last executing test programs:

2m18.449365348s ago: executing program 2 (id=966):
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x15}}, 0x24, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$inet6_sctp(0xa, 0x801, 0x84)
unshare(0x28000600)
r0 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001b00)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xbc2809170e8a0bfa}]}]}, 0x20}}, 0x30000010)

2m17.847860196s ago: executing program 2 (id=969):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
mmap(&(0x7f00001b6000/0x3000)=nil, 0x3000, 0x2800007, 0x110, r1, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffe0}, {0x0, 0x8}, {0x5, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x24000050)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg0\x00', <r7=>0x0})
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25000000000800070002000000080005000100000008000100", @ANYRES32=0x0, @ANYBLOB="060006004e20000008000100", @ANYRES32=r7, @ANYBLOB="140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74947750040c4dbb52f518c78042fb542b9cef2b29d2943b0fadbe61f721cae65d5af67f3d20b62aa2abc6592de9a61ec196e727b41820884e569975fd72dd4c00d9d404ee1f71b9174e60e8ab392ab5e5e41056ae2dbab58bf64b4cf50100c7b094a766a71a1883bae33f41b587a9ec2aca2e7e5eb0bce618dc2cf6dc74b68de8336ae191ebb1792636e7708d1c3e5af0a3250ea0f9827a1c34e6dc4f49d8bb8b89d2241daa07702822f"], 0x74}, 0x1, 0x0, 0x0, 0x24048880}, 0x4000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r8], 0x38}, 0x1, 0x0, 0x0, 0x48004}, 0x810)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x39}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r10 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x4040044)
connect$unix(r2, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000200)={0x3, 0xfffff800, 0xffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0)

2m17.371358033s ago: executing program 2 (id=975):
syz_emit_ethernet(0x19e, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "bf3edc", 0x168, 0x0, 0x0, @local, @remote, {[@hopopts={0x2b, 0x2b, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @generic={0x4}, @calipso={0x7, 0x30, {0x3, 0xa, 0x1, 0x9, [0x8, 0x5, 0xf3f4, 0x7, 0xffffffffffff0dc1]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x7, 0xff, [0x6, 0xbcb5, 0xffff]}}, @jumbo={0xc2, 0x4, 0xe000}, @ra, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0xeb, "078bab8846c53cda5067d77dffd0e043b76f520947d9240721a63ac5409f9fa8e8e27bb7805c1fcff2d5daa2ba9960b88af9de9540168f850fb690752be92ceb41943b942253ec1731d3c63e51eeeb82548d8dbcaf4824a708fa0681c08cdeb33d962ef392599fb25a68f90ef1c21a0b8c88682178065c64a520d9dad97241041270a96e969703f26ada64e8b03cf47e4f36d8d4c03223a03a681d46abef26cf9f364efa368b28df75dd1eab374bb5486cec5e0983b32cef563291431e2d41956741c88021d8b12a990e1d04a924bf070b4039e55a0ff4fb9a9d2f1b6fe962275f6f2b1efba0872d09dfa4"}, @enc_lim={0x4, 0x1, 0x9}]}]}}}}}, 0x0)

2m17.116208335s ago: executing program 2 (id=976):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"fe5790e7a0da19ad98708d92e29a7e82e40798ae8d70cd4d4ca03ea114f532fc3175a5af8bc17ca41c324087a4235bf0db29025f9781be02aad5a5a6a7dd5699632c9cb68fafbf1c1a83c4a516cbffaa25a3d5f2ece0457c4b9b4b3276febfbb353958efa9a8956a1d5bad8267796cde344b6116c36a8500bc1a897acfc40bef6f58a5b2f4e84657cf4c93a5947b016f03ebd11d77b333c0827f168dda2309aa806097c7eaf7e7d23aa309df737e2126cbf011be37ac329b150200b90f069d4f8353a43efa32b6c29679e6a7f354724614c0b48a37096fdc907f5a53e1469680d27462b8a748c774657b138cf634f157add935bb426fc3c66d9b9ecc45b3b13756145c68f1198876353e12eabc7ef7baa35c8827056f5db369569b0d8729a2ca00a3c8b16e6b3af50d5577b3e92058c65f45d0af8fa3403682b7b67ddc0ac1aeb23a3076bbcf82cb82ef947d69db426521cb68b162612aed50635b58b741f7e2756301f0275e8c3b2342782b3d0e9a28bf50f9acb97bfbbccd0a05bbf8872d416a621d8b0cbe7a7dfd24cdadfb3d27ff6c4323e41a3936761371d769eafa1a6bb993de11d262820503c68cb25faa086fc62c9dbcd19e872303ac1dec681192fc3eba114e434737db8994b35d3ab2103a24d102ae5f700a00b7826afc8148da355a4a9e5fdd91d66654dee5d4610d523db2df52567a1f66ae8e910f57b39e8d475ed866969a9394efda78dc4c698c17813f99c48145674bf680fe3496ae5c5be611ef4f70a3a12ed3c08e5f185de3dc2787bc45330efd8c556da0c201f92fc9f7653bd74b3675a24263aa88a6fc7f269446e69441bdb1b3098c7b0fc35edef53ef335c3dce90e118f61f4acd8dc61e48c206f0acc9e64ff846e361f18ef0e91a9df5478086a6cc2b50ccac12452a3ca748b52d78b2c09f9b393da5551fad817ed35eaa53f0e8f85caf217dfcea04ef803b11e653da81f1b47656608a47fb02f8565d5efc648a0d0d4b8c848f4f5120f835246a17f93c983f696a5c8da4d35675b18881949ff7e19dc40ea42ed7b98d6b45963f51ebf7558c05d3cb01f776becc5bbd3051d468bdd9d5ac02c2412f0589c4dfc28eaea3ed18e2190c6871d98bab1d330e0d941faf282ffefdbc51609af3d2da76f22e4065ad51b8703c594706fd25b7813f30d43b8cec53067309d97fb0eab17722d5f92dd945cec21bde40e69e2123ea1389e45d9b879e92f7819f9ec7d679500c37fb1bf7ffb9beab92d5315cdad78366a126e148f27ae6ca1cfa58c6eb4a1032a439ae37d858e964413e6203450ceb7f85795ba5b15bdc8a6b55531ce2f2ccc1ba21080ad287f530211187936114c47258da2ccd4c26122d5ae846c270c92165a29662bdc9332464618c2c00ac179460ec2b7ad9e30cd1cdb4b259f525533f3d300"})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4104aec6, &(0x7f0000002e40)={0x0, [{0x2, 0x618, 0xfffffff8, &(0x7f00000005c0)="f2d0fe755ec1c14d464a1a81a01d65204202f50fafb4081e9cd92531c3f27a7f3965ad11b93a844a186fdc4ad03590168565910615d540dda2e23b17ea0cf8d70d29ccf8541b1a8e7a72856546a22fa4f5c6979d07c3ec9911b7c0e0f0d5edbc39eed2d254c4421cb18405e2a4bbb155a2c71105b860e4ec6aaab84452a2ea08016fa546b119a9130d37ca7be1aba80d90187028e65394cd3427f94d658373e6489ef9d0d68bd54268d9fc8c8c966d0614654a4545707fdd36b2e6b37f0bbb7ccdb6fe"}, {0x2, 0xd8, 0x7, &(0x7f00000000c0)="a77d1c57fe7a0a83177a78429f3167dab681776fecbb28cc89b98b"}, {0x2, 0x138, 0x18000000, &(0x7f0000000100)="5f421733888d8dd5a59f44be73d1d8da19b3fac8e97acb23476a02a3031724bdc21440e1bed6ba"}, {0x0, 0x6a8, 0x6, &(0x7f00000006c0)="31e6c2ef211bbead42e7fcecdac475bff0e366f9a19595a905af15db571b9bacec09583a60521a8eb0b2a3d602221e182c980eb7573f3010cbf1e72fbf6133984b04b7b001fc2a6a990622e991fd189d70e72dbb8f50e630d5e3ce74ae4191fa4e6d4f069b5a701f5d0620444f4c99ad058ba9e110d0519a4492de6377c5e0749625fa1d75798193f946e0e3ff9500191163a61a8e29ac600e17cde3084bf6c3e5845ceb34f86647ec4c2529f9a9b5c315f000b0a97e503a7e38dab5cc808a8d8126753997eea22243d2f5bcf8202a7ff2072cf722"}, {0x1, 0x738, 0x9, &(0x7f00000007c0)="1214c48c1cf6d28ca1829352b2168728eadd2a9c26faa852f424478c24c00b12d701b123e0c087e5bc7cddfb8c375c2639e0839220547920a87c4ec2851c658765a77b0ed69da561e6c76daa769f81941c83c06258df20bef83d5d5b0032d77996bddcab21b30979a27495d4ec40178290fca01bf82a6fa0fad987d23ab4675d10fdcd38ea8f3cbb037fb4b3f136404f37b6fb0ee430e95e506de67c7fcecd0a3f6d16e6a3a69477657a79cab6cecb1b48a5fffe40c8ec00abd155b54905962a1b0555c8e68d1b582d8e6066089342897fb7153278bdc7dddcbc635584238fc7ef334f0e658b0f"}, {0x0, 0x368, 0x7, &(0x7f00000008c0)="8918663bd657dc66a58637b39ec323c7656b71fdb24ee77f3586f7f540e8583aada7fa1b0a236afe9e3ad0ce6d86a2f46042169f3d47835cfefd0d9c2ff7cdffce3add6cbb5e847d8b00be5c8fed841521dcba7f9791533109db972bbbaa46d97954e9f0519f29cf4239cdbe09"}, {0x0, 0x5b8, 0xffffffff, &(0x7f0000000940)="1418ce7f86cbffacb1cd6d8795dfab893785f508fec5c478f98cf6bd9f2e90de408174cf491063c012a990052be9a80dd8ee134450ceffea5ad110064f018ae87b9dd4bfffddd5315446a505d92cc2693129cbb2f935b54ec8e9903ee08a7093fe114599ecc700ffd4ca77271e15a79bdd6702620461e685d75981c55774e36866446654752a0b8111b2852b6c837e89842b29862832fc4e4d6c18fc3cef68400cc015605fffd23a954974bcf476336bdb20baf05b87d4"}, {0x3, 0x550, 0xff8, &(0x7f0000000a00)="d13895fc3f523b9ff58a33fe963b508ca98223b3c9585e2318ee59f2fa68f187edccd8b012cdbe0a66954bbb7cf222bd22f54f55e6f46162bcc1dfc76de884e74338d8d9915dccb0d0918ef46d525b8984c4bc522e38a6470a19e06fdd48aadfa0c59dda57afb7dfcee946356611b116b74f8e95d96d52c04cb2b030c4473fe7447ccfab38969bb1dc76f9ae7f7ba1583e1e6ae3348932556ac113ffdedb64f86539c5acf7fcc4ce37bf"}, {0x1, 0xb8, 0x0, &(0x7f0000000140)="e194bb8a6a23a7e1c9e5e513335fb5972268b5581aa3d1"}, {0x3, 0x750, 0x2000000, &(0x7f0000000ac0)="d7d8946782ad8a9db0837274160fda54e935a21e7e8e54d75ededf34ff47c0c4b75cc6095573a1f612e135c277ec20c38f8aec0c40e2e7260de4c219986b086cb260b155dfe7f1c1f7f2c4bddc88e8c2a5d3601c0ff14483e551d508d15f5d9aeaadfe4a53f2d0e68942214b3fb24dc724c49977003179b4bb38f159859e883133b8da97d590e1f34f850d9819118deda56bcda49164ff530012fc567637424c7f49fe8f8d2a04d8dd342668a9f8012be1607eb22d6fb9a479da080ebc5bbdd777c7c4859d8b2f6d4a6113ed11b12672b3a4c1da6cad905d67baa4131034e6ec680dba3146663b2f211f"}, {0x1, 0x8000, 0x7b2, &(0x7f0000000bc0)="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"}, {0x2, 0x2d8, 0x8, &(0x7f0000001bc0)="41635b4064aeab46b366f718a5e3506d7a567af9f1cbe5e9828096b506c553f1e2b0764caba3ca2ffba4ed125511daa7da2be5f6334bb28e3aa586dc96ee06baa32e48fb455cff7939c82d4a141f5a364ccd2351fd0d18b73e414a"}, {0x3, 0x648, 0xffffff5c, &(0x7f0000001c40)="5a1fa6a3b55e62027e30eda1c857c5466777241fe6aab8bdcabaa12ee68005f9e186adf118c42b244333522b49de59b9e55b83de850ee06c4edf71e79734bb57958d2730472cda1c0078dcea726e12503a3fda1157003a1883a9b12fa2c0ad10910c9deb71e08c13f6204d0a140b1e3aecf8ed17aeb1cbdf6bced6da3efcab2799f6910f3a05763cc9660bd7ab29e5ff9469cdc6fed7f473daea6199fb9a9fab58234cab055e95a255b369868013d5d95436954b680b439481b22f61d643671afbd19689f87e7b1609"}, {0x1, 0x130, 0x2, &(0x7f0000001d40)="7d359afb27b0eb81847cef10cf82ff50408fecc84189ab302bca013aa9da749409e2938e749c"}, {0x3, 0x8000, 0x400, &(0x7f0000001d80)="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"}, {0x3, 0x600, 0x8, &(0x7f0000002d80)="3887a95266d5ff9100af511f718d85e3019997655ab56ef1b3bd6747dde63cdd66ef2a58fdaac7f0d8f620cf92ef0f5ed3c7e98ffd3a8307c75323bec8a73ee0032f107abbe685a645f5be0395ce38c30b683f32050f9b04e2bed03d2c72bfbe3e7d1612425f826091ecf9e8290a498a3c40e50cfab43d8e445f7b448620aff4ad5480fe326f5aff1b7cc00362b68aea3427f5d8ad3ab9e256eace5f2fc8aa524e1963ae86d8713ac7eacb946c230ee18f4392bca4929fa441a2a323e22a5442"}]})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x25000) (async)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x25000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m16.525844396s ago: executing program 2 (id=979):
r0 = socket(0x1d, 0x2, 0x6)
sendmmsg$sock(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)=@caif, 0x80, &(0x7f0000000840)=[{&(0x7f0000000200)="51510421725dcfe7a562a9da863365c2e53a6c97b1ceffb3413fa9239ac8f18bb0416a50c11c43563aad7f5ad1839d61ef6100cc25c5096cd66b6d687aff5595f9bf345a16547b900bd8f4a622b35c5ea94f31a6728eeb31b0d0d9a314e50f58dc6b4e3303d17331957c66b66eb27cbaf0", 0x71}, {&(0x7f0000000280)="8245b3afdf826ca8237fdb93ee9aaf591a28a64ecd2167a91bd23a3653ef22236f23ee448b93cd47e4330af4d56526aeb0db64b1ac7479d9f023a5502d8245eac5bac2b44b9754efaeb812b76dd081b1a8a015e98ab351ebbe3875e9d19174951b66563aeeb17a0eea94d40889080264d7d869feedb00eedd385ea497a2ffab045413b7b6d8d5c2acc2a607f7cc672728064bf2e2b3d89d6a589", 0x9a}, {&(0x7f0000000340)="93d5f1662f7f432b6d268232b3792eba9362d03f789c793f3d21201e92196a43b8aef7dc6180cf210cd01f91fe46bc998ce436047719e23d330b4c3ef4ad338d0024345dc98a200434e5b4661121b9e8e7df7db113d63aa8ad0a", 0x5a}, {&(0x7f00000003c0)="7560bf2e3fac3b5df9a3fdc36dd13000e6f73b2c1aec2cf25085190db23ba60d62226ed163fe77e206f4ff9226a00f7536392e9b13d69c054163fb2090f64c4fa139ef4dda2fc3eaae96e7d6e14dff6d9060b4e5902ea161c5f1eefea779e6f01dfebc4020cdd0081774b416", 0x6c}, {&(0x7f0000000480)="57dec6ff10e718e01b3d5d4021d6efa7fc4e148879a93c342b18ca72ce3a0e7eda8e7f56c86f744b905b7d28bf41ba8031980deae5fd634c68f7ef0c616b484b56055bc4b99cb192bc0d5c625c3b57df8943149c6cde25df8020258ef676faa7558a283631da33980fd6528c03d6ff629750ece3e0474c654df4d739bd6664ef5065ff84912197912db12f82ad0f6be7ccd407f4547f914cb0c7177951d0a42af8f725a12a7f00c87fb434517d1e3e55ce61d5583bf83fb2365f27f186752d3a", 0xc0}, {&(0x7f0000000600)="e2a22c7a52f27211cdf33849546bd4df88604286648837f233d4c3a4dc5ba87ea43d80dd01361b43134e8c4fff7b28802cb07f12735410a4745aa6cbf8c2830c996c9a3bf57657e5961bc05bb2fa8e32b62234573bce60c8f10d68", 0x5b}, {&(0x7f0000000680)="f1237aaf285a1898ddc53feca82a32232abb029bb2352e0d44a7147daeef7292e805dd6b97a503625282a35e4c2a80c03fd6ed384eb717e8f7fc0ddd6a25ecb491cc1d9fd0b5fd487f0dd59ce34980919f045830e11f75d38b43e0e92ea329c217ccb25653c7b1247b1f15c2930bedcd75bf92598288c61071dc9da830411f61fa8f9b5724be09e82906559b72ef3744623bde4f215b62494fd540219caf3c9c8afb613d71fdb7cb189c5afcd2b321e72e31", 0xb2}, {&(0x7f0000000740)="8943dc127646b3a79f5b7525bcc768ddf39a3bc2dfa03e37c91152bb67ace3eabc3bfada19078020bd50e57263ac469dab05c4d92ab227954dd95be4f2defc6b111dfb6b5677bcbccfd0e833bccecaf8d05d7d325be88104b509c4ebe07155deeb44c62fc59b2139a798c283dfa192ca5396f4ff32a5bcf695df9091a545fe3967ae1bd70698e23d0c815f873ee7d5512fd35445371ee3cc12223ac91946c6db05e11613f2db10ab62230e10f5cdc8a42cafd051b40321a3aed4c1cf02b1afb9a02fa8138880810bdf61f32839792e0a1544d46cd338d8", 0xd7}, {&(0x7f0000000980)="627597fc797c033f290eb8fdcb951944c16d996cb883ba6b399bdbd91721fe478d886edca989d74aaba35259c161c20487e7b3c37d9e68b7f40c9524551e8e6b2f7c1a1046f929a361523c3071e262c208775d922ce4b33bef2e2b9625be758cb2bbcb9fa5864fe264ebcab02854cf487cb6c7950a76bd048f0c3849af06103ba5c8bc1c10505d589470662fab26e110b142901ef132df21600a421328713922c043b08f20a53ea8a798748d4b88ef57639d2a12e0392ede05006e22593def0710923d611b2c8dfe331c3744879defc4135e43c86e20f49dbedb53df833bde854ec9129180fdd339f4776531b2111641bdc6ad6e4955bd02822bb6e6ccab8b9fa1ca1672c8e622fd3bd17ab1a3feecc35c2f9236cd2e7a4cbe37e455e11415abe4c6c6c94dd7f88ef77c7cc507bb4ac15f593ac42f703afbc6cbb914edcc4f907946790c4606657928d0aa3d54973eef66bf177235050212cd68a7d8a3601aa6254356acb48746fc8ac56f4d32d5fb1116ae1d0811a33d1bfa0046c783dc76b777ae13cd6c94b99a170653ecf14f618561618f24fa04ea981b7310a466753733cc19ee7309ad6ed9fb7912c233e6c11f9524f0f72dccaa0282d14b9b2299614a3c567b267df2572a495b782bde280ed83bcc61085aec8a0b318f05b8493ca7b4aff3cf98a75965bbcd837774192ad3a1092d6aa45bd493c739271d222847f1a6d2630caca7b003d8da88c49924d92deb26e0b1ebc4f7b9774373ef5d7db520268d76755912d210905fb112f500433824bbda938e6e7a87c8dfab809e68b6900c91610bea7dcfa0e30f4f4c3b1fcc2e42b9b3c0a7175b4a39e6fc09823d6462a165fdbb90ee38442c218566736dbca5dc14beb00e2f6ef27f98669f876e311d889a848ac692e8eee9bf4d59072846e0fd9e2a71916cd54baea7ac2ba80a80bb90027c71d61d23a84ceb57a48187c83740ab2aac1a57bce95e0827103881a97274da60c4957d7cae0eee4c8273f0f2e1de0103eb859d3bf6e73782a52831ef64b3a0f7e97258b7451e7b97bfb1df2a4d59f63f11c1cb867bc5c50f97a0e5524d94e4b9bd8b4a997c3a60adb469aa179f5443fd75ede6d58f08d949ab1dd714e03e7e6441cd1751f6ed947bb776fb6d793385d03fe479066fce6bb2909630dfc987eece6c148b42b47c4045dd32af7ef84ed23fcf543f3bd2220ec63619e7ab6bd00dcf26888d3a59860a61adac802928bfd0f73488bf6985036305da4888836789a2da87fee627fce9fc152ba742b9f27ce1d549b936cde4b4b4786246d477d65a431837b897d14f747e51ea8040496f21501aeea6db203676b5932f47e1a26f5c8401d660a29eb974247874430d7cbb8922f869d638bb98a90f3513064f66a9598c14d1581a56d50eed8a6e97779275c5142f1ce376435060928b3c2627165e1a73e5b31a6f3a60773fd7d2ca86a771e2b9d4b1ea58f49cfe0cab48d6020b62dcabbf24f2df3dffd86452748a46e5ec1b0adf6c9bb9a15c277d993300b2a32129275469e63edec13c52e327a9c10380d3b55973c7e81e0aeda35d67057aa025cbb1dfeb77054214adabd35f5bf2149792b0bebaea8047b19df9fabe2b61a150b5354650465acff9e5b476fadb8bc0a823643668f6786ef0dc957cb3945dd3c584deedbfc789d7b0f30400b3821303ba8f0d04c04f14e20b357087d328e4a3ead41f0babdddf204c57fc1b069d04867e841b340f06ce951d52dac300e3742b05550eacbefbbe27a457f6693d3c4c30634883fea53d2d66057cba193379173223784286063a071f8f3bb8370dc3ee5f5709441f000bd75899699e4f105374f91b4c427d6a2e6706038b4b8e1f38c8e3e964df9645c12dd524365b0a7aa579aa998d13f351c553ffc0d7be3c4b122bfffc18693915356cb9a4874ce9830cfc0e97648c73e4bd6165596a9a57c6121d1af569c826ccd24c944bedf656f0376fd25216f7f28cd23b76354518b170ba99dbd4d586742aca4cca9e6597440d2aba554896f1d04af4382cea312173af6213552198c3ae42fe025cf9bfb93a199a2d7fd3c75f338c4d896d6815971d3454520d62bacc53946b466423af5dd7638e216c10215ea233f62ecb7f1a67066a439c67a7e72a5766f5c8a3db59d058b012b3238aa760bbb63d0f7cda83cea59973c287547392302de25a3e9544cfe77fef655ebcdb0a1a7fa2a991ccbde213931dd02f823e44ab53a3eaffb012c15f946f9f723c7678b1ee5f1803e312c1c9a2f138ee70aebd2fd7c809a35f5363fa62722989196ffd1d538470cc30e35f1eb409b46df150383e5e3cb1fe646616e32dc81d80f6a028ec19ab0f4c6db03f6ae1361c5cee5df5648d4673979db2df4cb2225eba05fb2aef5a69a90e07f048bfeece2e3b28feef64983313421a8d8e897929033921d277af2547411609a59319950cafc5118486191d0c953a0b620f564996f6a3c298011d9aef3b3f49d82658b2ef4fca8f7457c799ab641fa714961a9ac81661ec86d4ea1ef0cc7996e05a83dbc3156eb397ab200aca1f1ab24b0ba2ce7e16ad5c737f3e0d0d02a7959160d5858375e4e2d7101a214d37c7e3a781e2f60848d68490eb02a712ca8f57a77cfe9be19f03bac0741eef1bc51d809e2cf443b9245b66b235c36adfe798df178a71be51d180925d8ffd282bdd0936cf336f722802cfb933cea36cc543b58aaff4351cf6ac07e4d5376dae46813483c8baba105ae1b6ea01514729e045346f5cee2a5fde225bd36e343f25c7224d9553dacbcbeaddc69fb571d421f9986cadb4e4559b9643f9a2e9f9448172dc8d0400fc835005de02db097613eb5983ca8023148010e272ca79490d2ce7e7b9d9a5e11d33836d4497608044a2bbd1d84f50c888467dae1e37f9af3417e9204cc639501a741e0842e93512cb386e93388830496840f7208c796828c713aa54712657f368c363a7f08605417943105019b7e14badec25926ff0beafe751f86fb5a6e827002c114f0429ab1b7c2b5cfe98a0a14e44c567064178cff9e362a5c51d7dddafff096024af8d5c9d780ea0d1bcaac618e2c68c4357850efedf224657c5f4c84b0e89a5bb68e97d5d8725cdc649654744925cac48495164a73128103284a487d256509c89673ccbd08c88c495945331f4728ed58058ce16d8f3cf11d3f8fcd3c398121eb8173a9acbd612ef91be4a3d446addb96d62cd60d16d04595ff0207c5f70c6a26e9d77c6a339689591f5c1caeda00b01b1a86c9550e5ddd6cf14f2dcdf52016f81e73f0a715f595e2a37566bcc6aaf80cece546dbc2ce94504ce43ea3f9fb1d6edc44e1169456102e594bbfe7d4b1bb2b2717ffa5d0913ef756fc0cc786548b53bf45c7693990642c5e94c8643abdbf026bdb7c1573c86f67b194bebacf012447eb39dec4f38f16fa86cb30e3d84858dd60892646cb79a5cd8999f5148fad8ced519dc15f901863410e61d9b444aa96b44be23aaf27c764193e4ca047338d516d0a4b004996a9b08f8cb64bc124315a26e0afa995aceb4b4a29eca226463e5b7d84f1202e57b6095548882acc7f9b408cac0fb10d239855871c64212f7fe7a389a244cceb11997e49f94607c6b89d0a4c5ca70e6fbe35e2fb8de8a15a4b86cf6df774822072406d76f3bc1a7c135ed98b37b892903b5e0cc3bb73b56674fbbb55fd0aa5ee4cf1842c8ce4e67ffc0b09448b73d981e952d48bcbf399c1bb0cf89f74ad2003f00c5e5c7c4c08954bee3f6d373ed0babaa82268e8c229da0b7c9e43210f2ca8d8fab1a2e03499454ece733d0f71bc6b363e245e1cec4a67701e82c7d5c0dd4deafc8ea758f7aebff35206b3ec6d78bfd4bf9f6eab6cf449b715bf96f6e6a3f261ed875da3385184838a0db574974aae7fc10602575a913bb1ba43951fb669712686e86704c65e3052af0280f5d5d10e207c1b75b4851ceba519e7071b43e5897f8064ba2d60d86a454aac381ec88f3ffda2aca69441c33d3bb26590c0195407284a8f3c40b107f87338eec4eae8e2115d735dacf6c0f853fd453a6afee16540016a4728a85f480c0450929172c307ccbe8287733e94badd8c5621f31c07ee0d1872abe3e7d89273d27b2803264e022e51cd694f9baa19fdb552e65dd137d5f6b0509ad5ee4f7ef07503898b2877eaef676d4afe972ee893406c3d4f71f09850c1566c7da9ccc41f293b49b9efc566bdef19e3d5a365bf25048ea5b5f9a3d6a24038dbfdf373c12f0776182b62730c17cad14538e251f32095b7d1e8ff535c3e2d96cb8cdd884e79840a97a41e460d24facc4461f109daededef9c642eb735711683cd29e79e4961964bce32e955e31d40d3999306dda80bf7a6b7b6732f1225e9be22296ce002e77e95d9563069bef0e27384a928f2e74e26deb663c60b0739c756d8a635218d67ff4dd1e66aafee88d856e1538cd98ec7e3b7da44d63fae29563cdc80c9365b637a86a28e9a1a67ac32fb6e29dc9922edfaa1d92f87a86e847ecf345d0bb6262d4c8ede2e1673c81144cd14464993a5f3fc20597695de5627e0eb99d7e37d9ed49e59a0b8c34b7281b395d22861339e8f2c21cabe670fd966ba4d666011abfafb0343fbecf4da6e815a72a1c4b02d4ddcaba5b9492a9f1bd5027c84357d7ba741ff18e4d16abbbe927c51f4d87917ffce8806d26d64fb93f8217973ad699fb9de3fe49378c1a7770a20b5e27886dbd8007745d2c5199d5844fac8214cdb68523b95f55c3c4dcddd91e6efc079840e2bc4a1b22af91c99ead577cada996f872349fd395fac49a71927b5e2dc8d3b421d3281e644ed2a40395e094d111ec45533d4129ffff91d657fabdc02e370c28c639725e0177297ee119ff6b237beead481a626e966b40869b9bbf7dc6c3b1df40a236286e9cd0f7bc3d97b9be5cca5919fba448ec1dc49ad9b14ba686ec86c9e5b2b3ac04cbcb0b1488af45f79ca0103a760fa5424e10c693e3b24139d021a2ba9b05de9a1dd14dac11ed1e54880143f1db2d02520e1c1158e83325d6b1b54560ef7ae3c6856d1f30c8fe8d8df9ea54d3728f9d1c0b232dba98312154f170328c4ce5cd59a9d1c9859c742fca3e5ec480aef769f71454825a51326300113aece88f7e367de4b8faa0c0b28a27c9e01d277afdf3956494f19cee5a1cc3ccba34a650129899d8e637f182fbb830cb41b74b3a37e50193e431d5d8a31a2d017ec7c512b7aca4673282f8b6959fe3c4050d563d22d0f3657dc56df04038b6b60a1d212b874ed4d3ccf1fa38112c072a15cab6c0961447d547cee04ac206cff7296346983722ed3981be7c6f15186e937fec801d5a1ed4ee6d7285d8b866289565333f1a202c373bc996aedacfa687098c83058f63f2c07b840ecec05dbe62b9223ca2309e3399bb6b0173d6f7ecc255e98f33a9d415ee52b924474b015cb0130d233cc634ab49027c21c3253c0787560c2fe13c81258b29f678b19a439e4c154032a14a6853fe89bd463faa78faa757e8f46008800c84948f74e3c785d1d8ae5b5f1a10fb6a1a6bb44e301f05f2569966b6d1894e5cd025f25ea8938e5adfb838ff3852af9512532cb9b52585252efbb704ea7e710d7069430f5b172591a77b04e7c9a0594580842f1c72c56dede14cae7d51c1fe1d49996d3d8476973ef5dade369ddfdefa62197a4a63c0de9318bb3d7ca087c136217e0fd9b9392f434f7bbb4626f37b5c95fe6c4f8b8544dbe11742ad4ea289b79878c165326e57966939e9cc253cb7d28f9072414b667a", 0x1000}, {&(0x7f0000000540)="133c3747798a515d5545b3be7d7dd9491fcf41e655d8e1ba5eceadf791f9f85124489a4b6b77fa59c80f047567", 0x2d}], 0xa, &(0x7f00000008c0)}}, {{&(0x7f0000001980)=@caif=@rfm={0x25, 0xffffffff, "98274d58320ecf4cba611a9b152e73d0"}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a00)="e3dbeb4692f1b3c03ce25412cac2022fd2a9ad17763d986ee761405ae4c6cbf203b757a805a1ee78fa1cc358983e7db8ad2fbca6a966d5860ae888853768e7a09368b5eff22963e3", 0x48}, {&(0x7f0000001a80)="4c5b87992c62c694eea91476cb0acde130ba9c8155cd645998f530d05fc07f2ec70937922970d4c4e08d474a4f2206db0c949782028f5834669d5300088f4fd913085588128448c36fc113c3da3fcbbdfa92ec3464d9d6f05e8a6469bc9d439b5fc07e03a08dbc50fea8d65f528c0d6d4913439059d56f6966c4d21cd2b5c8d7ec1059369fec9c0529c64e2de4a7655dba8e5e846462bb78a3b2c3ef77ead41bef80", 0xa2}, {&(0x7f0000001b40)="552edadb96c66b4563e75d1b514a89fb62ad03e676cd1c0eeb256093a495ecd0f2b8f0da994b16fb0b3e3f0526d8e63ff50655f619f25f5b942469c7b0f0f6ad2f84dce3d1fc1aa0123ebb0f6ed9701f031682ba3066ac153183e22fdd1f5d48a814743983829e47aa54df7afbb6e7b33c5d31ae5a5e63a7eb10bf37ca215253df1cc029bde88e78f24ed90e804237ca7c1f6ad633ba000074a72c0a074b9b6d810165a5cfe1625c1fb4e0808e0d3c51b3dd8e43f4f030369facb99f4741698625d8f339f7f8a1ed333482913a9fb5a07f6bb7b3182221c3136aa0850550c031e196a58be5d3abd60be50c2767cc9f5c9368f89a28339db869eb413fd1d1", 0xfe}, {&(0x7f0000000900)="ec72101b7428", 0x6}], 0x4}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001c80)="31513a0d01696c0908b6abdd0378496486c143dc385444cb13cfcd69a339dcc4642db74791d195f71ac3f39d3838564b20818b617d4f50e20163d1fc9a4270a9b7c1954aa01e40479ea43fcbd6e35cc70b7fef4fd0e4d5cb7cda8801d28e8c7a684124935a062a3742", 0x69}, {&(0x7f0000001d00)="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", 0xff}, {&(0x7f0000001e00)="24784a5af9146df45240334e1968048d82243edbbfb2e18e994b4f626e73f31b94f44443dae71a96c2e64d73c751c6164bbd1dfefb7cf3f67ae91f728ecb2d0a83d03894444a7075d96c796f874a3cfcf2f0dc75fc49f52696bc12a74ac3b8a8948e1b7554aaa92ed1f8404ab047707dce00974645e01b", 0x77}, {&(0x7f0000001e80)="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", 0xfb}, {&(0x7f0000001f80)="db3281d60057b9bd7bc9e5927f0bf358893f064de5195a6c6f6de8ca0c424689fee973adbdf0416eaf5a585ad8cd6bf2366718252e67b001f5abcd76db2f869a084c78e0c6f873dca994de44cd760a38873fa6595e769abbb5bbcc94b5ef19160eac0e5d8ea6b948ac5e57144d917b0585999bff6c", 0x75}, {&(0x7f0000002000)="2fce8858adb9ac89a5d403c7c3cfcd75438d97fd6d269c1a5f9b82275108a6d009490fd8b38c616edcb08d5a4d2657b5849fda70be13e206c5c82f2d77431937368825e2cd416c1671cb87e60d4b235d006c58a649b4b2ec076b63152925c56109a1c46aff841312ba9b5fc49008d87e32cf450b719693a3dcdf6b610c747c779e39b569ec41018a2e68c5758fc6d0fcab83ebbf0dc7af325b28a54827c76d057b98c8e00f73016e42a8b195181223de3da7012c147cb720f67858fa", 0xbc}, {&(0x7f00000020c0)="345e8cd055a4cef401ae490e63e9e710459010212120845e579249972827367542dc41da2324e9f60933eb26925057f61b74aa901d8270bb3e5850a7fd62f42eda01edef5847e75d26e3a747253c31c15252bb2947f5defaa2a01838feafd6ac982d1116c2c2ab4a697cee0b828cf0350d4c14e801aeebb43242145a3cfe1ae3d7e7f396943215ad6dc4400ddd97076cb1dae53e9591e1611052d30cb5887f61a635ef4f73982247f2db6aa444a43d565115b1a80ecf46ff26d77b433068b37a1307d9d1e89657997f11e00657b3accf551a4402f2a7ef737226dd89247e45299548625c793a14228e94e5b5e4", 0xed}], 0x7}}, {{&(0x7f0000002200)=@l2tp6={0xa, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x2}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002280)="e80d07c631c795b10d65b565e119529e4fed7436ce3a91fa398a131f9780e1f4f00cc2d35a2f18417f493a380bacaac365885d759c5fc9f9ba27cbfe64eea462de355a47c826b3da948dfccd758ded33b6fe1f3104767b7803ef18f8fef723b2552c0b56e438cce3d2a8234769f926aceac818a8", 0x74}], 0x1}}, {{&(0x7f0000002340)=@in6={0xa, 0xfffd, 0x8, @empty, 0xc}, 0x80, &(0x7f0000002680)=[{&(0x7f00000023c0)="3dec4e3e6b07e4569bcf8556f5a534cdecbc99353ca78e5d92f54c4a0e609a24895b9b31b5dbd765d59157bf68feb2e2498ffb785e5e47410d7d9acce406de4026d0331305e53eadc39770a1a22a01a108a52eec012af9f7fbde0aabbdf4ed2023a4", 0x62}, {&(0x7f0000002440)="f65ec4cae02ecef1ff770f5b75bf5f09f443a89f273b65641322c271b373c820df762b2af4a8e94f4ad2d9344495eac455622f5c465feee77089d4a3e2ce31868428fbcf511ed088010c898a8a1917eaef327fc6f55edbd9c06a06afeb971ab488de9c60b75d9d33c3c71f415289d4d30b4c864120356c668f97072f7ace2fd516bece", 0x83}, {&(0x7f0000002840)="ef42219458362b0dac065a13854ed4dd1093647c25974fcb84d4fddb4e857dab32281757a9a932ca49e00b1f1d554aa631ee22b74b8fae67e49eb99699e01fe681585b74832637475063f7ef31a1d4ab3a9650f248767ba5a9e6229f551ea585077ebeec1dd5b8b1952458b94b624c17d247d8195015a1c876dedc959d3ca01c60fcd2a5952ff2ea99e75b72a2f43293a8e1f9d949f7f1cc58de1bd54aff53d40bbb7f5725b518a2e63a46bcff4fa83ad17e97ad2f526f59b879583b171442a2", 0xc0}, {&(0x7f00000025c0)="292feb50530af4eb8a7820c5c4eb78525110b355f0317b272d4d47afe2d2c4e7c83037768148281a3e437e7909fced2038feed7ce4830e5d1e6c1ec2022a5d72516a62", 0x43}, {&(0x7f0000002640)="ae1f51f7da62428454ca7e0af595f407", 0x10}], 0x5, &(0x7f0000002500)=[@timestamping={{0x10, 0x1, 0x25, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}, @mark={{0x10, 0x1, 0x24, 0xfffffff5}}, @mark={{0x10, 0x1, 0x24, 0x5}}, @timestamping={{0x10, 0x1, 0x25, 0x7}}, @timestamping={{0x10, 0x1, 0x25, 0x3}}, @mark={{0x10, 0x1, 0x24, 0x2}}], 0x74}}], 0x5, 0x4c041)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001)

