last executing test programs:

12.990660568s ago: executing program 1 (id=1274):
socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000980)=[{&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/212, 0xd4}, {&(0x7f0000000580)=""/10, 0xa}, {&(0x7f00000005c0)=""/105, 0x69}, {&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f0000000700)=""/76, 0x4c}, {&(0x7f0000000780)=""/191, 0xbf}, {&(0x7f0000000840)=""/6, 0x6}, {&(0x7f0000000880)=""/196, 0xc4}], 0xa)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
setgroups(0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x55af)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58)
r6 = accept(r5, 0x0, 0x0)
sendmmsg$inet6(r6, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="6d4fe2c91a68b56a8d5072d22eef9bc63ef8ea5323165414d74d46fe73347b1f34c4ea2d36402650c1f600bd6292728b70dc9e383cd10c41fd687773369eed7e00dcbec7cbf95867622c6517886c07a2716d0ab51f2d4fd886ea3561e8ee7ba0724d4f934d04e60c0848b2cce8cbb088af5cdb64fa543f75099fbc5064f1c7ac02429136a8fd79b97a1ba621d52c897fa0dc5c8b4500da0f15276e5fa891f8267c46cf1c348c3fb5b541", 0xaa}, {&(0x7f0000000540)="983a726ab58440145c692e12e742f1100be909a2e33eb6145706c4eb34b72a6d7364fad9e05293131b8a830c638487aaf1d869cb851c669e4c6af956fd5349314d52470d93362d9aec24418af3f637862d6c6956be4d636f736d5c888ec1ab8a762da519cbe987d9ecc5", 0x31}, {&(0x7f0000000380)="7347df5963adef9044e15bbd9a19f2eb8137fb396accfd6fbeb2c57954accf4a9e0eb665b6", 0x25}, {&(0x7f00000000c0)="e7ce7dd96e47f0e6bc82fd7ce6443dcb01d423a7afc60357821f36f2e080063c1536727c72efbc095091a5013d199f382b1ba3e9c20d1741335a42b469972cd3114bc8ff8096fb5e0abb310e40786c", 0x4f}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000000140)="dd4527b354123186a1197960a847632d88167ba7a47809b1af6df97fcfa79aa7c9443f143fd5d72d0ffa1da0f15f31e5a67ca307e5376353838aef9c33b513ca386e5ddea17a624d989fc7acf878f0f0657d78699dcc3d4888ad75f9e4e84fa3f6a10cbcdd77fb5c72af500e821bb0bec4d85b2a44aee4d11198e874e73de1d8", 0x84}, {&(0x7f00000003c0)="e7124d3b91897a57d22b1e401b4a6a12a49dd03c70ab84bc5efd8936d7331a33f91bb13342314b4a101cc7d215b30c056586099f427fd1ed1322af183105bd9f54e60979a05c8bf844237a151044235dd0bab4753783b158636740b68f9ea22454065ae9fa4e83c83d68928518edb726ece1ed23f5b2f4f4508f2e22d3d8d4ebf8b989bc0381d3de15af21a0720c72d81a36cf15599fd60c7b", 0xfffffea1}], 0x7}}], 0x1, 0x800)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioperm(0x0, 0x6e, 0xe)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)

8.471674713s ago: executing program 1 (id=1291):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="1201100100000040ef174760400001020301090224000101ff50090904000d020301020009210100050122b10f09050a91080003e060"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/hci\x00')
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_loaded', 0x8c4c0, 0x82)
ioprio_set$uid(0x3, 0x0, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x149a82, 0x0)
sendfile(r4, r4, 0x0, 0x5)
copy_file_range(r3, 0x0, r3, 0x0, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x51)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x60a01)
read$proc_mixer(r7, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0xa6400, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfb, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x63}, {0x0, 0x40, 0x2}, {0x6, 0x9, 0x1, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xf, '\x00', 0xf9}, {0x5, 0x4f, 0x2, '\x00', 0x7}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x7f, 0x0, 0x23, '\x00', 0xc}, {0x3, 0x7, 0xd3}, {0x68, 0x3, 0x2, '\x00', 0x10}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x48, 0xa, '\x00', 0x2}, {0x6, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x5, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0x6c}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}})
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
syz_io_uring_setup(0x690e, &(0x7f0000000400)={0x0, 0x1551, 0x4000, 0x0, 0x18d}, &(0x7f0000000480), &(0x7f0000000500), &(0x7f00000000c0))

7.02009s ago: executing program 3 (id=1297):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
fcntl$setlease(r0, 0x400, 0x1) (async, rerun: 32)
fcntl$setlease(r0, 0x400, 0x2) (async, rerun: 32)
openat(r0, &(0x7f0000000100)='./file1\x00', 0x4e4140, 0x178)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') (async)
syz_usb_connect(0x0, 0x61, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801})

6.977225967s ago: executing program 4 (id=1298):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29f, 0x0, 0x1000000020000000}]})
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x126)

6.935134223s ago: executing program 3 (id=1299):
io_uring_setup(0x224a, &(0x7f00000002c0)={0x0, 0x1670, 0x40, 0x2, 0x3d3})
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x1a, 0x2000051b)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000080)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700000350000020001002000000000000000480003006465666c617465"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0xfe}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x40, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r4, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r5 = dup3(r3, r4, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
write$P9_RGETATTR(r5, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000014c0)=0x10000b, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$dvb_frontend(0x0, 0x4, 0x800040)
set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000007c0)={0x7d, 0x5, r8, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020800})

6.765105954s ago: executing program 4 (id=1301):
openat$kvm(0xffffffffffffff9c, 0x0, 0x60303, 0x0) (async)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x15, 0x5, 0x80206}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x15, 0x4, 0x3, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0xe, 0x3, 0x6, 0x7, 0x3, 0x50, 0xfd, 0x6, 0x4}], 0xffbfffff}) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000040)={{r1, r2+10000000}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce8220100090581"], 0x0) (async)
close(0x3) (async)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) (async)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r4, 0x1, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x9, 0x1f, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac10087532f84dc01148c2ae9a1a93c9effffffe500000000000048570000000000000000feff000000000a00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) (async)
fdatasync(r3) (async)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x80000)
syz_usb_disconnect(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000) (async)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1604, 0x8007, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x57, 0xc0, 0xf, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0xfc, 0x0, {0xa, 0x25, 0x25, 0x8, 0x1f, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0xc, 0x1, {0xa, 0x25, 0x25, 0x800, 0xf3, 0x3}}}}}}}}]}}, 0x0) (async)
ioctl$EVIOCRMFF(r5, 0x40085503, &(0x7f0000000100)=0xb)

6.507793758s ago: executing program 0 (id=1303):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x8, 0x3, 0xca0, 0xfffa}, 0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c)
sendto$inet6(r0, &(0x7f0000000280)='0', 0x1, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback={0x201}, 0x4}, 0x1c)

6.427135976s ago: executing program 0 (id=1305):
r0 = socket(0x10, 0x80002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r6 = getuid()
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, <r8=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x2c, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="00101e5738ebf7"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="88"]}]}, 0x2c}], 0x1}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001100)={'ip6tnl0\x00', &(0x7f0000001080)={'ip6tnl0\x00', <r9=>0x0, 0x2f, 0x2f, 0xa2, 0x9, 0x34, @private1, @remote, 0x20, 0x10, 0x3}})
stat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000002b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002ac0)={&(0x7f00000025c0)=@report={0x4f4, 0x20, 0x400, 0x70bd29, 0x25dfdbfc, {0x2b, {@in=@empty, @in6=@private1, 0x4e23, 0x5, 0x4e23, 0x5, 0x2, 0x20, 0x0, 0x2b, r5, r6}}, [@encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e22, @in6=@remote}}, @sa={0xe4, 0x6, {{@in=@remote, @in=@local, 0x4e22, 0x0, 0x4e21, 0x4, 0xa, 0xa0, 0x80, 0x67, 0x0, r8}, {@in=@multicast2, 0x4d2, 0xff}, @in=@multicast2, {0x4, 0x7, 0x4, 0x8b, 0x2, 0x81, 0xce, 0x8}, {0x2, 0xffff, 0x9, 0x9}, {0x1, 0x5, 0x2}, 0x70bd27, 0x3502, 0x2, 0x2, 0xe5, 0x1}}, @algo_comp={0xd1, 0x3, {{'deflate\x00'}, 0x448, "8bd61391fa6d05112bb0a11b731f64ec2d3608d9b372e43e1710f6c62e92d0331b300b7877c657aa398e9c7a5e4f240c35135dae318e4b3029bd9b93d5fb66799374c65a073a399a552c7fede87054e77006aacd1e19d482ae2fe4144ec78350034a5fa46b1983ef1d63e2ad286dc15758698282d3ecb7a53b1961f9e54ce5d5c5b48610bdf11a7ddb"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffffff1}, @sa={0xe4, 0x6, {{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e20, 0x0, 0x4e21, 0x3, 0x2, 0x20, 0x20, 0x88, 0x0, 0xee01}, {@in6=@mcast1, 0xd, 0xe}, @in=@empty, {0x2, 0x6, 0x7, 0x3, 0x72, 0x2, 0x6, 0x8}, {0x3, 0xcd08, 0xd, 0x2}, {0x5, 0xf, 0xff}, 0x40, 0x3505, 0x2, 0x0, 0x3}}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa, 0x2, 0x40}}, @mark={0xc, 0x15, {0x35075b, 0x1}}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x4e24, 0x8, 0x4e22, 0xd, 0x8, 0x80, 0x0, 0x4, r9, r10}, {0x0, 0x1, 0x294, 0xe1, 0x2, 0x6, 0xfffffffffffffff9, 0x6}, {0x5, 0x8, 0xfffffffffffff3a3, 0x7244}, 0xfe, 0x6e6bb0}}, @lastused={0xc, 0xf, 0x7}, @algo_aead={0xfc, 0x12, {{'authencesn(sha224-arm64,lrw-serpent-sse2)\x00'}, 0x580, 0x200, "9558df3f716df6953c5bc9dc0f9b7cc4d723bc29c0ea8272f42a3126d7c80e19c19d20c879ad6c3a99c784f2c7e74c327d08cf61d22642c5b1ecfbf3198529c197a3df54bdf2e9479fe2f60f52c6278ca8790fcee2131e3b4cddc3b6b9a5502a58fd99691d1ac1d1d6401e34afecaed1d3cdc5f2776bec13d6780a7f112279a46cce839ad6a7aaa097a6ffd5d395072fb4658f215a7362137397370481d072450f43ff76013d896eb6e904cd25ab2c7e"}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x40080}, 0x24000014)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

5.894277923s ago: executing program 3 (id=1306):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x3)
socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c)
writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
syz_open_dev$sg(0x0, 0x0, 0x40100)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000680)=""/15, 0x45}], 0x1, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendto$inet(r3, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.431712586s ago: executing program 0 (id=1307):
r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1ad3c1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003f01f00810d00007f000000018fc11b4f1224df1b65a6181ecef5a6491b121e96173dc96c306408bd09752cbe1eb1207b00000000b90d6804000000000000"], 0x48)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001383b8c100120043aab0f0102030109021b00010304508b0904"], 0x0)
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
gettid()
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
clock_gettime(0x0, &(0x7f0000000500)={<r6=>0x0, <r7=>0x0})
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_fd={0x2, 0x1, 0x4, 0x400, 0x7, {r6, r7/1000+10000}, {0x3, 0x8, 0xea, 0x8, 0x9, 0x4, "ac1d1482"}, 0x3ff, 0x4, {&(0x7f0000000700)=[{0x7, 0x7, {}, 0x14d}, {0x6, 0xffffffff, {}, 0x4}]}, 0x7})
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
epoll_create1(0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0)
syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1, 0x381}, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x8000)
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000600), 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

5.288836911s ago: executing program 1 (id=1308):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$kcm(0x10, 0x3, 0x10)
unshare(0x28000600)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x4000)
r4 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=<r5=>0xffffffffffffffff)
mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3000009)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000)
recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000f14010029bd7000fddbdf250c004500695bda907983270300000000000000707400"], 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'dummy0\x00', <r7=>0x0})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r8, 0xc018620b, &(0x7f0000000080)={0x3})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4094)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg2\x00'})

5.141071784s ago: executing program 1 (id=1309):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
syz_usb_connect(0x5, 0x41, &(0x7f0000002000)=ANY=[@ANYBLOB="12010002a2402708ec188831568a0102030109022f00010408100609045605000e01004e07240600002cb705240002000d240f01f484e554040001001e04240200"], 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)

4.647486014s ago: executing program 4 (id=1310):
symlink(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
stat(&(0x7f0000004ec0)='./file0/file3\x00', 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
accept(r0, 0x0, &(0x7f0000000000))

4.543394146s ago: executing program 4 (id=1311):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r2=>0x0, 0x3f573b4915fe1082, 0x1, 0x1a282d42, 0x3e, {{0x1d, 0x4, 0x2, 0x0, 0x74, 0x66, 0x0, 0xff, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, {[@lsrr={0x83, 0x7, 0xae, [@private=0xa010101]}, @lsrr={0x83, 0x23, 0x36, [@private=0xa010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @private=0xa010102, @local, @loopback]}, @timestamp={0x44, 0x1c, 0x8, 0x0, 0x6, [0xe, 0x6, 0x1391, 0xc5d, 0x1, 0x400]}, @noop, @rr={0x7, 0xb, 0xd3, [@multicast1, @remote]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0xd4, 0x0, 0x7}]}}}}})
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@private0, 0x4e23, 0x4, 0x4e23, 0x0, 0xa, 0x60, 0x80, 0x3b, r2, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x41, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe, 0x0, 0x3}, 0x7, 0x40000000, 0x0, 0x0, 0x2, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xe0ffff}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x0, 0x8})
r6 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb240580403500000000000010902"], 0x0)
ioprio_get$pid(0x2, r6)
syz_usb_connect$printer(0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x700, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x3c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "1e2f8fd0453d1cee50ace353a2f54e4b"}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80080a4}, 0x20000000)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e99905000000ffffff80fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

3.786045864s ago: executing program 1 (id=1312):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2000, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970007483c00fe8000000000050000000000000000aaff020000000000000000000000000001"], 0xffe)

