last executing test programs:

40.532570574s ago: executing program 2 (id=643):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x0, r1)
readv(r2, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/255, 0xff}, {0x0}], 0x2)
syz_open_dev$vbi(0x0, 0x3, 0x2)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000f80)={0x0, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="400101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$sndseq(r2, &(0x7f0000000300)=[{0x86, 0x8, 0xa9, 0xfd, @tick=0x4, {0x6, 0xc}, {0xec, 0x6}, @queue={0x2, {0x800, 0x4}}}, {0x40, 0xb7, 0x5, 0x2d, @tick=0x9, {0x1, 0xb4}, {0x5, 0x7}, @ext={0x0, 0x0}}], 0x38)
r4 = fcntl$dupfd(r0, 0x406, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0xff6, &(0x7f0000000500)=""/4086, 0x41100, 0x32}, 0x94)

40.274068948s ago: executing program 0 (id=645):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000021c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000010c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x0)
recvfrom$inet(r1, &(0x7f0000000000)=""/4084, 0xff4, 0x2102, 0x0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0)
ioctl$RTC_AIE_ON(r2, 0x7001)
ioctl$RTC_AIE_OFF(r2, 0x7002)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000001000)={0x18, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, &(0x7f00000013c0)={0x18, &(0x7f0000001200)={0x0, 0x6, 0x9d, {0x9d, 0x10, "39ee3a92a222968be411a587ffc115271394c097eb659608834def3c44fa53364eb25c7c3b93b702a8d2e0f7f86dfad913966b5f995dde510b6a3450a2fcc506646229d54ad24e4bfb4eb5a143f6456944143ac3b7fcd86197c972cf8dca2407469f6e8794aeed3c58d0c0965f78e236e383d868451ba49b9fa0b22e36ddcdad4edfd3a07118d8532d94dd60d222ce3e90f56625efe4ac2061d538"}}, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f00000012c0)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x4, [@generic={0x49, 0x10, 0x2, "97f2e8c8165cf7e3252eba543a516f21c8940e122d5d9fd2ae2a149400505200f48bb509bbc664771eb3520c982c2f63cda9a7bc83c81c12b97b4ff2366c6cb1b98418fa5e0b"}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0xcd, 0xf, 0x423d, [0xc000]}, @ssp_cap={0x14, 0x10, 0xa, 0xca, 0x2, 0x0, 0xf00f, 0x0, [0xffc0c0, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x9, 0x85}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x4, 0x10, "7a3a037b", "5a9359fa"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x5, 0x1, 0xf7, 0x2, 0xff}}}, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000200)={0xc, &(0x7f0000001100)={0x20, 0x9, 0xe5, {0xe5, 0x23, "72e4d604337dd79315a3b004a3067fd875f90e56d876861142d2ac1ed40fec0c3d6f9c96d5f2ea1af8d533821e8f43ab20ce40dc407a95331e269b21b10a49abeb303c0094c43d1bfd899efbbac103d087bb9f1735e39a553e68902fedb943713f4e372602770cad25a7eee742435c6cdcbc4ae9268361f82bb5dbcf3bc835615de8f0f53f1b9c066d34d9d305fc1c698efd63e06614e31e3c7f09841eedded57b2d41830ef04aeff78a8f04083ad10820e74f94ebf8e82aa5c1ecc512e15122486f3e87602883083b9aac63cdf0ece98d610eef8665f168a1bc30b939d7fe4c3fa82f"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="4001ec000000932011a11be4056336119e46e851aac67b8d5c4f411e160e73f07c7965dc5d5e22c2794434e56df5a25992a486e4a0eb85be5907ddf0ca1efb568a78a45fecbb1a0a98720387011ce23a61a6fc21f9d67dd1e7e5b747f7887afcbe2b4c0ff365ca8d2cc3cddd6eede240113d0b541756d67e2e7c0e27a6d09ffdc92315cdf0ab5674e48efc0b73338e847bc40575ced3d64172167b3523b1b99e4eef9765066f5013c8622584eead2920c76df365e98ab49e75d61cf16d8aafe8065c91b2b4be08d02896de35c863c72dd90fa1afb4124acd1f6c3cc0d0418922937f6ae01bf400"/242], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}})
syz_usb_ep_read(r3, 0x4, 0x39, &(0x7f0000000000)=""/57)
syz_usb_ep_write(r3, 0x81, 0x2, &(0x7f0000000180)="91f3")

39.077970588s ago: executing program 3 (id=648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x30000080}, 0x4004)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000140), 0x10)
r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240), 0x0, 0x2400c0c7, 0x1})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20028853}, 0x0)
lseek(r6, 0x8000006, 0x1)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r9 = fcntl$dupfd(r7, 0x0, r7)
setsockopt$inet_mtu(r9, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/uts\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28)
r10 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000000)='bridge0\x00')
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0x57, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [""]}, 0xffffffffffffff84}, 0x1, 0x0, 0x0, 0x20048005}, 0x40001)

38.950605563s ago: executing program 1 (id=649):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x10000000, 0x3, 0x34}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) (fail_nth: 4)

38.141330394s ago: executing program 1 (id=651):
syz_open_dev$tty1(0xc, 0x4, 0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mknod(&(0x7f00000000c0)='./file0\x00', 0x400, 0x200)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x323280, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x40040814}, 0x0)
syz_emit_ethernet(0x6e, 0x0, 0x0)
r7 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r7, &(0x7f0000001100), 0x0, &(0x7f0000001140))

38.045461628s ago: executing program 3 (id=652):
socket(0x2, 0x80805, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1, 0x4, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x40)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4}}, './file0\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1, &(0x7f0000000540)=@raw=[@ldst={0x1, 0x0, 0x2, 0x7, 0x5, 0xfffffffffffffff0, 0xfffffffffffffff0}], &(0x7f0000000580)='GPL\x00', 0x74000003, 0x67, &(0x7f00000005c0)=""/103, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r1, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x2, 0x3, 0x4}, {0x3, 0x4, 0x5, 0x4}, {0x0, 0x2, 0x9, 0x2}, {0x0, 0x5, 0x2, 0x3}, {0x2, 0x2, 0x5, 0x4}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x8}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x0, 0x6fe, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x37, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000b40)=""/194, &(0x7f0000000c40)=0xc2)
ioctl$sock_SIOCGIFCONF(r3, 0x8940, &(0x7f0000000000)=@buf={0x1, &(0x7f0000000080)="ce"})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x4ac, 0xffffffff, 0x230, 0x2f8, 0x0, 0xfeffffff, 0xffffffff, 0x3e4, 0x3e4, 0x3e4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1fc, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0x4, 0x8000, 0x8, 0x0, 0xffff, 0x8, 0x196, 0xf, 0x18, 0x8}}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x4}, {0x1, 0x2}, {0x1, 0x1, 0x7}, 0x8, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, @rand_addr=' \x01\x00', [0xff000000, 0xff, 0xffffffff, 0xff], [0xff, 0xffffffff, 0x0, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x87, 0x8, 0x6, 0xc}, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@ipv6header={{0x24}, {0x4, 0x44}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x508)

37.786136903s ago: executing program 0 (id=653):
syz_open_dev$vim2m(&(0x7f0000002d80), 0x7ff, 0x2) (async)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
syz_io_uring_setup(0x22b, &(0x7f0000000140)={0x0, 0x5325, 0x80, 0x0, 0x14b}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0)
syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) (async)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipmr_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x0, {0x80, 0x20, 0x10, 0x0, 0x0, 0x11, 0x0, 0xa, 0x300}, [@RTA_TABLE={0x8, 0xf, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
socket(0xa, 0x3, 0x3a) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000002c00)=@buf) (async)
unshare(0x22020600) (async)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/cgroup\x00')
setns(r6, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x7, 0xf728, 0x3d0a, 0x979, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) (async)
r8 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0xf0f041}) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x0)

37.565312059s ago: executing program 2 (id=654):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3}, 0x8)
write$rfkill(r2, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x4, 0x6}, 0x8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10}]}, 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
vmsplice(r7, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000240081064e810ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbddd4f644ec70", 0xa2}], 0x1}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="180300e6c7598ad1dbd54c00", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)

37.564842683s ago: executing program 0 (id=655):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103000000000009050203"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a62010001020301090224000100000000090400000203"], 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x215d3a15bf23bd00, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl(r2, 0xbffff000, 0x0)
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x28014010, 0x2, 0x2, 0x0, 0xd, 0x0, 0x0, 0x20, 0x9}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0)
r5 = dup3(r1, r4, 0x6700000000000000)
fchmodat(r4, &(0x7f0000000040)='./file0\x00', 0x2)
ioctl$IOCTL_VMCI_VERSION(r4, 0x79f, &(0x7f0000000080)=0xb0000)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

37.464865076s ago: executing program 3 (id=656):
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/147, 0x93, 0x0, &(0x7f00000001c0)=""/251, 0xfb}, &(0x7f0000000140)=0x40)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000001280))
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001240), 0x20040, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x40086643, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
getsockopt$IPT_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x0, 0x5, 0x7, 0x8b32]}, &(0x7f0000000200)=0x54)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004081)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c)
mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x2, 0x3, 0x0, 0x0, {0x4e24, 0x4e23, [0x5, 0xffff], [0x0, 0x0, 0x0, 0x7], 0x0, [0x5, 0x9]}, 0x8}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048984}, 0x20004010)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x800)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0x6a, [0x8, 0x1, 0x10000, 0x6, 0x3, 0x9], 0x0, 0x0, &(0x7f00000002c0)=""/106}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

37.098160363s ago: executing program 3 (id=657):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x108001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
semget$private(0x0, 0x4000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000e0390000000000000003ffffff060000006bf28d368cf0759e68cc6cf94bb7222c95120e6a7a8b3acabc8361a2ac966c1a786b5e10376fab91277cf848fec33b4f2c5d1f80a3ee45fe9d0b81dac5a532e5f1cb903096cde6452a97e23cd6f718a32899f5de3a619660286c7af00b6bb81a854f24d59a6d63e7272c2c77f5e804e02cdb6cc7d7182c158af02a2fea4e9da8"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))
r4 = syz_open_dev$media(&(0x7f0000000000), 0x8001, 0x180502)
read$alg(0xffffffffffffffff, &(0x7f0000000040)=""/24, 0x18)
ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000000), &(0x7f00000001c0)})
ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x300000f, 0x810, r0, 0x100000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1b)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00J\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x3b4, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'veth1\x00', 0x4000})

36.474961086s ago: executing program 1 (id=658):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0xfffd, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "1204000000f2aa1d1e0d494f6c4903de8a08e2328997b8ac46b04400", "a04027fa124125c63a5b0e4412c6ab5c", {"4186dbba08364dba146d6e8dda52d97b", "ff027abe261f352c54d03f15919eb36c"}}}}}}}, 0x0)
readv(r0, &(0x7f0000000280)=[{0x0}], 0x1)

36.118143629s ago: executing program 1 (id=659):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r1, 0x0)
read(r1, &(0x7f0000000380)=""/162, 0xa2)
write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011600100f5fe009d2fb112ff000000008a151f75080039", 0x27)
openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000000)={0x8, "a69dd9e6c28eabf7"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a6a35a08460d1220ec4d0102030109021b00010000a000090494000108ca6d000905070310"], 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x80003)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x6, 0x20, @buffer={0x0, 0x2c, 0x0}, &(0x7f00000001c0)="bf274c199f6e", 0x0, 0x1000000c, 0x0, 0x0, 0x0})
syz_open_procfs(0x0, &(0x7f0000001bc0)='net/ip_vs_stats\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x86, &(0x7f0000000440)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x3a}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)
openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040), 0xc0840, 0x0)
r7 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd25, 0x8, {0x1c, 0x14, 0x20, 0x4, 0xfc, 0x0, 0xc8, 0x1, 0x1000}, [@RTA_DST={0x8, 0x1, {0x800}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000)
r10 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$bt_hci(r10, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44)
read$FUSE(r8, &(0x7f0000001c00)={0x2020}, 0x2020)

35.575298517s ago: executing program 4 (id=660):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000000c0))
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = socket(0x1, 0x804, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000004c0))
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
getdents64(r3, &(0x7f0000000000)=""/181, 0xb5)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b790fae441f51b1f82078d30ae70b75bcde4ac40e0b7c14990b07311995d69496376b169de93c29ce4ff8418274c721be0524e595745d85226d49c94a2fe8eca35daef33372cc26038a3ac062bc44f8cb1628e8eef434ed0ad7c92fbefe53a9bfa1f734f0e1f26742e5478f4bd74a29a52dc1662918b", @ANYRES16=r1, @ANYRES16=0x0], 0x64}}, 0x10)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)

33.344624355s ago: executing program 4 (id=661):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
close(r1)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) (fail_nth: 4)