2m14.542238828s ago: executing program 2 (id=990):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1)
landlock_restrict_self(0xffffffffffffffff, 0x1)
landlock_restrict_self(r3, 0xe)
landlock_restrict_self(r3, 0x9)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000001100)=""/4112, &(0x7f0000001040)=0x1010)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
read(r7, &(0x7f00000004c0)=""/67, 0x43)
r8 = socket(0x1e, 0x1, 0x0)
connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x83, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1)

1m59.177439728s ago: executing program 32 (id=990):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1)
landlock_restrict_self(0xffffffffffffffff, 0x1)
landlock_restrict_self(r3, 0xe)
landlock_restrict_self(r3, 0x9)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000001100)=""/4112, &(0x7f0000001040)=0x1010)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
read(r7, &(0x7f00000004c0)=""/67, 0x43)
r8 = socket(0x1e, 0x1, 0x0)
connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x83, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1)

7.200899217s ago: executing program 5 (id=1519):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
writev(r0, &(0x7f0000000500)=[{0x0, 0x300}, {&(0x7f00000005c0)="d4c4403459", 0x5}], 0x2)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = syz_open_pts(r0, 0x200c80)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r6}, 0x8)
ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000800)={{r6}, "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"})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0, <r8=>0x0})
r9 = gettid()
timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r9}, &(0x7f0000044000))
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000003000)={0x48, r10, 0x801, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "1d9d000600"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x48}}, 0x0)
r13 = getpgrp(0x0)
r14 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r14, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@delrng={0x10, 0x14, 0x1, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40440c4}, 0x20000040)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x22000400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xffffffffffffffc2, 0x3, r7}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x27}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x67}}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_PID={0x8, 0x52, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x74}}, @NL80211_ATTR_PID={0x8, 0x52, r13}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000041}, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, r1)
syz_usb_connect$uac2(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002082053b0040000102030109027e0003efff6003080b0001010520020904000000010120000924010700001e00170924070501000603000c2403010003070205"], 0x0)

6.557744858s ago: executing program 3 (id=1523):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x4180, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

6.430487908s ago: executing program 3 (id=1524):
r0 = socket(0x1d, 0x80802, 0x6)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x2001, 0x0)
write$sequencer(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="810122f9000092b64a09bab2f2e8225f6b2b960000003877f6399cbbd17d2a9c90b1000000000000"], 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
recvfrom(r0, &(0x7f0000000440)=""/245, 0xf5, 0x2102, &(0x7f0000000180)=@sco={0x1f, @none}, 0x80)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0)
readv(r4, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000700)=""/61, 0x3d}], 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000500190001000000080008000700000008001700ff000000050018"], 0x4c}}, 0x14)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x14000}, 0x4004850)

5.981533006s ago: executing program 4 (id=1526):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004803800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a32000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

5.821608929s ago: executing program 4 (id=1528):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004005}, 0x0)

5.759188801s ago: executing program 4 (id=1529):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0xfe, 0xfffff024}, {0x80000006}]}, 0x8)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7ec, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x40, 0x1, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000480)="422239d0fa5ce94efd1900ea17564aeb3e3167be3baf8fc27ef04b148aadec23ad381459133ec017de1e176c35c073b2e20e7766cb9c7a5e86ad", 0x3a, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14)
syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00')
fchdir(r7)
close(0x3)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8, 0x80, 0xa, 0x8c1, {{0x13, 0x4, 0x0, 0x9, 0x4c, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @rand_addr=0x64010102, {[@noop, @ra={0x94, 0x4, 0x1}, @end, @end, @cipso={0x86, 0x29, 0x3, [{0x7, 0x11, "e88bf5c6aa15e850f478de884260d2"}, {0x1, 0xc, "fe4784fab0732d9b3d77"}, {0x5, 0x6, "0f554e6d"}]}, @lsrr={0x83, 0x7, 0x3a, [@loopback]}]}}}}})
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000003c0))
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvlan0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @initdev}, &(0x7f0000000440)=0xc)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x50}}, 0x0)