3.463673725s ago: executing program 1 (id=1313):
r0 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2002010, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c6772c4d5b7b36a2520a4b2248ec3b190dd", @ANYRESDEC=0xee00, @ANYBLOB=',default_permissions,obj_role=/dev/bus/usb/00#/00#\x00,\x00'], 0x1, 0x0, &(0x7f0000000680)="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")
umount2(&(0x7f00000016c0)='./file0\x00', 0xb)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000001680)={0x1, 0x3})
r1 = syz_io_uring_setup(0xfba, &(0x7f0000000400)={0x0, 0x4f28, 0x100, 0x0, 0x27a}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x2, 0x44, 0x48, 0xcf, 0x7, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0x2}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x80, 0xf, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000001940)={0x24, 0x0, &(0x7f0000001800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r5, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x40, 0x17, 0x1f, "7098615c0db74dfa1a70c0a831e8ed9fb7ba234253177f2b4746848aab9b96"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000003e40)={0x2c, &(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYRESDEC=r3, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {}, {0x4}, {0x80000000}]}})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xffffffff], 'syzkaller0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x0, 0x3, 0x1}, 0x0, 0x148, 0x188, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bond\x00', {}, 'macvlan1\x00', {}, 0xb, 0x6}}, @common=@unspec=@statistic={{0x38}, {0x8001, 0x0, 0x6, 0x9, 0xffff58d7, {0x2}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "acb1f84fe0cc4798499dd011ced9bb1f00000000000000008c00"}}, {{@ipv6={@mcast1, @mcast2, [0xff, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff], 'gretap0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x87, 0x7, 0x1, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0xfff8, 0x1, 0x5, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3c8)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x48, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}})
io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)
r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1465, 0x14103)
r11 = syz_open_dev$sg(&(0x7f0000000180), 0x7, 0x400000)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f00000001c0)={r11}, 0x1)
flock(0xffffffffffffffff, 0x37b8297d3fbaacb3)
ioctl$USBDEVFS_GET_CAPABILITIES(r10, 0x8004551a, &(0x7f0000000200))
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, &(0x7f00000003c0)={0x14, &(0x7f0000000140)={0x20, 0x7, 0x30, {0x30, 0x23, "8bfa4edac74a17b5ebd180e116ed207984c0ddb9e1d5f1843da48d29d6f57a3040bac15f86d6116c45dfb9dbe1d8"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001dc0)={0x44, &(0x7f0000000540)={0x40, 0x12, 0x8e, "68f2f421bcccdabfbba91693311c1c04631f4308ef75f8ad75fc01f4ac2b67f612e37c203d02bc4eb4439461e650a9b7334a6c66e29e2f09d7bdcc41c4508b5fba4fe1ffd223c6979dc3425a5a346c680f741dc169fde974808ff883e7ea695117f00dabf16153800fdec259d31b64b25399c592fda1a7a5e748821e2a1b251126c6bbe84b0ca8d6161af3c47fda"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000001c80)={0x20, 0x80, 0x1c, {0x3, 0xfff8, 0x9, 0x4, 0x0, 0x800, 0x1, 0x7, 0xc, 0x2, 0x2, 0xff80}}, &(0x7f0000001cc0)={0x20, 0x85, 0x4}, &(0x7f0000001d00)={0x20, 0x83, 0x2}, &(0x7f0000001d40)={0x20, 0x87, 0x2, 0x620b}, &(0x7f0000001d80)={0x20, 0x89, 0x2, 0x1}})
r12 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r12, 0x40045532, &(0x7f0000000100))
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
mq_unlink(&(0x7f0000001700)='\x7f+\x04\x94NjN|\xe6\xa5\xe32\xde\xbb\x1a\xff\xa8\xdeJ\xd4gy\nZeW\x83\xf80\xfa\xb6\x83sP\x00\x00\x00\x00\f\x001\xa8\x92\ne\xfd\x89\x88J\x9b\xedpq\xf2\xb4\x84\xc8\x03\xf7\x04sawo\x8b\xb3J\xaa\x850.W\xd3\xe2\xf5\xf1\xf8\xc2~V\\\xe9\xa8[\x9f\x8d\x03\x00\xa3\xe5*\xd1\xf2\xb8\'R\xaaV>-\x01\xc9\x1d75\xba\x03r\x06\x82\x13\v\xc9Z\xe3\xedL\x05\xf8\x8b\x10\x06\xc8\v1DW\xc7n\x1f\xe1\xb4\xd0\x03\x00\x00\x00\x00\x00\x00\x00\xb8\v\xdc5d5\x95\x99N^\x8f\xd2\xf4b~c\x0f\xbe,\f\xa9\x06\x92L\xe1w\"\xd9\xa0^|n\v\xdf\x05\x00\x00\x00\x00\x00\x00\x00D-\x8d\x7fs\xdcq\xe5\xc7\xbeqR\x8e\xb2o\xf8\x15\xbd\xdcK\x8d\b\b}\x1c\x9e\x95f\xf1\xc1\xff\xe3\xac\xfe0\x1a\xcd\xfc\b}\x96p\xb8C\xa9\xda\xfc\xf9\x84\xff5\xc0B\b\xe5\x03<\xc4nc\xc9\xe6\xaa\r\x8b\xca\x1f\x82\xa0\xdd`t\xbe\x91\xea:\xec\xdd\xed[\x9d\xa1\xff\x8f\x85b\xa3\xbb\xa6\xc4\xbb\x92\xc0\xa3\xe1\xed@\xd6a\x05\xb9\x13_\x84\x0e\xe1,j\xce\xae\xcf\xa4E\xe4a\xf3w\xe7\xf5dG\x8d\x15I\xfc\xdak\xb0c!\x1a\t$\x8a\xbe\x14\x0eK\xa2\x94 :\xa6\xd6\xc017uZ\xba\x0f+\xc4X,~\x8fW\x84\xe0T\xfdF\x05Q\f\xf0\t\x9a\xa4\x1e`\x9d\bv\xc3T\xe8`\t\xa0\x93]J\xe0j2\x93I\xad\x1d\x00\xb1\xe5\x17\xb8\xc3%P\x89I\x84M(\x8d\xe3\x01O\xd9{\xd3Q\xf6J=\x89d\x17hQS\xe0\xe5,\xb8\xed\x93z!\x04\x00y\xb2\x98\xb8\a#\x84\xef\xf9\xe8\x95\xe0\xf0.Oz\x17\xdf4\x81\xc7\x06\xdf\xdcK6\xba#%\tx\x12I\xe2Skv\xe2\x14\xddg\xacL\r\xa1\xb3\xb2D\xef/@\x16\xf0\x19>/\x11\xd5\xd7\xfb\x84L\x10\xde\x1ad\xa5}\x9e\xdd\xeb\xe0,M\x92g\xb6\x9a\xee\x16\xf5\x15\xd0=H\x11\x87D\xb0\xb2G<\xb3\xf4#\x7f\xabM\x80`\xa1h\xff\x19\xae@\xfb$\xaa+^\xf0\rq)\xf1A\xf2\xa70#G\xcd;\xd5#\xcc\xe3qCA\x96\xa7 8\xff\xff\xff\xffl\xae\xb6\xceX\x9e\xa5\x1eQ$\xc4B\xf5\xbbo3\x92\xd9\xe3\xe7\xbc\xd5\x94\x81\xd2\xf0\xe7\xb2\xfd\xd8\xe2\xa0\x9dskBj\xb2\x95\xffz\xad~aJH\x0e\xa7%y\xda\xdf(u;\xe5\b\xd4\xf7\xb3\x9c\xdc\xbf\xc5\xe7\xb6(\xe6\xbe\r}\x05\x0f@{\xf8\x92=\xcc)h\xee\xca\xf6C\xdb\x9fM\xc7~hku\xe8/O\x8c~\xa2}&\x01\x00\x00\x00\x96\xa8`\xac}\x00\x00i\xfc\xaef\x9e\v\xfc\x0fpL{\x88;#,eJ\xb75\"\xca\x8e\x11)\xe6K\xe5\x80\xb8p5\xe2C\xce\xc4\xab\x99\xadNk\x8d`\xd8\x81>GWYh\xe9,\xb2hc\xf8\xb0\xd4\x94+LMVU\xbb\x05\x85\x00fz$cCl\xb5\x03GE~B\xfa\xa0\xc6\xa1\x02qq9\xc3A\xf9\x85\xe3\x8c\xe9\v\xbaq\x16\x90\xf8\xe9\nS\x1e[*`m\xa3:d\f\n\xe3m\x83\xa0\xb0\x18\x1b\xbe\x04\xf9\x12\xf9\xc2\x9e\xfal\xf7\x1b\xce\xda\x15q\xf7\xb8-^\xff\xc6\x82\xb7\x89\xc85\x01T\xe9\\\'\t?xmw\x84\x0e(\x8ahw:A\x9b\xfa\x0e-\x14\xc3\xd9\xc0\xc6\xd2\x85\xf6\x1eH\xab\x19\xfd z^\xc3\x98Y,\x153\x8f=0\xae\xce>\fh\x0fR\x005o\x82\xc7\x01\xa1Mz_)\x97\x05\xa4o\xa8(\xfbY\xdf\\\xa6\xd9!\xeaj\xa4\"\x8d\x87!A\f}\v5[\x98N\x9e\xb9+\x17\xeeH\xbeE\xb8p\xa1\x8c\x0e*fhhp\xbe\xcd\x00R#9\xc0\xa3\xe2g.]l\xc5i#|\x1f\xf6\xc2\xe7+D\xfa\xce\xcc.\xc9\xd8\x9a\xed\x87R}\x12\x14\xe3\xf1s\xebNU\x85_\\4k\x8cK~\xd0\xc4\x93\x85s\xb4\xb3\xcfkb1E\xdeK\\xi\xa7\xe4\xe9\x96\x8e)\xa5B\x1fmV)\x13m\xf6\xe5\xed\xcb*Y41\xea\v\xa5\xb7\xf6\xeb\xdcc;m\xd7:\x86\x80o\x14\xec\xa47\x8f\xa9H\xd5(\xdd\x03\xa2\x15)\xca%A/\xde6,\nTD\xd3\x10A\x90]\xf8O\x18\x85\x13\xe9[\x8e\"\xa8c\x18\xa5;I0Q')

2.632597629s ago: executing program 4 (id=1315):
poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x2432}], 0x200000000000001f, 0x7)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4)
keyctl$set_reqkey_keyring(0xe, 0x5)
socket(0x10, 0x3, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x200000000000011, 0x3, 0x7)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000d00)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10)
connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10)
connect$vsock_stream(r3, 0x0, 0x0)
connect$vsock_stream(r3, &(0x7f0000000240)={0x28, 0x0, 0x0, @host}, 0x10)
bind$inet6(r2, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x0)
socket$packet(0x11, 0x0, 0x300)

2.065182959s ago: executing program 4 (id=1317):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
chown(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil)
syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
write$FUSE_LSEEK(r0, &(0x7f0000004340)={0x18, 0x0, 0x0, {0x200}}, 0x18)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x1b, &(0x7f0000001a40)=[{&(0x7f00000003c0)="00ca996e8c7b9875d30f3a183f6d8ea75d4356583d1544e1b1c70c8ca4b162de63e1c699b05994e91c00da2131a474452a817ba5319b41ae5b49ac662b920d0afe7d1a448025942d39b81b80d2a16fa1a42d57f3ce238a22e06b6a1fd47e48e2d9ac0a396fdf115035187dbbf81274c88cea5e69861cd585631a68586c4d6c925df0db7b24ec1b2aa93a9306357cb734757820d88c251e41127cf448aac1d5b864f276c699cd55240dcbff89ce75e4c7b3aa73b51130baf8f552856ddd64b11f10d99cb2ac8d76c0f6dceebc713f8674ef3920c6d4c4f9", 0x1}, {&(0x7f0000000a40)="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"}], 0x1, &(0x7f0000000100)=ANY=[], 0x18, 0xd0}, 0xc020)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x90020, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000191c0), 0x0, &(0x7f0000019200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030ff0f303030303030303030303134303004302c757365725f69644e", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d1d0a8d05bcc8192393e87752fea152470b0d60682f244c50373c6e1d891eb87cf228b45ff8060ac6b08de5e1797cd85f5080dd3b45cec54376905c1bdede871613e56c8d6cc58996581bc498aa41a313d4bfc5d79bbc93a768d279e14ca430d03b390fd1633359088c509b033b959730d3091da90c5c98da38152328b5e887f6a0a5fbf130f8421521b66fc73f1f6d664cf2f870bd35fc887fa44dd822b092cebdd18dd13e272b7eda4423607b64d4426e549975aed6d5bc5c1e95a846be1e", @ANYRESDEC=r3, @ANYBLOB="1100e2a2fc51bc4b5ac19e6f785f5e438d4e6b6d7710e78e9ee1bce3bca171c632ab61bbe53bc4e70a8961dcb4e573b36ae94aa26b98be46ad54277bab11f9783b768d04c9"])
socket$kcm(0x21, 0x2, 0xa)

1.411028128s ago: executing program 0 (id=1318):
r0 = socket$kcm(0x10, 0x2, 0x10) (async)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$sndseq(r2, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x7, @tick=0x1fffffc, {0x0, 0x1}, {0x0, 0x2}, @raw32={[0xfffffffc]}}, {0x5, 0x0, 0x0, 0x0, @time={0x6, 0x6}, {}, {}, @addr={0x81}}], 0x38) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

1.196797893s ago: executing program 3 (id=1319):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$kcm(0x10, 0x3, 0x10)
unshare(0x28000600)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x4000)
r4 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=<r5=>0xffffffffffffffff)
mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3000009)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000)
recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000f14010029bd7000fddbdf250c004500695bda907983270300000000000000707400"], 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'dummy0\x00', <r7=>0x0})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r8, 0xc018620b, &(0x7f0000000080)={0x3})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4094)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg2\x00'})

1.140783233s ago: executing program 2 (id=1320):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x375, 0x4)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/77, 0x4d}], 0x1}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x2030, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) (async)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r5, 0xb, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xbe898d5, 0x69}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4048040}, 0x10)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140))

1.022252495s ago: executing program 0 (id=1321):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
r0 = syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0, 0x0)
io_setup(0x58, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00')
pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, 0x0, r1}, 0x68)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0xd}, 0x94)
bind$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x3401, 0x1f480, 0xfd, 0x399, 0x0, r0})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c)
io_uring_enter(r7, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)

892.361865ms ago: executing program 0 (id=1322):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac06}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ce617ebf1b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000005}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0)
r7 = socket(0x1d, 0x80802, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a1000000002ff000000000008000400", @ANYRES32=r10, @ANYBLOB="060015000800000010001680"], 0x3c}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf0, r6, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r12 = socket$xdp(0x2c, 0x3, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
io_setup(0x1, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r14 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r14)
keyctl$read(0xb, r14, &(0x7f0000000080)=""/91, 0x5b)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0xb4, 0x25, 0x1, 0x70bd0b, 0x25dfdbfb, {0xc}, [@nested={0xa0, 0xe, 0x0, 0x1, [@nested={0x9c, 0x30, 0x0, 0x1, [@typed={0x4, 0xfb}, @typed={0x14, 0x157, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="12c1e10b5b45426ef2119446ccffb27addddb1acda4e61df321b94a59915e0cd0cca2d42458217da56d755e0f8ff3aa21668bb90118adf2af7deb83c8fe64f9d052207d2f210923071c0772c64a0cdd2f4efd475b763df1616f76f1d349f85ec943ae87b39c9d885927f02bf", @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private1}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000d}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x20004820)
r15 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r15, 0x707, &(0x7f0000000380)={&(0x7f0000001880)=[{0x7, 0x8000, 0x0, 0x0}, {0x1, 0x1, 0x0, 0x0}], 0x2})
setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x20)

871.771287ms ago: executing program 3 (id=1323):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0xffffffffffffffdf, 0x1000000000000, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x76)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000})
r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedreceive(r2, &(0x7f00000001c0)=""/116, 0x74, 0x0, &(0x7f0000000180)={0x77359400})
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)

759.645549ms ago: executing program 2 (id=1324):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000140)={0xed, 0x0, 0x3})
r2 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x101, 0x115800)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000040))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) (async)
r3 = msgget$private(0x0, 0x3ac)
msgsnd(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="0200"], 0x1fa, 0x800) (async)
msgrcv(r3, 0x0, 0x0, 0x1, 0x7800) (async, rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$evdev(0x0, 0x4, 0x60202) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x200000, 0x0, 0x1, 0x1, 0x0, 0x7}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x0, 0x96, 0xfff}, 0x20) (async)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000e40)=@allocspi={0x12c, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e30, 0x3, 0xa, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d2, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@address_filter={0x28, 0x1a, {@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x3, 0x2e}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x10}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x880}, 0x48000)
socket$inet6(0xa, 0x800, 0xd)
socket(0x400000000010, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async)
r9 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r10, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

484.987978ms ago: executing program 2 (id=1325):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setns(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x80003, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x1, 0x2, 0x1, 0x7}}, 0xe8)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="17d4", @ANYRES16=r5, @ANYBLOB="08002dbd7000fddbdf250e000000080006000000008014000280080004000100000006000b000a00000004000180380001800600020021000000060001000a000000080008000700000014000300ac1e010100000000000000000000000007000600646800000c00018008000800060000000c0003800800010001000000"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x8881)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x10)

451.198681ms ago: executing program 3 (id=1326):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x6, 0x0, 0x0, 0xc, 0x759d, 0x8, 0x9, 0x5}, 0x0)
r3 = userfaultfd(0x1)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080))
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, 0x0, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

341.327025ms ago: executing program 2 (id=1327):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) (async, rerun: 64)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) (rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x178, 0x24, 0x5820a61ca228651, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x2, 0x2, 0x9, 0x0, 0xe, 0x9}}, {0x4}}, {{0x1c, 0x1, {0xf2, 0xa, 0x3a3, 0x2, 0x0, 0x1ff, 0x3ff, 0x5}}, {0xe, 0x2, [0x20a, 0x22d, 0x7f, 0x6, 0x6]}}, {{0x1c, 0x1, {0x40, 0xff, 0x8, 0x4, 0x2, 0x1, 0x3, 0x3}}, {0xa, 0x2, [0x299a, 0xf7, 0x2000]}}, {{0x1c, 0x1, {0xc, 0x4, 0x100, 0x200, 0x2, 0x8, 0x2, 0x3}}, {0xa, 0x2, [0x0, 0x8, 0x1]}}, {{0x1c, 0x1, {0x5, 0x4, 0x6, 0x6, 0x0, 0x1, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xd, 0x5, 0x1ff, 0x1, 0x37f67251, 0x3fe000, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x9, 0x4, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3}}, {0xa, 0x2, [0x1, 0x8, 0x7]}}, {{0x1c, 0x1, {0x0, 0x7, 0xff, 0x2, 0x0, 0x81, 0x8}}, {0x4}}, {{0x1c, 0x1, {0xff, 0x7, 0xfff7, 0x0, 0x1, 0x135a, 0xe635}}, {0x4}}]}]}, 0x178}}, 0x8891) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ffffffff000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002"], 0x23c}}, 0x0)

79.768996ms ago: executing program 2 (id=1328):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x0, 0xa7e, 0x10002b}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x40000c, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'veth1_to_hsr\x00', {}, 0x9})

0s ago: executing program 2 (id=1329):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100010000001900690000001833e107010000000000000c000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