33.202224072s ago: executing program 0 (id=662):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x400)
mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x335)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000040)={{0x3, 0x2, 0x6, 0xe0f1, 0x2, 0x8}, 0x14f, [0x0, 0xe6, 0x9, 0x8001, 0x5, 0x3, 0x7, 0x3, 0x401, 0x4, 0x7, 0x2, 0xdc39, 0x7, 0x2, 0x6, 0x0, 0x8000, 0x9, 0x3, 0x6, 0x9, 0x9, 0x2, 0x6, 0x2, 0x9, 0x4, 0x3, 0xce1b, 0xc, 0xc, 0x9, 0x9, 0x80, 0x9, 0xcc9, 0x6, 0x2, 0x4, 0x2, 0xff, 0x4, 0x77a0, 0x1ef, 0xff, 0x8, 0xb, 0x10000, 0xe0000, 0x0, 0x9, 0x7, 0x305, 0xfff, 0x1, 0x2, 0x9, 0x9d, 0x1, 0x10001, 0x401, 0x2, 0x7fff, 0xde, 0x41, 0x1, 0x0, 0x4, 0x8, 0x1c, 0x74add47b, 0x0, 0x8000, 0x2400, 0x10, 0x1ff, 0x7, 0x8, 0xeb7, 0x81, 0x80, 0x3ff, 0xb4, 0x2, 0x6, 0x7f, 0x7, 0x727, 0x2, 0xd790, 0x200, 0xfffffdc1, 0x1, 0x260, 0x1, 0x4, 0xa, 0xa3c0, 0x8, 0x200, 0xfffffffb, 0x6, 0x7, 0x53, 0x1, 0x3, 0x1, 0x6, 0x4, 0x1, 0xfffffffa, 0x5, 0x6, 0x1, 0x2, 0x940a, 0x400, 0x0, 0x7, 0x1, 0x9, 0x4, 0x9, 0x8, 0x15, 0x7, 0x7, 0x6, 0x4, 0x0, 0x401, 0x2, 0x7fff, 0x0, 0x9, 0x0, 0x5, 0x5, 0x4, 0x0, 0x3, 0x40, 0x8f51, 0x9, 0xfffffff8, 0x3, 0xfffffe79, 0x7, 0x6, 0x5, 0xb, 0x0, 0x2, 0xcf42, 0x0, 0x7, 0x5, 0x7, 0x3, 0x80000000, 0x4, 0x1ff, 0x72d3, 0xc, 0xd, 0xe2a, 0x1, 0xff, 0x9, 0x3, 0xfff, 0x8, 0x8000, 0x5, 0x1, 0x3, 0x5, 0xc, 0xe3c1, 0x9, 0x100, 0x5, 0x3eb, 0x7, 0x9ff1, 0x6, 0x8001, 0x8, 0xffffffff, 0xa4, 0x8, 0x7, 0xffff, 0x7, 0x0, 0x1a89, 0x3, 0x200, 0xfff, 0x108, 0x3, 0x6, 0x4, 0xca, 0x8001, 0x1, 0x5, 0x4, 0x9, 0x1, 0x80000001, 0x6, 0x5, 0x4, 0x7, 0x873, 0x2, 0x2, 0x200, 0x9, 0x4, 0x0, 0x4, 0x4, 0x5, 0x2, 0xc8a, 0x7, 0x9, 0x9, 0x1000, 0x5, 0xfff, 0x2, 0x7, 0xd43d, 0x2, 0x3, 0x1, 0xffff3cb0, 0x97e, 0x100, 0x0, 0x1, 0x4, 0x88ce, 0x5, 0x9, 0xff, 0x25, 0xd, 0x2, 0x401, 0x1, 0x81, 0x3, 0xfffffffe, 0x8, 0x80000000, 0x6, 0x1, 0x1, 0x10000, 0x1, 0x7, 0x6, 0x200, 0x800, 0xcef, 0x6d585bbc, 0x3e7d, 0x40, 0xd4, 0x1, 0x5, 0x7, 0x8, 0x3, 0x1, 0x6a29, 0x0, 0x0, 0xcfe, 0x7, 0x9, 0x1, 0x9, 0xfb6e, 0x7a1, 0x8001, 0x0, 0x2, 0x8ca, 0x28, 0xbd63, 0x7, 0x3, 0x400, 0x0, 0x7, 0x4, 0x0, 0x0, 0x6, 0x401, 0xbfb, 0x4, 0xfffeffff, 0x5, 0x9, 0x598, 0x731, 0x10001, 0x2, 0x6, 0xffffb315, 0x7ff, 0x4, 0x5, 0xffffa5c8, 0x1, 0x5285, 0x0, 0x6, 0x6, 0x80000000, 0x8, 0xce11, 0x8001, 0x7, 0x1, 0x3, 0x6, 0x9, 0x5b1, 0xcf, 0x2, 0x100, 0x3, 0x7, 0xfffffffa, 0xffff, 0x3, 0x4, 0x2, 0x0, 0x7, 0x4c8, 0x1, 0x8000, 0x2, 0x8, 0x0, 0xb08c, 0x2, 0x5, 0x2, 0x9, 0x2, 0x80000000, 0x4, 0x9, 0x5, 0x7, 0x4, 0x2, 0x8, 0x8, 0xffffffff, 0x2, 0x3ff, 0x7f, 0x80000001, 0x7, 0x3, 0x9, 0xfffffffc, 0xb1e, 0x0, 0xff, 0x6, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x9, 0xed, 0xf8, 0x8, 0x0, 0x57, 0x18ec, 0x6b, 0xf5b7, 0x5002, 0x2, 0x38, 0x6, 0xffffffff, 0x4, 0x8, 0x7fd, 0x6, 0x3, 0x5, 0x1, 0x4, 0x0, 0x825, 0x9, 0x5, 0x8, 0x2, 0x6, 0xe9, 0x8, 0xb5c0, 0x2, 0x7, 0x4, 0x4, 0x5, 0x2, 0x8, 0x7, 0x5, 0x7, 0x6, 0x401, 0xda5d, 0x4, 0x0, 0x2, 0x8, 0x80000001, 0xe52, 0x7fff, 0x405, 0x39, 0x0, 0xb, 0xbe, 0x7, 0x1, 0x79d, 0x5, 0x768, 0x5, 0x8000, 0x3, 0x4, 0x7, 0x662, 0xffffdf74, 0x9, 0x1dec4000, 0x8, 0xc3, 0x80, 0x2, 0xffff8000, 0xea96, 0x1c, 0x3, 0xfff, 0x200, 0xcb, 0xffff7fff, 0x4, 0x400, 0xa, 0x4, 0x8, 0xffffffff, 0xff, 0xfffffffb, 0x0, 0x3, 0x4, 0x0, 0x5, 0x7, 0x524c, 0xa, 0x3, 0x1, 0x9, 0x7fff, 0xfffffffd, 0xc8a, 0x4, 0x800, 0x2, 0x479, 0x0, 0x6, 0x2, 0x1, 0x7fff, 0x0, 0x9, 0x14000000, 0x0, 0x6, 0x5, 0x0, 0x6, 0x0, 0x8, 0x5, 0xb, 0x1, 0x6, 0x9, 0x80000001, 0x4, 0x600000, 0xa, 0x0, 0x8db7, 0x9, 0xcc, 0xd5, 0x6000, 0xfffffff8, 0x3, 0x0, 0x101, 0x4, 0x7, 0x4b, 0x7f, 0x0, 0xc, 0xb, 0x3, 0x3, 0xe, 0x133e, 0x2, 0xe1f, 0x5, 0x58, 0xe33, 0x7, 0x10000, 0x0, 0x2, 0xc1b5, 0x7, 0x5b4, 0x7f, 0x1ff, 0x5, 0xffffff80, 0x0, 0xf, 0x2, 0x5, 0x7, 0x7f, 0x500, 0x0, 0xfffffffa, 0x3, 0x0, 0x100, 0xc, 0xff, 0x2, 0x800, 0x9, 0x0, 0xffff15dd, 0xb9, 0x7, 0x8382, 0x9, 0xf, 0xf, 0x10000, 0x80, 0x8000, 0x0, 0xa, 0xe, 0x4, 0x5, 0xe, 0x6, 0x6b, 0x4, 0x4, 0x7, 0xd, 0xfffffffa, 0x1000, 0x0, 0x3, 0x1, 0x6, 0xc0b, 0x7, 0x3, 0x5, 0x9, 0x0, 0x2, 0x0, 0x1, 0x5, 0x0, 0x40, 0x54c3, 0x3ff, 0x6, 0xffffffff, 0x6, 0x2, 0x8, 0x4, 0x4, 0x8, 0x7, 0x6, 0x6, 0xfffffff8, 0x5, 0x18, 0x2, 0x100, 0x7, 0x6, 0x8000, 0xfffffffe, 0x9, 0x5, 0x6, 0x0, 0x1, 0x7, 0x1, 0x4, 0x7fff, 0x1, 0x0, 0x1, 0x8001, 0xfffffffb, 0x7, 0x4, 0x401, 0x4, 0x8, 0x8ffe, 0x3, 0x8, 0x7, 0x1, 0x8, 0xbaa2, 0x5, 0x2, 0xfa2, 0x0, 0x6, 0x80000000, 0xffffd614, 0x912e, 0x0, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x9, 0xe, 0x3, 0x2, 0xffffff8b, 0x5, 0x9, 0xd, 0x0, 0x9, 0x2, 0x10000, 0x6, 0xdf, 0xffffffff, 0x7f, 0xffff8286, 0xffff, 0xd23, 0x3, 0x2, 0xfffffffa, 0x5, 0x1000, 0xffffffff, 0x7, 0x20, 0xc7d, 0x7, 0xf8d3, 0x6, 0x7, 0x3, 0xaedb, 0x6, 0x9ef, 0x8000, 0x0, 0x9, 0x3, 0x6, 0x5, 0x4, 0x8, 0x9, 0x4, 0x7, 0x8d4, 0x1000, 0x211, 0x1, 0x662, 0x3, 0x20, 0x6, 0x5, 0x1ff, 0x74, 0x80000000, 0x8, 0x5, 0xfffffffb, 0x1, 0x1fc00, 0xb, 0xff, 0x0, 0xfffffffb, 0x6, 0x2f63, 0x8000000, 0x7ff, 0xffff, 0x5, 0x9, 0xb, 0x1, 0x8, 0x5, 0x1000, 0x1, 0x6, 0x2, 0x81, 0x1, 0x4, 0xb, 0x7fff, 0x7, 0x9, 0x0, 0x7, 0xffffff6e, 0x7, 0x9, 0x7f, 0x101, 0x0, 0x400, 0x1000, 0x3, 0x7, 0x8, 0x8000, 0x0, 0x3, 0x9, 0x0, 0x6ebb7453, 0x2, 0xfffffffd, 0x0, 0x8, 0x6, 0x7, 0x7, 0x547c, 0x9, 0x7ff, 0x1, 0x2, 0x6, 0x3, 0x7, 0x9, 0x401, 0x3, 0x6, 0xe, 0x6, 0x16d, 0x9, 0x6, 0x3, 0x80000001, 0x3, 0x800, 0xa, 0x7, 0xff, 0x4, 0x5, 0xd4, 0x100, 0x4bcc, 0x7, 0xfffffffe, 0x1, 0x0, 0x81, 0x2ba3, 0x101, 0x3, 0x1, 0x1, 0x5e7efa59, 0x7fffffff, 0x3def, 0xb, 0x7, 0x9, 0x8, 0x10, 0x7f, 0xb94, 0x3b8d, 0x8, 0x7ff, 0x0, 0x9, 0x5, 0x10, 0x3, 0x0, 0x1, 0x20, 0x7, 0xc84, 0x200, 0x4, 0x7, 0x0, 0x2e4, 0x4, 0x30418fa9, 0x748, 0x2, 0x4, 0x80000001, 0x400, 0x7, 0x9, 0x3, 0x6, 0x63d551d4, 0x6, 0x240, 0xb2b, 0x5, 0x0, 0x4, 0x100, 0x1, 0x0, 0x5, 0x1, 0x7, 0x7d3d, 0x7, 0x9, 0x9, 0x0, 0x1, 0x0, 0x101, 0x5, 0x6, 0x401, 0x24000, 0xc2, 0x3, 0x5, 0x95b4, 0x3, 0x2, 0x8, 0x3, 0xfffffff9, 0x0, 0x5, 0x3, 0x24, 0x80000001, 0x9, 0xfff, 0x8, 0x4738, 0x9e69, 0xe, 0x1, 0x7, 0x81, 0x3, 0x7f, 0x6, 0x7, 0x400, 0x401, 0x10001, 0x1, 0x4, 0x7fff, 0xff, 0xa96, 0x6, 0x6, 0x3, 0x8, 0x4, 0x10000, 0x6, 0x5, 0x3, 0x2, 0xb, 0x8d71, 0x6, 0x554d481d, 0x1, 0x4, 0xaf0, 0x8, 0xffffffff, 0x5, 0x6, 0x800, 0x6, 0x0, 0x7ff, 0x8, 0x6, 0x58, 0x6, 0x7, 0x6, 0x7, 0xfff, 0x5, 0xfffffffc, 0x2, 0x8, 0x0, 0x0, 0x5, 0x1, 0xf, 0x3, 0x2e, 0x8, 0x2, 0xe20, 0x1, 0x6, 0x10, 0x6, 0x5, 0x7, 0x1, 0x100, 0x800, 0x9, 0xfffffffb, 0x6, 0x7, 0x3, 0x40, 0x4, 0x3, 0x1, 0x3, 0x8, 0xff, 0x458, 0x0, 0x7f, 0x8, 0x0, 0x80000000, 0x9d6, 0x3, 0x7602, 0x101, 0x5, 0x8001, 0x9, 0x80000001, 0x72e, 0x3, 0x2, 0xd63f, 0xaa, 0x9, 0xfffffffc, 0x4, 0x2, 0x6]})
r2 = getpgrp(0xffffffffffffffff)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000001080)={'\x00', 0x18, 0x8, 0x8000, 0x81, 0x0, r2})
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000001100)={{0x5, 0x0, 0x2, 0x8c07, 'syz1\x00', 0xc}, 0x6, 0x1, 0x7, r2, 0x6, 0x9, 'syz1\x00', &(0x7f00000010c0)=['\x00', '\x00', '\xa4,#$)&%}r%\'}%(:@\x00', '/&#&\xdd^--\x00', '/dev/bus/usb/00#/00#\x00', ',\')\x00'], 0x35})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/53, 0x35, 0x1, &(0x7f0000001280)=""/208, 0xd0}, &(0x7f00000013c0)=0x40)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x10001, &(0x7f0000001400)=0x1)
lstat(&(0x7f0000003740)='./file0\x00', &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003800)={0x0, 0x0, <r4=>0x0}, &(0x7f0000003840)=0xc)
lstat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = getgid()
getresuid(&(0x7f0000003b40)=<r7=>0x0, &(0x7f0000003b80), &(0x7f0000003bc0))
read$FUSE(r1, &(0x7f0000003c00)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000005c40)=<r9=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000005c80)={{0x1, 0x1, 0x18, <r10=>r0, {0x0, <r11=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000005cc0)={{0x1, 0x1, 0x18, r0, {<r12=>0xee00}}, './file0\x00'})
read$FUSE(r1, &(0x7f0000005d00)={0x2020, 0x0, 0x0, 0x0, <r13=>0x0}, 0x2020)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000007d40)={0x0, <r14=>0x0}, &(0x7f0000007d80)=0xc)
stat(&(0x7f0000007dc0)='./file0\x00', &(0x7f0000007e00)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
fstat(r1, &(0x7f0000008140)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = getgid()
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000082c0)=<r18=>0x0)
r19 = getegid()
syz_fuse_handle_req(r1, &(0x7f0000001440)="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", 0x2000, &(0x7f0000008440)={&(0x7f0000003440)={0x50, 0x0, 0x8, {0x7, 0x2d, 0xffffffff, 0x2000, 0xfffc, 0x100, 0xc, 0xe4000000, 0x0, 0x0, 0x10, 0xadf}}, &(0x7f00000034c0)={0x18, 0xffffffffffffffda, 0x10000, {0x80}}, &(0x7f0000003500)={0x18, 0x0, 0x400, {0x8}}, &(0x7f0000003540)={0x18, 0x0, 0x7ff, {0x9b36}}, &(0x7f0000003580)={0x18, 0x0, 0x1, {0x9}}, &(0x7f00000035c0)={0x28, 0x0, 0x54c5, {{0x200, 0x40000000, 0x2, r2}}}, &(0x7f0000003600)={0x60, 0x0, 0xf2, {{0x7ff, 0x1, 0x5, 0x3, 0xfffffffffffffffd, 0x5, 0x5, 0x5c6}}}, &(0x7f0000003680)={0x18, 0x0, 0x1, {0x3}}, &(0x7f00000036c0)={0x21, 0x0, 0x6, {'\xa4,#$)&%}r%\'}%(:@\x00'}}, &(0x7f0000003700)={0x20, 0x0, 0xe53}, &(0x7f0000003880)={0x78, 0x0, 0x2, {0x65, 0xfffffff7, 0x0, {0x3, 0x6, 0x5, 0xdb, 0x6, 0x6, 0x2, 0x80000000, 0x2, 0xa000, 0x5, r3, r4, 0x4, 0x6}}}, &(0x7f00000039c0)={0x90, 0xfffffffffffffff5, 0x7, {0x4, 0x3, 0x0, 0xffffffffffffffff, 0x4, 0x5, {0x0, 0xd9cb, 0xb4, 0x0, 0x10, 0x7b, 0x6, 0xd, 0x36b8, 0xc000, 0x2, r5, r6, 0xc, 0x401}}}, &(0x7f0000003a80)={0x88, 0x0, 0x9, [{0x3, 0xffffffffffffffff, 0x8, 0x5, ':!%+*\'(%'}, {0x1, 0x7, 0x0, 0x6}, {0x3, 0x80, 0x4, 0x2, ',\')\x00'}, {0x6, 0x3, 0x4, 0x9, ',\')\x00'}]}, &(0x7f0000007e80)={0x298, 0xfff960811e71dcaf, 0x1, [{{0x3, 0x2, 0x5, 0xffffffffffffffff, 0x80, 0x1, {0x3, 0x7, 0x4, 0x1, 0x1000, 0x5, 0x6, 0x5c6, 0x9, 0xc000, 0x8000, r7, r8, 0x0, 0x5}}, {0x1, 0x8, 0x11, 0x0, '\xa4,#$)&%}r%\'}%(:@\x00'}}, {{0x6, 0x1, 0x7, 0xa, 0x400, 0x3, {0x6, 0x61e, 0xfffffffffffffffa, 0xb5, 0x9, 0x5, 0x0, 0x3, 0x10000, 0x8000, 0xd, r9, r11, 0xfb8d, 0x3}}, {0x1, 0xfa1c, 0x2, 0x0, '&:'}}, {{0x1, 0x0, 0x101, 0x1, 0x4, 0x8f8, {0x5, 0x8, 0x100000001, 0x10, 0x6, 0x2b5, 0x3, 0x9, 0x1, 0x4000, 0x8, r12, r13, 0x2, 0x7fffffff}}, {0x6, 0x9, 0x0, 0x2}}, {{0x2, 0x2, 0x3fc0000000000000, 0x0, 0x5, 0x7ff, {0x3, 0x6, 0x140, 0xd, 0x8100000000, 0x5, 0x8, 0x8, 0xc58, 0xe000, 0xfffffff9, r14, r15, 0x7, 0xffff}}, {0x1, 0x7f0c, 0x3, 0x2, '\'{,'}}]}, &(0x7f00000081c0)={0xa0, 0x0, 0x7, {{0x6, 0x2, 0x497, 0xffffffffffffffe9, 0xffffffff, 0x200, {0x3, 0x1, 0xe, 0x5, 0x3, 0x9, 0x4, 0x9f75, 0x6, 0xa000, 0x0, r16, r17, 0x7dad, 0x8000}}, {0x0, 0x9}}}, &(0x7f0000008280)={0x20, 0x0, 0x4, {0x3, 0x4, 0x5, 0x7}}, &(0x7f0000008300)={0x130, 0x0, 0xe, {0x5, 0x1000, 0x0, '\x00', {0x7ff, 0xb, 0x0, 0xb869, r18, r19, 0x6000, '\x00', 0x3, 0x4, 0xc9d, 0xfffffffffffff0e0, {0xfffffffffffffff8, 0x8}, {0xd}, {0x6, 0xffff0000}, {0x9fb5, 0x6}, 0x0, 0x0, 0x7, 0x3}}}})
recvmmsg(r10, &(0x7f0000008740)=[{{&(0x7f00000084c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000086c0)=[{&(0x7f0000008540)=""/98, 0x62}, {&(0x7f00000085c0)=""/171, 0xab}, {&(0x7f0000008680)=""/1, 0x1}], 0x3, &(0x7f0000008700)=""/61, 0x3d}}], 0x1, 0x2, 0x0)
syz_open_dev$I2C(&(0x7f0000008780), 0xb622, 0x50542)
r20 = creat(&(0x7f00000087c0)='./file0\x00', 0x80)
ioctl$CEC_ADAP_G_PHYS_ADDR(r20, 0x80026101, &(0x7f0000008800))

