last executing test programs:

11m30.410606487s ago: executing program 3 (id=105):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendfile(r0, r0, 0x0, 0x200000) (fail_nth: 4)

11m29.964198892s ago: executing program 3 (id=108):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x18, 0xde, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000}, 0x20040080)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf250900000005000800100000000800010001000000050007000e"], 0x2c}}, 0x64000)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x34, r5, 0x100, 0x70bd2c, 0x7fffffff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000001)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800004514002800000000ffffffff810022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000590780000"], 0x36)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000500)=""/53, 0x35}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/224, 0xe0}, {&(0x7f0000001640)=""/153, 0x99}, {&(0x7f0000001700)=""/112, 0x70}, {&(0x7f0000001780)=""/53, 0x35}], 0x9, &(0x7f0000001880)=""/109, 0x6d}, 0x3}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/226, 0xe2}, {&(0x7f0000001a00)=""/143, 0x8f}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/86, 0x56}, {&(0x7f0000001b80)=""/90, 0x5a}], 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001c80)=""/177, 0xb1}, {&(0x7f0000001d40)=""/43, 0x2b}, {&(0x7f0000001d80)=""/86, 0x56}, {&(0x7f0000001e00)=""/65, 0x41}, {&(0x7f0000001e80)=""/148, 0x94}], 0x5}, 0x1}, {{&(0x7f0000001fc0)=@pppol2tpv3in6, 0x80, &(0x7f0000002580)=[{&(0x7f0000002040)=""/149, 0x95}, {&(0x7f0000002100)=""/194, 0xc2}, {&(0x7f0000002200)=""/225, 0xe1}, {&(0x7f0000002300)=""/148, 0x94}, {&(0x7f00000023c0)=""/135, 0x87}, {&(0x7f0000002480)=""/117, 0x75}, {&(0x7f0000002500)=""/83, 0x53}], 0x7, &(0x7f0000002600)=""/57, 0x39}}, {{&(0x7f0000002640)=@alg, 0x80, &(0x7f0000002740)=[{&(0x7f00000026c0)=""/69, 0x45}], 0x1, &(0x7f0000002780)=""/80, 0x50}, 0x6}, {{&(0x7f0000002800)=@caif=@util, 0x80, &(0x7f0000002940)=[{&(0x7f0000002880)=""/186, 0xba}], 0x1}, 0x9}], 0x6, 0x40002040, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000240)="160c777d160ecff3c7c12a0912125450e9e3941b23c5d2b695f49134ef53395dcabfaf857f7ec3838d70a6226b8475f6b6edd82838d26f36d717c8b0f945c2cb5b2b9b916af8c0fd548c4d3a21b2a84bb0d3880e753949263e", 0x59, 0x8000, &(0x7f0000000300)={0x11, 0x11, r8, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14)
ioctl$TCFLSH(r7, 0x540b, 0x2)

11m28.927244531s ago: executing program 3 (id=112):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0x20, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

11m28.766360272s ago: executing program 3 (id=113):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0xc0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/135, 0x87}, {&(0x7f0000000000)=""/187, 0xbb}], 0x2, 0x40, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

11m28.204544384s ago: executing program 3 (id=115):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000008c0)={0xc0})
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000240)=0x6, 0x4)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

11m27.932227319s ago: executing program 3 (id=117):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (fail_nth: 4)

11m12.670589834s ago: executing program 32 (id=117):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (fail_nth: 4)

8m48.939039591s ago: executing program 1 (id=1027):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaa", 0x79, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d92", 0xb6}, {0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d", 0x9a}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb", 0x5e}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r3 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

8m46.123996371s ago: executing program 1 (id=1039):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa81, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x2})
r3 = syz_open_dev$media(&(0x7f00000000c0), 0x104, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x7, 0x9, 0x7, 0x4, 0x4, "4182570f2ef5943b337cc044dca4e8115a928b", 0x2, 0x8})
r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x9, 0x1000000, 0x3, {0x1000008, 0xbde, 0x1, 0xfff}})
r5 = syz_open_dev$video4linux(&(0x7f0000000400), 0xd, 0x28580)
ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100f, 0xffffffffffffffff, 0x0, 0x0})
ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffc, 0x21, 0x9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="0cc023763a893372b1e0e2c727f5e789565a8af3934bcb29d4ec07c32258669cd1", 0x0, 0x5, 0x2, 0x2, 0x0})
syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$kcm(0xa, 0x3, 0x3a)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000c0000040900010073797a31000700000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="21cd103e937c027e", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1cbd8c00", @ANYRES16=r10, @ANYBLOB="01002dbd7000fcdbdf2501000000340008803000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c08000a00feffff7f1400020077673100"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4012}, 0x4048820)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r11 = syz_open_dev$loop(&(0x7f00000002c0), 0x312, 0x400)
ioctl$LOOP_SET_BLOCK_SIZE(r11, 0x4c09, 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020308000000000000005004090400f700c873b808090504105802030d580904", @ANYRESDEC=r2], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x5, [{0xa2, &(0x7f00000009c0)=ANY=[@ANYRES8=r9, @ANYRES64=r5, @ANYRESHEX=r8, @ANYRESHEX=r6, @ANYRES64=r3]}, {0x89, &(0x7f0000000540)=@string={0x89, 0x3, "ea276884e36f8848b0671ab91b77d707053a2de73a831f96b4d6c1b2877024afc01f1bd41cd442bf486e735f4596cc220d65ce7e8ebde6f765f7d714082af4fcaaa0f0597703467f71f886bcae9afbb3c7f015ee8c5abae2604378f10222534155d309fa6937f648f16c7b49c8552f0600a194244ed613ecf8555dbce622669d389efdcfa4bfff"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x812}}, {0x53, &(0x7f0000000800)=@string={0x53, 0x3, "be43a152c4ef1da221581e56bcbfe51ae0f89b9a1f1f55fb9fed3ee87a4a4bd4791af7ef66c9eed7f62972eb6f04b7933569251959290500ab125022e0f3d466f0137084c11793b8ae2ee0c28a45cd8a97"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x455}}]})