_skb+0x1d0/0x7d0
[  275.190134][ T9253]  __alloc_skb+0x1d0/0x7d0
[  275.190164][ T9253]  tipc_msg_build+0x162/0xf00
[  275.190194][ T9253]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  275.190220][ T9253]  ? __pfx_tipc_msg_build+0x10/0x10
[  275.190248][ T9253]  ? tipc_sk_filtering+0x13c/0x510
[  275.190278][ T9253]  __tipc_sendstream+0x8a8/0x1280
[  275.190330][ T9253]  ? __pfx___tipc_sendstream+0x10/0x10
[  275.190350][ T9253]  ? __pfx_woken_wake_function+0x10/0x10
[  275.190378][ T9253]  ? tipc_sendstream+0x47/0x70
[  275.190406][ T9253]  ? __local_bh_enable_ip+0xd0/0x130
[  275.190430][ T9253]  tipc_sendstream+0x55/0x70
[  275.190454][ T9253]  ? __pfx_tipc_sendstream+0x10/0x10
[  275.190478][ T9253]  sock_write_iter+0x49b/0x4f0
[  275.190503][ T9253]  ? __pfx_sock_write_iter+0x10/0x10
[  275.190534][ T9253]  ? bpf_lsm_file_permission+0x9/0x20
[  275.190561][ T9253]  ? security_file_permission+0x75/0x260
[  275.190594][ T9253]  vfs_write+0x61d/0xb90
[  275.190628][ T9253]  ? __pfx_vfs_write+0x10/0x10
[  275.190660][ T9253]  ? __fget_files+0x2a/0x420
[  275.190692][ T9253]  ksys_write+0x150/0x270
[  275.190720][ T9253]  ? __pfx_ksys_write+0x10/0x10
[  275.190754][ T9253]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.190788][ T9253]  do_syscall_64+0x174/0x580
[  275.190806][ T9253]  ? trace_irq_disable+0x3b/0x140
[  275.190842][ T9253]  ? clear_bhb_loop+0x40/0x90
[  275.190864][ T9253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.190883][ T9253] RIP: 0033:0x7f9ff199ce59
[  275.190902][ T9253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.190917][ T9253] RSP: 002b:00007f9ff2809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  275.190939][ T9253] RAX: ffffffffffffffda RBX: 00007f9ff1c15fa0 RCX: 00007f9ff199ce59
[  275.190952][ T9253] RDX: 000000002000011a RSI: 0000200000000340 RDI: 0000000000000006
[  275.190964][ T9253] RBP: 00007f9ff2809090 R08: 0000000000000000 R09: 0000000000000000
[  275.190975][ T9253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  275.190986][ T9253] R13: 00007f9ff1c16038 R14: 00007f9ff1c15fa0 R15: 00007f9ff1d3fa48
[  275.191016][ T9253]  </TASK>
[  275.348298][  T807] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  275.440125][ T5721] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  275.508916][ T5721] usb 2-1: device descriptor read/8, error -71
[  275.612307][  T807] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  275.618722][ T5721] usb usb2-port1: unable to enumerate USB device
[  275.625748][  T807] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23
[  275.644239][  T807] usb 5-1: config 1 interface 0 has no altsetting 0
[  275.652429][  T807] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  275.662287][  T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  275.670515][  T807] usb 5-1: SerialNumber: syz
[  275.683907][  T807] hub 5-1:1.0: bad descriptor, ignoring hub
[  275.690287][  T807] hub 5-1:1.0: probe with driver hub failed with error -5
[  275.698280][  T807] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  275.782093][ T5721] usb 1-1: USB disconnect, device number 52
[  275.868372][ T5705] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  275.913168][  T807] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  275.949213][  T807] usb 5-1: USB disconnect, device number 53
[  276.021056][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.031794][ T5705] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  276.041426][ T5705] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  276.051155][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.062889][ T5705] usb 4-1: config 0 descriptor??
[  276.072588][ T5705] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  276.080092][ T5705] dvb-usb: bulk message failed: -22 (3/0)
[  276.090737][ T5705] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  276.100668][ T5705] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  276.108471][ T5705] usb 4-1: media controller created
[  276.116480][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  276.159250][ T5705] dvb-usb: bulk message failed: -22 (6/0)
[  276.167579][ T5705] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  276.191899][ T5705] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29
[  276.221159][ T5705] dvb-usb: schedule remote query interval to 150 msecs.
[  276.221185][ T5705] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  276.269505][   T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  276.276703][   T10] ath9k_htc: Failed to initialize the device
[  276.279079][ T9257] dvb-usb: bulk message failed: -22 (2/0)
[  276.292298][ T5721] usb 1-1: ath9k_htc: USB layer deinitialized
[  276.323493][ T5713] usb 4-1: USB disconnect, device number 63
[  276.452997][ T5713] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  276.809004][   T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  276.959278][ T9278] netlink: 56 bytes leftover after parsing attributes in process `syz.3.981'.
[  276.975498][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'.
[  276.988196][   T10] usb 1-1: Using ep0 maxpacket: 8
[  276.996705][ T9278] Cannot find add_set index 0 as target
[  277.004313][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.014697][   T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  277.030450][   T10] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  277.054034][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.076857][   T10] usb 1-1: Product: syz
[  277.098322][ T5721] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  277.098914][   T10] usb 1-1: Manufacturer: syz
[  277.134681][   T10] usb 1-1: SerialNumber: syz
[  277.258788][ T5721] usb 2-1: Using ep0 maxpacket: 32
[  277.269606][ T5721] usb 2-1: unable to get BOS descriptor or descriptor too short
[  277.298440][ T5721] usb 2-1: config 1 has an invalid interface number: 1 but max is 0
[  277.312599][ T5721] usb 2-1: config 1 has an invalid interface number: 1 but max is 0
[  277.323634][ T5721] usb 2-1: config 1 has an invalid interface number: 2 but max is 0
[  277.333449][ T5721] usb 2-1: config 1 has an invalid interface number: 2 but max is 0
[  277.344443][ T5721] usb 2-1: config 1 has an invalid descriptor of length 187, skipping remainder of the config
[  277.362330][ T5721] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 1
[  277.372631][ T5721] usb 2-1: too many endpoints for config 1 interface 2 altsetting 1: 185, using maximum allowed: 30
[  277.384297][ T5721] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 185
[  277.402953][ T5721] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  277.412215][   T10] usb 1-1: unit 5 not found!
[  277.412247][   T10] usb 1-1: unit 16 not found!
[  277.425640][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.438369][ T5721] usb 2-1: Product: syz
[  277.445630][ T5721] usb 2-1: Manufacturer: syz
[  277.452981][ T5721] usb 2-1: SerialNumber: syz
[  277.501957][ T9290] netlink: 64 bytes leftover after parsing attributes in process `syz.2.985'.
[  277.547504][   T10] usb 1-1: USB disconnect, device number 53
[  277.582266][ T9292] syzkaller1: entered promiscuous mode
[  277.593531][ T9292] syzkaller1: entered allmulticast mode
[  277.680277][ T5721] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  277.695930][ T5721] usb 2-1: unit 37 not found!
[  277.702435][ T5721] usb 2-1: unit 0 not found!
[  277.789032][ T5721] usb 2-1: USB disconnect, device number 69
[  277.813573][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'.
[  277.896874][ T5648] udevd[5648]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  278.120479][   T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  278.288193][   T10] usb 4-1: Using ep0 maxpacket: 16
[  278.309926][   T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  278.320497][ T9312] netlink: 56 bytes leftover after parsing attributes in process `syz.4.993'.
[  278.335661][   T10] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  278.345303][   T10] usb 4-1: Product: syz
[  278.351412][   T10] usb 4-1: Manufacturer: syz
[  278.360594][   T10] usb 4-1: SerialNumber: syz
[  278.385760][   T10] usb 4-1: config 0 descriptor??
[  278.444869][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.993'.
[  278.538894][ T9312] SET target dimension over the limit!
[  278.587022][ T9319] tipc: Started in network mode
[  278.604959][   T10] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  278.621247][ T9319] tipc: Node identity 4, cluster identity 4711
[  278.646257][ T9319] tipc: Node number set to 4
[  278.816123][   T10] peak_usb 4-1:0.0 can0: sending command failure: -22
[  278.829356][   T10] peak_usb 4-1:0.0 can0: sending command failure: -22
[  278.867093][   T10] peak_usb 4-1:0.0 can0: sending command failure: -22
[  278.868475][ T5705] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  278.910989][ T5761] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  279.032457][ T5705] usb 3-1: Using ep0 maxpacket: 16
[  279.059601][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  279.094551][ T5705] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  279.104644][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.105906][ T5761] usb 2-1: Using ep0 maxpacket: 32
[  279.129055][   T10] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22
[  279.133661][ T5705] usb 3-1: Product: syz
[  279.146141][ T5761] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  279.170545][   T10] usb 4-1: USB disconnect, device number 64
[  279.185928][ T5705] usb 3-1: Manufacturer: syz
[  279.187591][ T5761] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  279.222732][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.242918][ T5761] usb 2-1: Product: syz
[  279.247645][ T5761] usb 2-1: Manufacturer: syz
[  279.252963][ T5705] usb 3-1: SerialNumber: syz
[  279.269682][ T5761] usb 2-1: SerialNumber: syz
[  279.289899][ T5705] usb 3-1: config 0 descriptor??
[  279.298950][ T5761] usb 2-1: config 0 descriptor??
[  279.311242][ T9334] netlink: 'syz.4.1000': attribute type 1 has an invalid length.
[  279.335885][ T5705] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  279.353937][ T9334] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1000'.
[  279.367399][ T5761] usb 2-1: No union descriptors
[  279.375451][ T5705] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  279.375458][ T5761] usb 2-1: unsupported MDLM descriptors
[  279.658410][ T5721] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  279.818656][ T5721] usb 1-1: Using ep0 maxpacket: 32
[  279.833374][ T5721] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  279.862756][ T5721] usb 1-1: config 0 interface 0 has no altsetting 0
[  279.880888][ T5721] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  279.883509][ T5761] usb 5-1: new low-speed USB device number 54 using dummy_hcd
[  279.904906][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.948682][ T5705] em28xx 3-1:0.0: chip ID is em2874
[  279.957144][ T5721] usb 1-1: config 0 descriptor??
[  280.075184][ T9345] loop5: detected capacity change from 0 to 7
[  280.104207][ T9345] Dev loop5: unable to read RDB block 7
[  280.121238][ T5761] usb 5-1: unable to get BOS descriptor or descriptor too short
[  280.122853][ T9345]  loop5: unable to read partition table
[  280.140993][ T9345] loop5: partition table beyond EOD, 
[  280.141025][ T5761] usb 5-1: config 100 has an invalid interface number: 130 but max is 0
[  280.141057][ T5761] usb 5-1: config 100 has no interface number 0
[  280.167445][ T9345] truncated
[  280.170847][ T5761] usb 5-1: config 100 interface 130 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  280.170884][ T5761] usb 5-1: config 100 interface 130 altsetting 142 endpoint 0x83 has invalid maxpacket 64, setting to 8
[  280.170911][ T5761] usb 5-1: config 100 interface 130 has no altsetting 0
[  280.176428][ T5761] usb 5-1: string descriptor 0 read error: -22
[  280.221949][ T5761] usb 5-1: New USB device found, idVendor=1b3d, idProduct=9305, bcdDevice= 8.60
[  280.225557][ T9345] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  280.231589][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.245135][ T9338] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  280.258715][ T9338] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  280.264449][ T5705] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  280.287027][ T5761] ftdi_sio 5-1:100.130: FTDI USB Serial Device converter detected
[  280.301087][ T5705] em28xx 3-1:0.0: board has no eeprom
[  280.328381][ T5761] ftdi_sio ttyUSB0: unknown device type: 0x860
[  280.399577][ T5705] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  280.408758][ T5705] em28xx 3-1:0.0: dvb set to bulk mode.
[  280.421476][ T5721] hid_parser_main: 33 callbacks suppressed
[  280.421495][ T5721] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0
[  280.440889][ T5713] em28xx 3-1:0.0: Binding DVB extension
[  280.458407][ T5705] usb 3-1: USB disconnect, device number 76
[  280.464650][ T5721] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0
[  280.476008][ T5705] em28xx 3-1:0.0: Disconnecting em28xx
[  280.482484][ T5721] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0
[  280.501471][ T5721] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0
[  280.521074][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.553936][ T5721] corsair-psu 0003:1B1C:1C09.000E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0
[  280.555186][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.589782][ T5713] em28xx 3-1:0.0: Registering input extension
[  280.602843][ T5761] usb 5-1: USB disconnect, device number 54
[  280.617229][    C1] usb 1-1: input irq status -75 received
[  280.645429][ T5761] ftdi_sio 5-1:100.130: device disconnected
[  280.822460][ T9336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.845266][ T9336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.892172][ T9336] batadv_slave_1: entered promiscuous mode
[  280.922852][ T5713] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  280.931596][ T9350] loop8: detected capacity change from 0 to 8
[  280.942310][ T5713] Registered IR keymap rc-empty
[  280.951927][ T9350] Dev loop8: unable to read RDB block 8
[  280.965043][ T9350]  loop8: unable to read partition table
[  280.975114][ T5713] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  280.987147][ T9350] loop8: partition table beyond EOD, truncated
[  280.995395][ T9350] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  281.023622][ T5713] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33
[  281.129936][ T5713] em28xx 3-1:0.0: Input extension successfully initialized
[  281.155980][ T5705] em28xx 3-1:0.0: Closing input extension
[  281.182337][ T9336] batadv_slave_1: left promiscuous mode
[  281.232732][ T5721] corsair-psu 0003:1B1C:1C09.000E: unable to initialize device (-71)
[  281.283200][ T5721] corsair-psu 0003:1B1C:1C09.000E: probe with driver corsair-psu failed with error -71
[  281.409943][ T5721] usb 1-1: USB disconnect, device number 54
[  281.477321][ T9364] netlink: 'syz.4.1011': attribute type 6 has an invalid length.
[  281.534629][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'.
[  281.734517][ T5705] em28xx 3-1:0.0: Freeing device
[  281.809201][ T5721] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  281.855756][ T5692] usb 2-1: USB disconnect, device number 70
[  281.877106][ T9372] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5650] was attempted by "\x09   
                   Àÿ      Àÿ      Ðÿ      àÿ              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ"[9372]
[  281.935587][ T9374] fuse: Bad value for 'user_id'
[  281.956531][ T9374] fuse: Bad value for 'user_id'
[  281.992219][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.027461][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.063827][ T5721] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  282.112078][ T5721] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  282.141412][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.170637][ T5721] usb 1-1: config 0 descriptor??
[  282.202735][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.210685][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.583462][ T9380] loop5: detected capacity change from 0 to 7
[  282.606665][ T9372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.623187][ T9380] Dev loop5: unable to read RDB block 7
[  282.638018][ T9380]  loop5: unable to read partition table
[  282.654516][ T9380] loop5: partition table beyond EOD, truncated
[  282.655113][ T9372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.669631][ T9380] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  282.699052][ T5721] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  282.973670][ T5692] usb 1-1: USB disconnect, device number 55
[  283.165476][ T9372] batman_adv: batadv0: Interface deactivated: ipvlan2
[  283.462932][   T93] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.464742][ T9383] loop8: detected capacity change from 0 to 8
[  283.486561][   T93] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  283.532699][ T9383] Dev loop8: unable to read RDB block 8
[  283.541451][ T9383]  loop8: unable to read partition table
[  283.566149][   T93] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.570386][ T9383] loop8: partition table beyond EOD, truncated
[  283.607329][ T9383] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  283.614683][   T93] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  283.657097][   T93] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.695141][   T93] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  283.959131][ T9389] block device autoloading is deprecated and will be removed.
[  284.066948][ T9396] binder_alloc: 9395: pid 9395 spamming oneway? 1 buffers allocated for a total size of 4096
[  284.116722][ T9396] binder: 9395:9396 ioctl c0189378 200000000100 returned -22
[  284.409478][ T9402] veth1_to_hsr: entered promiscuous mode
[  284.415310][ T9402] veth1_to_hsr: entered allmulticast mode
[  284.538477][ T5705] usb 2-1: new full-speed USB device number 71 using dummy_hcd
[  284.608446][ T5692] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  284.714290][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  284.735967][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.760352][ T5705] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  284.785688][ T5705] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  284.800803][ T5692] usb 3-1: config 0 has an invalid interface number: 17 but max is 0
[  284.823256][ T5692] usb 3-1: config 0 has no interface number 0
[  284.823981][ T5705] usb 2-1: Manufacturer: syz
[  284.844198][ T5692] usb 3-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.876602][ T5692] usb 3-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.896332][ T5692] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  284.905680][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.917574][ T5705] usb 2-1: config 0 descriptor??
[  284.925133][ T5692] usb 3-1: config 0 descriptor??
[  284.999611][  T807] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  285.180881][  T807] usb 4-1: unable to get BOS descriptor or descriptor too short
[  285.199504][  T807] usb 4-1: config 63 has an invalid interface number: 66 but max is 0
[  285.226309][  T807] usb 4-1: config 63 contains an unexpected descriptor of type 0x2, skipping
[  285.264585][  T807] usb 4-1: config 63 has an invalid descriptor of length 9, skipping remainder of the config
[  285.321521][  T807] usb 4-1: config 63 has no interface number 0
[  285.357883][  T807] usb 4-1: config 63 interface 66 has no altsetting 0
[  285.379518][ T5692] uclogic 0003:5543:0522.0010: unknown main item tag 0x0
[  285.401867][  T807] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  285.440521][ T5705] cougar 0003:060B:700A.0011: unknown main item tag 0x0
[  285.456119][ T5692] uclogic 0003:5543:0522.0010: unknown main item tag 0x0
[  285.479377][  T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.504214][ T5705] cougar 0003:060B:700A.0011: unknown main item tag 0x0
[  285.509440][ T5692] uclogic 0003:5543:0522.0010: unknown main item tag 0x0
