last executing test programs:

1m56.52555907s ago: executing program 2 (id=1068):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x1000000}, 0x40080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x800)

1m56.518288318s ago: executing program 2 (id=1069):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x40000000000)

1m56.420836198s ago: executing program 2 (id=1070):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80}], 0x30}, 0x0)
sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000000240)="33caaff65bbb491ee6d344e5ca70fa4e68f9ad2bd73518b68c50db097aa154c3da00"/54, 0x36}, {&(0x7f0000000400)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ac67e809e68ca18f0241349dc535", 0x38}], 0x3}], 0x1, 0x840)
recvmsg(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/149, 0x95}], 0x1}, 0x10001)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r3, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000009f40)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000009f00)=0x1}})
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x110)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
fchmod(r5, 0x24)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r5, 0x24, &(0x7f0000000440)={0x4, 0x0, '\x00', @zc_export={r4}}, 0x0)

1m55.855895976s ago: executing program 2 (id=1074):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x13b8}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000)

1m55.682294734s ago: executing program 2 (id=1076):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4f, 0x7fff0000}]})
brk(0x9)

1m55.521619562s ago: executing program 2 (id=1078):
unshare(0x60000000)
r0 = socket$packet(0x11, 0x2, 0x300)
unshare(0x10480)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x401, 0x70bd29, 0xfffffff0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x2, @broadcast}, 0x10)
r2 = io_uring_setup(0x671d, &(0x7f0000000080)={0x0, 0x8a74, 0x4000, 0x1, 0x5c})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r3, &(0x7f0000000080), 0x0}, 0x20)
ioctl$FIOCLEX(0xffffffffffffffff, 0x5451)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
io_uring_enter(r2, 0x32ed, 0xb594, 0x20, &(0x7f0000000100)={[0x3]}, 0x8)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

1m54.662357439s ago: executing program 3 (id=1080):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x1000000}, 0x40080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x800)

1m54.197193156s ago: executing program 3 (id=1083):
socket$unix(0x1, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/vmcoreinfo', 0x20180, 0x8)
read$char_usb(r0, &(0x7f0000000480)=""/47, 0x2f)
r1 = syz_open_procfs$namespace(0x0, 0x0)
open_by_handle_at(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=<r7=>r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0x713, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000011, 0x6, 0xa, 0x4, 0xd99d}}]}]}}}]}, 0x70}}, 0x0)
sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e0", 0x7, 0x830, &(0x7f0000000440)={0x11, 0x8100, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010001000000000000010040000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000140000000140800034000000002080002400000001208000800000000000900010073797a30"], 0x108}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0xfffffffffffffd71, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYRES32=r7], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x44834)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r8, 0x11, 0x1, &(0x7f0000000100)=0xdb, 0x4)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800)
r11 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=<r12=>0x0, &(0x7f00000006c0)=<r13=>0x0, &(0x7f0000000580)=<r14=>0x0)
syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))
socket$inet6_tcp(0xa, 0x1, 0x0)

1m53.748198111s ago: executing program 0 (id=1084):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a31000000000800034000002001090001"], 0x34}}, 0x0)

1m53.620120251s ago: executing program 0 (id=1085):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80402, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023893)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
r6 = eventfd2(0x7ff, 0x0)
ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000040)={0x1, r6})
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x1, r6})
close_range(r5, r6, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x180, 0x77, 0x8f, 0x62, 0x40, 0x5ac, 0x24e, 0x20a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa0, 0x6, 0x10, 0x1, "", [{{0x9, 0x4, 0x6e, 0x2, 0x0, 0x3, 0x7a, 0x2, 0x7}}]}}]}}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x90000)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00004f1000/0x1000)=nil, 0x1000}, 0x4})
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x10})

1m50.721191768s ago: executing program 3 (id=1086):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000000300)="80", 0x1, 0x4048016, &(0x7f00000003c0)={0xa, 0x4e21, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
read$char_usb(r2, &(0x7f00000002c0)=""/151, 0x97)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f00000001c0)={0x10002000})
ptrace(0x10, r4)
ptrace$cont(0x15, r4, 0x800006, 0x200000)
timer_gettime(r3, &(0x7f0000000200))
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_disconnect(r1)
add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000616263646575767778797a"], 0x29, 0xfffffffffffffff9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r5 = socket$inet(0x2, 0x1, 0x2)
setsockopt$inet_mreqn(r5, 0x0, 0x27, 0x0, 0x0)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

1m47.522843821s ago: executing program 3 (id=1088):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0}, 0x20)
r0 = userfaultfd(0x80001)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000100))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x1, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00007e9000/0x2000)=nil, 0x85, &(0x7f0000000180)=[{0x3, 0x5, 0x9f}], 0x1, 0x8, 0x3c, 0x0, 0x2})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000b79000/0x4000)=nil, &(0x7f00000dd000/0x6000)=nil, 0x4000, 0x3, 0x6040000})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000000, 0x4031, 0xffffffffffffffff, 0x0)
listns(&(0x7f0000000140)={0x20, 0x0, 0x7, 0x6000000, 0x0, 0x3}, 0x0, 0x0, 0x0)

1m46.655785995s ago: executing program 3 (id=1089):
mlock(&(0x7f0000a51000/0x4000)=nil, 0x4000) (async)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0x40000000000, 0x10000, 0xfffffffd}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040045) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r1) (async)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55)
execve(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) (async)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce}) (async)
io_uring_enter(r1, 0x2219, 0xae02, 0x16, 0x0, 0x58)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) (async)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000640)={0xff, "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"})
r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000008010800000000000000000500000524000480080001400000002908000140000000020800024000000007080001400000000714000480080001"], 0x54}, 0x1, 0x0, 0x0, 0x40400ce}, 0x20040811)
mremap(&(0x7f0000a51000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) (async)
mremap(&(0x7f0000a56000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000a51000/0x3000)=nil)

1m46.46291962s ago: executing program 3 (id=1090):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
write$tun(r1, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x4, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800)
ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040))

1m45.87646797s ago: executing program 0 (id=1094):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x101f, 0x409}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804)

1m45.749349777s ago: executing program 0 (id=1095):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000000)=[0x0, 0x3])
r2 = dup(r1)
r3 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffdd4)
r5 = fsmount(r3, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000240), 0x0, 0x0)
shutdown(r6, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000001c0)={0xd582, 0x4, 0x2, 0x7f}, 0x10)
fchdir(r5)
openat(r5, &(0x7f00000000c0)='./file0\x00', 0x501000, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0)
listns(&(0x7f0000000040)={0x20, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1m43.083034436s ago: executing program 0 (id=1097):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc850}, 0x80)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0xffffffffdfffffff, 0x800, 0x9, 0x1}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_setup(0x1b7b, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0})
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x5000)
sendto$inet6(r4, &(0x7f0000000500)="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", 0x101, 0x8810, &(0x7f0000001500)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff7}, 0x1c)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r5 = socket(0x2b, 0x1, 0x1)
sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005}, 0x4000081)
sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x40000)
write$binfmt_aout(r4, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x3000000, @empty, 0x3}}}, 0x88)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="06dfcf389aa5c54d4d978c73ccbc165211a912037fa6f972d6990074b725d760caf19da6d50cdd2ea33b"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})
socket$inet6_udp(0xa, 0x2, 0x0)

1m40.087243449s ago: executing program 32 (id=1078):
unshare(0x60000000)
r0 = socket$packet(0x11, 0x2, 0x300)
unshare(0x10480)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x401, 0x70bd29, 0xfffffff0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x2, @broadcast}, 0x10)
r2 = io_uring_setup(0x671d, &(0x7f0000000080)={0x0, 0x8a74, 0x4000, 0x1, 0x5c})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r3, &(0x7f0000000080), 0x0}, 0x20)
ioctl$FIOCLEX(0xffffffffffffffff, 0x5451)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
io_uring_enter(r2, 0x32ed, 0xb594, 0x20, &(0x7f0000000100)={[0x3]}, 0x8)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

1m39.257376235s ago: executing program 4 (id=1102):
socket$igmp6(0xa, 0x3, 0x3a)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8044)
io_uring_setup(0x1b7c, &(0x7f0000000340)={0x0, 0xc89f, 0x80, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004)
socket$inet(0x2, 0x80001, 0x84)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x44, 0x18})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r3 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080))
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
timer_settime(0x0, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc0002, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x7, 0x4, 0x0, 0x2, 0x1})

1m36.689516334s ago: executing program 0 (id=1103):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x5421, 0x0)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000600)={0xc, @pix_mp={0xe00000, 0x3, 0x38415262, 0x7, 0x9, [{0x6, 0xf9}, {0x3, 0xc}, {0x2, 0x9}, {0x80000000, 0x5}, {0x8001, 0x69a}, {}, {0x5, 0x364d}, {0x4, 0x204}], 0x2, 0x40, 0x4}})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
syz_clone3(&(0x7f0000000080)={0x40bc3500, &(0x7f0000000040), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x54, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {0x0, 0x6}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044084}, 0x20040080)

1m31.106834826s ago: executing program 33 (id=1090):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
write$tun(r1, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x4, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800)
ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040))

1m26.644438545s ago: executing program 4 (id=1109):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7}, 0x8) (fail_nth: 1)

1m21.720685102s ago: executing program 4 (id=1110):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r2)
r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000200)={0x60, 0x3, &(0x7f0000ba0000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3, 0x0, 0x0, 0x0, 0x4, 0x48, 0x45, 0x8})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7}, 0x8)

1m21.30062832s ago: executing program 34 (id=1103):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x5421, 0x0)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000600)={0xc, @pix_mp={0xe00000, 0x3, 0x38415262, 0x7, 0x9, [{0x6, 0xf9}, {0x3, 0xc}, {0x2, 0x9}, {0x80000000, 0x5}, {0x8001, 0x69a}, {}, {0x5, 0x364d}, {0x4, 0x204}], 0x2, 0x40, 0x4}})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
syz_clone3(&(0x7f0000000080)={0x40bc3500, &(0x7f0000000040), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x54, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {0x0, 0x6}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044084}, 0x20040080)

1m18.681693831s ago: executing program 4 (id=1112):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000180)={0x24, 0x64, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x11, 0x0, 0x0, @fd}, @nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xdb, 0x0, 0x1, [@nested={0x4, 0xac}]}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x20004880}, 0x400c000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x0, 0x0, 0x34, 0x0, "51cb7c64948dec815df6ba1b88da2d387102781bdac81486b7f0204e14f4c6ab8529674e441f2ddbd6cf30342a51bceb531da02036979253af96128ddf2d0b604f834e0f18b0e4dc922ad8c856de6554"}, 0xd8)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x7, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r3, 0x0, r8, 0x0, 0x1000800800f3d, 0x7)
connect$can_bcm(r3, &(0x7f0000000000), 0x10)
syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000edbf273abbd9a6f6f99707f650a245d5cde00092b62e159f0fd76cd5df7e080045000028000000000002907800000000"], 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800037dc1250200000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0xb, 0x4f}, {0x5000, 0x2, 0xd, 0x49, 0x8, 0xb, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x5, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0xfc, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x1, 0x3, 0x4, 0x1, 0xbf, 0x2, 0x90, 0x1, 0xfc}, {0xeeef0000, 0x2, 0xf, 0xff, 0x3, 0x3, 0x0, 0xb, 0x5, 0x7, 0x9, 0xfd}, {0x100000, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x8, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x60000, 0x300, 0x5, 0x2000, 0x6000, [0x3, 0x400, 0x7, 0xc5]})
ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xffff1000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x8, 0x0, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10}, {0xf, 0x6, 0x8, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x6}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)

1m6.42540788s ago: executing program 4 (id=1116):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x1, 0x8, 0x401, 0x100})
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
io_uring_enter(r1, 0x2219, 0x771e, 0x16, 0x0, 0x0)
r2 = dup(r0)
write$UHID_INPUT(r2, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000300)={r5, 0x1000, 0x2, "f6fd"}, 0xa)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r5, &(0x7f0000000180)=0x4)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r5, 0x100}, &(0x7f0000000040)=0x8)
ioctl$VT_ACTIVATE(r2, 0x5606, 0xdf)

1m3.808813356s ago: executing program 4 (id=1118):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x3, 0x0, 0xff}, {0x1000, 0x0, 0x4, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x7f, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xd, 0x0, 0x3c, 0x2}, {0x0, 0x54000, 0x0, 0x0, 0x0, 0x96, 0x2, 0x1, 0x0, 0x0, 0xfc}, {0xdddd1000, 0xa000, 0xa, 0x6, 0x0, 0x80, 0x3, 0x0, 0x2}, {0x0, 0x8000000, 0x4, 0x9, 0x1, 0x85, 0x83, 0xa, 0x26, 0x5}, {0x4000, 0x2}, {0xd000, 0xff}, 0xddf8ffdb, 0x0, 0x2c000, 0x222070, 0x4, 0xd801, 0x0, [0x0, 0xffffffffffffffff, 0x1]})
close(0x5)
close(0x4)
munlockall()
socket$netlink(0x10, 0x3, 0x10)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

47.783583285s ago: executing program 35 (id=1118):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x3, 0x0, 0xff}, {0x1000, 0x0, 0x4, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x7f, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xd, 0x0, 0x3c, 0x2}, {0x0, 0x54000, 0x0, 0x0, 0x0, 0x96, 0x2, 0x1, 0x0, 0x0, 0xfc}, {0xdddd1000, 0xa000, 0xa, 0x6, 0x0, 0x80, 0x3, 0x0, 0x2}, {0x0, 0x8000000, 0x4, 0x9, 0x1, 0x85, 0x83, 0xa, 0x26, 0x5}, {0x4000, 0x2}, {0xd000, 0xff}, 0xddf8ffdb, 0x0, 0x2c000, 0x222070, 0x4, 0xd801, 0x0, [0x0, 0xffffffffffffffff, 0x1]})
close(0x5)
close(0x4)
munlockall()
socket$netlink(0x10, 0x3, 0x10)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

37.69834248s ago: executing program 7 (id=1111):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r7, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e)
r8 = semget$private(0x0, 0x20000000102, 0x0)
semop(r8, &(0x7f0000000000)=[{0x0, 0xe65b}], 0x1)
semtimedop(r8, &(0x7f0000000140)=[{0x4, 0xa, 0xc00}, {0x2, 0xfffb, 0x1000}], 0x2, 0x0)
semctl$GETZCNT(r8, 0x3, 0xf, 0x0)
semop(r8, &(0x7f0000000040)=[{0x0, 0xd330, 0x1800}, {0x4, 0x5, 0x1000}], 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f00000006c0)={0xbd8, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf, 0x7}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x358, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7}, @random="a5a10764828d", @device_a, @device_b, {0x4, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x2cc2, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0x39, "5e100deeabac1198dd9a9737aae9a20ee7f84d972782240fd689e23bfd4621dfbc96b0bb23360013e2244e53c32069de371999807b41f15e0c"}, {@broadcast, @broadcast, 0xed, "dd73e8015b0ee4f5078fa12058d2da4ed56bae4571e9e4c054ebec8bac2df62669e8289fe53153252c3f6deae3b636436c250134badb169e97dfbb83912626af469a95cf1f3d1c32eb17c575fc8f0cbf881b41e3e9ee9ba7a8445bef2acce6086ce8caa493748117709fef3766b3e3f4b4bf3ff7e238608ec09918157926f57a7fffe45055b70b8e8c66214fd96e57fac6e5731e53af78c385bcdbb6c5a023401caeee950bd4d1b054528698b4ad35f1d381c6c6ba1718e26a266756b12db49d7488ea203c7f2cd661afc65a7b3f5085b65d01526d676337c4b57405b08a59fc6c7085ab8fe3c1cee9abb95623"}, {@device_a, @device_a, 0x8d, "5b83f14462ce4caa0c4d40870ec6503bd78b5931eda196ddc1999206b91feb8a5ca623bc60306c5ebeaebd2dc0d0d7d8891c9b4dbc585d44344e33f4569df742cbebe906729313e24d67ebee7c47fc41307c7189206d1ad533c1124bd5ed4c8ec4fdb2e7a2c0b9f12468ee326fcf81a091c69144ea82cf0b0c4dafad456e46a7817cd5b4c8c97cfb702655ac1b"}, {@device_a, @device_b, 0x53, "37b7f970c2e10c4a7609b4930b68156d18b0e103b33b0c6f9cf6a5626ddd9967455cddae1138805c0c27c8b38e27d382057e2fb274bbf64897bab3039051cb0aaeabb78c68207e828c24c2268a9a456c797cc4"}, {@device_a, @device_a, 0xe5, "ce223a4ef4802adb93bb55aa53feb1f74a12d43d69efb31fdda3dae3eeb30c7a04600a54698ad20c4107cef0530870540f8edbe4fb44dad768efb8e9d6d46b8cab393b7e9fc559499a6a95cf6871c849f956e6681663dfbed1d6b4c2d0e16734ce1689303b787cb3d87ba70c3d73a7f6079bbaae0ee526345acafcedca11cc2747debecfe8c2cac076c559c1cc97c7489245c1c10cbea4ec4fd7387a28aad7baf898f9dca46cd72fd021620707edf6bb695a090ce25f04007b88f2930f0e5ac1c8cd0730db435203ab3c38eefe369e53d1e59886b222f5f8db4a2e4a7956b97ddc4c36f3ae"}]}}, @NL80211_ATTR_FRAME={0xa0, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @from_mac=@device_b, @device_a, @broadcast, {0x4, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0x1, "d8"}, {@broadcast, @device_a, 0x61, "0d72aeaeb49e075e019d15b78a5b5e54d307c2e609367296bb653f089898b862c1882b3815ac351a5305b47ace257cb74aecd8fd33a0367dbeff0671c213cf50447d6698839eca12ed243a3f261905d836cac009db891eb3444723c8755e21fdbf"}]}}, @NL80211_ATTR_FRAME={0x7a6, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2752}, @random="2354498554df", @broadcast, @from_mac, {0x5, 0x9}}, @random="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"}}, @NL80211_ATTR_MAC={0xa}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x8845}, 0x0)

