.674951][T17388] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1014.907142][ T5893] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 220 proto 1 vid 0x0525 pid 0xA4A8
[ 1015.522491][T17323] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1015.550981][T17323] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1015.601637][T13159] Bluetooth: hci0: command tx timeout
[ 1015.618829][ T3744] hsr_slave_0: left promiscuous mode
[ 1015.628264][ T3744] hsr_slave_1: left promiscuous mode
[ 1015.852524][T17414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3082'.
[ 1016.791973][ T3744] pim6reg (unregistering): left allmulticast mode
[ 1017.635190][ T3744] team0 (unregistering): Port device team_slave_1 removed
[ 1017.679039][T13159] Bluetooth: hci0: command tx timeout
[ 1017.718670][ T3744] team0 (unregistering): Port device team_slave_0 removed
[ 1018.812983][T17323] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1018.886884][T17323] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1019.324000][ T3744] IPVS: stop unused estimator thread 0...
[ 1019.430466][T17323] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1019.484867][T17323] 8021q: adding VLAN 0 to HW filter on device team0
[ 1019.533601][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1019.540817][ T6856] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1019.582144][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1019.586143][T17459] loop6: detected capacity change from 0 to 7
[ 1019.589351][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1019.597745][ T6958]  loop6:
[ 1019.616260][ T6958] loop6: partition table partially beyond EOD, truncated
[ 1019.631276][T17459]  loop6:
[ 1019.647600][T17459] loop6: partition table partially beyond EOD, truncated
[ 1019.729796][T17323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1019.850246][T17323] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1019.955665][T17323] veth0_vlan: entered promiscuous mode
[ 1020.110129][T17323] veth1_vlan: entered promiscuous mode
[ 1020.184521][T17323] veth0_macvtap: entered promiscuous mode
[ 1020.194449][T17483] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3092'.
[ 1020.239436][T17383] usblp0:failed reading printer status (-110)
[ 1020.293275][T17467] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3091'.
[ 1020.317331][T17323] veth1_macvtap: entered promiscuous mode
[ 1020.355155][T17323] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1020.383715][T17323] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1020.392676][T16986] usb 4-1: USB disconnect, device number 37
[ 1020.406077][T16986] usblp0: removed
[ 1020.483901][T17082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.525907][T17082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.547754][T17082] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.578136][T17082] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.890500][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1020.918433][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1020.926726][T16986] usb 4-1: new low-speed USB device number 38 using dummy_hcd
[ 1021.010268][T17082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1021.019639][T17082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1021.079283][T16986] usb 4-1: Invalid ep0 maxpacket: 32
[ 1021.209074][T16986] usb 4-1: new low-speed USB device number 39 using dummy_hcd
[ 1021.388963][T16986] usb 4-1: Invalid ep0 maxpacket: 32
[ 1021.399847][T17507] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3066'.
[ 1021.459753][T16986] usb usb4-port1: attempt power cycle
[ 1021.494277][T16517] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[ 1021.637818][T17507] syz.2.3066 (17507): drop_caches: 2
[ 1021.780714][T16517] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1021.849947][T16986] usb 4-1: new low-speed USB device number 40 using dummy_hcd
[ 1021.853675][T16517] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[ 1021.949799][T16986] usb 4-1: Invalid ep0 maxpacket: 32
[ 1022.035979][T16517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[ 1022.079241][T16986] usb 4-1: new low-speed USB device number 41 using dummy_hcd
[ 1022.131639][T16986] usb 4-1: Invalid ep0 maxpacket: 32
[ 1022.159724][T16986] usb usb4-port1: unable to enumerate USB device
[ 1022.190041][T16517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[ 1022.200216][T16517] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1022.288081][T16517] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[ 1022.297710][T16517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.329013][T16517] usb 2-1: Product: syz
[ 1022.339633][T16517] usb 2-1: Manufacturer: syz
[ 1022.355065][T16517] usb 2-1: SerialNumber: syz
[ 1022.385044][T16517] usb 2-1: config 0 descriptor??