[  285.532562][  T807] usb 4-1: Product: syz
[  285.538672][ T5705] cougar 0003:060B:700A.0011: unknown main item tag 0x0
[  285.564957][ T5692] uclogic 0003:5543:0522.0010: unknown main item tag 0x0
[  285.576908][  T807] usb 4-1: Manufacturer: syz
[  285.602872][  T807] usb 4-1: SerialNumber: syz
[  285.603561][ T5705] cougar 0003:060B:700A.0011: unknown main item tag 0x0
[  285.618774][ T5692] uclogic 0003:5543:0522.0010: unknown main item tag 0x0
[  285.652513][ T5705] cougar 0003:060B:700A.0011: unknown main item tag 0x0
[  285.781001][ T5705] cougar 0003:060B:700A.0011: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  285.848849][ T5692] uclogic 0003:5543:0522.0010: hidraw1: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input17
[  285.915216][  T807] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[  285.918988][ T5705] usb 2-1: USB disconnect, device number 71
[  285.953128][ T9424] loop5: detected capacity change from 0 to 7
[  285.968541][  T807] uvcvideo 4-1:63.66: No valid video chain found.
[  285.982783][ T9424] Dev loop5: unable to read RDB block 7
[  286.008473][ T9424]  loop5: unable to read partition table
[  286.013358][  T807] usb 4-1: USB disconnect, device number 66
[  286.091888][ T9424] loop5: partition table beyond EOD, truncated
[  286.106556][ T5692] usb 3-1: USB disconnect, device number 77
[  286.180863][ T9424] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  286.320637][ T9425] fido_id[9425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  286.499522][  T807] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  286.539702][ T9426] fido_id[9426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  286.743415][  T807] usb 4-1: config 63 has an invalid interface number: 66 but max is 0
[  286.785432][  T807] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  286.855318][  T807] usb 4-1: config 63 has no interface number 0
[  286.882841][  T807] usb 4-1: config 63 interface 66 has no altsetting 0
[  286.908117][  T807] usb 4-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=e4.df
[  286.946963][  T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.058370][ T5705] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  287.210550][  T807] usb 4-1: string descriptor 0 read error: -71
[  287.230389][ T5705] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  287.257301][  T807] uvcvideo 4-1:63.66: Found UVC 0.07 device <unnamed> (0471:0307)
[  287.267264][  T807] uvcvideo 4-1:63.66: No valid video chain found.
[  287.275591][ T5705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.305156][  T807] usb 4-1: USB disconnect, device number 67
[  287.326953][ T5705] usb 3-1: config 0 has no interface number 0
[  287.355666][ T5705] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  287.396663][ T5705] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  287.424138][ T5705] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  287.461785][ T5705] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  287.479670][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.498294][ T5705] usb 3-1: Product: syz
[  287.506086][ T5705] usb 3-1: Manufacturer: syz
[  287.526101][ T5705] usb 3-1: SerialNumber: syz
[  287.550033][ T5705] usb 3-1: config 0 descriptor??
[  287.988971][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'.
[  288.008065][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1039'.
[  288.086533][ T3280] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  288.101104][ T3280] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  288.117669][ T3280] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  288.132880][ T3280] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  288.422036][ T9464] loop5: detected capacity change from 0 to 7
[  288.450146][ T9464] Dev loop5: unable to read RDB block 7
[  288.456397][ T9464]  loop5: unable to read partition table
[  288.462747][ T9464] loop5: partition table beyond EOD, truncated
[  288.469408][ T9464] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  288.851219][ T9476] tipc: Enabled bearer <ib:wg1>, priority 0
[  289.058147][  T807] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  289.198139][  T807] usb 1-1: device descriptor read/64, error -71
[  289.299630][ T9483] veth1_to_hsr: entered promiscuous mode
[  289.310566][ T5692] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  289.322389][ T9483] veth1_to_hsr: entered allmulticast mode
[  289.458130][  T807] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  289.488363][ T5692] usb 5-1: Using ep0 maxpacket: 16
[  289.500234][ T5692] usb 5-1: config 0 has an invalid interface number: 128 but max is 7
[  289.508792][ T5692] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  289.518119][ T5692] usb 5-1: config 0 has no interface number 0
[  289.527039][ T5692] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  289.537000][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.545503][ T5692] usb 5-1: Product: syz
[  289.553886][ T5692] usb 5-1: Manufacturer: syz
[  289.558732][ T5692] usb 5-1: SerialNumber: syz
[  289.566656][ T5692] usb 5-1: config 0 descriptor??
[  289.608378][  T807] usb 1-1: device descriptor read/64, error -71
[  289.728619][  T807] usb usb1-port1: attempt power cycle
[  289.737915][ T5721] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  289.789974][ T5692] ftdi_sio 5-1:0.128: FTDI USB Serial Device converter detected
[  289.813966][ T5692] usb 5-1: Detected FT232R
[  289.823385][ T5638] usb 3-1: USB disconnect, device number 78
[  289.908357][ T5721] usb 4-1: Using ep0 maxpacket: 8
[  289.921388][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  289.937216][ T5721] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  289.952083][ T5721] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  289.964020][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.992883][ T5721] usb 4-1: config 0 descriptor??
[  289.999774][ T5692] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  290.007128][ T9488] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  290.031705][ T5692] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  290.042926][ T5692] ftdi_sio 5-1:0.128: GPIO initialisation failed: -71
[  290.063481][ T5761] tipc: Node number set to 100663296
[  290.075965][ T5692] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  290.084598][  T807] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  290.114520][ T5692] usb 5-1: USB disconnect, device number 55
[  290.124622][  T807] usb 1-1: device descriptor read/8, error -71
[  290.164578][ T5692] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  290.201307][ T5692] ftdi_sio 5-1:0.128: device disconnected
[  290.235203][ T5721] hid (null): unknown global tag 0xa3
[  290.264507][ T5721] itetech 0003:258A:6A88.0012: unexpected long global item
[  290.287731][ T5721] itetech 0003:258A:6A88.0012: probe with driver itetech failed with error -22
[  290.397916][  T807] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  290.421761][ T9502] loop5: detected capacity change from 0 to 7
[  290.428841][  T807] usb 1-1: device descriptor read/8, error -71
[  290.451076][ T5692] usb 4-1: USB disconnect, device number 68
[  290.469930][ T9502] Dev loop5: unable to read RDB block 7
[  290.503142][ T9502]  loop5: unable to read partition table
[  290.528607][ T9502] loop5: partition table beyond EOD, truncated
[  290.539661][  T807] usb usb1-port1: unable to enumerate USB device
[  290.561293][ T9502] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  291.087977][  T807] usb 2-1: new full-speed USB device number 72 using dummy_hcd
[  291.492310][ T9534] cgroup: fork rejected by pids controller in /syz4
[  291.528719][ T9528] veth1_to_hsr: entered promiscuous mode
[  291.551554][ T9528] veth1_to_hsr: entered allmulticast mode
[  291.559139][ T9530] vlan0: Caught tx_queue_len zero misconfig
[  291.840720][ T9642] netlink: 'syz.1.1067': attribute type 1 has an invalid length.
[  291.956333][ T9645] netlink: 'syz.0.1068': attribute type 1 has an invalid length.
[  291.970009][ T9642] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  291.970720][ T9645] netlink: 'syz.0.1068': attribute type 2 has an invalid length.
[  292.040734][ T9648] netlink: 'syz.0.1068': attribute type 1 has an invalid length.
[  292.068693][ T9648] netlink: 'syz.0.1068': attribute type 2 has an invalid length.
[  292.165084][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'.
[  292.817254][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  292.841796][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  292.856769][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  292.865872][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  292.877010][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  292.949462][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  292.960512][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  292.972417][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  292.985111][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  292.996098][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  293.018314][  T807] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  293.198525][  T807] usb 1-1: Using ep0 maxpacket: 32
[  293.208376][  T807] usb 1-1: config 0 has an invalid interface number: 125 but max is 0
[  293.226971][  T807] usb 1-1: config 0 has no interface number 0
[  293.237130][  T807] usb 1-1: config 0 interface 125 altsetting 201 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  293.262567][  T807] usb 1-1: config 0 interface 125 has no altsetting 0
[  293.280282][  T807] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  293.292070][  T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.308189][  T807] usb 1-1: Product: syz
[  293.317876][  T807] usb 1-1: Manufacturer: syz
[  293.325923][  T807] usb 1-1: SerialNumber: syz
[  293.343859][  T807] usb 1-1: config 0 descriptor??
[  293.349679][ T5721] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  293.363137][  T807] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  293.518364][ T5721] usb 3-1: Using ep0 maxpacket: 32
[  293.536738][ T5721] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.565065][ T5721] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.582487][ T5721] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  293.605265][ T5721] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  293.624745][ T5721] usb 3-1: Product: syz
[  293.634761][ T5721] usb 3-1: Manufacturer: syz
[  293.653582][ T5721] hub 3-1:4.0: USB hub found
[  293.859687][ T5721] hub 3-1:4.0: 2 ports detected
[  293.918365][ T5713] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  294.078315][ T5713] usb 2-1: Using ep0 maxpacket: 16
[  294.092534][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short
[  294.109779][ T5713] usb 2-1: too many configurations: 255, using maximum allowed: 8
[  294.157741][ T5713] usb 2-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85
[  294.190623][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.210045][ T5713] usb 2-1: Product: syz
[  294.220035][ T5713] usb 2-1: Manufacturer: syz
[  294.232066][ T5713] usb 2-1: SerialNumber: syz
[  294.321133][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.338526][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.356254][ T9669] bridge_slave_0: entered allmulticast mode
[  294.373519][ T9669] bridge_slave_0: entered promiscuous mode
[  294.403779][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.427046][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.444825][ T9669] bridge_slave_1: entered allmulticast mode
[  294.471668][ T9669] bridge_slave_1: entered promiscuous mode
[  294.639054][ T9669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.712940][ T9669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.786108][ T9663] trusted_key: encrypted_key: master key parameter 'ecr½°SÐyptfs' is invalid
[  294.851493][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.878939][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.002963][ T9669] team0: Port device team_slave_0 added
[  295.031902][ T9669] team0: Port device team_slave_1 added
[  295.078422][ T5633] Bluetooth: hci3: command tx timeout
[  295.112481][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.132109][  T807] gspca_topro: reg_r err -110
[  295.144371][  T807] gspca_topro: Sensor soi763a
[  295.152955][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.181828][ T5705] hub 3-1:4.0: activate --> -90
[  295.239751][  T807] usb 1-1: USB disconnect, device number 60
[  295.353418][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.391600][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.440657][ T5705] hub 3-1:4.0: hub_ext_port_status failed (err = 0)
[  295.485057][ T9669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.533647][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.557361][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.627630][ T5705] usb 3-1: USB disconnect, device number 79
[  295.665823][ T9669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.682238][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'.
[  295.951973][ T9669] hsr_slave_0: entered promiscuous mode
[  295.961000][ T9669] hsr_slave_1: entered promiscuous mode
[  295.972528][ T9669] debugfs: 'hsr0' already exists in 'hsr'
[  295.983959][ T9669] Cannot create hsr debugfs directory
[  296.309835][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'.
[  296.625145][ T9719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1083'.
[  296.824791][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'.
[  296.826279][ T5713] gspca_main: 093a:260e too many config
[  296.892399][ T5713] usb 2-1: USB disconnect, device number 73
[  297.148714][ T5633] Bluetooth: hci3: command tx timeout
[  297.452469][ T9737] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1089'.
[  297.764680][ T9669] team0: Port device netdevsim1 removed
[  297.950466][  T807] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  298.153065][  T807] usb 3-1: unable to read config index 0 descriptor/start: -61
[  298.169333][  T807] usb 3-1: can't read configurations, error -61
[  298.228963][ T5705] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  298.318608][  T807] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  298.319058][ T9669] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  298.340464][ T9669] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  298.352462][ T9669] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  298.370973][ T9669] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  298.383298][ T9669] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  298.391521][ T5705] usb 2-1: Using ep0 maxpacket: 8
[  298.402977][ T5705] usb 2-1: unable to get BOS descriptor or descriptor too short
[  298.416207][ T9669] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  298.427438][ T5705] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  298.442474][ T9669] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  298.449855][ T5705] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  298.469093][ T5705] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40
[  298.479857][ T9669] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  298.487184][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.497690][ T5705] usb 2-1: Product: syz
[  298.500227][  T807] usb 3-1: unable to read config index 0 descriptor/start: -61
[  298.502266][ T5705] usb 2-1: Manufacturer: syz
[  298.516380][ T5705] usb 2-1: SerialNumber: syz
[  298.525822][  T807] usb 3-1: can't read configurations, error -61
[  298.534130][  T807] usb usb3-port1: attempt power cycle
[  298.719409][   T30] kauditd_printk_skb: 43 callbacks suppressed
[  298.719430][   T30] audit: type=1326 audit(1780422320.247:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.0.1095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e39ce59 code=0x7ffc0000
[  298.761858][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.804081][   T30] audit: type=1326 audit(1780422320.257:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.0.1095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e39ce59 code=0x7ffc0000
[  298.805712][ T5705] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  298.851380][ T9669] 8021q: adding VLAN 0 to HW filter on device team0
[  298.882285][ T3330] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.889589][ T3330] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.899890][   T30] audit: type=1326 audit(1780422320.257:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.0.1095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e39ce59 code=0x7ffc0000
[  298.927564][  T807] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  298.941909][   T30] audit: type=1326 audit(1780422320.257:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.0.1095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a3e39ce59 code=0x7ffc0000
[  298.970954][   T30] audit: type=1326 audit(1780422320.257:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.0.1095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e39ce59 code=0x7ffc0000
[  299.000299][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.003400][  T807] usb 3-1: unable to read config index 0 descriptor/start: -61
[  299.007525][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.017082][  T807] usb 3-1: can't read configurations, error -61
[  299.030535][   T30] audit: type=1326 audit(1780422320.257:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.0.1095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e39ce59 code=0x7ffc0000
[  299.055869][   T30] audit: type=1326 audit(1780422320.257:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.0.1095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e39ce59 code=0x7ffc0000
[  299.060185][ T5705] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  299.080985][   T30] audit: type=1326 audit(1780422320.257:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.0.1095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f4a3e39ce59 code=0x7ffc0000
[  299.081035][   T30] audit: type=1326 audit(1780422320.257:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.0.1095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e39ce59 code=0x7ffc0000
[  299.087285][   T30] audit: type=1326 audit(1780422320.257:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.0.1095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e39ce59 code=0x7ffc0000
[  299.168245][ T5705] usb 2-1: USB disconnect, device number 74
[  299.218139][  T807] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  299.229722][ T5633] Bluetooth: hci3: command tx timeout
[  299.250850][  T807] usb 3-1: unable to read config index 0 descriptor/start: -61
[  299.258988][  T807] usb 3-1: can't read configurations, error -61
[  299.265812][  T807] usb usb3-port1: unable to enumerate USB device
[  299.305746][ T5647] udevd[5647]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  299.331658][ T9774] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ�
[  299.476598][ T9669] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.586322][ T9669] veth0_vlan: entered promiscuous mode
[  299.607176][ T9669] veth1_vlan: entered promiscuous mode
[  299.726306][ T9669] veth0_macvtap: entered promiscuous mode
[  299.773742][ T9669] veth1_macvtap: entered promiscuous mode
[  299.814407][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.832891][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.865808][ T3383] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.891739][ T3383] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.903170][ T3383] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.943578][ T3383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.141410][ T9790] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1102'.
[  300.210866][ T9795] netlink: 'syz.1.1104': attribute type 1 has an invalid length.
[  300.231108][ T3383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.253982][ T3383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.339240][ T9795] 8021q: adding VLAN 0 to HW filter on device bond6
[  300.386657][ T9796] bond6: (slave geneve3): making interface the new active one