34.801099436s ago: executing program 7 (id=1127):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
socket$inet6(0x10, 0x3, 0x0)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000)
unshare(0x200)
mmap(&(0x7f00005e8000/0x2000)=nil, 0x2000, 0x3, 0x40010, r1, 0xffffa000)
socket$igmp(0x2, 0x3, 0x2)
r4 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x1178}, 0x1, 0x0, 0x0, 0x40000}, 0x45)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r5, 0x0, 0xfffffe7d, 0x2000c015, &(0x7f0000000540)={0xa, 0x4c21, 0xfffffff7, @mcast2}, 0x1c)
sendfile(r5, 0xffffffffffffffff, 0x0, 0xd39a)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4)
setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80140, 0xea757e1739bf98c7)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x400440c5}, 0x24004090)
r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x80000000, 0x1000, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x2, 0x0, 0x8000002, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0xe, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0xffffffffffffbffc, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x4, 0x3, 0xfffffffffffffffc, 0x1, 0x0, 0x10000, 0x8, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0xc20, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x800, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000002, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0xfffffffffffffffd, 0x7, 0x9, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, 0x40000000002, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x801075, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0xfffffffffffffffc, 0x3, 0x7, 0xb, 0x20, 0x2006, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]})

32.894771644s ago: executing program 6 (id=1108):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0xcbf, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x8, 0x0, 0xd65}})
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10)
recvfrom$inet6(r2, 0x0, 0x0, 0x23, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x6, 0x1}}}}}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c005}, 0x40095)
ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000080)={0x2})
pipe(&(0x7f0000000040))
syz_usb_disconnect(r0)
syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18)

30.485356226s ago: executing program 7 (id=1130):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x7})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000580)={{@host, 0x2}, {@local, 0x4}, 0x400, "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"}, 0x418, 0xf})
socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010800000000084)
sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xef}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x50, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x82}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x57, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x0, 0x4c, 0xfb}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0)

27.655138443s ago: executing program 6 (id=1131):
r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000480)={0x0, 0xe80f, 0x10, 0x1, 0x1ab}, &(0x7f0000000140)=<r1=>0x0, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001540)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)={0x2, 0x0, [{0x1000, 0x5f, &(0x7f0000000400)=""/95}, {0x0, 0x52, &(0x7f00000025c0)=""/82}]})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}})
connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
syz_io_uring_submit(r1, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RENAMEAT={0x23, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001640)='./file0\x00', 0xffffffffffffffff, 0x2, 0x1})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x6889, 0x1f280, 0xfffffffd, 0x399})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffdf1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00001001000000f0ffffff0400000034000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRESHEX=r0, @ANYRESOCT=r1, @ANYBLOB="0300000001000000040000000e"], 0x50)
io_uring_enter(r4, 0x8ae, 0xfbb9, 0xbf, 0x0, 0x60)
r5 = socket$l2tp(0x2, 0x2, 0x73)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xc89d, 0x4, 0xa, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100007000000000000a0000000000fd000000000014000500000000"], 0x30}, 0x1, 0x11}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000240)=0xfffffffe, 0x4)
io_uring_enter(r6, 0x2219, 0x7725, 0x56, 0x0, 0x0)
connect$l2tp(r5, &(0x7f0000000040)={0x2, 0x0, @local, 0x3}, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x7, 0x1, 0x7})

26.774992338s ago: executing program 8 (id=1121):
r0 = fsopen(&(0x7f0000000800)='hfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691087000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b0080000000050001000700000006000b0002000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172)
setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x5, 0x4)
syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002e80c1e10e80401a148040102031109021200011c0780fe0904"], 0xfffffffffffffffe)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff})
r4 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r4], 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='reno', 0x4)

26.648339893s ago: executing program 7 (id=1133):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="06", @ANYRESOCT], 0x0)
r10 = syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40)
ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r10, 0xc01864b0, &(0x7f0000002e80)={0x0, 0x0, 0x4, 0xfff, 0x8000})
r11 = socket(0x1e, 0x5, 0x0)
connect$tipc(r11, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
recvmmsg(r11, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/184, 0xb8}], 0x1, &(0x7f00000001c0)=""/105, 0x14}, 0xffeffff8}], 0x1, 0x20b0, 0x0)
r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r12, 0xc004500a, &(0x7f00000002c0)=0x10001)
sendmmsg$inet(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="17", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)='3', 0x1}], 0x1}}], 0x2, 0x4044890)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000)
recvmmsg(r7, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xffffff16}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0)
r14 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf32(r14, &(0x7f0000006100)=ANY=[@ANYBLOB="7f454c4604b6023c060000000000000002003e00060000007002000038000000d203000000000000070020000400d4000000bf6e0000000000000060f7ffffff06000000050000000000008063a9000001000000faffffff010000000800000004000000942400000300000006000000ffff0000980e00000600000003000000000000000000000000040000c0ffffff01000100090000000300000003000000000012000600000005000000000000000004000006000000a5523f21c08d51dc66dfe2c4e1706196c9662432a9cf88dc80171e60aae2a14379831b0627375944c456af180caee722e24ee535df3f7ca632eeb7c6faf5d72e31e79e2b18ac855204813984866ed14fca9e74142a0424f1d2670b983a314b558523101cc5ff52c7401af16747ed7587e62a270db095798a93a814d666deec85250d46470cced67c5d1eb6fac6ff792db392c7560e1d642214f096bf43c91ba73ec343d534fd8ccc4b363d39f9a6295963203ed88fcc5ffcadab93960518092b350000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2fe8d499eb15f7f9f468f1460652c9ab1560a6c5de066df6d3f2da9feb7de59849cb8d23a1084a8126aa455203719ac3494be77544ccb2b4761f85263ea6fa4dd877c55c991572f0a27cb2465b5451209f1b333d"], 0x979)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0)

26.302464047s ago: executing program 6 (id=1135):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x0)
syz_open_dev$video(0x0, 0x8, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_proto_private(r2, 0x89e3, &(0x7f0000000100)="ec6c4d36b2813af7")
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
fcntl$getflags(r3, 0x40a)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x2, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, 0xd9, 0x93}, 0xe)
sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r4, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x2465, &(0x7f0000000340)={0x0, 0xc0fb, 0x80, 0x1, 0x1d6}, 0x0, 0x0, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b2620af07010000002a900683749e821db5e79316ad39a630bcdb86ab8b9236"], 0x0}, 0x0)

25.183041113s ago: executing program 1 (id=1137):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200002414000e00002fb96dffff1144ee163cddcb000000800026827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

24.297339698s ago: executing program 1 (id=1138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={<r4=>0xffffffffffffffff}, 0x106, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r4}}, 0x18)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x2)
close_range(r1, 0xffffffffffffffff, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x123e02, 0x0)
r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
ioctl$TCSBRKP(r6, 0x5425, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001d00e30428bd7000fcdbdf2511000000", @ANYRES32=r11, @ANYBLOB="80002a0a140003007a0600000400000004000000e670000005000c000100000014000100200100"/52], 0x4c}}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESHEX], 0x2c}}, 0x40000)

24.089282836s ago: executing program 1 (id=1139):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00))
sendmmsg(r0, 0x0, 0x0, 0x24005805)

24.022076716s ago: executing program 1 (id=1140):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc880, 0x0, 0x20002f3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x10, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001240)=[@text16={0x10, &(0x7f0000000140)="0f080fae04a200400f1c014bab4bab0f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f36", 0x2d}], 0x1, 0x21, 0x0, 0x0)
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x2)

23.504006521s ago: executing program 1 (id=1141):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100001000010426bd70000200000028000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000d800128009000100766c616e00000000c800028006000100020000000600050088a800000c0002000b0000000700000006000500810000000c000200020000000c000000580003800c0001000d000000060000000c000100ff000000070000000c00010004000000000100000c0001000200000010ce00000c000100ff010000090000000c00010083020000130000000c000100f44b000000020000060001000300000034000480d3ff010003000000050000000c00010006000000090000000c000100ffff0000ff7fffff0c000100000001000900000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x108}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x851, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8)
sendmmsg$inet_sctp(r0, &(0x7f0000002400)=[{&(0x7f0000001dc0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002300)=[{&(0x7f0000001e00)="dd", 0x1}], 0x1, &(0x7f0000002380)=ANY=[@ANYBLOB="180000000000000084000000000000fd000006000500f241"], 0x18, 0x4008800}], 0x1, 0xc5)
epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8040480)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00})
socket(0x2b, 0x800, 0x7)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(r7, 0x0, 0x0)
timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
mmap(&(0x7f0000321000/0x2000)=nil, 0x2000, 0xa, 0x12, 0xffffffffffffffff, 0xffffc000)
madvise(&(0x7f0000483000/0x3000)=nil, 0x3000, 0x11)

23.392251877s ago: executing program 8 (id=1142):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r1, @ANYBLOB="080600000000000000c9139996a177d4a42fc05c75b85017949a6e48eaab4067ddb2a4", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="7500b859aecc5bb2a5601fa6b056be32c426770b", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x8000)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
socket(0x1e, 0x4, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x10000, 0x2, 0x15c}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0xc}]}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000700)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x9c, 0x0, @void}}}}}}}, 0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x96a8, 0x0, 0x2000000, 0xf8, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
r12 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0)
r13 = fsmount(r12, 0x0, 0x86)
fchdir(r13)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1e0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

16.315053495s ago: executing program 1 (id=1143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000280)=0xe6f)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r10, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0)

15.254779915s ago: executing program 6 (id=1144):
r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x6, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x400000, 0x1, 0x8, 0xfffff49d, 0x2, 0x3, 0x1c, 0xa}})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94)
capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x82})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1, 0x180, 0x2000000000000004, 0x10, 0xed, 0x54, 0x0, 0x4000000000000002, 0x0, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0xa5, 0xbdb], 0x10000, 0x100})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue1\x00', 0x5})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x24008050)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xff000000, 0x0, 0xff], 'veth0_to_hsr\x00', 'dvmrp1\x00', {0xff}, {}, 0x32, 0xf, 0x2, 0x12}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

11.475590868s ago: executing program 36 (id=1133):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="06", @ANYRESOCT], 0x0)
r10 = syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40)
ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r10, 0xc01864b0, &(0x7f0000002e80)={0x0, 0x0, 0x4, 0xfff, 0x8000})
r11 = socket(0x1e, 0x5, 0x0)
connect$tipc(r11, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
recvmmsg(r11, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/184, 0xb8}], 0x1, &(0x7f00000001c0)=""/105, 0x14}, 0xffeffff8}], 0x1, 0x20b0, 0x0)
r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r12, 0xc004500a, &(0x7f00000002c0)=0x10001)
sendmmsg$inet(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="17", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)='3', 0x1}], 0x1}}], 0x2, 0x4044890)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000)
recvmmsg(r7, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xffffff16}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0)
r14 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf32(r14, &(0x7f0000006100)=ANY=[@ANYBLOB="7f454c4604b6023c060000000000000002003e00060000007002000038000000d203000000000000070020000400d4000000bf6e0000000000000060f7ffffff06000000050000000000008063a9000001000000faffffff010000000800000004000000942400000300000006000000ffff0000980e00000600000003000000000000000000000000040000c0ffffff01000100090000000300000003000000000012000600000005000000000000000004000006000000a5523f21c08d51dc66dfe2c4e1706196c9662432a9cf88dc80171e60aae2a14379831b0627375944c456af180caee722e24ee535df3f7ca632eeb7c6faf5d72e31e79e2b18ac855204813984866ed14fca9e74142a0424f1d2670b983a314b558523101cc5ff52c7401af16747ed7587e62a270db095798a93a814d666deec85250d46470cced67c5d1eb6fac6ff792db392c7560e1d642214f096bf43c91ba73ec343d534fd8ccc4b363d39f9a6295963203ed88fcc5ffcadab93960518092b350000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2fe8d499eb15f7f9f468f1460652c9ab1560a6c5de066df6d3f2da9feb7de59849cb8d23a1084a8126aa455203719ac3494be77544ccb2b4761f85263ea6fa4dd877c55c991572f0a27cb2465b5451209f1b333d"], 0x979)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0)

8.029045868s ago: executing program 37 (id=1142):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r1, @ANYBLOB="080600000000000000c9139996a177d4a42fc05c75b85017949a6e48eaab4067ddb2a4", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="7500b859aecc5bb2a5601fa6b056be32c426770b", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x8000)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
socket(0x1e, 0x4, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x10000, 0x2, 0x15c}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0xc}]}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000700)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x9c, 0x0, @void}}}}}}}, 0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x96a8, 0x0, 0x2000000, 0xf8, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
r12 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0)
r13 = fsmount(r12, 0x0, 0x86)
fchdir(r13)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1e0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

999.298914ms ago: executing program 38 (id=1143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000280)=0xe6f)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r10, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0)

0s ago: executing program 39 (id=1144):
r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x6, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x400000, 0x1, 0x8, 0xfffff49d, 0x2, 0x3, 0x1c, 0xa}})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94)
capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x82})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1, 0x180, 0x2000000000000004, 0x10, 0xed, 0x54, 0x0, 0x4000000000000002, 0x0, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0xa5, 0xbdb], 0x10000, 0x100})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue1\x00', 0x5})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x24008050)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xff000000, 0x0, 0xff], 'veth0_to_hsr\x00', 'dvmrp1\x00', {0xff}, {}, 0x32, 0xf, 0x2, 0x12}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