5.685371847s ago: executing program 4 (id=1530):
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$inet6(r4, &(0x7f0000000240)={&(0x7f0000000080)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f0000000580)=[@tclass={{0x10, 0x29, 0x43, 0x6}}, @rthdrdstopts={{0x14, 0x29, 0x37, {0x32}}}], 0x24}, 0x20000000)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="704bf5ddec082d38277cd599f3e5441a687947fd7c78c8861e08e5daf58a258cee52c82a6ad6668ef01187bb25c994504e8abaee6931b5bfc7b3e78d7e1323b0a754c830889d8148bfe33c6814205fee39a06aebd717b487c522743bea193b694a7e4e6d615efb7a8de7", 0x6a}, {&(0x7f0000000200)="9f1d6354a2eb281438bb72042df7782a0122ed4a325534d75abca157dbea678b258ff89afdaf3833c436089b04fddb581551d434931e0990e272662ee46c53e2207b55da74af6d29d2619a42ee394c8758b1a3c8719883ffaf123523edd66d902081e3b1313598515a7c80330f3dff57716f000dc840232a2dcf2d8b724f4c77a4adc944668de60c67aa37102d0c903b7cf85a7f6442c2357eeb879627d6ee5ea7f96438e60d150f83362057c2c81f199710e271e005edcdbb1c66f8b6651f26b5e826d33cbe055451930fc623749bfc36298a6ad3", 0xd5}, {&(0x7f0000000340)="a6c88dd6650a2a8f33642893043f799944e368913e91805e65f91cc6eae92034a6db3df004b6d35033298e15d7f6bd1c7dd17aff885f84790ac6c2dbc8199383ebb5dbb03c9a13c5bddc51df5796378d20f011229bbcbeddf437ea1b2aed10534210805f3fb78bcf6aea967f3fc28d", 0x6f}, {&(0x7f00000004c0)="b77e7e3bfcd84d3b85724a9a564e328a3633518b8404bf40cfc40534a4ae47cd9d67169045df25964fdb358ddb57735f8c1096ea5ed24603f29e81dd9f6faaa33244a0c755f5079860aa6642ab654535286bcf2cf7e0dbb867ae8030d17151d7da75ea3d5676c4d31639db9989eee0cfddff96ce0f10646b303afe8f0cf669936d84a0adbe5c42d1f295835d446189d6c455", 0x92}], 0x4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x100)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140))
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x4, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe4)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c)

5.664603568s ago: executing program 5 (id=1531):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup2(r1, r2)
read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000000))
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x0, 0x200000000000000, 0x6}, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010)
socket$nl_xfrm(0x10, 0x3, 0x6)

5.314828021s ago: executing program 3 (id=1532):
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/time_for_children\x00')
fchown(r2, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x9, 0x3, 0x80, "11010000001413ff0300", 0x47425247})
socket(0x1d, 0x2, 0x6)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r5, 0x0, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = getgid()
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd', @ANYRESDEC=r7, @ANYBLOB=',gr', @ANYRESDEC=r7], 0xfc, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000240)='pcr', &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af24, 0x0)

4.740016335s ago: executing program 5 (id=1533):
r0 = inotify_init()
r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
syz_usb_disconnect(r1)
close_range(r0, 0xffffffffffffffff, 0x0)

3.725971993s ago: executing program 3 (id=1536):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@get={0xe0, 0x13, 0x1, 0x70bd2b, 0x25dfdbff, {{'drbg_pr_sha512\x00'}, '\x00', '\x00', 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x4044890) (fail_nth: 3)

3.513996966s ago: executing program 0 (id=1537):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008008)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
sched_setscheduler(0x0, 0x1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x100000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x7d, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}})

3.422810375s ago: executing program 3 (id=1538):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004803800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a32000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

3.029729023s ago: executing program 1 (id=1539):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004005}, 0x0)

3.006396121s ago: executing program 3 (id=1540):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xdc, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x19, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x1fe}}, {0x4}}]}]}, 0xdc}}, 0x0)
memfd_create(0x0, 0xe)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, 0x0, 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28)
modify_ldt$write(0x1, 0x0, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x400, 0x2, 0x1, 0xfffffffd, 0xffffff00})
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e22, 0x40000004, @mcast2, 0x9}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0)
close_range(r0, r0, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'})
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@fallback, 0x20, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

2.868406731s ago: executing program 1 (id=1541):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0xfe, 0xfffff024}, {0x80000006}]}, 0x8)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7ec, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x40, 0x1, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000480)="422239d0fa5ce94efd1900ea17564aeb3e3167be3baf8fc27ef04b148aadec23ad381459133ec017de1e176c35c073b2e20e7766cb9c7a5e86ad", 0x3a, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14)
syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00')
fchdir(r7)
close(0x3)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8, 0x80, 0xa, 0x8c1, {{0x13, 0x4, 0x0, 0x9, 0x4c, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @rand_addr=0x64010102, {[@noop, @ra={0x94, 0x4, 0x1}, @end, @end, @cipso={0x86, 0x29, 0x3, [{0x7, 0x11, "e88bf5c6aa15e850f478de884260d2"}, {0x1, 0xc, "fe4784fab0732d9b3d77"}, {0x5, 0x6, "0f554e6d"}]}, @lsrr={0x83, 0x7, 0x3a, [@loopback]}]}}}}})
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000003c0))
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvlan0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @initdev}, &(0x7f0000000440)=0xc)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x50}}, 0x0)

2.698652591s ago: executing program 1 (id=1542):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x3, 0x2)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0xa})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x18, 0x0, &(0x7f0000000740)=[@request_death, @decrefs], 0x0, 0x0, 0x0})
setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x77359400, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x8)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getgid()
lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

2.69564477s ago: executing program 0 (id=1543):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="9500000004000000f8d1f3cdd12c9256e8f960a8a91008a6072e4bdcaeb676b5f0f0cf5f1ea6222f438e8687a6186fcb5e1595692e20e184af6adc4cdfce9089f26ddb0216ddacc138e7"], &(0x7f00000003c0)='GPL\x00', 0xc, 0x1005, &(0x7f0000001840)=""/4101, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2e}, 0x94)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)

2.516023119s ago: executing program 5 (id=1544):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1)
landlock_restrict_self(0xffffffffffffffff, 0x1)
landlock_restrict_self(r3, 0xe)
landlock_restrict_self(r3, 0x9)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001100)=""/4112, &(0x7f0000001040)=0x1010)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
read(r6, &(0x7f00000004c0)=""/67, 0x43)
r7 = socket(0x1e, 0x1, 0x0)
connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x83, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1)

2.351411221s ago: executing program 0 (id=1545):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@get={0xe0, 0x13, 0x1, 0x70bd2b, 0x25dfdbff, {{'drbg_pr_sha512\x00'}, '\x00', '\x00', 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x4044890)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000240)={0x18, 0x2, {0x0, @remote}}, 0x1e)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@deltfilter={0x84, 0x2d, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xc, 0x1c}, {0xa, 0xffff}, {0xe, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x4b}, @TCA_CHAIN={0x8, 0xb, 0x62}, @filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x87}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0x5}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xb7}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0xe}}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}, @TCA_CHAIN={0x8, 0xb, 0xd}, @TCA_CHAIN={0x8, 0xb, 0xffff}]}, 0x84}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0xc, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x3, 0x6, 0x9, 0x400800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="48010000", @ANYRES16=r5, @ANYBLOB="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"/322], 0x148}, 0x1, 0x0, 0x0, 0x8050}, 0x40010)

2.074673207s ago: executing program 0 (id=1546):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b0", @ANYRES32=r5, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0)

1.207550935s ago: executing program 0 (id=1547):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00110029bd700000000a0002201903009ae895c6c0ae6d2fcef4fecd00000000ac1414aa"], 0x24}}, 0x10)
r1 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x40)
sched_setaffinity(0x0, 0x0, 0x0)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000fc0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r6}}, 0x10)
tee(r4, r3, 0x9, 0x8)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f00000001c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
ioctl$KVM_NMI(r1, 0xae9a)

1.101795078s ago: executing program 4 (id=1548):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="202125000000d2a6a8dbf126c0b7367f9cb5f1ca19d35ebf1f518e478c2262f6d1aadc8fc323249b1aa4fdb65cb03e34e52cb71e1cc6d736e64bb5b6688678d36e611de032ef62ca656a1597bfa3f74f882e823ad55263267e4701ca9d070977c6bd88", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00b\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="202125000000d2a6a8dbf126c0b7367f9cb5f1ca19d35ebf1f518e478c2262f6d1aadc8fc323249b1aa4fdb65cb03e34e52cb71e1cc6d736e64bb5b6688678d36e611de032ef62ca656a1597bfa3f74f882e823ad55263267e4701ca9d070977c6bd88", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00b\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) (async)

922.414557ms ago: executing program 4 (id=1549):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
close(r0)
syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc054}, 0x4c10)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x8004)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x1}}, './file0\x00'})

814.941553ms ago: executing program 1 (id=1550):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004803800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a32000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

509.373346ms ago: executing program 1 (id=1551):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0)

228.145259ms ago: executing program 0 (id=1552):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'nr0\x00', 0x6}, 0x18)
r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0x72239c29})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd27, 0x4000, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x34}}, 0x480d0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0))
r6 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff)
fcntl$setlease(r6, 0x400, 0x1)
open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
r8 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r8, 0x80045010, &(0x7f0000000080))
r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff)
open(&(0x7f0000000080)='./file0\x00', 0x40100, 0x78e22799f4a46f44)
read$watch_queue(r7, &(0x7f0000000340)=""/182, 0xb6)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x3, &(0x7f0000000000)={0x1e, "62b1a362dc9c7f7d87e44e6e7e2d24c7a1cf8826e39dafbec7395a0566bc277335"}})

153.664348ms ago: executing program 5 (id=1553):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0xfe, 0xfffff024}, {0x80000006}]}, 0x8)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7ec, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x40, 0x1, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000480)="422239d0fa5ce94efd1900ea17564aeb3e3167be3baf8fc27ef04b148aadec23ad381459133ec017de1e176c35c073b2e20e7766cb9c7a5e86ad", 0x3a, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14)
syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00')
close(0x3)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8, 0x80, 0xa, 0x8c1, {{0x13, 0x4, 0x0, 0x9, 0x4c, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @rand_addr=0x64010102, {[@noop, @ra={0x94, 0x4, 0x1}, @end, @end, @cipso={0x86, 0x29, 0x3, [{0x7, 0x11, "e88bf5c6aa15e850f478de884260d2"}, {0x1, 0xc, "fe4784fab0732d9b3d77"}, {0x5, 0x6, "0f554e6d"}]}, @lsrr={0x83, 0x7, 0x3a, [@loopback]}]}}}}})
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000003c0))
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvlan0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @initdev}, &(0x7f0000000440)=0xc)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x50}}, 0x0)

144.136488ms ago: executing program 1 (id=1554):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10)
write(r2, &(0x7f00000001c0)="8465000000000000", 0x8)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x5)

0s ago: executing program 5 (id=1555):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
tee(r1, r0, 0xfffffff9, 0x8)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0xfffffffd, 0x2b0, 0x3})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141f42, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x47c, 0x2, [@TCA_BASIC_POLICE={0x474, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0xffffffff, 0x8005, 0x9, {0x8, 0x1, 0x3800, 0x0, 0x1, 0x3}, {0x3, 0x0, 0x10, 0x1, 0xa, 0x5}, 0x8, 0xa, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x80, 0xd, 0xa0, 0x1, 0x4, 0x80000001, 0x5, 0x96a, 0x6, 0xfffffffc, 0x4, 0x1, 0x101, 0xc06, 0x3, 0x1, 0x5, 0x6, 0x80000001, 0x6, 0xb, 0x1000, 0xfff, 0x3, 0x3, 0xffffffff, 0x80000000, 0x401, 0x10, 0x40000, 0xd, 0x9, 0x8, 0x449, 0x7fffffff, 0x8, 0x5, 0x3, 0x4, 0x0, 0xffff0000, 0x6, 0x800007ff, 0x9, 0x8, 0x6, 0x0, 0x4433, 0xffff, 0x8c8, 0x80, 0xfffffff8, 0x8b, 0x9, 0x4, 0x0, 0x1, 0x80000001, 0x0, 0x1, 0xd51, 0x3, 0x6adc, 0xffffffff, 0x0, 0x6, 0x100, 0x5, 0x2, 0x2, 0x0, 0x8, 0x8, 0x40, 0x6, 0x9098, 0xe, 0x4, 0xc76a, 0x800, 0x4, 0x2, 0x7, 0x2, 0x2, 0x4, 0x1, 0x4, 0xffffffff, 0xffff, 0x9, 0x5, 0x29, 0x2, 0x0, 0x8, 0x7, 0x1, 0xb41a, 0x5, 0x9, 0x3, 0x6, 0x3, 0x5, 0xfffffffb, 0x7fff, 0xffffff52, 0x4, 0x6, 0x6, 0xfffffff9, 0x2, 0x8, 0x2fd, 0x3, 0x1, 0xa, 0xf6, 0x0, 0x0, 0x3, 0x1, 0xa, 0x1, 0xc55, 0xfff, 0x5, 0xfffff000, 0x7, 0xc027, 0x7f, 0x4a, 0x200, 0x7, 0x1, 0x9, 0x1, 0x4, 0x6, 0x5, 0x9, 0x5, 0x100, 0xa, 0xc, 0x0, 0x2, 0x300000, 0x3, 0x9, 0xb5d, 0x7, 0x5, 0x19f337ae, 0x400, 0x8, 0x2, 0xba5, 0x81, 0x8, 0x10, 0x6, 0x4, 0x5, 0x0, 0x80000001, 0x5, 0x9, 0xba4, 0x6, 0xfffffbd1, 0x9b3, 0x7, 0x8, 0x36, 0x400, 0x40, 0x8, 0x8, 0x7, 0x73d2, 0x2, 0x7fffffff, 0x1, 0x7, 0x6, 0x7, 0xfff, 0x4, 0x1, 0xfff, 0xbd71, 0x69f3, 0x6, 0x2, 0x10, 0x7, 0x7, 0x96b8, 0x6, 0x2, 0xbd, 0x2, 0x5a9, 0x90a7, 0x2, 0x6, 0x0, 0x7, 0x2, 0xfffffffa, 0x2, 0x4, 0x8, 0x8, 0x7fffffff, 0x1, 0x939b, 0x9, 0x0, 0x1000, 0x7fffffff, 0x5, 0x401, 0x5, 0x9, 0xfff, 0xffff7fff, 0x3, 0x0, 0x7ff, 0x2, 0xa6, 0x0, 0xfff, 0x9, 0x200, 0x0, 0x8000, 0x2, 0x7fff, 0x1, 0xffffffde, 0x4, 0x3, 0x0, 0xecb7, 0x6b12, 0x1, 0x5, 0x7, 0x6, 0x3014, 0x401]}]}, @TCA_BASIC_ACT={0x4}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000c, 0x100010, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18)
ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)

kernel console output (not intermixed with test programs):