[  300.421015][ T9796] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  300.533585][   T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.542141][ T5634] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  300.566465][   T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.636568][ T9801] program syz.1.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  300.708398][ T5634] usb 1-1: Using ep0 maxpacket: 16
[  300.736528][ T5634] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  300.785214][ T5634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.817282][ T5634] usb 1-1: Product: syz
[  300.828805][ T5634] usb 1-1: Manufacturer: syz
[  300.849013][ T5634] usb 1-1: SerialNumber: syz
[  300.881545][ T5634] r8152-cfgselector 1-1: Unknown version 0x0000
[  300.900132][ T5634] r8152-cfgselector 1-1: config 0 descriptor??
[  301.143952][ T5634] r8152-cfgselector 1-1: Needed 1 retries to read version
[  301.318173][ T5633] Bluetooth: hci3: command tx timeout
[  301.357463][ T5634] r8152-cfgselector 1-1: USB disconnect, device number 61
[  301.820096][ T9831] veth1_to_hsr: entered promiscuous mode
[  301.842016][ T9831] veth1_to_hsr: entered allmulticast mode
[  301.894454][ T9835] IPv6: NLM_F_CREATE should be specified when creating new route
[  301.926971][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1114'.
[  301.962827][   T29] IPVS: starting estimator thread 0...
[  301.971238][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'.
[  301.990566][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'.
[  302.088349][ T9836] IPVS: using max 29 ests per chain, 69600 per kthread
[  302.139338][ T9839] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.1115'.
[  302.251210][   T29] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  302.428868][   T29] usb 4-1: Using ep0 maxpacket: 16
[  302.454952][   T29] usb 4-1: config 0 has an invalid interface number: 107 but max is 0
[  302.475043][   T29] usb 4-1: config 0 has no interface number 0
[  302.489503][   T29] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9
[  302.514903][   T29] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024
[  302.552410][   T29] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  302.576368][   T29] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  302.598474][   T29] usb 4-1: Product: syz
[  302.609999][   T29] usb 4-1: Manufacturer: syz
[  302.622183][   T29] usb 4-1: SerialNumber: syz
[  302.649662][   T29] usb 4-1: config 0 descriptor??
[  302.674543][   T29] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected
[  302.694042][   T29] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81
[  302.713734][   T29] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1
[  302.735627][   T29] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  302.766232][   T29] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2
[  302.778948][ T5692] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  302.801586][   T29] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  302.830947][   T29] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4
[  302.844897][   T29] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  302.885391][   T29] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6
[  302.920015][   T29] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  302.960231][ T5692] usb 3-1: Using ep0 maxpacket: 16
[  302.974756][   T29] usb 4-1: USB disconnect, device number 69
[  303.002880][ T5692] usb 3-1: config 0 has an invalid interface number: 49 but max is 0
[  303.034489][ T5692] usb 3-1: config 0 has no interface number 0
[  303.056387][   T29] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  303.059086][ T5692] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  303.113730][ T5692] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.140783][   T29] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  303.152730][ T5692] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  303.181676][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.188767][   T29] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  303.211598][ T5692] usb 3-1: Product: syz
[  303.223645][ T5692] usb 3-1: Manufacturer: syz
[  303.230849][ T5692] usb 3-1: SerialNumber: syz
[  303.260926][ T5692] usb 3-1: config 0 descriptor??
[  303.263624][   T29] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  303.272549][ T9856] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  303.299551][   T29] keyspan 4-1:0.107: device disconnected
[  303.501714][ T5692] usb 3-1: USB disconnect, device number 84
[  304.143743][ T9887] FAULT_INJECTION: forcing a failure.
[  304.143743][ T9887] name failslab, interval 1, probability 0, space 0, times 0
[  304.158516][ T9887] CPU: 0 UID: 0 PID: 9887 Comm: syz.3.1129 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  304.158550][ T9887] Tainted: [L]=SOFTLOCKUP
[  304.158557][ T9887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  304.158568][ T9887] Call Trace:
[  304.158578][ T9887]  <TASK>
[  304.158587][ T9887]  dump_stack_lvl+0xe8/0x150
[  304.158617][ T9887]  should_fail_ex+0x412/0x560
[  304.158644][ T9887]  should_failslab+0xa8/0x100
[  304.158663][ T9887]  ? skb_clone+0x212/0x3a0
[  304.158682][ T9887]  kmem_cache_alloc_noprof+0x87/0x650
[  304.158713][ T9887]  skb_clone+0x212/0x3a0
[  304.158728][ T9887]  __netlink_deliver_tap+0x404/0x850
[  304.158752][ T9887]  ? netlink_deliver_tap+0x2e/0x1b0
[  304.158770][ T9887]  netlink_deliver_tap+0x19c/0x1b0
[  304.158788][ T9887]  netlink_sendskb+0x68/0x140
[  304.158812][ T9887]  netlink_rcv_skb+0x2b6/0x4b0
[  304.158829][ T9887]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  304.158847][ T9887]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  304.158871][ T9887]  ? netlink_deliver_tap+0x2e/0x1b0
[  304.158888][ T9887]  ? netlink_deliver_tap+0x2e/0x1b0
[  304.158907][ T9887]  netlink_unicast+0x75c/0x8e0
[  304.158929][ T9887]  netlink_sendmsg+0x813/0xb40
[  304.158951][ T9887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.158970][ T9887]  ? finish_task_switch+0x41f/0xbe0
[  304.158986][ T9887]  ? aa_sock_msg_perm+0xf1/0x1b0
[  304.159004][ T9887]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  304.159023][ T9887]  ____sys_sendmsg+0x972/0x9f0
[  304.159035][ T9887]  ? __might_fault+0xaf/0x130
[  304.159054][ T9887]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.159071][ T9887]  ? import_iovec+0x73/0xa0
[  304.159088][ T9887]  ___sys_sendmsg+0x2a5/0x360
[  304.159103][ T9887]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.159135][ T9887]  ? __fget_files+0x2a/0x420
[  304.159154][ T9887]  ? __fget_files+0x3a0/0x420
[  304.159174][ T9887]  __x64_sys_sendmsg+0x1bd/0x2a0
[  304.159187][ T9887]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  304.159205][ T9887]  ? __pfx_ksys_write+0x10/0x10
[  304.159226][ T9887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.159239][ T9887]  do_syscall_64+0x174/0x580
[  304.159251][ T9887]  ? trace_irq_disable+0x3b/0x140
[  304.159269][ T9887]  ? clear_bhb_loop+0x40/0x90
[  304.159283][ T9887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.159295][ T9887] RIP: 0033:0x7f9ff199ce59
[  304.159309][ T9887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.159319][ T9887] RSP: 002b:00007f9ff2809028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.159334][ T9887] RAX: ffffffffffffffda RBX: 00007f9ff1c15fa0 RCX: 00007f9ff199ce59
[  304.159342][ T9887] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004
[  304.159349][ T9887] RBP: 00007f9ff2809090 R08: 0000000000000000 R09: 0000000000000000
[  304.159356][ T9887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  304.159363][ T9887] R13: 00007f9ff1c16038 R14: 00007f9ff1c15fa0 R15: 00007f9ff1d3fa48
[  304.159381][ T9887]  </TASK>
[  304.777750][ T9896] FAULT_INJECTION: forcing a failure.
[  304.777750][ T9896] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  304.843560][ T9896] CPU: 1 UID: 0 PID: 9896 Comm: syz.1.1131 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  304.843596][ T9896] Tainted: [L]=SOFTLOCKUP
[  304.843610][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  304.843621][ T9896] Call Trace:
[  304.843630][ T9896]  <TASK>
[  304.843638][ T9896]  dump_stack_lvl+0xe8/0x150
[  304.843666][ T9896]  should_fail_ex+0x412/0x560
[  304.843698][ T9896]  _copy_to_user+0x31/0xb0
[  304.843723][ T9896]  simple_read_from_buffer+0xe1/0x170
[  304.843753][ T9896]  proc_fail_nth_read+0x1bb/0x230
[  304.843780][ T9896]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  304.843804][ T9896]  ? rw_verify_area+0x2a6/0x4d0
[  304.843827][ T9896]  ? tun_chr_write_iter+0x18a/0x200
[  304.843854][ T9896]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  304.843879][ T9896]  vfs_read+0x20c/0xa70
[  304.843912][ T9896]  ? __pfx___mutex_lock+0x10/0x10
[  304.843935][ T9896]  ? __pfx_vfs_read+0x10/0x10
[  304.843962][ T9896]  ? __fget_files+0x2a/0x420
[  304.843990][ T9896]  ? __fget_files+0x3a0/0x420
[  304.844013][ T9896]  ? __fget_files+0x2a/0x420
[  304.844044][ T9896]  ksys_read+0x150/0x270
[  304.844072][ T9896]  ? __pfx_ksys_read+0x10/0x10
[  304.844108][ T9896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.844130][ T9896]  do_syscall_64+0x174/0x580
[  304.844147][ T9896]  ? trace_irq_disable+0x3b/0x140
[  304.844175][ T9896]  ? clear_bhb_loop+0x40/0x90
[  304.844198][ T9896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.844217][ T9896] RIP: 0033:0x7f75d335d68e
[  304.844237][ T9896] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  304.844253][ T9896] RSP: 002b:00007f75d4233fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  304.844273][ T9896] RAX: ffffffffffffffda RBX: 00007f75d42346c0 RCX: 00007f75d335d68e
[  304.844287][ T9896] RDX: 000000000000000f RSI: 00007f75d42340a0 RDI: 0000000000000005
[  304.844297][ T9896] RBP: 00007f75d4234090 R08: 0000000000000000 R09: 0000000000000000
[  304.844308][ T9896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  304.844319][ T9896] R13: 00007f75d3616038 R14: 00007f75d3615fa0 R15: 00007f75d373fa48
[  304.844348][ T9896]  </TASK>
[  305.105568][ T9890] raw_sendmsg: syz.2.1128 forgot to set AF_INET. Fix it!
[  305.455693][ T9914] loop8: detected capacity change from 0 to 8
[  305.502732][ T9914] Dev loop8: unable to read RDB block 8
[  305.541965][ T9914]  loop8: unable to read partition table
[  305.556890][ T9914] loop8: partition table beyond EOD, truncated
[  305.600227][ T9914] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  305.789366][ T9926] binder: 9924:9926 ioctl c0306201 2000000001c0 returned -14
[  306.123397][ T9939] lo: Caught tx_queue_len zero misconfig
[  306.133531][ T9939] netlink: 'syz.0.1144': attribute type 15 has an invalid length.
[  306.193170][ T9943] netlink: 'syz.1.1147': attribute type 1 has an invalid length.
[  306.260745][ T9946] FAULT_INJECTION: forcing a failure.
[  306.260745][ T9946] name failslab, interval 1, probability 0, space 0, times 0
[  306.322796][ T9943] 8021q: adding VLAN 0 to HW filter on device bond7
[  306.373989][ T9946] CPU: 0 UID: 0 PID: 9946 Comm: syz.1.1147 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  306.374013][ T9946] Tainted: [L]=SOFTLOCKUP
[  306.374017][ T9946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  306.374024][ T9946] Call Trace:
[  306.374029][ T9946]  <TASK>
[  306.374035][ T9946]  dump_stack_lvl+0xe8/0x150
[  306.374054][ T9946]  should_fail_ex+0x412/0x560
[  306.374073][ T9946]  should_failslab+0xa8/0x100
[  306.374086][ T9946]  __kmalloc_cache_noprof+0x88/0x660
[  306.374101][ T9946]  ? __pfx_stack_trace_save+0x10/0x10
[  306.374118][ T9946]  ? rtnl_newlink+0x136/0x1bb0
[  306.374137][ T9946]  rtnl_newlink+0x136/0x1bb0
[  306.374153][ T9946]  ? kasan_save_track+0x3e/0x80
[  306.374168][ T9946]  ? kasan_save_free_info+0x46/0x50
[  306.374181][ T9946]  ? __kasan_slab_free+0x5c/0x80
[  306.374197][ T9946]  ? dev_hard_start_xmit+0x2cd/0x830
[  306.374213][ T9946]  ? __dev_queue_xmit+0x14d9/0x3950
[  306.374229][ T9946]  ? __netlink_deliver_tap+0x5ad/0x850
[  306.374254][ T9946]  ? netlink_deliver_tap+0x19c/0x1b0
[  306.374272][ T9946]  ? netlink_unicast+0x730/0x8e0
[  306.374286][ T9946]  ? netlink_sendmsg+0x813/0xb40
[  306.374303][ T9946]  ? __pfx_rtnl_newlink+0x10/0x10
[  306.374318][ T9946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.374349][ T9946]  ? kasan_quarantine_put+0xbb/0x1f0
[  306.374364][ T9946]  ? lockdep_hardirqs_on+0x7a/0x110
[  306.374379][ T9946]  ? nlmon_xmit+0xb0/0x100
[  306.374390][ T9946]  ? kmem_cache_free+0x182/0x650
[  306.374411][ T9946]  ? __lock_acquire+0x6b5/0x2cf0
[  306.374426][ T9946]  ? __dev_queue_xmit+0x2b6/0x3950
[  306.374440][ T9946]  ? __local_bh_enable_ip+0xd0/0x130
[  306.374453][ T9946]  ? lockdep_hardirqs_on+0x7a/0x110
[  306.374464][ T9946]  ? __dev_queue_xmit+0x2b6/0x3950
[  306.374475][ T9946]  ? __local_bh_enable_ip+0xd0/0x130
[  306.374486][ T9946]  ? __dev_queue_xmit+0x2b6/0x3950
[  306.374501][ T9946]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  306.374525][ T9946]  ? __pfx_rtnl_newlink+0x10/0x10
[  306.374548][ T9946]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  306.374566][ T9946]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  306.374581][ T9946]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  306.374595][ T9946]  ? ref_tracker_free+0x693/0x840
[  306.374610][ T9946]  ? __pfx_ref_tracker_free+0x10/0x10
[  306.374622][ T9946]  ? __asan_memcpy+0x40/0x70
[  306.374636][ T9946]  ? __skb_clone+0x63/0x7a0
[  306.374652][ T9946]  netlink_rcv_skb+0x232/0x4b0
[  306.374669][ T9946]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  306.374685][ T9946]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  306.374709][ T9946]  ? netlink_deliver_tap+0x2e/0x1b0
[  306.374725][ T9946]  ? netlink_deliver_tap+0x2e/0x1b0
[  306.374744][ T9946]  netlink_unicast+0x75c/0x8e0
[  306.374765][ T9946]  netlink_sendmsg+0x813/0xb40
[  306.374789][ T9946]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.374808][ T9946]  ? aa_sock_msg_perm+0xf1/0x1b0
[  306.374826][ T9946]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  306.374844][ T9946]  ____sys_sendmsg+0x972/0x9f0
[  306.374855][ T9946]  ? __might_fault+0xaf/0x130
[  306.374874][ T9946]  ? __pfx_____sys_sendmsg+0x10/0x10
[  306.374890][ T9946]  ? import_iovec+0x73/0xa0
[  306.374906][ T9946]  ___sys_sendmsg+0x2a5/0x360
[  306.374917][ T9946]  ? __lock_acquire+0x6b5/0x2cf0
[  306.374931][ T9946]  ? __pfx____sys_sendmsg+0x10/0x10
[  306.374961][ T9946]  ? __fget_files+0x2a/0x420
[  306.374974][ T9946]  ? __fget_files+0x3a0/0x420
[  306.374993][ T9946]  __x64_sys_sendmsg+0x1bd/0x2a0
[  306.375006][ T9946]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  306.375028][ T9946]  ? __pfx_ksys_write+0x10/0x10
[  306.375049][ T9946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.375062][ T9946]  do_syscall_64+0x174/0x580
[  306.375074][ T9946]  ? trace_irq_disable+0x3b/0x140
[  306.375090][ T9946]  ? clear_bhb_loop+0x40/0x90
[  306.375105][ T9946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.375116][ T9946] RIP: 0033:0x7f75d339ce59
[  306.375129][ T9946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  306.375139][ T9946] RSP: 002b:00007f75d4213028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.375154][ T9946] RAX: ffffffffffffffda RBX: 00007f75d3616090 RCX: 00007f75d339ce59
[  306.375163][ T9946] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  306.375170][ T9946] RBP: 00007f75d4213090 R08: 0000000000000000 R09: 0000000000000000
[  306.375177][ T9946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.375183][ T9946] R13: 00007f75d3616128 R14: 00007f75d3616090 R15: 00007f75d373fa48
[  306.375201][ T9946]  </TASK>
[  306.901120][ T9954] sit0: Caught tx_queue_len zero misconfig
[  307.188551][ T9958] GUP no longer grows the stack in syz.4.1152 (9958): 200000005000-200000008000 (200000004000)
[  307.199650][ T9958] CPU: 0 UID: 0 PID: 9958 Comm: syz.4.1152 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  307.199685][ T9958] Tainted: [L]=SOFTLOCKUP
[  307.199693][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  307.199704][ T9958] Call Trace:
[  307.199712][ T9958]  <TASK>
[  307.199720][ T9958]  dump_stack_lvl+0xe8/0x150
[  307.199751][ T9958]  fixup_user_fault+0x637/0x6f0
[  307.199784][ T9958]  fault_in_user_writeable+0x71/0xd0
[  307.199807][ T9958]  futex_lock_pi+0x814/0xb10
[  307.199848][ T9958]  ? __pfx_futex_lock_pi+0x10/0x10
[  307.199902][ T9958]  ? __pfx_futex_wake_mark+0x10/0x10
[  307.199932][ T9958]  ? restore_signal_shadow_stack+0x499/0x4f0
[  307.199963][ T9958]  ? __ia32_sys_rt_sigreturn+0x7dc/0x8e0
[  307.199992][ T9958]  ? __lock_acquire+0x6b5/0x2cf0
[  307.200016][ T9958]  do_futex+0x292/0x420
[  307.200038][ T9958]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  307.200071][ T9958]  ? __pfx_do_futex+0x10/0x10
[  307.200101][ T9958]  __se_sys_futex+0x3a8/0x450
[  307.200131][ T9958]  ? __pfx___se_sys_futex+0x10/0x10
[  307.200156][ T9958]  ? __task_pid_nr_ns+0x28/0x470
[  307.200186][ T9958]  ? __x64_sys_futex+0x21/0xf0
[  307.200210][ T9958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.200232][ T9958]  do_syscall_64+0x174/0x580
[  307.200254][ T9958]  ? clear_bhb_loop+0x40/0x90
[  307.200280][ T9958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.200300][ T9958] RIP: 0033:0x7fca8f59ce59
[  307.200332][ T9958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  307.200349][ T9958] RSP: 002b:00007fca904db028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  307.200373][ T9958] RAX: ffffffffffffffda RBX: 00007fca8f815fa0 RCX: 00007fca8f59ce59
[  307.200387][ T9958] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[  307.200401][ T9958] RBP: 00007fca8f632d6f R08: 0000000000000000 R09: 0000000000000000
[  307.200413][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.200424][ T9958] R13: 00007fca8f816038 R14: 00007fca8f815fa0 R15: 00007fca8f93fa48
[  307.200457][ T9958]  </TASK>
[  307.581370][ T9968] loop5: detected capacity change from 0 to 7
[  307.597695][ T9968] Dev loop5: unable to read RDB block 7
[  307.622534][ T9968]  loop5: unable to read partition table
[  307.633471][ T9968] loop5: partition table beyond EOD, truncated
[  307.646968][ T9968] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  307.874126][ T9971] fuse: Unknown parameter 'default_permissions
ú'
[  307.900817][ T9975] netlink: 'syz.0.1158': attribute type 9 has an invalid length.
[  308.158079][  T807] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  308.173972][ T9988] kvm: pic: non byte write
[  308.340362][  T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.359027][  T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.369638][  T807] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  308.379650][  T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.392131][  T807] usb 5-1: config 0 descriptor??
[  309.187954][ T5761] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  309.380101][ T5761] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.407937][ T5761] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  309.431318][ T5761] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40
[  309.447855][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.467823][ T5761] usb 3-1: Product: syz
[  309.473721][ T5761] usb 3-1: Manufacturer: syz
[  309.487842][ T5761] usb 3-1: SerialNumber: syz
[  309.842050][T10022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.874366][T10022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.364043][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1171'.
[  310.426728][ T5761] usb 3-1: USB disconnect, device number 85
[  310.431761][T10038] SET target dimension over the limit!
[  310.538946][ T5705] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  310.704545][ T5705] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  310.721310][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.730526][ T5705] usb 1-1: Product: syz
[  310.821666][ T5705] usb 1-1: Manufacturer: syz
[  310.841823][ T5705] usb 1-1: SerialNumber: syz
[  310.848338][T10054] netlink: 'syz.1.1175': attribute type 1 has an invalid length.
[  310.888419][ T5705] usb 1-1: config 0 descriptor??
[  310.983975][  T807] usbhid 5-1:0.0: can't add hid device: -71