Pocket POD found
[  265.063479][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.077709][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.090441][ T8204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.807'.
[  265.152982][ T5729] snd_usb_pod 4-1:1.1: set_interface failed
[  265.159315][ T5729] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  265.166682][ T5729] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71
[  265.179153][ T5729] usb 4-1: USB disconnect, device number 27
[  266.044862][ T5721] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  266.156656][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.826'.
[  266.167919][ T8264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  266.176616][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.826'.
[  266.270124][ T5729] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  266.790790][ T8277] 
@0Ù: renamed from dummy0 (while UP)
[  266.838523][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'.
[  266.932233][ T5729] usb 3-1: Using ep0 maxpacket: 8
[  267.203798][   T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  267.373186][ T5721] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  267.383211][ T5721] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  267.394742][ T5721] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  267.473556][   T10] usb 1-1: Using ep0 maxpacket: 32
[  267.488276][   T29] usb 4-1: new low-speed USB device number 28 using dummy_hcd
[  267.504228][   T10] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  267.515218][   T10] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  267.527558][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  267.538209][   T10] usb 1-1: config 1 has no interface number 0
[  267.545039][   T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  267.556696][   T10] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  267.570238][   T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  267.579817][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.601181][ T5729] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  267.614209][ T5729] usb 3-1: config 0 interface 0 has no altsetting 0
[  267.620902][ T5729] usb 3-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[  267.630724][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.650711][ T5729] usb 3-1: config 0 descriptor??
[  267.668778][   T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  267.874592][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.884282][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.897547][ T8283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.833'.
[  267.910890][   T10] snd_usb_pod 1-1:1.1: set_interface failed
[  267.917860][   T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  267.925708][   T10] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71
[  267.950566][   T10] usb 1-1: USB disconnect, device number 25
[  268.269043][ T5721] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  268.278191][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.286241][ T5721] usb 2-1: Product: syz
[  268.290443][ T5721] usb 2-1: Manufacturer: syz
[  268.295076][ T5721] usb 2-1: SerialNumber: syz
[  268.303594][ T5721] usb 2-1: config 0 descriptor??
[  268.377188][ T8249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  268.384529][ T8249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  268.392409][ T5729] hid (null): unknown global tag 0xe
[  268.402006][ T5729] wacom 0003:056A:00E3.000B: unknown main item tag 0x4
[  268.409003][ T5729] wacom 0003:056A:00E3.000B: unknown main item tag 0x7
[  268.415947][ T5729] wacom 0003:056A:00E3.000B: unknown main item tag 0x2
[  268.422876][ T5729] wacom 0003:056A:00E3.000B: unknown main item tag 0x6
[  268.429807][ T5729] wacom 0003:056A:00E3.000B: unknown global tag 0xe
[  268.437163][ T5729] wacom 0003:056A:00E3.000B: item 0 4 1 14 parsing failed
[  268.445062][ T5729] wacom 0003:056A:00E3.000B: parse failed
[  268.450955][ T5729] wacom 0003:056A:00E3.000B: probe with driver wacom failed with error -22
[  268.488565][ T5721] usb 2-1: ucan: probing device on interface #0
[  268.825647][   T29] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  268.833176][   T29] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  268.843925][   T29] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  268.855628][   T29] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  268.866804][   T29] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  268.878211][ T5721] usb 2-1: ucan: could not read protocol version, ret=-71
[  268.886178][ T5721] usb 2-1: ucan: probe failed; try to update the device firmware
[  268.899613][ T5721] usb 2-1: USB disconnect, device number 19
[  269.005199][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.837'.
[  269.033836][ T8308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  269.061612][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.837'.
[  269.117577][   T30] audit: type=1804 audit(1785930310.211:148): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.839" name="/newroot/154/file1" dev="tmpfs" ino=810 res=1 errno=0
[  269.279062][   T29] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  269.289565][   T29] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  269.300360][   T29] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  269.312053][   T29] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  269.323234][   T29] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  269.694322][ T5639] usb 3-1: USB disconnect, device number 21
[  269.737633][   T29] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  269.745877][   T29] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  269.756635][   T29] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  269.768328][   T29] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  269.779550][   T29] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  270.016513][ T8332] syz_tun: entered promiscuous mode
[  270.222165][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'.
[  270.287653][   T29] usb 4-1: string descriptor 0 read error: -71
[  270.294092][   T29] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  270.303178][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.313148][ T5612] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  270.362348][ T5639] usb 3-1: new low-speed USB device number 22 using dummy_hcd
[  270.400154][   T29] usb 4-1: can't set config #168, error -71
[  270.408608][   T29] usb 4-1: USB disconnect, device number 28
[  270.456463][ T5714] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  270.542015][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.853'.
[  270.615254][ T5639] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  270.623296][ T5639] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  270.634765][ T5639] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  270.653056][ T5639] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  270.664773][ T5639] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  270.677609][ T5639] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  270.685639][ T5639] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  270.698251][ T5639] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  270.712771][ T5639] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  270.724813][ T5714] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  270.735265][ T5639] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  270.746928][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  270.759395][ T5714] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  270.760103][ T5639] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  270.795124][ T5639] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  270.808044][ T5714] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  270.818007][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.828487][ T5639] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  270.840425][ T5714] usb 5-1: Product: syz
[  270.845172][ T5714] usb 5-1: Manufacturer: syz
[  270.849872][ T5639] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  270.861233][ T5714] usb 5-1: SerialNumber: syz
[  270.869204][ T5639] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  270.886679][ T5639] usb 3-1: string descriptor 0 read error: -22
[  270.893330][ T5639] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  270.909808][ T5714] usb 5-1: config 0 descriptor??
[  270.935566][ T8336] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  270.943212][ T5639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.006739][ T5612] usb 2-1: Using ep0 maxpacket: 32
[  271.023936][ T5639] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  271.031879][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'.
[  271.041879][ T8336] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  271.057125][ T5714] usb 5-1: ucan: probing device on interface #0
[  271.078906][ T8357] ip6gre1: entered promiscuous mode
[  271.085380][ T8357] ip6gre1: entered allmulticast mode
[  271.097603][ T6377] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  271.109590][ T6377] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  271.175699][ T5639] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  271.259676][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  271.269674][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  271.278929][ T5714] usb 5-1: ucan: could not read protocol version, ret=0
[  271.279785][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  271.288751][ T5714] usb 5-1: ucan: probe failed; try to update the device firmware
[  271.295579][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  271.311572][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  271.393938][ T5714] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  271.451751][   T29] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  271.663000][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'.
[  271.675967][ T5612] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  271.684402][ T5612] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  271.685055][ T5714] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  271.693070][ T5612] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  271.693097][ T5612] usb 2-1: config 1 has no interface number 0
[  271.693147][ T5612] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  271.693182][ T5612] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  271.735317][ T5714] usb 3-1: USB disconnect, device number 22
[  271.750527][ T5612] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  271.759809][ T5612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.009347][ T5612] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  272.236228][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.249143][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.259475][ T8327] netlink: 32 bytes leftover after parsing attributes in process `syz.1.847'.
[  272.333467][ T5612] snd_usb_pod 2-1:1.1: set_interface failed
[  272.339728][ T5612] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  272.347080][ T5612] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71
[  272.358910][ T5612] usb 2-1: USB disconnect, device number 20
[  272.658533][ T5728] usb 3-1: new low-speed USB device number 23 using dummy_hcd
[  272.877485][   T29] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  272.886640][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.898284][   T29] usb 1-1: config 0 descriptor??
[  273.099805][   T29] gspca_main: cpia1-2.14.0 probing 0813:0001
[  273.348234][ T8389] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  273.428668][ T8359] sctp: [Deprecated]: syz.0.857 (pid 8359) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.428668][ T8359] Use struct sctp_sack_info instead
[  273.593786][   T29] gspca_cpia1: usb_control_msg 05, error -71
[  273.647021][   T29] gspca_cpia1: usb_control_msg 01, error -71
[  273.656120][   T29] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  273.678215][   T29] usb 1-1: USB disconnect, device number 26
[  274.087276][ T5728] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  274.094832][ T5728] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  274.105564][ T5728] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  274.117330][ T5728] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  274.128537][ T5728] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  274.231280][ T5635] usb 5-1: USB disconnect, device number 32
[  274.534104][ T5728] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  274.541635][ T5728] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  274.552442][ T5728] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  274.564153][ T5728] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  274.575331][ T5728] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  274.693958][ T5714] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  274.805095][ T5639] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  274.855563][   T29] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  274.913916][ T5635] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  274.963195][ T5728] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  274.963697][ T5714] usb 4-1: Using ep0 maxpacket: 32
[  274.970714][ T5728] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  274.970748][ T5728] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  274.970775][ T5728] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  274.982188][ T5714] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  274.986648][ T5728] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  275.036824][ T5714] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  275.045626][ T5714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  275.054668][ T5714] usb 4-1: config 1 has no interface number 0
[  275.061243][ T5714] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  275.072357][ T5639] usb 5-1: Using ep0 maxpacket: 16
[  275.077788][ T5714] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  275.091313][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  275.101843][ T5714] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  275.111420][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.120958][ T5639] usb 5-1: unable to get BOS descriptor or descriptor too short
[  275.129862][ T5639] usb 5-1: config 4 has an invalid interface number: 86 but max is 0
[  275.138206][ T5635] usb 1-1: Using ep0 maxpacket: 32
[  275.145326][ T5639] usb 5-1: config 4 has no interface number 0
[  275.151640][ T5639] usb 5-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10
[  275.164127][ T5639] usb 5-1: config 4 interface 86 has no altsetting 0
[  275.172536][ T5635] usb 1-1: config 151 has too many interfaces: 37, using maximum allowed: 32
[  275.182108][ T5635] usb 1-1: config 151 has 1 interface, different from the descriptor's value: 37
[  275.198755][ T5714] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  275.207182][ T5635] usb 1-1: config 151 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.221310][ T5635] usb 1-1: config 151 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.231513][ T5635] usb 1-1: config 151 interface 0 has no altsetting 0
[  275.239440][ T5635] usb 1-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00
[  275.248790][ T5635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.257850][ T5639] usb 5-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb
[  275.268629][ T5639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.278421][ T5639] usb 5-1: Product: syz
[  275.282860][ T5639] usb 5-1: Manufacturer: syz
[  275.287633][ T5639] usb 5-1: SerialNumber: syz
[  275.312665][ T5635] usbhid 1-1:151.0: fixing wrong optional hid class descriptors count
[  275.406005][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.415677][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.426944][ T8414] __nla_validate_parse: 4 callbacks suppressed
[  275.426967][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.3.876'.
[  275.461015][ T5714] snd_usb_pod 4-1:1.1: set_interface failed
[  275.468350][ T5714] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  275.477051][ T5714] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71
[  275.500979][ T5714] usb 4-1: USB disconnect, device number 29
[  275.559029][ T5728] usb 3-1: string descriptor 0 read error: -71
[  275.565438][ T5728] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  275.574545][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.584327][   T29] usb 2-1: Using ep0 maxpacket: 32
[  275.669226][ T5728] usb 3-1: can't set config #168, error -71
[  275.677303][ T5728] usb 3-1: USB disconnect, device number 23
[  275.879361][ T5635] evision 0003:320F:5041.000C: unknown main item tag 0x0
[  275.887166][ T5635] evision 0003:320F:5041.000C: unknown main item tag 0x0
[  275.904676][ T5635] evision 0003:320F:5041.000C: unknown main item tag 0x0
[  275.913284][ T5635] evision 0003:320F:5041.000C: unknown main item tag 0x0
[  275.923161][ T5635] evision 0003:320F:5041.000C: unknown main item tag 0x0
[  275.930966][ T5635] evision 0003:320F:5041.000C: unknown main item tag 0x0
[  275.939329][ T5635] evision 0003:320F:5041.000C: unknown main item tag 0x0
[  275.947200][ T5635] evision 0003:320F:5041.000C: unknown main item tag 0x0
[  275.955676][ T5635] evision 0003:320F:5041.000C: unknown main item tag 0x0
[  275.963014][ T5635] evision 0003:320F:5041.000C: unknown main item tag 0x0
[  275.972989][ T5635] evision 0003:320F:5041.000C: reserved main item tag 0xe
[  275.987679][ T5635] evision 0003:320F:5041.000C: hidraw0: USB HID v0.81 Device [HID 320f:5041] on usb-dummy_hcd.0-1/input0
[  276.149014][ T5728] usb 1-1: USB disconnect, device number 27
[  276.232698][   T29] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  276.240889][   T29] usb 2-1: config 0 has no interface number 0
[  276.252732][   T29] usb 2-1: config 0 interface 12 has no altsetting 0
[  276.568674][ T5729] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  277.124687][   T29] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  277.134261][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.142315][   T29] usb 2-1: Product: syz
[  277.146512][   T29] usb 2-1: Manufacturer: syz
[  277.151161][   T29] usb 2-1: SerialNumber: syz
[  277.160648][   T29] usb 2-1: config 0 descriptor??
[  277.237211][ T5729] usb 4-1: Using ep0 maxpacket: 32
[  277.263546][   T30] audit: type=1326 audit(1785930318.391:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.2.887" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8059f9e0d9 code=0x0
[  277.534864][ T5639] cypress_m8 5-1:4.86: DeLorme Earthmate USB converter detected
[  277.570756][ T5639] usb 5-1: DeLorme Earthmate USB converter now attached to ttyUSB0
[  277.602859][ T5639] usb 5-1: USB disconnect, device number 33
[  277.644193][ T5639] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0
[  277.654591][ T5639] cypress_m8 5-1:4.86: device disconnected
[  278.041701][ T8459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.891'.
[  278.053399][ T8459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  278.061669][ T8459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.891'.
[  278.119787][ T5729] usb 4-1: unable to get BOS descriptor or descriptor too short
[  278.293776][ T8465] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  278.357198][ T8467] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  278.565813][   T29] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  278.574169][   T29] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  278.581519][   T29] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  278.589201][   T29] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  278.600331][ T5729] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  278.610484][ T5729] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  278.619505][ T5721] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  278.631956][   T29] usb 2-1: USB disconnect, device number 21
[  279.214621][ T5721] usb 5-1: Using ep0 maxpacket: 32
[  279.220188][   T29] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  279.410379][ T8489] netlink: 'syz.3.903': attribute type 3 has an invalid length.
[  279.541043][ T5729] usb 4-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40
[  279.550194][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.558241][ T5729] usb 4-1: Product: syz
[  279.593659][ T5635] usb 1-1: new low-speed USB device number 28 using dummy_hcd
[  279.650142][ T5729] usb 4-1: can't set config #1, error -71
[  279.657742][ T5729] usb 4-1: USB disconnect, device number 30
[  279.865876][ T5721] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  279.874327][ T5721] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  279.882987][ T5721] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  279.891987][ T5721] usb 5-1: config 1 has no interface number 0