 ? __pfx_proc_fail_nth_read+0x10/0x10
[  449.469864][T10139]  vfs_read+0x20c/0xa70
[  449.469883][T10139]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  449.469903][T10139]  ? __pfx_vfs_read+0x10/0x10
[  449.469921][T10139]  ? kmem_cache_free+0x187/0x630
[  449.469939][T10139]  ? __pfx_aa_sk_perm+0x10/0x10
[  449.469961][T10139]  ? rcu_is_watching+0x15/0xb0
[  449.469990][T10139]  ksys_read+0x150/0x270
[  449.470004][T10139]  ? do_sock_setsockopt+0x185/0x1b0
[  449.470023][T10139]  ? __pfx_ksys_read+0x10/0x10
[  449.470043][T10139]  ? asm_int80_emulation+0x1a/0x20
[  449.470062][T10139]  do_int80_emulation+0x173/0x4d0
[  449.470080][T10139]  ? trace_irq_disable+0x3b/0x150
[  449.470103][T10139]  ? asm_int80_emulation+0x1a/0x20
[  449.470124][T10139]  ? clear_bhb_loop+0x40/0x90
[  449.470139][T10139]  ? clear_bhb_loop+0x40/0x90
[  449.470158][T10139]  asm_int80_emulation+0x1a/0x20
[  449.470172][T10139] RIP: 0023:0xf71f5cab
[  449.470186][T10139] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  449.470200][T10139] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  449.470216][T10139] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54ad5d0
[  449.470227][T10139] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  449.470236][T10139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  449.470244][T10139] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  449.470253][T10139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  449.470274][T10139]  </TASK>
[  450.925065][T10167] capability: warning: `syz.3.1182' uses 32-bit capabilities (legacy support in use)
[  451.205864][T10173] xt_ecn: cannot match TCP bits for non-tcp packets
[  451.509875][T10175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1186'.
[  451.660826][T10178] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  452.421579][T10194] syzkaller0: entered promiscuous mode
[  452.430927][T10194] syzkaller0: entered allmulticast mode
[  452.796967][ T5955] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  452.916738][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'.
[  452.958145][ T5955] usb 5-1: Using ep0 maxpacket: 8
[  452.977737][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'.
[  453.001189][ T5955] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  453.021379][ T5955] usb 5-1: config 0 has no interface number 0
[  453.036159][ T5955] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 93, changing to 10
[  453.066342][ T5955] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 24735, setting to 1024
[  453.106169][ T5955] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  453.136203][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.166028][ T5955] usb 5-1: config 0 descriptor??
[  453.191234][T10208] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1199'.
[  453.216551][ T5955] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  453.217407][T10208] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1199'.
[  453.259430][T10208] netlink: 'syz.1.1199': attribute type 4 has an invalid length.
[  453.274771][T10209] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1199'.
[  453.307158][T10209] openvswitch: netlink: Flow key attr not present in new flow.
[  453.378262][T10199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  453.404264][T10199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.512007][ T5955] usb 5-1: USB disconnect, device number 53
[  453.518071][    C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  453.612201][T10213] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.097250][ T3095] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  454.259656][ T3095] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  454.268805][ T3095] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.281938][ T3095] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  454.291858][ T3095] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  454.317624][ T3095] usb 1-1: Manufacturer: syz
[  454.346919][ T3095] usb 1-1: config 0 descriptor??
[  454.547757][ T3095] rc_core: IR keymap rc-hauppauge not found
[  454.565160][ T3095] Registered IR keymap rc-empty
[  454.585590][T10235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.595305][ T3095] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  454.626238][T10235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  454.648973][ T3095] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input56
[  454.708667][ T3095] usb 1-1: USB disconnect, device number 48
[  454.722516][T10240] FAULT_INJECTION: forcing a failure.
[  454.722516][T10240] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  454.760849][T10240] CPU: 0 UID: 0 PID: 10240 Comm: syz.4.1211 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  454.760883][T10240] Tainted: [L]=SOFTLOCKUP
[  454.760891][T10240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  454.760903][T10240] Call Trace:
[  454.760912][T10240]  <TASK>
[  454.760921][T10240]  dump_stack_lvl+0xe8/0x150
[  454.760956][T10240]  should_fail_ex+0x412/0x560
[  454.760992][T10240]  _copy_from_user+0x2d/0xb0
[  454.761017][T10240]  kstrtouint_from_user+0xd6/0x180
[  454.761050][T10240]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  454.761097][T10240]  proc_fail_nth_write+0x8e/0x210
[  454.761128][T10240]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  454.761164][T10240]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  454.761195][T10240]  vfs_write+0x29a/0xb90
[  454.761227][T10240]  ? __pfx_vfs_write+0x10/0x10
[  454.761251][T10240]  ? __fget_files+0x2a/0x420
[  454.761286][T10240]  ? __fget_files+0x3a0/0x420
[  454.761315][T10240]  ? __fget_files+0x2a/0x420
[  454.761354][T10240]  ksys_write+0x150/0x270
[  454.761379][T10240]  ? __pfx_ksys_write+0x10/0x10
[  454.761406][T10240]  ? asm_int80_emulation+0x1a/0x20
[  454.761432][T10240]  do_int80_emulation+0x173/0x4d0
[  454.761457][T10240]  ? trace_irq_disable+0x3b/0x150
[  454.761486][T10240]  ? asm_int80_emulation+0x1a/0x20
[  454.761506][T10240]  ? clear_bhb_loop+0x40/0x90
[  454.761527][T10240]  ? clear_bhb_loop+0x40/0x90
[  454.761552][T10240]  asm_int80_emulation+0x1a/0x20
[  454.761572][T10240] RIP: 0023:0xf7145cab
[  454.761591][T10240] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  454.761608][T10240] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  454.761631][T10240] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53fd5d0
[  454.761645][T10240] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  454.761657][T10240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  454.761669][T10240] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  454.761680][T10240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  454.761710][T10240]  </TASK>
[  455.194654][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1215'.
[  455.236954][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1215'.
[  455.347808][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1212'.
[  455.441737][T10258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1219'.
[  455.628247][T10269] binder: 10265:10269 ioctl 8070587c 80000100 returned -22
[  455.840834][T10277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1224'.
[  455.859023][ T5955] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  456.016749][   T42] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  456.036135][ T5955] usb 6-1: Using ep0 maxpacket: 32
[  456.069225][ T5955] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.111089][ T5955] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  456.160807][ T5955] usb 6-1: config 0 interface 0 has no altsetting 0
[  456.176193][   T42] usb 4-1: Using ep0 maxpacket: 32
[  456.185379][   T42] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  456.195232][ T5955] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  456.208922][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.238891][   T42] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  456.248459][   T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.258428][   T42] usb 4-1: Product: syz
[  456.262762][   T42] usb 4-1: Manufacturer: 뙮䃺ﱍ煸㼾锸넞㜯臵ᘖ탇熒⬾ら蚗覀豈ࠈᔫ묺觺嘪꘥頼썱쬎䭨洸ꖋ⣚洭ꎩ᷷᱁ᆶ엵鞉몔ᣝ嘂損宺뉫贃⌅싳㍄㸍꓎᜛錷ꜣቾ㦉榆핯齕镒㖗咘됟౵ᖱ땬
[  456.289050][   T42] usb 4-1: SerialNumber: syz
[  456.337486][ T5955] usb 6-1: config 0 descriptor??
[  456.624194][   T42] cdc_ncm 4-1:1.0: bind() failure
[  456.649036][   T42] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  456.666220][   T42] cdc_ncm 4-1:1.1: bind() failure
[  456.683841][   T42] usb 4-1: USB disconnect, device number 61
[  456.983689][   T29] kauditd_printk_skb: 60 callbacks suppressed
[  456.983709][   T29] audit: type=1326 audit(1774173805.779:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000
[  457.016898][   T29] audit: type=1326 audit(1774173805.779:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000
[  457.021395][T10295] FAULT_INJECTION: forcing a failure.
[  457.021395][T10295] name failslab, interval 1, probability 0, space 0, times 0
[  457.197092][T10295] CPU: 1 UID: 0 PID: 10295 Comm: syz.4.1231 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  457.197123][T10295] Tainted: [L]=SOFTLOCKUP
[  457.197129][T10295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  457.197141][T10295] Call Trace:
[  457.197148][T10295]  <TASK>
[  457.197158][T10295]  dump_stack_lvl+0xe8/0x150
[  457.197192][T10295]  should_fail_ex+0x412/0x560
[  457.197227][T10295]  should_failslab+0xa8/0x100
[  457.197255][T10295]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  457.197277][T10295]  ? __alloc_skb+0x186/0x7d0
[  457.197296][T10295]  ? __alloc_skb+0x1d0/0x7d0
[  457.197314][T10295]  ? __local_bh_enable_ip+0xd0/0x130
[  457.197344][T10295]  __alloc_skb+0x1d0/0x7d0
[  457.197363][T10295]  ? __raw_spin_lock_init+0x45/0x100
[  457.197387][T10295]  audit_log_start+0x416/0xa20
[  457.197418][T10295]  ? __pfx_audit_log_start+0x10/0x10
[  457.197448][T10295]  ? get_pid_task+0x20/0x1f0
[  457.197492][T10295]  ? get_pid_task+0x20/0x1f0
[  457.197542][T10295]  audit_seccomp+0x63/0x190
[  457.197564][T10295]  ? clear_bhb_loop+0x40/0x90
[  457.197585][T10295]  ? clear_bhb_loop+0xe/0x90
[  457.197610][T10295]  __seccomp_filter+0xd48/0x1ef0
[  457.197645][T10295]  ? __pfx___seccomp_filter+0x10/0x10
[  457.197666][T10295]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  457.197697][T10295]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  457.197725][T10295]  ? __fget_files+0x3a0/0x420
[  457.197781][T10295]  ? __secure_computing+0xe1/0x2a0
[  457.197808][T10295]  __do_fast_syscall_32+0x332/0x640
[  457.197835][T10295]  ? do_fast_syscall_32+0x33/0x70
[  457.197857][T10295]  ? asm_int80_emulation+0x1a/0x20
[  457.197876][T10295]  ? do_int80_emulation+0x274/0x4d0
[  457.197904][T10295]  do_fast_syscall_32+0x33/0x70
[  457.197928][T10295]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  457.197953][T10295] RIP: 0023:0xf700ef6c
[  457.197970][T10295] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  457.197987][T10295] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 000000000000016f
[  457.198008][T10295] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  457.198021][T10295] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000
[  457.198034][T10295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  457.198045][T10295] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  457.198057][T10295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  457.198085][T10295]  </TASK>
[  457.456318][T10295] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  457.464217][T10295] audit: out of memory in audit_log_start
[  457.548307][   T29] audit: type=1326 audit(1774173805.819:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000
[  457.614052][ T5955] uclogic 0003:5543:0005.0011: reserved main item tag 0xe
[  457.628025][ T5955] uclogic 0003:5543:0005.0011: hidraw0: USB HID v0.04 Device [HID 5543:0005] on usb-dummy_hcd.5-1/input0
[  457.706974][   T29] audit: type=1326 audit(1774173805.819:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700ef6c code=0x7ffc0000
[  457.858877][   T29] audit: type=1326 audit(1774173805.819:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000
[  457.904098][   T29] audit: type=1326 audit(1774173805.819:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000
[  457.951781][T10300] binfmt_misc: register: failed to install interpreter file ./file0
[  458.031531][   T29] audit: type=1326 audit(1774173805.819:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000
[  458.073530][   T29] audit: type=1326 audit(1774173805.819:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000
[  458.127127][T10304] binfmt_misc: register: failed to install interpreter file ./file0
[  458.196379][ T5955] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  458.288340][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1234'.
[  458.358586][ T5955] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  458.368844][ T5955] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  458.381054][ T5955] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[  458.390953][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.406203][ T5928] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  458.557565][ T5905] usb 6-1: USB disconnect, device number 5
[  458.570240][ T5955] usb 4-1: Product: syz
[  458.583693][ T5955] usb 4-1: Manufacturer: syz
[  458.594214][ T5955] usb 4-1: SerialNumber: syz
[  458.633934][ T5928] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  458.809318][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.825569][ T5928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  458.841997][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.861352][ T5928] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[  458.894108][T10300] sctp: [Deprecated]: syz.3.1233 (pid 10300) Use of struct sctp_assoc_value in delayed_ack socket option.
[  458.894108][T10300] Use struct sctp_sack_info instead
[  458.916146][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.932056][ T5928] usb 2-1: Product: syz
[  458.941179][ T5928] usb 2-1: Manufacturer: syz
[  458.955246][ T5928] usb 2-1: SerialNumber: syz
[  458.964543][T10300] FAULT_INJECTION: forcing a failure.
[  458.964543][T10300] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  459.010856][T10312] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  459.020216][T10300] CPU: 1 UID: 0 PID: 10300 Comm: syz.3.1233 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  459.020249][T10300] Tainted: [L]=SOFTLOCKUP
[  459.020257][T10300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  459.020270][T10300] Call Trace:
[  459.020279][T10300]  <TASK>
[  459.020289][T10300]  dump_stack_lvl+0xe8/0x150
[  459.020328][T10300]  should_fail_ex+0x412/0x560
[  459.020362][T10300]  _copy_to_user+0x31/0xb0
[  459.020396][T10300]  simple_read_from_buffer+0xe1/0x170
[  459.020433][T10300]  proc_fail_nth_read+0x1bb/0x230
[  459.020467][T10300]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  459.020500][T10300]  ? rw_verify_area+0x2a6/0x4d0
[  459.020521][T10300]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  459.020553][T10300]  vfs_read+0x20c/0xa70
[  459.020575][T10300]  ? fdget_pos+0x246/0x320
[  459.020610][T10300]  ? __pfx___mutex_lock+0x10/0x10
[  459.020636][T10300]  ? __pfx_vfs_read+0x10/0x10
[  459.020660][T10300]  ? __fget_files+0x2a/0x420
[  459.020695][T10300]  ? __fget_files+0x3a0/0x420
[  459.020724][T10300]  ? __fget_files+0x2a/0x420
[  459.020763][T10300]  ksys_read+0x150/0x270
[  459.020789][T10300]  ? __pfx_ksys_read+0x10/0x10
[  459.020816][T10300]  ? asm_int80_emulation+0x1a/0x20
[  459.020842][T10300]  do_int80_emulation+0x173/0x4d0
[  459.020868][T10300]  ? trace_irq_disable+0x3b/0x150
[  459.020899][T10300]  ? asm_int80_emulation+0x1a/0x20
[  459.020918][T10300]  ? clear_bhb_loop+0x40/0x90
[  459.020940][T10300]  ? clear_bhb_loop+0x40/0x90
[  459.020967][T10300]  asm_int80_emulation+0x1a/0x20
[  459.020988][T10300] RIP: 0023:0xf7155cab
[  459.021007][T10300] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  459.021025][T10300] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  459.021046][T10300] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000f540d5d0
[  459.021061][T10300] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  459.021072][T10300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  459.021084][T10300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  459.021096][T10300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  459.021126][T10300]  </TASK>
[  459.266355][T10304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.275191][T10304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.294219][T10304] sctp: [Deprecated]: syz.1.1235 (pid 10304) Use of struct sctp_assoc_value in delayed_ack socket option.
[  459.294219][T10304] Use struct sctp_sack_info instead
[  459.364415][ T5955] usb 4-1: 0:1 : does not exist
[  459.369672][ T5955] usb 4-1: unit 116 not found!
[  459.374546][ T5955] usb 4-1: unit 114 not found!
[  459.405657][ T5928] usb 2-1: 0:1 : does not exist
[  459.410656][ T5928] usb 2-1: unit 116 not found!
[  459.415431][ T5928] usb 2-1: unit 114 not found!
[  459.452497][ T5928] usb 2-1: USB disconnect, device number 52
[  459.520487][ T5955] usb 4-1: USB disconnect, device number 62
[  459.720234][ T6160] udevd[6160]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  459.877204][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  460.257305][ T5955] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  460.568260][ T5955] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  460.582721][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.666277][ T5955] usb 4-1: Product: syz
[  460.673574][ T5955] usb 4-1: Manufacturer: syz
[  460.687307][ T5955] usb 4-1: SerialNumber: syz
[  460.711901][ T5955] usb 4-1: config 0 descriptor??
[  460.728781][ T5955] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  460.965931][ T5955] gspca_stk1135: reg_w 0x2 err -71
[  460.972441][ T5955] gspca_stk1135: serial bus timeout: status=0x00
[  460.994592][ T5955] gspca_stk1135: Sensor write failed
[  461.014156][ T5955] gspca_stk1135: serial bus timeout: status=0x00
[  461.056657][ T5955] gspca_stk1135: Sensor write failed
[  461.084934][ T5955] gspca_stk1135: serial bus timeout: status=0x00
[  461.121983][ T5955] gspca_stk1135: Sensor read failed
[  461.155203][ T5955] gspca_stk1135: serial bus timeout: status=0x00
[  461.172111][ T5955] gspca_stk1135: Sensor read failed
[  461.185719][ T5955] gspca_stk1135: Detected sensor type unknown (0x0)
[  461.226187][ T5955] gspca_stk1135: serial bus timeout: status=0x00
[  461.232587][ T5955] gspca_stk1135: Sensor read failed
[  461.266666][ T5955] gspca_stk1135: serial bus timeout: status=0x00
[  461.293596][ T5955] gspca_stk1135: Sensor read failed
[  461.344003][T10342] FAULT_INJECTION: forcing a failure.
[  461.344003][T10342] name failslab, interval 1, probability 0, space 0, times 0
[  461.369384][ T5955] gspca_stk1135: serial bus timeout: status=0x00
[  461.375794][ T5955] gspca_stk1135: Sensor write failed
[  461.407863][ T5955] gspca_stk1135: serial bus timeout: status=0x00
[  461.423605][ T5955] gspca_stk1135: Sensor write failed
[  461.442627][T10342] CPU: 1 UID: 0 PID: 10342 Comm: syz.5.1247 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  461.442662][T10342] Tainted: [L]=SOFTLOCKUP
[  461.442671][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  461.442684][T10342] Call Trace:
[  461.442692][T10342]  <TASK>
[  461.442701][T10342]  dump_stack_lvl+0xe8/0x150
[  461.442738][T10342]  should_fail_ex+0x412/0x560
[  461.442775][T10342]  should_failslab+0xa8/0x100
[  461.442803][T10342]  ? vm_area_dup+0x2b/0x680
[  461.442826][T10342]  kmem_cache_alloc_noprof+0x87/0x650
[  461.442848][T10342]  ? __lock_acquire+0x6b5/0x2cf0
[  461.442884][T10342]  vm_area_dup+0x2b/0x680
[  461.442913][T10342]  __split_vma+0x1dc/0xa40
[  461.442958][T10342]  ? __pfx___split_vma+0x10/0x10
[  461.443007][T10342]  ? can_vma_merge_left+0x191/0x3e0
[  461.443038][T10342]  vma_modify+0xa30/0x2060
[  461.443098][T10342]  vma_modify_flags+0x24b/0x330
[  461.443124][T10342]  ? unwind_get_return_address+0x4d/0x90
[  461.443158][T10342]  ? __pfx_vma_modify_flags+0x10/0x10
[  461.443204][T10342]  ? __lock_acquire+0x6b5/0x2cf0
[  461.443240][T10342]  madvise_vma_behavior+0x1c5c/0x4300
[  461.443274][T10342]  ? ima_match_policy+0x112/0x21e0
[  461.443300][T10342]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  461.443344][T10342]  ? process_measurement+0x7ce/0x1c80
[  461.443379][T10342]  ? up_write+0x1ab/0x410
[  461.443404][T10342]  ? process_measurement+0x195e/0x1c80
[  461.443429][T10342]  ? process_measurement+0x371/0x1c80
[  461.443466][T10342]  ? __pfx_process_measurement+0x10/0x10
[  461.443491][T10342]  ? tomoyo_check_open_permission+0x38e/0x470
[  461.443519][T10342]  ? mas_ascend+0x304/0x890
[  461.443555][T10342]  ? mas_prev_node+0xb32/0xdb0
[  461.443594][T10342]  ? mas_prev_slot+0xb31/0xbb0
[  461.443631][T10342]  ? find_vma_prev+0x123/0x1b0
[  461.443665][T10342]  ? __pfx_find_vma_prev+0x10/0x10
[  461.443708][T10342]  ? __lock_acquire+0x6b5/0x2cf0
[  461.443742][T10342]  madvise_walk_vmas+0x573/0xae0
[  461.443781][T10342]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  461.443813][T10342]  ? blk_start_plug+0x6e/0x1b0
[  461.443859][T10342]  madvise_do_behavior+0x386/0x540
[  461.443891][T10342]  ? __pfx_madvise_do_behavior+0x10/0x10
[  461.443928][T10342]  ? iov_iter_iovec_advance+0x1e0/0x290
[  461.443953][T10342]  ? madvise_should_skip+0x2c6/0x2f0
[  461.443982][T10342]  __se_sys_process_madvise+0x55e/0x980
[  461.444008][T10342]  ? get_pid_task+0x20/0x1f0
[  461.444026][T10342]  ? get_pid_task+0x20/0x1f0
[  461.444055][T10342]  ? __pfx___se_sys_process_madvise+0x10/0x10
[  461.444096][T10342]  ? ksys_write+0x1e6/0x270
[  461.444153][T10342]  ? ksys_write+0x242/0x270
[  461.444185][T10342]  ? __ia32_sys_process_madvise+0x20/0xc0
[  461.444215][T10342]  __do_fast_syscall_32+0x20d/0x640
[  461.444243][T10342]  ? do_fast_syscall_32+0x33/0x70
[  461.444267][T10342]  ? asm_int80_emulation+0x1a/0x20
[  461.444288][T10342]  ? do_int80_emulation+0x274/0x4d0
[  461.444312][T10342]  ? trace_irq_disable+0x3b/0x150
[  461.444347][T10342]  do_fast_syscall_32+0x33/0x70
[  461.444380][T10342]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  461.444406][T10342] RIP: 0023:0xf7f17f6c
[  461.444438][T10342] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  461.444455][T10342] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 00000000000001b8
[  461.444477][T10342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[  461.444492][T10342] RDX: 0000000000000002 RSI: 0000000000000010 RDI: 0000000000000000
[  461.444504][T10342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  461.444515][T10342] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  461.444527][T10342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  461.444557][T10342]  </TASK>
[  461.906315][ T5955] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  461.917844][ T5955] usb 4-1: USB disconnect, device number 63
[  462.518038][T10360] xt_CT: You must specify a L4 protocol and not use inversions on it
[  462.566245][ T5827] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  463.377122][ T5827] usb 6-1: Using ep0 maxpacket: 32
[  463.419478][ T5827] usb 6-1: unable to get BOS descriptor or descriptor too short
[  463.450400][ T5827] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 123, changing to 7
[  463.476379][T10366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1254'.
[  463.500636][ T5827] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  463.547530][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.586332][ T5827] usb 6-1: Product: syz
[  463.596393][ T5827] usb 6-1: Manufacturer: syz
[  463.612441][ T5827] usb 6-1: SerialNumber: syz
[  464.021556][T10354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  464.030798][T10354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.106414][ T3095] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  464.183683][ T5827] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  464.191935][ T5827] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  464.264566][ T5827] usb 6-1: USB disconnect, device number 6
[  464.279356][ T3095] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  464.294551][ T3095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.344014][ T3095] usb 1-1: Product: syz
[  464.355399][ T3095] usb 1-1: Manufacturer: syz
[  464.369339][ T3095] usb 1-1: SerialNumber: syz
[  464.393684][ T3095] usb 1-1: config 0 descriptor??
[  464.414783][ T3095] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  464.633500][ T3095] gspca_stk1135: reg_w 0x2 err -71
[  464.653455][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  464.667194][ T3095] gspca_stk1135: Sensor write failed
[  464.672910][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  464.680739][ T3095] gspca_stk1135: Sensor write failed
[  464.687669][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  464.694238][ T3095] gspca_stk1135: Sensor read failed
[  464.703978][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  464.715246][ T3095] gspca_stk1135: Sensor read failed
[  464.726210][ T3095] gspca_stk1135: Detected sensor type unknown (0x0)
[  464.743628][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  464.752851][ T3095] gspca_stk1135: Sensor read failed
[  464.773602][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  464.801953][ T3095] gspca_stk1135: Sensor read failed
[  464.819192][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  464.835845][ T3095] gspca_stk1135: Sensor write failed
