last executing test programs:

12m36.53952402s ago: executing program 1 (id=662):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept(r0, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80080)
write$P9_RXATTRCREATE(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0xcd7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x10, 0x3, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0xd33}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10, 0x7, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x5, 0x92, 0xe}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x6, 0x5, 0x9, 0x10, 0x2}, 0xde, &(0x7f0000000080)={0x5, 0xf, 0xde, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x80, 0x2, 0x5, 0xf000, 0xd8, [0xc0f0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x57, "5abe43d02f21543a18b26ed1186d6707"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xf8, 0xb5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x1, 0x8, 0x3ff, 0x4}, @generic={0x88, 0x10, 0x2, "408dc3cefbcbfbbc15c680fad30f2dfa896a144eca772021c1ef245993c16e909e52118bb32c6563f2b8ec0ff01f54837c13ba8b47a4de08f4229c8d59ed98d05c0fbe9568371f13004937b7114be2de6048c079cc07b52c5f40bf58bef561159c46bf96a999b351f899f89374fc8ecd0b4582e6ef9ddc1624f5f94b889fb8a8d49b5e37be"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "7c703a8dc4be0b461d14039a588f81b2"}]}, 0x2, [{0x8f, &(0x7f0000000180)=@string={0x8f, 0x3, "b6f95b815fe8fe464214e2971b9df974953aa35234b5e9b59263b89be19df99ac073f94fb556a76e959b3aafdb28ce2f02e045cb9b1af5e42d7d28eb2887de304e4c3ebf3368d09a0557867edfacd172d9d5ad4be7e4f8ab9ac29a0ca0bdbbbc0f00a75f18b0ecfd710d23ba64ddb7a2fce4f6f6fdf7ea9258e909038f152d2502d5b3f91cce9b4931f489a8d3"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40c}}]})
syz_usb_control_io$hid(r2, 0x0, 0x0)

12m33.46747861s ago: executing program 1 (id=674):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000200000000000000000000000000000000000000000000000200000000000000960700002dbd70000735000000000002be0000000000000000000000b1a0010008001f00040000000c0015005b073500040093"], 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x10000000)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110000300000004"], 0x28}, 0x4004004)

12m33.341172362s ago: executing program 1 (id=676):
kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3", 0xa9, 0x5, 0xffffffff}, {0x0, 0x0, 0x7, 0x2}], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20005005)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a11", 0x1f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x8001000000)

12m32.923117171s ago: executing program 1 (id=680):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000080)=0x20)
r1 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x0, 0x400, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004800}, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000000))

12m32.731088162s ago: executing program 1 (id=682):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x20)
renameat2(r0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x2000000, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/154, 0x9a}], 0x3}, 0x40000000)
chdir(&(0x7f0000000100)='./file0\x00')
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x1)
syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
getdents(r2, &(0x7f0000000080)=""/49, 0x31)

12m32.48782714s ago: executing program 1 (id=685):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x81, 0xf7ffffff, 0xffffffff})
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
setns(r0, 0x0)

12m17.279848266s ago: executing program 32 (id=685):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x81, 0xf7ffffff, 0xffffffff})
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
setns(r0, 0x0)

1m58.182553325s ago: executing program 0 (id=4304):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
fchdir(r1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}, 0xc03e}], 0x2, 0x40000004)

1m58.07517365s ago: executing program 0 (id=4305):
syz_usb_connect(0x2, 0x17b, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0x19, 0x8c, 0x35, 0x40, 0x423, 0xc, 0x40d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x169, 0x1, 0x5, 0x7, 0x60, 0xd5, "", [{{0x9, 0x4, 0x68, 0xff, 0x7, 0x28, 0xa5, 0x44, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x74f4}, [@mdlm={0x15, 0x24, 0x12, 0x6}]}], [{{0x9, 0x5, 0xd, 0xc, 0x0, 0x3, 0x81, 0xfb}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x10, 0x2, 0x10}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x39, 0xbd, 0x6}}, {{0x9, 0x5, 0x7, 0x1a, 0x400, 0xd, 0x9, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xae, 0x5}]}}, {{0x9, 0x5, 0x5, 0xc, 0x600, 0x3, 0x2, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x22, 0x4, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x1, 0x2, 0xf, [@generic={0xc3, 0x22, "49f7ff6b43117ef240798efd7a3fc3cc9898158a6e805957bd8e6413769119a9dcd66e6c603f8f5e824dc1f3504af006061518df4ba6147df478ca4c4dbea57f73886f8142de4d67339afa362bc283d7f339712072cb3de4422715d9978ef517a74b036fd451adb41b18e0ffcc97e4f537c4ea6ca9cb9ed5fca4c9b51c76401be663ff56e7c1c9b6f588be4147cb038cf88c81ff59eb790b7ab32833f6699d601d8e140a2ac403a246f95e023893988d9f565704b22063c16c2fd468379bf1bab0"}, @generic={0x22, 0x21, "0a2161a24820e58b4a6eb039845bead3b1eba3db363fcd3d5a78d002387b7263"}]}}]}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00')
sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0xac, 0x8, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}]}, @NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_USERDATA={0x4c, 0x6, "49d4a18886c0dcf03802cb56c5190dcb2cfb1607f87859f27de86c1d48856b5571f8bab0d364baa1d420d0c12fa5833361ba57e59acc59fa4cae927836fa318e2d882c29261bbc89"}, @NFTA_TABLE_USERDATA={0x24, 0x6, "8c078b569750c60c32225cf20ec0934a14b3fb28bc40aa1da64dd45c39748dc1"}, @NFTA_TABLE_USERDATA={0x14, 0x6, "5dc913029c55af20fa8d1dc241fa11b9"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x9ccd10a096dfa4ea, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa421436246b22df9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x30, 0x6, "629f514c4a703940d3c8bd43d72bae209912126049b878bedabe9800743529bdd58692f5a3c474bb15645b95"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x92, 0x6, "a99353e2172b6d712e1b541938f26c0cfe8a418f0f5d7c14373d193855e342bbe1a461f743c52b9a09aed77839b086504cdf0cb30afe9984a53ca9eab6b69a4013fd30cd73925ffb7e04e073f9cd3a77122c1d52eae9c2927cf9c75a5e4e709a18d6a40fcf6d758d506475b0d3401407cde2c83dde8cb1e5e2dc01e40a073b8780a625397a05b49c0ae09a6d8952"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x2a, 0x6, "0f4363f43cbd0532e3430497c53d5e6eb723c445cfa6777fff28312f5087c9a825f7104f6071"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}}, @NFT_MSG_NEWTABLE={0x188, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x40, 0x6, "2ab7311c373ee684c692110548cd2fa972f34c8b951999959a13e4b5bb70b19dfc63010faa99f4bf104db5839f1ac30e656bdb007d98acb088959921"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "72a335550ff264f9483a67a707c1cca2a9c88f0bfdbc894012e6be67d2a82d1d9d852c6e941e04f30f963570dd08b7ad735b5fcb8edfb2b562fcf746a1ec745e58fbd4e6053fe15f23288bf611a1536f322c174e8fc698"}, @NFTA_TABLE_USERDATA={0x92, 0x6, "2401a0e30591da663dff3506284e55a56f255b283297912c8f4cee9f11ad9b53e32e1530223d4927e452e95f97b7d3af22bfeab4bc86277738600ff24a612aae2d4af64bf5b1579518a0e2b3c61549d8f1c443baadf7c81cba6a16ba3dc0a8ab0d2ae9ce223b1594be888321803f5b1377b4c49757911ef5d68267785721593b7090286df8bff12b63325d1a6dcd"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x498}, 0x1, 0x0, 0x0, 0x1}, 0x40c0)
syz_open_dev$vbi(&(0x7f0000000280), 0x3, 0x2)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x7, 0x0, [{0x1, 0x2, 0xa73ce38b986fac16, 0x0, @adapter={0xe6b, 0x2, 0x2, 0x7, 0x4}}, {0x10c80, 0x1, 0x1, 0x0, @irqchip={0x6f6b, 0x8000}}, {0x0, 0x1, 0x0, 0x0, @msi={0x400, 0x4, 0x1, 0x3}}, {0x7fff, 0x0, 0x1, 0x0, @msi={0x7, 0x9, 0x5, 0x2}}, {0x3e38, 0x5, 0x0, 0x0, @sint={0x5, 0x9}}, {0x2ad, 0x2, 0x1, 0x0, @sint={0x2, 0xb}}, {0x4, 0x1, 0x1, 0x0, @msi={0xffffff7f, 0x1, 0x0, 0x1000}}]})
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040))
getdents64(r1, &(0x7f00000000c0)=""/157, 0x9d)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23)

1m55.071361116s ago: executing program 0 (id=4322):
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={0x0, 0x0, 0x8})

1m54.973932109s ago: executing program 0 (id=4325):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(0x0, 0x2, 0x40102)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

1m54.86745879s ago: executing program 0 (id=4327):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000540)="7ececacb4daf71c853b61e94216f9f03e6a96ff7ea1f8043f97fb727adc1ee013f4e8bd92558614c8ac8c74ee83e52c8b705b453c78e6a6a98100af4fe8c2f8a66a628cafeb0907c3605639d5e2f79b13842753eef27cad69743032a6e867d49da229042b93a17d63fc1ab317b9b2cb23a73d0726845dd1e935bc5d6298cb810d9c3b5478c01f1348dee28f7ca31b84e6649fd038eaeff82f037427d94591cc37597cc76c5ac403fa8751e850af2e1287c42206d72ea45af8cc46cc5e06782a8654a1c90e4cb57a8af1a4beaf7004fd158a82ad5471463c5e38107b826f8e51ef1")
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r3=>0x0], 0x1})
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000001980)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000001a00)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000700)="cbfcd1b5f34257537cb285a400394afa65cc1c8cb4c60e9fb61031c91ec76af953874c4cdb7ea5ae12c5220478e00fa6efebafc9150244aaa10ddf640a0af79c2d0b918866be999c8c02907ebbd7a0bea198d462a4726d3cec41f8e3f70bf898d8d9f84af76a00000000000077ec051075ba540000000000", 0x78}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="d8375e2ba3a559851daa095ad4ef3a9b396e6cb3dc7079ed419c4ce2f3aecb", 0x1f}, {&(0x7f0000001840)="b0834b6665d81e86d5e6a9f9c22df20a7e90230e26b73175eef9d5d322235c76c20acba0956f3830f8d6c833941b13dba99d07346861b6d21ff14b2c56edb573e4da9c2c30a5ccec77547a85122200460892b8f80d075b049164e89aba60baf96dcf05431e06c717ec2d09cce9bc62e2d8dd3ebd781b0d4237173f4df77ad906d2ff001e440d85771cee6471dac48662fdb6f375b420adb086c7a62918251e64ed01797b309e3310602066a549bd84970aecb865358ed02b3f", 0xb9}], 0x4, &(0x7f0000001940), 0x0, 0x4}], 0x2, 0x40800)
recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/89, 0xffffff1a}, {&(0x7f0000000280)=""/92, 0x5c}], 0x2, 0x0, 0x5}, 0x0)
ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f00000007c0)={{{0x3}}, 0x0, 0xfffffff3, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, <r7=>0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[<r9=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={r9, r7, r8, 0x4, 0x7ff, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff})
r10 = inotify_init1(0x80000)
inotify_add_watch(r10, &(0x7f0000000240)='.\x00', 0x60000726)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000080)={0x8})
ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r12=>r0, {0x2}}, './file0\x00'})
r13 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000500)=<r14=>0x0, &(0x7f0000000080)=<r15=>0x0, &(0x7f0000000140)=<r16=>0x0)
r17 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000100)=0x4)
sendmsg$nl_xfrm(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000120005010000000000000000280012"], 0x38}}, 0x20040810)
syz_io_uring_submit(r14, r15, r16, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd_index=0x4, 0x1, 0x8000, 0x54f, 0x1a, 0x0, {0x2}})
syz_ublk_add_dev(r13, r14, r15, r16, &(0x7f00000003c0)={0x2e, 0x6c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x853, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1da}}}, 0x0)
ioctl$DVB_DVR_DMX_QUERYBUF(r12, 0xc0186f3d, &(0x7f00000001c0)={0xa, 0xffffff56, 0x32a1, 0x5, 0x27, 0x7})

1m54.678669254s ago: executing program 0 (id=4331):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d04, 0xec000000, 0xcd}]})
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)={0x8080000, 0x4, 0x3, 0x0, 0x7})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket(0x2d, 0x2, 0x0)
bind$xdp(r4, 0x0, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000180)=0x1, &(0x7f0000000240)=0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r5, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
shutdown(r5, 0x1)
r6 = socket(0x1d, 0x2, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x6a, 0x3, 0x20000000, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = fcntl$dupfd(r0, 0x0, r0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
ioctl$SG_IO(r8, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x2, 0x20, 0x0}, &(0x7f0000000880)="259374c96ae3", 0x0, 0x40000000, 0x0, 0x0, 0x0})

1m40.205882025s ago: executing program 33 (id=4331):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d04, 0xec000000, 0xcd}]})
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)={0x8080000, 0x4, 0x3, 0x0, 0x7})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket(0x2d, 0x2, 0x0)
bind$xdp(r4, 0x0, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000180)=0x1, &(0x7f0000000240)=0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r5, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
shutdown(r5, 0x1)
r6 = socket(0x1d, 0x2, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x6a, 0x3, 0x20000000, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = fcntl$dupfd(r0, 0x0, r0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
ioctl$SG_IO(r8, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x2, 0x20, 0x0}, &(0x7f0000000880)="259374c96ae3", 0x0, 0x40000000, 0x0, 0x0, 0x0})

1m21.460018063s ago: executing program 2 (id=4462):
syz_emit_vhci(0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0xff}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
close_range(r2, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1m20.214299409s ago: executing program 2 (id=4466):
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x44004)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x7, 0xa}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)='G', 0x1}], 0x1}, 0x200480c0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0)

1m19.943815593s ago: executing program 2 (id=4467):
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semctl$GETZCNT(r0, 0x1, 0xf, 0x0)

1m18.971626871s ago: executing program 2 (id=4470):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74)

1m17.931730751s ago: executing program 2 (id=4475):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x7, 0x2}], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="00ce287325e2b1c31546c48422803e4812361f65f64c198181cec4121e58aa08c24bb88cf2cb32d9ed90ba5462efb7a658361b759a470afa497fc90ea1115262c9616145"], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
clock_nanosleep(0x0, 0xec38b1e0d97fa936, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)

1m17.477573027s ago: executing program 2 (id=4477):
r0 = syz_open_procfs(0x0, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/40, 0x28)
getdents(r0, &(0x7f0000000480)=""/56, 0x38)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000002060300000000000000000000000000050001000700000009"], 0x5c}}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
write$hidraw(0xffffffffffffffff, &(0x7f0000000400)="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", 0x112)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003b8000000b803"]}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x95, 0xfa, 0x40, 0x10, 0x2040, 0xd853, 0x6f14, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x0, 0xd, 0x0, 0x8c, 0xe6, 0x1a, 0x9}}]}}]}}, 0x0)
r5 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x0, 0x5}, 0x8)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0xae, 0x2)
open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1)
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x1, 0x9}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {0x2, 0x9}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x2, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @tick=0x94, {}, {}, @time=@time={0x5, 0x25e}}], 0x70)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

1m2.724886453s ago: executing program 34 (id=4477):
r0 = syz_open_procfs(0x0, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/40, 0x28)
getdents(r0, &(0x7f0000000480)=""/56, 0x38)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000002060300000000000000000000000000050001000700000009"], 0x5c}}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
write$hidraw(0xffffffffffffffff, &(0x7f0000000400)="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", 0x112)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003b8000000b803"]}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x95, 0xfa, 0x40, 0x10, 0x2040, 0xd853, 0x6f14, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x0, 0xd, 0x0, 0x8c, 0xe6, 0x1a, 0x9}}]}}]}}, 0x0)
r5 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x0, 0x5}, 0x8)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0xae, 0x2)
open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1)
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x1, 0x9}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {0x2, 0x9}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x2, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @tick=0x94, {}, {}, @time=@time={0x5, 0x25e}}], 0x70)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