[  279.898180][ T5721] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  279.909084][ T5721] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  279.922070][ T5721] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  279.931165][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.942534][ T5635] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  279.950560][ T5635] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  279.962662][ T5635] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  279.974929][ T5635] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  279.986517][ T5635] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  280.038284][ T5635] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  280.049503][ T5635] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  280.061286][ T5635] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  280.073627][ T5635] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  280.085403][ T5635] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  280.098494][ T5635] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  280.106607][ T5635] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  280.119743][ T5635] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  280.138060][ T5635] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  280.149968][ T5635] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  280.165353][ T5635] usb 1-1: string descriptor 0 read error: -22
[  280.172220][ T5635] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  280.183239][ T5635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.206618][ T5635] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  280.235692][ T5721] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  280.469838][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  280.481110][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  280.491254][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  280.501556][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  280.513945][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  280.558500][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.571141][   T29] usb 2-1: config index 0 descriptor too short (expected 65432, got 40)
[  280.579586][   T29] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  280.589735][   T29] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  280.608165][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.642765][ T8461] netlink: 32 bytes leftover after parsing attributes in process `syz.4.892'.
[  280.685160][ T5721] snd_usb_pod 5-1:1.1: set_interface failed
[  280.691405][ T5721] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  280.721931][ T5721] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[  280.738807][ T5721] usb 5-1: USB disconnect, device number 34
[  280.795896][   T29] usb 2-1: string descriptor 0 read error: -71
[  280.802291][   T29] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  280.811388][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.837704][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'.
[  280.910782][   T29] usb 2-1: can't set config #1, error -71
[  280.923694][   T29] usb 2-1: USB disconnect, device number 22
[  280.976950][ T8516] FAULT_INJECTION: forcing a failure.
[  280.976950][ T8516] name failslab, interval 1, probability 0, space 0, times 0
[  280.989625][ T8516] CPU: 1 UID: 0 PID: 8516 Comm: syz.2.911 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  280.989649][ T8516] Tainted: [L]=SOFTLOCKUP
[  280.989654][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  280.989665][ T8516] Call Trace:
[  280.989672][ T8516]  <TASK>
[  280.989680][ T8516]  dump_stack_lvl+0xe8/0x150
[  280.989727][ T8516]  should_fail_ex+0x40c/0x560
[  280.989780][ T8516]  should_failslab+0xa8/0x100
[  280.989813][ T8516]  __kmalloc_node_noprof+0x105/0x740
[  280.989839][ T8516]  ? crypto_alg_lookup+0x3d3/0x450
[  280.989861][ T8516]  ? crypto_create_tfm_node+0x81/0x3c0
[  280.989888][ T8516]  ? crypto_create_tfm_node+0x81/0x3c0
[  280.989908][ T8516]  crypto_create_tfm_node+0x81/0x3c0
[  280.989927][ T8516]  crypto_alloc_tfm_node+0x169/0x3e0
[  280.989949][ T8516]  software_key_query+0x40d/0xe20
[  280.989980][ T8516]  ? __pfx_software_key_query+0x10/0x10
[  280.990003][ T8516]  ? __might_fault+0xaf/0x130
[  280.990036][ T8516]  keyctl_pkey_params_get_2+0x23d/0x4b0
[  280.990059][ T8516]  ? __pfx_keyctl_pkey_params_get_2+0x10/0x10
[  280.990081][ T8516]  ? get_pid_task+0x20/0x1f0
[  280.990113][ T8516]  keyctl_pkey_e_d_s+0xce/0x310
[  280.990134][ T8516]  ? __pfx_keyctl_pkey_e_d_s+0x10/0x10
[  280.990164][ T8516]  __se_sys_keyctl+0x494/0x9d0
[  280.990180][ T8516]  ? __pfx___se_sys_keyctl+0x10/0x10
[  280.990192][ T8516]  ? __mutex_unlock_slowpath+0x731/0x900
[  280.990215][ T8516]  ? __fget_files+0x2a/0x420
[  280.990237][ T8516]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  280.990257][ T8516]  ? __fget_files+0x3a2/0x420
[  280.990282][ T8516]  ? fput+0xa0/0xd0
[  280.990301][ T8516]  ? ksys_write+0x242/0x270
[  280.990317][ T8516]  ? __pfx_ksys_write+0x10/0x10
[  280.990362][ T8516]  ? __x64_sys_keyctl+0x20/0xc0
[  280.990375][ T8516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.990391][ T8516]  do_syscall_64+0x174/0x580
[  280.990411][ T8516]  ? trace_irq_disable+0x3b/0x140
[  280.990430][ T8516]  ? clear_bhb_loop+0x40/0x90
[  280.990448][ T8516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.990463][ T8516] RIP: 0033:0x7f8059f9e0d9
[  280.990478][ T8516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.990491][ T8516] RSP: 002b:00007f805ae30028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  280.990507][ T8516] RAX: ffffffffffffffda RBX: 00007f805a225fa0 RCX: 00007f8059f9e0d9
[  280.990518][ T8516] RDX: 0000200000000840 RSI: 0000200000000180 RDI: 000000000000001a
[  280.990528][ T8516] RBP: 00007f805ae30090 R08: 0000000000000000 R09: 0000000000000000
[  280.990538][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  280.990547][ T8516] R13: 00007f805a226038 R14: 00007f805a225fa0 R15: 00007f805a34fa48
[  280.990570][ T8516]  </TASK>
[  281.353716][ T5728] usb 1-1: USB disconnect, device number 28
[  281.791441][ T8529] Cannot find map_set index 0 as target
[  281.904124][ T5635] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  282.185845][ T5635] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  282.214051][ T5635] usb 3-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40
[  282.232210][ T5635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.241101][ T5635] usb 3-1: Product: syz
[  282.254719][ T5635] usb 3-1: Manufacturer: syz
[  282.260661][ T5635] usb 3-1: SerialNumber: syz
[  282.308743][ T8540] No such timeout policy "syz1"
[  282.561350][ T5635] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  282.595634][ T5635] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  282.611925][ T5635] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  282.621748][ T8553] fuse: Bad value for 'rootmode'
[  282.765116][ T5635] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  282.790937][ T5635] usb 3-1: USB disconnect, device number 24
[  282.838065][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  282.872901][ T5728] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  282.977302][   T29] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  283.087093][ T5721] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  283.353794][ T5635] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  283.484173][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  283.515385][ T5635] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  283.526072][ T5635] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  283.536844][ T5728] usb 1-1: Using ep0 maxpacket: 32
[  283.538908][ T5635] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  283.557477][ T5635] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  283.566945][ T5635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.575328][ T5635] usb 5-1: Product: syz
[  283.579998][ T5635] usb 5-1: Manufacturer: syz
[  283.584805][ T5635] usb 5-1: SerialNumber: syz
[  283.593142][ T5635] usb 5-1: config 0 descriptor??
[  283.601765][ T8559] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  283.609312][ T8559] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  283.619397][ T5635] usb 5-1: ucan: probing device on interface #0
[  283.656199][ T8561] binder: 8560:8561 unknown command 0
[  283.661687][ T8561] binder: 8560:8561 ioctl c0306201 200000000180 returned -22
[  283.780982][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.931'.
[  283.791645][ T8565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  283.799243][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.931'.
[  283.827085][ T5635] usb 5-1: ucan: could not read protocol version, ret=0
[  283.834792][ T5635] usb 5-1: ucan: probe failed; try to update the device firmware
[  284.157852][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.928'.
[  284.189134][ T5728] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  284.197585][ T5728] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  284.206240][ T5728] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  284.215204][ T5728] usb 1-1: config 1 has no interface number 0
[  284.221974][ T5728] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  284.232861][ T5728] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  284.245764][ T5728] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  284.254884][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.381617][ T8573] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  284.412317][ T5728] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  284.638807][ T5721] usb 2-1: not running at top speed; connect to a high speed hub
[  284.662417][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.671288][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.745412][ T5728] snd_usb_pod 1-1:1.1: set_interface failed
[  284.751539][ T5728] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  284.758881][ T5728] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71
[  284.770724][ T5728] usb 1-1: USB disconnect, device number 29
[  284.967210][   T29] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  284.976442][   T29] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  284.984525][   T29] usb 4-1: Product: syz
[  284.988718][   T29] usb 4-1: SerialNumber: syz
[  284.998472][   T29] usb 4-1: config 0 descriptor??
[  285.184246][ T5721] usb 2-1: config 5 has an invalid interface number: 101 but max is 3
[  285.192695][ T5721] usb 2-1: config 5 has an invalid interface number: 94 but max is 3
[  285.200787][ T5721] usb 2-1: config 5 has an invalid interface number: 81 but max is 3
[  285.208879][ T5721] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping
[  285.217608][ T5721] usb 2-1: config 5 has an invalid interface number: 85 but max is 3
[  285.225705][ T5721] usb 2-1: config 5 has an invalid interface number: 94 but max is 3
[  285.233811][ T5721] usb 2-1: config 5 has no interface number 0
[  285.239942][ T5721] usb 2-1: config 5 has no interface number 1
[  285.246073][ T5721] usb 2-1: config 5 has no interface number 2
[  285.252204][ T5721] usb 2-1: config 5 has no interface number 3
[  285.274732][ T5721] usb 2-1: config 5 interface 101 altsetting 11 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  285.299469][ T5721] usb 2-1: config 5 interface 101 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[  285.310520][ T5721] usb 2-1: config 5 interface 101 altsetting 11 endpoint 0xA has invalid wMaxPacketSize 0
[  285.320472][ T5721] usb 2-1: config 5 interface 101 altsetting 11 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  285.331653][ T5721] usb 2-1: config 5 interface 101 altsetting 11 has a duplicate endpoint with address 0xD, skipping
[  285.342503][ T5721] usb 2-1: config 5 interface 94 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[  285.353160][ T5721] usb 2-1: config 5 interface 94 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 11
[  285.366384][ T5721] usb 2-1: config 5 interface 81 altsetting 51 has a duplicate endpoint with address 0x7, skipping
[  285.377125][ T5721] usb 2-1: config 5 interface 81 altsetting 51 has an invalid descriptor for endpoint zero, skipping
[  285.388041][ T5721] usb 2-1: config 5 interface 81 altsetting 51 endpoint 0x1 has an invalid bInterval 119, changing to 4
[  285.411667][ T5721] usb 2-1: config 5 interface 81 altsetting 51 has a duplicate endpoint with address 0x89, skipping
[  285.422639][ T5721] usb 2-1: config 5 interface 81 altsetting 51 has a duplicate endpoint with address 0xB, skipping
[  285.433401][   T30] audit: type=1326 audit(1785930326.571:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.0.934" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  285.457540][   T30] audit: type=1326 audit(1785930326.571:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.0.934" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  285.481683][   T30] audit: type=1326 audit(1785930326.571:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.0.934" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  285.505728][   T30] audit: type=1326 audit(1785930326.571:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.0.934" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  285.541171][ T5721] usb 2-1: config 5 interface 81 altsetting 51 has a duplicate endpoint with address 0xA, skipping
[  285.551947][ T5721] usb 2-1: config 5 interface 81 altsetting 51 has 9 endpoint descriptors, different from the interface descriptor's value: 26
[  285.566142][ T5721] usb 2-1: config 5 interface 85 altsetting 16 has a duplicate endpoint with address 0xD, skipping
[  285.576906][ T5721] usb 2-1: config 5 interface 85 altsetting 16 has a duplicate endpoint with address 0xA, skipping
[  285.587694][ T5721] usb 2-1: config 5 interface 85 altsetting 16 has an invalid descriptor for endpoint zero, skipping
[  285.601223][   T30] audit: type=1326 audit(1785930326.571:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.0.934" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  285.602721][   T29] hso 4-1:0.0: Failed to find BULK eps
[  285.627772][   T30] audit: type=1326 audit(1785930326.571:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.0.934" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  285.637477][ T5721] usb 2-1: config 5 interface 85 altsetting 16 has an invalid descriptor for endpoint zero, skipping
[  285.668819][   T30] audit: type=1326 audit(1785930326.571:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.0.934" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  285.696580][ T5721] usb 2-1: config 5 interface 85 altsetting 16 has an invalid descriptor for endpoint zero, skipping
[  285.709408][   T30] audit: type=1326 audit(1785930326.571:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.0.934" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  285.712938][ T5721] usb 2-1: config 5 interface 85 altsetting 16 has an endpoint descriptor with address 0xD8, changing to 0x88
[  285.740394][   T30] audit: type=1326 audit(1785930326.621:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.0.934" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  285.761914][ T5721] usb 2-1: config 5 interface 85 altsetting 16 endpoint 0x88 has invalid maxpacket 10996, setting to 64
[  285.812553][   T30] audit: type=1326 audit(1785930326.621:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.0.934" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  285.863911][ T5721] usb 2-1: config 5 interface 85 altsetting 16 has a duplicate endpoint with address 0x5, skipping
[  285.874712][ T5721] usb 2-1: config 5 interface 85 altsetting 16 has a duplicate endpoint with address 0x2, skipping
[  285.905526][ T5721] usb 2-1: config 5 interface 85 altsetting 16 has 10 endpoint descriptors, different from the interface descriptor's value: 9
[  285.907276][ T5635] usb 4-1: USB disconnect, device number 31
[  285.918767][ T5721] usb 2-1: config 5 interface 94 altsetting 135 has a duplicate endpoint with address 0x6, skipping
[  285.918802][ T5721] usb 2-1: config 5 interface 94 altsetting 135 has a duplicate endpoint with address 0x2, skipping
[  285.918828][ T5721] usb 2-1: config 5 interface 94 altsetting 135 has a duplicate endpoint with address 0xD, skipping
[  285.918860][ T5721] usb 2-1: config 5 interface 94 altsetting 135 has an invalid descriptor for endpoint zero, skipping
[  285.918883][ T5721] usb 2-1: config 5 interface 101 has no altsetting 0
[  285.918903][ T5721] usb 2-1: config 5 interface 94 has no altsetting 0
[  285.918924][ T5721] usb 2-1: config 5 interface 81 has no altsetting 0
[  285.918942][ T5721] usb 2-1: config 5 interface 85 has no altsetting 0
[  286.124117][ T5721] usb 2-1: string descriptor 0 read error: -71
[  286.130535][ T5721] usb 2-1: New USB device found, idVendor=1e2d, idProduct=0082, bcdDevice=dc.3c
[  286.139662][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.267949][ T5721] usb 2-1: can't set config #5, error -71
[  286.311863][ T5721] usb 2-1: USB disconnect, device number 23
[  286.369865][ T8591] syzkaller0: entered promiscuous mode
[  286.375522][ T8591] syzkaller0: entered allmulticast mode
[  286.408724][ T8591] tipc: Started in network mode
[  286.413701][ T8591] tipc: Node identity 72ffc1a17135, cluster identity 4711
[  286.421208][ T8591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.573698][   T10] usb 5-1: USB disconnect, device number 35
[  287.137074][ T5721] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  287.173647][ T5639] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  287.446026][ T5639] usb 1-1: Using ep0 maxpacket: 32
[  287.447991][ T5639] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  287.448022][ T5639] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  287.448046][ T5639] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  287.448069][ T5639] usb 1-1: config 1 has no interface number 0
[  287.448113][ T5639] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  287.448142][ T5639] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  287.448186][ T5639] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  287.448213][ T5639] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.455844][   T29] tipc: Node number set to 63619489
[  287.499089][ T5639] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  287.559549][   T10] usb 5-1: new low-speed USB device number 36 using dummy_hcd
[  287.694289][ T8621] xt_hashlimit: size too large, truncated to 1048576
[  287.753960][ T8619] netlink: 'syz.3.950': attribute type 1 has an invalid length.
[  287.796580][ T5721] usb 2-1: Using ep0 maxpacket: 8
[  287.859811][ T8619] bond1: entered promiscuous mode
[  287.865522][ T8619] 8021q: adding VLAN 0 to HW filter on device bond1
[  287.875201][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  287.891722][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  287.952788][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  287.981637][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  287.995927][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  288.014946][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.015443][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  288.031730][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  288.046258][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  288.058487][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.066914][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  288.080041][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  288.129994][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  288.145893][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  288.163240][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  288.176444][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  288.189123][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  288.208139][ T8609] __nla_validate_parse: 1 callbacks suppressed
[  288.208160][ T8609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.944'.
[  288.245536][ T5639] snd_usb_pod 1-1:1.1: set_interface failed
[  288.252229][   T10] usb 5-1: string descriptor 0 read error: -22
[  288.258965][ T5639] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  288.266398][   T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  288.275750][ T5639] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71
[  288.285992][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.300198][ T5639] usb 1-1: USB disconnect, device number 30
[  288.327507][   T10] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  288.343975][ T5714] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  288.504424][ T5721] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  288.596881][ T5714] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  288.609350][ T5714] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  288.622575][ T5714] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  288.639756][ T5714] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  288.650083][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.658647][ T5714] usb 3-1: Product: syz
[  288.665578][ T5714] usb 3-1: Manufacturer: syz
[  288.670383][ T5714] usb 3-1: SerialNumber: syz
[  288.680109][ T5714] usb 3-1: config 0 descriptor??
[  288.686513][ T8631] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  288.702201][ T8631] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  288.712352][ T5714] usb 3-1: ucan: probing device on interface #0
[  288.771580][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'.