[  464.858868][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  464.867793][T10382] binfmt_misc: register: failed to install interpreter file ./file0
[  464.890331][ T3095] gspca_stk1135: Sensor write failed
[  464.914361][ T3095] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  464.938734][ T3095] usb 1-1: USB disconnect, device number 49
[  465.136334][ T5827] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  465.290714][ T5827] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  465.311641][ T5827] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  465.357357][ T5827] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[  465.396166][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.415450][ T5827] usb 5-1: Product: syz
[  465.422302][ T5827] usb 5-1: Manufacturer: syz
[  465.427597][ T5827] usb 5-1: SerialNumber: syz
[  465.460935][T10390] FAULT_INJECTION: forcing a failure.
[  465.460935][T10390] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.488712][T10390] CPU: 0 UID: 0 PID: 10390 Comm: syz.0.1263 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  465.488747][T10390] Tainted: [L]=SOFTLOCKUP
[  465.488756][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  465.488775][T10390] Call Trace:
[  465.488784][T10390]  <TASK>
[  465.488794][T10390]  dump_stack_lvl+0xe8/0x150
[  465.488855][T10390]  should_fail_ex+0x412/0x560
[  465.488895][T10390]  _copy_from_user+0x2d/0xb0
[  465.488922][T10390]  io_query+0x13c/0x680
[  465.488963][T10390]  ? __pfx_io_query+0x10/0x10
[  465.488989][T10390]  ? __fget_files+0x2a/0x420
[  465.489018][T10390]  ? __fget_files+0x2a/0x420
[  465.489043][T10390]  ? io_is_uring_fops+0xd/0x50
[  465.489061][T10390]  __se_sys_io_uring_register+0x1046/0x19a0
[  465.489086][T10390]  ? __fget_files+0x3a0/0x420
[  465.489113][T10390]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  465.489136][T10390]  ? fput+0xa0/0xd0
[  465.489159][T10390]  ? ksys_write+0x242/0x270
[  465.489185][T10390]  __do_fast_syscall_32+0x20d/0x640
[  465.489207][T10390]  ? do_fast_syscall_32+0x33/0x70
[  465.489225][T10390]  ? asm_int80_emulation+0x1a/0x20
[  465.489240][T10390]  ? do_int80_emulation+0x274/0x4d0
[  465.489258][T10390]  ? trace_irq_disable+0x3b/0x150
[  465.489285][T10390]  do_fast_syscall_32+0x33/0x70
[  465.489305][T10390]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  465.489324][T10390] RIP: 0023:0xf701ef6c
[  465.489339][T10390] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  465.489353][T10390] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab
[  465.489370][T10390] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000023
[  465.489381][T10390] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  465.489390][T10390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  465.489399][T10390] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  465.489409][T10390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  465.489431][T10390]  </TASK>
[  465.718130][T10382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.727247][T10382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.751604][T10382] sctp: [Deprecated]: syz.4.1260 (pid 10382) Use of struct sctp_assoc_value in delayed_ack socket option.
[  465.751604][T10382] Use struct sctp_sack_info instead
[  465.780077][T10392] netlink: 'syz.3.1264': attribute type 13 has an invalid length.
[  465.790282][ T5827] usb 5-1: 0:1 : does not exist
[  465.795280][ T5827] usb 5-1: unit 116 not found!
[  465.800185][ T5827] usb 5-1: unit 114 not found!
[  465.860212][ T5827] usb 5-1: USB disconnect, device number 54
[  465.950509][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  465.975289][T10397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1265'.
[  466.164300][T10400] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  466.266524][T10405] FAULT_INJECTION: forcing a failure.
[  466.266524][T10405] name failslab, interval 1, probability 0, space 0, times 0
[  466.285347][T10405] CPU: 1 UID: 0 PID: 10405 Comm: syz.5.1268 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  466.285382][T10405] Tainted: [L]=SOFTLOCKUP
[  466.285390][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  466.285404][T10405] Call Trace:
[  466.285413][T10405]  <TASK>
[  466.285422][T10405]  dump_stack_lvl+0xe8/0x150
[  466.285459][T10405]  should_fail_ex+0x412/0x560
[  466.285497][T10405]  should_failslab+0xa8/0x100
[  466.285526][T10405]  __kvmalloc_node_noprof+0x178/0x8a0
[  466.285553][T10405]  ? rhashtable_init_noprof+0x52e/0xa70
[  466.285577][T10405]  ? rhashtable_init_noprof+0x12d/0xa70
[  466.285604][T10405]  rhashtable_init_noprof+0x52e/0xa70
[  466.285633][T10405]  rhltable_init_noprof+0x1e/0x60
[  466.285656][T10405]  nf_tables_newtable+0x68f/0x1910
[  466.285705][T10405]  nfnetlink_rcv+0x1240/0x27b0
[  466.285781][T10405]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  466.285829][T10405]  ? ref_tracker_free+0x693/0x840
[  466.285893][T10405]  ? __netlink_deliver_tap+0x807/0x850
[  466.285926][T10405]  ? netlink_deliver_tap+0x2e/0x1b0
[  466.285978][T10405]  netlink_unicast+0x80f/0x9b0
[  466.286018][T10405]  ? __pfx_netlink_unicast+0x10/0x10
[  466.286055][T10405]  ? netlink_sendmsg+0x650/0xb40
[  466.286086][T10405]  ? skb_put+0x11b/0x210
[  466.286112][T10405]  netlink_sendmsg+0x813/0xb40
[  466.286154][T10405]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.286191][T10405]  ? aa_sock_msg_perm+0xf1/0x1b0
[  466.286222][T10405]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  466.286249][T10405]  ____sys_sendmsg+0x972/0x9f0
[  466.286282][T10405]  ? __pfx_____sys_sendmsg+0x10/0x10
[  466.286310][T10405]  ? kstrtoull+0x12f/0x1d0
[  466.286346][T10405]  ___sys_sendmsg+0x2a5/0x360
[  466.286375][T10405]  ? __pfx____sys_sendmsg+0x10/0x10
[  466.286403][T10405]  ? get_pid_task+0x20/0x1f0
[  466.286423][T10405]  ? get_pid_task+0x20/0x1f0
[  466.286442][T10405]  ? get_pid_task+0x20/0x1f0
[  466.286490][T10405]  ? __fget_files+0x2a/0x420
[  466.286521][T10405]  ? __fget_files+0x3a0/0x420
[  466.286564][T10405]  __sys_sendmsg+0x183/0x260
[  466.286591][T10405]  ? __pfx___sys_sendmsg+0x10/0x10
[  466.286640][T10405]  __do_fast_syscall_32+0x20d/0x640
[  466.286668][T10405]  ? do_fast_syscall_32+0x33/0x70
[  466.286692][T10405]  ? asm_int80_emulation+0x1a/0x20
[  466.286713][T10405]  ? do_int80_emulation+0x274/0x4d0
[  466.286745][T10405]  ? trace_irq_disable+0x3b/0x150
[  466.286781][T10405]  do_fast_syscall_32+0x33/0x70
[  466.286807][T10405]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  466.286834][T10405] RIP: 0023:0xf7f17f6c
[  466.286853][T10405] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  466.286872][T10405] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  466.286894][T10405] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  466.286909][T10405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  466.286921][T10405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  466.286933][T10405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  466.286945][T10405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  466.286975][T10405]  </TASK>
[  466.896412][ T5827] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  466.916209][ T5918] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  467.039012][ T3095] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  467.056356][ T5827] usb 1-1: Using ep0 maxpacket: 8
[  467.064096][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  467.086235][ T5918] usb 5-1: Using ep0 maxpacket: 32
[  467.091525][ T5827] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  467.101083][   T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  467.110429][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.126907][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short
[  467.138009][ T5918] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 123, changing to 7
[  467.150311][ T5827] usb 1-1: config 0 descriptor??
[  467.167497][ T5827] gspca_main: vc032x-2.14.0 probing 046d:0892
[  467.177518][ T5918] usb 5-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  467.187431][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.195561][ T5918] usb 5-1: Product: syz
[  467.200589][ T5918] usb 5-1: Manufacturer: syz
[  467.205331][ T5918] usb 5-1: SerialNumber: syz
[  467.216882][ T3095] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  467.227903][ T3095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.236196][ T3095] usb 6-1: Product: syz
[  467.240429][ T3095] usb 6-1: Manufacturer: syz
[  467.245122][ T3095] usb 6-1: SerialNumber: syz
[  467.259586][ T3095] usb 6-1: config 0 descriptor??
[  467.270569][ T3095] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  467.276964][   T10] usb 4-1: Using ep0 maxpacket: 8
[  467.284373][   T10] usb 4-1: config 36 has an invalid descriptor of length 189, skipping remainder of the config
[  467.295646][   T10] usb 4-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[  467.305241][   T10] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a
[  467.315855][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.481247][ T3095] gspca_stk1135: reg_w 0x2 err -71
[  467.497330][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  467.526220][ T3095] gspca_stk1135: Sensor write failed
[  467.545602][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.562331][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  467.587713][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.596173][ T3095] gspca_stk1135: Sensor write failed
[  467.596217][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  467.596232][ T3095] gspca_stk1135: Sensor read failed
[  467.602784][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.637599][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  467.644139][ T3095] gspca_stk1135: Sensor read failed
[  467.649766][ T3095] gspca_stk1135: Detected sensor type unknown (0x0)
[  467.657334][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.665220][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  467.675839][ T3095] gspca_stk1135: Sensor read failed
[  467.684192][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  467.691188][ T3095] gspca_stk1135: Sensor read failed
[  467.705246][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  467.712254][ T3095] gspca_stk1135: Sensor write failed
[  467.714122][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.730379][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  467.742334][ T3095] gspca_stk1135: Sensor write failed
[  467.748190][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.758399][ T3095] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[  467.771384][ T3095] usb 6-1: USB disconnect, device number 7
[  467.809910][   T10] usb 4-1: string descriptor 0 read error: -71
[  467.837841][   T10] usb 4-1: USB disconnect, device number 64
[  467.901460][ T5918] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  467.910851][ T5918] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  467.997854][ T5918] usb 5-1: USB disconnect, device number 55
[  468.075860][ T6480] udevd[6480]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  468.421354][T10435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1280'.
[  468.438471][ T5827] gspca_vc032x: reg_w err -71
[  468.446275][ T5827] vc032x 1-1:0.0: probe with driver vc032x failed with error -71
[  468.478690][ T5827] usb 1-1: USB disconnect, device number 50
[  469.264896][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'.
[  470.696366][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  470.848966][   T10] usb 6-1: Using ep0 maxpacket: 32
[  470.873063][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  470.904769][   T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 123, changing to 7
[  471.111720][   T10] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  471.125505][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.144846][   T10] usb 6-1: Product: syz
[  471.170878][   T10] usb 6-1: Manufacturer: syz
[  471.183330][   T10] usb 6-1: SerialNumber: syz
[  471.392009][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'.
[  471.401091][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'.
[  471.471192][T10483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.481635][T10483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.637740][   T10] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  471.645165][   T10] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  471.955216][   T10] usb 6-1: USB disconnect, device number 8
[  472.833420][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1304'.
[  472.867223][   T29] kauditd_printk_skb: 168 callbacks suppressed
[  472.867248][   T29] audit: type=1326 audit(1774173821.669:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  472.936625][   T29] audit: type=1326 audit(1774173821.729:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  472.990517][   T29] audit: type=1326 audit(1774173821.729:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  473.102855][   T29] audit: type=1326 audit(1774173821.729:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  473.180427][   T29] audit: type=1326 audit(1774173821.729:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  473.267162][   T29] audit: type=1326 audit(1774173821.729:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  473.364513][   T29] audit: type=1326 audit(1774173821.729:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  473.422731][   T29] audit: type=1326 audit(1774173821.729:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  473.455341][   T29] audit: type=1326 audit(1774173821.729:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  473.803612][   T29] audit: type=1326 audit(1774173822.599:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  473.829595][T10537] FAULT_INJECTION: forcing a failure.
[  473.829595][T10537] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  473.845128][T10537] CPU: 0 UID: 0 PID: 10537 Comm: syz.1.1312 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  473.845161][T10537] Tainted: [L]=SOFTLOCKUP
[  473.845168][T10537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  473.845180][T10537] Call Trace:
[  473.845188][T10537]  <TASK>
[  473.845197][T10537]  dump_stack_lvl+0xe8/0x150
[  473.845233][T10537]  should_fail_ex+0x412/0x560
[  473.845267][T10537]  prepare_alloc_pages+0x22a/0x650
[  473.845302][T10537]  __alloc_frozen_pages_noprof+0x12f/0x380
[  473.845333][T10537]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  473.845375][T10537]  ? __pfx_policy_nodemask+0x10/0x10
[  473.845407][T10537]  ? __lock_acquire+0x6b5/0x2cf0
[  473.845438][T10537]  alloc_pages_mpol+0x232/0x4a0
[  473.845471][T10537]  vma_alloc_folio_noprof+0xea/0x210
[  473.845502][T10537]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  473.845542][T10537]  do_pte_missing+0x1656/0x3490
[  473.845587][T10537]  handle_mm_fault+0x1bec/0x3310
[  473.845634][T10537]  ? handle_mm_fault+0xee/0x3310
[  473.845674][T10537]  ? __pfx_handle_mm_fault+0x10/0x10
[  473.845706][T10537]  ? follow_page_pte+0x841/0x1450
[  473.845748][T10537]  ? __pfx_follow_page_pte+0x10/0x10
[  473.845791][T10537]  __get_user_pages+0x165b/0x29d0
[  473.845851][T10537]  get_user_pages_unlocked+0x1e2/0x710
[  473.845887][T10537]  hva_to_pfn+0x34d/0xe00
[  473.845913][T10537]  ? __pfx_hva_to_pfn+0x10/0x10
[  473.845936][T10537]  ? xas_start+0x390/0x770
[  473.845955][T10537]  ? xa_load+0x60/0x210
[  473.845983][T10537]  ? kvm_follow_pfn+0x21a/0x3c0
[  473.846003][T10537]  __kvm_faultin_pfn+0xaa/0x100
[  473.846033][T10537]  kvm_mmu_faultin_pfn+0x735/0x15e0
[  473.846071][T10537]  ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10
[  473.846106][T10537]  kvm_tdp_page_fault+0x273/0x370
[  473.846135][T10537]  kvm_mmu_do_page_fault+0x33d/0x690
[  473.846167][T10537]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  473.846202][T10537]  ? __lock_acquire+0x6b5/0x2cf0
[  473.846232][T10537]  kvm_mmu_page_fault+0x22f/0xb70
[  473.846259][T10537]  ? handle_ept_violation+0x420/0x740
[  473.846279][T10537]  ? __pfx_handle_ept_violation+0x10/0x10
[  473.846296][T10537]  vmx_handle_exit+0xfd1/0x16c0
[  473.846335][T10537]  vcpu_run+0x5fa2/0x7b90
[  473.846362][T10537]  ? __lock_acquire+0x6b5/0x2cf0
[  473.846406][T10537]  ? vcpu_run+0x4ca8/0x7b90
[  473.846467][T10537]  ? __pfx_vcpu_run+0x10/0x10
[  473.846485][T10537]  ? fpu_swap_kvm_fpstate+0xc1/0x4f0
[  473.846514][T10537]  ? rcu_is_watching+0x15/0xb0
[  473.846543][T10537]  kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0
[  473.846564][T10537]  ? format_decode+0xd0/0xe10
[  473.846599][T10537]  ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0
[  473.846620][T10537]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  473.846641][T10537]  ? rcu_is_watching+0x15/0xb0
[  473.846665][T10537]  ? trace_contention_end+0x3d/0x150
[  473.846695][T10537]  ? __mutex_lock+0x319/0x1300
[  473.846726][T10537]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  473.846748][T10537]  ? __pfx___mutex_lock+0x10/0x10
[  473.846775][T10537]  ? kasan_quarantine_put+0xbb/0x1f0
[  473.846803][T10537]  kvm_vcpu_ioctl+0xa62/0xfd0
[  473.846826][T10537]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  473.846842][T10537]  ? do_vfs_ioctl+0x1166/0x1530
[  473.846865][T10537]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  473.846919][T10537]  kvm_vcpu_compat_ioctl+0x204/0x390
[  473.846940][T10537]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  473.846959][T10537]  ? __fget_files+0x3a0/0x420
[  473.846984][T10537]  ? __fget_files+0x2a/0x420
[  473.847013][T10537]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  473.847040][T10537]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  473.847065][T10537]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  473.847090][T10537]  ? __fget_files+0x3a0/0x420
[  473.847137][T10537]  ? __secure_computing+0xe1/0x2a0
[  473.847161][T10537]  __do_fast_syscall_32+0x20d/0x640
[  473.847185][T10537]  ? do_fast_syscall_32+0x33/0x70
[  473.847204][T10537]  ? asm_int80_emulation+0x1a/0x20
[  473.847221][T10537]  ? do_int80_emulation+0x274/0x4d0
[  473.847241][T10537]  ? trace_irq_disable+0x3b/0x150
[  473.847270][T10537]  do_fast_syscall_32+0x33/0x70
[  473.847292][T10537]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  473.847314][T10537] RIP: 0023:0xf70bef6c
[  473.847331][T10537] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  473.847355][T10537] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  473.847376][T10537] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80
[  473.847388][T10537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  473.847398][T10537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  473.847408][T10537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  473.847418][T10537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  473.847445][T10537]  </TASK>
[  474.473875][T10543] syzkaller0: entered promiscuous mode
[  474.485987][T10543] syzkaller0: entered allmulticast mode
[  474.856616][T10548] PKCS7: Unknown OID: [4] 4.2.137581095.2.17.17.6757.42.118.403037(bad)
[  474.865382][T10548] PKCS7: Only support pkcs7_signedData type
[  475.756469][ T5905] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  475.926373][ T5905] usb 5-1: Using ep0 maxpacket: 8
[  475.935616][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  475.948305][ T5905] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  475.958795][ T5905] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  475.977361][ T5905] usb 5-1: Product: syz
[  475.988389][ T5905] usb 5-1: Manufacturer: syz
[  476.002277][ T5905] usb 5-1: SerialNumber: syz
[  476.017754][   T13] wlan0: Trigger new scan to find an IBSS to join
[  476.260167][T10568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.269242][T10568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.280320][ T5905] usb 5-1: Handspring Visor / Palm OS: No valid connect info available
[  476.296343][ T5905] usb 5-1: Handspring Visor / Palm OS: port 166, is for unknown use
[  476.315534][ T5905] usb 5-1: Handspring Visor / Palm OS: port 225, is for unknown use
[  476.341154][ T5905] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2
[  476.455061][T10574] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  476.506341][ T5905] usb 5-1: palm_os_3_probe - error -71 getting bytes available request
[  476.539344][ T5905] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  476.595296][ T5905] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  476.618876][ T5905] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  476.649101][ T5905] usb 5-1: USB disconnect, device number 56
[  476.718194][ T5905] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  476.756801][ T5905] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  476.793767][ T5905] visor 5-1:1.0: device disconnected
[  476.806288][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  477.129677][   T10] usb 6-1: Using ep0 maxpacket: 32
[  477.155194][   T10] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  477.175133][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.194412][   T10] usb 6-1: Product: syz
[  477.202562][   T10] usb 6-1: Manufacturer: syz
[  477.207715][   T10] usb 6-1: SerialNumber: syz
[  477.215429][   T10] usb 6-1: config 0 descriptor??
[  477.224913][   T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  477.346646][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'.
[  477.516255][   T10] gspca_ov534_9: reg_w failed -71
[  477.588968][T10595] FAULT_INJECTION: forcing a failure.
[  477.588968][T10595] name failslab, interval 1, probability 0, space 0, times 0
[  477.618861][T10595] CPU: 0 UID: 0 PID: 10595 Comm: syz.4.1332 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  477.618897][T10595] Tainted: [L]=SOFTLOCKUP
[  477.618906][T10595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  477.618920][T10595] Call Trace:
[  477.618929][T10595]  <TASK>
[  477.618939][T10595]  dump_stack_lvl+0xe8/0x150
[  477.618975][T10595]  should_fail_ex+0x412/0x560
[  477.619011][T10595]  should_failslab+0xa8/0x100
[  477.619040][T10595]  __kmalloc_noprof+0xe8/0x760
[  477.619066][T10595]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  477.619100][T10595]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  477.619134][T10595]  genl_family_rcv_msg_doit+0xd9/0x330
[  477.619168][T10595]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  477.619202][T10595]  ? apparmor_capable+0x126/0x170
[  477.619229][T10595]  ? bpf_lsm_capable+0x9/0x20
[  477.619258][T10595]  ? security_capable+0x7e/0x2c0
[  477.619294][T10595]  genl_rcv_msg+0x61c/0x7a0
[  477.619326][T10595]  ? __pfx_genl_rcv_msg+0x10/0x10
[  477.619349][T10595]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  477.619374][T10595]  ? __pfx_nl80211_set_tid_config+0x10/0x10
[  477.619398][T10595]  ? __pfx_nl80211_post_doit+0x10/0x10
[  477.619424][T10595]  ? __lock_acquire+0x6b5/0x2cf0
[  477.619463][T10595]  netlink_rcv_skb+0x232/0x4b0
[  477.619496][T10595]  ? __pfx_genl_rcv_msg+0x10/0x10
[  477.619522][T10595]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  477.619573][T10595]  ? down_read+0x272/0x2e0
[  477.619597][T10595]  ? genl_rcv+0xd/0x40
[  477.619623][T10595]  genl_rcv+0x28/0x40
[  477.619645][T10595]  netlink_unicast+0x80f/0x9b0
[  477.619684][T10595]  ? __pfx_netlink_unicast+0x10/0x10
[  477.619714][T10595]  ? netlink_sendmsg+0x650/0xb40
[  477.619744][T10595]  ? skb_put+0x11b/0x210
[  477.619771][T10595]  netlink_sendmsg+0x813/0xb40
[  477.619819][T10595]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.619854][T10595]  ? aa_sock_msg_perm+0xf1/0x1b0
[  477.619887][T10595]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  477.619914][T10595]  ____sys_sendmsg+0x972/0x9f0
[  477.619949][T10595]  ? __pfx_____sys_sendmsg+0x10/0x10
[  477.619977][T10595]  ? kstrtoull+0x12f/0x1d0
[  477.620015][T10595]  ___sys_sendmsg+0x2a5/0x360
[  477.620046][T10595]  ? __pfx____sys_sendmsg+0x10/0x10
[  477.620074][T10595]  ? get_pid_task+0x20/0x1f0
[  477.620094][T10595]  ? get_pid_task+0x20/0x1f0
[  477.620112][T10595]  ? get_pid_task+0x20/0x1f0
[  477.620160][T10595]  ? __fget_files+0x2a/0x420
[  477.620191][T10595]  ? __fget_files+0x3a0/0x420
[  477.620232][T10595]  __sys_sendmsg+0x183/0x260
[  477.620260][T10595]  ? __pfx___sys_sendmsg+0x10/0x10
[  477.620320][T10595]  __do_fast_syscall_32+0x20d/0x640
[  477.620349][T10595]  ? do_fast_syscall_32+0x33/0x70
[  477.620373][T10595]  ? asm_int80_emulation+0x1a/0x20
[  477.620394][T10595]  ? do_int80_emulation+0x274/0x4d0
[  477.620419][T10595]  ? trace_irq_disable+0x3b/0x150
[  477.620455][T10595]  do_fast_syscall_32+0x33/0x70
[  477.620482][T10595]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  477.620509][T10595] RIP: 0023:0xf700ef6c
[  477.620529][T10595] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  477.620548][T10595] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  477.620570][T10595] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c00
[  477.620585][T10595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  477.620598][T10595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  477.620610][T10595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  477.620623][T10595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  477.620653][T10595]  </TASK>
[  478.026350][   T58] wlan0: Trigger new scan to find an IBSS to join
[  478.259252][T10607] hub 9-0:1.0: USB hub found
[  478.272325][T10607] hub 9-0:1.0: 1 port detected
[  478.296580][T10607] FAULT_INJECTION: forcing a failure.
[  478.296580][T10607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  478.306496][   T10] gspca_ov534_9: Unknown sensor 0000