[ 1022.421659][T16517] xbox_remote_probe: endpoint_in message size==0?
[ 1022.623061][T16517] usb 2-1: USB disconnect, device number 42
[ 1023.288477][T17534] vlan2: entered promiscuous mode
[ 1023.296502][T17534] batadv0: entered promiscuous mode
[ 1023.613812][T17546] loop6: detected capacity change from 0 to 7
[ 1023.628460][T17546]  loop6:
[ 1023.632048][T17546] loop6: partition table partially beyond EOD, truncated
[ 1023.642878][ T5893] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[ 1023.819159][T16986] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1023.840890][ T5893] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[ 1023.852909][ T5893] usb 5-1: config 0 has no interface number 0
[ 1023.863248][ T5893] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1023.872931][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.883335][ T5893] usb 5-1: Product: syz
[ 1023.887547][ T5893] usb 5-1: Manufacturer: syz
[ 1023.892591][ T5893] usb 5-1: SerialNumber: syz
[ 1023.900275][ T5893] usb 5-1: config 0 descriptor??
[ 1023.954878][T17551] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1024.022233][T16986] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1024.039012][T16986] usb 2-1: config 0 has no interface number 0
[ 1024.060857][T16986] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1024.076237][T16986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1024.087548][T16986] usb 2-1: Product: syz
[ 1024.095422][T16986] usb 2-1: Manufacturer: syz
[ 1024.100120][T16986] usb 2-1: SerialNumber: syz
[ 1024.110789][T16986] usb 2-1: config 0 descriptor??
[ 1024.326616][T16986] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1024.345075][T16986] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1024.357129][T16986] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1024.367302][T16986] usb 2-1: media controller created
[ 1024.388495][T16986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1024.510623][T17536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1024.521702][T17536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1024.758290][ T5893] usb 5-1: Firmware version (0.0) predates our first public release.
[ 1024.812097][ T5893] usb 5-1: Please update to version 0.2 or newer
[ 1024.894911][ T5893] usb 5-1: USB disconnect, device number 40
[ 1025.658862][T16986] i2c i2c-4: ec100: i2c rd failed=-110 reg=33
[ 1025.779896][T16986] usb 2-1: USB disconnect, device number 43
[ 1025.869611][T17575] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3108'.
[ 1026.390826][T16517] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1026.580990][T16517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1026.614865][T16517] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[ 1026.649460][T16517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1026.703162][T16517] usb 3-1: config 0 descriptor??
[ 1027.139222][T16517] razer 0003:1532:010D.0020: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.2-1/input0
[ 1027.390220][T16517] usb 3-1: USB disconnect, device number 28
[ 1027.406689][   T30] kauditd_printk_skb: 23 callbacks suppressed
[ 1027.406703][   T30] audit: type=1326 audit(1765989132.180:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.1.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0ef8f749 code=0x7ffc0000
[ 1027.463696][   T30] audit: type=1326 audit(1765989132.210:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.1.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0ef8f749 code=0x7ffc0000
[ 1027.487330][   T30] audit: type=1326 audit(1765989132.210:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.1.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fba0ef8f749 code=0x7ffc0000
[ 1027.514395][   T30] audit: type=1326 audit(1765989132.210:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.1.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0ef8f749 code=0x7ffc0000
[ 1027.561333][   T30] audit: type=1326 audit(1765989132.220:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.1.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0ef8f749 code=0x7ffc0000
[ 1027.661735][   T30] audit: type=1326 audit(1765989132.220:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.1.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fba0ef8f749 code=0x7ffc0000
[ 1027.698565][   T30] audit: type=1326 audit(1765989132.220:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.1.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0ef8f749 code=0x7ffc0000
[ 1027.747218][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'.
[ 1027.781564][   T30] audit: type=1326 audit(1765989132.220:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.1.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0ef8f749 code=0x7ffc0000
[ 1027.839076][   T30] audit: type=1326 audit(1765989132.220:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.1.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba0ef8f749 code=0x7ffc0000
[ 1027.862429][   T30] audit: type=1326 audit(1765989132.220:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.1.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0ef8f749 code=0x7ffc0000
[ 1027.927216][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'.