[  288.783281][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'.
[  288.792826][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'.
[  288.802399][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'.
[  288.811741][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'.
[  288.972944][ T5714] usb 3-1: ucan: could not read protocol version, ret=0
[  288.984964][ T5714] usb 3-1: ucan: probe failed; try to update the device firmware
[  289.246046][ T5639] usb 5-1: USB disconnect, device number 36
[  289.276258][ T8652] kernel read not supported for file /À 
œ7³ÏüâW)«s“§Ç!Q�öì¥fsõ‡r X%ÔàÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|�Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 8652 comm: syz.3.958)
[  289.368551][ T8590] tipc: Resetting bearer <eth:syzkaller0>
[  289.396874][ T8590] tipc: Disabling bearer <eth:syzkaller0>
[  289.532120][ T5721] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  289.541264][ T5721] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  289.549410][ T5721] usb 2-1: Product: syz
[  289.553617][ T5721] usb 2-1: Manufacturer: syz
[  289.593633][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'.
[  289.634630][ T5721] usb 2-1: can't set config #1, error -71
[  289.642831][ T5721] usb 2-1: USB disconnect, device number 24
[  289.705220][ T8662] netlink: 'syz.1.960': attribute type 4 has an invalid length.
[  291.620007][ T5721] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  291.858667][   T29] usb 3-1: USB disconnect, device number 25
[  292.070178][ T5721] usb 4-1: device descriptor read/64, error -71
[  292.152936][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'.
[  292.380476][ T8694] fuse: Bad value for 'fd'
[  292.399274][ T5721] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  292.459201][ T8687] syz.1.969 (8687): drop_caches: 2
[  292.850209][ T5721] usb 4-1: device descriptor read/64, error -71
[  292.958461][ T5721] usb usb4-port1: attempt power cycle
[  293.350853][ T8719] mmap: syz.0.980 (8719) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  293.416629][ T5721] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  293.494207][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.981'.
[  293.855957][ T5721] usb 4-1: device descriptor read/8, error -71
[  294.118931][ T8738] FAULT_INJECTION: forcing a failure.
[  294.118931][ T8738] name failslab, interval 1, probability 0, space 0, times 0
[  294.131638][ T8738] CPU: 1 UID: 0 PID: 8738 Comm: syz.4.985 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  294.131667][ T8738] Tainted: [L]=SOFTLOCKUP
[  294.131673][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  294.131684][ T8738] Call Trace:
[  294.131691][ T8738]  <TASK>
[  294.131700][ T8738]  dump_stack_lvl+0xe8/0x150
[  294.131733][ T8738]  should_fail_ex+0x40c/0x560
[  294.131760][ T8738]  should_failslab+0xa8/0x100
[  294.131789][ T8738]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  294.131813][ T8738]  ? dst_alloc+0x105/0x170
[  294.131835][ T8738]  ? dst_alloc+0x105/0x170
[  294.131863][ T8738]  dst_alloc+0x105/0x170
[  294.131889][ T8738]  ip_route_input_rcu+0x20ca/0x3190
[  294.131917][ T8738]  ? __pfx_ip_route_input_rcu+0x10/0x10
[  294.131954][ T8738]  ? ipt_do_table+0x137f/0x15d0
[  294.131976][ T8738]  ? sock_def_readable+0xae/0x550
[  294.132005][ T8738]  ? ip_route_input_noref+0xad/0x270
[  294.132024][ T8738]  ip_route_input_noref+0x17c/0x270
[  294.132046][ T8738]  ? __pfx_ip_route_input_noref+0x10/0x10
[  294.132070][ T8738]  ? ipt_do_table+0x2b9/0x15d0
[  294.132092][ T8738]  ? __pfx_ipt_do_table+0x10/0x10
[  294.132116][ T8738]  ip_rcv_finish_core+0x593/0x1c00
[  294.132152][ T8738]  ip_rcv_finish+0x14c/0x2a0
[  294.132178][ T8738]  NF_HOOK+0x336/0x3c0
[  294.132217][ T8738]  ? __pfx_ip_rcv_finish+0x10/0x10
[  294.132240][ T8738]  ? NF_HOOK+0x9e/0x3c0
[  294.132263][ T8738]  ? __pfx_NF_HOOK+0x10/0x10
[  294.132290][ T8738]  ? __pfx_ip_rcv_finish+0x10/0x10
[  294.132323][ T8738]  ? netif_receive_skb+0x102/0xbf0
[  294.132351][ T8738]  ? __pfx_ip_rcv+0x10/0x10
[  294.132374][ T8738]  netif_receive_skb+0x45b/0xbf0
[  294.132403][ T8738]  ? __pfx_netif_receive_skb+0x10/0x10
[  294.132430][ T8738]  ? rcu_is_watching+0x15/0xb0
[  294.132445][ T8738]  ? tun_rx_batched+0x185/0x790
[  294.132463][ T8738]  tun_rx_batched+0x1de/0x790
[  294.132485][ T8738]  ? __pfx_tun_rx_batched+0x10/0x10
[  294.132502][ T8738]  ? tun_get_user+0x2717/0x4370
[  294.132520][ T8738]  ? tun_get_user+0x2717/0x4370
[  294.132537][ T8738]  ? tun_get_user+0x23cb/0x4370
[  294.132552][ T8738]  ? tun_get_user+0x23cb/0x4370
[  294.132567][ T8738]  ? __local_bh_enable_ip+0xd0/0x130
[  294.132591][ T8738]  ? tun_get_user+0x2717/0x4370
[  294.132607][ T8738]  ? tun_get_user+0x2717/0x4370
[  294.132624][ T8738]  tun_get_user+0x2b44/0x4370
[  294.132663][ T8738]  ? aa_file_perm+0x4ed/0x15f0
[  294.132687][ T8738]  ? __pfx_tun_get_user+0x10/0x10
[  294.132720][ T8738]  ? __lock_acquire+0x683/0x2cf0
[  294.132765][ T8738]  ? ref_tracker_alloc+0x341/0x4b0
[  294.132792][ T8738]  ? get_pid_task+0x20/0x1f0
[  294.132825][ T8738]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  294.132855][ T8738]  ? tun_get+0x1c/0x2f0
[  294.132885][ T8738]  ? tun_get+0x1c/0x2f0
[  294.132918][ T8738]  ? tun_get+0x1c/0x2f0
[  294.132945][ T8738]  ? tun_get+0x1c/0x2f0
[  294.132977][ T8738]  tun_chr_write_iter+0x113/0x200
[  294.133009][ T8738]  vfs_write+0x612/0xba0
[  294.133037][ T8738]  ? __pfx_vfs_write+0x10/0x10
[  294.133065][ T8738]  ? __fget_files+0x2a/0x420
[  294.133096][ T8738]  ksys_write+0x150/0x270
[  294.133116][ T8738]  ? __pfx_ksys_write+0x10/0x10
[  294.133140][ T8738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.133159][ T8738]  do_syscall_64+0x174/0x580
[  294.133181][ T8738]  ? trace_irq_disable+0x3b/0x140
[  294.133214][ T8738]  ? clear_bhb_loop+0x40/0x90
[  294.133236][ T8738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.133254][ T8738] RIP: 0033:0x7f64b115e90e
[  294.133272][ T8738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  294.133289][ T8738] RSP: 002b:00007f64b20f3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  294.133309][ T8738] RAX: ffffffffffffffda RBX: 00007f64b20f46c0 RCX: 00007f64b115e90e
[  294.133321][ T8738] RDX: 000000000000003e RSI: 0000200000000340 RDI: 00000000000000c8
[  294.133331][ T8738] RBP: 00007f64b20f4090 R08: 0000000000000000 R09: 0000000000000000
[  294.133341][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.133351][ T8738] R13: 00007f64b1426038 R14: 00007f64b1425fa0 R15: 00007f64b154fa48
[  294.133376][ T8738]  </TASK>
[  294.676393][ T5721] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  294.740808][ T8743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.987'.
[  294.752338][ T8743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  294.759928][ T8743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.987'.
[  294.772074][ T8741] fuse: Unknown parameter 'audit'
[  294.933790][ T5721] usb 4-1: device not accepting address 35, error -71
[  294.941034][ T5721] usb usb4-port1: unable to enumerate USB device
[  295.097913][ T8758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.993'.
[  295.106957][ T8758] openvswitch: netlink: EtherType 300 is less than min 600
[  295.120340][ T5639] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  295.310796][ T8764] FAULT_INJECTION: forcing a failure.
[  295.310796][ T8764] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.323944][ T8764] CPU: 1 UID: 0 PID: 8764 Comm: syz.3.996 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.324025][ T8764] Tainted: [L]=SOFTLOCKUP
[  295.324033][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  295.324046][ T8764] Call Trace:
[  295.324054][ T8764]  <TASK>
[  295.324063][ T8764]  dump_stack_lvl+0xe8/0x150
[  295.324102][ T8764]  should_fail_ex+0x40c/0x560
[  295.324135][ T8764]  _copy_from_iter+0x1d3/0x1660
[  295.324165][ T8764]  ? kmem_cache_alloc_node_noprof+0x1d1/0x610
[  295.324193][ T8764]  ? rcu_is_watching+0x15/0xb0
[  295.324215][ T8764]  ? trace_kmem_cache_alloc+0x29/0xe0
[  295.324243][ T8764]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  295.324270][ T8764]  ? __pfx__copy_from_iter+0x10/0x10
[  295.324299][ T8764]  ? __alloc_skb+0x276/0x7a0
[  295.324319][ T8764]  ? __alloc_skb+0x276/0x7a0
[  295.324344][ T8764]  ? netlink_sendmsg+0x650/0xb40
[  295.324370][ T8764]  ? skb_put+0x112/0x210
[  295.324396][ T8764]  netlink_sendmsg+0x6c0/0xb40
[  295.324434][ T8764]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.324465][ T8764]  ? aa_sock_msg_perm+0xf1/0x1b0
[  295.324516][ T8764]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.324542][ T8764]  sock_sendmsg_nosec+0x13a/0x180
[  295.324577][ T8764]  ____sys_sendmsg+0x54e/0x850
[  295.324610][ T8764]  ? __pfx_____sys_sendmsg+0x10/0x10
[  295.324645][ T8764]  ? import_iovec+0x73/0xa0
[  295.324669][ T8764]  ___sys_sendmsg+0x2a5/0x360
[  295.324694][ T8764]  ? __lock_acquire+0x683/0x2cf0
[  295.324728][ T8764]  ? __pfx____sys_sendmsg+0x10/0x10
[  295.324788][ T8764]  ? __fget_files+0x2a/0x420
[  295.324814][ T8764]  ? __fget_files+0x3a2/0x420
[  295.324850][ T8764]  __x64_sys_sendmsg+0x1b1/0x290
[  295.324877][ T8764]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  295.324920][ T8764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.324941][ T8764]  do_syscall_64+0x174/0x580
[  295.324969][ T8764]  ? trace_irq_disable+0x3b/0x140
[  295.324996][ T8764]  ? clear_bhb_loop+0x40/0x90
[  295.325022][ T8764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.325044][ T8764] RIP: 0033:0x7fae7899e0d9
[  295.325064][ T8764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.325081][ T8764] RSP: 002b:00007fae798f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  295.325102][ T8764] RAX: ffffffffffffffda RBX: 00007fae78c25fa0 RCX: 00007fae7899e0d9
[  295.325117][ T8764] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  295.325129][ T8764] RBP: 00007fae798f9090 R08: 0000000000000000 R09: 0000000000000000
[  295.325142][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.325154][ T8764] R13: 00007fae78c26038 R14: 00007fae78c25fa0 R15: 00007fae78d4fa48
[  295.325186][ T8764]  </TASK>
[  295.383994][ T5639] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  295.658797][ T5639] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  295.668632][ T5639] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.707901][ T5639] usb 1-1: config 0 descriptor??
[  295.837543][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.999'.
[  295.865305][ T8772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  295.872870][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.999'.
[  296.170416][ T8780] xt_hashlimit: size too large, truncated to 1048576
[  296.358312][ T5729] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  296.401419][ T8785] openvswitch: netlink: Message has 13080 unknown bytes.
[  296.408727][ T8785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.497062][ T5639] ath6kl: mismatched byte count -752228286 vs. expected 12
[  296.511963][ T5639] ath6kl: Failed to init ath6kl core: -22
[  296.530983][ T5639] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22
[  296.635386][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'.
[  296.645314][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'.
[  296.654686][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'.
[  296.664163][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'.
[  296.810143][ T5721] usb 1-1: USB disconnect, device number 31
[  297.908863][ T5729] usb 5-1: unable to get BOS descriptor or descriptor too short
[  297.984031][ T8831] netlink: 'syz.0.1018': attribute type 4 has an invalid length.
[  298.131005][ T5729] usb 5-1: not running at top speed; connect to a high speed hub
[  298.333887][ T8836] CUSE: unknown device info "e"
[  298.375190][ T8836] CUSE: unknown device info "åìØÝPn¸Þ|’zQC*¯"
[  298.424726][ T8836] CUSE: unknown device info ">2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\�d�
+"
[  298.437151][ T8836] CUSE: unknown device info "Ýÿÿÿ"
[  298.442273][ T8836] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu	GìÂÏǪ|ÜQüUËœDv…F‰Ý,*pá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV:gYÓT¨»…ü€¬Rì[�€ZK
»ÍוÃy˜J”¥"
[  298.503208][ T8836] CUSE: DEVNAME unspecified
[  298.610139][ T5729] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  298.751664][ T8841] __nla_validate_parse: 9 callbacks suppressed
[  298.751685][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1022'.
[  298.770275][ T8841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.778006][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1022'.
[  298.852433][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1025'.
[  298.874517][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  298.893384][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  298.922219][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  298.932594][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  298.942241][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  299.081049][ T8853] netlink: 'syz.1.1027': attribute type 3 has an invalid length.
[  299.088887][ T8853] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1027'.
[  299.305832][ T8861] xt_hashlimit: size too large, truncated to 1048576
[  299.472711][ T5729] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  299.481903][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.489934][ T5729] usb 5-1: Product: syz
[  299.523851][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  299.585367][ T5729] usb 5-1: can't set config #1, error -71
[  299.593765][ T5729] usb 5-1: USB disconnect, device number 37
[  299.912359][ T5639] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  300.136548][ T5639] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.148009][ T5639] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.160949][ T5639] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  300.190241][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'.
[  300.201399][ T5639] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  300.211149][ T5639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.222730][ T5639] usb 2-1: config 0 descriptor??
[  300.370994][ T8881] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  300.501440][ T8884] FAULT_INJECTION: forcing a failure.
[  300.501440][ T8884] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  300.603574][ T8884] CPU: 1 UID: 0 PID: 8884 Comm: syz.3.1038 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  300.603612][ T8884] Tainted: [L]=SOFTLOCKUP
[  300.603620][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  300.603643][ T8884] Call Trace:
[  300.603652][ T8884]  <TASK>
[  300.603662][ T8884]  dump_stack_lvl+0xe8/0x150
[  300.603700][ T8884]  should_fail_ex+0x40c/0x560
[  300.603733][ T8884]  prepare_alloc_pages+0x230/0x650
[  300.603772][ T8884]  __alloc_frozen_pages_noprof+0x12f/0x380
[  300.603809][ T8884]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  300.603845][ T8884]  ? __pfx_policy_nodemask+0x10/0x10
[  300.603887][ T8884]  alloc_pages_mpol+0x212/0x380
[  300.603926][ T8884]  folio_alloc_mpol_noprof+0x39/0x160
[  300.603963][ T8884]  shmem_alloc_and_add_folio+0x43e/0xf60
[  300.603989][ T8884]  ? filemap_get_entry+0xcd/0x3f0
[  300.604022][ T8884]  ? __pfx_filemap_get_entry+0x10/0x10
[  300.604045][ T8884]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  300.604074][ T8884]  ? shmem_allowable_huge_orders+0x325/0x6c0
[  300.604105][ T8884]  shmem_get_folio_gfp+0x5da/0x16d0
[  300.604148][ T8884]  shmem_write_begin+0x16c/0x330
[  300.604180][ T8884]  generic_perform_write+0x2d5/0x8f0
[  300.604223][ T8884]  ? __pfx_generic_perform_write+0x10/0x10
[  300.604249][ T8884]  ? down_write+0x16d/0x200
[  300.604278][ T8884]  ? generic_write_checks_count+0x41a/0x520
[  300.604311][ T8884]  ? file_update_time_flags+0x3b3/0x4a0
[  300.604334][ T8884]  shmem_file_write_iter+0xf8/0x120
[  300.604360][ T8884]  __kernel_write_iter+0x44a/0x8f0
[  300.604388][ T8884]  ? __pfx___kernel_write_iter+0x10/0x10
[  300.604414][ T8884]  ? __asan_memset+0x22/0x50
[  300.604440][ T8884]  ? iov_iter_kvec+0xb8/0x180
[  300.604473][ T8884]  kernel_write+0x1f5/0x320
[  300.604499][ T8884]  ? __pfx_kernel_write+0x10/0x10
[  300.604521][ T8884]  ? __shmem_file_setup+0x315/0x370
[  300.604546][ T8884]  ? __pfx___shmem_file_setup+0x10/0x10
[  300.604577][ T8884]  ? big_key_preparse+0x200/0x500
[  300.604600][ T8884]  ? big_key_preparse+0x200/0x500
[  300.604633][ T8884]  big_key_preparse+0x3c3/0x500
[  300.604667][ T8884]  ? __pfx_big_key_preparse+0x10/0x10
[  300.604705][ T8884]  key_update+0x227/0x560
[  300.604729][ T8884]  ? irqentry_exit+0x218/0x8f0
[  300.604760][ T8884]  ? __pfx_key_update+0x10/0x10
[  300.604802][ T8884]  ? rep_movs_alternative+0x4a/0xa0
[  300.604826][ T8884]  keyctl_update_key+0xf6/0x140
[  300.604857][ T8884]  __se_sys_keyctl+0x617/0x9d0
[  300.604882][ T8884]  ? __pfx___se_sys_keyctl+0x10/0x10
[  300.604900][ T8884]  ? __mutex_unlock_slowpath+0x731/0x900
[  300.604932][ T8884]  ? __fget_files+0x2a/0x420
[  300.604961][ T8884]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  300.604988][ T8884]  ? __fget_files+0x3a2/0x420
[  300.605024][ T8884]  ? fput+0xa0/0xd0
[  300.605052][ T8884]  ? ksys_write+0x242/0x270
[  300.605075][ T8884]  ? __pfx_ksys_write+0x10/0x10
[  300.605103][ T8884]  ? __x64_sys_keyctl+0x20/0xc0
[  300.605122][ T8884]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.605146][ T8884]  do_syscall_64+0x174/0x580
[  300.605172][ T8884]  ? trace_irq_disable+0x3b/0x140
[  300.605200][ T8884]  ? clear_bhb_loop+0x40/0x90
[  300.605227][ T8884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.605248][ T8884] RIP: 0033:0x7fae7899e0d9
[  300.605268][ T8884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.605286][ T8884] RSP: 002b:00007fae798f9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  300.605308][ T8884] RAX: ffffffffffffffda RBX: 00007fae78c25fa0 RCX: 00007fae7899e0d9
[  300.605324][ T8884] RDX: 00002000000000c0 RSI: 000000002617fb58 RDI: 0000000000000002
[  300.605337][ T8884] RBP: 00007fae798f9090 R08: 0000000000000000 R09: 0000000000000000
[  300.605351][ T8884] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000002
[  300.605364][ T8884] R13: 00007fae78c26038 R14: 00007fae78c25fa0 R15: 00007fae78d4fa48
[  300.605398][ T8884]  </TASK>
[  301.178060][ T8867] No such timeout policy "s"
[  301.184750][ T8895] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  301.220623][ T8867] netlink: Failed to associated timeout policy 's'
[  301.240409][ T5639] usbhid 2-1:0.0: can't add hid device: -71
[  301.246959][ T5639] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  301.274777][ T5639] usb 2-1: USB disconnect, device number 25
[  301.819385][ T5714] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  302.018108][ T8923] IPv6: Can't replace route, no match found
[  302.047711][ T5714] usb 5-1: device descriptor read/64, error -71
[  302.363881][ T5714] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  302.514093][ T5714] usb 5-1: device descriptor read/64, error -71
[  302.634536][ T5714] usb usb5-port1: attempt power cycle
[  303.025973][ T5714] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  303.074392][ T5714] usb 5-1: device descriptor read/8, error -71
[  303.455693][ T5714] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  303.515618][ T5714] usb 5-1: device descriptor read/8, error -71
[  303.624095][ T5714] usb usb5-port1: unable to enumerate USB device
[  303.768896][ T8956] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  303.887946][ T8958] __nla_validate_parse: 16 callbacks suppressed
[  303.887970][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'.
[  304.189239][ T8971] trusted_key: syz.2.1070 sent an empty control message without MSG_MORE.
[  304.237784][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  304.237805][   T30] audit: type=1326 audit(1785930345.381:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.0.1066" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  304.287527][   T30] audit: type=1326 audit(1785930345.441:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.0.1066" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  304.312264][   T30] audit: type=1326 audit(1785930345.441:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.0.1066" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  304.341002][   T30] audit: type=1326 audit(1785930345.491:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.0.1066" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  304.365444][   T30] audit: type=1326 audit(1785930345.491:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.0.1066" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  304.404597][   T30] audit: type=1326 audit(1785930345.561:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.0.1066" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118a39e0d9 code=0x7ffc0000
[  304.581389][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'.
[  304.747355][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'.
[  305.078994][   T30] audit: type=1326 audit(1785930346.231:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.0.1075" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f118a39e0d9 code=0x0