[  478.309823][   T10] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22
[  478.325611][   T10] usb 6-1: USB disconnect, device number 9
[  478.336422][T10607] CPU: 1 UID: 0 PID: 10607 Comm: syz.4.1337 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  478.336456][T10607] Tainted: [L]=SOFTLOCKUP
[  478.336466][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  478.336479][T10607] Call Trace:
[  478.336488][T10607]  <TASK>
[  478.336497][T10607]  dump_stack_lvl+0xe8/0x150
[  478.336533][T10607]  should_fail_ex+0x412/0x560
[  478.336573][T10607]  _copy_to_user+0x31/0xb0
[  478.336600][T10607]  simple_read_from_buffer+0xe1/0x170
[  478.336638][T10607]  proc_fail_nth_read+0x1bb/0x230
[  478.336673][T10607]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  478.336707][T10607]  ? rw_verify_area+0x2a6/0x4d0
[  478.336731][T10607]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  478.336764][T10607]  vfs_read+0x20c/0xa70
[  478.336786][T10607]  ? __fget_files+0x2a/0x420
[  478.336816][T10607]  ? fdget_pos+0x246/0x320
[  478.336854][T10607]  ? __pfx___mutex_lock+0x10/0x10
[  478.336881][T10607]  ? __pfx_vfs_read+0x10/0x10
[  478.336907][T10607]  ? __fget_files+0x2a/0x420
[  478.336944][T10607]  ? __fget_files+0x3a0/0x420
[  478.336975][T10607]  ? __fget_files+0x2a/0x420
[  478.337017][T10607]  ksys_read+0x150/0x270
[  478.337054][T10607]  ? __pfx_ksys_read+0x10/0x10
[  478.337083][T10607]  ? asm_int80_emulation+0x1a/0x20
[  478.337110][T10607]  do_int80_emulation+0x173/0x4d0
[  478.337137][T10607]  ? trace_irq_disable+0x3b/0x150
[  478.337169][T10607]  ? asm_int80_emulation+0x1a/0x20
[  478.337187][T10607]  ? clear_bhb_loop+0x40/0x90
[  478.337208][T10607]  ? clear_bhb_loop+0x40/0x90
[  478.337234][T10607]  asm_int80_emulation+0x1a/0x20
[  478.337254][T10607] RIP: 0023:0xf7145cab
[  478.337274][T10607] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  478.337294][T10607] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  478.337318][T10607] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53fd5d0
[  478.337333][T10607] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  478.337345][T10607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  478.337358][T10607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  478.337370][T10607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  478.337402][T10607]  </TASK>
[  478.733445][T10613] misc userio: Invalid payload size
[  478.740839][T10614] misc userio: No port type given on /dev/userio
[  478.751117][T10614] misc userio: No port type given on /dev/userio
[  478.768199][T10614] misc userio: No port type given on /dev/userio
[  478.946544][   T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  479.076289][   T10] usb 5-1: device descriptor read/64, error -71
[  479.231376][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1344'.
[  479.316200][   T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  479.366214][ T5827] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  479.456200][   T10] usb 5-1: device descriptor read/64, error -71
[  479.530971][ T5827] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  479.551687][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.587102][   T10] usb usb5-port1: attempt power cycle
[  479.594637][ T5827] usb 1-1: Product: syz
[  479.622744][ T5827] usb 1-1: Manufacturer: syz
[  479.640196][ T5827] usb 1-1: SerialNumber: syz
[  479.656842][ T5827] usb 1-1: config 0 descriptor??
[  479.667588][ T5827] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  479.904029][ T5827] gspca_stk1135: reg_w 0x2 err -71
[  479.919384][ T5827] gspca_stk1135: serial bus timeout: status=0x00
[  479.925799][ T5827] gspca_stk1135: Sensor write failed
[  479.945945][ T5827] gspca_stk1135: serial bus timeout: status=0x00
[  479.953891][T10634] netlink: 'syz.1.1349': attribute type 1 has an invalid length.
[  479.961974][   T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  479.969718][ T3095] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  479.978198][ T5827] gspca_stk1135: Sensor write failed
[  479.983558][ T5827] gspca_stk1135: serial bus timeout: status=0x00
[  480.006744][ T5827] gspca_stk1135: Sensor read failed
[  480.012528][   T10] usb 5-1: device descriptor read/8, error -71
[  480.026222][ T5827] gspca_stk1135: serial bus timeout: status=0x00
[  480.046738][ T5827] gspca_stk1135: Sensor read failed
[  480.052199][ T5827] gspca_stk1135: Detected sensor type unknown (0x0)
[  480.066807][ T5827] gspca_stk1135: serial bus timeout: status=0x00
[  480.073303][ T5827] gspca_stk1135: Sensor read failed
[  480.097230][ T5827] gspca_stk1135: serial bus timeout: status=0x00
[  480.103634][ T5827] gspca_stk1135: Sensor read failed
[  480.111158][ T5827] gspca_stk1135: serial bus timeout: status=0x00
[  480.117955][ T5827] gspca_stk1135: Sensor write failed
[  480.123423][ T5827] gspca_stk1135: serial bus timeout: status=0x00
[  480.131400][ T5827] gspca_stk1135: Sensor write failed
[  480.143097][ T5827] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  480.154069][ T3095] usb 6-1: Using ep0 maxpacket: 32
[  480.161416][ T3095] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7
[  480.185217][ T5827] usb 1-1: USB disconnect, device number 51
[  480.193593][ T3095] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  480.209461][ T3095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.220316][ T3095] usb 6-1: Product: syz
[  480.224563][ T3095] usb 6-1: Manufacturer: 烱덂賿皀ꝯ餮樢姦Ꮾ婊旆ⴿ䔋ܰﳩ蹡婛⩙৻쥭邡쉊䆛끸褒鶒尙窧┵ﲾ鏒턠퓨ꆑ︧ʡ赢闁ﮉ茉攲얳셰㫯犢犳⓸憑䀏튧攦虷惥㏼ẑ뮽빓လﹸꀐ᭻⡯壯⸙㢥佛౳鹔毘ᯢ㛧麇䂗楣䗪
[  480.261936][   T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  480.290777][ T3095] usb 6-1: SerialNumber: syz
[  480.296745][   T10] usb 5-1: device descriptor read/8, error -71
[  480.345378][T10641] FAULT_INJECTION: forcing a failure.
[  480.345378][T10641] name failslab, interval 1, probability 0, space 0, times 0
[  480.358643][T10641] CPU: 1 UID: 0 PID: 10641 Comm: syz.3.1351 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  480.358678][T10641] Tainted: [L]=SOFTLOCKUP
[  480.358687][T10641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  480.358701][T10641] Call Trace:
[  480.358711][T10641]  <TASK>
[  480.358721][T10641]  dump_stack_lvl+0xe8/0x150
[  480.358757][T10641]  should_fail_ex+0x412/0x560
[  480.358796][T10641]  should_failslab+0xa8/0x100
[  480.358818][T10641]  __kmalloc_noprof+0xe8/0x760
[  480.358857][T10641]  ? tomoyo_encode+0x28b/0x550
[  480.358905][T10641]  tomoyo_encode+0x28b/0x550
[  480.358946][T10641]  tomoyo_realpath_from_path+0x58d/0x5d0
[  480.358980][T10641]  ? tomoyo_path_number_perm+0x219/0x630
[  480.359020][T10641]  tomoyo_path_number_perm+0x246/0x630
[  480.359052][T10641]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  480.359084][T10641]  ? __lock_acquire+0x6b5/0x2cf0
[  480.359136][T10641]  ? __fget_files+0x2a/0x420
[  480.359184][T10641]  ? __fget_files+0x3a0/0x420
[  480.359215][T10641]  ? __fget_files+0x2a/0x420
[  480.359254][T10641]  security_file_ioctl_compat+0xc3/0x2a0
[  480.359278][T10641]  __ia32_compat_sys_ioctl+0x139/0x950
[  480.359300][T10641]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  480.359344][T10641]  ? __fget_files+0x3a0/0x420
[  480.359383][T10641]  ? fput+0xa0/0xd0
[  480.359418][T10641]  ? ksys_write+0x242/0x270
[  480.359444][T10641]  __do_fast_syscall_32+0x20d/0x640
[  480.359480][T10641]  ? do_fast_syscall_32+0x33/0x70
[  480.359507][T10641]  ? asm_int80_emulation+0x1a/0x20
[  480.359526][T10641]  ? do_int80_emulation+0x274/0x4d0
[  480.359550][T10641]  ? trace_irq_disable+0x3b/0x150
[  480.359586][T10641]  do_fast_syscall_32+0x33/0x70
[  480.359606][T10641]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  480.359644][T10641] RIP: 0023:0xf701ef6c
[  480.359665][T10641] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  480.359684][T10641] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  480.359706][T10641] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f
[  480.359726][T10641] RDX: 0000000080000940 RSI: 0000000000000000 RDI: 0000000000000000
[  480.359737][T10641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  480.359746][T10641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  480.359755][T10641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  480.359778][T10641]  </TASK>
[  480.418582][   T10] usb usb5-port1: unable to enumerate USB device
[  480.423146][T10641] ERROR: Out of memory at tomoyo_realpath_from_path.
[  480.507971][  T106] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  480.754457][T10626] loop7: detected capacity change from 0 to 16384
[  480.990469][T10645] loop7: detected capacity change from 16384 to 16383
[  481.056552][   T35] wlan0: Trigger new scan to find an IBSS to join
[  481.322037][T10663] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1356'.
[  482.338691][T10669] netlink: 'syz.0.1359': attribute type 10 has an invalid length.
[  482.397156][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.592408][T10669] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  482.979313][   T12] wlan0: Trigger new scan to find an IBSS to join
[  483.034220][ T3095] usb 6-1: found format II with max.bitrate = 9, frame size=4095
[  483.047667][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'.
[  483.076831][ T3095] usb 6-1: found format II with max.bitrate = 9, frame size=4095
[  483.115723][ T3095] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  483.238346][T10679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1361'.
[  483.345779][ T3095] usb 6-1: USB disconnect, device number 10
[  483.521475][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  483.574748][T10683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1364'.
[  483.735036][ T5928] usb 2-1: new low-speed USB device number 53 using dummy_hcd
[  483.909746][ T5928] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  483.925362][ T5928] usb 2-1: config 179 has no interface number 0
[  483.985042][ T5955] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  484.006207][ T5928] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  484.018701][ T5928] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8
[  484.032891][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  484.040430][ T5928] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  484.040470][ T5928] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8
[  484.040500][ T5928] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  484.040548][ T5928] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  484.040574][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.100569][T10681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  484.116360][T10681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  484.194539][ T5955] usb 4-1: Using ep0 maxpacket: 32
[  484.212616][ T5955] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  484.223894][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.247858][ T5955] usb 4-1: config 0 descriptor??
[  484.286358][ T5955] gspca_main: nw80x-2.14.0 probing 055f:d001
[  484.419539][   T10] usb 2-1: USB disconnect, device number 53
[  484.419754][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  484.436017][    C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending?
[  484.676925][T10686] dlm: no locking on control device
[  484.846349][   T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  484.909805][ T5955] gspca_nw80x: reg_w err -71
[  484.914595][ T5955] nw80x 4-1:0.0: probe with driver nw80x failed with error -71
[  484.950950][ T5955] usb 4-1: USB disconnect, device number 65
[  485.006218][   T10] usb 6-1: Using ep0 maxpacket: 8
[  485.019489][   T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  485.036161][   T10] usb 6-1: config 0 has no interface number 0
[  485.042343][   T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 93, changing to 10
[  485.066094][   T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 24735, setting to 1024
[  485.086525][   T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  485.096414][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.117938][T10701] FAULT_INJECTION: forcing a failure.
[  485.117938][T10701] name failslab, interval 1, probability 0, space 0, times 0
[  485.119229][   T10] usb 6-1: config 0 descriptor??
[  485.132124][T10701] CPU: 1 UID: 0 PID: 10701 Comm: syz.1.1371 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  485.132219][T10701] Tainted: [L]=SOFTLOCKUP
[  485.132241][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  485.132273][T10701] Call Trace:
[  485.132313][T10701]  <TASK>
[  485.132329][T10701]  dump_stack_lvl+0xe8/0x150
[  485.132396][T10701]  should_fail_ex+0x412/0x560
[  485.132497][T10701]  should_failslab+0xa8/0x100
[  485.132570][T10701]  ? skb_clone+0x212/0x3a0
[  485.132643][T10701]  kmem_cache_alloc_noprof+0x87/0x650
[  485.132705][T10701]  ? __netlink_lookup+0xc6/0x8b0
[  485.132779][T10701]  skb_clone+0x212/0x3a0
[  485.132854][T10701]  __netlink_deliver_tap+0x404/0x850
[  485.132968][T10701]  ? netlink_deliver_tap+0x2e/0x1b0
[  485.133066][T10701]  netlink_deliver_tap+0x19c/0x1b0
[  485.133159][T10701]  netlink_unicast+0x7e3/0x9b0
[  485.133262][T10701]  ? __pfx_netlink_unicast+0x10/0x10
[  485.133375][T10701]  ? netlink_sendmsg+0x650/0xb40
[  485.133451][T10701]  ? skb_put+0x11b/0x210
[  485.133523][T10701]  netlink_sendmsg+0x813/0xb40
[  485.133615][T10701]  ? __pfx_netlink_sendmsg+0x10/0x10
[  485.133711][T10701]  ? aa_sock_msg_perm+0xf1/0x1b0
[  485.133804][T10701]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  485.133880][T10701]  ____sys_sendmsg+0x972/0x9f0
[  485.133974][T10701]  ? __pfx_____sys_sendmsg+0x10/0x10
[  485.134048][T10701]  ? kstrtoull+0x12f/0x1d0
[  485.134145][T10701]  ___sys_sendmsg+0x2a5/0x360
[  485.134238][T10701]  ? __pfx____sys_sendmsg+0x10/0x10
[  485.134311][T10701]  ? get_pid_task+0x20/0x1f0
[  485.134364][T10701]  ? get_pid_task+0x20/0x1f0
[  485.134416][T10701]  ? get_pid_task+0x20/0x1f0
[  485.134553][T10701]  ? __fget_files+0x2a/0x420
[  485.134635][T10701]  ? __fget_files+0x3a0/0x420
[  485.134770][T10701]  __sys_sendmsg+0x183/0x260
[  485.134853][T10701]  ? __pfx___sys_sendmsg+0x10/0x10
[  485.134980][T10701]  __do_fast_syscall_32+0x20d/0x640
[  485.135054][T10701]  ? do_fast_syscall_32+0x33/0x70
[  485.135118][T10701]  ? asm_int80_emulation+0x1a/0x20
[  485.135210][T10701]  ? do_int80_emulation+0x274/0x4d0
[  485.135279][T10701]  ? trace_irq_disable+0x3b/0x150
[  485.135374][T10701]  do_fast_syscall_32+0x33/0x70
[  485.135453][T10701]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  485.135520][T10701] RIP: 0023:0xf70bef6c
[  485.135571][T10701] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  485.135623][T10701] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  485.135679][T10701] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080009b40
[  485.135720][T10701] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000
[  485.135754][T10701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  485.135787][T10701] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  485.135826][T10701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  485.135902][T10701]  </TASK>
[  485.602762][   T10] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  485.822847][   T10] usb 6-1: USB disconnect, device number 11
[  485.828958][    C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  485.865653][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1376'.
[  486.176302][ T5955] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  486.234346][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1377'.
[  487.976453][ T5905] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  488.176324][ T5905] usb 1-1: device descriptor read/64, error -71
[  488.205090][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'.
[  488.505011][ T5905] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  488.786171][ T5905] usb 1-1: device descriptor read/64, error -71
[  488.916344][ T5905] usb usb1-port1: attempt power cycle
[  489.275394][T10749] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1384'.
[  489.368819][ T5905] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  489.436939][ T5905] usb 1-1: device descriptor read/8, error -71
[  489.699082][T10760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1385'.
[  489.708181][ T5905] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  489.772551][ T5905] usb 1-1: device descriptor read/8, error -71
[  489.956866][ T5905] usb usb1-port1: unable to enumerate USB device
[  491.376509][ T5928] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  491.384570][ T5905] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  491.602390][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1395'.
[  491.606706][ T5905] usb 1-1: Using ep0 maxpacket: 32
[  491.620216][ T5928] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 7
[  491.650051][ T5928] usb 4-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40
[  491.666307][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.684481][ T5928] usb 4-1: Product: syz
[  491.690345][ T5905] usb 1-1: unable to get BOS descriptor or descriptor too short
[  491.699717][ T5928] usb 4-1: Manufacturer: syz
[  491.708100][ T5905] usb 1-1: config 128 has an invalid interface number: 127 but max is 3
[  491.717561][ T5928] usb 4-1: SerialNumber: syz
[  491.726849][ T5905] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  491.748665][ T5905] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4
[  491.758858][ T5905] usb 1-1: config 128 has no interface number 0
[  491.765749][ T5905] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  491.778238][ T5905] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  491.789598][ T5905] usb 1-1: config 128 interface 127 has no altsetting 0
[  491.802476][ T5905] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  491.812754][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.822545][ T5905] usb 1-1: Product: syz
[  491.827368][ T5905] usb 1-1: Manufacturer: syz
[  491.832177][ T5905] usb 1-1: SerialNumber: syz
[  491.947304][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.962060][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.181664][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.205998][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.277511][ T5905] usb 1-1: USB disconnect, device number 56
[  492.358714][ T6160] udevd[6160]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  492.408670][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.455752][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.541168][ T5928] usb 4-1: BAAD GENERIC IO: no channels?
[  492.609202][T10787] syzkaller0: entered promiscuous mode
[  492.623816][T10787] syzkaller0: entered allmulticast mode
[  492.635694][ T5928] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  492.677526][ T5928] usb 4-1: USB disconnect, device number 66
[  492.710733][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  492.996193][ T5827] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  493.045817][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'.
[  493.296433][   T10] usb 2-1: new full-speed USB device number 55 using dummy_hcd
[  493.327966][ T5827] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  493.342575][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  493.396861][ T5827] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  493.406423][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.414575][ T5827] usb 6-1: Product: syz
[  493.419304][ T5827] usb 6-1: Manufacturer: syz
[  493.425257][ T5827] usb 6-1: SerialNumber: syz
[  493.445144][ T5827] usb 6-1: config 0 descriptor??
[  493.462312][T10787] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  493.479926][   T10] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  493.502843][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.529590][   T10] usb 2-1: Product: syz
[  493.547967][   T10] usb 2-1: Manufacturer: syz
[  493.565215][   T10] usb 2-1: SerialNumber: syz
[  493.595304][   T10] usb 2-1: config 0 descriptor??
[  493.621223][   T10] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  493.657922][ T5827] rc_core: IR keymap rc-streamzap not found
[  493.664316][ T5827] Registered IR keymap rc-empty
[  493.693793][ T5827] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  493.739767][ T5827] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input64
[  493.908030][   T10] gspca_stk1135: reg_w 0x2 err -71
[  493.927458][ T5827] usb 6-1: USB disconnect, device number 12
[  493.948953][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  493.969741][   T10] gspca_stk1135: Sensor write failed
[  493.987292][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  494.010572][   T10] gspca_stk1135: Sensor write failed
[  494.026931][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  494.051533][   T10] gspca_stk1135: Sensor read failed
[  494.072638][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  494.094984][   T10] gspca_stk1135: Sensor read failed
[  494.105631][   T10] gspca_stk1135: Detected sensor type unknown (0x0)
[  494.166933][ T3095] hid-generic 0003:8000004:0000.0012: unknown main item tag 0x0
[  494.177743][ T3095] hid-generic 0003:8000004:0000.0012: unknown main item tag 0x0
[  494.202101][ T3095] hid-generic 0003:8000004:0000.0012: unknown main item tag 0x0
[  494.214438][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  494.235642][   T10] gspca_stk1135: Sensor read failed
[  494.256208][ T5928] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  494.276217][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  494.295049][   T10] gspca_stk1135: Sensor read failed
[  494.302033][ T3095] hid-generic 0003:8000004:0000.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  494.351591][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  494.368003][   T10] gspca_stk1135: Sensor write failed
[  494.376337][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  494.391747][   T10] gspca_stk1135: Sensor write failed
[  494.424650][   T10] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71
[  494.436714][ T5928] usb 4-1: Using ep0 maxpacket: 16
[  494.446276][ T5928] usb 4-1: config 1 interface 0 has no altsetting 0
[  494.477056][ T5928] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.40
[  494.488652][   T10] usb 2-1: USB disconnect, device number 55
[  494.517589][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.570784][ T5928] usb 4-1: Product: ⢃앎␊䲶᳡붜ߐ펅ࡻ䉏䷕沶빁츫꾉魈꓂쳴撖煇೚눽ಔኜ땬ˑﵹ꽐埉凯㞶⩘湌깛窱粵ড়阌שּׁ뗢㫀ꠤ僡濟鳸ꀵ㺦◄짤䐯ꏌ濃诓纻ཻ雗⃶沱갬襆鐃魜嚿겻뀣矢设䥅⡩旍姸䰢래甆쫹轣
[  494.661486][ T5928] usb 4-1: Manufacturer: 큨ꊓ≼q㨴ﯝਇ뽫ⁱ✼瓋쳗츺珏䗄ⴤ蠮஧ּ繃댹⠹ඍ㯲늱㥥俯꯯ఫ쩾뺻膏瀷낄ᬼ혷ࠛ塏쇏잦욀♼㖱靝❱厢芿⤹琡᪽醮ɮ♖㭂筸㼗궛⩼슭ꀒʭ湚蓦ᣲ࿜래〔깏ᨑ郂౉㪐䮳ᰬ퓤뻄槏䴛
[  494.848030][ T5928] usb 4-1: SerialNumber: syz
[  494.854376][T10810] fuse: Unknown parameter 'gr'
[  495.074054][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1404'.
[  495.184982][T10813] 8021q: adding VLAN 0 to HW filter on device bond1
[  495.263784][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1405'.
[  495.299325][T10821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.308843][T10821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.366148][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  495.473141][ T5928] usbhid 4-1:1.0: can't add hid device: -71
[  495.480432][ T5928] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  495.551631][ T5928] usb 4-1: USB disconnect, device number 67
[  497.046166][ T5928] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  497.130722][T10846] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1412'.
[  497.255174][ T5928] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  497.272891][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.303815][ T5928] usb 4-1: Product: syz
[  497.321430][ T5928] usb 4-1: Manufacturer: syz
[  497.336127][ T5928] usb 4-1: SerialNumber: syz
[  497.367405][ T5928] usb 4-1: config 0 descriptor??
[  497.376335][ T3095] usb 2-1: new full-speed USB device number 56 using dummy_hcd
[  497.449353][ T5928] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  497.484291][T10848] can: request_module (can-proto-0) failed.
[  497.491323][T10852] netlink: 'syz.5.1414': attribute type 21 has an invalid length.
[  497.535611][ T3095] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  497.547205][ T3095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.560928][ T3095] usb 2-1: Product: syz
[  497.570276][ T3095] usb 2-1: Manufacturer: syz
[  497.581166][ T3095] usb 2-1: SerialNumber: syz
[  497.593219][ T3095] usb 2-1: config 0 descriptor??
[  497.612122][ T3095] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  497.731606][ T5928] gspca_stk1135: reg_w 0x2 err -71
[  497.743728][ T5928] gspca_stk1135: serial bus timeout: status=0x00
[  497.751175][ T5928] gspca_stk1135: Sensor write failed
[  497.756682][ T5905] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  497.766121][ T5928] gspca_stk1135: serial bus timeout: status=0x00
[  497.772513][ T5928] gspca_stk1135: Sensor write failed
[  497.847798][ T5928] gspca_stk1135: serial bus timeout: status=0x00
[  497.854222][ T5928] gspca_stk1135: Sensor read failed
[  497.906176][ T5905] usb 5-1: Using ep0 maxpacket: 8
[  497.923892][ T3095] gspca_stk1135: reg_w 0x2 err -71
[  497.938830][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  497.945327][ T5928] gspca_stk1135: serial bus timeout: status=0x00
[  497.954493][ T3095] gspca_stk1135: Sensor write failed
[  497.967040][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  497.973240][ T5905] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  497.982897][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.133681][ T3095] gspca_stk1135: Sensor write failed