[  310.995469][  T807] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  311.015135][  T807] usb 5-1: USB disconnect, device number 56
[  311.044961][T10054] bond8: entered promiscuous mode
[  311.062194][T10054] 8021q: adding VLAN 0 to HW filter on device bond8
[  311.116141][T10043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.149170][T10043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.183814][ T5705] usb 1-1: f81604_read: reg: 105 failed: -EPROTO
[  311.202523][T10056] macvtap1: entered allmulticast mode
[  311.209121][ T5705] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  311.217105][ T5705] f81604 1-1:0.0: probe with driver f81604 failed with error -71
[  311.239826][ T5705] usb 1-1: USB disconnect, device number 62
[  311.289558][T10070] fuse: Unknown parameter 'n¯8ú£Ú¦Ñúfêõ'	}'
[  311.405201][T10077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  311.705977][T10090] loop5: detected capacity change from 0 to 7
[  311.715145][T10090] Dev loop5: unable to read RDB block 7
[  311.721388][T10090]  loop5: unable to read partition table
[  311.728823][T10090] loop5: partition table beyond EOD, truncated
[  311.736618][T10090] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  311.748689][  T807] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  311.851983][T10094] netlink: 'syz.2.1184': attribute type 1 has an invalid length.
[  311.920757][  T807] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  311.944361][  T807] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  311.955619][  T807] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  311.968087][  T807] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  311.981329][  T807] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  312.000488][  T807] usb 2-1: Manufacturer: syz
[  312.005670][  T807] usb 2-1: SerialNumber: syz
[  312.017380][T10094] 8021q: adding VLAN 0 to HW filter on device bond2
[  312.118433][    T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  312.232959][  T807] yealink 2-1:36.0: invalid payload size 0, expected 16
[  312.282161][  T807] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input46
[  312.295264][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  312.316024][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  312.329457][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[  312.336643][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[  312.343891][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[  312.353228][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[  312.361402][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[  312.368649][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[  312.378821][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[  312.386735][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[  312.393737][    C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[  312.422619][  T807] usb 2-1: USB disconnect, device number 75
[  312.433782][    T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  312.454279][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  312.463690][    T9] usb 1-1: SerialNumber: syz
[  312.603658][T10114] loop5: detected capacity change from 0 to 7
[  312.616470][T10114] Dev loop5: unable to read RDB block 7
[  312.631192][T10114]  loop5: unable to read partition table
[  312.637246][T10114] loop5: partition table beyond EOD, truncated
[  312.644709][T10114] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  312.878216][  T807] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  313.048915][  T807] usb 2-1: too many configurations: 178, using maximum allowed: 8
[  313.062024][  T807] usb 2-1: unable to read config index 0 descriptor/start: -61
[  313.075551][  T807] usb 2-1: can't read configurations, error -61
[  313.164865][    T9] usb 1-1: 0:2 : does not exist
[  313.219466][    T9] usb 1-1: USB disconnect, device number 63
[  313.228027][  T807] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  313.259235][T10125] veth1_to_hsr: entered promiscuous mode
[  313.266822][T10125] veth1_to_hsr: entered allmulticast mode
[  313.274712][ T5647] udevd[5647]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.420022][  T807] usb 2-1: too many configurations: 178, using maximum allowed: 8
[  313.432055][  T807] usb 2-1: unable to read config index 0 descriptor/start: -61
[  313.440926][  T807] usb 2-1: can't read configurations, error -61
[  313.447621][  T807] usb usb2-port1: attempt power cycle
[  313.809137][  T807] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  313.860888][  T807] usb 2-1: too many configurations: 178, using maximum allowed: 8
[  313.901231][  T807] usb 2-1: unable to read config index 0 descriptor/start: -61
[  313.924992][  T807] usb 2-1: can't read configurations, error -61
[  313.978325][ T5761] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  314.078861][  T807] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  314.121718][  T807] usb 2-1: too many configurations: 178, using maximum allowed: 8
[  314.158110][  T807] usb 2-1: unable to read config index 0 descriptor/start: -61
[  314.177542][  T807] usb 2-1: can't read configurations, error -61
[  314.197610][ T5761] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb
[  314.216956][  T807] usb usb2-port1: unable to enumerate USB device
[  314.233803][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.274745][ T5761] usb 5-1: config 0 descriptor??
[  314.290061][ T5705] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  314.310649][ T5761] gspca_main: spca505-2.14.0 probing 0733:0430
[  314.498394][ T5705] usb 1-1: Using ep0 maxpacket: 8
[  314.515188][ T5705] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  314.546713][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.580159][ T5705] usb 1-1: Product: syz
[  314.592102][ T5705] usb 1-1: Manufacturer: syz
[  314.606935][ T5705] usb 1-1: SerialNumber: syz
[  314.631558][ T5705] usb 1-1: config 0 descriptor??
[  314.700193][T10132] fuse: Unknown parameter 'rootmodeª*RN00000000002000020000'
[  314.942899][ T5705] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  314.962033][ T5705] usb 1-1: USB disconnect, device number 64
[  314.988830][ T5761] gspca_spca505: reg write: error -110
[  315.012967][ T5761] spca505 5-1:0.0: probe with driver spca505 failed with error -5
[  315.053887][T10145] loop5: detected capacity change from 0 to 7
[  315.071592][T10145] Dev loop5: unable to read RDB block 7
[  315.079261][T10145]  loop5: unable to read partition table
[  315.086597][T10145] loop5: partition table beyond EOD, truncated
[  315.093573][T10147] mac80211_hwsim hwsim11 ..ãc¤±: renamed from wlan1
[  315.104513][T10145] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  315.398719][ T5761] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  315.452164][T10154] syzkaller0: entered promiscuous mode
[  315.462415][T10154] syzkaller0: entered allmulticast mode
[  315.491626][T10154] TC_ACT_REPEAT abuse ?
[  315.568965][ T5761] usb 2-1: Using ep0 maxpacket: 16
[  315.582759][ T5761] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  315.597015][ T5761] usb 2-1: config 0 interface 0 has no altsetting 0
[  315.609216][ T5761] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  315.619888][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.628907][ T5761] usb 2-1: Product: syz
[  315.633522][ T5761] usb 2-1: Manufacturer: syz
[  315.639014][ T5761] usb 2-1: SerialNumber: syz
[  315.655527][ T5761] usb 2-1: config 0 descriptor??
[  315.900386][    C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  316.010678][ T5761] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input47
[  316.079699][ T5721] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  316.149558][ T5761] imon:send_packet: packet tx failed (-71)
[  316.167908][ T5761] imon 2-1:0.0: panel buttons/knobs setup failed
[  316.250303][ T5721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  316.260126][ T5761] rc_core: IR keymap rc-imon-pad not found
[  316.261634][ T5721] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  316.277679][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.282960][ T5761] Registered IR keymap rc-empty
[  316.295292][ T5761] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  316.306638][ T5761] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  316.310101][ T5721] usb 1-1: config 0 descriptor??
[  316.325063][ T5761] imon:send_packet: packet tx failed (-71)
[  316.349089][ T5761] imon 2-1:0.0: remote input dev register failed
[  316.361017][ T5761] imon 2-1:0.0: imon_init_intf0: rc device setup failed
[  316.394366][ T5761] imon 2-1:0.0: unable to initialize intf0, err 0
[  316.402293][ T5761] imon:imon_probe: failed to initialize context!
[  316.410141][ T5761] imon 2-1:0.0: unable to register, err -19
[  316.421563][ T5761] usb 2-1: USB disconnect, device number 80
[  316.737921][ T5761] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[  316.774979][ T5634] usb 5-1: USB disconnect, device number 57
[  316.890786][ T5761] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  316.890825][ T5761] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[  316.890870][ T5761] usb 2-1: config 0 interface 0 has no altsetting 0
[  316.893607][ T5761] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  316.893638][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.893657][ T5761] usb 2-1: Product: syz
[  316.893682][ T5761] usb 2-1: Manufacturer: syz
[  316.893698][ T5761] usb 2-1: SerialNumber: syz
[  316.903722][ T5761] usb 2-1: config 0 descriptor??
[  316.906218][T10147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  317.123184][ T5721] ath6kl: Failed to read usb control message: -71
[  317.123242][ T5721] ath6kl: Unable to read the bmi data from the device: -71
[  317.123258][ T5721] ath6kl: unable to read target info byte count: -71
[  317.140900][ T5721] ath6kl: Failed to init ath6kl core: -71
[  317.141403][ T5721] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  317.149175][ T5721] usb 1-1: USB disconnect, device number 65
[  317.182464][ T5634] usb 5-1: new low-speed USB device number 58 using dummy_hcd
[  317.306174][    C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  317.320257][ T5761] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input49
[  317.341057][ T5634] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  317.341089][ T5634] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  317.341108][ T5634] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  317.341141][ T5634] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  317.341181][ T5634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  317.341205][ T5634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  317.341224][ T5634] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  317.354308][ T5634] usb 5-1: string descriptor 0 read error: -22
[  317.354457][ T5634] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  317.354484][ T5634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.356707][ T5761] imon:send_packet: packet tx failed (-71)
[  317.359405][ T5634] usb 5-1: config 0 descriptor??
[  317.377862][ T5761] imon 2-1:0.0: panel buttons/knobs setup failed
[  317.410674][ T5634] hub 5-1:0.0: bad descriptor, ignoring hub
[  317.504395][T10182] syzkaller0: entered promiscuous mode
[  317.514893][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  317.536482][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  317.537024][ T5634] hub 5-1:0.0: probe with driver hub failed with error -5
[  317.556301][ T5634] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input51
[  317.556723][T10182] syzkaller0: entered allmulticast mode
[  317.630613][ T5761] rc_core: IR keymap rc-imon-pad not found
[  317.630639][ T5761] Registered IR keymap rc-empty
[  317.630730][ T5761] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  317.630751][ T5761] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  317.632515][ T5761] imon:send_packet: packet tx failed (-71)
[  317.648061][ T5761] imon 2-1:0.0: remote input dev register failed
[  317.648242][ T5761] imon 2-1:0.0: imon_init_intf0: rc device setup failed
[  317.664880][T10173] IPv6: addrconf: prefix option has invalid lifetime
[  317.776128][ T5634] usb 5-1: USB disconnect, device number 58
[  317.813819][ T5761] imon 2-1:0.0: unable to initialize intf0, err 0
[  317.852928][ T5761] imon:imon_probe: failed to initialize context!
[  317.883334][ T5761] imon 2-1:0.0: unable to register, err -19
[  317.933732][ T5761] usb 2-1: USB disconnect, device number 81
[  318.338225][ T5634] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[  318.500255][T10215] FAULT_INJECTION: forcing a failure.
[  318.500255][T10215] name failslab, interval 1, probability 0, space 0, times 0
[  318.514686][T10215] CPU: 1 UID: 0 PID: 10215 Comm: syz.1.1223 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  318.514713][T10215] Tainted: [L]=SOFTLOCKUP
[  318.514719][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  318.514727][T10215] Call Trace:
[  318.514734][T10215]  <TASK>
[  318.514740][T10215]  dump_stack_lvl+0xe8/0x150
[  318.514759][T10215]  should_fail_ex+0x412/0x560
[  318.514776][T10215]  should_failslab+0xa8/0x100
[  318.514788][T10215]  ? sctp_get_port_local+0x6f2/0x1730
[  318.514804][T10215]  kmem_cache_alloc_noprof+0x87/0x650
[  318.514824][T10215]  sctp_get_port_local+0x6f2/0x1730
[  318.514838][T10215]  ? sctp_bind_addr_match+0x30/0x2b0
[  318.514856][T10215]  ? __pfx_sctp_get_port_local+0x10/0x10
[  318.514872][T10215]  ? sctp_bind_addr_match+0x28b/0x2b0
[  318.514886][T10215]  sctp_do_bind+0x4f1/0x9d0
[  318.514906][T10215]  sctp_connect_new_asoc+0x270/0x6b0
[  318.514922][T10215]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  318.514940][T10215]  ? __local_bh_enable_ip+0xd0/0x130
[  318.514952][T10215]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  318.514968][T10215]  ? security_sctp_bind_connect+0x7e/0x2c0
[  318.514984][T10215]  sctp_sendmsg+0x1576/0x2c50
[  318.515006][T10215]  ? __pfx_sctp_sendmsg+0x10/0x10
[  318.515021][T10215]  ? aa_sk_perm+0x6d5/0x900
[  318.515036][T10215]  ? __might_fault+0xaf/0x130
[  318.515054][T10215]  ? __pfx_aa_sk_perm+0x10/0x10
[  318.515070][T10215]  ? sock_rps_record_flow+0x19/0x350
[  318.515084][T10215]  ? __pfx_inet_sendmsg+0x10/0x10
[  318.515097][T10215]  ? inet_sendmsg+0x2f4/0x370
[  318.515110][T10215]  ? __pfx_inet_sendmsg+0x10/0x10
[  318.515122][T10215]  __sys_sendto+0x5de/0x710
[  318.515140][T10215]  ? __pfx___sys_sendto+0x10/0x10
[  318.515155][T10215]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  318.515174][T10215]  ? __fget_files+0x3a0/0x420
[  318.515194][T10215]  ? ksys_write+0x242/0x270
[  318.515208][T10215]  ? __irq_exit_rcu+0xca/0x220
[  318.515221][T10215]  ? __pfx_ksys_write+0x10/0x10
[  318.515235][T10215]  ? handle_softirqs+0x715/0x840
[  318.515250][T10215]  __x64_sys_sendto+0xde/0x100
[  318.515266][T10215]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.515279][T10215]  do_syscall_64+0x174/0x580
[  318.515292][T10215]  ? clear_bhb_loop+0x40/0x90
[  318.515306][T10215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.515317][T10215] RIP: 0033:0x7f75d339ce59
[  318.515332][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  318.515344][T10215] RSP: 002b:00007f75d4234028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  318.515359][T10215] RAX: ffffffffffffffda RBX: 00007f75d3615fa0 RCX: 00007f75d339ce59
[  318.515367][T10215] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003
[  318.515375][T10215] RBP: 00007f75d4234090 R08: 0000200000000300 R09: 000000000000001c
[  318.515382][T10215] R10: 0000000004000854 R11: 0000000000000246 R12: 0000000000000001
[  318.515389][T10215] R13: 00007f75d3616038 R14: 00007f75d3615fa0 R15: 00007f75d373fa48
[  318.515406][T10215]  </TASK>
[  318.819143][ T5761] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  318.822580][ T5634] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  318.838958][ T5634] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  318.850620][ T5634] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  318.867039][ T5634] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  318.876862][ T5634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  318.885076][ T5634] usb 1-1: SerialNumber: syz
[  318.939515][T10217] loop5: detected capacity change from 0 to 7
[  318.946938][T10217] Dev loop5: unable to read RDB block 7
[  318.955122][T10217]  loop5: unable to read partition table
[  318.962183][T10217] loop5: partition table beyond EOD, truncated
[  318.971379][T10217] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  319.030443][ T5761] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  319.045959][ T5761] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  319.080285][ T5761] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  319.091510][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  319.113784][ T5761] usb 4-1: SerialNumber: syz
[  319.143701][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'.
[  319.195110][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'.
[  319.213887][T10197] 8021q: adding VLAN 0 to HW filter on device bond2
[  319.286069][T10197] macvlan2: entered promiscuous mode
[  319.292359][T10197] macvlan2: entered allmulticast mode
[  319.302398][T10197] bond2: (slave macvlan2): Opening slave failed
[  319.353526][ T5761] usb 4-1: 0:2 : does not exist
[  319.357906][ T5721] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  319.394241][ T5634] usb 1-1: USB disconnect, device number 66
[  319.454062][ T5761] usb 4-1: USB disconnect, device number 70
[  319.508684][ T5721] usb 3-1: Using ep0 maxpacket: 32
[  319.523139][ T5647] udevd[5647]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  319.524995][ T5721] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  319.570370][ T5721] usb 3-1: config 0 has no interface number 0
[  319.586953][ T5721] usb 3-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[  319.611624][ T5721] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  319.621863][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.641782][ T5721] usb 3-1: Product: syz
[  319.647495][ T5721] usb 3-1: Manufacturer: syz
[  319.655912][ T5721] usb 3-1: SerialNumber: syz
[  319.669075][ T5721] usb 3-1: config 0 descriptor??
[  319.681574][ T5721] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  319.699849][ T5721] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22
[  319.947594][T10221] sctp: [Deprecated]: syz.2.1226 (pid 10221) Use of int in max_burst socket option.
[  319.947594][T10221] Use struct sctp_assoc_value instead
[  320.144628][T10231] team0: entered promiscuous mode
[  320.174821][T10231] team_slave_0: entered promiscuous mode
[  320.197495][T10231] team_slave_1: entered promiscuous mode
[  320.217616][T10231] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  320.270629][T10232] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  320.603717][T10255] FAULT_INJECTION: forcing a failure.
[  320.603717][T10255] name failslab, interval 1, probability 0, space 0, times 0
[  320.671855][T10255] CPU: 1 UID: 0 PID: 10255 Comm: syz.1.1234 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  320.671890][T10255] Tainted: [L]=SOFTLOCKUP
[  320.671898][T10255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  320.671909][T10255] Call Trace:
[  320.671917][T10255]  <TASK>
[  320.671926][T10255]  dump_stack_lvl+0xe8/0x150
[  320.671955][T10255]  should_fail_ex+0x412/0x560
[  320.671981][T10255]  should_failslab+0xa8/0x100
[  320.672002][T10255]  __kmalloc_cache_noprof+0x88/0x660
[  320.672030][T10255]  ? sctp_add_bind_addr+0x8c/0x370
[  320.672050][T10255]  ? __pfx_sctp_get_port_local+0x10/0x10
[  320.672079][T10255]  sctp_add_bind_addr+0x8c/0x370
[  320.672097][T10255]  ? sctp_auto_asconf_init+0x15c/0x1e0
[  320.672125][T10255]  sctp_do_bind+0x5b2/0x9d0
[  320.672161][T10255]  sctp_connect_new_asoc+0x270/0x6b0
[  320.672188][T10255]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  320.672216][T10255]  ? __local_bh_enable_ip+0xd0/0x130
[  320.672234][T10255]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  320.672257][T10255]  ? security_sctp_bind_connect+0x7e/0x2c0