30.624921948s ago: executing program 1 (id=663):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000021c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000010c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x0)
recvfrom$inet(r1, &(0x7f0000000000)=""/4084, 0xff4, 0x2102, 0x0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0)
ioctl$RTC_AIE_ON(r2, 0x7001)
ioctl$RTC_AIE_OFF(r2, 0x7002)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000001000)={0x18, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, &(0x7f00000013c0)={0x18, &(0x7f0000001200)={0x0, 0x6, 0x9d, {0x9d, 0x10, "39ee3a92a222968be411a587ffc115271394c097eb659608834def3c44fa53364eb25c7c3b93b702a8d2e0f7f86dfad913966b5f995dde510b6a3450a2fcc506646229d54ad24e4bfb4eb5a143f6456944143ac3b7fcd86197c972cf8dca2407469f6e8794aeed3c58d0c0965f78e236e383d868451ba49b9fa0b22e36ddcdad4edfd3a07118d8532d94dd60d222ce3e90f56625efe4ac2061d538"}}, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f00000012c0)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x4, [@generic={0x49, 0x10, 0x2, "97f2e8c8165cf7e3252eba543a516f21c8940e122d5d9fd2ae2a149400505200f48bb509bbc664771eb3520c982c2f63cda9a7bc83c81c12b97b4ff2366c6cb1b98418fa5e0b"}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0xcd, 0xf, 0x423d, [0xc000]}, @ssp_cap={0x14, 0x10, 0xa, 0xca, 0x2, 0x0, 0xf00f, 0x0, [0xffc0c0, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x9, 0x85}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x4, 0x10, "7a3a037b", "5a9359fa"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x5, 0x1, 0xf7, 0x2, 0xff}}}, &(0x7f0000001800)={0x44, 0x0, &(0x7f0000001440)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000014c0)={0x20, 0x0, 0x4}, &(0x7f0000001500)={0x20, 0x0, 0x8, {0x20, 0x20, [0x7877]}}, &(0x7f0000001540)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001580)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000015c0)={0x40, 0xb, 0x2, "e547"}, &(0x7f0000001600)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001640)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000001680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000016c0)={0x40, 0x19, 0x2, 'J1'}, &(0x7f0000001700)={0x40, 0x1a, 0x2, 0xde}, &(0x7f0000001740)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000001780)={0x40, 0x1e, 0x1, 0xfc}, &(0x7f00000017c0)={0x40, 0x21, 0x1, 0x9}})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000200)={0xc, &(0x7f0000001100)={0x20, 0x9, 0xe5, {0xe5, 0x23, "72e4d604337dd79315a3b004a3067fd875f90e56d876861142d2ac1ed40fec0c3d6f9c96d5f2ea1af8d533821e8f43ab20ce40dc407a95331e269b21b10a49abeb303c0094c43d1bfd899efbbac103d087bb9f1735e39a553e68902fedb943713f4e372602770cad25a7eee742435c6cdcbc4ae9268361f82bb5dbcf3bc835615de8f0f53f1b9c066d34d9d305fc1c698efd63e06614e31e3c7f09841eedded57b2d41830ef04aeff78a8f04083ad10820e74f94ebf8e82aa5c1ecc512e15122486f3e87602883083b9aac63cdf0ece98d610eef8665f168a1bc30b939d7fe4c3fa82f"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="4001ec000000932011a11be4056336119e46e851aac67b8d5c4f411e160e73f07c7965dc5d5e22c2794434e56df5a25992a486e4a0eb85be5907ddf0ca1efb568a78a45fecbb1a0a98720387011ce23a61a6fc21f9d67dd1e7e5b747f7887afcbe2b4c0ff365ca8d2cc3cddd6eede240113d0b541756d67e2e7c0e27a6d09ffdc92315cdf0ab5674e48efc0b73338e847bc40575ced3d64172167b3523b1b99e4eef9765066f5013c8622584eead2920c76df365e98ab49e75d61cf16d8aafe8065c91b2b4be08d02896de35c863c72dd90fa1afb4124acd1f6c3cc0d0418922937f6ae01bf400"/242], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}})
syz_usb_ep_read(r3, 0x4, 0x39, &(0x7f0000000000)=""/57)
syz_usb_ep_write(r3, 0x81, 0x2, &(0x7f0000000180)="91f3")

30.425675062s ago: executing program 4 (id=664):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x4004081)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24008000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)
close(r0)
syz_usb_connect(0x5, 0x8f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x5a, 0x29, 0x2e, 0x8, 0xc10, 0x0, 0x95a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x4, 0x3, 0xf1, 0x78, 0xa9, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x28, 0x80}}]}}, {{0x9, 0x4, 0x8f, 0x1, 0x4, 0xff, 0x2, 0x8c, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x80, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019002364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

29.739583197s ago: executing program 3 (id=665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_io_uring_setup(0x222c, &(0x7f0000000280)={0x0, 0x2, 0x10100}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x800000, 0x0, 0x0, 0x13})
io_uring_enter(r2, 0x53d1, 0x0, 0x4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x0, 0x4, 0x11d3}, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x91}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4040)

29.483669329s ago: executing program 2 (id=666):
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="c0217cb14adc", 0x6}], 0x1)

29.147067281s ago: executing program 2 (id=667):
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/147, 0x93, 0x0, &(0x7f00000001c0)=""/251, 0xfb}, &(0x7f0000000140)=0x40)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000001280))
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001240), 0x20040, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x40086643, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
getsockopt$IPT_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x0, 0x5, 0x7, 0x8b32]}, &(0x7f0000000200)=0x54)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004081)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c)
mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x2, 0x3, 0x0, 0x0, {0x4e24, 0x4e23, [0x5, 0xffff], [0x0, 0x0, 0x0, 0x7], 0x0, [0x5, 0x9]}, 0x8}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048984}, 0x20004010)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x800)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0x6a, [0x8, 0x1, 0x10000, 0x6, 0x3, 0x9], 0x0, 0x0, &(0x7f00000002c0)=""/106}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

25.786164531s ago: executing program 3 (id=668):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x400)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r3}}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5a, 0x8c, 0xf1, 0x10, 0xeb1, 0x7007, 0x202, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1c, 0x45}}]}}]}}, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
unshare(0x26020480)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)

25.407929638s ago: executing program 0 (id=669):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x108001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
semget$private(0x0, 0x4000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000e0390000000000000003ffffff060000006bf28d368cf0759e68cc6cf94bb7222c95120e6a7a8b3acabc8361a2ac966c1a786b5e10376fab91277cf848fec33b4f2c5d1f80a3ee45fe9d0b81dac5a532e5f1cb903096cde6452a97e23cd6f718a32899f5de3a619660286c7af00b6bb81a854f24d59a6d63e7272c2c77f5e804e02cdb6cc7d7182c158af02a2fea4e9da8d7e8a6f5"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))
r4 = syz_open_dev$media(&(0x7f0000000000), 0x8001, 0x180502)
read$alg(0xffffffffffffffff, &(0x7f0000000040)=""/24, 0x18)
ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x300000f, 0x810, r0, 0x100000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1b)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00J\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x3b4, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'veth1\x00', 0x4000})

25.377875814s ago: executing program 2 (id=670):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="cc", 0x1}], 0x1}, 0x4000080)
syz_usb_connect(0x0, 0x3b, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100000000090400000002020100022406"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0xa7, 0x7a}}]}}]}}, 0x0)

25.182566363s ago: executing program 4 (id=671):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
close(0x3)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000100)={0x0, 0xec25, 0x40, 0x2, 0x3d7}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x847ba, 0x79c, 0xe, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$packet(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x41c, 0x0, 0x5c, 0x160, 0x248, 0x3e0, 0x354, 0x228, 0x25a, 0x354, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @empty, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x200, 0x248, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x1], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x478)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4affeeaf541d002007000000", @ANYRES32=r6], 0x44}}, 0x0)

25.121701293s ago: executing program 1 (id=672):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x108001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
semget$private(0x0, 0x4000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000e0390000000000000003ffffff060000006bf28d368cf0759e68cc6cf94bb7222c95120e6a7a8b3acabc8361a2ac966c1a786b5e10376fab91277cf848fec33b4f2c5d1f80a3ee45fe9d0b81dac5a532e5f1cb903096cde6452a97e23cd6f718a32899f5de3a619660286c7af00b6bb81a854f24d59a6d63e7272c2c77f5e804e02cdb6cc7d7182c158af02a2fea4e9da8d7e8a6f5"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))
r4 = syz_open_dev$media(&(0x7f0000000000), 0x8001, 0x180502)
read$alg(0xffffffffffffffff, &(0x7f0000000040)=""/24, 0x18)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000000), &(0x7f00000001c0)})
ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x300000f, 0x810, r0, 0x100000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1b)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00J\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x3b4, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'veth1\x00', 0x4000})

15.318520727s ago: executing program 2 (id=673):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r1, 0x0)
read(r1, &(0x7f0000000380)=""/162, 0xa2)
write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011600100f5fe009d2fb112ff000000008a151f75080039", 0x27)
openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000000)={0x8, "a69dd9e6c28eabf7"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a6a35a08460d1220ec4d0102030109021b00010000a000090494000108ca6d000905070310"], 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x80003)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x6, 0x20, @buffer={0x0, 0x2c, 0x0}, &(0x7f00000001c0)="bf274c199f6e", 0x0, 0x1000000c, 0x0, 0x0, 0x0})
syz_open_procfs(0x0, &(0x7f0000001bc0)='net/ip_vs_stats\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x86, &(0x7f0000000440)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x3a}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)
openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040), 0xc0840, 0x0)
r7 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd25, 0x8, {0x1c, 0x14, 0x20, 0x4, 0xfc, 0x0, 0xc8, 0x1, 0x1000}, [@RTA_DST={0x8, 0x1, {0x800}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000)
r10 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$bt_hci(r10, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44)
read$FUSE(r8, &(0x7f0000001c00)={0x2020}, 0x2020)

15.317817168s ago: executing program 4 (id=674):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x22)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x2, 0x5f, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe953}, 0x94)
setresgid(0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x1c)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x3, @value=0x140000000000})
r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r5, r5, 0x21)
wait4(0x0, 0x0, 0x40000000, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r6, 0x8904, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'})
openat$pfkey(0xffffff9c, &(0x7f0000000500), 0x480, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r9 = dup(r8)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @remote, 0xf}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000300), 0x4)
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c)
fchmodat(r9, &(0x7f0000000780)='./file0\x00', 0x100)
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x16, 0x5, 0x17d, 0x0})
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)

15.317523871s ago: executing program 0 (id=675):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x108001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
semget$private(0x0, 0x4000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000e0390000000000000003ffffff060000006bf28d368cf0759e68cc6cf94bb7222c95120e6a7a8b3acabc8361a2ac966c1a786b5e10376fab91277cf848fec33b4f2c5d1f80a3ee45fe9d0b81dac5a532e5f1cb903096cde6452a97e23cd6f718a32899f5de3a619660286c7af00b6bb81a854f24d59a6d63e7272c2c77f5e804e02cdb6cc7d7182c158af02a2fea4e9da8"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))
r4 = syz_open_dev$media(&(0x7f0000000000), 0x8001, 0x180502)
read$alg(0xffffffffffffffff, &(0x7f0000000040)=""/24, 0x18)
ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000000), &(0x7f00000001c0)})
ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x300000f, 0x810, r0, 0x100000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1b)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00J\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x3b4, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'veth1\x00', 0x4000})

13.819944527s ago: executing program 4 (id=676):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10)
connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

0s ago: executing program 32 (id=668):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x400)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r3}}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5a, 0x8c, 0xf1, 0x10, 0xeb1, 0x7007, 0x202, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1c, 0x45}}]}}]}}, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
unshare(0x26020480)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