5.334000254s ago: executing program 3 (id=4682):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0x450, 0x30, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [{0x438, 0x1, [@m_ipt={0x190, 0x10, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x59, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xf4, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0xc9, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946726678b31c6e99991735b21d31e8ef19e018e2c901e8d267cac71a9d3597b71e9b60fdb165fe02e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x164, 0x11, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x60, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a86742f2ae2ebc984490fe68940b5658"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xb9, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c018a8c4dce0e1f509600cfc2deb018c8cedc9a9d619d63faf53492c28f9fd99c2952312d7437c45dc56b17dc63d3e5e97ab2a16ee79c81478e10ba888305e6817945a0b68306a971c4a2382bd9577b679196987065bd27745023d7a979e0bde20eb6328afee98a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x4}]}, 0x450}, 0x1, 0x0, 0x0, 0x8004}, 0x880)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.307541699s ago: executing program 6 (id=4683):
mount$bind(0x0, 0x0, &(0x7f0000000180), 0x40001, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000040)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90c, 0xffffffff, '\x00', @string=&(0x7f00000000c0)=0xf7}})

5.195303849s ago: executing program 4 (id=4684):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8001600100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040043000000a8001600a400014020000a00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

5.194410671s ago: executing program 6 (id=4685):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000180)={0x4, "0ef3854dd9bdbfde6b030f7f00af6096b5a3c111ed3aa922c09cd4bf1e536395", 0x2, 0x4, 0x1, 0x80, 0x202, 0x4})
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x802881, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_data=&(0x7f0000000280)="91ad3c382e852266a5cfa99fd975143ee17ace4bcaaa4b5f24c27eec1f4ad468"})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3)
r4 = socket$kcm(0x2d, 0x2, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
listen(r5, 0x1)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r5)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={<r6=>r4})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000140)={'wlan0\x00'})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r6})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000200))
socket(0x10, 0x803, 0x0)
socket$packet(0x11, 0x3, 0x300)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r8, &(0x7f0000000440), 0x10)
listen(r8, 0x0)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
accept4$vsock_stream(r8, 0x0, 0x0, 0x800)
connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

5.035606162s ago: executing program 4 (id=4686):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = fsmount(r0, 0x0, 0x87)
fchdir(r1) (async)
r2 = open$dir(&(0x7f0000000200)='./file0\x00', 0x40000, 0x53)
r3 = openat(r2, &(0x7f0000000180)='.\x00', 0x0, 0x0) (async, rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
socket$l2tp(0x2, 0x2, 0x73) (async)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x1a}}, 0x14) (async)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r6, &(0x7f0000008180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c00004958c0600", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) (async, rerun: 32)
getdents64(r3, &(0x7f0000000140)=""/53, 0x35) (async, rerun: 32)
getdents64(r3, 0xfffffffffffffffe, 0x29)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r7, &(0x7f0000000040)=[{0x41, 0x0, 0x1, 0xfd, @tick, {}, {0xf}, @result={0xf, 0xf08}}], 0x1c) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8)

4.718141552s ago: executing program 4 (id=4687):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101"], 0x7c}}, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_submit(0x0, 0x0, &(0x7f0000000700))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x50)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00')
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)={0x80, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x10000005}}}}, [@NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_FLAGS={0x2c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1c, 0x13, [{0x48, 0x1}, {0x12}, {0x6}, {0x3}, {0x18}, {0x36}, {0xb, 0x1}, {0xd2f244c577b46085}, {0x6, 0x1}, {0x4, 0x1}, {0x30}, {0x1, 0x1}, {0x9}, {0x2}, {0x6, 0x1}, {0x6, 0x1}, {0x60}, {0x1, 0x1}, {0x18}, {0x1, 0x1}, {0x56f9d850da945290}, {0x9, 0x1}, {0xc}, {0x6c, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080)
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

3.948512758s ago: executing program 3 (id=4688):
socket$packet(0x11, 0x3, 0x300)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000180)={&(0x7f0000000780)={{@host}, {@my=0x0, 0x6}, 0x400, "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"}, 0x418, 0xfffffffc})
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)

3.611102026s ago: executing program 3 (id=4689):
io_setup(0x443, &(0x7f0000001100))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
r1 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
getpid()
socket(0x2, 0x80805, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5, 0x10}, &(0x7f00000002c0)=0xc)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1a, 0x2}, &(0x7f0000000100)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000001c0))
ftruncate(r1, 0x80079a0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000)={0x1, 0x8}, 0x2)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x80010, r1, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040))
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0)
r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCINITREPORT(r8, 0x4805, 0x0)
r9 = open(&(0x7f00009e1000)='./file0\x00', 0x161841, 0x1e1)
fcntl$setlease(r9, 0x400, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r10, 0x11, 0x66, &(0x7f0000000040), 0x4)

3.35394554s ago: executing program 6 (id=4691):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) (async)
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$snapshot(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000140)={0x0, 0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES32=r0]})
syz_usb_disconnect(r1) (async)
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000500)="452e4500000000f9d8c1a2", 0xb}], 0x1, 0x3, 0x8080400, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
mount(0x0, 0x0, &(0x7f0000000300)='nfs4\x00', 0x11080, 0x0) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000000500)="b228712d5a061c3de7a0d9639b87e69eb4a02e", 0x13)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = dup(r5)
r7 = gettid()
tkill(r7, 0xb)
r8 = syz_open_procfs(r7, &(0x7f0000000100)='limits\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x11, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000000)={0x6, 'batadv_slave_1\x00', {0x5}, 0x108}) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
close(r9) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000180)={0x0, 'veth0_vlan\x00', {0x4}, 0x3}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

3.232349283s ago: executing program 5 (id=4692):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000680), 0x42400, 0x0)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000a00))

2.933146313s ago: executing program 6 (id=4693):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r1 = epoll_create1(0x0)
epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async, rerun: 64)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64)
r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x17f, 0x20203143, 0x2, [0x2], [0x800], [0x0, 0x0, 0x0, 0x1000000], [0x0, 0x0, 0x0, 0x1]})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) (async)
close(0x3) (async)
r6 = dup3(r4, r2, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
socket(0xf, 0x3, 0x0) (async)
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000000)=0x3000180)

2.873507656s ago: executing program 5 (id=4694):
mount$bind(0x0, 0x0, &(0x7f0000000180), 0x40001, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90c, 0xffffffff, '\x00', @string=&(0x7f00000000c0)=0xf7}})

2.782475062s ago: executing program 4 (id=4695):
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x4000000)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
capset(0x0, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

2.683031071s ago: executing program 3 (id=4696):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x5, {0xff, 0x4, 0x3, 0x1ff}, {0x80000001, 0xeef, 0x6c, 0x6}, {0x1, 0x4}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000001780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001740)={&(0x7f00000000c0)={0x167c, 0xb, 0x6, 0x301, 0x70bd25, 0x25dfdbfc, {0x5, 0x0, 0x6}, [@typed={0x8, 0xdc, 0x0, 0x0, @uid=0xee00}, @typed={0xe3, 0xd4, 0x0, 0x0, @binary="3b3e3e3e9767deb99ab609800e42cb505e4ef2fc38e29b855d420209f7853bece493da9d5f9f5e46889d97c28f0ee3e4d0ee0074e6dee57d15c95b5ec4b7ed361156397602685ebd0f728d351ede8176e40dada517f2794b33e20fa60163597b7eea0013632dfc27efa1d030e3db6cc1bf8f5b0b89e6becd6a95d85011309e187bc56009faffe6753c631eb60239ad6e7371491fbc5340b53cfd2923ec6cebd6f0be19f15ae9129d0440ad060f22c350c4933e18b87660e771acd3d61451d0d662b32eb9d48c5722487a4517880727b8c5f29f9353641fe9a373bcbe75d077"}, @generic="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", @nested={0x122e, 0x5f, 0x0, 0x1, [@generic="884f343ca5484fba637dc264eca8bf195116b9a7a4f9a481ec7a5fb1cc318618d0646f0dc73e57bddc12a93d3eb54bc7ef5571444eda8366549c6039048b83a4bf31e2202867afe313113b16e6e0d7f3c9a844d8727d5a75c43a08265e4000d9c2b79454fe380aaaae93ab104c3e38f28d9cf3dcdf7eb39d1015cbebaf1c53e8866587953792fb16c0cad57b57713a14c4ffec557c2ce18a1c4148741623df508f81ed6a1c5f69f2ee45d75fa64dfb06a5357aaa35467f1d94ec03", @typed={0xc, 0xfc, 0x0, 0x0, @u64=0xe521}, @generic="79e1b2e5062eb2be47887919b176d31c7c4aeea7e399a73aefdd7cf1dfb74c1dda6d28db1756774f9e62e0cad6e259c1589cdd326aca73c1b50a4a7d7bee2e27742624fabe3aa9a4751bc7a49aaecf3b15667e3be2125cf84c61d05d9f089b69a13ad1c1f5f72b493434f1b783cdd3ce160d3637ed6dd6ca738504acc14af9743761d7bc269da939cd61dd287dc209540b0f615ac0657406b2a3b59701bff34fb38be8869fbe409defbe8afd9e9ff3beb8f999", @typed={0x9b, 0x14e, 0x0, 0x0, @binary="787e08b8042e791cb061515c0e362c3dac94ff34d1f8b4fbc1dbe74dd7f8f54b5c95fb0fae2d6c0e5cb0455b9214c16d1a46d5bb1f3cf0b52fe5e516736936fbe3600b34e3082e3c7e7986414586704d66246233f6108311b5aac01496db3215dcb6aaa9e4b3f3f90185cccf1932ceff90b7b97a30f643e4bde1bbc60d59208378c1763f4549d3c2faa13c2c2ee2cc0e945b6f2c40494f"}, @typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0x77}, @nested={0x4, 0xec}, @generic="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", @nested={0x4, 0xe8}]}, @typed={0xc, 0x14e, 0x0, 0x0, @u64=0x2}, @nested={0x181, 0x30, 0x0, 0x1, [@nested={0x4, 0x30}, @generic="2df3a75cfdd8e78f86d208f490a2b361567b5fce26996197eebc641d2b9b125a9d712cf749606e2daed992c94b326178dd8253bb82b7ed69d550188599e891b74ccc523cb58eacb26667779da020e2e7367b8a4514327f679b73f8b8a2becbdd9054e8162445f033d09be7915d64ea0e7adb758527b0bb1c694ecd1f4c5855004b00919168a58010a44ebed4ba5c2df493c55681ec3bafd59ec26bc147683bf0a11f3091ed2fce2c92d1a093e5690b3f4699c9aab52ff3a253a31e010a9a5f1ccb0dc6bc04fabf", @typed={0x1a, 0x4f, 0x0, 0x0, @binary="ec81765a114a6f01d3d8bf35f8bd1ec8a561606fb3a7"}, @generic="86c1a0979755653f870379f562eb59196ce51738cdbf48caff562c92d54c0662ebd9983b0fd8a780ec624122d290f94f7f7deba3feae38f91d4db82db7d668aaec28d75f6ded9da4d9c8775bb1b4e6178b77f925021d48ee3ae38d602ebd4325cefe2b2d66ddcb7859cfc4b3f492c0d0e0fc62ba188838638e36d83dcb8ba0b3f77b9df89849e511055a0cf07f5d0ff4686f72b3533c"]}, @nested={0xbd, 0x144, 0x0, 0x1, [@generic="ccb4f84d1a936b012602950b37608dd368adcb07b4f23767e2daa61f1940aa6ae162b6973e4329a544f994b547650aa3037b20930b7669a2a0cd76250cc741d05ea09fb7b60e68b6261c798a6cfa0f0664abda9bba0f522e89a2e7ed558b55ea1054e8700781de1287aa9107d332cdf6986c23a1ad8c93fd5ebe5a1e8fee773218d03fe1e442fa098c6459dd7c4fc185daa50df54ea45f5a77273fd1", @generic="d2e66978c259616d97aa98344ce27b6053505f208f19afef5a", @nested={0x4, 0x147}]}]}, 0x167c}, 0x1, 0x0, 0x0, 0x804}, 0x4000001)

2.682605752s ago: executing program 5 (id=4697):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x1, 0xa}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {0x0, 0x0, 0x25}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x21, 0xff00000000000000)

2.536416427s ago: executing program 6 (id=4698):
set_robust_list(&(0x7f00000001c0)={0x0, 0x1c}, 0x18)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000540)={0x4, 0x5, 0x3ff, 0x5, 0x94, 0x1d, 0x1c, "1b79e1c8382e840710fd93496992292504c32e08", "b7e4c7e2f4bdf9eccad58335ce6c9d74f46a803f"})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000004090a010400000000000040000000000900020073797a30000000000900010073797a30000000000800054000000016500000000c0a010300000000000000000100000008000440000000000900010073797a30000000002800038024000080200001801a00013486ee0f43b1ab248c6ff32a1b74bd2c574113a7f76cdafa54cc6dc41b7d47d607d639feb18c6ec682f95dbc680329576dd6b05ed04ec9fdf3fa3391de24095277bf3fd2b33336aa502a96cc6e2fe68f3ecaffaa5d5c26407db5c2d624ef665242000000000000000000"], 0xd4}}, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10)
ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0)

2.536148123s ago: executing program 3 (id=4699):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000002b80)={0x14, &(0x7f0000002a40)={0x40, 0x39, 0x7, {0x7, 0x21, "44410392cb"}}, 0x0}, 0x0)
r1 = syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000002240)=@string={0x2}}]})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="40301800000009043f571e721cfec1d54811907e838096f1138b56e854c3"], 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe7, 0x80, 0x0, 0xd, "d0446cb8"}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000)
ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f00000000c0)=0x200000000000006)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)

1.882691028s ago: executing program 5 (id=4700):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="553e12", 0x3}], 0x1, 0x0, 0x0, 0xc090}], 0x1, 0x1800)
recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10001)

1.402980494s ago: executing program 5 (id=4701):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x3, 0x8, 0xfe, 0x1, 0x3, 0x3e, 0x7fff, 0x1f8, 0x38, 0xe4, 0x7, 0x4, 0x20, 0x1, 0x40, 0x0, 0x206f}, [{0x6474e551, 0x3, 0x7, 0xa, 0x100, 0x1, 0x7, 0x5}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x903, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x17)
syz_open_dev$dri(&(0x7f0000001240), 0x632, 0x400000)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = eventfd(0xf9)
ioctl$KVM_IOEVENTFD(r6, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xfec00000, 0x0, r7})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xe000, 0x114000, 0x8})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x1, 0x6000006, 0x1c02, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r9, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c)
shutdown(r9, 0x1)
close(r9)
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r11, 0x1, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x4)
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0)

977.198348ms ago: executing program 4 (id=4702):
r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x8010, r0, 0x1f7b0000)
ftruncate(r0, 0x200000)

839.988871ms ago: executing program 4 (id=4703):
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200000020b4041d9340000102030109026900030174a009080b010201062006090400000001012000092401f2de0a09000509040100000101200009040101010102200009050109000206d7080825010206060100090402000001022000090402010101022000090582090002d70e040825018130060500"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x7c, 0x0}, {0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="a4032a9dfea2aa724c432975adf11eee963ac6a7554497000000003b95a61d4187965dd17a2f384c27db1a3c87d7c5eb1a96357570b4b620d2d5e12d4cc17e5b2e7a45d9972ed727f5ef488ff4d526a160d0fd3d93ab8d12aa375e56100def3300ca4c88d6eca1888f14a76a1e94816fb1fbd1c347076edf6e4c19ad8b1b566c8b1001090e930737a0427124900e23aa5f886da09d60bee7887c648daf3d8ecd67658cd9"]}]})
open$dir(&(0x7f0000000000)='./file0\x00', 0x400001, 0x1)
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, <r2=>0x0}, &(0x7f00000003c0)=0x29)
getgid()
fchownat(r1, &(0x7f0000000380)='./file0\x00', r2, 0x0, 0x100)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x13)
readv(r0, 0x0, 0x0)
write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e23, @remote}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x28, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 'ipvlan0\x00'})
getpid()
r4 = socket(0x11, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r6, 0xc0105702, &(0x7f00000000c0))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff020000000000f3ff000000000000010c00028005000100000000003c0001800c00028005000100000000002c00010014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e000108000740000000019175e9e9ee52011742c73450f85ea446b2ee4a33439f8b9e54be0aa3d47184c9a28486fd5023c9d05f9af0a44554955184971e975cca2c6d8ae029ced3dadd5c20ff234afe55db31b6f008d11abf830732b5b98d5030ecb51191ffd3e74b8e0e85adf0a6a83d715238460f39ffa87408482d2729"], 0x94}}, 0x4040)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac0000000001058500000000000000000a0000003c0002802c00018014000300fe8000000000000000000000000000bb14000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa080007400000000018000d8014000400ff010000000000000000000000000001"], 0xac}}, 0x0)
syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f", @ANYRES8], 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x180})
gettid()
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000040)=0x93bd, 0x4)