[  305.235417][ T5639] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  305.497326][ T5639] usb 2-1: Using ep0 maxpacket: 16
[  305.524825][ T5639] usb 2-1: config 4 has an invalid interface number: 9 but max is 0
[  305.543460][ T5639] usb 2-1: config 4 has no interface number 0
[  305.553503][ T5639] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  305.573468][ T5639] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  305.593465][ T5639] usb 2-1: config 4 interface 9 has no altsetting 0
[  305.633650][ T5639] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  305.644415][ T5639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.663441][ T5639] usb 2-1: Product: syz
[  305.673617][ T5639] usb 2-1: Manufacturer: syz
[  305.679826][ T5639] usb 2-1: SerialNumber: syz
[  305.817873][ T8985] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  305.825209][ T8985] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  305.883592][ T5639] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  306.198927][ T5729] usb 2-1: USB disconnect, device number 26
[  306.241175][   T79] usb 2-1: Failed to submit usb control message: -71
[  306.329686][   T79] usb 2-1: unable to send the bmi data to the device: -71
[  306.428037][   T79] usb 2-1: unable to get target info from device
[  306.434549][   T79] usb 2-1: could not get target info (-71)
[  306.440736][   T79] usb 2-1: could not probe fw (-71)
[  306.565573][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'.
[  307.421728][ T5729] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  308.770988][ T5729] usb 1-1: config 160 has an invalid interface number: 110 but max is 0
[  308.779429][ T5729] usb 1-1: config 160 has no interface number 0
[  308.785784][ T5729] usb 1-1: config 160 interface 110 has no altsetting 0
[  309.669523][ T5729] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=20.a5
[  309.678668][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.686712][ T5729] usb 1-1: Product: syz
[  309.690916][ T5729] usb 1-1: Manufacturer: syz
[  309.695597][ T5729] usb 1-1: SerialNumber: syz
[  311.905394][ T5721] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  312.367362][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.374823][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.520650][ T9030] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  312.534892][ T9030] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.590448][ T5721] usb 4-1: Using ep0 maxpacket: 8
[  312.752389][ T5729] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.110/input/input13
[  312.799179][ T4980] bcm5974 1-1:160.110: could not read from device
[  313.134675][ T5721] usb 4-1: unable to read config index 0 descriptor/start: -71
[  313.142402][ T5721] usb 4-1: can't read configurations, error -71
[  313.635049][ T5729] usb 1-1: USB disconnect, device number 32
[  313.699370][ T4980] bcm5974 1-1:160.110: could not read from device
[  314.261464][   T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.274498][   T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.283512][   T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.292443][   T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.349233][ T9044] netlink: 'syz.1.1092': attribute type 4 has an invalid length.
[  314.594916][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[  314.740940][ T9049] team0: Device bridge0 is up. Set it down before adding it as a team port
[  314.820273][ T5721] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  314.939172][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'.
[  316.173912][ T5721] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  316.183756][ T5721] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  316.196776][ T5721] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  316.205852][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.846891][ T5721] usb 4-1: usb_control_msg returned -32
[  316.852583][ T5721] usbtmc 4-1:16.0: can't read capabilities
[  317.193080][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'.
[  317.866654][ T5721] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  317.963266][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  318.108683][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  318.115165][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  318.200629][ T5729] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  318.541921][ T5721] usb 5-1: Using ep0 maxpacket: 32
[  318.648321][ T5729] usb 1-1: device descriptor read/64, error -71
[  318.995661][ T5729] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  319.209525][ T5721] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  319.218464][ T5721] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  319.227116][ T5721] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  319.236100][ T5721] usb 5-1: config 1 has no interface number 0
[  319.242253][ T5721] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  319.253156][ T5721] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  319.266074][ T5721] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  319.275160][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.434394][ T5729] usb 1-1: device descriptor read/64, error -71
[  319.446561][ T5721] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  319.543082][ T5729] usb usb1-port1: attempt power cycle
[  319.994286][ T5729] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  320.446728][ T5729] usb 1-1: device descriptor read/8, error -71
[  320.786725][ T5729] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  321.371169][ T5721] snd_usb_pod 5-1:1.1: set_interface failed
[  321.377450][ T5721] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  321.384805][ T5721] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[  321.412862][ T5721] usb 5-1: USB disconnect, device number 42
[  322.281384][ T5729] usb 1-1: device descriptor read/8, error -71
[  322.469134][ T5729] usb usb1-port1: unable to enumerate USB device
[  324.276194][ T9140] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1103'.
[  324.425784][    T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!!
[  327.228503][ T9169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1104'.
[  327.239760][ T9169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1104'.
[  327.272424][ T9169] fuse: Unknown parameter 'group_i00000000000000000000'
[  327.305660][ T4945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  327.316385][ T4945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  327.326650][ T4945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  327.335796][ T4945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  327.343862][ T4945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  328.523581][ T5728] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  329.423712][ T4945] Bluetooth: hci5: command tx timeout
[  329.786207][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  329.798556][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  329.809368][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  329.820332][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  329.828972][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  329.866289][ T5728] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  329.874473][ T5728] usb 2-1: config 0 has no interface number 0
[  329.880653][ T5728] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  329.899676][ T5728] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  330.763778][ T5728] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  330.773118][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.781296][ T5728] usb 2-1: Product: syz
[  330.785506][ T5728] usb 2-1: Manufacturer: syz
[  330.790149][ T5728] usb 2-1: SerialNumber: syz
[  330.813638][ T5728] usb 2-1: config 0 descriptor??
[  331.551297][ T5636] Bluetooth: hci5: command tx timeout
[  332.782903][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  333.572719][ T5728] radio-si470x 2-1:0.35: this is not a si470x device.
[  333.701272][ T5636] Bluetooth: hci1: command tx timeout
[  333.707840][ T5636] Bluetooth: hci5: command tx timeout
[  334.494076][ T5728] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  336.150644][ T4945] Bluetooth: hci5: command tx timeout
[  336.156199][ T4945] Bluetooth: hci1: command tx timeout
[  338.283096][ T5636] Bluetooth: hci1: command tx timeout
[  339.367522][ T4945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  339.410157][ T4945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  339.419495][ T4945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  339.427683][ T4945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  339.435647][ T4945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  340.305874][ T4945] Bluetooth: hci1: command tx timeout
[  341.535569][ T4945] Bluetooth: hci4: command tx timeout
[  341.802865][ T1561] usb 2-1: USB disconnect, device number 27
[  342.009520][ T5729] usb 4-1: USB disconnect, device number 38
[  343.587869][ T9198] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1113'.
[  343.684104][ T4945] Bluetooth: hci4: command tx timeout
[  343.826751][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[  345.718516][ T4945] Bluetooth: hci2: command 0x0406 tx timeout
[  345.789642][ T4945] Bluetooth: hci4: command tx timeout
[  347.783366][    C0] sched: DL replenish lagged too much
[  347.905069][ T5636] Bluetooth: hci4: command tx timeout
[  349.600137][ T9209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1114'.
[  349.645615][ T9209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1114'.
[  349.703134][ T9209] fuse: Unknown parameter 'group_i00000000000000000000'
[  349.818831][ T6377] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.383245][ T5728] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  350.867080][ T9191] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.874300][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.882125][ T9191] bridge_slave_0: entered allmulticast mode
[  350.891036][ T9191] bridge_slave_0: entered promiscuous mode
[  350.899904][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.907127][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.938122][ T9170] bridge_slave_0: entered allmulticast mode
[  350.946333][ T9170] bridge_slave_0: entered promiscuous mode
[  350.971662][ T9191] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.978883][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.986195][ T9191] bridge_slave_1: entered allmulticast mode
[  350.995534][ T9191] bridge_slave_1: entered promiscuous mode
[  351.012763][ T9170] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.020074][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.027379][ T9170] bridge_slave_1: entered allmulticast mode
[  351.060960][ T9170] bridge_slave_1: entered promiscuous mode
[  351.184996][ T9191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.230594][ T9191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.239958][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.247306][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.254627][ T9182] bridge_slave_0: entered allmulticast mode
[  351.284891][ T9182] bridge_slave_0: entered promiscuous mode
[  351.294253][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.301458][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.308955][ T9182] bridge_slave_1: entered allmulticast mode
[  351.317181][ T9182] bridge_slave_1: entered promiscuous mode
[  351.328458][ T9170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.398288][ T9170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.414549][ T9191] team0: Port device team_slave_0 added
[  351.541972][ T6377] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.595363][ T9191] team0: Port device team_slave_1 added
[  351.650400][ T9182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.729143][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  351.738980][ T5728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  351.748677][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  351.758508][ T5728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  351.768359][ T5728] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  351.778534][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.798128][ T9182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.822952][ T5728] usb 2-1: config 0 descriptor??
[  351.864421][ T9170] team0: Port device team_slave_0 added
[  351.870999][ T9191] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.877996][ T9191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  351.907280][ T9191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.963711][ T9182] team0: Port device team_slave_0 added
[  351.973381][ T9182] team0: Port device team_slave_1 added
[  351.982793][ T9170] team0: Port device team_slave_1 added
[  352.009402][ T9191] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.016443][ T9191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.042371][ T9191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.129987][ T6377] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.262293][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.269332][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.322040][ T9170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.683749][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.690782][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.716999][ T9182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.741163][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.765099][ T5728] hdpvr 2-1:0.0: unexpected answer of status request, len -32
[  352.773706][ T5728] hdpvr 2-1:0.0: device init failed
[  352.779105][ T5728] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  352.823374][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.849441][ T9170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.930130][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.937296][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.963230][ T9182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.005970][ T9191] hsr_slave_0: entered promiscuous mode
[  354.013006][ T9191] hsr_slave_1: entered promiscuous mode
[  354.019619][ T9191] debugfs: 'hsr0' already exists in 'hsr'
[  354.025422][ T9191] Cannot create hsr debugfs directory
[  354.246828][ T6377] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.369802][ T9170] hsr_slave_0: entered promiscuous mode
[  354.376864][ T9170] hsr_slave_1: entered promiscuous mode
[  354.383552][ T9170] debugfs: 'hsr0' already exists in 'hsr'
[  354.389357][ T9170] Cannot create hsr debugfs directory
[  354.715771][ T9182] hsr_slave_0: entered promiscuous mode
[  354.717153][ T9182] hsr_slave_1: entered promiscuous mode
[  354.718062][ T9182] debugfs: 'hsr0' already exists in 'hsr'
[  354.718087][ T9182] Cannot create hsr debugfs directory
[  355.278783][ T6377] bridge_slave_1: left allmulticast mode
[  355.278911][ T6377] bridge_slave_1: left promiscuous mode
[  355.281116][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.297940][ T6377] bridge_slave_0: left allmulticast mode
[  355.297982][ T6377] bridge_slave_0: left promiscuous mode
[  355.298225][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.418015][   T29] usb 2-1: USB disconnect, device number 28
[  355.474677][ T6377] dvmrp8: left allmulticast mode
[  356.415813][ T6377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  356.439590][ T6377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  356.455860][ T6377] bond0 (unregistering): Released all slaves
[  356.509890][   T29] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  356.875848][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1
[  357.174395][   T29] usb 2-1: Using ep0 maxpacket: 32
[  357.204594][ T9191] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  357.289924][ T9191] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  357.306555][ T6377] tipc: Disabling bearer <eth:hsr0>
[  357.347940][ T6377] tipc: Left network mode
[  357.367490][ T9191] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  357.572241][ T9191] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  357.839392][   T29] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  357.847833][   T29] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  357.856472][   T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  357.865673][   T29] usb 2-1: config 1 has no interface number 0
[  357.874293][   T29] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  357.885232][   T29] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  357.904222][   T29] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  357.913413][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.068752][   T29] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  358.530371][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.539377][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.553937][ T9273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1117'.
[  358.715171][ T9191] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  358.780568][ T9191] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  358.797073][ T9191] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  358.828664][ T9191] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  359.186171][   T29] snd_usb_pod 2-1:1.1: set_interface failed
[  359.192550][   T29] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  359.199900][   T29] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71
[  359.220041][   T29] usb 2-1: USB disconnect, device number 29
[  359.549898][ T9170] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  359.576976][ T9170] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  359.613140][ T9170] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  359.661237][ T9170] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  359.672796][ T9170] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  359.689845][ T9170] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  360.033583][ T9191] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.053525][ T9191] 8021q: adding VLAN 0 to HW filter on device team0
[  360.272745][ T9170] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  361.616956][ T9170] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  361.630079][  T139] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.651183][  T139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.699274][  T139] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.706522][  T139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.719428][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2
[  372.979361][ T4945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  372.990403][ T4945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  372.999119][ T4945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  373.010899][ T4945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  373.019137][ T4945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  373.289790][ T9306] nfs: Unknown parameter ''
[  374.780499][ T6377] hsr_slave_0: left promiscuous mode
[  374.797373][ T6377] hsr_slave_1: left promiscuous mode
[  374.806046][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.813737][ T6377] batman_adv: batadv0: Removing interface: batadv_slave_0
[  374.858300][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  374.865866][ T6377] batman_adv: batadv0: Removing interface: batadv_slave_1
[  374.881057][ T6377] veth1_macvtap: left promiscuous mode
[  374.887131][ T6377] veth0_macvtap: left promiscuous mode
[  374.892855][ T6377] veth1_vlan: left promiscuous mode
[  374.898297][ T6377] veth0_vlan: left promiscuous mode
[  375.195170][ T4945] Bluetooth: hci0: command tx timeout
[  375.574938][ T6377] team0 (unregistering): Port device team_slave_1 removed
[  375.595968][ T6377] team0 (unregistering): Port device team_slave_0 removed
[  376.026147][ T9191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  376.036585][ T9191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  376.074497][ T9191] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.168161][ T9182] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  376.185601][ T9182] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  376.396675][ T9182] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  376.588465][ T9182] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  376.598908][ T9182] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  376.688728][ T9182] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  376.732648][ T9182] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  376.763633][ T9182] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  376.910330][ T9250] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  377.287766][ T4945] Bluetooth: hci0: command tx timeout
[  377.537447][ T9191] veth0_vlan: entered promiscuous mode
[  377.550631][ T9191] veth1_vlan: entered promiscuous mode
[  377.570292][ T9250] usb 2-1: Using ep0 maxpacket: 32
[  377.715590][ T9170] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.735491][ T9170] 8021q: adding VLAN 0 to HW filter on device team0