[  320.672279][T10255]  sctp_sendmsg+0x1576/0x2c50
[  320.672311][T10255]  ? __pfx_sctp_sendmsg+0x10/0x10
[  320.672332][T10255]  ? aa_sk_perm+0x6d5/0x900
[  320.672351][T10255]  ? __might_fault+0xaf/0x130
[  320.672375][T10255]  ? __pfx_aa_sk_perm+0x10/0x10
[  320.672413][T10255]  ? sock_rps_record_flow+0x19/0x350
[  320.672429][T10255]  ? __pfx_inet_sendmsg+0x10/0x10
[  320.672446][T10255]  ? inet_sendmsg+0x2f4/0x370
[  320.672462][T10255]  ? __pfx_inet_sendmsg+0x10/0x10
[  320.672479][T10255]  __sys_sendto+0x5de/0x710
[  320.672502][T10255]  ? __pfx___sys_sendto+0x10/0x10
[  320.672521][T10255]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  320.672547][T10255]  ? __fget_files+0x3a0/0x420
[  320.672574][T10255]  ? ksys_write+0x242/0x270
[  320.672596][T10255]  ? __pfx_ksys_write+0x10/0x10
[  320.672621][T10255]  __x64_sys_sendto+0xde/0x100
[  320.672643][T10255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.672661][T10255]  do_syscall_64+0x174/0x580
[  320.672677][T10255]  ? trace_irq_disable+0x3b/0x140
[  320.672698][T10255]  ? clear_bhb_loop+0x40/0x90
[  320.672716][T10255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.672731][T10255] RIP: 0033:0x7f75d339ce59
[  320.672747][T10255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  320.672759][T10255] RSP: 002b:00007f75d4234028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  320.672777][T10255] RAX: ffffffffffffffda RBX: 00007f75d3615fa0 RCX: 00007f75d339ce59
[  320.672787][T10255] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003
[  320.672796][T10255] RBP: 00007f75d4234090 R08: 0000200000000300 R09: 000000000000001c
[  320.672806][T10255] R10: 0000000004000854 R11: 0000000000000246 R12: 0000000000000001
[  320.672815][T10255] R13: 00007f75d3616038 R14: 00007f75d3615fa0 R15: 00007f75d373fa48
[  320.672839][T10255]  </TASK>
[  321.060744][T10262] loop5: detected capacity change from 0 to 7
[  321.109946][T10262] Dev loop5: unable to read RDB block 7
[  321.161263][    T9] usb 3-1: USB disconnect, device number 86
[  321.170085][T10262]  loop5: unable to read partition table
[  321.177173][T10262] loop5: partition table beyond EOD, truncated
[  321.184237][T10262] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  321.243024][T10261] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  321.494357][T10277] fuse: Bad value for 'fd'
[  321.511987][T10265] xt_hashlimit: size too large, truncated to 1048576
[  321.675694][T10282] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1240'.
[  321.688507][ T5721] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  321.848081][ T5721] usb 5-1: Using ep0 maxpacket: 32
[  321.848119][   T30] kauditd_printk_skb: 73 callbacks suppressed
[  321.848137][   T30] audit: type=1326 audit(1780422343.377:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.2.1241" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e0d59ce59 code=0x0
[  321.857707][ T5721] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  321.924883][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.950409][ T5721] usb 5-1: config 0 descriptor??
[  321.971398][ T5721] gspca_main: sunplus-2.14.0 probing 041e:400b
[  322.183443][ T5721] gspca_sunplus: reg_w_riv err -71
[  322.198624][ T5721] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  322.213511][ T5721] usb 5-1: USB disconnect, device number 59
[  322.423770][ T5721] IPVS: starting estimator thread 0...
[  322.428846][T10294] ip6gre0: Caught tx_queue_len zero misconfig
[  322.520681][T10295] IPVS: using max 25 ests per chain, 60000 per kthread
[  322.590077][    T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  322.608613][ T5634] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  322.759815][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.773735][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.791945][ T5634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.792602][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.815347][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  322.816235][ T5634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.824990][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.838291][T10305] veth0_to_bond: Caught tx_queue_len zero misconfig
[  322.845050][ T5634] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  322.852356][    T9] usb 1-1: config 0 descriptor??
[  322.868433][ T5721] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  322.889550][ T5634] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  322.903251][   T30] audit: type=1800 audit(1780422344.437:603): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1250" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  322.903918][ T5634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.968907][ T5634] usb 4-1: config 0 descriptor??
[  323.040741][ T5721] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  323.050547][ T5721] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  323.063598][ T5721] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  323.076204][ T5721] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[  323.089687][ T5721] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[  323.104455][ T5721] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  323.114558][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  323.126711][ T5721] usb 2-1: Product: syz
[  323.133126][ T5721] usb 2-1: Manufacturer: syz
[  323.156044][ T5721] cdc_wdm 2-1:1.0: skipping garbage
[  323.163003][ T5721] cdc_wdm 2-1:1.0: skipping garbage
[  323.166982][T10312] netlink: 'syz.2.1252': attribute type 39 has an invalid length.
[  323.169484][ T5721] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  323.258412][   T29] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  323.310398][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  323.317179][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  323.329382][    T9] usb 1-1: USB disconnect, device number 67
[  323.410333][ T5634] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  323.426075][   T29] usb 5-1: Using ep0 maxpacket: 8
[  323.441099][ T5761] usb 2-1: USB disconnect, device number 82
[  323.442726][   T29] usb 5-1: unable to get BOS descriptor or descriptor too short
[  323.472497][ T5721] usb 3-1: new full-speed USB device number 87 using dummy_hcd
[  323.493213][   T29] usb 5-1: config 4 interface 0 has no altsetting 0
[  323.511117][   T29] usb 5-1: string descriptor 0 read error: -22
[  323.518966][   T29] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  323.528756][   T29] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  323.558235][   T29] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  323.581040][   T29] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  323.591987][   T29] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  323.601377][   T29] usb 5-1: media controller created
[  323.621709][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  323.650017][ T5721] usb 3-1: config 0 has no interfaces?
[  323.659208][ T5721] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  323.671098][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.693382][ T5721] usb 3-1: config 0 descriptor??
[  323.811874][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.822827][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.963707][ T5761] usb 3-1: USB disconnect, device number 87
[  324.049770][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'.
[  324.751636][   T29] zl10353_read_register: readreg error (reg=127, ret==0)
[  324.761475][T10303] usb 5-1: dvb_usb_au6610: wlen=0, aborting
[  324.863396][T10341] FAULT_INJECTION: forcing a failure.
[  324.863396][T10341] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.883310][T10341] CPU: 0 UID: 0 PID: 10341 Comm: syz.2.1261 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  324.883345][T10341] Tainted: [L]=SOFTLOCKUP
[  324.883352][T10341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  324.883363][T10341] Call Trace:
[  324.883372][T10341]  <TASK>
[  324.883380][T10341]  dump_stack_lvl+0xe8/0x150
[  324.883409][T10341]  should_fail_ex+0x412/0x560
[  324.883438][T10341]  _copy_from_iter+0x1d3/0x1670
[  324.883459][T10341]  ? rcu_is_watching+0x15/0xb0
[  324.883486][T10341]  ? rcu_is_watching+0x15/0xb0
[  324.883514][T10341]  ? __pfx__copy_from_iter+0x10/0x10
[  324.883533][T10341]  ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0
[  324.883581][T10341]  ? tipc_msg_build+0x40d/0xf00
[  324.883606][T10341]  tipc_msg_build+0x466/0xf00
[  324.883635][T10341]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  324.883663][T10341]  ? __pfx_tipc_msg_build+0x10/0x10
[  324.883692][T10341]  ? tipc_sk_filtering+0x13c/0x510
[  324.883724][T10341]  __tipc_sendstream+0x8a8/0x1280
[  324.883782][T10341]  ? __pfx___tipc_sendstream+0x10/0x10
[  324.883802][T10341]  ? __pfx_woken_wake_function+0x10/0x10
[  324.883832][T10341]  ? tipc_sendstream+0x47/0x70
[  324.883862][T10341]  ? __local_bh_enable_ip+0xd0/0x130
[  324.883888][T10341]  tipc_sendstream+0x55/0x70
[  324.883917][T10341]  ? __pfx_tipc_sendstream+0x10/0x10
[  324.883942][T10341]  sock_write_iter+0x49b/0x4f0
[  324.883970][T10341]  ? __pfx_sock_write_iter+0x10/0x10
[  324.884004][T10341]  ? bpf_lsm_file_permission+0x9/0x20
[  324.884040][T10341]  ? security_file_permission+0x75/0x260
[  324.884071][T10341]  vfs_write+0x61d/0xb90
[  324.884107][T10341]  ? __pfx_vfs_write+0x10/0x10
[  324.884142][T10341]  ? __fget_files+0x2a/0x420
[  324.884175][T10341]  ksys_write+0x150/0x270
[  324.884204][T10341]  ? __pfx_ksys_write+0x10/0x10
[  324.884238][T10341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.884259][T10341]  do_syscall_64+0x174/0x580
[  324.884279][T10341]  ? trace_irq_disable+0x3b/0x140
[  324.884305][T10341]  ? clear_bhb_loop+0x40/0x90
[  324.884325][T10341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.884342][T10341] RIP: 0033:0x7f1e0d59ce59
[  324.884361][T10341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.884375][T10341] RSP: 002b:00007f1e0e52b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  324.884393][T10341] RAX: ffffffffffffffda RBX: 00007f1e0d815fa0 RCX: 00007f1e0d59ce59
[  324.884404][T10341] RDX: 000000002000011a RSI: 0000200000000340 RDI: 0000000000000006
[  324.884415][T10341] RBP: 00007f1e0e52b090 R08: 0000000000000000 R09: 0000000000000000
[  324.884425][T10341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  324.884434][T10341] R13: 00007f1e0d816038 R14: 00007f1e0d815fa0 R15: 00007f1e0d93fa48
[  324.884462][T10341]  </TASK>
[  325.184173][   T29] usb 5-1: USB disconnect, device number 60
[  325.255532][T10345] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1263'.
[  325.883989][T10364] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.894930][T10364] syzkaller0: entered promiscuous mode
[  325.911798][T10364] syzkaller0: entered allmulticast mode
[  325.930511][T10364] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  325.981107][T10364] tipc: Resetting bearer <eth:syzkaller0>
[  325.993789][T10363] tipc: Resetting bearer <eth:syzkaller0>
[  326.019314][T10363] tipc: Disabling bearer <eth:syzkaller0>
[  326.086467][T10371] loop8: detected capacity change from 0 to 8
[  326.096604][T10371] Dev loop8: unable to read RDB block 8
[  326.103726][T10371]  loop8: unable to read partition table
[  326.111682][T10371] loop8: partition table beyond EOD, truncated
[  326.119783][T10371] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  326.121194][ T5761] usb 4-1: reset high-speed USB device number 71 using dummy_hcd
[  326.166687][ T5761] usb 4-1: device reset changed ep0 maxpacket size!
[  326.198298][   T29] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  326.204894][    T9] usb 4-1: USB disconnect, device number 71
[  326.368598][    T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  326.368708][   T29] usb 3-1: Using ep0 maxpacket: 16
[  326.405779][   T29] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.444838][   T29] usb 3-1: config 0 interface 0 has no altsetting 0
[  326.465167][   T29] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  326.493334][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.510283][T10380] loop5: detected capacity change from 0 to 7
[  326.518261][T10380] Dev loop5: unable to read RDB block 7
[  326.526219][T10380]  loop5: unable to read partition table
[  326.534843][T10380] loop5: partition table beyond EOD, truncated
[  326.536786][   T29] usb 3-1: config 0 descriptor??
[  326.542257][T10380] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  326.561854][    T9] usb 4-1: Using ep0 maxpacket: 8
[  326.579044][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  326.600429][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 983
[  326.613277][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32
[  326.640572][    T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40
[  326.652327][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.664910][    T9] usb 4-1: Product: syz
[  326.676431][    T9] usb 4-1: Manufacturer: syz
[  326.683414][    T9] usb 4-1: SerialNumber: syz
[  326.734625][T10362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  326.758639][T10362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  327.000952][T10362] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  327.059318][   T29] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  327.108579][ T5634] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[  327.241967][T10369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.269985][T10369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.313889][ T5634] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[  327.381001][ T5634] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  327.459873][ T5634] usb 1-1: config 0 interface 0 has no altsetting 0
[  327.481556][ T5634] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  327.522310][ T5634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.534363][T10386] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  327.541423][T10386] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  327.560758][ T5634] usb 1-1: config 0 descriptor??
[  327.575332][T10386] vhci_hcd vhci_hcd.0: Device attached
[  327.664421][   T29] usb 3-1: USB disconnect, device number 88
[  327.720817][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  327.745415][    T9] usb 4-1: MIDIStreaming interface descriptor not found
[  327.849357][ T5705] usb 36-1: SetAddress Request (2) to port 0
[  327.881049][T10402] netlink: 'syz.4.1280': attribute type 2 has an invalid length.
[  327.939581][ T5705] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd
[  327.972608][    T9] usb 4-1: USB disconnect, device number 72
[  328.086205][ T5634] lenovo 0003:17EF:60EE.0015: ignoring exceeding usage max
[  328.144548][ T5634] lenovo 0003:17EF:60EE.0015: unknown main item tag 0x6
[  328.192481][ T5634] lenovo 0003:17EF:60EE.0015: ignoring exceeding usage max
[  328.326266][ T5634] lenovo 0003:17EF:60EE.0015: hidraw0: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0
[  328.438844][ T5634] lenovo 0003:17EF:60EE.0015: Failed to switch middle button: -71
[  328.487630][ T5634] lenovo 0003:17EF:60EE.0015: Fn-lock setting failed: -71
[  328.509078][ T5634] lenovo 0003:17EF:60EE.0015: Sensitivity setting failed: -71
[  328.575596][ T5634] usb 1-1: USB disconnect, device number 68
[  329.238234][    T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  329.256183][T10397] vhci_hcd: connection reset by peer
[  329.298386][ T3383] vhci_hcd vhci_hcd.1: stop threads
[  329.322534][ T3383] vhci_hcd vhci_hcd.1: release socket
[  329.341049][ T3383] vhci_hcd vhci_hcd.1: disconnect device
[  329.418287][ T5634] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  329.588046][ T5634] usb 1-1: Using ep0 maxpacket: 32
[  329.599963][ T5634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.627722][ T5634] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  329.665585][ T5634] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  329.687198][ T5634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.718892][ T5634] usb 1-1: config 0 descriptor??
[  329.738179][ T5761] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  329.941927][ T5761] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.978813][ T5761] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  330.013263][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.047477][ T5761] usb 3-1: config 0 descriptor??
[  330.150707][ T5634] lenovo 0003:17EF:6062.0016: unknown main item tag 0x3
[  330.176765][ T5634] lenovo 0003:17EF:6062.0016: unknown main item tag 0x0
[  330.205457][ T5634] lenovo 0003:17EF:6062.0016: unknown main item tag 0x0
[  330.232515][ T5634] lenovo 0003:17EF:6062.0016: unknown main item tag 0x0
[  330.264755][ T5634] lenovo 0003:17EF:6062.0016: unknown main item tag 0x0
[  330.289535][ T5634] lenovo 0003:17EF:6062.0016: unknown main item tag 0x0
[  330.291322][ T5761] usbhid 3-1:0.0: can't add hid device: -71
[  330.316257][ T5634] lenovo 0003:17EF:6062.0016: unknown main item tag 0x0
[  330.333499][ T5634] lenovo 0003:17EF:6062.0016: unknown main item tag 0x0
[  330.334524][ T5761] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  330.394424][ T5634] lenovo 0003:17EF:6062.0016: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0
[  330.401250][ T5761] usb 3-1: USB disconnect, device number 89
[  330.867948][ T5761] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  330.876360][ T5713] usb 1-1: USB disconnect, device number 69
[  331.044760][ T5761] usb 3-1: Using ep0 maxpacket: 32
[  331.057512][ T5761] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.068673][  T807] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  331.088352][ T5761] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  331.103273][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.128559][ T5761] usb 3-1: config 0 descriptor??
[  331.148830][T10445] netlink: 'syz.0.1293': attribute type 1 has an invalid length.
[  331.162102][ T5761] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  331.199172][ T5634] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  331.222907][ T5761] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  331.264145][  T807] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  331.286150][  T807] usb 2-1: config 1 interface 0 has no altsetting 0
[  331.375923][ T5634] usb 4-1: config 0 has an invalid interface number: 81 but max is 0
[  331.398219][T10445] 8021q: adding VLAN 0 to HW filter on device bond3
[  331.405190][ T5634] usb 4-1: config 0 has no interface number 0
[  331.409578][  T807] usb 2-1: string descriptor 0 read error: -22
[  331.418332][  T807] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40
[  331.439015][  T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.443433][ T5634] usb 4-1: too many endpoints for config 0 interface 81 altsetting 143: 84, using maximum allowed: 30
[  331.477646][ T5634] usb 4-1: config 0 interface 81 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 84
[  331.489949][  T807] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[  331.494735][ T5634] usb 4-1: config 0 interface 81 has no altsetting 0
[  331.520559][ T5634] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  331.534059][T10447] bond3: (slave geneve2): making interface the new active one
[  331.540366][ T5634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.562850][ T5634] usb 4-1: Product: syz
[  331.574658][T10447] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  331.583129][ T5634] usb 4-1: Manufacturer: syz
[  331.603542][ T5634] usb 4-1: SerialNumber: syz
[  331.624186][T10454] syzkaller0: entered promiscuous mode
[  331.634003][ T5634] usb 4-1: config 0 descriptor??
[  331.644615][T10454] syzkaller0: entered allmulticast mode
[  331.753150][T10458] loop4: detected capacity change from 0 to 2640
[  331.797452][T10458] buffer_io_error: 322 callbacks suppressed
[  331.797475][T10458] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  331.823637][T10458] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  331.833267][T10458] Buffer I/O error on dev loop4, logical block 2, lost async page write