351.228697ms ago: executing program 5 (id=4704):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101"], 0x7c}}, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_submit(0x0, 0x0, &(0x7f0000000700))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x50)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00')
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)={0x80, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x10000005}}}}, [@NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_FLAGS={0x2c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1c, 0x13, [{0x48, 0x1}, {0x12}, {0x6}, {0x3}, {0x18}, {0x36}, {0xb, 0x1}, {0xd2f244c577b46085}, {0x6, 0x1}, {0x4, 0x1}, {0x30}, {0x1, 0x1}, {0x9}, {0x2}, {0x6, 0x1}, {0x6, 0x1}, {0x60}, {0x1, 0x1}, {0x18}, {0x1, 0x1}, {0x56f9d850da945290}, {0x9, 0x1}, {0xc}, {0x6c, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080)
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

137.594995ms ago: executing program 3 (id=4705):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x2, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0)
getpeername$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000100)=0x1c)
close(r2)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$vsock_stream(0x28, 0x1, 0x0)
r6 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e)
connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000340)=0x1)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000001c0)=0x4140)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r4, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESHEX=r8], 0x38}}, 0x800)

0s ago: executing program 6 (id=4706):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b"], 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

=2, SerialNumber=3
[  881.139544][ T5614] usb 5-1: Product: syz
[  881.139560][ T5614] usb 5-1: Manufacturer: syz
[  881.139574][ T5614] usb 5-1: SerialNumber: syz
[  881.184859][ T5614] usb 5-1: config 0 descriptor??
[  881.370556][ T5613] Bluetooth: hci4: command 0x0406 tx timeout
[  881.457422][ T5614] gspca_main: se401-2.14.0 probing 047d:5003
[  881.594919][ T5711] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  881.595564][ T5711] em28xx 4-1:0.0: Config register raw data: 0x41
[  881.797960][ T5711] usb 4-1: USB disconnect, device number 79
[  881.813213][ T5711] em28xx 4-1:0.0: Disconnecting em28xx
[  881.848087][ T5711] em28xx 4-1:0.0: Freeing device
[  881.951338][ T5614] usb 5-1: reset high-speed USB device number 39 using dummy_hcd
[  885.025311][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  885.100026][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  885.101689][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  885.175124][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  885.177034][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  885.503380][ T5711] usb 3-1: USB disconnect, device number 80
[  885.534632][ T5614] usb 5-1: failed to restore interface 91 altsetting 115 (error=-71)
[  885.581184][ T5614] gspca_se401: read req failed req 0x06 error -19
[  885.593295][ T5614] usb 5-1: USB disconnect, device number 39
[  885.716125][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4388'.
[  885.906909][T19376] FAULT_INJECTION: forcing a failure.
[  885.906909][T19376] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  885.906949][T19376] CPU: 1 UID: 0 PID: 19376 Comm: syz.2.4391 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  885.906979][T19376] Tainted: [L]=SOFTLOCKUP
[  885.906988][T19376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  885.907003][T19376] Call Trace:
[  885.907011][T19376]  <TASK>
[  885.907021][T19376]  dump_stack_lvl+0xe8/0x150
[  885.907053][T19376]  should_fail_ex+0x46b/0x600
[  885.907091][T19376]  _copy_from_iter+0x1d3/0x1670
[  885.907122][T19376]  ? trace_kmem_cache_alloc+0x29/0xe0
[  885.907147][T19376]  ? __alloc_skb+0x27d/0x7d0
[  885.907177][T19376]  ? __pfx__copy_from_iter+0x10/0x10
[  885.907199][T19376]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  885.907225][T19376]  ? __alloc_skb+0x27d/0x7d0
[  885.907261][T19376]  ? netlink_sendmsg+0x650/0xb40
[  885.907282][T19376]  ? skb_put+0x11b/0x210
[  885.907318][T19376]  netlink_sendmsg+0x6c0/0xb40
[  885.907349][T19376]  ? __pfx_netlink_sendmsg+0x10/0x10
[  885.907374][T19376]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  885.907407][T19376]  ? aa_sock_msg_perm+0x122/0x200
[  885.907433][T19376]  ? __pfx_netlink_sendmsg+0x10/0x10
[  885.907464][T19376]  sock_sendmsg_nosec+0x13a/0x180
[  885.907505][T19376]  ____sys_sendmsg+0x55c/0x870
[  885.907543][T19376]  ? __pfx_____sys_sendmsg+0x10/0x10
[  885.907584][T19376]  ? import_iovec+0x73/0xa0
[  885.907612][T19376]  ___sys_sendmsg+0x2a5/0x360
[  885.907643][T19376]  ? __lock_acquire+0x6b5/0x2d10
[  885.907672][T19376]  ? __pfx____sys_sendmsg+0x10/0x10
[  885.907736][T19376]  ? __fget_files+0x2a/0x420
[  885.907761][T19376]  ? __fget_files+0x3a6/0x420
[  885.907796][T19376]  __x64_sys_sendmsg+0x1c3/0x2a0
[  885.907832][T19376]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  885.907875][T19376]  ? __pfx_ksys_write+0x10/0x10
[  885.907913][T19376]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.907939][T19376]  do_syscall_64+0x174/0x580
[  885.907970][T19376]  ? trace_irq_disable+0x3b/0x140
[  885.907995][T19376]  ? clear_bhb_loop+0x40/0x90
[  885.908020][T19376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.908042][T19376] RIP: 0033:0x7eff8336ce59
[  885.908061][T19376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  885.908080][T19376] RSP: 002b:00007eff815c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  885.908102][T19376] RAX: ffffffffffffffda RBX: 00007eff835e5fa0 RCX: 00007eff8336ce59
[  885.908118][T19376] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  885.908132][T19376] RBP: 00007eff815c6090 R08: 0000000000000000 R09: 0000000000000000
[  885.908146][T19376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  885.908159][T19376] R13: 00007eff835e6038 R14: 00007eff835e5fa0 R15: 00007fff9bbe38e8
[  885.908191][T19376]  </TASK>
[  886.065510][ T5783] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  886.208268][ T5783] usb 4-1: Using ep0 maxpacket: 16
[  886.214710][ T5783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  886.214760][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  886.214787][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  886.214809][ T5783] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  886.214833][ T5783] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  886.216364][ T5783] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  886.216396][ T5783] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  886.216420][ T5783] usb 4-1: Manufacturer: syz
[  886.355566][ T5783] usb 4-1: config 0 descriptor??
[  886.609455][ T5783] rc_core: IR keymap rc-hauppauge not found
[  886.609479][ T5783] Registered IR keymap rc-empty
[  886.609585][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  886.630996][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  886.653265][ T5783] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  886.658293][ T5783] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input97
[  886.694966][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  886.716463][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  886.735578][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  886.755440][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  886.772163][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  886.779977][ T5614] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  886.789726][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  886.809788][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  886.827759][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  886.850184][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  886.867015][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  886.922855][ T5614] usb 3-1: device descriptor read/64, error -71
[  886.931522][ T5783] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  886.931548][ T5783] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  887.074925][   T37] usb 4-1: USB disconnect, device number 80
[  887.161008][ T5614] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  887.295170][ T5614] usb 3-1: device descriptor read/64, error -71
[  887.442342][ T5614] usb usb3-port1: attempt power cycle
[  887.475230][T15368] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  887.489628][ T1134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.532879][T12375] Bluetooth: hci0: command tx timeout
[  887.619181][T15368] usb 5-1: Using ep0 maxpacket: 32
[  887.622893][T15368] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  887.622919][T15368] usb 5-1: config 0 has no interface number 0
[  887.622963][T15368] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  887.622991][T15368] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  887.656788][T15368] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  887.656821][T15368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.656844][T15368] usb 5-1: Product: syz
[  887.656860][T15368] usb 5-1: Manufacturer: syz
[  887.656877][T15368] usb 5-1: SerialNumber: syz
[  887.713719][T15368] usb 5-1: config 0 descriptor??
[  887.761638][ T5614] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  887.789496][ T5614] usb 3-1: device descriptor read/8, error -71
[  887.808050][T19394] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[12373] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[19394]
[  888.020029][T19398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  888.020989][T19398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  888.069349][ T5614] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  888.074157][ T1134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.093538][ T5614] usb 3-1: device descriptor read/8, error -71
[  888.167909][T15368] radio-si470x 5-1:0.35: this is not a si470x device.
[  888.201520][ T5614] usb usb3-port1: unable to enumerate USB device
[  888.693478][T15368] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  888.818085][ T1134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.303160][ T1134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.513605][T12375] Bluetooth: hci0: command tx timeout
[  889.714358][T19363] bridge0: port 1(bridge_slave_0) entered blocking state
[  889.714747][T19363] bridge0: port 1(bridge_slave_0) entered disabled state
[  889.715002][T19363] bridge_slave_0: entered allmulticast mode
[  889.718611][T19363] bridge_slave_0: entered promiscuous mode
[  889.991148][T19363] bridge0: port 2(bridge_slave_1) entered blocking state
[  889.991612][T19363] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.991983][T19363] bridge_slave_1: entered allmulticast mode
[  889.995180][T19363] bridge_slave_1: entered promiscuous mode
[  890.175680][ T5783] usb 5-1: USB disconnect, device number 40
[  890.300135][T19433] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4407'.
[  890.300442][T19433] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4407'.
[  890.426483][T19437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  890.436895][T19437] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  890.580783][T15368] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  890.581122][T19445] vcan0: tx drop: invalid da for name 0x4000000000000000
[  890.927402][T12375] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  890.942234][T19363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  890.978839][T19363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  891.283976][T19363] team0: Port device team_slave_0 added
[  891.339141][T19363] team0: Port device team_slave_1 added
[  891.383404][ T5711] usb 3-1: new low-speed USB device number 85 using dummy_hcd
[  891.493227][T19363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  891.493243][T19363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  891.493269][T19363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  891.495593][T12375] Bluetooth: hci0: command tx timeout
[  891.516318][T19363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  891.516374][T19363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  891.516459][T19363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  891.591991][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  891.592049][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  891.592096][ T5711] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  891.592123][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.642626][ T5711] usb 3-1: config 0 descriptor??
[  891.657211][ T5711] qmi_wwan 3-1:0.0: bogus CDC Union: master=25, slave=0
[  891.657505][ T5711] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22
[  891.848218][T19456] netlink: 401 bytes leftover after parsing attributes in process `syz.2.4413'.
[  891.848534][ T1134] bridge_slave_1: left allmulticast mode
[  891.848566][ T1134] bridge_slave_1: left promiscuous mode
[  891.848876][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.849922][ T5711] usb 3-1: USB disconnect, device number 85
[  892.039125][ T1134] bridge_slave_0: left allmulticast mode
[  892.039154][ T1134] bridge_slave_0: left promiscuous mode
[  892.039373][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state
[  892.929102][T19486] FAULT_INJECTION: forcing a failure.
[  892.929102][T19486] name failslab, interval 1, probability 0, space 0, times 0
[  892.929138][T19486] CPU: 0 UID: 0 PID: 19486 Comm: syz.3.4421 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  892.929165][T19486] Tainted: [L]=SOFTLOCKUP
[  892.929172][T19486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  892.929184][T19486] Call Trace:
[  892.929191][T19486]  <TASK>
[  892.929200][T19486]  dump_stack_lvl+0xe8/0x150
[  892.929227][T19486]  should_fail_ex+0x46b/0x600
[  892.929264][T19486]  should_failslab+0xa8/0x100
[  892.929291][T19486]  __kmalloc_noprof+0xdf/0x7b0
[  892.929312][T19486]  ? kfree+0x4d/0x6c0
[  892.929331][T19486]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  892.929358][T19486]  tomoyo_realpath_from_path+0xe3/0x5d0
[  892.929395][T19486]  ? tomoyo_domain+0xd7/0x130
[  892.929421][T19486]  ? tomoyo_path_number_perm+0x219/0x630
[  892.929451][T19486]  tomoyo_path_number_perm+0x246/0x630
[  892.929485][T19486]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  892.929516][T19486]  ? __lock_acquire+0x6b5/0x2d10
[  892.929539][T19486]  ? do_raw_spin_lock+0x12b/0x2f0
[  892.929580][T19486]  ? __fget_files+0x2a/0x420
[  892.929603][T19486]  ? __fget_files+0x2a/0x420
[  892.929622][T19486]  ? __fget_files+0x3a6/0x420
[  892.929641][T19486]  ? __fget_files+0x2a/0x420
[  892.929664][T19486]  security_file_ioctl+0xc3/0x2a0
[  892.929692][T19486]  __se_sys_ioctl+0x47/0x170
[  892.929717][T19486]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  892.929736][T19486]  do_syscall_64+0x174/0x580
[  892.929764][T19486]  ? trace_irq_disable+0x3b/0x140
[  892.929785][T19486]  ? clear_bhb_loop+0x40/0x90
[  892.929807][T19486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  892.929825][T19486] RIP: 0033:0x7fa760b5ce59
[  892.929843][T19486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  892.929859][T19486] RSP: 002b:00007fa75edb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  892.929881][T19486] RAX: ffffffffffffffda RBX: 00007fa760dd5fa0 RCX: 00007fa760b5ce59
[  892.929896][T19486] RDX: ffffffffffffffff RSI: 0000000040085203 RDI: 0000000000000003
[  892.929908][T19486] RBP: 00007fa75edb6090 R08: 0000000000000000 R09: 0000000000000000
[  892.929921][T19486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  892.929932][T19486] R13: 00007fa760dd6038 R14: 00007fa760dd5fa0 R15: 00007ffcf2e05038
[  892.929961][T19486]  </TASK>
[  892.931590][T19486] ERROR: Out of memory at tomoyo_realpath_from_path.
[  893.422288][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  893.486256][T12375] Bluetooth: hci0: command tx timeout
[  893.489183][T19499] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4426'.
[  893.489212][T19499] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  893.591715][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  893.649624][ T1134] bond0 (unregistering): Released all slaves
[  894.063135][T19363] hsr_slave_0: entered promiscuous mode
[  894.065537][T19363] hsr_slave_1: entered promiscuous mode
[  894.072704][T19363] debugfs: 'hsr0' already exists in 'hsr'
[  894.072772][T19363] Cannot create hsr debugfs directory
[  895.847849][T19540] FAULT_INJECTION: forcing a failure.
[  895.847849][T19540] name failslab, interval 1, probability 0, space 0, times 0
[  895.849585][T19540] CPU: 1 UID: 0 PID: 19540 Comm: syz.4.4436 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  895.849616][T19540] Tainted: [L]=SOFTLOCKUP
[  895.849624][T19540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  895.849637][T19540] Call Trace:
[  895.849645][T19540]  <TASK>
[  895.849655][T19540]  dump_stack_lvl+0xe8/0x150
[  895.849685][T19540]  should_fail_ex+0x46b/0x600
[  895.849722][T19540]  should_failslab+0xa8/0x100
[  895.849752][T19540]  __kmalloc_noprof+0xdf/0x7b0
[  895.849775][T19540]  ? rcu_is_watching+0x15/0xb0
[  895.849801][T19540]  ? snd_interval_refine+0x602/0xa50
[  895.849824][T19540]  ? snd_pcm_hw_refine+0x9ef/0x17a0
[  895.849850][T19540]  snd_pcm_hw_refine+0x9ef/0x17a0
[  895.849886][T19540]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  895.849940][T19540]  ? __asan_memset+0x22/0x50
[  895.849962][T19540]  ? snd_pcm_oss_change_params_locked+0x6e5/0x3e00
[  895.849998][T19540]  ? snd_pcm_oss_change_params_locked+0x744/0x3e00
[  895.850047][T19540]  snd_pcm_oss_change_params_locked+0x851/0x3e00
[  895.850091][T19540]  ? aa_file_perm+0x192/0x15f0
[  895.850131][T19540]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  895.850175][T19540]  ? lockdep_hardirqs_on+0x7a/0x110
[  895.850210][T19540]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  895.850246][T19540]  ? snd_pcm_oss_write+0x20d/0xbe0
[  895.850286][T19540]  snd_pcm_oss_write+0x282/0xbe0
[  895.850327][T19540]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  895.850357][T19540]  vfs_write+0x2a3/0xba0
[  895.850397][T19540]  ? __pfx_vfs_write+0x10/0x10
[  895.850431][T19540]  ? __fget_files+0x2a/0x420
[  895.850461][T19540]  ? __fget_files+0x2a/0x420
[  895.850486][T19540]  ? __fget_files+0x3a6/0x420
[  895.850512][T19540]  ? __fget_files+0x2a/0x420
[  895.850548][T19540]  ksys_write+0x156/0x270
[  895.850582][T19540]  ? __pfx_ksys_write+0x10/0x10
[  895.850623][T19540]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.850648][T19540]  do_syscall_64+0x174/0x580
[  895.850681][T19540]  ? trace_irq_disable+0x3b/0x140
[  895.850707][T19540]  ? clear_bhb_loop+0x40/0x90
[  895.850735][T19540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.850758][T19540] RIP: 0033:0x7f58129fce59
[  895.850779][T19540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  895.850806][T19540] RSP: 002b:00007f5810c35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  895.850831][T19540] RAX: ffffffffffffffda RBX: 00007f5812c76090 RCX: 00007f58129fce59
[  895.850848][T19540] RDX: 0000000000088020 RSI: 0000200000002000 RDI: 0000000000000003
[  895.850864][T19540] RBP: 00007f5810c35090 R08: 0000000000000000 R09: 0000000000000000
[  895.850878][T19540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  895.850893][T19540] R13: 00007f5812c76128 R14: 00007f5812c76090 R15: 00007ffd3c3949d8
[  895.850929][T19540]  </TASK>
[  896.385506][T19542] FAULT_INJECTION: forcing a failure.
[  896.385506][T19542] name failslab, interval 1, probability 0, space 0, times 0