[  498.142839][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  498.152462][ T3095] gspca_stk1135: Sensor read failed
[  498.162650][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  498.169668][ T5928] gspca_stk1135: Sensor read failed
[  498.169684][ T5928] gspca_stk1135: Detected sensor type unknown (0x0)
[  498.195263][ T5905] usb 5-1: Product: syz
[  498.204832][ T5905] usb 5-1: Manufacturer: syz
[  498.212980][ T5928] gspca_stk1135: serial bus timeout: status=0x00
[  498.222831][ T5905] usb 5-1: SerialNumber: syz
[  498.233293][ T5928] gspca_stk1135: Sensor read failed
[  498.234196][ T3095] gspca_stk1135: Sensor read failed
[  498.245482][ T5905] usb 5-1: config 0 descriptor??
[  498.250960][ T5928] gspca_stk1135: serial bus timeout: status=0x00
[  498.264537][ T5928] gspca_stk1135: Sensor read failed
[  498.270825][ T5928] gspca_stk1135: serial bus timeout: status=0x00
[  498.274076][ T5905] gspca_main: se401-2.14.0 probing 047d:5003
[  498.286928][ T5928] gspca_stk1135: Sensor write failed
[  498.295271][ T5928] gspca_stk1135: serial bus timeout: status=0x00
[  498.304186][ T3095] gspca_stk1135: Detected sensor type unknown (0x0)
[  498.314556][ T5928] gspca_stk1135: Sensor write failed
[  498.329692][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  498.343262][ T5928] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  498.356780][ T3095] gspca_stk1135: Sensor read failed
[  498.386350][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  498.406247][ T3095] gspca_stk1135: Sensor read failed
[  498.420979][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  498.427913][ T5928] usb 4-1: USB disconnect, device number 68
[  498.448678][ T3095] gspca_stk1135: Sensor write failed
[  498.454096][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  498.506123][ T3095] gspca_stk1135: Sensor write failed
[  498.511581][ T3095] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71
[  498.616953][ T3095] usb 2-1: USB disconnect, device number 56
[  498.752784][ T5905] gspca_se401: Wrong descriptor type
[  498.753035][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1420'.
[  499.000394][ T3095] usb 5-1: USB disconnect, device number 61
[  499.099258][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1423'.
[  500.032768][T10900] fuse: Unknown parameter 'f���m5�v�e�K���f�d���S���-2̸0x0000000000000007'
[  500.269331][ T3095] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  500.357956][T10901] ip6_vti0: Caught tx_queue_len zero misconfig
[  500.409465][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1427'.
[  500.462992][ T3095] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  500.472396][ T3095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.482296][ T3095] usb 1-1: Product: syz
[  500.490653][ T3095] usb 1-1: Manufacturer: syz
[  500.495408][ T3095] usb 1-1: SerialNumber: syz
[  500.504463][ T3095] usb 1-1: config 0 descriptor??
[  500.549707][ T3095] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  500.684702][ T5905] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[  501.155576][ T3095] gspca_stk1135: reg_w 0x2 err -71
[  501.166428][ T5905] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  501.180246][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.189387][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  501.206022][ T5905] usb 5-1: Product: syz
[  501.216338][ T5905] usb 5-1: Manufacturer: syz
[  501.221619][ T3095] gspca_stk1135: Sensor write failed
[  501.227038][ T5905] usb 5-1: SerialNumber: syz
[  501.240252][ T5905] usb 5-1: config 0 descriptor??
[  501.257915][ T5905] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  501.308943][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  501.351113][ T3095] gspca_stk1135: Sensor write failed
[  501.368002][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  501.399838][ T3095] gspca_stk1135: Sensor read failed
[  501.405234][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  501.420751][ T3095] gspca_stk1135: Sensor read failed
[  501.432248][ T3095] gspca_stk1135: Detected sensor type unknown (0x0)
[  501.465939][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  501.491791][ T5905] gspca_stk1135: reg_w 0x2 err -71
[  501.498321][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  501.514499][ T5905] gspca_stk1135: Sensor write failed
[  501.529166][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  501.537675][ T5905] gspca_stk1135: Sensor write failed
[  501.692064][ T3095] gspca_stk1135: Sensor read failed
[  501.722616][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  501.766819][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  501.773309][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  501.782113][ T3095] gspca_stk1135: Sensor read failed
[  501.787800][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  501.795064][ T3095] gspca_stk1135: Sensor write failed
[  501.801710][ T3095] gspca_stk1135: serial bus timeout: status=0x00
[  501.809729][ T3095] gspca_stk1135: Sensor write failed
[  501.815229][ T3095] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  501.828095][ T3095] usb 1-1: USB disconnect, device number 57
[  501.839841][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  501.916552][ T5905] gspca_stk1135: Sensor read failed
[  501.932094][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  502.009500][ T5905] gspca_stk1135: Sensor read failed
[  502.039151][ T5905] gspca_stk1135: Detected sensor type unknown (0x0)
[  502.066288][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  502.083598][ T5905] gspca_stk1135: Sensor read failed
[  502.103877][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  502.116330][ T5905] gspca_stk1135: Sensor read failed
[  502.121634][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  502.129198][ T5905] gspca_stk1135: Sensor write failed
[  502.135063][T10899] netlink: 424 bytes leftover after parsing attributes in process `syz.3.1427'.
[  502.150715][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[  502.166200][ T5905] gspca_stk1135: Sensor write failed
[  502.202289][T10901] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1427'.
[  502.216179][ T5905] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71
[  502.243308][ T5905] usb 5-1: USB disconnect, device number 62
[  502.318727][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1427'.
[  502.402792][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1433'.
[  502.937709][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'.
[  503.371279][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1439'.
[  503.408163][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1439'.
[  503.852677][T10940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1444'.
[  503.925037][T10942] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  504.306090][T10954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1447'.
[  504.357322][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  504.357342][   T29] audit: type=1326 audit(1774173853.159:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  504.391062][   T29] audit: type=1326 audit(1774173853.159:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  504.429266][   T29] audit: type=1326 audit(1774173853.199:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  504.504341][T10960] random: crng reseeded on system resumption
[  504.684820][   T29] audit: type=1326 audit(1774173853.209:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  504.746177][   T29] audit: type=1326 audit(1774173853.209:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  504.769383][   T29] audit: type=1326 audit(1774173853.209:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  504.832811][   T29] audit: type=1326 audit(1774173853.199:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  504.923173][   T29] audit: type=1326 audit(1774173853.249:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  505.015310][   T29] audit: type=1326 audit(1774173853.249:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  505.081754][   T29] audit: type=1326 audit(1774173853.249:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf70bef6c code=0x7ffc0000
[  506.073366][T10958] sctp: [Deprecated]: syz.1.1450 (pid 10958) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.073366][T10958] Use struct sctp_sack_info instead
[  506.287437][T10989] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 4, id = 0
[  506.762649][T10998] __nla_validate_parse: 2 callbacks suppressed
[  506.762670][T10998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1460'.
[  506.986302][ T5928] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  507.156155][ T5928] usb 4-1: Using ep0 maxpacket: 16
[  507.168311][T11005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1461'.
[  507.190604][ T5928] usb 4-1: config 8 has an invalid interface number: 39 but max is 0
[  507.202544][ T5928] usb 4-1: config 8 has no interface number 0
[  507.215611][ T5928] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  507.318233][ T5928] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[  507.410170][ T5928] usb 4-1: config 8 interface 39 has no altsetting 0
[  507.525230][ T5928] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[  507.669229][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.702062][ T5928] usb 4-1: Product: syz
[  507.710512][ T5928] usb 4-1: Manufacturer: syz
[  507.715808][ T5928] usb 4-1: SerialNumber: syz
[  508.573953][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'.
[  508.603451][T10999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1459'.
[  509.116282][   T10] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[  509.276268][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[  509.318415][T11032] vcan0: tx drop: invalid da for name 0x000000000001a000
[  509.396066][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  509.455896][   T10] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  509.556353][T11035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1471'.
[  509.582908][   T42] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  509.615938][T11037] FAULT_INJECTION: forcing a failure.
[  509.615938][T11037] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  509.630852][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[  509.636783][   T10] usb usb6-port1: attempt power cycle
[  509.652730][T11037] CPU: 0 UID: 0 PID: 11037 Comm: syz.4.1472 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  509.652763][T11037] Tainted: [L]=SOFTLOCKUP
[  509.652771][T11037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  509.652784][T11037] Call Trace:
[  509.652799][T11037]  <TASK>
[  509.652806][T11037]  dump_stack_lvl+0xe8/0x150
[  509.652835][T11037]  should_fail_ex+0x412/0x560
[  509.652885][T11037]  __kvm_read_guest_page+0x18d/0x240
[  509.652915][T11037]  kvm_fetch_guest_virt+0x12b/0x170
[  509.652950][T11037]  ? __pfx_kvm_fetch_guest_virt+0x10/0x10
[  509.652980][T11037]  __do_insn_fetch_bytes+0x31c/0x700
[  509.653015][T11037]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[  509.653061][T11037]  ? get_user_pages_unlocked+0x5ca/0x710
[  509.653114][T11037]  ? x86_decode_insn+0x1719/0x5df0
[  509.653144][T11037]  x86_decode_insn+0x38e/0x5df0
[  509.653201][T11037]  ? __pfx_x86_decode_insn+0x10/0x10
[  509.653231][T11037]  ? __pfx_vmx_vcpu_pi_load+0x10/0x10
[  509.653256][T11037]  ? vmx_read_guest_seg_ar+0x38f/0x5b0
[  509.653287][T11037]  ? __asan_memset+0x22/0x50
[  509.653303][T11037]  ? init_decode_cache+0xea/0x160
[  509.653321][T11037]  ? init_emulate_ctxt+0x4e7/0x680
[  509.653369][T11037]  ? __pfx_init_emulate_ctxt+0x10/0x10
[  509.653404][T11037]  ? kvm_arch_vcpu_load+0x78d/0xa50
[  509.653433][T11037]  ? load_fixmap_gdt+0x66/0xc0
[  509.653460][T11037]  x86_emulate_instruction+0x64a/0x2100
[  509.653496][T11037]  ? kvm_sched_in+0x7c/0xe0
[  509.653528][T11037]  ? __pfx_x86_emulate_instruction+0x10/0x10
[  509.653551][T11037]  ? trace_sched_exit_tp+0x3a/0x150
[  509.653576][T11037]  ? __schedule+0x15f3/0x52d0
[  509.653611][T11037]  handle_ud+0x189/0x590
[  509.653637][T11037]  ? __pfx_handle_ud+0x10/0x10
[  509.653699][T11037]  ? __pfx_handle_exception_nmi+0x10/0x10
[  509.653730][T11037]  vmx_handle_exit+0xfd1/0x16c0
[  509.653767][T11037]  ? preempt_schedule_thunk+0x16/0x30
[  509.653790][T11037]  vcpu_run+0x5fa2/0x7b90
[  509.653826][T11037]  ? __lock_acquire+0x6b5/0x2cf0
[  509.653879][T11037]  ? vcpu_run+0x4ca8/0x7b90
[  509.653940][T11037]  ? __pfx_vcpu_run+0x10/0x10
[  509.653958][T11037]  ? fpu_swap_kvm_fpstate+0xc1/0x4f0
[  509.654007][T11037]  ? rcu_is_watching+0x15/0xb0
[  509.654044][T11037]  kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0
[  509.654070][T11037]  ? format_decode+0xd0/0xe10
[  509.654119][T11037]  ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0
[  509.654160][T11037]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  509.654187][T11037]  ? rcu_is_watching+0x15/0xb0
[  509.654216][T11037]  ? trace_contention_end+0x3d/0x150
[  509.654251][T11037]  ? __mutex_lock+0x319/0x1300
[  509.654278][T11037]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  509.654318][T11037]  ? __pfx___mutex_lock+0x10/0x10
[  509.654351][T11037]  ? kasan_quarantine_put+0xbb/0x1f0
[  509.654384][T11037]  kvm_vcpu_ioctl+0xa62/0xfd0
[  509.654412][T11037]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  509.654426][T11037]  ? do_vfs_ioctl+0x1166/0x1530
[  509.654463][T11037]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  509.654525][T11037]  kvm_vcpu_compat_ioctl+0x204/0x390
[  509.654555][T11037]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  509.654572][T11037]  ? __fget_files+0x3a0/0x420
[  509.654596][T11037]  ? __fget_files+0x2a/0x420
[  509.654656][T11037]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  509.654687][T11037]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  509.654720][T11037]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  509.654742][T11037]  ? __fget_files+0x3a0/0x420
[  509.654768][T11037]  ? fput+0xa0/0xd0
[  509.654832][T11037]  ? ksys_write+0x242/0x270
[  509.654868][T11037]  __do_fast_syscall_32+0x20d/0x640
[  509.654900][T11037]  ? do_fast_syscall_32+0x33/0x70
[  509.654918][T11037]  ? asm_int80_emulation+0x1a/0x20
[  509.654933][T11037]  ? do_int80_emulation+0x274/0x4d0
[  509.654974][T11037]  do_fast_syscall_32+0x33/0x70
[  509.655000][T11037]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  509.655026][T11037] RIP: 0023:0xf700ef6c
[  509.655050][T11037] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  509.655064][T11037] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  509.655100][T11037] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[  509.655116][T11037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  509.655129][T11037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  509.655141][T11037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  509.655154][T11037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  509.655184][T11037]  </TASK>
[  510.101186][T11037] kvm: kvm [11036]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111
[  510.149885][   T42] usb 1-1: Using ep0 maxpacket: 32
[  510.164141][   T42] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  510.186594][   T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.241608][   T42] usb 1-1: config 0 descriptor??
[  510.283811][T11041] binder: BINDER_SET_CONTEXT_MGR already set
[  510.294641][   T42] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  510.320651][T11041] binder: 11039:11041 ioctl 4018620d 80004a80 returned -16
[  510.396146][   T10] usb 6-1: new low-speed USB device number 16 using dummy_hcd
[  510.419194][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[  510.439176][T11046] binder: 11039:11046 unknown command 0
[  510.444883][T11046] binder: 11039:11046 ioctl c0306201 80000480 returned -22
[  510.505726][ T5928] ipheth 4-1:8.39: Unable to find endpoints
[  510.540601][ T5928] usb 4-1: USB disconnect, device number 69
[  510.556714][   T10] usb 6-1: new low-speed USB device number 17 using dummy_hcd
[  510.577518][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[  510.583475][   T10] usb usb6-port1: unable to enumerate USB device
[  512.006491][   T42] gspca_vc032x: reg_w err -110
[  512.011352][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.017052][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.022506][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.028150][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.073041][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.114850][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.145348][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.177057][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.202934][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.236419][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.255248][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.274541][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.292615][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.306156][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.339872][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.433631][T11067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1480'.
[  512.506891][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.512491][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.519056][   T42] gspca_vc032x: I2c Bus Busy Wait 00
[  512.524643][   T42] gspca_vc032x: Unknown sensor...
[  512.530916][   T42] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  513.137579][   T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  513.219335][ T5927] usb 1-1: USB disconnect, device number 58
[  513.596205][   T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  513.696604][T11081] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  513.846193][ T5927] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  513.938391][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 195, changing to 11
[  513.960524][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8909, setting to 1024
[  514.159981][ T5927] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  514.169622][   T10] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  514.178473][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.189327][ T5927] usb 2-1: Product: syz
[  514.199262][ T5927] usb 2-1: Manufacturer: syz
[  514.203944][ T5927] usb 2-1: SerialNumber: syz
[  514.204182][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.247378][   T10] usb 6-1: config 0 descriptor??
[  514.373411][T11088] lo: Caught tx_queue_len zero misconfig
[  514.381973][T11088] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1487'.
[  514.427413][ T5827] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  514.606198][ T5827] usb 1-1: Using ep0 maxpacket: 32
[  514.618636][ T5827] usb 1-1: unable to get BOS descriptor or descriptor too short
[  514.626562][ T5905] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  514.638365][ T5827] usb 1-1: config 249 has an invalid interface number: 132 but max is 0
[  514.656114][ T5827] usb 1-1: config 249 has no interface number 0
[  514.662587][ T5827] usb 1-1: config 249 interface 132 altsetting 255 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  514.664257][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  514.687390][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  514.706533][ T5827] usb 1-1: config 249 interface 132 has no altsetting 0
[  514.722180][ T5827] usb 1-1: New USB device found, idVendor=0707, idProduct=0200, bcdDevice=4f.f3
[  514.746151][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.754234][ T5827] usb 1-1: Product: syz
[  514.766139][ T5827] usb 1-1: Manufacturer: syz
[  514.766344][ T5905] usb 4-1: device descriptor read/64, error -71
[  514.786120][ T5827] usb 1-1: SerialNumber: syz
[  515.007121][ T5905] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  515.019654][ T5827] pegasus 1-1:249.132: Missing or invalid endpoints
[  515.052129][ T5827] usb 1-1: USB disconnect, device number 59
[  515.058418][   T58] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  515.156420][ T5905] usb 4-1: device descriptor read/64, error -71
[  515.266692][ T5905] usb usb4-port1: attempt power cycle
[  515.511491][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[  515.546240][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  515.568523][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  515.596456][ T5927] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  515.616668][ T5905] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  515.644127][ T5927] usb 2-1: USB disconnect, device number 57
[  515.660428][ T5905] usb 4-1: device descriptor read/8, error -71
[  515.916277][ T5905] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  515.956245][ T3095] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  515.964451][ T5905] usb 4-1: device descriptor read/8, error -71
[  516.096558][ T5905] usb usb4-port1: unable to enumerate USB device
[  516.118938][ T3095] usb 1-1: Using ep0 maxpacket: 32
[  516.130509][ T3095] usb 1-1: unable to get BOS descriptor or descriptor too short
[  516.140656][ T3095] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 123, changing to 7
[  516.159782][ T3095] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  516.169511][ T3095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.178104][ T3095] usb 1-1: Product: syz
[  516.182565][ T3095] usb 1-1: Manufacturer: syz
[  516.193844][ T3095] usb 1-1: SerialNumber: syz
[  516.341475][   T10] usbhid 6-1:0.0: can't add hid device: -71
[  516.360436][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  516.368995][  T145] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  516.406659][   T10] usb 6-1: USB disconnect, device number 18
[  516.510866][T11091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.521829][T11091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.678565][ T3095] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  516.696982][ T3095] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  516.823607][ T3095] usb 1-1: USB disconnect, device number 60
[  517.016779][   T42] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  517.166166][   T42] usb 6-1: device descriptor read/64, error -71
[  517.409623][   T42] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  517.546137][   T42] usb 6-1: device descriptor read/64, error -71
[  517.666530][   T42] usb usb6-port1: attempt power cycle
[  517.879227][T11109] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  518.046241][   T42] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  518.102439][   T42] usb 6-1: device descriptor read/8, error -71
[  518.180506][T11113] netlink: 'syz.3.1496': attribute type 7 has an invalid length.
[  518.189207][T11113] netlink: 'syz.3.1496': attribute type 8 has an invalid length.
[  518.356242][   T42] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  518.407244][   T42] usb 6-1: device descriptor read/8, error -71
[  518.517125][   T42] usb usb6-port1: unable to enumerate USB device
[  519.717535][T11134] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  519.749519][ T5827] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  519.806183][ T5905] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  519.948257][ T5827] usb 1-1: Using ep0 maxpacket: 32
[  519.959102][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short
[  519.968443][ T5827] usb 1-1: unable to get BOS descriptor or descriptor too short
[  519.980977][ T5827] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 123, changing to 7
[  519.995361][T11143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1507'.
[  520.071785][ T5905] usb 5-1: not running at top speed; connect to a high speed hub
[  520.082012][ T5905] usb 5-1: config 1 interface 0 has no altsetting 0
[  520.088729][T11145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1509'.
[  520.095549][ T5827] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  520.126875][T11145] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  520.153023][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'.
[  520.166613][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.183360][ T5827] usb 1-1: Product: syz
[  520.228088][ T5827] usb 1-1: Manufacturer: syz
[  520.241223][ T5827] usb 1-1: SerialNumber: syz
[  520.317920][ T5905] usb 5-1: string descriptor 0 read error: -22
[  520.351755][ T5905] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40
[  520.384837][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.532371][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.542575][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.816071][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  521.005893][ T5827] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  521.202401][ T5827] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  521.417589][ T5827] usb 1-1: USB disconnect, device number 61
[  521.621948][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  522.208515][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'.
[  522.607079][ T5905] usbhid 5-1:1.0: can't add hid device: -71
[  522.614764][ T5905] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  522.659032][ T5905] usb 5-1: USB disconnect, device number 63
[  523.104690][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1519'.
[  523.186670][ T5905] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  523.376352][ T5905] usb 5-1: Using ep0 maxpacket: 32
[  523.386368][ T5905] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  523.401361][ T5905] usb 5-1: config 0 has no interface number 0