face 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  286.215467][   T10] usb usb4-port1: attempt power cycle
[  286.439287][  T797] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  286.760927][  T797] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00
[  286.803263][   T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  286.837033][   T10] usb 4-1: Using ep0 maxpacket: 16
[  286.843164][   T10] usb 4-1: no configurations
[  286.853187][  T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  286.872586][   T10] usb 4-1: can't read configurations, error -22
[  286.923907][  T797] usb 5-1: SerialNumber: syz
[  287.001562][  T797] usb 5-1: config 0 descriptor??
[  287.028560][ T7946] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  287.063379][   T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  287.085280][  T797] port100 5-1:0.0: NFC: Could not get supported command types
[  287.097015][   T10] usb 4-1: Using ep0 maxpacket: 16
[  287.103068][   T10] usb 4-1: no configurations
[  287.116470][   T10] usb 4-1: can't read configurations, error -22
[  287.145227][   T10] usb usb4-port1: unable to enumerate USB device
[  287.737962][   T10] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  287.837726][ T5924] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  287.966215][   T10] usb 3-1: device descriptor read/64, error -71
[  288.246232][ T5924] usb 1-1: Using ep0 maxpacket: 32
[  288.280303][ T5924] usb 1-1: config 0 has no interfaces?
[  288.304296][ T5924] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  288.306273][   T10] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  288.350467][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.392164][ T5924] usb 1-1: Product: syz
[  288.406198][ T5924] usb 1-1: Manufacturer: syz
[  288.442522][ T5924] usb 1-1: SerialNumber: syz
[  288.472626][   T10] usb 3-1: device descriptor read/64, error -71
[  288.498384][ T5924] usb 1-1: config 0 descriptor??
[  288.567143][ T7984] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001
[  288.581511][ T7984] Cannot find del_set index 1 as target
[  288.588047][   T10] usb usb3-port1: attempt power cycle
[  288.726581][ T5924] usb 5-1: USB disconnect, device number 32
[  288.828849][  T798] usb 1-1: USB disconnect, device number 48
[  288.938103][   T10] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  288.997515][   T10] usb 3-1: device descriptor read/8, error -71
[  289.101229][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  289.101244][   T30] audit: type=1326 audit(1769720631.958:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000
[  289.156990][   T30] audit: type=1326 audit(1769720631.998:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000
[  289.250410][   T30] audit: type=1326 audit(1769720631.998:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf739d539 code=0x7ffc0000
[  289.276635][   T39] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  289.281054][   T10] usb 3-1: new full-speed USB device number 61 using dummy_hcd
[  289.337663][   T10] usb 3-1: device descriptor read/8, error -71
[  289.385742][   T30] audit: type=1326 audit(1769720631.998:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000
[  289.458940][   T10] usb usb3-port1: unable to enumerate USB device
[  289.496550][   T39] usb 4-1: device descriptor read/64, error -71
[  289.534032][   T30] audit: type=1326 audit(1769720631.998:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000
[  289.649203][   T30] audit: type=1326 audit(1769720631.998:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf739d539 code=0x7ffc0000
[  289.822289][   T30] audit: type=1326 audit(1769720631.998:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000
[  289.874142][   T30] audit: type=1326 audit(1769720631.998:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf739d539 code=0x7ffc0000
[  289.924942][   T30] audit: type=1326 audit(1769720631.998:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000
[  289.988820][   T30] audit: type=1326 audit(1769720631.998:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf739d539 code=0x7ffc0000
[  290.026427][   T39] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  290.216212][   T39] usb 4-1: device descriptor read/64, error -71
[  290.366464][   T39] usb usb4-port1: attempt power cycle
[  290.775398][ T8019] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001
[  290.786745][   T39] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  290.835861][ T8019] Cannot find del_set index 1 as target
[  290.843931][   T39] usb 4-1: device descriptor read/8, error -71
[  290.892394][ T8021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.535'.
[  291.096299][   T39] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  291.136193][   T39] usb 4-1: device descriptor read/8, error -71
[  291.259842][   T39] usb usb4-port1: unable to enumerate USB device
[  291.407159][ T8034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.536'.
[  291.424190][ T8034] netlink: 60 bytes leftover after parsing attributes in process `syz.1.536'.
[  292.426377][  T797] usb 4-1: new full-speed USB device number 65 using dummy_hcd
[  292.599354][ T8059] FAULT_INJECTION: forcing a failure.
[  292.599354][ T8059] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  292.612718][  T797] usb 4-1: device descriptor read/64, error -71
[  292.626509][ T5924] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  292.638665][ T8059] CPU: 0 UID: 0 PID: 8059 Comm: syz.4.545 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  292.638686][ T8059] Tainted: [L]=SOFTLOCKUP
[  292.638691][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  292.638698][ T8059] Call Trace:
[  292.638703][ T8059]  <TASK>
[  292.638708][ T8059]  dump_stack_lvl+0xe8/0x150
[  292.638728][ T8059]  should_fail_ex+0x412/0x560
[  292.638745][ T8059]  _copy_to_user+0x31/0xb0
[  292.638764][ T8059]  simple_read_from_buffer+0xe1/0x170
[  292.638779][ T8059]  proc_fail_nth_read+0x1bb/0x230
[  292.638797][ T8059]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  292.638815][ T8059]  ? rw_verify_area+0x2a6/0x4d0
[  292.638831][ T8059]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  292.638848][ T8059]  vfs_read+0x20c/0xa70
[  292.638863][ T8059]  ? fdget_pos+0x246/0x320
[  292.638878][ T8059]  ? __pfx___mutex_lock+0x10/0x10
[  292.638891][ T8059]  ? __pfx_vfs_read+0x10/0x10
[  292.638908][ T8059]  ? __fget_files+0x2a/0x420
[  292.638923][ T8059]  ? __fget_files+0x3a0/0x420
[  292.638934][ T8059]  ? __fget_files+0x2a/0x420
[  292.638951][ T8059]  ksys_read+0x150/0x270
[  292.638968][ T8059]  ? __pfx_ksys_read+0x10/0x10
[  292.638986][ T8059]  ? asm_int80_emulation+0x1a/0x20
[  292.638999][ T8059]  ? asm_int80_emulation+0x1a/0x20
[  292.639010][ T8059]  do_int80_emulation+0x111/0x400
[  292.639024][ T8059]  ? clear_bhb_loop+0x60/0xb0
[  292.639035][ T8059]  ? clear_bhb_loop+0x60/0xb0
[  292.639048][ T8059]  asm_int80_emulation+0x1a/0x20
[  292.639059][ T8059] RIP: 0023:0xf71f572b
[  292.639070][ T8059] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  292.639079][ T8059] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  292.639093][ T8059] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54b65d0
[  292.639101][ T8059] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  292.639108][ T8059] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  292.639114][ T8059] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  292.639120][ T8059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  292.639137][ T8059]  </TASK>
[  293.147043][ T8061] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001
[  293.195336][ T8061] Cannot find del_set index 1 as target
[  293.218326][ T5924] usb 3-1: config 0 has an invalid interface number: 148 but max is 0
[  293.236562][  T797] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[  293.239618][ T5924] usb 3-1: config 0 has no interface number 0
[  293.263578][ T5924] usb 3-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  293.325196][ T5924] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  293.348647][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.498065][ T5924] usb 3-1: Product: syz
[  293.568004][ T5924] usb 3-1: Manufacturer: syz
[  293.576255][ T5924] usb 3-1: SerialNumber: syz
[  293.639176][ T8066] xt_policy: neither incoming nor outgoing policy selected
[  293.671708][ T5924] usb 3-1: config 0 descriptor??
[  293.681784][ T5924] kobil_sct 3-1:0.148: KOBIL USB smart card terminal converter detected
[  293.860246][ T5924] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  293.902494][ T5924] usb 3-1: USB disconnect, device number 62
[  293.934855][ T5924] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  294.029988][ T5924] kobil_sct 3-1:0.148: device disconnected
[  294.142634][   T30] kauditd_printk_skb: 56 callbacks suppressed
[  294.142916][   T30] audit: type=1804 audit(1769720636.998:228): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.550" name="/newroot/115/file1" dev="tmpfs" ino=626 res=1 errno=0
[  294.484355][   T52] Bluetooth: hci0: unknown advertising packet type: 0x51
[  294.484382][   T52] Bluetooth: hci0: Dropping invalid advertising data
[  294.499268][   T52] Bluetooth: hci0: unknown advertising packet type: 0x75
[  294.499301][   T52] Bluetooth: hci0: unknown advertising packet type: 0x51
[  294.507041][   T52] Bluetooth: hci0: Malformed LE Event: 0x02
[  294.977567][ T8082] fuse: Unknown parameter '�
'
[  295.226299][ T5882] usb 3-1: new full-speed USB device number 63 using dummy_hcd
[  295.368114][ T5882] usb 3-1: device descriptor read/64, error -71
[  295.606227][ T5882] usb 3-1: new full-speed USB device number 64 using dummy_hcd
[  295.703635][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.556'.
[  295.776343][ T5882] usb 3-1: device descriptor read/64, error -71
[  295.892086][ T5882] usb usb3-port1: attempt power cycle
[  296.079491][ T8100] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001
[  296.088151][ T8100] Cannot find del_set index 1 as target
[  296.132416][  T797] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  296.235138][ T8102] netlink: 68 bytes leftover after parsing attributes in process `syz.3.559'.
[  296.276828][ T5882] usb 3-1: new full-speed USB device number 65 using dummy_hcd
[  296.389698][ T5882] usb 3-1: device descriptor read/8, error -71
[  296.406756][  T797] usb 2-1: Using ep0 maxpacket: 8
[  296.474046][  T797] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  296.483840][  T797] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  296.536270][  T797] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  296.559636][  T797] usb 2-1: config 250 has no interface number 0
[  296.565932][  T797] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  296.606175][  T797] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  296.626199][  T797] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  296.646929][  T797] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  296.657995][ T5882] usb 3-1: new full-speed USB device number 66 using dummy_hcd
[  296.676272][  T797] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  296.702558][ T5882] usb 3-1: device descriptor read/8, error -71
[  296.716237][  T797] usb 2-1: config 250 interface 228 has no altsetting 0
[  296.735285][  T797] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  296.746906][  T797] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  296.755521][  T797] usb 2-1: Product: syz
[  296.765772][  T797] usb 2-1: SerialNumber: syz
[  296.776678][  T797] hub 2-1:250.228: bad descriptor, ignoring hub
[  296.783160][  T797] hub 2-1:250.228: probe with driver hub failed with error -5
[  296.816784][ T5882] usb usb3-port1: unable to enumerate USB device
[  296.871183][ T8105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.560'.
[  297.056308][  T797] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 45 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  297.160251][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.190544][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.326483][  T797] usb 2-1: reset high-speed USB device number 45 using dummy_hcd
[  297.406219][ T5858] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  297.567003][ T5858] usb 4-1: device descriptor read/64, error -71
[  297.748720][   T52] Bluetooth: hci1: unknown advertising packet type: 0x4e
[  297.748754][   T52] Bluetooth: hci1: Dropping invalid advertising data
[  297.773777][   T52] Bluetooth: hci1: unknown advertising packet type: 0x75
[  297.773813][   T52] Bluetooth: hci1: unknown advertising packet type: 0x52
[  297.781308][   T52] Bluetooth: hci1: Malformed LE Event: 0x02
[  297.830327][ T5858] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  297.997986][ T5858] usb 4-1: device descriptor read/64, error -71
[  298.068706][  T797] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  298.120530][ T5858] usb usb4-port1: attempt power cycle
[  298.168213][   T39] usb 2-1: USB disconnect, device number 45
[  298.186787][   T39] usblp0: removed
[  298.253296][  T797] usb 1-1: config 0 has an invalid interface number: 148 but max is 0
[  298.266986][  T797] usb 1-1: config 0 has no interface number 0
[  298.282823][  T797] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  298.286207][  T798] usb 3-1: new full-speed USB device number 67 using dummy_hcd
[  298.414915][  T797] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  298.436169][  T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.456624][  T797] usb 1-1: Product: syz
[  298.466399][ T5858] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  298.478562][  T797] usb 1-1: Manufacturer: syz
[  298.496556][  T797] usb 1-1: SerialNumber: syz
[  298.501870][ T5858] usb 4-1: device descriptor read/8, error -71
[  298.522382][  T797] usb 1-1: config 0 descriptor??
[  298.548142][  T797] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected
[  298.574165][  T797] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  298.749585][ T5858] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  298.787645][ T5858] usb 4-1: device descriptor read/8, error -71
[  298.879544][ T5924] usb 1-1: USB disconnect, device number 49
[  298.921901][ T5858] usb usb4-port1: unable to enumerate USB device
[  298.922411][ T5924] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  298.974726][ T5924] kobil_sct 1-1:0.148: device disconnected
[  299.070956][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'.
[  299.082876][ T8124] netlink: 'syz.1.565': attribute type 1 has an invalid length.
[  299.106559][ T8124] netlink: 'syz.1.565': attribute type 2 has an invalid length.
[  299.366319][ T5924] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  299.538986][ T5924] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  299.552807][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.581950][ T5924] usb 2-1: config 0 descriptor??
[  299.800090][ T5924] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  300.083736][ T5924] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  300.120148][ T5924] [drm] Initialized udl on minor 2
[  300.200136][ T5924] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  300.225682][ T5924] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  300.407533][ T8124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.434277][ T8124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.492353][   T39] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  300.502751][  T797] usb 2-1: USB disconnect, device number 46
[  300.522477][ T8135] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001
[  300.538650][   T39] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  300.587919][ T8135] Cannot find del_set index 1 as target
[  300.615744][ T8137] FAULT_INJECTION: forcing a failure.
[  300.615744][ T8137] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.679925][ T8137] CPU: 0 UID: 0 PID: 8137 Comm: syz.4.571 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  300.679959][ T8137] Tainted: [L]=SOFTLOCKUP
[  300.679967][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  300.679978][ T8137] Call Trace:
[  300.679986][ T8137]  <TASK>
[  300.679995][ T8137]  dump_stack_lvl+0xe8/0x150
[  300.680026][ T8137]  should_fail_ex+0x412/0x560
[  300.680053][ T8137]  _copy_from_user+0x2d/0xb0
[  300.680082][ T8137]  move_addr_to_kernel+0x7e/0x160
[  300.680110][ T8137]  get_compat_msghdr+0x3d8/0x4c0
[  300.680140][ T8137]  ? __pfx_get_compat_msghdr+0x10/0x10
[  300.680165][ T8137]  ? kstrtoull+0x12f/0x1d0
[  300.680202][ T8137]  ___sys_sendmsg+0x201/0x360
[  300.680225][ T8137]  ? __lock_acquire+0x6b5/0x2cf0
[  300.680249][ T8137]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.680270][ T8137]  ? get_pid_task+0x20/0x1f0
[  300.680288][ T8137]  ? get_pid_task+0x20/0x1f0
[  300.680305][ T8137]  ? get_pid_task+0x20/0x1f0
[  300.680352][ T8137]  ? __fget_files+0x2a/0x420
[  300.680372][ T8137]  ? __fget_files+0x3a0/0x420
[  300.680402][ T8137]  __sys_sendmsg+0x183/0x260
[  300.680430][ T8137]  ? __pfx___sys_sendmsg+0x10/0x10
[  300.680464][ T8137]  ? __pfx_ksys_write+0x10/0x10
[  300.680506][ T8137]  __do_fast_syscall_32+0x1d2/0x540
[  300.680528][ T8137]  ? lockdep_hardirqs_on+0x7a/0x110
[  300.680545][ T8137]  ? do_fast_syscall_32+0x33/0x70
[  300.680564][ T8137]  ? asm_int80_emulation+0x1a/0x20
[  300.680580][ T8137]  ? do_int80_emulation+0x20e/0x400
[  300.680604][ T8137]  do_fast_syscall_32+0x33/0x70
[  300.680625][ T8137]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  300.680647][ T8137] RIP: 0023:0xf748d539
[  300.680665][ T8137] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  300.680680][ T8137] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  300.680703][ T8137] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080
[  300.680716][ T8137] RDX: 0000000030000091 RSI: 0000000000000000 RDI: 0000000000000000
[  300.680727][ T8137] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  300.680738][ T8137] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  300.680748][ T8137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  300.680777][ T8137]  </TASK>
[  301.255070][ T8139] FAULT_INJECTION: forcing a failure.
[  301.255070][ T8139] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.419981][ T8139] CPU: 1 UID: 0 PID: 8139 Comm: syz.0.570 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  301.420014][ T8139] Tainted: [L]=SOFTLOCKUP
[  301.420021][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  301.420033][ T8139] Call Trace:
[  301.420040][ T8139]  <TASK>
[  301.420049][ T8139]  dump_stack_lvl+0xe8/0x150
[  301.420082][ T8139]  should_fail_ex+0x412/0x560
[  301.420110][ T8139]  _copy_to_user+0x31/0xb0
[  301.420141][ T8139]  simple_read_from_buffer+0xe1/0x170
[  301.420168][ T8139]  proc_fail_nth_read+0x1bb/0x230
[  301.420198][ T8139]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  301.420230][ T8139]  ? rw_verify_area+0x2a6/0x4d0
[  301.420255][ T8139]  ? tun_chr_write_iter+0x18a/0x200
[  301.420272][ T8139]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  301.420301][ T8139]  vfs_read+0x20c/0xa70
[  301.420326][ T8139]  ? fdget_pos+0x246/0x320
[  301.420353][ T8139]  ? __pfx___mutex_lock+0x10/0x10
[  301.420375][ T8139]  ? __pfx_vfs_read+0x10/0x10
[  301.420403][ T8139]  ? __fget_files+0x2a/0x420
[  301.420429][ T8139]  ? __fget_files+0x3a0/0x420
[  301.420448][ T8139]  ? __fget_files+0x2a/0x420
[  301.420479][ T8139]  ksys_read+0x150/0x270
[  301.420515][ T8139]  ? __pfx_ksys_read+0x10/0x10
[  301.420543][ T8139]  ? asm_int80_emulation+0x1a/0x20
[  301.420565][ T8139]  ? asm_int80_emulation+0x1a/0x20
[  301.420583][ T8139]  do_int80_emulation+0x111/0x400
[  301.420605][ T8139]  ? clear_bhb_loop+0x60/0xb0
[  301.420623][ T8139]  ? clear_bhb_loop+0x60/0xb0
[  301.420644][ T8139]  asm_int80_emulation+0x1a/0x20
[  301.420661][ T8139] RIP: 0023:0xf71a572b
[  301.420678][ T8139] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  301.420694][ T8139] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  301.420716][ T8139] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54665d0
[  301.420729][ T8139] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  301.420738][ T8139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  301.420749][ T8139] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  301.420761][ T8139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  301.420791][ T8139]  </TASK>
[  301.739875][   T52] Bluetooth: hci4: unknown advertising packet type: 0x52
[  301.739907][   T52] Bluetooth: hci4: Dropping invalid advertising data
[  301.753735][   T52] Bluetooth: hci4: unknown advertising packet type: 0x75
[  301.753770][   T52] Bluetooth: hci4: unknown advertising packet type: 0x52
[  301.760858][   T52] Bluetooth: hci4: Malformed LE Event: 0x02
[  303.236426][  T797] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  303.416287][  T797] usb 5-1: Using ep0 maxpacket: 16
[  303.427013][  T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.438210][ T5882] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  303.458427][  T797] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  303.488778][  T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.509065][  T797] usb 5-1: config 0 descriptor??
[  303.576291][ T5882] usb 2-1: device descriptor read/64, error -71
[  303.626210][ T5858] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  303.778420][ T5858] usb 1-1: config 0 has an invalid interface number: 185 but max is 0
[  303.787025][ T5858] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.816297][ T5858] usb 1-1: config 0 has no interface number 0
[  303.822594][ T5858] usb 1-1: config 0 interface 185 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  303.835914][ T5882] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  303.849183][ T5858] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82
[  303.860261][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.868404][ T5858] usb 1-1: Product: syz
[  303.872649][ T5858] usb 1-1: Manufacturer: syz
[  303.877538][ T5858] usb 1-1: SerialNumber: syz
[  303.885319][ T5858] usb 1-1: config 0 descriptor??
[  303.893066][ T5858] usb 1-1: bad CDC descriptors
[  303.899107][ T5858] usb 1-1: unsupported MDLM descriptors
[  303.933351][  T797] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  303.966484][ T5882] usb 2-1: device descriptor read/64, error -71
[  304.078619][ T5882] usb usb2-port1: attempt power cycle
[  304.098724][  T798] usb 1-1: USB disconnect, device number 50
[  304.146763][   T39] usb 5-1: USB disconnect, device number 33
[  304.416382][ T5882] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  304.436975][ T5882] usb 2-1: device descriptor read/8, error -71
[  304.456278][   T39] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  304.542047][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'.
[  304.551676][ T8181] netlink: 'syz.2.584': attribute type 1 has an invalid length.
[  304.559688][ T8181] netlink: 'syz.2.584': attribute type 2 has an invalid length.
[  304.626252][   T39] usb 4-1: Using ep0 maxpacket: 8