[  331.846122][T10458] Buffer I/O error on dev loop4, logical block 3, lost async page write
[  331.860267][T10458] Buffer I/O error on dev loop4, logical block 4, lost async page write
[  331.871747][T10458] Buffer I/O error on dev loop4, logical block 5, lost async page write
[  331.883314][T10458] Buffer I/O error on dev loop4, logical block 6, lost async page write
[  331.934817][T10458] Buffer I/O error on dev loop4, logical block 7, lost async page write
[  331.956918][T10458] Buffer I/O error on dev loop4, logical block 8, lost async page write
[  331.967579][T10458] Buffer I/O error on dev loop4, logical block 9, lost async page write
[  331.995821][  T807] usb 3-1: USB disconnect, device number 90
[  332.006554][  T807] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  332.008581][ T5634] peak_usb 4-1:0.81: probe with driver peak_usb failed with error 81
[  332.086672][ T5634] usb 4-1: USB disconnect, device number 73
[  332.242282][T10473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1299'.
[  332.483082][T10483] netlink: 'syz.0.1302': attribute type 3 has an invalid length.
[  332.648390][ T5721] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  332.802023][ T5721] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  332.815961][ T5721] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  332.837080][T10492] macsec1: entered promiscuous mode
[  332.868631][ T5721] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  332.878853][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  332.888552][    T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  332.891826][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  332.952364][ T5721] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  332.972567][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  332.982715][ T5721] usb 5-1: Product: syz
[  332.990735][ T5721] usb 5-1: Manufacturer: syz
[  333.025267][ T5721] cdc_wdm 5-1:1.0: skipping garbage
[  333.054590][ T5721] cdc_wdm 5-1:1.0: skipping garbage
[  333.072037][ T5705] usb 36-1: device descriptor read/8, error -110
[  333.080461][ T5721] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  333.091027][ T5721] cdc_wdm 5-1:1.0: Unknown control protocol
[  333.092194][    T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  333.146766][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.185277][    T9] usb 3-1: Product: syz
[  333.200771][    T9] usb 3-1: Manufacturer: syz
[  333.214485][    T9] usb 3-1: SerialNumber: syz
[  333.233768][    C0] wdm_int_callback: 5696 callbacks suppressed
[  333.233788][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  333.247667][    C0] wdm_int_callback: 5696 callbacks suppressed
[  333.247694][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  333.260775][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  333.267556][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  333.273813][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  333.280487][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  333.286980][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  333.293632][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  333.300233][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  333.306924][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  333.313581][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  333.320572][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  333.327730][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  333.334639][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  333.341384][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  333.348341][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  333.355010][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  333.361727][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  333.369178][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  333.376906][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  333.384746][   T10] usb 5-1: USB disconnect, device number 62
[  333.390879][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  333.462334][T10478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.482149][T10478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.649231][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  333.665952][T10488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.668975][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[  333.697096][T10488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.707466][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  333.710129][ T5705] usb usb36-port1: attempt power cycle
[  333.784772][ T5634] usb 2-1: USB disconnect, device number 83
[  333.828350][   T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  333.867992][ T5761] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  334.000384][   T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  334.009300][   T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  334.020623][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  334.030219][ T5761] usb 4-1: Using ep0 maxpacket: 16
[  334.036135][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  334.047835][  T807] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  334.055943][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  334.070128][ T5761] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  334.078753][ T5761] usb 4-1: config 0 has no interface number 0
[  334.086476][   T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  334.096354][   T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  334.104976][   T10] usb 5-1: Product: syz
[  334.110096][ T5761] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  334.119558][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.128135][   T10] usb 5-1: Manufacturer: syz
[  334.134481][ T5761] usb 4-1: Product: syz
[  334.140918][ T5761] usb 4-1: Manufacturer: syz
[  334.147159][ T5761] usb 4-1: SerialNumber: syz
[  334.153311][   T10] cdc_wdm 5-1:1.0: skipping garbage
[  334.158742][   T10] cdc_wdm 5-1:1.0: skipping garbage
[  334.166838][ T5761] usb 4-1: config 0 descriptor??
[  334.173749][   T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  334.180457][   T10] cdc_wdm 5-1:1.0: Unknown control protocol
[  334.191001][ T5761] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  334.217994][  T807] usb 1-1: Using ep0 maxpacket: 16
[  334.225513][  T807] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  334.238349][  T807] usb 1-1: New USB device found, idVendor=2001, idProduct=3a04, bcdDevice= f.ab
[  334.248238][  T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.256367][  T807] usb 1-1: Product: syz
[  334.260918][  T807] usb 1-1: Manufacturer: syz
[  334.266110][  T807] usb 1-1: SerialNumber: syz
[  334.271460][ T5634] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  334.309589][ T5705] usb usb36-port1: unable to enumerate USB device
[  334.390384][ T5705] usb 5-1: USB disconnect, device number 63
[  334.430500][ T5634] usb 2-1: Using ep0 maxpacket: 8
[  334.449807][ T5634] usb 2-1: config 4 has an invalid interface number: 86 but max is 0
[  334.468733][ T5634] usb 2-1: config 4 has no interface number 0
[  334.479851][ T5634] usb 2-1: config 4 interface 86 has no altsetting 0
[  334.502810][ T5634] usb 2-1: New USB device found, idVendor=18ec, idProduct=3188, bcdDevice=8a.56
[  334.513630][ T5634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.523163][ T5634] usb 2-1: Product: syz
[  334.527637][ T5634] usb 2-1: Manufacturer: syz
[  334.534598][ T5634] usb 2-1: SerialNumber: syz
[  334.655703][T10509] netlink: 'syz.4.1311': attribute type 39 has an invalid length.
[  334.773472][ T5634] uvcvideo 2-1:4.86: Found Unit with invalid ID 0
[  334.802315][ T5634] uvcvideo 2-1:4.86: probe with driver uvcvideo failed with error -22
[  334.841655][ T5634] usb 2-1: USB disconnect, device number 84
[  334.931685][ T5761] gspca_spca1528: reg_w err -110
[  334.968097][ T5761] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  335.072528][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  335.188144][   T10] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[  335.238211][T10514] netlink: 'syz.3.1306': attribute type 4 has an invalid length.
[  335.370464][   T10] usb 5-1: config 0 has no interfaces?
[  335.382989][   T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  335.401777][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.435125][   T10] usb 5-1: config 0 descriptor??
[  335.785619][   T10] usb 5-1: USB disconnect, device number 64
[  335.804243][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO
[  335.878819][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  335.906588][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  335.934843][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  335.961050][    T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  335.978336][ T5721] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  336.013849][    T9] usb 3-1: USB disconnect, device number 91
[  336.140866][ T5721] usb 2-1: config 253 has an invalid interface number: 130 but max is 0
[  336.154463][ T5721] usb 2-1: config 253 has no interface number 0
[  336.171033][ T5721] usb 2-1: config 253 interface 130 has no altsetting 0
[  336.188989][ T5721] usb 2-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed
[  336.199708][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.214041][ T5721] usb 2-1: Product: syz
[  336.225620][ T5721] usb 2-1: Manufacturer: syz
[  336.235732][ T5721] usb 2-1: SerialNumber: syz
[  336.635727][T10527] netlink: 'syz.4.1315': attribute type 4 has an invalid length.
[  336.692375][T10528] netlink: 'syz.4.1315': attribute type 4 has an invalid length.
[  336.864348][T10519] netlink: 'syz.1.1313': attribute type 21 has an invalid length.
[  336.895132][T10519] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1313'.
[  336.945386][ T5721] dvb-usb: found a 'EvolutePC TVWay+' in warm state.
[  337.001156][ T5721] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  337.053379][ T5721] dvbdev: DVB: registering new adapter (EvolutePC TVWay+)
[  337.087537][ T5721] usb 2-1: media controller created
[  337.199068][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  337.485899][ T5721] DVB: Unable to find symbol dib8000_attach()
[  337.513840][ T5721] dvb-usb: no frontend was attached by 'EvolutePC TVWay+'
[  337.523656][T10531] syz.1.1313(10531): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  337.747575][  T807] usb 1-1: Could not find all expected endpoints
[  337.749884][ T5721] rc_core: IR keymap rc-dib0700-nec not found
[  337.792234][ T5721] Registered IR keymap rc-empty
[  337.809865][  T807] usb 1-1: USB disconnect, device number 70
[  337.821483][ T5721] dvb-usb: could not initialize remote control.
[  337.833719][ T5705] usb 4-1: USB disconnect, device number 74
[  337.856022][ T5721] dvb-usb: EvolutePC TVWay+ successfully initialized and connected.
[  337.869337][T10543] sg_write: data in/out 33554392/14 bytes for SCSI command 0x6-- guessing data in;
[  337.869337][T10543]    program syz.0.1318 not setting count and/or reply_len properly
[  338.091328][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'.
[  338.153818][T10552] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1320'.
[  338.294664][T10558] binder: 10556:10558 ioctl c0306201 200000000680 returned -14
[  338.312533][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'.
[  338.569399][    T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  338.739911][    T9] usb 1-1: Using ep0 maxpacket: 8
[  338.758511][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  338.772250][    T9] usb 1-1: config 4 interface 0 has no altsetting 0
[  338.825921][    T9] usb 1-1: string descriptor 0 read error: -22
[  338.842878][    T9] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  338.868518][    T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  338.933513][    T9] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  338.976158][    T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  338.994385][    T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  339.042811][    T9] usb 1-1: media controller created
[  339.062138][ T5721] IPVS: starting estimator thread 0...
[  339.117262][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  339.170262][T10578] IPVS: using max 28 ests per chain, 67200 per kthread
[  339.190384][T10557] ------------[ cut here ]------------
[  339.197572][T10557] usb 2-1: BOGUS control dir, pipe 80005580 doesn't match bRequestType c0
[  339.206700][T10557] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.0.1322/10557
[  339.218216][T10557] Modules linked in:
[  339.224202][T10557] CPU: 0 UID: 0 PID: 10557 Comm: syz.0.1322 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  339.236047][T10557] Tainted: [L]=SOFTLOCKUP
[  339.240949][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  339.251386][T10557] RIP: 0010:usb_submit_urb+0x1115/0x18b0
[  339.257093][T10557] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9
[  339.277133][T10557] RSP: 0018:ffffc9000cff7948 EFLAGS: 00010246
[  339.283311][T10557] RAX: 0000000000000000 RBX: ffff888027ead300 RCX: 0000000080005580
[  339.291376][T10557] RDX: ffff8880342057a0 RSI: ffffffff8c80c0e0 RDI: ffffffff903d9570
[  339.299519][T10557] RBP: 1ffff1100880464c R08: 00000000000000c0 R09: 0000000000000000
[  339.307634][T10557] R10: ffffc9000cff7a40 R11: fffff520019fef54 R12: ffff888077868100
[  339.315835][T10557] R13: ffff888044023260 R14: 0000000080005580 R15: ffff8880342057a0
[  339.324261][T10557] FS:  00007f4a3f1a76c0(0000) GS:ffff88812529c000(0000) knlGS:0000000000000000
[  339.333666][T10557] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  339.340495][T10557] CR2: 00002000000a4030 CR3: 00000000405aa000 CR4: 00000000003526f0
[  339.348962][T10557] Call Trace:
[  339.352625][T10557]  <TASK>
[  339.355580][T10557]  ? __init_swait_queue_head+0xa9/0x150
[  339.361393][T10557]  usb_start_wait_urb+0x13f/0x5b0
[  339.366502][T10557]  ? rcu_is_watching+0x15/0xb0
[  339.371501][T10557]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  339.377112][T10557]  ? trace_kmalloc+0x2a/0xf0
[  339.381873][T10557]  usb_control_msg+0x234/0x3e0
[  339.387534][T10557]  dib0700_i2c_xfer+0xbb2/0xf80
[  339.392479][T10557]  __i2c_transfer+0x79a/0x1f70
[  339.397384][T10557]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  339.403445][T10557]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  339.409480][T10557]  ? i2c_transfer+0xc8/0x2d0
[  339.414128][T10557]  i2c_transfer+0x1cc/0x2d0
[  339.418843][T10557]  i2cdev_ioctl_rdwr+0x460/0x740
[  339.424118][T10557]  i2cdev_ioctl+0x6a5/0x880
[  339.428770][T10557]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  339.433853][T10557]  ? __fget_files+0x3a0/0x420
[  339.438717][T10557]  ? __fget_files+0x2a/0x420
[  339.443698][T10557]  ? bpf_lsm_file_ioctl+0x9/0x20
[  339.448938][T10557]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  339.454260][T10557]  __se_sys_ioctl+0xfc/0x170
[  339.459278][T10557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.465462][T10557]  do_syscall_64+0x174/0x580
[  339.470229][T10557]  ? clear_bhb_loop+0x40/0x90
[  339.474920][T10557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.480952][T10557] RIP: 0033:0x7f4a3e39ce59
[  339.485421][T10557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  339.505844][T10557] RSP: 002b:00007f4a3f1a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  339.514416][T10557] RAX: ffffffffffffffda RBX: 00007f4a3e615fa0 RCX: 00007f4a3e39ce59
[  339.522908][T10557] RDX: 0000200000000380 RSI: 0000000000000707 RDI: 000000000000000c
[  339.531022][T10557] RBP: 00007f4a3e432d6f R08: 0000000000000000 R09: 0000000000000000
[  339.539250][T10557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  339.547384][T10557] R13: 00007f4a3e616038 R14: 00007f4a3e615fa0 R15: 00007f4a3e73fa48
[  339.555831][T10557]  </TASK>
[  339.559264][T10557] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  339.566647][T10557] CPU: 0 UID: 0 PID: 10557 Comm: syz.0.1322 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  339.577776][T10557] Tainted: [L]=SOFTLOCKUP
[  339.582220][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  339.592563][T10557] Call Trace:
[  339.595865][T10557]  <TASK>
[  339.598794][T10557]  vpanic+0x56c/0xa60
[  339.602798][T10557]  ? __pfx__printk+0x10/0x10
[  339.607485][T10557]  ? __pfx_vpanic+0x10/0x10
[  339.611984][T10557]  ? is_bpf_text_address+0x292/0x2b0
[  339.617307][T10557]  ? is_bpf_text_address+0x26/0x2b0
[  339.622526][T10557]  panic+0xc5/0xd0
[  339.626360][T10557]  ? __pfx_panic+0x10/0x10
[  339.630789][T10557]  __warn+0x315/0x4c0
[  339.634775][T10557]  ? usb_submit_urb+0x1053/0x18b0
[  339.639817][T10557]  ? usb_submit_urb+0x1053/0x18b0
[  339.644843][T10557]  __report_bug+0x29a/0x540
[  339.649355][T10557]  ? usb_submit_urb+0x1053/0x18b0
[  339.654502][T10557]  ? __pfx___report_bug+0x10/0x10
[  339.659618][T10557]  ? lockdep_hardirqs_on+0x7a/0x110
[  339.665079][T10557]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  339.671251][T10557]  report_bug_entry+0x19a/0x290
[  339.676130][T10557]  ? usb_submit_urb+0x1115/0x18b0
[  339.682126][T10557]  ? usb_submit_urb+0x111a/0x18b0
[  339.687208][T10557]  handle_bug+0xce/0x200
[  339.691591][T10557]  exc_invalid_op+0x1a/0x50
[  339.696144][T10557]  asm_exc_invalid_op+0x1a/0x20
[  339.701049][T10557] RIP: 0010:usb_submit_urb+0x1115/0x18b0
[  339.706791][T10557] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9
[  339.726502][T10557] RSP: 0018:ffffc9000cff7948 EFLAGS: 00010246
[  339.732602][T10557] RAX: 0000000000000000 RBX: ffff888027ead300 RCX: 0000000080005580
[  339.740750][T10557] RDX: ffff8880342057a0 RSI: ffffffff8c80c0e0 RDI: ffffffff903d9570
[  339.748810][T10557] RBP: 1ffff1100880464c R08: 00000000000000c0 R09: 0000000000000000
[  339.756781][T10557] R10: ffffc9000cff7a40 R11: fffff520019fef54 R12: ffff888077868100
[  339.764757][T10557] R13: ffff888044023260 R14: 0000000080005580 R15: ffff8880342057a0
[  339.772824][T10557]  ? usb_submit_urb+0x10a4/0x18b0
[  339.777878][T10557]  ? __init_swait_queue_head+0xa9/0x150
[  339.783448][T10557]  usb_start_wait_urb+0x13f/0x5b0
[  339.788519][T10557]  ? rcu_is_watching+0x15/0xb0
[  339.793448][T10557]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  339.799128][T10557]  ? trace_kmalloc+0x2a/0xf0
[  339.803763][T10557]  usb_control_msg+0x234/0x3e0
[  339.808697][T10557]  dib0700_i2c_xfer+0xbb2/0xf80
[  339.813791][T10557]  __i2c_transfer+0x79a/0x1f70
[  339.818931][T10557]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  339.824762][T10557]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  339.830747][T10557]  ? i2c_transfer+0xc8/0x2d0
[  339.835365][T10557]  i2c_transfer+0x1cc/0x2d0
[  339.840053][T10557]  i2cdev_ioctl_rdwr+0x460/0x740
[  339.844994][T10557]  i2cdev_ioctl+0x6a5/0x880
[  339.849498][T10557]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  339.854634][T10557]  ? __fget_files+0x3a0/0x420
[  339.859317][T10557]  ? __fget_files+0x2a/0x420
[  339.864000][T10557]  ? bpf_lsm_file_ioctl+0x9/0x20
[  339.869148][T10557]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  339.874224][T10557]  __se_sys_ioctl+0xfc/0x170
[  339.878829][T10557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.884981][T10557]  do_syscall_64+0x174/0x580
[  339.889582][T10557]  ? clear_bhb_loop+0x40/0x90
[  339.894345][T10557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.900231][T10557] RIP: 0033:0x7f4a3e39ce59
[  339.904672][T10557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  339.924466][T10557] RSP: 002b:00007f4a3f1a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  339.932895][T10557] RAX: ffffffffffffffda RBX: 00007f4a3e615fa0 RCX: 00007f4a3e39ce59
[  339.940887][T10557] RDX: 0000200000000380 RSI: 0000000000000707 RDI: 000000000000000c
[  339.949035][T10557] RBP: 00007f4a3e432d6f R08: 0000000000000000 R09: 0000000000000000
[  339.957527][T10557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  339.965542][T10557] R13: 00007f4a3e616038 R14: 00007f4a3e615fa0 R15: 00007f4a3e73fa48
[  339.973528][T10557]  </TASK>
[  339.976959][T10557] Kernel Offset: disabled
[  339.981358][T10557] Rebooting in 86400 seconds..