[  523.411568][ T5905] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  523.437917][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'.
[  523.440129][ T5905] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  523.456776][ T5928] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  523.483412][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.498512][ T5905] usb 5-1: Product: syz
[  523.504166][ T5905] usb 5-1: Manufacturer: syz
[  523.509116][ T5905] usb 5-1: SerialNumber: syz
[  523.518465][ T5905] usb 5-1: config 0 descriptor??
[  523.524358][T11172] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  523.534483][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'.
[  523.626277][ T5928] usb 6-1: Using ep0 maxpacket: 32
[  523.633723][ T5928] usb 6-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config
[  523.647287][ T5928] usb 6-1: config 239 has 1 interface, different from the descriptor's value: 3
[  523.659575][ T5928] usb 6-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40
[  523.669677][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.680171][ T5928] usb 6-1: Product: syz
[  523.684551][ T5928] usb 6-1: Manufacturer: syz
[  523.690456][ T5928] usb 6-1: SerialNumber: syz
[  523.950667][ T5928] usb 6-1: unit 2 not found!
[  524.030694][ T5928] usb 6-1: USB disconnect, device number 23
[  524.099870][ T6160] udevd[6160]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:239.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  524.167877][ T5905] asix 5-1:0.188: probe with driver asix failed with error -71
[  524.221551][ T5905] usb 5-1: USB disconnect, device number 64
[  524.556231][ T5827] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  524.576508][   T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  524.671450][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1530'.
[  524.731383][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  524.758746][   T10] usb 2-1: Using ep0 maxpacket: 32
[  524.770324][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  524.788754][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  524.809086][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  524.824715][   T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 123, changing to 7
[  524.852446][   T10] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  524.867478][ T5827] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  524.877971][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.891663][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.899979][   T10] usb 2-1: Product: syz
[  524.904193][   T10] usb 2-1: Manufacturer: syz
[  524.909292][ T5827] usb 1-1: Product: syz
[  524.913658][ T5827] usb 1-1: Manufacturer: syz
[  524.918489][   T10] usb 2-1: SerialNumber: syz
[  524.923838][ T5827] usb 1-1: SerialNumber: syz
[  524.969458][ T5827] usb 1-1: config 0 descriptor??
[  525.084018][ T5827] pegasus_notetaker 1-1:0.0: packet size is too small (0)
[  525.091620][ T5827] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  525.251285][T11212] fuse: Unknown parameter 'fd00000000000000000000'
[  525.264162][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.279664][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.337528][ T5928] usb 1-1: USB disconnect, device number 62
[  525.524889][   T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  525.532562][   T10] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  526.182970][   T10] usb 2-1: USB disconnect, device number 58
[  526.269699][ T5928] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  526.374530][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  526.414269][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1535'.
[  526.449437][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'.
[  526.450111][ T5928] usb 6-1: Using ep0 maxpacket: 8
[  526.471885][ T5928] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  526.480214][ T5928] usb 6-1: config 0 has no interface number 0
[  526.487014][ T5928] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  526.498508][ T5928] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  526.519503][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'.
[  526.523766][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.573878][ T5928] usb 6-1: config 0 descriptor??
[  526.605849][ T5928] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  526.865888][ T5928] usb 6-1: USB disconnect, device number 24
[  526.865962][    C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  526.930437][T11232] bridge0: port 3(team0) entered disabled state
[  526.960295][T11232] team0 (unregistering): left allmulticast mode
[  526.985487][T11232] team_slave_0: left allmulticast mode
[  527.010202][T11232] team_slave_1: left allmulticast mode
[  527.060873][T11232] team0 (unregistering): left promiscuous mode
[  527.129196][T11232] team_slave_0: left promiscuous mode
[  527.144077][T11232] team_slave_1: left promiscuous mode
[  527.163695][T11232] bridge0: port 3(team0) entered disabled state
[  527.181284][T11232] team0 (unregistering): Failed to send options change via netlink (err -105)
[  527.190908][T11232] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  527.203096][T11232] team0 (unregistering): Port device team_slave_0 removed
[  527.221824][T11232] team0 (unregistering): Failed to send options change via netlink (err -105)
[  527.231471][T11232] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  527.254475][T11232] team0 (unregistering): Port device team_slave_1 removed
[  527.391552][T11243] bond0: Caught tx_queue_len zero misconfig
[  528.161781][T11256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1546'.
[  528.278776][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'.
[  529.015175][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'.
[  529.526126][ T5927] usb 5-1: new full-speed USB device number 65 using dummy_hcd
[  529.679104][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short
[  529.747981][ T5927] usb 5-1: not running at top speed; connect to a high speed hub
[  529.771372][ T5927] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  529.816930][ T5927] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  529.864435][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.887604][ T5927] usb 5-1: Product: syz
[  529.899346][ T5927] usb 5-1: Manufacturer: syz
[  529.911619][ T5927] usb 5-1: SerialNumber: syz
[  530.076323][T11273] IPVS: stopping master sync thread 10989 ...
[  530.191202][ T5927] usb 5-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  530.201167][ T5927] usb 5-1: found format II with max.bitrate = 512, frame size=4095
[  530.209855][ T5927] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  530.229184][ T5927] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  530.361756][ T5927] usb 5-1: USB disconnect, device number 65
[  530.396463][ T7107] udevd[7107]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  530.495785][T11286] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1555'.
[  530.807840][T11293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1558'.
[  531.386128][ T5927] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  531.493364][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1563'.
[  531.538871][ T5827] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  531.577735][ T5927] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  531.587141][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  531.603729][ T5927] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  531.613186][ T5927] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  531.626088][ T5927] usb 5-1: Manufacturer: syz
[  531.639898][ T5927] usb 5-1: config 0 descriptor??
[  531.702549][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.716940][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  531.749890][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  531.767860][ T5827] usb 1-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00
[  531.781527][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.794441][ T5827] usb 1-1: config 0 descriptor??
[  531.816125][ T5927] rc_core: IR keymap rc-hauppauge not found
[  531.822458][ T5927] Registered IR keymap rc-empty
[  531.857397][ T5927] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  531.883442][ T5927] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input69
[  531.898890][    C1] igorplugusb 5-1:0.0: Error: urb status = -32
[  531.925714][T11296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.944762][T11296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  534.074030][ T3095] usb 5-1: USB disconnect, device number 66
[  534.368185][ T5827] usbhid 1-1:0.0: can't add hid device: -71
[  534.374310][ T5827] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  534.394449][ T5827] usb 1-1: USB disconnect, device number 63
[  544.496687][   T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  546.416597][  T145] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  548.337353][  T145] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  552.818260][   T30] INFO: task syz.2.990:9514 blocked for more than 143 seconds.
[  552.825930][   T30]       Tainted: G             L      syzkaller #0
[  552.837372][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  552.846309][   T30] task:syz.2.990       state:D stack:24544 pid:9514  tgid:9514  ppid:5849   task_flags:0x400040 flags:0x08080002
[  552.858567][   T30] Call Trace:
[  552.861898][   T30]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  552.864871][   T30]  __schedule+0x15dd/0x52d0
[  552.869603][   T30]  ? __pfx___schedule+0x10/0x10
[  552.875487][   T30]  ? schedule+0x90/0x360
[  552.880381][   T30]  schedule+0x164/0x360
[  552.884601][   T30]  schedule_timeout+0xc3/0x2c0
[  552.889643][   T30]  ? finish_task_switch+0x240/0x920
[  552.894896][   T30]  ? lockdep_hardirqs_on+0x7a/0x110
[  552.900212][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  552.905719][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  552.910974][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  552.916743][   T30]  ? wait_for_completion+0x274/0x5e0
[  552.922125][   T30]  wait_for_completion+0x2cc/0x5e0
[  552.927411][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[  552.933177][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  552.939250][   T30]  restrict_one_thread_callback+0x320/0x570
[  552.986144][   T30]  task_work_run+0x1d9/0x270
[  552.990866][   T30]  ? __pfx_task_work_run+0x10/0x10
[  553.016075][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  553.021985][   T30]  get_signal+0x11eb/0x1330
[  553.062690][   T30]  ? __free_object+0x442/0x5e0
[  553.074148][   T30]  ? lockdep_hardirqs_on+0x7a/0x110
[  553.079837][   T30]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  553.085750][   T30]  arch_do_signal_or_restart+0xbc/0x830
[  553.092463][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  553.099292][   T30]  ? futex_wait_restart+0x1f5/0x470
[  553.104609][   T30]  exit_to_user_mode_loop+0x86/0x480
[  553.110404][   T30]  ? rcu_is_watching+0x15/0xb0
[  553.115255][   T30]  ? asm_int80_emulation+0x1a/0x20
[  553.126698][   T30]  ? asm_int80_emulation+0x1a/0x20
[  553.131893][   T30]  do_int80_emulation+0x2ef/0x4d0
[  553.144754][   T30]  ? asm_int80_emulation+0x1a/0x20
[  553.158843][   T30]  ? clear_bhb_loop+0x40/0x90
[  553.163693][   T30]  ? clear_bhb_loop+0x40/0x90
[  553.185096][   T30]  asm_int80_emulation+0x1a/0x20
[  553.193659][   T30] RIP: 0023:0xf6ffef6c
[  553.198172][   T30] RSP: 002b:00000000f751fb0c EFLAGS: 00000206 ORIG_RAX: 0000000000000000
[  553.207542][   T30] RAX: fffffffffffffdfc RBX: 00000000f73f4f8c RCX: 0000000000000080
[  553.215565][   T30] RDX: 0000000000000000 RSI: 00000000f751fca8 RDI: 0000000000000000
[  553.224875][   T30] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000000000000000
[  553.233240][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  553.241647][   T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  553.250000][   T30]  </TASK>
[  553.253181][   T30] INFO: task syz.2.990:9516 blocked for more than 143 seconds.
[  553.279481][   T30]       Tainted: G             L      syzkaller #0
[  553.286417][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  553.295210][   T30] task:syz.2.990       state:D stack:23968 pid:9516  tgid:9514  ppid:5849   task_flags:0x400140 flags:0x08080002
[  553.310348][   T30] Call Trace:
[  553.313682][   T30]  <TASK>
[  553.317687][   T30]  __schedule+0x15dd/0x52d0
[  553.322316][   T30]  ? lockdep_hardirqs_on+0x7a/0x110
[  553.328674][   T30]  ? __pfx___schedule+0x10/0x10
[  553.333591][   T30]  ? schedule+0x90/0x360
[  553.338287][   T30]  schedule+0x164/0x360
[  553.342492][   T30]  schedule_timeout+0xc3/0x2c0
[  553.347721][   T30]  ? skb_recv_datagram+0x15a/0x190
[  553.352919][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  553.358826][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  553.363912][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  553.369618][   T30]  ? wait_for_completion+0x274/0x5e0
[  553.374951][   T30]  wait_for_completion+0x2cc/0x5e0
[  553.382070][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[  553.391457][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  553.396902][   T30]  restrict_one_thread_callback+0x320/0x570
[  553.402975][   T30]  task_work_run+0x1d9/0x270
[  553.408013][   T30]  ? __pfx_task_work_run+0x10/0x10
[  553.413176][   T30]  ? security_file_permission+0x75/0x260
[  553.422028][   T30]  get_signal+0x11eb/0x1330
[  553.428167][   T30]  ? __pfx_vfs_read+0x10/0x10
[  553.432909][   T30]  arch_do_signal_or_restart+0xbc/0x830
[  553.439010][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  553.445222][   T30]  ? ksys_read+0x242/0x270
[  553.450128][   T30]  exit_to_user_mode_loop+0x86/0x480
[  553.455506][   T30]  ? rcu_is_watching+0x15/0xb0
[  553.464628][   T30]  ? asm_int80_emulation+0x1a/0x20
[  553.470072][   T30]  ? asm_int80_emulation+0x1a/0x20
[  553.475233][   T30]  do_int80_emulation+0x2ef/0x4d0
[  553.480822][   T30]  ? asm_int80_emulation+0x1a/0x20
[  553.486386][   T30]  ? clear_bhb_loop+0x40/0x90
[  553.491112][   T30]  ? clear_bhb_loop+0x40/0x90
[  553.495857][   T30]  asm_int80_emulation+0x1a/0x20
[  553.504122][   T30] RIP: 0023:0xf6ffef6c
[  553.508559][   T30] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  553.517400][   T30] RAX: fffffffffffffe00 RBX: 0000000000000009 RCX: 00000000800004c0
[  553.525492][   T30] RDX: 0000000000000043 RSI: 0000000000000000 RDI: 0000000000000000
[  553.538321][   T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  553.549426][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  553.557872][   T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  553.565911][   T30]  </TASK>
[  553.570254][   T30] INFO: task syz.2.990:9518 blocked for more than 144 seconds.
[  553.616108][   T30]       Tainted: G             L      syzkaller #0
[  553.622730][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  553.696093][   T30] task:syz.2.990       state:D stack:28360 pid:9518  tgid:9514  ppid:5849   task_flags:0x400140 flags:0x08080006
[  553.746074][   T30] Call Trace:
[  553.749457][   T30]  <TASK>
[  553.752583][   T30]  __schedule+0x15dd/0x52d0
[  553.786072][   T30]  ? register_lock_class+0x31/0x2e0
[  553.791375][   T30]  ? __pfx___schedule+0x10/0x10
[  553.836334][   T30]  ? schedule+0x90/0x360
[  553.840682][   T30]  schedule+0x164/0x360
[  553.844888][   T30]  schedule_timeout+0xc3/0x2c0
[  553.886066][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  553.891185][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  553.916185][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  553.921338][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  553.946113][   T30]  ? wait_for_completion+0x274/0x5e0
[  553.951503][   T30]  wait_for_completion+0x2cc/0x5e0
[  553.986079][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[  553.991826][   T30]  landlock_restrict_sibling_threads+0xe9c/0x11f0
[  554.026072][   T30]  ? landlock_restrict_sibling_threads+0x25c/0x11f0
[  554.032962][   T30]  ? __pfx_landlock_restrict_sibling_threads+0x10/0x10
[  554.068688][   T30]  ? landlock_put_ruleset+0x10/0xb0
[  554.074019][   T30]  __se_sys_landlock_restrict_self+0x540/0x810
[  554.106227][   T30]  do_int80_emulation+0x173/0x4d0
[  554.111360][   T30]  ? asm_int80_emulation+0x1a/0x20
[  554.146076][   T30]  ? clear_bhb_loop+0x40/0x90
[  554.150849][   T30]  ? clear_bhb_loop+0x40/0x90
[  554.155608][   T30]  asm_int80_emulation+0x1a/0x20
[  554.189867][   T30] RIP: 0023:0xf6ffef6c
[  554.194031][   T30] RSP: 002b:00000000f53cc50c EFLAGS: 00000206 ORIG_RAX: 00000000000001be
[  554.216112][   T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000000e
[  554.224292][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  554.246424][   T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  554.256459][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  554.264487][   T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  554.296091][   T30]  </TASK>
[  554.299495][   T30] INFO: task syz.2.990:9519 blocked for more than 144 seconds.
[  554.325642][   T30]       Tainted: G             L      syzkaller #0
[  554.336175][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  554.344901][   T30] task:syz.2.990       state:D stack:28616 pid:9519  tgid:9514  ppid:5849   task_flags:0x400140 flags:0x08080006
[  554.357892][   T30] Call Trace:
[  554.362675][   T30]  <TASK>
[  554.365661][   T30]  __schedule+0x15dd/0x52d0
[  554.371465][   T30]  ? register_lock_class+0x31/0x2e0
[  554.376844][   T30]  ? __pfx___schedule+0x10/0x10
[  554.381744][   T30]  ? schedule+0x90/0x360
[  554.386116][   T30]  schedule+0x164/0x360
[  554.390314][   T30]  schedule_timeout+0xc3/0x2c0
[  554.395098][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  554.400439][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  554.405911][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  554.411091][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  554.416619][   T30]  ? wait_for_completion+0x274/0x5e0
[  554.422008][   T30]  wait_for_completion+0x2cc/0x5e0
[  554.427217][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[  554.432909][   T30]  ? landlock_restrict_sibling_threads+0x25c/0x11f0
[  554.439736][   T30]  landlock_restrict_sibling_threads+0xe9c/0x11f0
[  554.446311][   T30]  ? landlock_restrict_sibling_threads+0x25c/0x11f0
[  554.453332][   T30]  ? __pfx_landlock_restrict_sibling_threads+0x10/0x10
[  554.460413][   T30]  ? landlock_put_ruleset+0x10/0xb0
[  554.465658][   T30]  __se_sys_landlock_restrict_self+0x540/0x810
[  554.471937][   T30]  do_int80_emulation+0x173/0x4d0
[  554.477167][   T30]  ? asm_int80_emulation+0x1a/0x20
[  554.482295][   T30]  ? clear_bhb_loop+0x40/0x90
[  554.487240][   T30]  ? clear_bhb_loop+0x40/0x90
[  554.491983][   T30]  asm_int80_emulation+0x1a/0x20
[  554.497508][   T30] RIP: 0023:0xf6ffef6c
[  554.501620][   T30] RSP: 002b:00000000f53ab50c EFLAGS: 00000206 ORIG_RAX: 00000000000001be
[  554.510176][   T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000009
[  554.518389][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  554.526554][   T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  554.534560][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  554.542662][   T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  554.550758][   T30]  </TASK>
[  554.554281][   T30] 
[  554.554281][   T30] Showing all locks held in the system:
[  554.562228][   T30] 3 locks held by kworker/u8:1/13:
[  554.567442][   T30]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  554.579274][   T30]  #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  554.593931][   T30]  #2: ffffffff8fbce048 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  554.603740][   T30] 1 lock held by ksoftirqd/0/15:
[  554.609083][   T30] 1 lock held by khungtaskd/30:
[  554.614010][   T30]  #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  554.624463][   T30] 2 locks held by getty/5588:
[  554.631522][   T30]  #0: ffff8880362c40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  554.641627][   T30]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  554.651954][   T30] 2 locks held by syz-executor/5846:
[  554.658009][   T30]  #0: ffffffff8fbce048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  554.667105][   T30]  #1: ffffffff8e7647b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  554.678233][   T30] 1 lock held by syz-executor/5847:
[  554.683442][   T30]  #0: ffffffff8fbce048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  554.692562][   T30] 1 lock held by syz-executor/7860:
[  554.698860][   T30]  #0: ffffffff8fbce048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  554.708128][   T30] 1 lock held by syz.1.1006/9596:
[  554.713196][   T30]  #0: ffffffff8fbce048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  554.722405][   T30] 1 lock held by syz-executor/9680:
[  554.727758][   T30]  #0: ffffffff8fbce048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  554.738059][   T30] 
[  554.749105][   T30] =============================================
[  554.749105][   T30] 
[  554.758117][   T30] NMI backtrace for cpu 1
[  554.758142][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  554.758167][   T30] Tainted: [L]=SOFTLOCKUP
[  554.758175][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  554.758186][   T30] Call Trace:
[  554.758194][   T30]  <TASK>
[  554.758203][   T30]  dump_stack_lvl+0xe8/0x150
[  554.758236][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  554.758264][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  554.758290][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  554.758320][   T30]  sys_info+0x135/0x170
[  554.758352][   T30]  watchdog+0xfd9/0x1030
[  554.758385][   T30]  ? watchdog+0x21a/0x1030
[  554.758419][   T30]  kthread+0x388/0x470
[  554.758437][   T30]  ? __pfx_watchdog+0x10/0x10
[  554.758462][   T30]  ? __pfx_kthread+0x10/0x10
[  554.758481][   T30]  ret_from_fork+0x51e/0xb90
[  554.758508][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  554.758530][   T30]  ? __switch_to+0xc7d/0x1450
[  554.758554][   T30]  ? __pfx_kthread+0x10/0x10
[  554.758573][   T30]  ret_from_fork_asm+0x1a/0x30
[  554.758615][   T30]  </TASK>
[  554.758622][   T30] Sending NMI from CPU 1 to CPUs 0:
[  554.875004][    C0] NMI backtrace for cpu 0
[  554.875026][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  554.875052][    C0] Tainted: [L]=SOFTLOCKUP
[  554.875060][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  554.875072][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  554.875098][    C0] Code: 6e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 c2 1a 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  554.875115][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246
[  554.875133][    C0] RAX: 00000000008449c5 RBX: ffffffff819a900a RCX: 0000000080000001
[  554.875147][    C0] RDX: 0000000000000001 RSI: ffffffff8def7f2f RDI: ffffffff8c27c900
[  554.875161][    C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b
[  554.875176][    C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: 0000000000000000
[  554.875189][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8
[  554.875204][    C0] FS:  0000000000000000(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000
[  554.875220][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  554.875233][    C0] CR2: 0000556bc8b26cb0 CR3: 000000007fa3c000 CR4: 00000000003526f0
[  554.875251][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  554.875263][    C0] DR3: 00000000be70000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  554.875275][    C0] Call Trace:
[  554.875284][    C0]  <TASK>
[  554.875291][    C0]  default_idle+0x9/0x20
[  554.875316][    C0]  default_idle_call+0x72/0xb0
[  554.875341][    C0]  do_idle+0x36a/0x5f0
[  554.875367][    C0]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  554.875392][    C0]  ? __pfx_do_idle+0x10/0x10
[  554.875422][    C0]  cpu_startup_entry+0x43/0x60
[  554.875448][    C0]  rest_init+0x2de/0x300
[  554.875475][    C0]  start_kernel+0x385/0x3d0
[  554.875497][    C0]  x86_64_start_reservations+0x24/0x30
[  554.875525][    C0]  x86_64_start_kernel+0x143/0x1c0
[  554.875551][    C0]  common_startup_64+0x13e/0x147
[  554.875585][    C0]  </TASK>
[  555.082588][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  555.089518][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  555.100233][   T30] Tainted: [L]=SOFTLOCKUP
[  555.104567][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  555.114634][   T30] Call Trace:
[  555.117927][   T30]  <TASK>
[  555.120868][   T30]  vpanic+0x56c/0xa60
[  555.124902][   T30]  ? __pfx___schedule+0x10/0x10
[  555.129767][   T30]  ? __pfx_vpanic+0x10/0x10
[  555.134298][   T30]  panic+0xc5/0xd0
[  555.138060][   T30]  ? __pfx_panic+0x10/0x10
[  555.142531][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  555.147977][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  555.154163][   T30]  watchdog+0x1023/0x1030
[  555.158525][   T30]  ? watchdog+0x21a/0x1030
[  555.162980][   T30]  kthread+0x388/0x470
[  555.167066][   T30]  ? __pfx_watchdog+0x10/0x10
[  555.171811][   T30]  ? __pfx_kthread+0x10/0x10
[  555.176426][   T30]  ret_from_fork+0x51e/0xb90
[  555.181057][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  555.186200][   T30]  ? __switch_to+0xc7d/0x1450
[  555.190943][   T30]  ? __pfx_kthread+0x10/0x10
[  555.195556][   T30]  ret_from_fork_asm+0x1a/0x30
[  555.200388][   T30]  </TASK>
[  555.204084][   T30] Kernel Offset: disabled
[  555.208421][   T30] Rebooting in 86400 seconds..