[  304.641140][   T39] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  304.665019][   T39] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  304.677350][ T5882] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  304.679877][   T39] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  304.697398][ T5882] usb 2-1: device descriptor read/8, error -71
[  304.706803][   T39] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  304.734640][   T39] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  304.746078][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.816613][ T5882] usb usb2-port1: unable to enumerate USB device
[  304.823355][  T797] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  305.168312][  T797] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  305.200059][  T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.220925][   T39] usb 4-1: GET_CAPABILITIES returned 0
[  305.228355][   T39] usbtmc 4-1:16.0: can't read capabilities
[  305.338950][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.586'.
[  305.364787][   T52] Bluetooth: hci0: unknown advertising packet type: 0x4e
[  305.364820][   T52] Bluetooth: hci0: Dropping invalid advertising data
[  305.379844][   T52] Bluetooth: hci0: unknown advertising packet type: 0x75
[  305.379879][   T52] Bluetooth: hci0: unknown advertising packet type: 0x4e
[  305.387388][   T52] Bluetooth: hci0: Malformed LE Event: 0x02
[  305.428786][   T39] usb 4-1: USB disconnect, device number 71
[  305.463421][  T797] usb 3-1: config 0 descriptor??
[  305.505182][   T10] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  305.549086][ T8192] netlink: 60 bytes leftover after parsing attributes in process `syz.4.586'.
[  305.702290][  T797] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  306.041118][  T797] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  306.048353][  T797] [drm] Initialized udl on minor 2
[  306.076252][ T5882] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  306.226685][  T797] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  306.236232][ T5882] usb 4-1: device descriptor read/64, error -71
[  306.262261][  T797] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  306.428093][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.464217][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.496222][ T5882] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  306.504090][ T5858] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  306.516564][ T5858] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  306.525994][  T797] usb 3-1: USB disconnect, device number 68
[  306.543627][ T5858] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  306.710368][ T5882] usb 4-1: device descriptor read/64, error -71
[  307.149234][ T5882] usb usb4-port1: attempt power cycle
[  307.446255][ T5858] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  307.742886][ T5858] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  307.756133][ T5858] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  307.760167][ T8213] FAULT_INJECTION: forcing a failure.
[  307.760167][ T8213] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  307.765353][ T5858] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  307.796288][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[  307.844609][ T8213] CPU: 0 UID: 0 PID: 8213 Comm: syz.3.594 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  307.844640][ T8213] Tainted: [L]=SOFTLOCKUP
[  307.844647][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  307.844659][ T8213] Call Trace:
[  307.844667][ T8213]  <TASK>
[  307.844676][ T8213]  dump_stack_lvl+0xe8/0x150
[  307.844704][ T8213]  should_fail_ex+0x412/0x560
[  307.844731][ T8213]  _copy_from_iter+0x1d3/0x1670
[  307.844760][ T8213]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  307.844792][ T8213]  ? __pfx__copy_from_iter+0x10/0x10
[  307.844816][ T8213]  ? __build_skb_around+0x22d/0x3c0
[  307.844840][ T8213]  ? __alloc_skb+0x193/0x390
[  307.844862][ T8213]  ? netlink_sendmsg+0x650/0xb40
[  307.844880][ T8213]  ? skb_put+0x11b/0x210
[  307.844905][ T8213]  netlink_sendmsg+0x6c0/0xb40
[  307.844935][ T8213]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.844959][ T8213]  ? aa_sock_msg_perm+0xf1/0x1b0
[  307.844983][ T8213]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  307.845006][ T8213]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.845025][ T8213]  ____sys_sendmsg+0xa68/0xad0
[  307.845059][ T8213]  ? __pfx_____sys_sendmsg+0x10/0x10
[  307.845088][ T8213]  ? kstrtoull+0x12f/0x1d0
[  307.845118][ T8213]  ___sys_sendmsg+0x2a5/0x360
[  307.845140][ T8213]  ? __lock_acquire+0x6b5/0x2cf0
[  307.845170][ T8213]  ? __pfx____sys_sendmsg+0x10/0x10
[  307.845197][ T8213]  ? get_pid_task+0x20/0x1f0
[  307.845216][ T8213]  ? get_pid_task+0x20/0x1f0
[  307.845233][ T8213]  ? get_pid_task+0x20/0x1f0
[  307.845281][ T8213]  ? __fget_files+0x2a/0x420
[  307.845302][ T8213]  ? __fget_files+0x3a0/0x420
[  307.845330][ T8213]  __sys_sendmsg+0x183/0x260
[  307.845356][ T8213]  ? __pfx___sys_sendmsg+0x10/0x10
[  307.845399][ T8213]  ? __pfx_ksys_write+0x10/0x10
[  307.845435][ T8213]  __do_fast_syscall_32+0x1d2/0x540
[  307.845457][ T8213]  ? lockdep_hardirqs_on+0x7a/0x110
[  307.845474][ T8213]  ? do_fast_syscall_32+0x33/0x70
[  307.845494][ T8213]  ? asm_int80_emulation+0x1a/0x20
[  307.845511][ T8213]  ? do_int80_emulation+0x20e/0x400
[  307.845535][ T8213]  do_fast_syscall_32+0x33/0x70
[  307.845556][ T8213]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  307.845578][ T8213] RIP: 0023:0xf743d539
[  307.845595][ T8213] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  307.845610][ T8213] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  307.845638][ T8213] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000400
[  307.845651][ T8213] RDX: 0000000002000000 RSI: 0000000000000000 RDI: 0000000000000000
[  307.845662][ T8213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  307.845673][ T8213] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  307.845685][ T8213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  307.845714][ T8213]  </TASK>
[  308.321996][ T5858] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.332579][ T5858] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.343758][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[  308.356600][ T5858] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.365605][ T5858] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.378719][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[  308.399355][ T5858] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.408598][ T5858] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.419633][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[  308.448167][ T5858] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.457276][ T5858] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.474713][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[  308.926888][ T5858] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  309.021128][ T5858] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  309.076272][   T39] usb 4-1: new full-speed USB device number 75 using dummy_hcd
[  309.106265][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[  309.116450][ T5858] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  309.148658][ T5858] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  309.176880][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[  309.240497][   T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  309.296262][   T39] usb 4-1: device descriptor read/64, error -71
[  309.319319][ T5858] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  309.333159][ T5858] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  309.350863][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[  309.471191][ T5858] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  309.486377][ T5858] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  309.517938][ T5858] usb 3-1: Product: syz
[  309.530940][ T5858] usb 3-1: Manufacturer: syz
[  309.537256][   T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  309.550388][ T5858] usb 3-1: SerialNumber: syz
[  309.561207][   T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  309.576441][   T39] usb 4-1: new full-speed USB device number 76 using dummy_hcd
[  309.578443][ T5858] usb 3-1: config 0 descriptor??
[  309.600531][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  309.620773][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.646525][ T5858] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  309.807121][ T8223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  309.876378][   T39] usb 4-1: device descriptor read/64, error -71
[  309.884513][    C0] usb 3-1: yurex_control_callback - control failed: -2
[  309.905208][  T798] usb 3-1: USB disconnect, device number 69
[  309.923422][  T798] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  309.967573][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  309.987246][   T39] usb usb4-port1: attempt power cycle
[  310.416382][   T39] usb 4-1: new full-speed USB device number 77 using dummy_hcd
[  310.455981][   T39] usb 4-1: device descriptor read/8, error -71
[  310.527891][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.539852][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.606942][   T30] audit: type=1326 audit(1769720653.458:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  310.719836][   T30] audit: type=1326 audit(1769720653.458:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  310.756290][   T39] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[  310.780614][   T30] audit: type=1326 audit(1769720653.458:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000
[  310.816382][   T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  310.834776][   T39] usb 4-1: device descriptor read/8, error -71
[  310.913754][   T30] audit: type=1326 audit(1769720653.468:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000
[  310.959569][   T39] usb usb4-port1: unable to enumerate USB device
[  310.982249][   T30] audit: type=1326 audit(1769720653.468:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  311.027098][   T10] usb 5-1: Using ep0 maxpacket: 32
[  311.037352][   T10] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  311.045890][   T10] usb 5-1: config 0 has no interface number 0
[  311.057729][   T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  311.067091][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.067141][   T30] audit: type=1326 audit(1769720653.468:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  311.169932][   T30] audit: type=1326 audit(1769720653.498:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf743d539 code=0x7ffc0000
[  311.215199][   T10] usb 5-1: Product: syz
[  311.246314][   T30] audit: type=1326 audit(1769720653.498:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  311.385362][   T30] audit: type=1326 audit(1769720653.498:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  311.407943][   T10] usb 5-1: Manufacturer: syz
[  311.412575][   T10] usb 5-1: SerialNumber: syz
[  311.487229][   T10] usb 5-1: config 0 descriptor??
[  311.559046][   T10] radio-si470x 5-1:0.35: could not find interrupt in endpoint
[  311.611271][   T10] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5
[  311.616776][   T30] audit: type=1326 audit(1769720653.498:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.0.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf743d539 code=0x7ffc0000
[  311.717533][   T10] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  311.742780][   T10] usbhid 5-1:0.35: couldn't find an input interrupt endpoint
[  311.788257][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'.
[  311.823208][ T8247] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[  311.853953][ T8247] netlink: 'syz.2.603': attribute type 2 has an invalid length.
[  312.216813][   T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  312.286298][ T5882] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  312.309303][ T5897] usb 1-1: USB disconnect, device number 52
[  312.415444][   T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  312.434943][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.462676][ T5882] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  312.482512][   T10] usb 3-1: config 0 descriptor??
[  312.491649][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.510285][ T5882] usb 4-1: Product: syz
[  312.518871][ T5882] usb 4-1: Manufacturer: syz
[  312.528620][ T5882] usb 4-1: SerialNumber: syz
[  312.544093][ T5882] usb 4-1: config 0 descriptor??
[  312.700412][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'.
[  312.712819][   T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  312.808111][ T5897] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  312.970532][   T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  312.978017][ T5882] usb-storage 4-1:0.0: USB Mass Storage device detected
[  312.985740][   T10] [drm] Initialized udl on minor 2
[  313.048698][ T5897] usb 1-1: device descriptor read/64, error -71
[  313.115363][   T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  313.147895][   T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  313.196458][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.215944][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.326476][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.342235][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.358012][ T5882] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  313.366195][ T5897] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  313.436946][ T5882] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  313.447487][   T10] usb 3-1: USB disconnect, device number 70
[  313.471668][ T5882] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  313.506622][ T5897] usb 1-1: device descriptor read/64, error -71
[  313.616408][ T5897] usb usb1-port1: attempt power cycle
[  313.771498][   T39] usb 5-1: USB disconnect, device number 34
[  313.966358][ T5897] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  313.987677][ T5897] usb 1-1: device descriptor read/8, error -71
[  314.006975][ T8266] kAFS: unable to lookup cell '\,'
[  314.065734][ T8268] FAULT_INJECTION: forcing a failure.
[  314.065734][ T8268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  314.079251][ T8268] CPU: 0 UID: 0 PID: 8268 Comm: syz.4.608 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  314.079273][ T8268] Tainted: [L]=SOFTLOCKUP
[  314.079278][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  314.079285][ T8268] Call Trace:
[  314.079291][ T8268]  <TASK>
[  314.079296][ T8268]  dump_stack_lvl+0xe8/0x150
[  314.079317][ T8268]  should_fail_ex+0x412/0x560
[  314.079333][ T8268]  _copy_from_iter+0x1d3/0x1670
[  314.079352][ T8268]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  314.079372][ T8268]  ? __pfx__copy_from_iter+0x10/0x10
[  314.079387][ T8268]  ? __build_skb_around+0x22d/0x3c0
[  314.079402][ T8268]  ? __alloc_skb+0x193/0x390
[  314.079425][ T8268]  ? netlink_sendmsg+0x650/0xb40
[  314.079436][ T8268]  ? skb_put+0x11b/0x210
[  314.079452][ T8268]  netlink_sendmsg+0x6c0/0xb40
[  314.079468][ T8268]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.079482][ T8268]  ? aa_sock_msg_perm+0xf1/0x1b0
[  314.079497][ T8268]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  314.079510][ T8268]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.079521][ T8268]  ____sys_sendmsg+0xa68/0xad0
[  314.079541][ T8268]  ? __pfx_____sys_sendmsg+0x10/0x10
[  314.079558][ T8268]  ? kstrtoull+0x12f/0x1d0
[  314.079576][ T8268]  ___sys_sendmsg+0x2a5/0x360
[  314.079590][ T8268]  ? __lock_acquire+0x6b5/0x2cf0
[  314.079608][ T8268]  ? __pfx____sys_sendmsg+0x10/0x10
[  314.079623][ T8268]  ? get_pid_task+0x20/0x1f0
[  314.079636][ T8268]  ? get_pid_task+0x20/0x1f0
[  314.079649][ T8268]  ? get_pid_task+0x20/0x1f0
[  314.079691][ T8268]  ? __fget_files+0x2a/0x420
[  314.079710][ T8268]  ? __fget_files+0x3a0/0x420
[  314.079739][ T8268]  __sys_sendmsg+0x183/0x260
[  314.079763][ T8268]  ? __pfx___sys_sendmsg+0x10/0x10
[  314.079784][ T8268]  ? __pfx_ksys_write+0x10/0x10
[  314.079806][ T8268]  __do_fast_syscall_32+0x1d2/0x540
[  314.079819][ T8268]  ? lockdep_hardirqs_on+0x7a/0x110
[  314.079829][ T8268]  ? do_fast_syscall_32+0x33/0x70
[  314.079840][ T8268]  ? asm_int80_emulation+0x1a/0x20
[  314.079851][ T8268]  ? do_int80_emulation+0x20e/0x400
[  314.079865][ T8268]  do_fast_syscall_32+0x33/0x70
[  314.079878][ T8268]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  314.079891][ T8268] RIP: 0023:0xf748d539
[  314.079903][ T8268] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  314.079912][ T8268] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  314.079927][ T8268] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000040
[  314.079935][ T8268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  314.079941][ T8268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  314.079948][ T8268] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  314.079954][ T8268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  314.079971][ T8268]  </TASK>
[  314.491936][ T8271] FAULT_INJECTION: forcing a failure.
[  314.491936][ T8271] name failslab, interval 1, probability 0, space 0, times 0
[  314.496633][ T5897] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  314.504870][ T8271] CPU: 1 UID: 0 PID: 8271 Comm: syz.4.611 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  314.504897][ T8271] Tainted: [L]=SOFTLOCKUP
[  314.504903][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  314.504914][ T8271] Call Trace:
[  314.504922][ T8271]  <TASK>
[  314.504930][ T8271]  dump_stack_lvl+0xe8/0x150
[  314.504959][ T8271]  should_fail_ex+0x412/0x560
[  314.504986][ T8271]  should_failslab+0xa8/0x100
[  314.505006][ T8271]  ? __pfx_ip6_dst_gc+0x10/0x10
[  314.505032][ T8271]  kmem_cache_alloc_noprof+0x87/0x6e0
[  314.505057][ T8271]  ? ip6_pol_route+0x160/0x13d0
[  314.505074][ T8271]  ? dst_alloc+0x105/0x170
[  314.505098][ T8271]  ? __pfx_ip6_dst_gc+0x10/0x10
[  314.505123][ T8271]  dst_alloc+0x105/0x170
[  314.505151][ T8271]  ip6_pol_route+0xafb/0x13d0
[  314.505168][ T8271]  ? ip6_pol_route+0x160/0x13d0
[  314.505190][ T8271]  ? __pfx_ip6_pol_route+0x10/0x10
[  314.505207][ T8271]  ? ip6t_do_table+0x1df/0x1560
[  314.505229][ T8271]  ? __local_bh_enable_ip+0xd0/0x130
[  314.505246][ T8271]  ? lockdep_hardirqs_on+0x7a/0x110
[  314.505264][ T8271]  ? inet6_ehashfn+0xaf/0x5a0
[  314.505282][ T8271]  ? ip6t_do_table+0x137d/0x1560
[  314.505306][ T8271]  fib6_rule_lookup+0x556/0x730
[  314.505326][ T8271]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  314.505344][ T8271]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  314.505370][ T8271]  ? __inet6_lookup_established+0xbca/0xc60
[  314.505389][ T8271]  ? ip6t_do_table+0x1df/0x1560
[  314.505427][ T8271]  ip6_route_input+0x730/0xad0
[  314.505451][ T8271]  ? __pfx_ip6_route_input+0x10/0x10
[  314.505497][ T8271]  ? ip6_rcv_finish_core+0x222/0x420
[  314.505522][ T8271]  ip6_rcv_finish+0x141/0x2e0
[  314.505547][ T8271]  NF_HOOK+0x336/0x3c0
[  314.505568][ T8271]  ? skb_orphan+0x4f/0xd0
[  314.505590][ T8271]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  314.505610][ T8271]  ? NF_HOOK+0x9e/0x3c0
[  314.505630][ T8271]  ? __pfx_NF_HOOK+0x10/0x10
[  314.505654][ T8271]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  314.505683][ T8271]  ? netif_receive_skb+0x102/0xbb0
[  314.505703][ T8271]  netif_receive_skb+0x278/0xbb0
[  314.505727][ T8271]  ? __pfx_netif_receive_skb+0x10/0x10
[  314.505750][ T8271]  ? tun_rx_batched+0x185/0x790
[  314.505771][ T8271]  tun_rx_batched+0x1de/0x790
[  314.505796][ T8271]  ? __pfx_tun_rx_batched+0x10/0x10
[  314.505815][ T8271]  ? tun_get_user+0x2669/0x3dd0
[  314.505835][ T8271]  ? tun_get_user+0x2669/0x3dd0
[  314.505857][ T8271]  ? tun_get_user+0x2354/0x3dd0
[  314.505875][ T8271]  ? __local_bh_enable_ip+0xd0/0x130
[  314.505895][ T8271]  ? tun_get_user+0x2669/0x3dd0
[  314.505912][ T8271]  tun_get_user+0x2a78/0x3dd0
[  314.505950][ T8271]  ? aa_file_perm+0x440/0x1630
[  314.505972][ T8271]  ? __pfx_tun_get_user+0x10/0x10
[  314.505993][ T8271]  ? __lock_acquire+0x6b5/0x2cf0
[  314.506031][ T8271]  ? ref_tracker_alloc+0x363/0x4d0
[  314.506055][ T8271]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  314.506084][ T8271]  ? tun_get+0x1c/0x2f0
[  314.506102][ T8271]  ? tun_get+0x1c/0x2f0
[  314.506126][ T8271]  ? tun_get+0x1c/0x2f0
[  314.506142][ T8271]  ? tun_get+0x1c/0x2f0
[  314.506165][ T8271]  tun_chr_write_iter+0x113/0x200
[  314.506186][ T8271]  vfs_write+0x61d/0xb90
[  314.506220][ T8271]  ? __pfx_vfs_write+0x10/0x10
[  314.506253][ T8271]  ? __fget_files+0x2a/0x420
[  314.506282][ T8271]  ksys_write+0x150/0x270
[  314.506309][ T8271]  ? __pfx_ksys_write+0x10/0x10
[  314.506337][ T8271]  ? asm_int80_emulation+0x1a/0x20
[  314.506356][ T8271]  ? asm_int80_emulation+0x1a/0x20
[  314.506374][ T8271]  do_int80_emulation+0x111/0x400
[  314.506394][ T8271]  ? clear_bhb_loop+0x60/0xb0
[  314.506411][ T8271]  ? clear_bhb_loop+0x60/0xb0
[  314.506440][ T8271]  asm_int80_emulation+0x1a/0x20
[  314.506456][ T8271] RIP: 0023:0xf71f572b
[  314.506473][ T8271] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  314.506488][ T8271] RSP: 002b:00000000f54b644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  314.506508][ T8271] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000180
[  314.506520][ T8271] RDX: 000000000000004e RSI: 0000000000000000 RDI: 0000000000000000
[  314.506531][ T8271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  314.506541][ T8271] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  314.506552][ T8271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  314.506580][ T8271]  </TASK>
[  314.996696][   T52] Bluetooth: hci0: unknown advertising packet type: 0x4f
[  314.996727][   T52] Bluetooth: hci0: Dropping invalid advertising data
[  315.011055][   T52] Bluetooth: hci0: unknown advertising packet type: 0x75
[  315.011088][   T52] Bluetooth: hci0: unknown advertising packet type: 0x4f
[  315.018454][   T52] Bluetooth: hci0: Malformed LE Event: 0x02
[  315.171030][ T5882] usb 4-1: USB disconnect, device number 79
[  315.240923][ T5897] usb 1-1: device descriptor read/8, error -71
[  315.379703][ T5897] usb usb1-port1: unable to enumerate USB device
[  315.756215][ T5897] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[  316.065382][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  316.065401][   T30] audit: type=1326 audit(1769720658.918:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  316.198984][ T5858] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  316.442607][   T30] audit: type=1326 audit(1769720658.918:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  316.486244][  T798] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  316.539474][ T5858] usb 5-1: config index 0 descriptor too short (expected 1828, got 36)
[  316.566429][ T5858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  316.609411][   T30] audit: type=1326 audit(1769720659.008:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d539 code=0x7ffc0000
[  316.661328][ T5858] usb 5-1: config 0 has no interfaces?
[  316.676293][  T798] usb 1-1: Using ep0 maxpacket: 32