[  896.385541][T19542] CPU: 1 UID: 0 PID: 19542 Comm: syz.2.4437 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  896.385569][T19542] Tainted: [L]=SOFTLOCKUP
[  896.385577][T19542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  896.385592][T19542] Call Trace:
[  896.385601][T19542]  <TASK>
[  896.385611][T19542]  dump_stack_lvl+0xe8/0x150
[  896.385646][T19542]  should_fail_ex+0x46b/0x600
[  896.385684][T19542]  should_failslab+0xa8/0x100
[  896.385717][T19542]  __kmalloc_cache_noprof+0x84/0x690
[  896.385758][T19542]  ? input_allocate_device+0x4e/0x2b0
[  896.385785][T19542]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  896.385822][T19542]  input_allocate_device+0x4e/0x2b0
[  896.385851][T19542]  uinput_ioctl_handler+0x177/0x14a0
[  896.385881][T19542]  ? __pfx_uinput_ioctl_handler+0x10/0x10
[  896.385913][T19542]  ? __fget_files+0x2a/0x420
[  896.385938][T19542]  ? __fget_files+0x3a6/0x420
[  896.385996][T19542]  ? bpf_lsm_file_ioctl+0x9/0x20
[  896.386030][T19542]  ? __pfx_uinput_ioctl+0x10/0x10
[  896.386053][T19542]  __se_sys_ioctl+0xff/0x170
[  896.386087][T19542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.386110][T19542]  do_syscall_64+0x174/0x580
[  896.386145][T19542]  ? trace_irq_disable+0x3b/0x140
[  896.386170][T19542]  ? clear_bhb_loop+0x40/0x90
[  896.386199][T19542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.386222][T19542] RIP: 0033:0x7eff8336ce59
[  896.386244][T19542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  896.386263][T19542] RSP: 002b:00007eff815c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  896.386288][T19542] RAX: ffffffffffffffda RBX: 00007eff835e5fa0 RCX: 00007eff8336ce59
[  896.386307][T19542] RDX: 0000000000000000 RSI: 000000004004556b RDI: 0000000000000003
[  896.386322][T19542] RBP: 00007eff815c6090 R08: 0000000000000000 R09: 0000000000000000
[  896.386341][T19542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  896.386355][T19542] R13: 00007eff835e6038 R14: 00007eff835e5fa0 R15: 00007fff9bbe38e8
[  896.386392][T19542]  </TASK>
[  896.728890][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5
[  897.070715][T19550] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4441'.
[  897.071115][T19550] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4441'.
[  897.177405][ T1134] hsr_slave_0: left promiscuous mode
[  897.232470][ T1134] hsr_slave_1: left promiscuous mode
[  897.241624][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  897.241648][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  897.272115][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  897.272146][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  897.458143][ T1134] veth1_macvtap: left promiscuous mode
[  897.458260][ T1134] veth0_macvtap: left promiscuous mode
[  897.458579][ T1134] veth1_vlan: left promiscuous mode
[  897.505747][ T1134] veth0_vlan: left promiscuous mode
[  898.126732][T19557] IPVS: set_ctl: invalid protocol: 209 10.1.1.0:20004
[  898.212348][T19560] netlink: 'syz.3.4444': attribute type 3 has an invalid length.
[  899.051226][ T1134] team0 (unregistering): Port device team_slave_1 removed
[  899.110007][ T1134] team0 (unregistering): Port device team_slave_0 removed
[  900.270848][T19583] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4449'.
[  900.271266][T19583] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4449'.
[  900.628932][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4451'.
[  900.662354][T19592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4451'.
[  900.846136][T19363] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  900.931779][T19363] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  900.961512][T19363] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  900.973153][ T5712] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  901.016088][T19363] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  901.017724][T19363] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  901.149003][T19363] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  901.168010][T19363] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  901.173287][ T5712] usb 5-1: Using ep0 maxpacket: 32
[  901.180711][ T5712] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92
[  901.180795][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.307037][ T5712] gspca_main: nw80x-2.14.0 probing 055f:d001
[  901.499769][T19363] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  901.673991][ T5266] 8021q: adding VLAN 0 to HW filter on device eth6
[  902.176607][T19619] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4458'.
[  902.196639][T19619] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4458'.
[  902.288959][T15368] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  902.440605][T15368] usb 4-1: Using ep0 maxpacket: 16
[  902.464693][T15368] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  902.464840][T15368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  902.464874][T15368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  902.464900][T15368] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  902.464985][T15368] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  902.479603][T15368] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  902.479847][T15368] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  902.480040][T15368] usb 4-1: Manufacturer: syz
[  902.661860][T15368] usb 4-1: config 0 descriptor??
[  902.794829][ T5712] usb 5-1: USB disconnect, device number 41
[  902.982126][T19363] 8021q: adding VLAN 0 to HW filter on device bond0
[  903.087610][T15368] rc_core: IR keymap rc-hauppauge not found
[  903.087632][T15368] Registered IR keymap rc-empty
[  903.087782][T15368] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  903.106920][T15368] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  903.130067][T15368] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  903.167387][T15368] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input98
[  903.212555][T15368] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  903.235201][T15368] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  903.249774][T15368] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  903.268747][T15368] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  903.291158][T15368] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  903.307868][T15368] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  903.326490][T15368] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  903.345808][T15368] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  903.368885][T15368] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  903.383098][T15368] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  903.514593][T15368] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  903.514621][T15368] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  903.539757][T19363] 8021q: adding VLAN 0 to HW filter on device team0
[  903.576570][T15368] usb 4-1: USB disconnect, device number 82
[  903.636586][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state
[  903.636762][ T8271] bridge0: port 1(bridge_slave_0) entered forwarding state
[  903.705576][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  903.705684][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  903.900479][ T5783] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  903.927694][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state
[  903.929638][ T8273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  904.023613][ T5783] usb 5-1: device descriptor read/64, error -71
[  904.253902][ T5266] 8021q: adding VLAN 0 to HW filter on device eth7
[  904.269933][ T5783] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  904.396957][ T5783] usb 5-1: device descriptor read/64, error -71
[  904.498171][ T5783] usb usb5-port1: attempt power cycle
[  904.567125][T19656] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4466'.
[  904.567602][T19656] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4466'.
[  904.840434][ T5783] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  904.872558][ T5783] usb 5-1: device descriptor read/8, error -71
[  905.098709][ T5783] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  905.120147][ T5783] usb 5-1: device descriptor read/8, error -71
[  905.223356][ T5783] usb usb5-port1: unable to enumerate USB device
[  905.304811][T19363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  905.421984][ T5783] kernel write not supported for file /sg0 (pid: 5783 comm: kworker/0:7)
[  905.666797][T19688] sg_write: data in/out 220/42 bytes for SCSI command 0x0-- guessing data in;
[  905.666797][T19688]    program syz.3.4469 not setting count and/or reply_len properly
[  905.731460][ T5266] 8021q: adding VLAN 0 to HW filter on device eth8
[  905.751544][T19688] netlink: 'syz.3.4469': attribute type 3 has an invalid length.
[  906.494865][T19363] veth0_vlan: entered promiscuous mode
[  906.537662][T19363] veth1_vlan: entered promiscuous mode
[  906.708122][T19363] veth0_macvtap: entered promiscuous mode
[  906.720938][T19363] veth1_macvtap: entered promiscuous mode
[  906.867765][T19363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  906.980547][T19363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  907.005579][ T8271] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  907.005862][ T8271] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  907.005905][ T8271] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  907.005946][ T8271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  907.271883][T19722] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4477'.
[  907.585374][ T6336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  907.585398][ T6336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  907.708660][   T32] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  907.919292][   T32] usb 3-1: Using ep0 maxpacket: 16
[  907.950625][   T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  907.950680][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  907.950711][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  907.950733][   T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  907.950759][   T32] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  907.964654][   T32] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  907.964724][   T32] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  907.964749][   T32] usb 3-1: Manufacturer: syz
[  908.047548][   T32] usb 3-1: config 0 descriptor??
[  908.584978][   T32] rc_core: IR keymap rc-hauppauge not found
[  908.585003][   T32] Registered IR keymap rc-empty
[  908.585157][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  908.603036][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  908.628658][   T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  908.656422][   T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input99
[  908.719064][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  908.750763][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  908.767502][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  908.784131][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  908.810703][   T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  908.810725][   T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  908.812655][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  908.841908][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  908.863189][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  908.888798][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  908.907102][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  908.927632][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  909.037815][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  909.175508][T19724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  909.181186][T19724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  909.185502][   T32] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  909.185525][   T32] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  909.229190][T19724] dlm: no locking on control device
[  910.776803][ T5712] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  910.937003][ T5712] usb 4-1: Using ep0 maxpacket: 16
[  910.977164][ T5712] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  910.977202][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  910.980253][ T5712] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  910.980284][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.980306][ T5712] usb 4-1: Product: syz
[  910.980323][ T5712] usb 4-1: Manufacturer: syz
[  910.980339][ T5712] usb 4-1: SerialNumber: syz
[  911.014613][ T5712] usb 4-1: config 0 descriptor??
[  911.094369][ T5712] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  911.094405][ T5712] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  911.669666][ T5712] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  911.671708][ T5712] em28xx 4-1:0.0: Config register raw data: 0xdb
[  911.868857][ T5712] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  911.868882][ T5712] em28xx 4-1:0.0: No AC97 audio processor
[  911.952627][ T5712] usb 4-1: USB disconnect, device number 83
[  911.968889][ T5712] em28xx 4-1:0.0: Disconnecting em28xx
[  912.011065][ T5712] em28xx 4-1:0.0: Freeing device
[  912.538668][T19765] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  913.539070][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  913.611163][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  913.660280][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  913.677565][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  913.679029][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  915.176066][T15368] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  915.194780][T19722] vivid-000: kernel_thread() failed
[  915.327160][T15368] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  915.327196][T15368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.327220][T15368] usb 5-1: Product: syz
[  915.327244][T15368] usb 5-1: Manufacturer: syz
[  915.327262][T15368] usb 5-1: SerialNumber: syz
[  915.355810][T15368] usb 5-1: config 0 descriptor??
[  915.398289][T15368] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 046
[  915.559159][T15368]  (null): failure setting delay to 10us
[  915.559233][T15368] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  915.574590][T15368] usb 5-1: USB disconnect, device number 46
[  916.194942][T12375] Bluetooth: hci4: command tx timeout
[  918.161351][T19774] bridge0: port 1(bridge_slave_0) entered blocking state
[  918.161854][T19774] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.162167][T19774] bridge_slave_0: entered allmulticast mode
[  918.166788][T12375] Bluetooth: hci4: command tx timeout
[  918.178109][T19774] bridge_slave_0: entered promiscuous mode
[  918.204504][T19774] bridge0: port 2(bridge_slave_1) entered blocking state
[  918.207879][T19774] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.258090][T19774] bridge_slave_1: entered allmulticast mode
[  918.276867][T19774] bridge_slave_1: entered promiscuous mode
[  918.666970][T19774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  918.791036][T19774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  919.268064][T19774] team0: Port device team_slave_0 added
[  919.309336][T19774] team0: Port device team_slave_1 added
[  919.382315][T19853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  919.412048][T19855] kvm_pr_unimpl_wrmsr: 6 callbacks suppressed
[  919.412074][T19855] kvm: kvm [19854]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0x11e) = 0x600000000e7
[  919.767281][T19774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  919.767302][T19774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  919.767336][T19774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  919.776140][T19774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  919.776159][T19774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  919.776192][T19774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  920.150644][T12375] Bluetooth: hci4: command tx timeout
[  920.192781][T19774] hsr_slave_0: entered promiscuous mode
[  920.211652][T19774] hsr_slave_1: entered promiscuous mode
[  920.221348][T19774] debugfs: 'hsr0' already exists in 'hsr'
[  920.221391][T19774] Cannot create hsr debugfs directory
[  920.660079][T19871] FAULT_INJECTION: forcing a failure.
[  920.660079][T19871] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  920.660121][T19871] CPU: 0 UID: 0 PID: 19871 Comm: syz.5.4508 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  920.660154][T19871] Tainted: [L]=SOFTLOCKUP
[  920.660163][T19871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  920.660178][T19871] Call Trace:
[  920.660187][T19871]  <TASK>
[  920.660199][T19871]  dump_stack_lvl+0xe8/0x150
[  920.660236][T19871]  should_fail_ex+0x46b/0x600
[  920.660278][T19871]  prepare_alloc_pages+0x22a/0x6b0
[  920.660319][T19871]  __alloc_frozen_pages_noprof+0x12f/0x380
[  920.660357][T19871]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  920.660395][T19871]  ? __pfx_policy_nodemask+0x10/0x10
[  920.660430][T19871]  ? __lock_acquire+0x6b5/0x2d10
[  920.660467][T19871]  alloc_pages_mpol+0xd1/0x380
[  920.660505][T19871]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  920.660541][T19871]  vma_alloc_folio_noprof+0xe1/0x1e0
[  920.660579][T19871]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  920.660614][T19871]  ? __pte_offset_map+0x29/0x200
[  920.660648][T19871]  do_pte_missing+0x822/0x2940
[  920.660690][T19871]  ? handle_mm_fault+0xed/0x14d0
[  920.660721][T19871]  handle_mm_fault+0xdc2/0x14d0
[  920.660762][T19871]  ? handle_mm_fault+0xed/0x14d0
[  920.660796][T19871]  ? __pfx_handle_mm_fault+0x10/0x10
[  920.660823][T19871]  ? lock_vma_under_rcu+0x45a/0x500
[  920.660882][T19871]  do_user_addr_fault+0xa73/0x1340
[  920.660921][T19871]  ? rcu_is_watching+0x15/0xb0
[  920.660955][T19871]  ? trace_page_fault_user+0x84/0x1e0
[  920.660985][T19871]  exc_page_fault+0x6a/0xc0
[  920.661021][T19871]  asm_exc_page_fault+0x26/0x30
[  920.661044][T19871] RIP: 0033:0x7fb1b1a6e60b
[  920.661067][T19871] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b
[  920.661089][T19871] RSP: 002b:00007fb1afdfcfa0 EFLAGS: 00010206
[  920.661121][T19871] RAX: 0000000000000000 RBX: 00007fb1b1e25fa0 RCX: 0000000000000000
[  920.661137][T19871] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000400
[  920.661152][T19871] RBP: 00007fb1afdfe090 R08: 0000000000000000 R09: 0000000000000000
[  920.661172][T19871] R10: 0000200000000400 R11: 0000000000000000 R12: 0000000000000001
[  920.661188][T19871] R13: 00007fb1b1e26038 R14: 00007fb1b1e25fa0 R15: 00007ffd8bafa8a8
[  920.661226][T19871]  </TASK>
[  920.692149][T19871] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  922.138848][T12375] Bluetooth: hci4: command tx timeout
[  922.455778][T19774] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  923.013698][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  923.077713][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  923.124920][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  923.129272][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  923.157744][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  923.346768][T19902] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4516'.
[  923.347158][T19902] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4516'.
[  923.886363][T15368] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  924.253589][T15368] usb 6-1: Using ep0 maxpacket: 16
[  925.817491][T19774] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.950286][T12375] Bluetooth: hci3: command tx timeout