[ 1028.460605][T16517] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1028.584417][T17616] batadv0: entered promiscuous mode
[ 1028.594228][T17616] batadv0: left promiscuous mode
[ 1028.619008][T16517] usb 3-1: Using ep0 maxpacket: 16
[ 1028.627164][T16517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1028.654635][T16517] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1028.665929][T16517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1028.674060][T16517] usb 3-1: Product: syz
[ 1028.678549][T16517] usb 3-1: Manufacturer: syz
[ 1028.698171][T16517] usb 3-1: SerialNumber: syz
[ 1028.766960][T16517] usb 3-1: config 0 descriptor??
[ 1028.776805][T16517] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1028.788251][T16517] em28xx 3-1:0.0: DVB interface 0 found: bulk
[ 1029.426011][T17626] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1029.599491][T17630] vlan2: entered allmulticast mode
[ 1029.630187][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3125'.
[ 1029.643470][T17630] veth0_to_bond: entered allmulticast mode
[ 1029.881500][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1029.894497][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1029.902504][T16517] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1029.910428][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1029.920251][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1029.930200][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1030.035870][T16517] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1030.045922][T16517] em28xx 3-1:0.0: board has no eeprom
[ 1030.139010][T16517] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1030.160575][T16517] em28xx 3-1:0.0: dvb set to bulk mode.
[ 1030.174254][ T5923] em28xx 3-1:0.0: Binding DVB extension
[ 1030.298814][ T5923] em28xx 3-1:0.0: Registering input extension
[ 1030.617609][T10717] ------------[ cut here ]------------
[ 1030.623674][T10717] WARNING: net/netfilter/core.c:329 at nf_hook_entry_head+0x23e/0x2c0, CPU#0: kworker/u8:25/10717
[ 1030.634629][T10717] Modules linked in:
[ 1030.638770][T10717] CPU: 0 UID: 0 PID: 10717 Comm: kworker/u8:25 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1030.650146][T10717] Tainted: [L]=SOFTLOCKUP
[ 1030.654509][T10717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1030.664660][T10717] Workqueue: netns cleanup_net
[ 1030.669532][T10717] RIP: 0010:nf_hook_entry_head+0x23e/0x2c0
[ 1030.675983][T10717] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 4d a3 a6 f8 4d 39 37 74 36 e8 03 47 40 f8 90 <0f> 0b 90 31 db 48 89 d8 5b 41 5e 41 5f 5d e9 3f 30 dd 01 cc e8 e9
[ 1030.696566][T10717] RSP: 0018:ffffc90003b2f748 EFLAGS: 00010293
[ 1030.703383][T10717] RAX: ffffffff89816b0b RBX: ffff888055a68000 RCX: ffff88802559bd00
[ 1030.711448][T10717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1030.719602][T10717] RBP: 0000000000000000 R08: ffff88802559bd00 R09: 0000000000000006
[ 1030.727643][T10717] R10: 000000000000000a R11: 0000000000000000 R12: ffff888021eaa5c0
[ 1030.735654][T10717] R13: 0000000000000005 R14: ffff888021eaa5c0 R15: ffff888055a68108