[  377.780588][ T9170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  377.828807][ T9170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  378.069079][  T139] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.076315][  T139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.087178][  T139] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.094419][  T139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.126878][ T9191] veth0_macvtap: entered promiscuous mode
[  378.217664][ T9170] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.281188][ T9250] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  378.294062][ T9250] usb 2-1: config 0 interface 0 has no altsetting 0
[  378.684446][ T9182] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.734156][ T9191] veth1_macvtap: entered promiscuous mode
[  378.759373][ T9191] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.771346][ T9191] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.141882][ T9182] 8021q: adding VLAN 0 to HW filter on device team0
[  379.245722][ T9170] veth0_vlan: entered promiscuous mode
[  379.276272][ T9250] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  379.285436][ T9250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.293470][ T9250] usb 2-1: Product: syz
[  379.297844][ T9250] usb 2-1: Manufacturer: syz
[  379.321569][ T9250] usb 2-1: config 0 descriptor??
[  379.402822][ T9250] usb 2-1: can't set config #0, error -71
[  379.412369][ T4945] Bluetooth: hci0: command tx timeout
[  379.502597][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  379.508996][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  379.567254][ T9250] usb 2-1: USB disconnect, device number 30
[  379.592201][ T9170] veth1_vlan: entered promiscuous mode
[  379.810835][  T139] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.818076][  T139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.002869][ T9170] veth0_macvtap: entered promiscuous mode
[  380.016778][ T9170] veth1_macvtap: entered promiscuous mode
[  380.038051][ T9170] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.191873][ T9170] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.224100][  T139] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.231353][  T139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.309914][ T6377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.317926][ T6377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.374131][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4
[  380.405119][ T9250] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  380.468306][ T9182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  380.478745][ T9182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  380.694944][ T3335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.702854][ T3335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.748938][ T6377] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.772654][ T6377] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.781876][ T6377] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.791700][ T6377] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.855465][ T9250] usb 2-1: device descriptor read/64, error -71
[  381.191612][ T9250] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  381.349227][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  381.360232][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  381.368925][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  381.379897][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  381.430608][ T5636] Bluetooth: hci0: command tx timeout
[  381.440028][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  381.661326][ T9250] usb 2-1: device descriptor read/64, error -71
[  381.768341][   T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.785777][   T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.794627][   T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.803418][   T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.812438][ T9250] usb usb2-port1: attempt power cycle
[  382.241765][ T9182] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.319188][ T9250] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  382.487751][ T9182] veth0_vlan: entered promiscuous mode
[  382.503695][ T9182] veth1_vlan: entered promiscuous mode
[  382.664263][ T9250] usb 2-1: device not accepting address 33, error -71
[  383.413024][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.557643][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.565010][ T9302] bridge_slave_0: entered allmulticast mode
[  383.574292][ T9302] bridge_slave_0: entered promiscuous mode
[  383.588825][ T9250] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  383.597377][ T5636] Bluetooth: hci6: command tx timeout
[  383.625176][ T9182] veth0_macvtap: entered promiscuous mode
[  383.636092][ T9182] veth1_macvtap: entered promiscuous mode
[  383.715989][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3
[  383.723216][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.730632][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.737932][ T9302] bridge_slave_1: entered allmulticast mode
[  383.815658][ T9302] bridge_slave_1: entered promiscuous mode
[  384.024856][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  384.037885][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  384.080181][ T9302] team0: Port device team_slave_0 added
[  384.092163][ T9302] team0: Port device team_slave_1 added
[  384.936970][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.948646][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.329646][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.425050][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.478131][ T9302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.544169][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.551213][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.599334][ T9250] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  385.608464][ T9250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.616487][ T9250] usb 2-1: Product: syz
[  385.620681][ T9250] usb 2-1: Manufacturer: syz
[  385.625301][ T9250] usb 2-1: SerialNumber: syz
[  385.760863][ T5636] Bluetooth: hci6: command tx timeout
[  385.824656][ T9250] usb 2-1: config 0 descriptor??
[  385.866932][ T9302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.949157][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.976102][   T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.987890][   T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.996922][   T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.162469][ T9330] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  386.291956][ T9356] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.299234][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.306666][ T9356] bridge_slave_0: entered allmulticast mode
[  386.330365][ T9356] bridge_slave_0: entered promiscuous mode
[  386.348161][ T9356] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.359503][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.367149][ T9356] bridge_slave_1: entered allmulticast mode
[  386.410403][ T9356] bridge_slave_1: entered promiscuous mode
[  386.453699][ T9302] hsr_slave_0: entered promiscuous mode
[  386.510526][ T9250] usb 2-1: Firmware version (0.0) predates our first public release.
[  386.518738][ T9250] usb 2-1: Please update to version 0.2 or newer
[  386.533655][ T9302] hsr_slave_1: entered promiscuous mode
[  386.751807][ T9356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.791537][  T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.799443][  T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.839696][ T9330] usb 8-1: Using ep0 maxpacket: 32
[  386.914901][ T9356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.035304][ T9356] team0: Port device team_slave_0 added
[  387.073887][  T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.081801][  T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.098808][ T9356] team0: Port device team_slave_1 added
[  387.181132][ T9250] usb 2-1: USB disconnect, device number 34
[  387.340957][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.348011][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  387.373976][ T9356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.418553][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.426158][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  387.452105][ T9356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.511985][ T9330] usb 8-1: config index 0 descriptor too short (expected 35577, got 27)
[  387.520429][ T9330] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  387.529066][ T9330] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92
[  387.538056][ T9330] usb 8-1: config 1 has no interface number 0
[  387.544205][ T9330] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  387.555114][ T9330] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  387.568041][ T9330] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  387.684628][ T9330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.866512][ T5636] Bluetooth: hci6: command tx timeout
[  387.890092][ T9356] hsr_slave_0: entered promiscuous mode
[  387.897283][ T9356] hsr_slave_1: entered promiscuous mode
[  387.930344][ T9356] debugfs: 'hsr0' already exists in 'hsr'
[  387.936206][ T9356] Cannot create hsr debugfs directory
[  387.994759][ T9330] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found
[  388.366812][ T9394] dvmrp8: entered allmulticast mode
[  388.388589][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.441761][ T9302] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  388.458834][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.480933][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  388.507087][ T9394] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1127'.
[  388.600130][ T9302] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  388.614889][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  388.683715][ T9302] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  388.700102][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  388.739416][ T9302] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  388.787851][ T9338] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  388.822046][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  388.883345][ T9330] snd_usb_pod 8-1:1.1: set_interface failed
[  388.889677][ T9330] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected
[  388.897019][ T9330] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -71
[  388.910722][ T9250] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  388.939569][ T9330] usb 8-1: USB disconnect, device number 2
[  389.018254][ T9356] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.229641][ T9302] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.256898][ T9302] 8021q: adding VLAN 0 to HW filter on device team0
[  389.271045][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.278268][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.295694][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.302904][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.563190][   T29] hid_parser_main: 430 callbacks suppressed
[  389.563255][   T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  389.596888][   T29] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  389.664566][ T9250] usb 2-1: device not accepting address 35, error -71
[  389.692261][ T9302] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.931153][ T9302] veth0_vlan: entered promiscuous mode
[  389.947336][ T9302] veth1_vlan: entered promiscuous mode
[  389.976657][ T9302] veth0_macvtap: entered promiscuous mode
[  390.004944][ T5636] Bluetooth: hci6: command tx timeout
[  390.239484][ T9302] veth1_macvtap: entered promiscuous mode
[  390.261314][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.273366][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.785497][ T9330] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  391.011544][ T9338] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  391.020675][ T9338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.028695][ T9338] usb 7-1: Product: syz
[  391.032892][ T9338] usb 7-1: Manufacturer: syz
[  391.121330][ T9338] usb 7-1: can't set config #1, error -71
[  391.128955][ T9338] usb 7-1: USB disconnect, device number 2
[  392.126839][ T9330] usb 8-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  392.135618][ T9330] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 129
[  392.718596][   T79] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.794331][ T3335] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.807967][ T3335] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.816886][ T3335] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.061810][ T9330] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  393.070958][ T9330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.079006][ T9330] usb 8-1: Product: syz
[  393.083201][ T9330] usb 8-1: Manufacturer: syz
[  393.087822][ T9330] usb 8-1: SerialNumber: syz
[  393.200946][  T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.208897][  T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.216466][  T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.224403][  T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.413795][ T9330] usb 8-1: config 0 descriptor??
[  393.472777][ T9330] usb 8-1: can't set config #0, error -71
[  393.519104][ T9330] usb 8-1: USB disconnect, device number 3
[  393.759726][ T9436] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1132'.
[  394.217136][ T9439] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1121'.
[  394.227765][ T9442] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  394.706537][ T9417] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  395.054497][ T5729] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  395.381896][ T9417] usb 9-1: Using ep0 maxpacket: 16
[  395.599206][ T9417] usb 9-1: too many configurations: 17, using maximum allowed: 8
[  395.711892][ T5729] usb 8-1: Using ep0 maxpacket: 16
[  395.740167][ T9458] syzkaller0: entered promiscuous mode
[  395.745721][ T9458] syzkaller0: entered allmulticast mode
[  396.237725][ T9460] use of bytesused == 0 is deprecated and will be removed in the future,
[  396.246631][ T9460] use the actual size instead.
[  396.384314][ T5729] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  396.394491][ T5729] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  397.285136][ T5729] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  397.294278][ T5729] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.302310][ T5729] usb 8-1: Product: syz
[  397.306522][ T5729] usb 8-1: Manufacturer: syz
[  397.422199][ T9417] usb 9-1: unable to read config index 3 descriptor/start: -71
[  397.429913][ T9417] usb 9-1: can't read configurations, error -71
[  399.644778][ T5729] usb 8-1: can't set config #1, error -71
[  399.658151][ T9475] netlink: 'syz.8.1142': attribute type 1 has an invalid length.
[  399.673872][ T5729] usb 8-1: USB disconnect, device number 4
[  399.762066][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1142'.
[  405.099242][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  405.393220][ T9499] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1143'.
[  409.386891][ T4945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  409.398384][ T4945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  409.406927][ T4945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  409.415135][ T4945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  409.422877][ T4945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  411.490976][ T5636] Bluetooth: hci5: command tx timeout
[  412.683960][ T4945] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  412.722790][ T4945] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  412.733485][ T4945] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  412.741701][ T4945] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  412.749535][ T4945] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  413.610558][ T5636] Bluetooth: hci5: command tx timeout
[  414.948583][ T5636] Bluetooth: hci7: command tx timeout
[  415.722572][ T5636] Bluetooth: hci5: command tx timeout
[  417.062855][ T5636] Bluetooth: hci7: command tx timeout
[  417.852150][ T5636] Bluetooth: hci5: command tx timeout
[  419.194304][ T5636] Bluetooth: hci7: command tx timeout
[  421.320289][ T4945] Bluetooth: hci7: command tx timeout
[  421.732879][ T5636] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  421.777754][ T5636] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  421.785979][ T9519] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  421.795635][ T9519] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  421.811593][ T5636] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  421.893360][ T5636] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  421.906137][ T5636] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  421.913965][ T5636] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  421.922047][ T5636] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  421.929840][ T5636] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  423.878228][ T5636] Bluetooth: hci8: command tx timeout
[  424.101647][ T5636] Bluetooth: hci9: command tx timeout
[  426.011654][ T5636] Bluetooth: hci8: command tx timeout
[  426.246540][ T5636] Bluetooth: hci9: command tx timeout
[  428.140509][ T5636] Bluetooth: hci8: command tx timeout
[  428.341921][ T9519] Bluetooth: hci9: command tx timeout
[  430.238532][ T9519] Bluetooth: hci8: command tx timeout
[  430.461530][ T9519] Bluetooth: hci9: command tx timeout
[  440.969970][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  440.976338][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  442.210131][ T5636] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  442.221850][ T5636] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  442.230181][ T5636] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  442.240585][ T5636] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  442.248450][ T5636] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  453.348240][ T9531] Bluetooth: hci1: command 0x0406 tx timeout
[  460.185894][ T9478] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  460.494359][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1143'.
[  461.012829][ T9356] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.509090][ T4945] Bluetooth: hci10: command tx timeout
[  467.214803][ T4945] Bluetooth: hci10: command tx timeout
[  469.831062][ T4945] Bluetooth: hci10: command tx timeout
[  470.546604][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  470.558596][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  470.566755][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  470.574864][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  470.584589][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  471.887074][ T5636] Bluetooth: hci10: command tx timeout
[  472.778700][ T5636] Bluetooth: hci3: command tx timeout
[  474.893672][ T5636] Bluetooth: hci3: command tx timeout
[  474.917893][ T4945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  474.928759][ T4945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  474.938848][ T4945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  474.947028][ T4945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  474.954832][ T4945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  477.014601][ T4945] Bluetooth: hci3: command tx timeout
[  477.133718][ T4945] Bluetooth: hci4: command tx timeout
[  479.142351][ T4945] Bluetooth: hci3: command tx timeout
[  479.261188][ T4945] Bluetooth: hci4: command tx timeout
[  480.839402][ T5636] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  480.850563][ T5636] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  480.860501][ T5636] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  480.868916][ T5636] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  480.876633][ T5636] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  481.226122][ T5636] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  481.237128][ T5636] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  481.245198][ T5636] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  481.291355][ T5636] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  481.299241][ T5636] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  481.380767][ T4945] Bluetooth: hci4: command tx timeout
[  482.950762][ T4945] Bluetooth: hci11: command tx timeout
[  483.508265][ T4945] Bluetooth: hci4: command tx timeout
[  483.513824][ T4945] Bluetooth: hci12: command tx timeout
[  485.068773][ T5636] Bluetooth: hci11: command tx timeout
[  485.626032][ T5636] Bluetooth: hci12: command tx timeout
[  487.187919][ T5636] Bluetooth: hci11: command tx timeout
[  487.746223][ T5636] Bluetooth: hci12: command tx timeout
[  489.315957][ T5636] Bluetooth: hci11: command tx timeout
[  489.854568][ T5636] Bluetooth: hci12: command tx timeout
[  491.726629][ T9356] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.378342][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  502.384795][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  507.683775][ T4945] Bluetooth: hci6: command 0x0406 tx timeout