[  926.380001][T15368] usb 6-1: unable to get BOS descriptor or descriptor too short
[  926.383822][T15368] usb 6-1: unable to read config index 0 descriptor/start: -71
[  926.383863][T15368] usb 6-1: can't read configurations, error -71
[  926.994643][T19774] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  927.459392][T19774] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  927.921243][T12375] Bluetooth: hci3: command tx timeout
[  928.106135][  T823] kworker/1:2 (823) used greatest stack depth: 14200 bytes left
[  928.187095][T19949] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4523'.
[  928.768904][ T5712] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  928.911705][ T5712] usb 5-1: Using ep0 maxpacket: 16
[  928.914270][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  928.914328][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  928.914362][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  928.914387][ T5712] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  928.914412][ T5712] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  928.917118][ T5712] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  928.917144][ T5712] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  928.917164][ T5712] usb 5-1: Manufacturer: syz
[  929.009946][ T5712] usb 5-1: config 0 descriptor??
[  929.293672][ T5712] rc_core: IR keymap rc-hauppauge not found
[  929.293696][ T5712] Registered IR keymap rc-empty
[  929.293863][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.322266][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.341813][ T5712] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1
[  929.346810][ T5712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input100
[  929.381380][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.398083][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.416778][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.436124][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.454620][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.475312][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.492846][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.511858][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.532131][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.549982][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.580869][ T5712] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  929.580948][ T5712] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  929.688361][   T37] usb 5-1: USB disconnect, device number 47
[  929.902511][T12375] Bluetooth: hci3: command tx timeout
[  930.868906][T19975] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  931.299725][T19896] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.300405][T19896] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.301382][T19896] bridge_slave_0: entered allmulticast mode
[  931.328335][T19896] bridge_slave_0: entered promiscuous mode
[  931.348645][T19896] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.349279][T19896] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.349753][T19896] bridge_slave_1: entered allmulticast mode
[  931.376243][T19896] bridge_slave_1: entered promiscuous mode
[  931.536491][T19977] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4530'.
[  931.897932][ T5613] Bluetooth: hci3: command tx timeout
[  932.010083][T19896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  932.049314][T19896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.179963][T19774] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  932.253977][T19774] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  932.321881][ T5712] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  932.432226][T19774] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  932.467474][T19774] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  932.469416][ T5712] usb 6-1: Using ep0 maxpacket: 8
[  932.492423][ T5712] usb 6-1: unable to get BOS descriptor or descriptor too short
[  932.501391][ T5712] usb 6-1: config 4 interface 0 has no altsetting 0
[  932.514976][ T5712] usb 6-1: string descriptor 0 read error: -22
[  932.515074][ T5712] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  932.515223][ T5712] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  932.518082][T19896] team0: Port device team_slave_0 added
[  932.518738][T19774] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  932.642807][ T5712] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  932.657946][T19774] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  932.705059][T19896] team0: Port device team_slave_1 added
[  932.705388][T19774] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  932.711490][ T5712] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  932.719680][ T5712] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  932.719804][ T5712] usb 6-1: media controller created
[  932.787135][T19774] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  932.852393][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  933.176157][T19896] batman_adv: batadv0: Adding interface: batadv_slave_0
[  933.176174][T19896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  933.176198][T19896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  933.234424][   T32] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  933.261882][T19896] batman_adv: batadv0: Adding interface: batadv_slave_1
[  933.261902][T19896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  933.261998][T19896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  933.379183][   T32] usb 5-1: Using ep0 maxpacket: 16
[  933.383474][   T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  933.383534][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  933.383642][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  933.383669][   T32] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  933.383696][   T32] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  933.385419][   T32] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  933.385450][   T32] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  933.385717][   T32] usb 5-1: Manufacturer: syz
[  933.521183][   T32] usb 5-1: config 0 descriptor??
[  933.653652][T19896] hsr_slave_0: entered promiscuous mode
[  933.671647][T19896] hsr_slave_1: entered promiscuous mode
[  933.686442][T19896] debugfs: 'hsr0' already exists in 'hsr'
[  933.686470][T19896] Cannot create hsr debugfs directory
[  933.922325][   T32] rc_core: IR keymap rc-hauppauge not found
[  933.922345][   T32] Registered IR keymap rc-empty
[  933.922889][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  933.949761][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  933.963483][   T32] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1
[  933.968298][   T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input101
[  934.061107][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  934.085858][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  934.112898][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  934.141356][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  934.160493][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  934.213085][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  934.236608][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  934.255707][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  934.284840][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  934.303384][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  934.375042][   T32] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  934.375063][   T32] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  934.411520][   T32] usb 5-1: USB disconnect, device number 48
[  934.441975][   T37] usb 3-1: USB disconnect, device number 86
[  934.913163][   T32] usb 6-1: USB disconnect, device number 4
[  935.152528][T20003] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4537'.
[  935.249605][   T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.350964][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c1c
[  935.351056][ T5613] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260
[  935.775399][   T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.956778][T19774] 8021q: adding VLAN 0 to HW filter on device bond0
[  936.134032][   T32] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  936.290653][   T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.309304][   T32] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  936.309334][   T32] usb 6-1: config 0 has no interface number 0
[  936.311946][   T32] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  936.311977][   T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  936.312001][   T32] usb 6-1: Product: syz
[  936.312017][   T32] usb 6-1: Manufacturer: syz
[  936.312034][   T32] usb 6-1: SerialNumber: syz
[  936.383502][   T32] usb 6-1: config 0 descriptor??
[  936.433744][T19774] 8021q: adding VLAN 0 to HW filter on device team0
[  936.462198][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state
[  936.462459][ T8273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  936.627530][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state
[  936.627711][ T6341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  936.823881][T15368] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  936.845800][   T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.894550][T20013] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4541'.
[  936.947332][   T32] uvcvideo 6-1:0.64: Found UVC 0.08 device syz (046d:0823)
[  936.947557][   T32] uvcvideo 6-1:0.64: No valid video chain found.
[  936.970047][   T32] usb 6-1: USB disconnect, device number 5
[  937.004212][T15368] usb 5-1: Using ep0 maxpacket: 16
[  937.013826][T15368] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  937.013885][T15368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  937.014081][T15368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  937.014107][T15368] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  937.014134][T15368] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  937.016317][T15368] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  937.016348][T15368] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  937.016372][T15368] usb 5-1: Manufacturer: syz
[  937.147456][T15368] usb 5-1: config 0 descriptor??
[  937.441035][T15368] rc_core: IR keymap rc-hauppauge not found
[  937.441056][T15368] Registered IR keymap rc-empty
[  937.441199][T15368] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  937.477511][T15368] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  937.500189][T15368] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  937.523208][T15368] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input102
[  937.606391][T15368] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  937.621852][T15368] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  937.637623][T15368] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  937.656810][T15368] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  937.664755][T19896] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  937.675340][T15368] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  937.694301][T15368] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  937.713384][T15368] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  937.732385][T15368] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  937.761312][T15368] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  937.780041][T15368] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  937.805712][T15368] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  937.805997][T15368] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  937.808274][T19896] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  937.880252][T19896] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  937.904518][ T5614] usb 5-1: USB disconnect, device number 49
[  937.931130][T19896] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  937.953386][T19896] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  938.004036][T19896] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  938.072873][T19896] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  938.125378][T19896] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  938.154323][   T32] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  938.324997][   T32] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  938.325054][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  938.325076][   T32] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  938.325113][   T32] usb 6-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00
[  938.325131][   T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.329405][   T32] usb 6-1: config 0 descriptor??
[  938.354929][T20020] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  938.572549][T20026] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4544'.
[  938.789122][   T32] hid (null): unknown global tag 0xd
[  938.829937][   T32] wacom 0003:056A:00EF.0022: unknown main item tag 0x1
[  938.829974][   T32] wacom 0003:056A:00EF.0022: unknown global tag 0xd
[  938.829995][   T32] wacom 0003:056A:00EF.0022: item 0 4 1 13 parsing failed
[  938.843544][   T32] wacom 0003:056A:00EF.0022: parse failed
[  938.843868][   T32] wacom 0003:056A:00EF.0022: probe with driver wacom failed with error -22
[  939.324518][T15368] usb 6-1: USB disconnect, device number 6
[  939.694690][ T5712] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  939.695414][   T57] bridge_slave_1: left allmulticast mode
[  939.695449][   T57] bridge_slave_1: left promiscuous mode
[  939.695760][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.811100][   T57] bridge_slave_0: left allmulticast mode
[  939.811134][   T57] bridge_slave_0: left promiscuous mode
[  939.811357][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.847453][ T5712] usb 5-1: Using ep0 maxpacket: 32
[  939.851488][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  939.854169][ T5712] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  939.854207][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.854231][ T5712] usb 5-1: Product: syz
[  939.854247][ T5712] usb 5-1: Manufacturer: syz
[  939.854265][ T5712] usb 5-1: SerialNumber: syz
[  939.911255][ T5712] usb 5-1: config 0 descriptor??
[  939.923588][ T5712] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  940.731292][ T5712] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input103
[  940.917794][ T5614] usb 5-1: USB disconnect, device number 50
[  940.981789][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  941.077113][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  941.116789][   T57] bond0 (unregistering): Released all slaves
[  941.174428][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4549'.
[  941.692070][T19896] 8021q: adding VLAN 0 to HW filter on device bond0
[  941.783286][T19896] 8021q: adding VLAN 0 to HW filter on device team0
[  941.815758][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  941.843269][T20064] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4551'.
[  941.859122][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  941.943070][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.943234][ T6336] bridge0: port 2(bridge_slave_1) entered forwarding state
[  942.880155][T19774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  942.899980][ T5266] 8021q: adding VLAN 0 to HW filter on device eth9
[  942.953709][ T5821] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  943.086347][ T5821] usb 6-1: device descriptor read/64, error -71
[  943.315089][ T5821] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  943.413472][T20101] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4561'.
[  943.475010][ T5821] usb 6-1: device descriptor read/64, error -71
[  943.572156][ T5821] usb usb6-port1: attempt power cycle
[  943.924020][ T5821] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  943.943291][   T57] hsr_slave_0: left promiscuous mode
[  943.961078][ T5821] usb 6-1: device descriptor read/8, error -71
[  943.981455][   T57] hsr_slave_1: left promiscuous mode
[  944.051316][   T57] veth1_macvtap: left promiscuous mode
[  944.051482][   T57] veth1_vlan: left promiscuous mode
[  944.051690][   T57] veth0_vlan: left promiscuous mode
[  944.209744][ T5821] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  944.239125][ T5821] usb 6-1: device descriptor read/8, error -71
[  944.353407][ T5821] usb usb6-port1: unable to enumerate USB device
[  944.867179][T15368] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  945.014780][T15368] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  945.014818][T15368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.014833][T15368] usb 5-1: Product: syz
[  945.014844][T15368] usb 5-1: Manufacturer: syz
[  945.014855][T15368] usb 5-1: SerialNumber: syz
[  945.053120][T15368] usb 5-1: config 0 descriptor??
[  945.077434][T15368] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  945.487599][   T57] team0 (unregistering): Port device team_slave_1 removed
[  945.711328][   T57] team0 (unregistering): Port device team_slave_0 removed
[  946.010452][   T32] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  946.026548][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c58
[  946.180301][ T5266] 8021q: adding VLAN 0 to HW filter on device eth10
[  946.182041][   T32] usb 6-1: Using ep0 maxpacket: 16
[  946.185260][   T32] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  946.185315][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  946.185346][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  946.185368][   T32] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  946.185393][   T32] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  946.205266][   T32] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  946.205298][   T32] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  946.205321][   T32] usb 6-1: Manufacturer: syz
[  946.310925][   T32] usb 6-1: config 0 descriptor??
[  946.657928][   T32] rc_core: IR keymap rc-hauppauge not found
[  946.657951][   T32] Registered IR keymap rc-empty
[  946.658115][   T32] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  946.668018][   T32] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  946.694819][   T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  946.715424][   T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input104
[  946.806021][T20128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  946.807083][T20128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  946.876310][   T32] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  946.898598][   T32] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  946.915346][   T32] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  946.934308][   T32] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  946.947275][T19774] veth0_vlan: entered promiscuous mode
[  946.960442][   T32] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  946.983054][   T32] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  947.070522][   T32] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  947.096132][   T32] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  947.115122][   T32] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  947.125284][   T32] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  947.146340][   T32] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  947.146367][   T32] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  947.162835][   T32] usb 6-1: USB disconnect, device number 11