[ 1030.743650][T10717] FS:  0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000
[ 1030.752599][T10717] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1030.759207][T10717] CR2: 0000200000122030 CR3: 0000000042f0c000 CR4: 00000000003526f0
[ 1030.767185][T10717] Call Trace:
[ 1030.770512][T10717]  <TASK>
[ 1030.773438][T10717]  __nf_unregister_net_hook+0x74/0x6f0
[ 1030.779036][T10717]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[ 1030.785706][T10717]  __nft_release_hook+0x180/0x350
[ 1030.791102][T10717]  nf_tables_pre_exit_net+0xa7/0x110
[ 1030.796426][T10717]  ops_undo_list+0x187/0x990
[ 1030.801432][T10717]  ? __pfx_ops_undo_list+0x10/0x10
[ 1030.806562][T10717]  ? do_raw_spin_unlock+0x122/0x240
[ 1030.811786][T10717]  cleanup_net+0x4d8/0x7a0
[ 1030.816203][T10717]  ? __pfx_cleanup_net+0x10/0x10
[ 1030.821263][T10717]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1030.826500][T10717]  ? process_scheduled_works+0x9ef/0x1770
[ 1030.832269][T10717]  ? process_scheduled_works+0x9ef/0x1770
[ 1030.837996][T10717]  process_scheduled_works+0xad1/0x1770
[ 1030.843590][T10717]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1030.849604][T10717]  worker_thread+0x8a0/0xda0
[ 1030.854218][T10717]  kthread+0x711/0x8a0
[ 1030.858280][T10717]  ? __pfx_worker_thread+0x10/0x10
[ 1030.863445][T10717]  ? __pfx_kthread+0x10/0x10
[ 1030.868035][T10717]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1030.873265][T10717]  ? lockdep_hardirqs_on+0x98/0x140
[ 1030.878456][T10717]  ? __pfx_kthread+0x10/0x10
[ 1030.883456][T10717]  ret_from_fork+0x599/0xb30
[ 1030.888417][T10717]  ? __pfx_ret_from_fork+0x10/0x10
[ 1030.893974][T10717]  ? __switch_to_asm+0x39/0x70
[ 1030.898760][T10717]  ? __switch_to_asm+0x33/0x70
[ 1030.903561][T10717]  ? __pfx_kthread+0x10/0x10
[ 1030.908146][T10717]  ret_from_fork_asm+0x1a/0x30
[ 1030.912994][T10717]  </TASK>
[ 1030.916029][T10717] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1030.923299][T10717] CPU: 0 UID: 0 PID: 10717 Comm: kworker/u8:25 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1030.934505][T10717] Tainted: [L]=SOFTLOCKUP
[ 1030.938819][T10717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1030.948862][T10717] Workqueue: netns cleanup_net
[ 1030.953664][T10717] Call Trace:
[ 1030.956934][T10717]  <TASK>
[ 1030.959862][T10717]  dump_stack_lvl+0x99/0x250
[ 1030.964444][T10717]  ? __asan_memcpy+0x40/0x70
[ 1030.969030][T10717]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1030.974239][T10717]  ? __pfx__printk+0x10/0x10
[ 1030.978837][T10717]  vpanic+0x237/0x6d0
[ 1030.982817][T10717]  ? __pfx_vpanic+0x10/0x10
[ 1030.987316][T10717]  ? is_bpf_text_address+0x292/0x2b0
[ 1030.992619][T10717]  ? is_bpf_text_address+0x26/0x2b0
[ 1030.997831][T10717]  panic+0xb9/0xc0
[ 1031.001549][T10717]  ? __pfx_panic+0x10/0x10
[ 1031.005986][T10717]  ? ret_from_fork_asm+0x1a/0x30
[ 1031.010950][T10717]  __warn+0x317/0x4b0
[ 1031.014938][T10717]  ? nf_hook_entry_head+0x23e/0x2c0
[ 1031.020140][T10717]  ? nf_hook_entry_head+0x23e/0x2c0
[ 1031.025339][T10717]  __report_bug+0x288/0x500
[ 1031.029837][T10717]  ? nf_hook_entry_head+0x23e/0x2c0