[  316.698829][  T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.732171][ T5858] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  316.741568][  T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.821009][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.840781][   T30] audit: type=1326 audit(1769720659.008:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  316.864984][ T5858] usb 5-1: Product: syz
[  316.876212][ T5858] usb 5-1: Manufacturer: syz
[  316.880416][  T798] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  316.901283][ T5858] usb 5-1: SerialNumber: syz
[  316.914104][ T5858] usb 5-1: config 0 descriptor??
[  316.919381][   T30] audit: type=1326 audit(1769720659.008:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  316.964288][  T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.024070][  T798] usb 1-1: config 0 descriptor??
[  317.065356][   T30] audit: type=1326 audit(1769720659.008:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf743d539 code=0x7ffc0000
[  317.213637][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  317.225233][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  317.349508][   T30] audit: type=1326 audit(1769720659.008:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  317.454648][   T30] audit: type=1326 audit(1769720659.008:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf743d539 code=0x7ffc0000
[  317.501615][   T30] audit: type=1326 audit(1769720659.008:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  317.535482][   T30] audit: type=1326 audit(1769720659.008:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf743d539 code=0x7ffc0000
[  317.568648][ T8320] FAULT_INJECTION: forcing a failure.
[  317.568648][ T8320] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.590203][  T798] ft260 0003:0403:6030.000C: unknown main item tag 0x7
[  317.666415][ T8320] CPU: 1 UID: 0 PID: 8320 Comm: syz.1.622 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  317.666455][ T8320] Tainted: [L]=SOFTLOCKUP
[  317.666463][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  317.666474][ T8320] Call Trace:
[  317.666482][ T8320]  <TASK>
[  317.666491][ T8320]  dump_stack_lvl+0xe8/0x150
[  317.666522][ T8320]  should_fail_ex+0x412/0x560
[  317.666552][ T8320]  _copy_from_iter+0x1d3/0x1670
[  317.666586][ T8320]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  317.666617][ T8320]  ? __pfx__copy_from_iter+0x10/0x10
[  317.666642][ T8320]  ? __build_skb_around+0x22d/0x3c0
[  317.666667][ T8320]  ? __alloc_skb+0x193/0x390
[  317.666690][ T8320]  ? netlink_sendmsg+0x650/0xb40
[  317.666709][ T8320]  ? skb_put+0x11b/0x210
[  317.666737][ T8320]  netlink_sendmsg+0x6c0/0xb40
[  317.666767][ T8320]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.666789][ T8320]  ? aa_sock_msg_perm+0xf1/0x1b0
[  317.666811][ T8320]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  317.666833][ T8320]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.666852][ T8320]  ____sys_sendmsg+0xa68/0xad0
[  317.666886][ T8320]  ? __pfx_____sys_sendmsg+0x10/0x10
[  317.666916][ T8320]  ? kstrtoull+0x12f/0x1d0
[  317.666946][ T8320]  ___sys_sendmsg+0x2a5/0x360
[  317.666967][ T8320]  ? __lock_acquire+0x6b5/0x2cf0
[  317.666999][ T8320]  ? __pfx____sys_sendmsg+0x10/0x10
[  317.667027][ T8320]  ? get_pid_task+0x20/0x1f0
[  317.667047][ T8320]  ? get_pid_task+0x20/0x1f0
[  317.667065][ T8320]  ? get_pid_task+0x20/0x1f0
[  317.667134][ T8320]  ? __fget_files+0x2a/0x420
[  317.667154][ T8320]  ? __fget_files+0x3a0/0x420
[  317.667185][ T8320]  __sys_sendmsg+0x183/0x260
[  317.667213][ T8320]  ? __pfx___sys_sendmsg+0x10/0x10
[  317.667251][ T8320]  ? __pfx_ksys_write+0x10/0x10
[  317.667287][ T8320]  __do_fast_syscall_32+0x1d2/0x540
[  317.667308][ T8320]  ? lockdep_hardirqs_on+0x7a/0x110
[  317.667325][ T8320]  ? do_fast_syscall_32+0x33/0x70
[  317.667345][ T8320]  ? asm_int80_emulation+0x1a/0x20
[  317.667361][ T8320]  ? do_int80_emulation+0x20e/0x400
[  317.667386][ T8320]  do_fast_syscall_32+0x33/0x70
[  317.667408][ T8320]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  317.667430][ T8320] RIP: 0023:0xf739d539
[  317.667448][ T8320] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  317.667463][ T8320] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  317.667485][ T8320] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340
[  317.667499][ T8320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  317.667510][ T8320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  317.667521][ T8320] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  317.667532][ T8320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  317.667562][ T8320]  </TASK>
[  317.961771][  T798] ft260 0003:0403:6030.000C: chip code: 0000 0000
[  318.168145][  T798] ft260 0003:0403:6030.000C: failed to retrieve system status
[  318.176179][  T798] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -32
[  318.407103][ T8323] Cannot find del_set index 1 as target
[  318.725914][   T52] Bluetooth: hci0: unknown advertising packet type: 0x55
[  318.725971][   T52] Bluetooth: hci0: Dropping invalid advertising data
[  318.740298][   T52] Bluetooth: hci0: unknown advertising packet type: 0x75
[  318.740319][   T52] Bluetooth: hci0: unknown advertising packet type: 0x4f
[  318.747396][   T52] Bluetooth: hci0: Malformed LE Event: 0x02
[  319.256619][ T8330] xt_policy: neither incoming nor outgoing policy selected
[  319.557813][  T798] usb 1-1: USB disconnect, device number 57
[  319.762813][ T8340] FAULT_INJECTION: forcing a failure.
[  319.762813][ T8340] name failslab, interval 1, probability 0, space 0, times 0
[  319.812670][ T5924] usb 5-1: USB disconnect, device number 35
[  319.814285][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.2.630 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  319.814313][ T8340] Tainted: [L]=SOFTLOCKUP
[  319.814320][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  319.814330][ T8340] Call Trace:
[  319.814338][ T8340]  <TASK>
[  319.814345][ T8340]  dump_stack_lvl+0xe8/0x150
[  319.814381][ T8340]  should_fail_ex+0x412/0x560
[  319.814407][ T8340]  should_failslab+0xa8/0x100
[  319.814429][ T8340]  kmem_cache_alloc_noprof+0x87/0x6e0
[  319.814455][ T8340]  ? skb_clone+0x212/0x3a0
[  319.814482][ T8340]  skb_clone+0x212/0x3a0
[  319.814508][ T8340]  pfkey_sendmsg+0x4a3/0x1120
[  319.814541][ T8340]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  319.814578][ T8340]  ? __import_iovec+0x5d4/0x7e0
[  319.814603][ T8340]  ? aa_sock_msg_perm+0xf1/0x1b0
[  319.814625][ T8340]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  319.814645][ T8340]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  319.814661][ T8340]  ____sys_sendmsg+0xa68/0xad0
[  319.814692][ T8340]  ? __pfx_____sys_sendmsg+0x10/0x10
[  319.814718][ T8340]  ? kstrtoull+0x12f/0x1d0
[  319.814745][ T8340]  ___sys_sendmsg+0x2a5/0x360
[  319.814765][ T8340]  ? __lock_acquire+0x6b5/0x2cf0
[  319.814793][ T8340]  ? __pfx____sys_sendmsg+0x10/0x10
[  319.814816][ T8340]  ? get_pid_task+0x20/0x1f0
[  319.814835][ T8340]  ? get_pid_task+0x20/0x1f0
[  319.814850][ T8340]  ? get_pid_task+0x20/0x1f0
[  319.814895][ T8340]  ? __fget_files+0x2a/0x420
[  319.814912][ T8340]  ? __fget_files+0x3a0/0x420
[  319.814940][ T8340]  __sys_sendmsg+0x183/0x260
[  319.814964][ T8340]  ? __pfx___sys_sendmsg+0x10/0x10
[  319.814998][ T8340]  ? __pfx_ksys_write+0x10/0x10
[  319.815030][ T8340]  __do_fast_syscall_32+0x1d2/0x540
[  319.815048][ T8340]  ? lockdep_hardirqs_on+0x7a/0x110
[  319.815064][ T8340]  ? do_fast_syscall_32+0x33/0x70
[  319.815080][ T8340]  ? asm_int80_emulation+0x1a/0x20
[  319.815096][ T8340]  ? do_int80_emulation+0x20e/0x400
[  319.815118][ T8340]  do_fast_syscall_32+0x33/0x70
[  319.815137][ T8340]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  319.815157][ T8340] RIP: 0023:0xf7f14539
[  319.815173][ T8340] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  319.815187][ T8340] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  319.815207][ T8340] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  319.815220][ T8340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  319.815229][ T8340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  319.815239][ T8340] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  319.815249][ T8340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  319.815277][ T8340]  </TASK>
[  320.406787][  T798] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  320.481115][   T52] Bluetooth: hci3: unknown advertising packet type: 0x55
[  320.481157][   T52] Bluetooth: hci3: Dropping invalid advertising data
[  320.496073][   T52] Bluetooth: hci3: unknown advertising packet type: 0x75
[  320.496220][   T52] Bluetooth: hci3: unknown advertising packet type: 0x55
[  320.504249][   T52] Bluetooth: hci3: Malformed LE Event: 0x02
[  320.534290][ T8356] FAULT_INJECTION: forcing a failure.
[  320.534290][ T8356] name failslab, interval 1, probability 0, space 0, times 0
[  320.547508][ T8356] CPU: 0 UID: 0 PID: 8356 Comm: syz.2.635 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  320.547540][ T8356] Tainted: [L]=SOFTLOCKUP
[  320.547546][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  320.547558][ T8356] Call Trace:
[  320.547565][ T8356]  <TASK>
[  320.547573][ T8356]  dump_stack_lvl+0xe8/0x150
[  320.547603][ T8356]  should_fail_ex+0x412/0x560
[  320.547633][ T8356]  should_failslab+0xa8/0x100
[  320.547657][ T8356]  __kmalloc_cache_noprof+0x83/0x6e0
[  320.547678][ T8356]  ? sctp_add_bind_addr+0x8c/0x370
[  320.547696][ T8356]  ? __pfx_sctp_get_port_local+0x10/0x10
[  320.547725][ T8356]  sctp_add_bind_addr+0x8c/0x370
[  320.547742][ T8356]  ? sctp_auto_asconf_init+0x15c/0x1e0
[  320.547771][ T8356]  sctp_do_bind+0x5b2/0x9d0
[  320.547808][ T8356]  sctp_connect_new_asoc+0x270/0x6b0
[  320.547836][ T8356]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  320.547867][ T8356]  ? __local_bh_enable_ip+0xd0/0x130
[  320.547884][ T8356]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  320.547905][ T8356]  ? security_sctp_bind_connect+0x7e/0x2c0
[  320.547930][ T8356]  sctp_sendmsg+0x1528/0x2c10
[  320.547967][ T8356]  ? __pfx_sctp_sendmsg+0x10/0x10
[  320.547988][ T8356]  ? aa_sk_perm+0x15a/0x960
[  320.548013][ T8356]  ? aa_sk_perm+0x82d/0x960
[  320.548035][ T8356]  ? __might_fault+0xaf/0x130
[  320.548068][ T8356]  ? __pfx_aa_sk_perm+0x10/0x10
[  320.548093][ T8356]  ? sock_rps_record_flow+0x19/0x400
[  320.548122][ T8356]  ? inet_sendmsg+0x2f4/0x370
[  320.548163][ T8356]  ____sys_sendmsg+0x894/0xad0
[  320.548198][ T8356]  ? __pfx_____sys_sendmsg+0x10/0x10
[  320.548242][ T8356]  ___sys_sendmsg+0x2a5/0x360
[  320.548266][ T8356]  ? __lock_acquire+0x6b5/0x2cf0
[  320.548298][ T8356]  ? __pfx____sys_sendmsg+0x10/0x10
[  320.548326][ T8356]  ? kstrtoull+0x12f/0x1d0
[  320.548382][ T8356]  ? __fget_files+0x2a/0x420
[  320.548401][ T8356]  ? __fget_files+0x3a0/0x420
[  320.548434][ T8356]  __sys_sendmmsg+0x2e7/0x4e0
[  320.548465][ T8356]  ? __pfx___sys_sendmmsg+0x10/0x10
[  320.548501][ T8356]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  320.548542][ T8356]  ? ksys_write+0x242/0x270
[  320.548572][ T8356]  ? __pfx_ksys_write+0x10/0x10
[  320.548604][ T8356]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  320.548631][ T8356]  __do_fast_syscall_32+0x1d2/0x540
[  320.548653][ T8356]  ? lockdep_hardirqs_on+0x7a/0x110
[  320.548671][ T8356]  ? do_fast_syscall_32+0x33/0x70
[  320.548690][ T8356]  ? asm_int80_emulation+0x1a/0x20
[  320.548707][ T8356]  ? do_int80_emulation+0x20e/0x400
[  320.548733][ T8356]  do_fast_syscall_32+0x33/0x70
[  320.548755][ T8356]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  320.548777][ T8356] RIP: 0023:0xf7f14539
[  320.548795][ T8356] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  320.548811][ T8356] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  320.548834][ T8356] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380
[  320.548848][ T8356] RDX: 0000000000000001 RSI: 000000000004c040 RDI: 0000000000000000
[  320.548860][ T8356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  320.548872][ T8356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  320.548884][ T8356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  320.548916][ T8356]  </TASK>
[  320.608343][  T798] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  321.025002][  T798] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  321.036942][  T798] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  321.046349][  T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  321.055108][  T798] usb 1-1: SerialNumber: syz
[  321.224986][ T8367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.638'.
[  321.244785][ T8367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.638'.
[  321.511021][  T798] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  321.542702][  T798] usb-storage 1-1:1.0: USB Mass Storage device detected
[  321.552462][ T5897] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  321.585078][  T798] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  321.766730][  T798] scsi host1: usb-storage 1-1:1.0
[  321.895409][ T5897] usb 5-1: device descriptor read/64, error -71
[  322.151555][  T798] usb 1-1: USB disconnect, device number 58
[  322.236216][ T5897] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  322.369950][ T5897] usb 5-1: device descriptor read/64, error -71
[  322.466266][   T39] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  322.489180][ T5897] usb usb5-port1: attempt power cycle
[  322.638920][   T39] usb 2-1: config 0 has an invalid interface number: 148 but max is 0
[  322.663394][   T39] usb 2-1: config 0 has no interface number 0
[  322.675770][   T39] usb 2-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  322.720484][   T39] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  322.737221][   T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.745459][   T39] usb 2-1: Product: syz
[  322.792509][   T39] usb 2-1: Manufacturer: syz
[  322.806172][   T39] usb 2-1: SerialNumber: syz
[  322.871926][ T5858] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  322.879782][ T5897] usb 5-1: new full-speed USB device number 38 using dummy_hcd
[  322.903396][   T39] usb 2-1: config 0 descriptor??
[  322.910218][ T5897] usb 5-1: device descriptor read/8, error -71
[  322.931936][   T39] kobil_sct 2-1:0.148: KOBIL USB smart card terminal converter detected
[  322.950154][   T39] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  323.036960][ T5858] usb 3-1: Using ep0 maxpacket: 32
[  323.051889][ T5858] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  323.061226][ T5858] usb 3-1: config 0 has no interface number 0
[  323.069410][ T5858] usb 3-1: config 0 interface 12 has no altsetting 0
[  323.150503][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'.
[  323.170513][ T5858] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  323.186294][   T39] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  323.196212][ T5897] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  323.210491][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.235528][ T5897] usb 5-1: device descriptor read/8, error -71
[  323.285655][ T5858] usb 3-1: Product: syz
[  323.298011][ T5858] usb 3-1: Manufacturer: syz
[  323.312295][ T5858] usb 3-1: SerialNumber: syz
[  323.336224][   T39] usb 1-1: Using ep0 maxpacket: 16
[  323.344844][   T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.344916][   T10] usb 2-1: USB disconnect, device number 51
[  323.381740][ T5858] usb 3-1: config 0 descriptor??
[  323.386217][   T39] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  323.395053][   T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  323.406906][ T5897] usb usb5-port1: unable to enumerate USB device
[  323.416945][   T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.442605][   T10] kobil_sct 2-1:0.148: device disconnected
[  323.454999][   T39] usb 1-1: config 0 descriptor??
[  324.062878][   T52] Bluetooth: hci3: unknown advertising packet type: 0x55
[  324.062940][   T52] Bluetooth: hci3: Dropping invalid advertising data
[  324.077408][   T52] Bluetooth: hci3: unknown advertising packet type: 0x75
[  324.077443][   T52] Bluetooth: hci3: unknown advertising packet type: 0x55
[  324.085697][   T52] Bluetooth: hci3: Malformed LE Event: 0x02
[  324.110038][   T39] mcp2221 0003:04D8:00DD.000D: item fetching failed at offset 4/5
[  324.163966][   T39] mcp2221 0003:04D8:00DD.000D: can't parse reports
[  324.216339][ T8400] bridge0: port 4(veth0_to_bridge) entered blocking state
[  324.244881][   T39] mcp2221 0003:04D8:00DD.000D: probe with driver mcp2221 failed with error -22
[  324.254577][ T8400] bridge0: port 4(veth0_to_bridge) entered disabled state
[  324.302620][ T8400] veth0_to_bridge: entered allmulticast mode
[  324.367369][ T8400] veth0_to_bridge: entered promiscuous mode
[  324.383470][ T8400] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  324.446598][ T8400] bridge0: port 4(veth0_to_bridge) entered blocking state
[  324.453984][ T8400] bridge0: port 4(veth0_to_bridge) entered forwarding state
[  324.587985][ T5897] usb 1-1: USB disconnect, device number 59
[  324.849748][ T5858] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  324.861969][ T5858] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  324.898320][ T5858] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  324.908798][ T5858] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  324.946330][ T5858] usb 3-1: USB disconnect, device number 72
[  325.205925][ T8416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.651'.
[  325.216197][ T8416] netlink: 60 bytes leftover after parsing attributes in process `syz.1.651'.
[  325.388723][ T8423] Cannot find del_set index 1 as target
[  325.940424][ T5897] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  326.021495][ T5858] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  326.186691][ T5897] usb 3-1: Using ep0 maxpacket: 32
[  326.194051][ T5897] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  326.229012][ T5858] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  326.306495][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.314546][ T5858] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  326.340774][ T5897] usb 3-1: config 0 descriptor??
[  326.345905][ T5858] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  326.361485][ T5897] gspca_main: sunplus-2.14.0 probing 041e:400b
[  326.375317][ T5858] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0
[  326.390088][ T5858] usb 1-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  326.433546][ T5858] usb 1-1: config 7 interface 0 has no altsetting 0
[  326.453860][ T5858] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  326.538505][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.556296][   T10] usb 4-1: new full-speed USB device number 80 using dummy_hcd
[  326.766422][   T10] usb 4-1: device descriptor read/64, error -71
[  326.881384][ T5897] gspca_sunplus: reg_w_riv err -110
[  326.893756][ T5897] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[  327.016244][   T10] usb 4-1: new full-speed USB device number 81 using dummy_hcd
[  327.140420][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.154062][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.229413][ T5897] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[  327.388813][ T5897] usb 2-1: config 0 has an invalid interface number: 148 but max is 0
[  327.397190][ T5897] usb 2-1: config 0 has no interface number 0
[  327.452750][ T5897] usb 2-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  328.254424][ T5897] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  328.294397][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.361174][ T5897] usb 2-1: Product: syz
[  328.399247][ T5897] usb 2-1: Manufacturer: syz
[  328.417494][ T5897] usb 2-1: SerialNumber: syz
[  328.587363][ T5897] usb 2-1: config 0 descriptor??
[  328.725849][   T52] Bluetooth: hci3: unknown advertising packet type: 0x55
[  328.736252][   T52] Bluetooth: hci3: Dropping invalid advertising data
[  328.959841][   T52] Bluetooth: hci3: unknown advertising packet type: 0x75
[  328.959879][   T52] Bluetooth: hci3: unknown advertising packet type: 0x56
[  328.967142][   T52] Bluetooth: hci3: Malformed LE Event: 0x02
[  328.988522][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.659'.
[  330.120170][ T5897] kobil_sct 2-1:0.148: KOBIL USB smart card terminal converter detected
[  330.530904][ T5858] usbhid 1-1:7.0: can't add hid device: -71
[  330.653214][ T5858] usbhid 1-1:7.0: probe with driver usbhid failed with error -71
[  331.237031][ T8451] FAULT_INJECTION: forcing a failure.
[  331.237031][ T8451] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  331.442260][ T8451] CPU: 1 UID: 0 PID: 8451 Comm: syz.4.661 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  331.442296][ T8451] Tainted: [L]=SOFTLOCKUP
[  331.442304][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  331.442315][ T8451] Call Trace:
[  331.442323][ T8451]  <TASK>
[  331.442332][ T8451]  dump_stack_lvl+0xe8/0x150
[  331.442363][ T8451]  should_fail_ex+0x412/0x560
[  331.442393][ T8451]  _copy_from_iter+0x1d3/0x1670
[  331.442425][ T8451]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  331.442458][ T8451]  ? __pfx__copy_from_iter+0x10/0x10
[  331.442484][ T8451]  ? __build_skb_around+0x22d/0x3c0
[  331.442510][ T8451]  ? __alloc_skb+0x193/0x390
[  331.442532][ T8451]  ? netlink_sendmsg+0x650/0xb40
[  331.442551][ T8451]  ? skb_put+0x11b/0x210
[  331.442578][ T8451]  netlink_sendmsg+0x6c0/0xb40
[  331.442606][ T8451]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.442631][ T8451]  ? aa_sock_msg_perm+0xf1/0x1b0
[  331.442656][ T8451]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  331.442678][ T8451]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.442698][ T8451]  ____sys_sendmsg+0xa68/0xad0
[  331.442733][ T8451]  ? __pfx_____sys_sendmsg+0x10/0x10
[  331.442762][ T8451]  ? kstrtoull+0x12f/0x1d0
[  331.442793][ T8451]  ___sys_sendmsg+0x2a5/0x360
[  331.442817][ T8451]  ? __lock_acquire+0x6b5/0x2cf0
[  331.442847][ T8451]  ? __pfx____sys_sendmsg+0x10/0x10
[  331.442874][ T8451]  ? get_pid_task+0x20/0x1f0
[  331.442895][ T8451]  ? get_pid_task+0x20/0x1f0
[  331.442913][ T8451]  ? get_pid_task+0x20/0x1f0
[  331.442961][ T8451]  ? __fget_files+0x2a/0x420
[  331.442981][ T8451]  ? __fget_files+0x3a0/0x420
[  331.443011][ T8451]  __sys_sendmsg+0x183/0x260
[  331.443039][ T8451]  ? __pfx___sys_sendmsg+0x10/0x10
[  331.443076][ T8451]  ? __pfx_ksys_write+0x10/0x10
[  331.443113][ T8451]  __do_fast_syscall_32+0x1d2/0x540
[  331.443135][ T8451]  ? lockdep_hardirqs_on+0x7a/0x110
[  331.443154][ T8451]  ? do_fast_syscall_32+0x33/0x70
[  331.443173][ T8451]  ? asm_int80_emulation+0x1a/0x20
[  331.443190][ T8451]  ? do_int80_emulation+0x20e/0x400
[  331.443215][ T8451]  do_fast_syscall_32+0x33/0x70
[  331.443237][ T8451]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  331.443269][ T8451] RIP: 0023:0xf748d539
[  331.443287][ T8451] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  331.443304][ T8451] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  331.443325][ T8451] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140