[  947.402683][T15368] gspca_stk1135: reg_w 0x200 err -110
[  947.403734][T15368] gspca_stk1135: serial bus timeout: status=0x00
[  947.403749][T15368] gspca_stk1135: Sensor write failed
[  947.403782][T15368] gspca_stk1135: serial bus timeout: status=0x00
[  947.403793][T15368] gspca_stk1135: Sensor write failed
[  947.403826][T15368] gspca_stk1135: serial bus timeout: status=0x00
[  947.403839][T15368] gspca_stk1135: Sensor read failed
[  947.403872][T15368] gspca_stk1135: serial bus timeout: status=0x00
[  947.403882][T15368] gspca_stk1135: Sensor read failed
[  947.403890][T15368] gspca_stk1135: Detected sensor type unknown (0x0)
[  947.403925][T15368] gspca_stk1135: serial bus timeout: status=0x00
[  947.403936][T15368] gspca_stk1135: Sensor read failed
[  947.403968][T15368] gspca_stk1135: serial bus timeout: status=0x00
[  947.403978][T15368] gspca_stk1135: Sensor read failed
[  947.404009][T15368] gspca_stk1135: serial bus timeout: status=0x00
[  947.404019][T15368] gspca_stk1135: Sensor write failed
[  947.404052][T15368] gspca_stk1135: serial bus timeout: status=0x00
[  947.404062][T15368] gspca_stk1135: Sensor write failed
[  947.404143][T15368] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110
[  947.765481][T19774] veth1_vlan: entered promiscuous mode
[  948.101725][T19774] veth0_macvtap: entered promiscuous mode
[  948.129781][T19896] 8021q: adding VLAN 0 to HW filter on device batadv0
[  948.133550][T19774] veth1_macvtap: entered promiscuous mode
[  948.192149][T15368] usb 5-1: USB disconnect, device number 51
[  948.203555][T19774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  948.318691][T19774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  948.373974][T20150] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4568'.
[  948.407553][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  948.550349][ T6335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  948.553120][ T6335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  948.714395][ T6335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  948.740241][   T57] IPVS: stop unused estimator thread 0...
[  949.495552][T13964] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  949.653762][T13964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  949.653803][T13964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  949.653829][T13964] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  949.653876][T13964] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  949.653902][T13964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.766118][T13964] usb 6-1: config 0 descriptor??
[  950.237267][T13964] hid (null): report_id 38755 is invalid
[  950.403585][T13964] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x2
[  950.403676][T13964] hid-multitouch 0003:0457:07DA.0023: report_id 38755 is invalid
[  950.403697][T13964] hid-multitouch 0003:0457:07DA.0023: item 0 2 1 8 parsing failed
[  950.404630][T13964] hid-multitouch 0003:0457:07DA.0023: probe with driver hid-multitouch failed with error -22
[  950.503915][T20165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  950.504573][T20165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  950.512600][T20024] usb 6-1: USB disconnect, device number 12
[  950.654117][ T6340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  950.654140][ T6340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  951.072893][ T5266] 8021q: adding VLAN 0 to HW filter on device eth11
[  951.086649][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  951.086671][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  951.249243][ T5712] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  951.405527][T19896] veth0_vlan: entered promiscuous mode
[  951.436109][ T5712] usb 5-1: Using ep0 maxpacket: 16
[  951.438558][ T5712] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  951.438593][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  951.441860][ T5712] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  951.441892][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.441916][ T5712] usb 5-1: Product: syz
[  951.441934][ T5712] usb 5-1: Manufacturer: syz
[  951.441952][ T5712] usb 5-1: SerialNumber: syz
[  951.442667][T19896] veth1_vlan: entered promiscuous mode
[  951.488385][T20024] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  951.523218][ T5712] usb 5-1: config 0 descriptor??
[  951.571353][ T5712] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  951.571396][ T5712] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  951.639812][T20024] usb 6-1: Using ep0 maxpacket: 16
[  951.641938][T20024] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  951.641989][T20024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  951.642016][T20024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  951.642039][T20024] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  951.642061][T20024] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  951.643308][T20024] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  951.643336][T20024] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  951.643358][T20024] usb 6-1: Manufacturer: syz
[  951.749834][T20024] usb 6-1: config 0 descriptor??
[  951.987908][T19896] veth0_macvtap: entered promiscuous mode
[  952.202378][ T5712] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  952.203885][ T5712] em28xx 5-1:0.0: Config register raw data: 0xdb
[  952.317213][T20024] rc_core: IR keymap rc-hauppauge not found
[  952.317237][T20024] Registered IR keymap rc-empty
[  952.317397][T20024] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  952.335257][T20024] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  952.357914][T20024] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  952.384370][T20024] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input105
[  952.415722][T20024] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  952.426593][ T5712] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  952.426657][ T5712] em28xx 5-1:0.0: No AC97 audio processor
[  952.443986][T20024] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  952.447633][    C1] rc rc0: IR event FIFO is full!
[  952.447656][    C1] rc rc0: IR event FIFO is full!
[  952.447883][    C1] rc rc0: IR event FIFO is full!
[  952.447900][    C1] rc rc0: IR event FIFO is full!
[  952.447914][    C1] rc rc0: IR event FIFO is full!
[  952.447929][    C1] rc rc0: IR event FIFO is full!
[  952.447946][    C1] rc rc0: IR event FIFO is full!
[  952.447961][    C1] rc rc0: IR event FIFO is full!
[  952.448192][    C1] rc rc0: IR event FIFO is full!
[  952.448207][    C1] rc rc0: IR event FIFO is full!
[  952.448222][    C1] rc rc0: IR event FIFO is full!
[  952.448237][    C1] rc rc0: IR event FIFO is full!
[  952.448252][    C1] rc rc0: IR event FIFO is full!
[  952.448491][    C1] rc rc0: IR event FIFO is full!
[  952.448507][    C1] rc rc0: IR event FIFO is full!
[  952.448745][    C1] rc rc0: IR event FIFO is full!
[  952.448761][    C1] rc rc0: IR event FIFO is full!
[  952.448778][    C1] rc rc0: IR event FIFO is full!
[  952.449276][    C1] rc rc0: IR event FIFO is full!
[  952.449293][    C1] rc rc0: IR event FIFO is full!
[  952.449308][    C1] rc rc0: IR event FIFO is full!
[  952.449323][    C1] rc rc0: IR event FIFO is full!
[  952.449338][    C1] rc rc0: IR event FIFO is full!
[  952.449352][    C1] rc rc0: IR event FIFO is full!
[  952.449578][    C1] rc rc0: IR event FIFO is full!
[  952.449597][    C1] rc rc0: IR event FIFO is full!
[  952.449611][    C1] rc rc0: IR event FIFO is full!
[  952.449627][    C1] rc rc0: IR event FIFO is full!
[  952.449862][    C1] rc rc0: IR event FIFO is full!
[  952.449878][    C1] rc rc0: IR event FIFO is full!
[  952.449895][    C1] rc rc0: IR event FIFO is full!
[  952.450344][    C1] rc rc0: IR event FIFO is full!
[  952.450362][    C1] rc rc0: IR event FIFO is full!
[  952.450379][    C1] rc rc0: IR event FIFO is full!
[  952.450394][    C1] rc rc0: IR event FIFO is full!
[  952.450630][    C1] rc rc0: IR event FIFO is full!
[  952.450647][    C1] rc rc0: IR event FIFO is full!
[  952.450661][    C1] rc rc0: IR event FIFO is full!
[  952.450677][    C1] rc rc0: IR event FIFO is full!
[  952.450692][    C1] rc rc0: IR event FIFO is full!
[  952.450923][    C1] rc rc0: IR event FIFO is full!
[  952.450940][    C1] rc rc0: IR event FIFO is full!
[  952.450954][    C1] rc rc0: IR event FIFO is full!
[  952.450969][    C1] rc rc0: IR event FIFO is full!
[  952.450984][    C1] rc rc0: IR event FIFO is full!
[  952.451000][    C1] rc rc0: IR event FIFO is full!
[  952.451014][    C1] rc rc0: IR event FIFO is full!
[  952.451227][    C1] rc rc0: IR event FIFO is full!
[  952.451243][    C1] rc rc0: IR event FIFO is full!
[  952.451259][    C1] rc rc0: IR event FIFO is full!
[  952.451274][    C1] rc rc0: IR event FIFO is full!
[  952.451531][    C1] rc rc0: IR event FIFO is full!
[  952.451548][    C1] rc rc0: IR event FIFO is full!
[  952.451562][    C1] rc rc0: IR event FIFO is full!
[  952.451578][    C1] rc rc0: IR event FIFO is full!
[  952.451594][    C1] rc rc0: IR event FIFO is full!
[  952.451608][    C1] rc rc0: IR event FIFO is full!
[  952.451623][    C1] rc rc0: IR event FIFO is full!
[  952.451854][    C1] rc rc0: IR event FIFO is full!
[  952.451870][    C1] rc rc0: IR event FIFO is full!
[  952.451885][    C1] rc rc0: IR event FIFO is full!
[  952.451901][    C1] rc rc0: IR event FIFO is full!
[  952.451916][    C1] rc rc0: IR event FIFO is full!
[  952.451930][    C1] rc rc0: IR event FIFO is full!
[  952.451945][    C1] rc rc0: IR event FIFO is full!
[  952.451960][    C1] rc rc0: IR event FIFO is full!
[  952.451981][    C1] rc rc0: IR event FIFO is full!
[  952.451996][    C1] rc rc0: IR event FIFO is full!
[  952.452028][    C1] rc rc0: IR event FIFO is full!
[  952.452044][    C1] rc rc0: IR event FIFO is full!
[  952.452278][    C1] rc rc0: IR event FIFO is full!
[  952.452298][    C1] rc rc0: IR event FIFO is full!
[  952.452314][    C1] rc rc0: IR event FIFO is full!
[  952.452329][    C1] rc rc0: IR event FIFO is full!
[  952.452554][    C1] rc rc0: IR event FIFO is full!
[  952.452571][    C1] rc rc0: IR event FIFO is full!
[  952.452586][    C1] rc rc0: IR event FIFO is full!
[  952.452602][    C1] rc rc0: IR event FIFO is full!
[  952.452833][    C1] rc rc0: IR event FIFO is full!
[  952.452851][    C1] rc rc0: IR event FIFO is full!
[  952.452866][    C1] rc rc0: IR event FIFO is full!
[  952.452882][    C1] rc rc0: IR event FIFO is full!
[  952.452898][    C1] rc rc0: IR event FIFO is full!
[  952.453366][    C1] rc rc0: IR event FIFO is full!
[  952.453397][    C1] rc rc0: IR event FIFO is full!
[  952.453411][    C1] rc rc0: IR event FIFO is full!
[  952.453426][    C1] rc rc0: IR event FIFO is full!
[  952.453441][    C1] rc rc0: IR event FIFO is full!
[  952.453456][    C1] rc rc0: IR event FIFO is full!
[  952.453685][    C1] rc rc0: IR event FIFO is full!
[  952.453700][    C1] rc rc0: IR event FIFO is full!
[  952.453715][    C1] rc rc0: IR event FIFO is full!
[  952.453729][    C1] rc rc0: IR event FIFO is full!
[  952.453744][    C1] rc rc0: IR event FIFO is full!
[  952.453759][    C1] rc rc0: IR event FIFO is full!
[  952.453774][    C1] rc rc0: IR event FIFO is full!
[  952.453788][    C1] rc rc0: IR event FIFO is full!
[  952.453802][    C1] rc rc0: IR event FIFO is full!
[  952.454068][    C1] rc rc0: IR event FIFO is full!
[  952.454085][    C1] rc rc0: IR event FIFO is full!
[  952.454101][    C1] rc rc0: IR event FIFO is full!
[  952.454116][    C1] rc rc0: IR event FIFO is full!
[  952.454131][    C1] rc rc0: IR event FIFO is full!
[  952.454365][    C1] rc rc0: IR event FIFO is full!
[  952.454382][    C1] rc rc0: IR event FIFO is full!
[  952.454397][    C1] rc rc0: IR event FIFO is full!
[  952.454414][    C1] rc rc0: IR event FIFO is full!
[  952.454429][    C1] rc rc0: IR event FIFO is full!
[  952.454445][    C1] rc rc0: IR event FIFO is full!
[  952.454460][    C1] rc rc0: IR event FIFO is full!
[  952.454915][    C1] rc rc0: IR event FIFO is full!
[  952.454936][    C1] rc rc0: IR event FIFO is full!
[  952.454951][    C1] rc rc0: IR event FIFO is full!
[  952.454967][    C1] rc rc0: IR event FIFO is full!
[  952.454982][    C1] rc rc0: IR event FIFO is full!
[  952.454997][    C1] rc rc0: IR event FIFO is full!
[  952.455010][    C1] rc rc0: IR event FIFO is full!
[  952.455025][    C1] rc rc0: IR event FIFO is full!
[  952.455470][    C1] rc rc0: IR event FIFO is full!
[  952.455498][    C1] rc rc0: IR event FIFO is full!
[  952.455533][    C1] rc rc0: IR event FIFO is full!
[  952.455548][    C1] rc rc0: IR event FIFO is full!
[  952.455562][    C1] rc rc0: IR event FIFO is full!
[  952.455578][    C1] rc rc0: IR event FIFO is full!
[  952.455804][    C1] rc rc0: IR event FIFO is full!
[  952.455822][    C1] rc rc0: IR event FIFO is full!
[  952.455837][    C1] rc rc0: IR event FIFO is full!
[  952.455853][    C1] rc rc0: IR event FIFO is full!
[  952.455867][    C1] rc rc0: IR event FIFO is full!
[  952.456115][    C1] rc rc0: IR event FIFO is full!
[  952.456131][    C1] rc rc0: IR event FIFO is full!
[  952.456148][    C1] rc rc0: IR event FIFO is full!
[  952.456385][    C1] rc rc0: IR event FIFO is full!
[  952.456402][    C1] rc rc0: IR event FIFO is full!
[  952.456418][    C1] rc rc0: IR event FIFO is full!
[  952.456433][    C1] rc rc0: IR event FIFO is full!
[  952.456449][    C1] rc rc0: IR event FIFO is full!
[  952.456692][    C1] rc rc0: IR event FIFO is full!
[  952.456710][    C1] rc rc0: IR event FIFO is full!
[  952.456726][    C1] rc rc0: IR event FIFO is full!
[  952.456965][    C1] rc rc0: IR event FIFO is full!
[  952.456983][    C1] rc rc0: IR event FIFO is full!
[  952.457213][    C1] rc rc0: IR event FIFO is full!
[  952.457230][    C1] rc rc0: IR event FIFO is full!
[  952.457246][    C1] rc rc0: IR event FIFO is full!
[  952.457261][    C1] rc rc0: IR event FIFO is full!
[  952.457277][    C1] rc rc0: IR event FIFO is full!
[  952.457291][    C1] rc rc0: IR event FIFO is full!
[  952.457542][    C1] rc rc0: IR event FIFO is full!
[  952.457775][    C1] rc rc0: IR event FIFO is full!
[  952.457792][    C1] rc rc0: IR event FIFO is full!
[  952.457808][    C1] rc rc0: IR event FIFO is full!
[  952.457824][    C1] rc rc0: IR event FIFO is full!
[  952.461642][    C1] rc rc0: IR event FIFO is full!
[  952.462796][    C1] rc rc0: IR event FIFO is full!
[  952.462815][    C1] rc rc0: IR event FIFO is full!
[  952.463834][    C1] rc rc0: IR event FIFO is full!
[  952.463854][    C1] rc rc0: IR event FIFO is full!
[  952.464304][    C1] rc rc0: IR event FIFO is full!
[  952.464324][    C1] rc rc0: IR event FIFO is full!
[  952.464340][    C1] rc rc0: IR event FIFO is full!
[  952.464355][    C1] rc rc0: IR event FIFO is full!
[  952.464494][T20024] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  952.464584][    C1] rc rc0: IR event FIFO is full!
[  952.464601][    C1] rc rc0: IR event FIFO is full!
[  952.464616][    C1] rc rc0: IR event FIFO is full!
[  952.464631][    C1] rc rc0: IR event FIFO is full!
[  952.464871][    C1] rc rc0: IR event FIFO is full!
[  952.464887][    C1] rc rc0: IR event FIFO is full!
[  952.464905][    C1] rc rc0: IR event FIFO is full!
[  952.464921][    C1] rc rc0: IR event FIFO is full!
[  952.464936][    C1] rc rc0: IR event FIFO is full!
[  952.465208][    C1] rc rc0: IR event FIFO is full!
[  952.465227][    C1] rc rc0: IR event FIFO is full!
[  952.465244][    C1] rc rc0: IR event FIFO is full!
[  952.465259][    C1] rc rc0: IR event FIFO is full!
[  952.465274][    C1] rc rc0: IR event FIFO is full!
[  952.465290][    C1] rc rc0: IR event FIFO is full!
[  952.465306][    C1] rc rc0: IR event FIFO is full!
[  952.465321][    C1] rc rc0: IR event FIFO is full!
[  952.465789][    C1] rc rc0: IR event FIFO is full!
[  952.465824][    C1] rc rc0: IR event FIFO is full!
[  952.465840][    C1] rc rc0: IR event FIFO is full!
[  952.465855][    C1] rc rc0: IR event FIFO is full!
[  952.465870][    C1] rc rc0: IR event FIFO is full!
[  952.465886][    C1] rc rc0: IR event FIFO is full!
[  952.465902][    C1] rc rc0: IR event FIFO is full!
[  952.465917][    C1] rc rc0: IR event FIFO is full!
[  952.466431][    C1] rc rc0: IR event FIFO is full!
[  952.466450][    C1] rc rc0: IR event FIFO is full!
[  952.466466][    C1] rc rc0: IR event FIFO is full!
[  952.496114][T20024] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  952.510086][T20024] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  952.528909][ T5712] usb 5-1: USB disconnect, device number 52
[  952.586985][ T5712] em28xx 5-1:0.0: Disconnecting em28xx
[  952.680576][T20024] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  952.707198][T20024] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  952.726350][T20024] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  952.849281][T19896] veth1_macvtap: entered promiscuous mode
[  952.935301][T20024] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  953.028538][T20024] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  953.517776][T20024] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  953.517804][T20024] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  953.690507][T20024] usb 6-1: USB disconnect, device number 13
[  953.779931][ T5712] em28xx 5-1:0.0: Freeing device
[  953.879196][T19896] batman_adv: batadv0: Interface activated: batadv_slave_0
[  953.922096][T19896] batman_adv: batadv0: Interface activated: batadv_slave_1
[  954.001385][T20200] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4575'.
[  954.122733][   T38] audit: type=1326 audit(1780784539.931:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20196 comm="syz.3.4574" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9453b8ce59 code=0x0
[  954.227257][ T1134] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  954.239260][ T1134] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  954.244297][ T1134] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  954.244441][ T1134] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  954.274618][T20207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4574'.
[  954.433862][T20205] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  954.877042][T20221] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4579'.
[  955.397868][T20228] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4580'.
[  956.159131][ T5266] 8021q: adding VLAN 0 to HW filter on device eth12
[  956.436471][ T8274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  956.436495][ T8274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  956.762990][T20237] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4584'.
[  956.820397][ T6336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  956.820427][ T6336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  956.975019][ T5783] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  957.079823][T13964] IPVS: starting estimator thread 0...
[  957.080626][T20242] FAULT_INJECTION: forcing a failure.
[  957.080626][T20242] name failslab, interval 1, probability 0, space 0, times 0
[  957.080663][T20242] CPU: 0 UID: 0 PID: 20242 Comm: syz.5.4586 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  957.080694][T20242] Tainted: [L]=SOFTLOCKUP
[  957.080703][T20242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  957.080718][T20242] Call Trace:
[  957.080727][T20242]  <TASK>
[  957.080738][T20242]  dump_stack_lvl+0xe8/0x150
[  957.080770][T20242]  should_fail_ex+0x46b/0x600
[  957.080809][T20242]  should_failslab+0xa8/0x100
[  957.080842][T20242]  __kvmalloc_node_noprof+0x170/0x8e0
[  957.080874][T20242]  ? __nf_hook_entries_try_shrink+0x328/0x700