[  507.815513][ T9519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  507.898026][ T9519] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  507.907891][ T9519] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  507.916016][ T9519] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  507.923961][ T9519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  513.023094][ T4945] Bluetooth: hci0: command tx timeout
[  514.061237][ T9356] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.606535][ T4945] Bluetooth: hci0: command tx timeout
[  521.198002][ T9519] Bluetooth: hci0: command tx timeout
[  523.302139][ T4945] Bluetooth: hci0: command tx timeout
[  542.317005][ T5638] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  542.329855][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  542.344495][ T5638] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  542.353436][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  542.367083][ T5638] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  542.437104][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  542.445884][ T5638] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  542.453450][ T9531] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  542.463011][ T5638] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  542.472486][ T9531] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  542.542809][ T4945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  542.657821][ T4945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  542.667451][ T4945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  542.679135][ T4945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  542.687012][ T4945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  543.399894][   T32] INFO: task kworker/u8:10:3335 blocked for more than 143 seconds.
[  543.407928][   T32]       Tainted: G             L      syzkaller #0
[  543.414470][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  543.423221][   T32] task:kworker/u8:10   state:D stack:21544 pid:3335  tgid:3335  ppid:2      task_flags:0x4208060 flags:0x00080000
[  543.435379][   T32] Workqueue: netns cleanup_net
[  543.440485][   T32] Call Trace:
[  543.443846][   T32]  <TASK>
SYZFAIL: failed to recv rpc
[  543.446913][   T32]  __schedule+0x17d9/0x56c0
[  543.451697][   T32]  ? __lock_acquire+0x683/0x2cf0
[  543.456845][   T32]  ? __pfx___schedule+0x10/0x10
[  543.461760][   T32]  ? schedule+0x90/0x2b0
[  543.466061][   T32]  schedule+0x164/0x2b0
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  544.701858][ T4945] Bluetooth: hci7: command tx timeout
[  544.854916][ T5638] Bluetooth: hci1: command tx timeout
[  545.221860][   T32]  schedule_preempt_disabled+0x13/0x30
[  545.227459][   T32]  __mutex_lock+0x7bf/0x1550
[  545.232125][   T32]  ? __mutex_lock+0x5d4/0x1550
[  545.236971][   T32]  ? devlink_pernet_pre_exit+0x129/0x420
[  545.242863][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  545.247980][   T32]  ? __devlinks_xa_find_get+0x2c/0x300
[  545.253516][   T32]  ? __devlinks_xa_find_get+0x2c/0x300
[  545.259044][   T32]  devlink_pernet_pre_exit+0x129/0x420
[  545.264574][   T32]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  545.270620][   T32]  ? _raw_spin_unlock+0x28/0x50
[  545.275656][   T32]  ? iput+0xb84/0xf00
[  545.279758][   T32]  ops_undo_list+0x17d/0x8d0
[  545.284422][   T32]  ? __pfx_ops_undo_list+0x10/0x10
[  545.373101][   T32]  ? idr_destroy+0x218/0x290
[  545.377953][   T32]  ? do_raw_spin_unlock+0xf5/0x210
[  545.383123][   T32]  cleanup_net+0x572/0x810
[  545.387596][   T32]  ? __pfx_cleanup_net+0x10/0x10
[  545.392592][   T32]  ? rcu_is_watching+0x15/0xb0
[  545.397464][   T32]  ? process_scheduled_works+0xa20/0x14e0
[  545.427491][   T32]  process_scheduled_works+0xa8e/0x14e0
[  545.433185][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  545.439254][   T32]  ? assign_work+0x3cf/0x5d0
[  545.443982][   T32]  worker_thread+0xa47/0xfb0
[  545.448662][   T32]  kthread+0x388/0x470
[  545.452798][   T32]  ? __pfx_worker_thread+0x10/0x10
[  545.457968][   T32]  ? __pfx_kthread+0x10/0x10
[  545.462625][   T32]  ret_from_fork+0x514/0xb70
[  545.467349][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  545.472565][   T32]  ? __switch_to+0xc89/0x1420
[  545.477307][   T32]  ? __pfx_kthread+0x10/0x10
[  545.481957][   T32]  ret_from_fork_asm+0x1a/0x30
[  545.486871][   T32]  </TASK>
[  545.490507][   T32] 
[  545.490507][   T32] Showing all locks held in the system:
[  545.498278][   T32] 3 locks held by kworker/0:1/10:
[  545.503492][   T32] 1 lock held by khungtaskd/32:
[  545.508378][   T32]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  545.646468][   T32] 3 locks held by kworker/u8:6/139:
[  545.651780][   T32]  #0: ffff88803238e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  545.663445][   T32]  #1: ffffc90002e07c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  545.677202][   T32]  #2: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  545.686918][   T32] 3 locks held by kworker/u8:8/167:
[  545.692255][   T32]  #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  545.704007][   T32]  #1: ffffc90002e97c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  545.715061][   T32]  #2: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  545.724325][   T32] 4 locks held by kworker/u8:10/3335:
[  545.729744][   T32]  #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  545.740704][   T32]  #1: ffffc9000d8ffc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  545.901301][   T32]  #2: ffffffff9001f388 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  545.910850][   T32]  #3: ffff888077612128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  545.920960][   T32] 1 lock held by dhcpcd/5290:
[  545.925689][   T32]  #0: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[  545.935340][   T32] 2 locks held by getty/5383:
[  545.940064][   T32]  #0: ffff8880364300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  545.950064][   T32]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  545.960340][   T32] 2 locks held by kworker/0:3/5635:
[  545.965580][   T32] 2 locks held by kworker/0:4/5639:
[  545.970823][   T32] 2 locks held by kworker/0:5/5714:
[  546.052628][   T32] 3 locks held by kworker/1:6/5729:
[  546.057968][   T32]  #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  546.069034][   T32]  #1: ffffc90004b07c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  546.079416][   T32]  #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  546.115911][   T32] 3 locks held by kworker/0:6/5750:
[  546.121220][   T32] 4 locks held by kworker/u8:12/6377:
[  546.126635][   T32]  #0: ffff88807c0d1140 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  546.138432][   T32]  #1: ffffc90003807c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  546.151935][   T32]  #2: ffff88807cf9d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  546.164567][   T32]  #3: ffff888033c32ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  546.176693][   T32] 1 lock held by syz.4.1118/9263:
[  546.181780][   T32]  #0: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  546.190952][   T32] 7 locks held by syz-executor/9356:
[  546.196314][   T32]  #0: ffff888012092450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  546.235603][   T32]  #1: ffff888057eef880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  546.245567][   T32]  #2: ffff8880284444b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540
[  546.255676][   T32]  #3: ffffffff8f8a9d00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  546.266237][   T32]  #4: ffff888077612128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  546.277026][   T32]  #5: ffff888077525258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170
[  546.287125][   T32]  #6: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: unregister_nexthop_notifier+0x17/0x40
[  546.297453][   T32] 5 locks held by kworker/0:8/9402:
[  546.302689][   T32] 2 locks held by kworker/0:9/9409:
[  546.307962][   T32] 2 locks held by kworker/0:11/9452:
[  546.313359][   T32] 1 lock held by syz.8.1142/9478:
[  546.348964][   T32]  #0: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x79d/0x10d0
[  546.358648][   T32] 2 locks held by kworker/0:12/9477:
[  546.363973][   T32] 2 locks held by syz-executor/9522:
[  546.369283][   T32]  #0: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  546.378337][   T32]  #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  546.389297][   T32] 2 locks held by kworker/0:13/9523:
[  546.394619][   T32] 3 locks held by kworker/0:14/9524:
[  546.399935][   T32] 2 locks held by kworker/0:15/9525:
[  546.405250][   T32] 2 locks held by syz-executor/9530:
[  546.410566][   T32]  #0: ffffffff9001f388 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720
[  546.420051][   T32]  #1: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x120
[  546.429859][   T32] 2 locks held by syz-executor/9560:
[  546.462619][   T32]  #0: ffffffff9001f388 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720
[  546.472180][   T32]  #1: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820
[  546.481753][   T32] 2 locks held by syz-executor/9564:
[  546.487071][   T32]  #0: ffffffff9001f388 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720
[  546.496561][   T32]  #1: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820
[  546.506245][   T32] 1 lock held by syz-executor/9569:
[  546.511484][   T32]  #0: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00
[  546.521014][   T32] 2 locks held by syz-executor/9573:
[  546.526377][   T32]  #0: ffffffff9001f388 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720
[  546.535864][   T32]  #1: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820
[  546.545430][   T32] 2 locks held by syz-executor/9579:
[  546.581063][   T32]  #0: ffffffff9001f388 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720
[  546.590598][   T32]  #1: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820
[  546.600174][   T32] 2 locks held by syz-executor/9607:
[  546.605501][   T32]  #0: ffffffff9001f388 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720
[  546.614986][   T32]  #1: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[  546.625527][   T32] 2 locks held by syz-executor/9608:
[  546.630853][   T32]  #0: ffffffff9001f388 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720
[  546.640331][   T32]  #1: ffffffff9002df40 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[  546.655668][   T32] 
[  546.658079][   T32] =============================================
[  546.658079][   T32] 
[  546.758339][   T32] NMI backtrace for cpu 1
[  546.758458][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  546.758508][   T32] Tainted: [L]=SOFTLOCKUP
[  546.758520][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  546.758540][   T32] Call Trace:
[  546.758555][   T32]  <TASK>
[  546.758569][   T32]  dump_stack_lvl+0xe8/0x150
[  546.758624][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  546.758664][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  546.758721][   T32]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  546.758747][   T32]  sys_info+0x135/0x170
[  546.758767][   T32]  watchdog+0xfd7/0x1030
[  546.758833][   T32]  ? watchdog+0x1c7/0x1030
[  546.758867][   T32]  kthread+0x388/0x470
[  546.758899][   T32]  ? __pfx_watchdog+0x10/0x10
[  546.758923][   T32]  ? __pfx_kthread+0x10/0x10
[  546.758955][   T32]  ret_from_fork+0x514/0xb70
[  546.758989][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  546.759020][   T32]  ? __switch_to+0xc89/0x1420
[  546.759049][   T32]  ? __pfx_kthread+0x10/0x10
[  546.759081][   T32]  ret_from_fork_asm+0x1a/0x30
[  546.759118][   T32]  </TASK>
[  546.759125][   T32] Sending NMI from CPU 1 to CPUs 0:
[  546.889159][    C0] NMI backtrace for cpu 0
[  546.889188][    C0] CPU: 0 UID: 0 PID: 9402 Comm: kworker/0:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  546.889212][    C0] Tainted: [L]=SOFTLOCKUP
[  546.889219][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  546.889231][    C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker
[  546.889261][    C0] RIP: 0010:ip_vs_conn_out_get+0x395/0x1030
[  546.889390][    C0] Code: 8b 44 24 58 42 80 3c 28 00 74 08 4c 89 ff e8 22 95 0b f8 49 8b 1f 48 89 de 48 83 e6 01 31 ff e8 d1 00 9e f7 48 83 e3 01 75 26 <e8> 26 e6 81 f7 89 c3 31 ff 89 c6 e8 1b 00 9e f7 85 db 0f 84 1c 09
[  546.889407][    C0] RSP: 0018:ffffc90000006d40 EFLAGS: 00000246
[  546.889421][    C0] RAX: ffffffff8a29169f RBX: 0000000000000000 RCX: ffff88802a7ddd00
[  546.889435][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  546.889445][    C0] RBP: ffffc90000006e70 R08: ffff8880122ac117 R09: 1ffff11002455822
[  546.889459][    C0] R10: dffffc0000000000 R11: ffffed1002455823 R12: 00000000622a0d22
[  546.889471][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880122ac110
[  546.889484][    C0] FS:  0000000000000000(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000
[  546.889499][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  546.889511][    C0] CR2: 00007fffe6c3c850 CR3: 000000007f642000 CR4: 00000000003526f0
[  546.889527][    C0] Call Trace:
[  546.889534][    C0]  <IRQ>
[  546.889544][    C0]  ? ip_vs_conn_out_get+0xab/0x1030
[  546.889566][    C0]  ? l3mdev_update_flow+0x4ad/0x610
[  546.889647][    C0]  ? __pfx_ip_vs_conn_out_get+0x10/0x10
[  546.889671][    C0]  ip_vs_conn_out_get_proto+0x27f/0x460
[  546.889691][    C0]  ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10
[  546.889716][    C0]  ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10
[  546.889734][    C0]  ? ipt_do_table+0x137f/0x15d0
[  546.889814][    C0]  ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10
[  546.889834][    C0]  ip_vs_out_hook+0x5dc/0x1030
[  546.889861][    C0]  ? __pfx_ip_vs_out_hook+0x10/0x10
[  546.889889][    C0]  ? nf_nat_ipv4_local_fn+0x422/0x570
[  546.889955][    C0]  ? __pfx_ip_vs_out_hook+0x10/0x10
[  546.889978][    C0]  nf_hook_slow+0xc5/0x220
[  546.890046][    C0]  ? __pfx_dst_output+0x10/0x10
[  546.890087][    C0]  nf_hook+0x22a/0x3a0
[  546.890105][    C0]  ? nf_hook+0xa1/0x3a0
[  546.890120][    C0]  ? __pfx_nf_hook+0x10/0x10
[  546.890135][    C0]  ? __ip_local_out+0x152/0x6a0
[  546.890152][    C0]  ? __pfx_dst_output+0x10/0x10
[  546.890172][    C0]  ? __ip_local_out+0x152/0x6a0
[  546.890189][    C0]  __ip_local_out+0x558/0x6a0
[  546.890205][    C0]  ? __pfx_dst_output+0x10/0x10
[  546.890223][    C0]  ip_local_out+0x2a/0x190
[  546.890241][    C0]  synproxy_send_client_synack+0x89b/0xde0
[  546.890282][    C0]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  546.890308][    C0]  ? __pfx_nft_tunnel_get_dump+0x8/0x10
[  546.890383][    C0]  ? synproxy_pernet+0x45/0x270
[  546.890403][    C0]  nft_synproxy_eval_v4+0x362/0x4e0
[  546.890424][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  546.890443][    C0]  ? nf_ip_checksum+0x13c/0x510
[  546.890468][    C0]  nft_synproxy_do_eval+0x335/0x550
[  546.890488][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  546.890506][    C0]  ? __ip_vs_conn_in_get+0xa6/0x10f0
[  546.890525][    C0]  ? __pfx___ip_vs_conn_in_get+0x10/0x10
[  546.890548][    C0]  nft_do_chain+0x48d/0x1b10
[  546.890599][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  546.890621][    C0]  ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10
[  546.890661][    C0]  nft_do_chain_inet+0x360/0x4b0
[  546.890723][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  546.890745][    C0]  ? nf_nat_ipv4_local_in+0x21f/0x720
[  546.890769][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  546.890788][    C0]  nf_hook_slow+0xc5/0x220
[  546.890815][    C0]  NF_HOOK+0x21f/0x3c0
[  546.890867][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  546.890891][    C0]  ? NF_HOOK+0x9e/0x3c0
[  546.890915][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  546.890944][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  546.890977][    C0]  ? ip_local_deliver+0x113/0x190
[  546.891006][    C0]  NF_HOOK+0x336/0x3c0
[  546.891034][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  546.891062][    C0]  ? NF_HOOK+0x9e/0x3c0
[  546.891089][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  546.891117][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  546.891145][    C0]  ? ip_rcv_core+0x88d/0xd50
[  546.891175][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  546.891202][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  546.891229][    C0]  process_backlog+0xa34/0x1860
[  546.891255][    C0]  ? process_backlog+0x3c3/0x1860
[  546.891291][    C0]  __napi_poll+0xaa/0x330
[  546.891312][    C0]  net_rx_action+0x61d/0xf50
[  546.891339][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  546.891366][    C0]  ? sched_balance_domains+0x770/0x880
[  546.891400][    C0]  handle_softirqs+0x225/0x840
[  546.891436][    C0]  ? do_softirq+0x76/0xd0
[  546.891462][    C0]  ? kernel_fpu_end+0x62/0x80
[  546.891487][    C0]  do_softirq+0x76/0xd0
[  546.891509][    C0]  </IRQ>
[  546.891516][    C0]  <TASK>
[  546.891524][    C0]  __local_bh_enable_ip+0xf8/0x130
[  546.891548][    C0]  blake2s_compress+0xfa/0x1c00
[  546.891628][    C0]  ? rcu_is_watching+0x15/0xb0
[  546.891650][    C0]  ? __schedule+0x17ef/0x56c0
[  546.891679][    C0]  ? __pfx_blake2s_compress+0x10/0x10
[  546.891701][    C0]  ? __asan_memset+0x22/0x50
[  546.891739][    C0]  ? __chacha20poly1305_decrypt+0x352/0x3a0
[  546.891764][    C0]  ? __pfx___schedule+0x10/0x10
[  546.891791][    C0]  blake2s_update+0x140/0x450
[  546.891815][    C0]  hmac+0x2d1/0x3b0
[  546.891846][    C0]  ? __pfx_hmac+0x10/0x10
[  546.891871][    C0]  ? kernel_fpu_end+0x62/0x80
[  546.891900][    C0]  ? blake2s_compress+0x1b4d/0x1c00
[  546.891937][    C0]  kdf+0xff/0x290
[  546.891964][    C0]  ? __pfx_blake2s_compress+0x10/0x10
[  546.891987][    C0]  ? __pfx_kdf+0x10/0x10
[  546.892016][    C0]  ? lock_acquire+0xd0/0x350
[  546.892044][    C0]  ? wg_pubkey_hashtable_lookup+0x1e/0x360
[  546.892104][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  546.892129][    C0]  ? wg_pubkey_hashtable_lookup+0x1e/0x360
[  546.892153][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  546.892179][    C0]  wg_noise_handshake_consume_initiation+0x464/0x9b0
[  546.892216][    C0]  ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10
[  546.892255][    C0]  ? __asan_memset+0x22/0x50
[  546.892284][    C0]  ? blake2s_final+0x145/0x270
[  546.892319][    C0]  ? __lock_acquire+0x683/0x2cf0
[  546.892349][    C0]  ? __crypto_memneq+0x42/0x470
[  546.892414][    C0]  ? wg_packet_handshake_receive_worker+0x2e6/0x10c0
[  546.892441][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  546.892468][    C0]  wg_packet_handshake_receive_worker+0x674/0x10c0
[  546.892493][    C0]  ? look_up_lock_class+0x57/0x110
[  546.892527][    C0]  ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10
[  546.892558][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  546.892585][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  546.892609][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  546.892636][    C0]  ? rcu_is_watching+0x15/0xb0
[  546.892656][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  546.892679][    C0]  process_scheduled_works+0xa8e/0x14e0
[  546.892720][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  546.892748][    C0]  ? assign_work+0x3cf/0x5d0
[  546.892773][    C0]  worker_thread+0xa47/0xfb0
[  546.892814][    C0]  kthread+0x388/0x470
[  546.892843][    C0]  ? __pfx_worker_thread+0x10/0x10
[  546.892865][    C0]  ? __pfx_kthread+0x10/0x10
[  546.892894][    C0]  ret_from_fork+0x514/0xb70
[  546.892927][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  546.892957][    C0]  ? __switch_to+0xc89/0x1420
[  546.892984][    C0]  ? __pfx_kthread+0x10/0x10
[  546.893013][    C0]  ret_from_fork_asm+0x1a/0x30
[  546.893042][    C0]  </TASK>
[  547.647013][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  547.653964][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  547.664732][   T32] Tainted: [L]=SOFTLOCKUP
[  547.669091][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  547.679189][   T32] Call Trace:
[  547.682517][   T32]  <TASK>
[  547.685493][   T32]  vpanic+0x56c/0xa60
[  547.689550][   T32]  ? __pfx___schedule+0x10/0x10
[  547.694462][   T32]  ? __pfx_vpanic+0x10/0x10
[  547.699035][   T32]  panic+0xc5/0xd0
[  547.702809][   T32]  ? __pfx_panic+0x10/0x10
[  547.707281][   T32]  ? preempt_schedule_common+0x82/0xd0
[  547.712798][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  547.718224][   T32]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  547.724440][   T32]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  547.730684][   T32]  watchdog+0x1030/0x1030
[  547.735074][   T32]  ? watchdog+0x1c7/0x1030
[  547.739589][   T32]  kthread+0x388/0x470
[  547.743766][   T32]  ? __pfx_watchdog+0x10/0x10
[  547.748513][   T32]  ? __pfx_kthread+0x10/0x10
[  547.753166][   T32]  ret_from_fork+0x514/0xb70
[  547.757825][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  547.762994][   T32]  ? __switch_to+0xc89/0x1420
[  547.767728][   T32]  ? __pfx_kthread+0x10/0x10
[  547.772390][   T32]  ret_from_fork_asm+0x1a/0x30
[  547.777228][   T32]  </TASK>
[  547.780974][   T32] Kernel Offset: disabled
[  547.785331][   T32] Rebooting in 86400 seconds..