[ 1031.035034][T10717]  ? __pfx___report_bug+0x10/0x10
[ 1031.040047][T10717]  ? nf_flow_offload_xdp_setup+0x68a/0x690
[ 1031.045852][T10717]  ? kfree+0x1c0/0x660
[ 1031.049923][T10717]  ? nf_flow_offload_xdp_setup+0x68a/0x690
[ 1031.055745][T10717]  ? nf_hook_entry_head+0x23e/0x2c0
[ 1031.060955][T10717]  report_bug+0x16a/0x220
[ 1031.065279][T10717]  ? nf_hook_entry_head+0x23e/0x2c0
[ 1031.070481][T10717]  ? nf_hook_entry_head+0x240/0x2c0
[ 1031.075680][T10717]  handle_bug+0x98/0x200
[ 1031.079918][T10717]  exc_invalid_op+0x1a/0x50
[ 1031.084414][T10717]  asm_exc_invalid_op+0x1a/0x20
[ 1031.089265][T10717] RIP: 0010:nf_hook_entry_head+0x23e/0x2c0
[ 1031.095067][T10717] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 4d a3 a6 f8 4d 39 37 74 36 e8 03 47 40 f8 90 <0f> 0b 90 31 db 48 89 d8 5b 41 5e 41 5f 5d e9 3f 30 dd 01 cc e8 e9
[ 1031.114667][T10717] RSP: 0018:ffffc90003b2f748 EFLAGS: 00010293
[ 1031.120731][T10717] RAX: ffffffff89816b0b RBX: ffff888055a68000 RCX: ffff88802559bd00
[ 1031.128695][T10717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1031.136673][T10717] RBP: 0000000000000000 R08: ffff88802559bd00 R09: 0000000000000006
[ 1031.144642][T10717] R10: 000000000000000a R11: 0000000000000000 R12: ffff888021eaa5c0
[ 1031.152609][T10717] R13: 0000000000000005 R14: ffff888021eaa5c0 R15: ffff888055a68108
[ 1031.160582][T10717]  ? nf_hook_entry_head+0x1fb/0x2c0
[ 1031.165791][T10717]  ? nf_hook_entry_head+0x1fb/0x2c0
[ 1031.170999][T10717]  __nf_unregister_net_hook+0x74/0x6f0
[ 1031.176467][T10717]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[ 1031.182801][T10717]  __nft_release_hook+0x180/0x350
[ 1031.187845][T10717]  nf_tables_pre_exit_net+0xa7/0x110
[ 1031.193137][T10717]  ops_undo_list+0x187/0x990
[ 1031.197747][T10717]  ? __pfx_ops_undo_list+0x10/0x10
[ 1031.202866][T10717]  ? do_raw_spin_unlock+0x122/0x240
[ 1031.208069][T10717]  cleanup_net+0x4d8/0x7a0
[ 1031.212477][T10717]  ? __pfx_cleanup_net+0x10/0x10
[ 1031.217408][T10717]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1031.222606][T10717]  ? process_scheduled_works+0x9ef/0x1770
[ 1031.228325][T10717]  ? process_scheduled_works+0x9ef/0x1770
[ 1031.234037][T10717]  process_scheduled_works+0xad1/0x1770
[ 1031.239590][T10717]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1031.245577][T10717]  worker_thread+0x8a0/0xda0
[ 1031.250182][T10717]  kthread+0x711/0x8a0
[ 1031.254253][T10717]  ? __pfx_worker_thread+0x10/0x10
[ 1031.259442][T10717]  ? __pfx_kthread+0x10/0x10
[ 1031.264026][T10717]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1031.269233][T10717]  ? lockdep_hardirqs_on+0x98/0x140
[ 1031.274422][T10717]  ? __pfx_kthread+0x10/0x10
[ 1031.279012][T10717]  ret_from_fork+0x599/0xb30
[ 1031.283598][T10717]  ? __pfx_ret_from_fork+0x10/0x10
[ 1031.288714][T10717]  ? __switch_to_asm+0x39/0x70
[ 1031.293470][T10717]  ? __switch_to_asm+0x33/0x70
[ 1031.298232][T10717]  ? __pfx_kthread+0x10/0x10
[ 1031.302830][T10717]  ret_from_fork_asm+0x1a/0x30
[ 1031.307630][T10717]  </TASK>
[ 1031.311011][T10717] Kernel Offset: disabled
[ 1031.315340][T10717] Rebooting in 86400 seconds..