[  957.080910][T20242]  __nf_hook_entries_try_shrink+0x328/0x700
[  957.080950][T20242]  __nf_unregister_net_hook+0x4cc/0x6f0
[  957.080985][T20242]  nf_unregister_net_hooks+0xcb/0x140
[  957.081016][T20242]  ip_vs_unregister_hooks+0xbc/0x120
[  957.081054][T20242]  ip_vs_unlink_service+0x982/0x1180
[  957.081083][T20242]  ? ip_vs_unlink_service+0x19d/0x1180
[  957.081119][T20242]  ip_vs_flush+0x1d5/0x420
[  957.081151][T20242]  do_ip_vs_set_ctl+0x4fb/0xb00
[  957.081185][T20242]  ? __pfx_do_ip_vs_set_ctl+0x10/0x10
[  957.081239][T20242]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  957.081275][T20242]  ? rt_mutex_slowunlock+0x1cb/0x300
[  957.081302][T20242]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  957.081346][T20242]  nf_setsockopt+0x26f/0x290
[  957.081377][T20242]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  957.081417][T20242]  do_sock_setsockopt+0x17c/0x1b0
[  957.081456][T20242]  __x64_sys_setsockopt+0x143/0x1b0
[  957.081497][T20242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.081522][T20242]  do_syscall_64+0x174/0x580
[  957.081555][T20242]  ? trace_irq_disable+0x3b/0x140
[  957.081579][T20242]  ? clear_bhb_loop+0x40/0x90
[  957.081606][T20242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.081628][T20242] RIP: 0033:0x7fb1b1bace59
[  957.081649][T20242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  957.081669][T20242] RSP: 002b:00007fb1afdfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  957.081693][T20242] RAX: ffffffffffffffda RBX: 00007fb1b1e25fa0 RCX: 00007fb1b1bace59
[  957.081710][T20242] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000003
[  957.081724][T20242] RBP: 00007fb1afdfe090 R08: 0000000000000000 R09: 0000000000000000
[  957.081738][T20242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  957.081752][T20242] R13: 00007fb1b1e26038 R14: 00007fb1b1e25fa0 R15: 00007ffd8bafa8a8
[  957.081785][T20242]  </TASK>
[  957.117118][ T5783] usb 4-1: Using ep0 maxpacket: 16
[  957.168461][ T5783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  957.168529][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  957.168558][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  957.168581][ T5783] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  957.168607][ T5783] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  957.175508][ T5783] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  957.175540][ T5783] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  957.175562][ T5783] usb 4-1: Manufacturer: syz
[  957.221880][T20243] IPVS: using max 7 ests per chain, 16800 per kthread
[  957.465241][ T5783] usb 4-1: config 0 descriptor??
[  957.940966][ T5783] rc_core: IR keymap rc-hauppauge not found
[  957.940987][ T5783] Registered IR keymap rc-empty
[  957.941117][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  957.958905][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  957.975617][ T5783] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  958.001939][ T5783] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input106
[  958.332257][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  958.346086][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  958.367607][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  958.906215][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  958.924161][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  958.937110][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  958.955485][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  958.975519][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  958.993775][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  959.012637][ T5783] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  959.065607][ T5783] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  959.065638][ T5783] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  959.086815][ T5783] usb 4-1: USB disconnect, device number 84
[  959.594164][ T5712] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  959.642559][T20275] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4592'.
[  959.790164][ T5712] usb 7-1: unable to get BOS descriptor or descriptor too short
[  959.791426][ T5712] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  959.791453][ T5712] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  959.824603][ T5712] usb 7-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40
[  959.824627][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.824643][ T5712] usb 7-1: Product: syz
[  959.824658][ T5712] usb 7-1: Manufacturer: syz
[  959.824669][ T5712] usb 7-1: SerialNumber: syz
[  960.120906][T20289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4595'.
[  960.120936][T20289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4595'.
[  960.262430][ T5712] usb 7-1: 0:1 : does not exist
[  960.515720][ T5712] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71
[  960.725796][ T5712] usb 7-1: USB disconnect, device number 2
[  960.775277][T15847] udevd[15847]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  962.157665][T20332] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4602'.
[  962.225712][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  962.225819][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  962.584734][T20024] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  962.733498][T20024] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  962.733528][T20024] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  962.737733][T20024] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  962.737765][T20024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.737789][T20024] usb 5-1: Product: syz
[  962.737806][T20024] usb 5-1: Manufacturer: syz
[  962.737823][T20024] usb 5-1: SerialNumber: syz
[  962.821907][T20024] usb 5-1: 0:2 : does not exist
[  963.201681][T20341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  963.202260][T20341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  963.223480][T20024] usb 5-1: USB disconnect, device number 53
[  963.939645][T20375] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2187056093 (4374112186 ns) > initial count (2062966574 ns). Using initial count to start timer.
[  965.376513][T20024] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  965.547949][T20024] usb 7-1: Using ep0 maxpacket: 16
[  965.550299][T20024] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  965.550485][T20024] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  965.550579][T20024] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  965.550644][T20024] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  965.550698][T20024] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  965.617380][T20024] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  965.617403][T20024] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  965.617418][T20024] usb 7-1: Manufacturer: syz
[  965.619381][T20414] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4615'.
[  965.673128][T20024] usb 7-1: config 0 descriptor??
[  965.967881][T20024] rc_core: IR keymap rc-hauppauge not found
[  965.967905][T20024] Registered IR keymap rc-empty
[  965.968069][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  965.985868][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  966.019460][T20024] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  966.054442][T20024] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input107
[  966.071057][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  966.099900][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  966.128618][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  966.158230][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  966.176328][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  966.195443][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  966.224328][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  966.242849][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  966.261951][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  966.293133][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  966.344677][T20428] FAULT_INJECTION: forcing a failure.
[  966.344677][T20428] name failslab, interval 1, probability 0, space 0, times 0
[  966.344718][T20428] CPU: 0 UID: 0 PID: 20428 Comm: syz.5.4619 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  966.344749][T20428] Tainted: [L]=SOFTLOCKUP
[  966.344758][T20428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  966.344774][T20428] Call Trace:
[  966.344783][T20428]  <TASK>
[  966.344794][T20428]  dump_stack_lvl+0xe8/0x150
[  966.344828][T20428]  should_fail_ex+0x46b/0x600
[  966.344869][T20428]  should_failslab+0xa8/0x100
[  966.344902][T20428]  kmem_cache_alloc_noprof+0x87/0x680
[  966.344930][T20428]  ? security_inode_alloc+0x39/0x310
[  966.344962][T20428]  security_inode_alloc+0x39/0x310
[  966.344992][T20428]  inode_init_always_gfp+0x99a/0xd50
[  966.345024][T20428]  ? __pfx_sock_alloc_inode+0x10/0x10
[  966.345053][T20428]  alloc_inode+0x82/0x1b0
[  966.345087][T20428]  do_accept+0x147/0x930
[  966.345120][T20428]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  966.345154][T20428]  ? __pfx_do_accept+0x10/0x10
[  966.345207][T20428]  __sys_accept4+0x139/0x230
[  966.345240][T20428]  ? __pfx___sys_accept4+0x10/0x10
[  966.345273][T20428]  ? __pfx_ksys_write+0x10/0x10
[  966.345311][T20428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  966.345337][T20428]  __x64_sys_accept+0x7d/0x90
[  966.345374][T20428]  do_syscall_64+0x174/0x580
[  966.345409][T20428]  ? trace_irq_disable+0x3b/0x140
[  966.345435][T20428]  ? clear_bhb_loop+0x40/0x90
[  966.345463][T20428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  966.345487][T20428] RIP: 0033:0x7fb1b1bace59
[  966.345509][T20428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  966.345529][T20428] RSP: 002b:00007fb1afdfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  966.345554][T20428] RAX: ffffffffffffffda RBX: 00007fb1b1e25fa0 RCX: 00007fb1b1bace59
[  966.345572][T20428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  966.345586][T20428] RBP: 00007fb1afdfe090 R08: 0000000000000000 R09: 0000000000000000
[  966.345602][T20428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  966.345616][T20428] R13: 00007fb1b1e26038 R14: 00007fb1b1e25fa0 R15: 00007ffd8bafa8a8
[  966.345652][T20428]  </TASK>
[  966.420623][T20024] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  966.420684][T20024] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  966.619052][T20024] usb 7-1: USB disconnect, device number 3
[  966.766896][T20433] binder: 20432:20433 ioctl c0306201 200000000180 returned -14
[  967.149257][T20447] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4624'.
[  967.814240][T20024] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  967.981359][T20024] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC
[  967.981400][T20024] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 62, changing to 9
[  967.981432][T20024] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 50896, setting to 1024
[  967.986556][T20024] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  967.986641][T20024] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  967.986924][T20024] usb 5-1: Manufacturer: syz
[  967.986976][T20024] usb 5-1: SerialNumber: syz
[  968.053945][T20461] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  968.433164][T20493] netlink: 45 bytes leftover after parsing attributes in process `syz.6.4633'.
[  968.436573][T20024] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  968.479008][T20024] usb 5-1: USB disconnect, device number 54
[  968.787679][T20501] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4636'.
[  968.948971][T20024] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  969.157546][T20024] usb 5-1: Using ep0 maxpacket: 16
[  969.165296][T20024] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  969.165362][T20024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  969.165400][T20024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  969.165429][T20024] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  969.165460][T20024] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  969.167535][T20024] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  969.167635][T20024] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  969.167706][T20024] usb 5-1: Manufacturer: syz
[  969.275354][T20024] usb 5-1: config 0 descriptor??
[  969.598480][T20024] rc_core: IR keymap rc-hauppauge not found
[  969.598502][T20024] Registered IR keymap rc-empty
[  969.598660][T20024] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  969.618327][T20024] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  969.648750][T20024] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  969.667890][T20024] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input108
[  969.715460][T20024] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  969.736012][T20024] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  969.757881][T20024] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  969.776653][T20024] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  969.800311][T20024] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  969.814728][T20024] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  969.833738][T20024] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  969.852965][T20024] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  969.887740][T20024] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  969.912877][T20024] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  969.974546][T20024] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  969.974577][T20024] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  970.086184][T20024] usb 5-1: USB disconnect, device number 55
[  970.348076][ T5783] usb 4-1: new full-speed USB device number 85 using dummy_hcd
[  970.493685][ T5783] usb 4-1: no configurations
[  970.493708][ T5783] usb 4-1: can't read configurations, error -22
[  970.614834][ T5783] usb 4-1: new full-speed USB device number 86 using dummy_hcd
[  970.762204][ T5783] usb 4-1: no configurations
[  970.762227][ T5783] usb 4-1: can't read configurations, error -22
[  970.762641][ T5783] usb usb4-port1: attempt power cycle
[  970.784324][T20545] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4645'.
[  970.881722][T20024] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  971.024395][T20024] usb 7-1: Using ep0 maxpacket: 16
[  971.026282][T20024] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[  971.026311][T20024] usb 7-1: config 0 has no interface number 0
[  971.028906][T20024] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  971.028935][T20024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  971.028959][T20024] usb 7-1: Product: syz
[  971.028971][T20024] usb 7-1: Manufacturer: syz
[  971.028982][T20024] usb 7-1: SerialNumber: syz
[  971.036804][T20024] usb 7-1: config 0 descriptor??
[  971.089582][T20024] hub 7-1:0.132: bad descriptor, ignoring hub
[  971.089624][T20024] hub 7-1:0.132: probe with driver hub failed with error -5
[  971.120611][T20024] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input109
[  971.140942][ T5783] usb 4-1: new full-speed USB device number 87 using dummy_hcd
[  971.162034][ T5783] usb 4-1: no configurations
[  971.162056][ T5783] usb 4-1: can't read configurations, error -22
[  971.303993][ T5783] usb 4-1: new full-speed USB device number 88 using dummy_hcd
[  971.326579][ T5783] usb 4-1: no configurations
[  971.326607][ T5783] usb 4-1: can't read configurations, error -22
[  971.326844][ T5783] usb usb4-port1: unable to enumerate USB device
[  971.739283][   T32] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  971.881733][ T5712] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  971.909228][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  971.909266][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  971.909290][   T32] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  971.909336][   T32] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  971.909359][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  971.974754][   T32] usb 5-1: config 0 descriptor??
[  972.031362][ T5712] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  972.031395][ T5712] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  972.031449][ T5712] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  972.036571][ T5712] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  972.036636][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.036661][ T5712] usb 6-1: Product: syz
[  972.036678][ T5712] usb 6-1: Manufacturer: syz
[  972.036724][ T5712] usb 6-1: SerialNumber: syz
[  972.074333][ T5712] cdc_mbim 6-1:1.0: skipping garbage
[  972.074380][ T5712] usb 6-1: selecting invalid altsetting 1
[  972.391190][   T32] steelseries 0003:1038:1410.0024: unknown main item tag 0x0
[  972.391229][   T32] steelseries 0003:1038:1410.0024: unknown main item tag 0x0
[  972.391256][   T32] steelseries 0003:1038:1410.0024: unknown main item tag 0x4
[  972.391283][   T32] steelseries 0003:1038:1410.0024: unknown main item tag 0x0
[  972.391310][   T32] steelseries 0003:1038:1410.0024: unknown main item tag 0x0
[  972.391336][   T32] steelseries 0003:1038:1410.0024: unknown main item tag 0x0
[  972.391362][   T32] steelseries 0003:1038:1410.0024: unknown main item tag 0x0
[  972.391928][   T32] steelseries 0003:1038:1410.0024: missing HID_OUTPUT_REPORT 0
[  972.717993][T20567] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4650'.
[  972.799229][T20024] usb 7-1: USB disconnect, device number 4
[  973.338109][T20576] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4655'.
[  973.547087][ T5712] cdc_mbim 6-1:1.0: SET_NTB_FORMAT failed
[  973.566162][ T5712] usb 6-1: selecting invalid altsetting 1
[  973.566354][ T5712] cdc_mbim 6-1:1.0: bind() failure
[  973.608866][ T5712] usb 6-1: USB disconnect, device number 14
[  973.797563][T20024] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  973.942459][T20024] usb 7-1: Using ep0 maxpacket: 16
[  973.944604][T20024] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  973.944662][T20024] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  973.944695][T20024] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  973.944721][T20024] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  973.944850][T20024] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  973.947142][T20024] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  973.947175][T20024] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  973.947200][T20024] usb 7-1: Manufacturer: syz
[  974.039508][T20024] usb 7-1: config 0 descriptor??
[  974.320370][T20024] rc_core: IR keymap rc-hauppauge not found
[  974.320393][T20024] Registered IR keymap rc-empty
[  974.320555][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  974.351499][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  974.374062][T20024] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  974.390237][T20024] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input110
[  974.418831][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  974.444143][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  974.463590][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  974.482543][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  974.510967][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  974.530035][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  974.558626][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  974.577686][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  974.606068][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  974.621326][ T5712] usb 5-1: USB disconnect, device number 56