[  331.443339][ T8451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  331.443350][ T8451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  331.443361][ T8451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  331.443372][ T8451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  331.443402][ T8451]  </TASK>
[  332.157219][ T5897] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  332.354318][ T5858] usb 1-1: USB disconnect, device number 60
[  332.386024][   T10] usb 4-1: device descriptor read/64, error -110
[  332.484016][ T5897] usb 2-1: USB disconnect, device number 52
[  332.561496][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.574215][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.587129][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.599769][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.612470][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.625102][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.637709][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.650316][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.663017][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.675797][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.775290][   T10] usb usb4-port1: attempt power cycle
[  332.922205][ T5897] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  333.075811][ T5897] kobil_sct 2-1:0.148: device disconnected
[  333.396254][   T39] usb 3-1: USB disconnect, device number 73
[  333.497015][ T5924] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  333.669262][   T30] kauditd_printk_skb: 51 callbacks suppressed
[  333.669282][   T30] audit: type=1326 audit(1769720676.508:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[  333.736227][ T5924] usb 5-1: Using ep0 maxpacket: 8
[  333.748073][ T5924] usb 5-1: config 162 has an invalid interface number: 197 but max is 1
[  333.761998][   T10] usb usb4-port1: Cannot enable. Maybe the USB cable is bad?
[  333.780543][ T5924] usb 5-1: config 162 has an invalid interface number: 143 but max is 1
[  333.780578][ T5924] usb 5-1: config 162 has no interface number 0
[  333.780596][ T5924] usb 5-1: config 162 has no interface number 1
[  333.780657][ T5924] usb 5-1: config 162 interface 197 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  333.780704][ T5924] usb 5-1: config 162 interface 143 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  333.780730][ T5924] usb 5-1: config 162 interface 143 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  333.780757][ T5924] usb 5-1: config 162 interface 143 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  333.780784][ T5924] usb 5-1: config 162 interface 143 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  333.780809][ T5924] usb 5-1: config 162 interface 143 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  333.780836][ T5924] usb 5-1: config 162 interface 197 has no altsetting 0
[  333.780856][ T5924] usb 5-1: config 162 interface 143 has no altsetting 0
[  333.786020][ T5924] usb 5-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7
[  333.786054][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.786121][ T5924] usb 5-1: Product: syz
[  333.786138][ T5924] usb 5-1: Manufacturer: syz
[  333.786155][ T5924] usb 5-1: SerialNumber: syz
[  333.911364][   T30] audit: type=1326 audit(1769720676.518:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[  333.911426][   T30] audit: type=1326 audit(1769720676.518:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f14539 code=0x7ffc0000
[  333.911499][   T30] audit: type=1326 audit(1769720676.528:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[  333.911542][   T30] audit: type=1326 audit(1769720676.528:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[  333.911614][   T30] audit: type=1326 audit(1769720676.528:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f14539 code=0x7ffc0000
[  333.911658][   T30] audit: type=1326 audit(1769720676.528:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[  333.911704][   T30] audit: type=1326 audit(1769720676.528:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f14539 code=0x7ffc0000
[  333.911777][   T30] audit: type=1326 audit(1769720676.528:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[  333.911821][   T30] audit: type=1326 audit(1769720676.528:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14539 code=0x7ffc0000
[  336.781396][ T5897] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  337.123467][ T5897] usb 2-1: Using ep0 maxpacket: 16
[  337.181282][   T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  337.248712][   T52] Bluetooth: hci5: HCI Read Local Supported Commands not supported
[  337.262217][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.280118][   T52] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  337.327136][ T5924] usb 5-1: USB disconnect, device number 40
[  337.548541][   T10] usb 4-1: device not accepting address 83, error -71
[  337.566181][    C0] net_ratelimit: 4207 callbacks suppressed
[  337.566204][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  337.567721][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  337.569316][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  337.570895][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  337.578665][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  337.580277][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  337.581781][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  337.583167][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  337.584739][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  337.586366][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  338.290008][ T5897] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  338.330558][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.718992][ T5897] usb 2-1: config 0 descriptor??
[  339.759197][ T5897] usb 2-1: can't set config #0, error -71
[  339.821376][ T5897] usb 2-1: USB disconnect, device number 53
[  340.159167][   T10] usb usb4-port1: unable to enumerate USB device
[  340.571805][ T5924] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  340.742092][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.826274][   T39] usb 5-1: new low-speed USB device number 41 using dummy_hcd
[  342.576783][    C0] net_ratelimit: 5403 callbacks suppressed
[  342.576805][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  342.595606][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  342.608602][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  342.621557][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  342.634483][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  342.647439][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  342.660576][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  342.673534][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  342.686509][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  342.699526][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  345.154645][    C1] sched: DL replenish lagged too much
[  346.646251][   T39] usb 5-1: device descriptor read/64, error -110
[  347.508733][ T5924] usb 3-1: string descriptor 0 read error: -71
[  347.515181][ T5924] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  347.588178][    C0] net_ratelimit: 2974 callbacks suppressed
[  347.588200][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  347.608219][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  347.621471][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  347.634580][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  347.647796][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  347.670404][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  347.685301][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  347.686577][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.699960][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  347.720602][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  347.735424][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  347.769595][ T5924] usb 3-1: config 0 descriptor??
[  347.815112][ T5924] usb 3-1: can't set config #0, error -71
[  347.900437][ T5924] usb 3-1: USB disconnect, device number 74
[  348.457888][ T5924] usb 3-1: new full-speed USB device number 75 using dummy_hcd
[  348.730310][ T5924] usb 3-1: config 0 has an invalid interface number: 148 but max is 0
[  348.768377][ T5924] usb 3-1: config 0 has no interface number 0
[  348.810934][ T5924] usb 3-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  349.018523][ T5924] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  349.028442][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.036924][ T5924] usb 3-1: Product: syz
[  349.041223][ T5924] usb 3-1: Manufacturer: syz
[  349.045841][ T5924] usb 3-1: SerialNumber: syz
[  349.062153][ T5924] usb 3-1: config 0 descriptor??
[  349.085445][ T5924] kobil_sct 3-1:0.148: KOBIL USB smart card terminal converter detected
[  349.710966][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'.
[  349.731114][ T5924] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  352.596374][    C0] net_ratelimit: 3540 callbacks suppressed
[  352.596391][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  352.615456][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  352.628600][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  352.642229][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  352.655357][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  352.668612][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  352.681791][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  352.695142][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  352.708393][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  352.721938][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  357.606372][    C0] net_ratelimit: 9456 callbacks suppressed
[  357.606390][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  357.624637][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.637014][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.650312][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  357.662484][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.674666][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.687959][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  357.700180][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.712536][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.725868][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  362.616675][    C0] net_ratelimit: 9110 callbacks suppressed
[  362.616694][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  362.634760][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.647020][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.667482][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  362.680074][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.692745][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.707444][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  362.719931][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.732522][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.747372][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  362.836228][   T39] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[  367.626472][    C1] net_ratelimit: 17457 callbacks suppressed
[  367.626496][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  367.626852][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  367.632958][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  367.644995][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.657192][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  367.669243][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.681286][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  367.693769][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  367.705460][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  367.717438][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.636322][    C1] net_ratelimit: 18155 callbacks suppressed
[  372.636347][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  372.636789][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  372.642735][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  372.654989][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.666871][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  372.678915][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.690816][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  372.704204][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  372.714956][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  372.726924][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.646386][    C1] net_ratelimit: 18958 callbacks suppressed
[  377.646410][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  377.646443][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  377.652700][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  377.664823][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.676721][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  377.688763][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.700774][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  377.714196][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  377.724801][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  377.736860][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  379.621622][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  379.640774][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  382.656335][    C1] net_ratelimit: 19104 callbacks suppressed
[  382.656360][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  382.657022][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  382.662642][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  382.674618][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.686689][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  382.698742][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.710715][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  382.722917][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  382.734535][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  382.746534][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.666272][    C1] net_ratelimit: 20073 callbacks suppressed
[  387.666297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  387.666434][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.672655][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  387.684788][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.696691][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  387.709251][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  387.720733][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  387.732914][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.744738][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  387.757101][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.676221][    C0] net_ratelimit: 20426 callbacks suppressed
[  392.676245][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.676281][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  392.682609][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.694482][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  392.707977][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  392.718421][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  392.730420][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.742417][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  392.754583][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.766421][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  397.686427][    C0] net_ratelimit: 19934 callbacks suppressed
[  397.686430][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  397.686452][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.686878][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.692806][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  397.705416][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  397.716899][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  397.729347][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.741358][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  397.753431][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.765421][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  402.696076][    C1] net_ratelimit: 18241 callbacks suppressed
[  402.696100][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  402.696545][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  402.702576][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  402.714582][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.726487][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  402.738526][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.750386][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  402.764039][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  402.774464][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  402.786418][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.706212][    C1] net_ratelimit: 17483 callbacks suppressed
[  407.706237][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  407.707585][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  407.712656][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  407.724679][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.736870][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  407.748771][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.760756][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  407.773032][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  407.784769][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  407.796638][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.716167][    C1] net_ratelimit: 17350 callbacks suppressed
[  412.716191][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  412.716481][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  412.722485][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  412.734469][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.746407][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  412.758443][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.770305][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  412.783555][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  412.794290][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  412.806358][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.726316][    C1] net_ratelimit: 17633 callbacks suppressed
[  417.726341][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  417.727261][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  417.732658][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  417.744628][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.756637][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  417.768803][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.780803][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  417.793130][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  417.804736][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  417.816721][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.736275][    C1] net_ratelimit: 17929 callbacks suppressed
[  422.736300][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  422.736402][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  422.742598][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  422.754731][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.766889][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  422.778953][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.790907][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  422.803159][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  422.814777][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  422.826762][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.746152][    C1] net_ratelimit: 17481 callbacks suppressed
[  427.746175][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  427.746349][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  427.752470][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  427.764476][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.776382][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  427.788500][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.800310][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  427.813576][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  427.824290][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  427.836275][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.756105][    C1] net_ratelimit: 17479 callbacks suppressed
[  432.756129][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  432.756173][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.762394][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  432.774596][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.786567][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  432.799191][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  432.811238][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  432.823195][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.835199][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  432.847242][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.766272][    C1] net_ratelimit: 17503 callbacks suppressed
[  437.766295][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  437.766678][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  437.772624][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  437.784598][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.796999][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  437.809008][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.820870][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  437.833235][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  437.844962][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  437.857925][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  440.183511][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  440.202613][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  442.776248][    C1] net_ratelimit: 18526 callbacks suppressed
[  442.776273][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  442.777414][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  442.782575][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  442.794597][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.806569][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  442.818741][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.830496][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  442.843053][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  442.854470][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  442.866550][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  447.786149][    C1] net_ratelimit: 19130 callbacks suppressed