[  974.632392][T20024] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  974.716253][T20024] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  974.716281][T20024] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  974.723662][T20024] usb 7-1: USB disconnect, device number 5
[  975.139630][ T5712] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  975.279393][T20613] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4664'.
[  975.284302][ T5712] usb 5-1: Using ep0 maxpacket: 8
[  975.299259][ T5712] usb 5-1: unable to get BOS descriptor or descriptor too short
[  975.315526][ T5712] usb 5-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice= 0.40
[  975.315559][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  975.315581][ T5712] usb 5-1: Product: syz
[  975.315598][ T5712] usb 5-1: Manufacturer: syz
[  975.315615][ T5712] usb 5-1: SerialNumber: syz
[  975.399406][ T5712] usb 5-1: BAAD HEADPHONE p_chmask mismatch
[  975.448137][T20619] trusted_key: encrypted_key: key user:syz not found
[  975.635502][ T5712] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  975.643692][ T5712] usb 5-1: selecting invalid altsetting 1
[  975.643716][ T5712] snd-usb-caiaq 5-1:1.0: can't set alt interface.
[  975.643745][ T5712] usb 5-1: unable to init card! (ret=-5)
[  975.644182][ T5712] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  975.694087][T20625] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  975.772638][T20625] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  975.774268][T20625] overlayfs: failed to look up (tracing) for ino (-66)
[  975.826003][T20024] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  975.880832][ T5712] usb 5-1: selecting invalid altsetting 1
[  975.880850][ T5712] snd-usb-caiaq 5-1:1.1: can't set alt interface.
[  975.880862][ T5712] usb 5-1: unable to init card! (ret=-5)
[  975.881321][ T5712] snd-usb-caiaq 5-1:1.1: probe with driver snd-usb-caiaq failed with error -5
[  975.956524][ T5712] usb 5-1: selecting invalid altsetting 1
[  975.956549][ T5712] snd-usb-caiaq 5-1:1.2: can't set alt interface.
[  975.956567][ T5712] usb 5-1: unable to init card! (ret=-5)
[  975.957046][ T5712] snd-usb-caiaq 5-1:1.2: probe with driver snd-usb-caiaq failed with error -5
[  976.153410][T15847] udevd[15847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  976.597566][   T32] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  976.713634][ T5614] usb 5-1: USB disconnect, device number 57
[  976.760207][   T32] usb 6-1: Using ep0 maxpacket: 16
[  976.763155][   T32] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  976.763213][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  976.763240][   T32] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  976.765446][   T32] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  976.765478][   T32] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  976.765501][   T32] usb 6-1: Manufacturer: syz
[  976.835744][   T32] usb 6-1: config 0 descriptor??
[  976.874094][T20024] usb 7-1: device descriptor read/64, error -71
[  977.130443][T20024] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  977.289028][T20024] usb 7-1: unable to get BOS descriptor or descriptor too short
[  977.290263][T20024] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  977.290307][T20024] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  977.290376][T20024] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  977.290420][T20024] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  977.290466][T20024] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  977.290497][T20024] usb 7-1: config 1 interface 1 has no altsetting 0
[  977.352201][T20024] usb 7-1: string descriptor 0 read error: -22
[  977.352618][T20024] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  977.352703][T20024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.523373][T20652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  977.525665][T20652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  977.637207][   T32] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  977.788506][   T32] usb 5-1: Using ep0 maxpacket: 16
[  977.790823][   T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  977.791002][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  977.791033][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  977.791057][   T32] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  977.791082][   T32] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  977.793966][   T32] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  977.793987][   T32] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  977.794002][   T32] usb 5-1: Manufacturer: syz
[  977.902147][   T32] usb 5-1: config 0 descriptor??
[  978.206730][   T32] rc_core: IR keymap rc-hauppauge not found
[  978.206755][   T32] Registered IR keymap rc-empty
[  978.207058][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  978.235399][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  978.272175][   T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  978.306927][   T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input111
[  978.314675][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  978.350664][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  978.369028][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  978.387684][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  978.406769][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  978.425862][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  978.446391][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  978.466809][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  978.486739][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  978.491780][T20641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  978.505108][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  978.529057][T20641] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  978.566599][   T32] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  978.566628][   T32] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  978.651033][T20024] usb 7-1: 2:0: failed to get current value for ch 1 (-71)
[  978.656998][T20024] usb 7-1: Warning! Unlikely big volume step count (=30101), linear volume or wrong cval->res?
[  978.657077][T20024] usb 7-1: [2] FU [Speaker Playback Volume] ch = 1, val = 120/30221/1
[  978.681390][   T32] usb 5-1: USB disconnect, device number 58
[  978.847463][T20024] usb 7-1: USB disconnect, device number 7
[  979.223932][ T5712] usb 6-1: USB disconnect, device number 15
[  979.669677][T20024] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  979.839599][T20024] usb 6-1: unable to get BOS descriptor or descriptor too short
[  979.848779][T20024] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  979.848799][T20024] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  979.851435][T20024] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  979.851469][T20024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  979.851485][T20024] usb 6-1: Product: syz
[  979.851495][T20024] usb 6-1: Manufacturer: syz
[  979.851507][T20024] usb 6-1: SerialNumber: syz
[  980.321752][ T5712] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  980.397578][ T5783] usb 6-1: USB disconnect, device number 16
[  980.464283][ T5712] usb 5-1: Using ep0 maxpacket: 16
[  980.485763][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  980.485824][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  980.485867][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  980.485890][ T5712] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  980.485916][ T5712] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  980.488673][ T5712] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  980.488705][ T5712] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  980.488729][ T5712] usb 5-1: Manufacturer: syz
[  980.581955][ T5712] usb 5-1: config 0 descriptor??
[  980.950040][ T5712] rc_core: IR keymap rc-hauppauge not found
[  980.950079][ T5712] Registered IR keymap rc-empty
[  980.950877][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  980.997109][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  981.050810][ T5712] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  981.070654][ T5712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input112
[  981.091598][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  981.102742][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  981.127032][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  981.141169][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  981.160024][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  981.185425][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  981.198176][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  981.216871][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  981.235892][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  981.254960][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  981.280675][ T5712] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  981.280930][ T5712] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  981.348197][ T5821] usb 5-1: USB disconnect, device number 59
[  981.519142][T20719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  981.519777][T20719] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  981.729144][T20024] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  982.520819][ T5614] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  982.699052][ T5614] usb 4-1: Using ep0 maxpacket: 32
[  982.708037][ T5614] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  982.708096][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.741161][ T5614] usb 4-1: config 0 descriptor??
[  982.951561][ T5614] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  982.959803][ T5614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  982.961502][ T5614] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  982.961560][ T5614] usb 4-1: media controller created
[  982.999065][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  983.976017][ T5614] stb0899_attach: Driver disabled by Kconfig
[  983.976119][ T5614] az6027: no front-end attached
[  983.976119][ T5614] 
[  983.982741][ T5614] az6027: usb out operation failed. (-71)
[  983.982795][ T5614] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  984.006534][ T5614] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input113
[  984.048152][ T5614] dvb-usb: schedule remote query interval to 400 msecs.
[  984.048176][ T5614] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  984.076331][ T5614] usb 4-1: USB disconnect, device number 89
[  984.190015][ T5712] usb 5-1: new full-speed USB device number 60 using dummy_hcd
[  984.357741][ T5712] usb 5-1: unable to get BOS descriptor or descriptor too short
[  984.372708][ T5712] usb 5-1: not running at top speed; connect to a high speed hub
[  984.375000][ T5712] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4
[  984.409919][ T5712] usb 5-1: language id specifier not provided by device, defaulting to English
[  984.414003][ T5712] usb 5-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40
[  984.414032][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.414055][ T5712] usb 5-1: Product: syz
[  984.414072][ T5712] usb 5-1: Manufacturer: 鴪ꋾ犪䍌甩㪖Ᶎ䑕—
[  984.414090][ T5712] usb 5-1: SerialNumber: syz
[  984.575670][ T5614] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  984.608096][T13964] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  984.777426][T13964] usb 6-1: Using ep0 maxpacket: 16
[  984.792482][T13964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  984.792544][T13964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  984.792642][T13964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  984.792675][T13964] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  984.792701][T13964] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  984.794077][T13964] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  984.794107][T13964] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  984.794197][T13964] usb 6-1: Manufacturer: syz
[  984.794402][T20780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  984.808957][T20780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  984.919251][T13964] usb 6-1: config 0 descriptor??
[  984.998464][ T5614] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  985.074954][ T5712] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  985.160684][ T5614] usb 4-1: Using ep0 maxpacket: 16
[  985.165794][ T5614] usb 4-1: config index 0 descriptor too short (expected 37359, got 202)
[  985.165824][ T5614] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  985.165849][ T5614] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  985.165870][ T5614] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95
[  985.219125][ T5614] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  985.219173][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.219196][ T5614] usb 4-1: Product: syz
[  985.219211][ T5614] usb 4-1: Manufacturer: syz
[  985.219228][ T5614] usb 4-1: SerialNumber: syz
[  985.291610][ T5712] usb 5-1: USB disconnect, device number 60
[  985.344658][ T5614] usb 4-1: 0:2 : does not exist
[  985.474763][T13964] rc_core: IR keymap rc-hauppauge not found
[  985.474786][T13964] Registered IR keymap rc-empty
[  985.475475][T13964] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  985.493971][T13964] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  985.516205][T13964] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  985.536290][T13964] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input114
[  985.599003][T13964] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  985.619766][T13964] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  985.636848][T13964] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  985.655882][T13964] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  985.674849][T13964] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  985.699111][T13964] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  985.712935][T13964] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  985.732015][T13964] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  985.753047][T13964] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  985.770059][T13964] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  985.795175][T13964] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  985.795198][T13964] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  985.824540][T13964] ==================================================================
[  985.824630][T13964] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[  985.824705][T13964] Read of size 8 at addr ffffc9000e701008 by task kworker/0:3/13964
[  985.824725][T13964] 
[  985.824749][T13964] CPU: 0 UID: 0 PID: 13964 Comm: kworker/0:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  985.824793][T13964] Tainted: [L]=SOFTLOCKUP
[  985.824802][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  985.824819][T13964] Workqueue: usb_hub_wq hub_event
[  985.824845][T13964] Call Trace:
[  985.824855][T13964]  <TASK>
[  985.824865][T13964]  dump_stack_lvl+0xe8/0x150
[  985.824894][T13964]  print_address_description+0x55/0x1e0
[  985.824925][T13964]  ? __list_add_valid_or_report+0x4e/0x130
[  985.824963][T13964]  print_report+0x58/0x70
[  985.824991][T13964]  kasan_report+0x117/0x150
[  985.825022][T13964]  ? __list_add_valid_or_report+0x4e/0x130
[  985.825064][T13964]  __list_add_valid_or_report+0x4e/0x130
[  985.825103][T13964]  kcov_remote_stop+0x457/0x680
[  985.825133][T13964]  hub_event+0x49d8/0x4f60
[  985.825182][T13964]  ? __pfx_hub_event+0x10/0x10
[  985.825205][T13964]  ? process_one_work+0x8be/0x1630
[  985.825244][T13964]  ? process_one_work+0x8be/0x1630
[  985.825276][T13964]  process_one_work+0x98b/0x1630
[  985.825327][T13964]  ? __pfx_process_one_work+0x10/0x10
[  985.825359][T13964]  ? do_raw_spin_lock+0x12b/0x2f0
[  985.825391][T13964]  worker_thread+0xb49/0x1140
[  985.825430][T13964]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  985.825473][T13964]  kthread+0x388/0x470
[  985.825498][T13964]  ? __pfx_worker_thread+0x10/0x10
[  985.825532][T13964]  ? __pfx_kthread+0x10/0x10
[  985.825555][T13964]  ret_from_fork+0x514/0xb70
[  985.825585][T13964]  ? __pfx_ret_from_fork+0x10/0x10
[  985.825613][T13964]  ? __switch_to+0xc79/0x1410
[  985.825637][T13964]  ? __pfx_kthread+0x10/0x10
[  985.825662][T13964]  ret_from_fork_asm+0x1a/0x30
[  985.825701][T13964]  </TASK>
[  985.825710][T13964] 
[  985.825716][T13964] The buggy address belongs to a vmalloc virtual mapping
[  985.825773][T13964] Memory state around the buggy address:
[  985.825793][T13964]  ffffc9000e700f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  985.825810][T13964]  ffffc9000e700f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  985.825827][T13964] >ffffc9000e701000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  985.825840][T13964]                       ^
[  985.825852][T13964]  ffffc9000e701080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  985.825868][T13964]  ffffc9000e701100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  985.825881][T13964] ==================================================================
[  985.826123][T13964] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  985.826144][T13964] CPU: 0 UID: 0 PID: 13964 Comm: kworker/0:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  985.826176][T13964] Tainted: [L]=SOFTLOCKUP
[  985.826185][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  985.826201][T13964] Workqueue: usb_hub_wq hub_event
[  985.826228][T13964] Call Trace:
[  985.826238][T13964]  <TASK>
[  985.826248][T13964]  vpanic+0x56c/0xa60
[  985.826283][T13964]  ? __pfx_vpanic+0x10/0x10
[  985.826326][T13964]  ? __pfx___schedule+0x10/0x10
[  985.826361][T13964]  panic+0xc5/0xd0
[  985.826393][T13964]  ? __pfx_panic+0x10/0x10
[  985.826427][T13964]  ? preempt_schedule_thunk+0x16/0x40
[  985.826480][T13964]  ? __list_add_valid_or_report+0x4e/0x130
[  985.826513][T13964]  check_panic_on_warn+0x89/0xb0
[  985.826539][T13964]  ? __list_add_valid_or_report+0x4e/0x130
[  985.826575][T13964]  end_report+0x73/0x170
[  985.826621][T13964]  ? __list_add_valid_or_report+0x4e/0x130
[  985.826656][T13964]  kasan_report+0x128/0x150
[  985.826685][T13964]  ? __list_add_valid_or_report+0x4e/0x130
[  985.826724][T13964]  __list_add_valid_or_report+0x4e/0x130
[  985.826764][T13964]  kcov_remote_stop+0x457/0x680
[  985.826791][T13964]  hub_event+0x49d8/0x4f60
[  985.826838][T13964]  ? __pfx_hub_event+0x10/0x10
[  985.826861][T13964]  ? process_one_work+0x8be/0x1630
[  985.826898][T13964]  ? process_one_work+0x8be/0x1630
[  985.826930][T13964]  process_one_work+0x98b/0x1630
[  985.826972][T13964]  ? __pfx_process_one_work+0x10/0x10
[  985.827004][T13964]  ? do_raw_spin_lock+0x12b/0x2f0
[  985.827036][T13964]  worker_thread+0xb49/0x1140
[  985.827077][T13964]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  985.827121][T13964]  kthread+0x388/0x470
[  985.827146][T13964]  ? __pfx_worker_thread+0x10/0x10
[  985.827180][T13964]  ? __pfx_kthread+0x10/0x10
[  985.827206][T13964]  ret_from_fork+0x514/0xb70
[  985.827234][T13964]  ? __pfx_ret_from_fork+0x10/0x10
[  985.827262][T13964]  ? __switch_to+0xc79/0x1410
[  985.827285][T13964]  ? __pfx_kthread+0x10/0x10
[  985.827318][T13964]  ret_from_fork_asm+0x1a/0x30
[  985.827355][T13964]  </TASK>
[  985.827524][T13964] Kernel Offset: disabled