[  447.786171][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  447.786216][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  447.792499][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  447.804969][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  447.816535][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  447.828508][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  447.840532][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  447.852676][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  447.864486][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  447.877999][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  452.796073][    C0] net_ratelimit: 18344 callbacks suppressed
[  452.796095][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  452.796178][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  452.802360][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  452.814292][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  452.826360][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  452.838452][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  452.851686][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  452.862481][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  452.874421][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  452.886436][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  457.806085][    C1] net_ratelimit: 17513 callbacks suppressed
[  457.806109][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  457.806333][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  457.812379][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  457.824449][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  457.836402][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  457.848861][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  457.860448][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  457.872444][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  457.884423][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  457.896719][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  462.816434][    C1] net_ratelimit: 17838 callbacks suppressed
[  462.816460][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  462.816863][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  462.822760][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  462.834854][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  462.846902][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  462.858957][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  462.870739][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  462.883414][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  462.894808][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  462.907005][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  467.826310][    C0] net_ratelimit: 19863 callbacks suppressed
[  467.826333][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  467.826420][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  467.833155][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  467.844846][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  467.856954][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  467.868814][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  467.881040][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  467.892841][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  467.906565][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  467.917075][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  472.836295][    C1] net_ratelimit: 20488 callbacks suppressed
[  472.836319][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  472.837348][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  472.842595][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  472.854751][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  472.866767][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  472.878843][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  472.890715][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  472.903165][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  472.914750][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  472.926859][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  473.516028][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  473.523109][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P8471/1:b..l
[  473.531352][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=36097, q=375 ncpus=2)
[  473.539109][    C1] task:syz.3.668       state:R  running task     stack:25920 pid:8471  tgid:8467  ppid:5838   task_flags:0x40044c flags:0x10080002
[  473.553792][    C1] Call Trace:
[  473.557198][    C1]  <TASK>
[  473.560159][    C1]  __schedule+0x14ea/0x5050
[  473.564726][    C1]  ? __pfx___schedule+0x10/0x10
[  473.569614][    C1]  preempt_schedule_irq+0x4d/0xa0
[  473.574682][    C1]  irqentry_exit+0x597/0x620
[  473.579310][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  473.585309][    C1] RIP: 0010:lock_acquire+0x221/0x330
[  473.590597][    C1] Code: ff ff ff e8 41 b0 f6 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 2b 61 52 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 50 94 f9 09 cc 48 8d 3d 38 12 52
[  473.610196][    C1] RSP: 0000:ffffc9001c436b98 EFLAGS: 00000282
[  473.616258][    C1] RAX: 9b1ad4214f07a800 RBX: 0000000000000000 RCX: 0000000000000046
[  473.624241][    C1] RDX: 000000009b256778 RSI: ffffffff8df34258 RDI: ffffffff8c073980
[  473.632208][    C1] RBP: ffffffff81759195 R08: ffffffff81759195 R09: ffffffff8e55a360
[  473.640196][    C1] R10: ffffc9001c436cf8 R11: ffffffff81afb170 R12: 0000000000000002
[  473.648229][    C1] R13: ffffffff8e55a360 R14: 0000000000000000 R15: 0000000000000246
[  473.656207][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  473.661409][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  473.667641][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  473.672850][    C1]  ? exit_mm+0x168/0x220
[  473.677108][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  473.682316][    C1]  unwind_next_frame+0xc2/0x23c0
[  473.687265][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  473.692398][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  473.697519][    C1]  ? __mmput+0x118/0x430
[  473.701778][    C1]  ? exit_mm+0x168/0x220
[  473.706129][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  473.712303][    C1]  arch_stack_walk+0x11b/0x150
[  473.717075][    C1]  ? exit_mm+0x168/0x220
[  473.721322][    C1]  stack_trace_save+0xa9/0x100
[  473.726097][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  473.731485][    C1]  ? stack_depot_save_flags+0x33/0x810
[  473.736965][    C1]  save_stack+0x122/0x230
[  473.741337][    C1]  ? __pfx_save_stack+0x10/0x10
[  473.746231][    C1]  ? page_ext_get+0x22/0x2e0
[  473.750840][    C1]  ? free_unref_folios+0xdce/0x1510
[  473.756033][    C1]  ? folios_put_refs+0x789/0x8d0
[  473.760966][    C1]  ? free_pages_and_swap_cache+0x2e7/0x5b0
[  473.766769][    C1]  ? tlb_flush_mmu+0x6d3/0xa30
[  473.771539][    C1]  ? unmap_page_range+0x39a3/0x4030
[  473.776744][    C1]  ? unmap_vmas+0x3c0/0x5c0
[  473.781263][    C1]  ? exit_mmap+0x251/0xb30
[  473.785719][    C1]  ? __mmput+0x118/0x430
[  473.789978][    C1]  ? exit_mm+0x168/0x220
[  473.794218][    C1]  ? page_ext_put+0x97/0xc0
[  473.798719][    C1]  __reset_page_owner+0x71/0x1f0
[  473.803668][    C1]  free_unref_folios+0xdce/0x1510
[  473.808692][    C1]  folios_put_refs+0x789/0x8d0
[  473.813641][    C1]  ? __pfx_folios_put_refs+0x10/0x10
[  473.818956][    C1]  ? free_swap_cache+0x109/0x300
[  473.823889][    C1]  free_pages_and_swap_cache+0x2e7/0x5b0
[  473.829520][    C1]  ? __pfx_free_pages_and_swap_cache+0x10/0x10
[  473.835790][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  473.840854][    C1]  tlb_flush_mmu+0x6d3/0xa30
[  473.845484][    C1]  ? unmap_page_range+0x397e/0x4030
[  473.850700][    C1]  unmap_page_range+0x39a3/0x4030
[  473.855775][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  473.861167][    C1]  ? mas_find+0xb0e/0xd30
[  473.865496][    C1]  ? unmap_vmas+0x157/0x5c0
[  473.869998][    C1]  unmap_vmas+0x3c0/0x5c0
[  473.874432][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  473.879319][    C1]  exit_mmap+0x251/0xb30
[  473.883677][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  473.888515][    C1]  ? kasan_quarantine_put+0xbb/0x1f0
[  473.893824][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  473.899118][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[  473.904315][    C1]  ? __khugepaged_exit+0x347/0x460
[  473.909527][    C1]  __mmput+0x118/0x430
[  473.913633][    C1]  exit_mm+0x168/0x220
[  473.917701][    C1]  do_exit+0x62e/0x2310
[  473.921859][    C1]  ? __pfx_do_exit+0x10/0x10
[  473.926448][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  473.931486][    C1]  do_group_exit+0x21b/0x2d0
[  473.936071][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  473.941275][    C1]  get_signal+0x1284/0x1330
[  473.945790][    C1]  arch_do_signal_or_restart+0xbc/0x830
[  473.951950][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  473.957159][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  473.963310][    C1]  ? __pfx___sys_recvmmsg+0x10/0x10
[  473.968510][    C1]  exit_to_user_mode_loop+0x86/0x480
[  473.973787][    C1]  ? rcu_is_watching+0x15/0xb0
[  473.978589][    C1]  __do_fast_syscall_32+0x38e/0x540
[  473.983788][    C1]  ? do_fast_syscall_32+0x33/0x70
[  473.988800][    C1]  ? irqentry_exit+0x10e/0x620
[  473.993566][    C1]  do_fast_syscall_32+0x33/0x70
[  473.998412][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  474.004728][    C1] RIP: 0023:0xf743d539
[  474.008786][    C1] RSP: 002b:00000000f544550c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  474.017201][    C1] RAX: 0000000000010106 RBX: 0000000000000004 RCX: 00000000800000c0
[  474.025451][    C1] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000
[  474.033423][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  474.041391][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  474.049352][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  474.057321][    C1]  </TASK>
[  474.060342][    C1] rcu: rcu_preempt kthread starved for 1150 jiffies! g36097 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  474.071463][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  474.081468][    C1] rcu: RCU grace-period kthread stack dump:
[  474.087382][    C1] task:rcu_preempt     state:R  running task     stack:27512 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  474.101005][    C1] Call Trace:
[  474.104307][    C1]  <TASK>
[  474.107271][    C1]  __schedule+0x14ea/0x5050
[  474.111841][    C1]  ? __pfx___schedule+0x10/0x10
[  474.116728][    C1]  ? schedule+0x90/0x360
[  474.120998][    C1]  schedule+0x164/0x360
[  474.125181][    C1]  schedule_timeout+0x158/0x2c0
[  474.130158][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  474.135567][    C1]  ? __pfx_process_timeout+0x10/0x10
[  474.140884][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  474.146812][    C1]  ? prepare_to_swait_event+0x340/0x370
[  474.152477][    C1]  rcu_gp_fqs_loop+0x312/0x1560
[  474.157388][    C1]  ? rcu_gp_init+0x11c4/0x1640
[  474.162180][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  474.168365][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  474.173681][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  474.178941][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  474.184784][    C1]  rcu_gp_kthread+0x9d/0x3b0
[  474.189408][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  474.194641][    C1]  ? __kthread_parkme+0x7a/0x1f0
[  474.199688][    C1]  ? __kthread_parkme+0x19c/0x1f0
[  474.204754][    C1]  kthread+0x726/0x8b0
[  474.208872][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  474.214128][    C1]  ? __pfx_kthread+0x10/0x10
[  474.218790][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  474.224020][    C1]  ? __pfx_kthread+0x10/0x10
[  474.228638][    C1]  ret_from_fork+0x51b/0xa40
[  474.233356][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  474.238584][    C1]  ? __switch_to+0xc82/0x1410
[  474.243296][    C1]  ? __pfx_kthread+0x10/0x10
[  474.247926][    C1]  ret_from_fork_asm+0x1a/0x30
[  474.252747][    C1]  </TASK>
[  474.255803][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  474.262150][    C1] Sending NMI from CPU 1 to CPUs 0:
[  474.267390][    C0] NMI backtrace for cpu 0
[  474.267408][    C0] CPU: 0 UID: 0 PID: 79 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  474.267429][    C0] Tainted: [L]=SOFTLOCKUP
[  474.267435][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  474.267445][    C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker
[  474.267475][    C0] RIP: 0010:rcu_is_watching+0x5a/0xb0
[  474.267493][    C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ac 18 83 00 48 c7 c3 d8 e6 f3 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d 29 05 49 11 74 11 83 e0 04 c1 e8 02 5b
[  474.267506][    C0] RSP: 0018:ffffc900000069d8 EFLAGS: 00000a06
[  474.267519][    C0] RAX: 0000000000000000 RBX: ffff8880b86336d8 RCX: 0000000080000102
[  474.267530][    C0] RDX: 000000007f45ee1d RSI: ffffffff8c073960 RDI: ffffffff8c073920
[  474.267542][    C0] RBP: dffffc0000000000 R08: ffffffff81759195 R09: ffffffff8e55a360
[  474.267559][    C0] R10: ffffc90000006b78 R11: fffff52000000d71 R12: 1ffff92000000d65
[  474.267570][    C0] R13: ffffc90000006b60 R14: ffffffff8df79dd0 R15: dffffc0000000000
[  474.267583][    C0] FS:  0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000
[  474.267596][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  474.267607][    C0] CR2: 00000000800c6018 CR3: 00000000767d4000 CR4: 00000000003526f0
[  474.267623][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  474.267633][    C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  474.267643][    C0] Call Trace:
[  474.267650][    C0]  <IRQ>
[  474.267656][    C0]  ? arch_stack_walk+0xe3/0x150
[  474.267673][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  474.267689][    C0]  unwind_next_frame+0xd4/0x23c0
[  474.267708][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  474.267724][    C0]  ? __unwind_start+0xf7/0x760
[  474.267742][    C0]  __unwind_start+0x5b8/0x760
[  474.267760][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  474.267779][    C0]  arch_stack_walk+0xe3/0x150
[  474.267797][    C0]  ? arch_stack_walk+0xe3/0x150
[  474.267813][    C0]  stack_trace_save+0xa9/0x100
[  474.267831][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  474.267850][    C0]  ? kasan_save_track+0x4f/0x80
[  474.267865][    C0]  ? kasan_save_track+0x3e/0x80
[  474.267880][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  474.267900][    C0]  kasan_save_track+0x3e/0x80
[  474.267935][    C0]  kasan_save_free_info+0x46/0x50
[  474.267953][    C0]  __kasan_slab_free+0x5c/0x80
[  474.267968][    C0]  kmem_cache_free+0x195/0x610
[  474.267983][    C0]  ? ip6_mc_input+0x8de/0xbd0
[  474.268004][    C0]  ip6_mc_input+0x8de/0xbd0
[  474.268026][    C0]  ? __pfx_ip6_mc_input+0x10/0x10
[  474.268047][    C0]  ? ip6_rcv_finish+0x29e/0x2e0
[  474.268066][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  474.268083][    C0]  ip_sabotage_in+0x1e1/0x270
[  474.268098][    C0]  ? __pfx_ip_sabotage_in+0x10/0x10
[  474.268112][    C0]  nf_hook_slow+0xc5/0x220
[  474.268132][    C0]  NF_HOOK+0x21f/0x3c0
[  474.268149][    C0]  ? skb_orphan+0xaf/0xd0
[  474.268167][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  474.268184][    C0]  ? NF_HOOK+0x9e/0x3c0
[  474.268202][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  474.268221][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  474.268242][    C0]  ? netif_receive_skb+0x102/0xbb0
[  474.268257][    C0]  netif_receive_skb+0x278/0xbb0
[  474.268271][    C0]  ? NF_HOOK+0xfa/0x3a0
[  474.268285][    C0]  ? lock_acquire+0x106/0x330
[  474.268305][    C0]  ? __pfx_netif_receive_skb+0x10/0x10
[  474.268322][    C0]  ? br_netif_receive_skb+0x126/0x190
[  474.268338][    C0]  NF_HOOK+0xa4/0x3a0
[  474.268352][    C0]  ? __pfx_br_netif_receive_skb+0x10/0x10
[  474.268367][    C0]  ? NF_HOOK+0xfa/0x3a0
[  474.268380][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  474.268395][    C0]  ? __pfx_br_netif_receive_skb+0x10/0x10
[  474.268413][    C0]  ? br_pass_frame_up+0x275/0x420
[  474.268429][    C0]  br_handle_frame_finish+0x14b2/0x1b40
[  474.268444][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  474.268463][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  474.268481][    C0]  ? ip6t_do_table+0x1a3/0x1560
[  474.268499][    C0]  ? __pfx_ip6t_do_table+0x10/0x10
[  474.268515][    C0]  ? nf_hook_slow+0x176/0x220
[  474.268532][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  474.268547][    C0]  br_nf_hook_thresh+0x3dd/0x4c0
[  474.268579][    C0]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  474.268602][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  474.268616][    C0]  ? nf_nat_ipv6_in+0x203/0x2c0
[  474.268641][    C0]  br_nf_pre_routing_finish_ipv6+0xa3a/0xd70
[  474.268657][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  474.268676][    C0]  br_nf_pre_routing_ipv6+0x374/0x6f0
[  474.268692][    C0]  ? br_nf_pre_routing_ipv6+0x421/0x6f0
[  474.268707][    C0]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  474.268724][    C0]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  474.268739][    C0]  ? br_nf_pre_routing+0x720/0x1470
[  474.268763][    C0]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  474.268784][    C0]  br_handle_frame+0x989/0x1520
[  474.268802][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  474.268818][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  474.268837][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  474.268851][    C0]  __netif_receive_skb_core+0x98f/0x30a0
[  474.268868][    C0]  ? ip6_mc_input+0x8de/0xbd0
[  474.268895][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  474.268910][    C0]  ? ip6_rcv_finish+0x29e/0x2e0
[  474.268929][    C0]  ? NF_HOOK+0x336/0x3c0
[  474.268949][    C0]  ? process_backlog+0x3eb/0x1950
[  474.268965][    C0]  ? lock_acquire+0x106/0x330
[  474.268983][    C0]  ? process_backlog+0x3eb/0x1950
[  474.269002][    C0]  ? process_backlog+0x3eb/0x1950
[  474.269017][    C0]  ? process_backlog+0x3eb/0x1950
[  474.269034][    C0]  ? process_backlog+0x3eb/0x1950
[  474.269049][    C0]  process_backlog+0x76d/0x1950
[  474.269073][    C0]  __napi_poll+0xae/0x340
[  474.269087][    C0]  ? skb_defer_free_flush+0x233/0x260
[  474.269104][    C0]  net_rx_action+0x627/0xf70
[  474.269120][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  474.269148][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  474.269176][    C0]  handle_softirqs+0x22a/0x7c0
[  474.269191][    C0]  ? do_softirq+0x76/0xd0
[  474.269207][    C0]  ? kernel_fpu_end+0x62/0x80
[  474.269224][    C0]  do_softirq+0x76/0xd0
[  474.269236][    C0]  </IRQ>
[  474.269242][    C0]  <TASK>
[  474.269248][    C0]  __local_bh_enable_ip+0xf8/0x130
[  474.269261][    C0]  blake2s_compress+0xf9/0x1eb0
[  474.269290][    C0]  ? __pfx_encode_point+0x10/0x10
[  474.269304][    C0]  ? kernel_fpu_begin_mask+0x2b6/0x380
[  474.269324][    C0]  ? __pfx_blake2s_compress+0x10/0x10
[  474.269345][    C0]  ? __pfx_blake2s_compress+0x10/0x10
[  474.269366][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  474.269381][    C0]  ? kernel_fpu_end+0x62/0x80
[  474.269399][    C0]  ? blake2s_update+0x255/0x450
[  474.269422][    C0]  ? blake2s_update+0x255/0x450
[  474.269445][    C0]  blake2s_final+0x116/0x270
[  474.269467][    C0]  hmac+0x20c/0x3b0
[  474.269485][    C0]  ? __pfx_hmac+0x10/0x10
[  474.269518][    C0]  kdf+0x126/0x2b0
[  474.269536][    C0]  ? __pfx_kdf+0x10/0x10
[  474.269568][    C0]  wg_noise_handshake_create_initiation+0x2bc/0x830
[  474.269591][    C0]  ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10
[  474.269609][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  474.269631][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  474.269653][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  474.269673][    C0]  ? ktime_get_coarse_with_offset+0x8a/0x150
[  474.269698][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  474.269712][    C0]  ? ktime_get_coarse_with_offset+0x8a/0x150
[  474.269730][    C0]  ? ktime_get_coarse_with_offset+0x102/0x150
[  474.269749][    C0]  wg_packet_handshake_send_worker+0x18d/0x350
[  474.269771][    C0]  ? __pfx_wg_packet_handshake_send_worker+0x10/0x10
[  474.269791][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  474.269817][    C0]  ? process_scheduled_works+0xa0f/0x17a0
[  474.269836][    C0]  ? process_scheduled_works+0xa0f/0x17a0
[  474.269857][    C0]  process_scheduled_works+0xaec/0x17a0
[  474.269889][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  474.269908][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  474.269925][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  474.269940][    C0]  ? schedule+0x90/0x360
[  474.269957][    C0]  worker_thread+0xda6/0x1360
[  474.269985][    C0]  ? __kthread_parkme+0x19c/0x1f0
[  474.270003][    C0]  kthread+0x726/0x8b0
[  474.270020][    C0]  ? __pfx_worker_thread+0x10/0x10
[  474.270040][    C0]  ? __pfx_kthread+0x10/0x10
[  474.270058][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  474.270078][    C0]  ? __pfx_kthread+0x10/0x10
[  474.270094][    C0]  ret_from_fork+0x51b/0xa40
[  474.270116][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  474.270136][    C0]  ? __switch_to+0xc82/0x1410
[  474.270157][    C0]  ? __pfx_kthread+0x10/0x10
[  474.270173][    C0]  ret_from_fork_asm+0x1a/0x30
[  474.270200][    C0]  </TASK>
[  477.846305][    C1] net_ratelimit: 14410 callbacks suppressed
[  477.846328][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  477.847709][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)
[  477.853591][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  477.865522][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  477.877619][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  477.889695][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  477.901523][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  477.914007][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  477.925633][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  477.937609][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  482.856187][    C1] net_ratelimit: 19120 callbacks suppressed
[  482.856187][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  482.856211][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  482.856576][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  482.863041][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  482.874632][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  482.886639][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  482.898613][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  482.910624][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  482.922537][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:91:5d:61:df:41, vlan:0)
[  482.936173][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:1f:81:ab:57:b5, vlan:0)