8m44.171796426s ago: executing program 1 (id=1059):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000b80)={0x0, 0xea60}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x57, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f6873"], 0xe8}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008084}, 0x40050)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, {r5}}, './file0\x00'})
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0)
setpgid(r4, r4)
setpgid(0x0, r4)
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x1})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0)

8m43.13515121s ago: executing program 1 (id=1067):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000500), 0x0, 0x27, 0x3)

8m43.006027778s ago: executing program 1 (id=1069):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x18)

8m42.374267896s ago: executing program 1 (id=1076):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
r3 = fsmount(r1, 0x0, 0x84)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x4})
ioprio_set$pid(0x1, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
read$FUSE(r4, 0x0, 0x0)
r5 = fsmount(r2, 0x0, 0x2)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_mount(r0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x163)
setpgid(r6, r6)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x64)
setpgid(0x0, r6)
fchdir(r5)
chdir(&(0x7f00000001c0)='./file0\x00')
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2018008, &(0x7f0000004200)={[{}, {@pids_localevents}, {@memory_localevents}]})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2c)

8m41.964101715s ago: executing program 33 (id=1076):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
r3 = fsmount(r1, 0x0, 0x84)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x4})
ioprio_set$pid(0x1, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
read$FUSE(r4, 0x0, 0x0)
r5 = fsmount(r2, 0x0, 0x2)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_mount(r0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x163)
setpgid(r6, r6)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x64)
setpgid(0x0, r6)
fchdir(r5)
chdir(&(0x7f00000001c0)='./file0\x00')
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2018008, &(0x7f0000004200)={[{}, {@pids_localevents}, {@memory_localevents}]})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2c)

4m50.221284023s ago: executing program 4 (id=2258):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x8f, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9dfcd4bb7391bf43ba726f8bea4e3c1a900000004e52b25dd097e755f75a5b3a8299677050e6a8fa87000000000000000000000028c150b5d110bf9316adb3d6468df0740077e13ff2881e45732221c62688d64c581a4f20aa2b70b98dfbb9d3f0bfc460c5dcb66356e8008e71aaafbb510b00000000"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x164, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xa5, 0xc, "bcb58aa868678ad4d484b54923b84fb5697e86b84c761c4c07ef145e32645d9bff4d6290172503542afe35a9c3ecae01e42a2eb5280ac48aab9e673e1fb7f9236371891d0471d6ca3fa9e0c961674b9f458b78db879e863859213f0082022a66a63261eac4f8c433eb43cf0dd3e4ec780f7233aef8c17835a221db40d8ffb9b0ac42506fda4543cc4d6259bc6cbe4e96cb43d236340c271a8aa617dffe2f48935d"}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60f44ca7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f3809d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75391ab4}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x25d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x73}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x10e4, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3d0, 0x3, 0x0, 0x1, [{0x3cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x370, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bb0d8d544303c8d637a481d829c9ddda71553b76e941f51f02f2e7b51a3fc62525db4ec360"}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VALUE={0x76, 0x1, "b83e89d3267f23019920ab1e5a3881f86c592184ffca4f10baf684ae2af458855e1c48c927dbf6d74def6eb39ad082ff300559c88f98d3daed499d08508bde518ac1a1eb92d78f13847654010e9dac4e2b05810aa643c9a9cdffdba3250faee72002dabe07067be4bbcdc8f75219cf1307c7"}, @NFTA_DATA_VALUE={0xd5, 0x1, "b7959c41db5b87b23791b23872b1c385b142c6c5e3d10fff46baf3812d5182211702c463b6859a582fcdc6b275e0f4e56f222a4ab639627d9d9d0e68bf4c379d762df155db36281c6447099a772006bb2aaa54c71a5e60725950d551db06efe970fefaffeae540b823f524d116fc01e9061914ffc70f1abbddc6ef818a9a1785613a97c5a724115a1d22236cd472c4daced5365aa2a0655035897cf7729630d7fd1289810e26e3e51dd136e1bb389459724ec9726d9649d68416c2b3831f3babc53f7b8b6717e4af6974fedfc1362fbec9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xe5, 0x1, "17338e37172f23b8abdecf834e3ca7a74c73037d3a4f99f66fa7d23d2ddff74921d0e28074286563701d2ba1036b5d3e09f0f634ffde7a4c9e9f2e50ba9e3ae79ecd281b90179e7b47d6f02874fda0b230acb2353cf7f7e9ea18afc2dee45978bf550138e09bd44fdca2faf5ee449c15d92a2c1eb546ad557863695114461d0c2fdb0837bbdb3acffa28fa39455554f7379554bfe80c6480c552d5f70ebf279cc34b4c2193b64ae5aa5de36c0134c610f3e5b32c2e83e6a1dcf81a218edcc6db05f9221fff9f05420a014598538054eb9923536c0ef5b6e0ae790aa814a793f85a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc70, 0x3, 0x0, 0x1, [{0x428, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}, @NFTA_DATA_VALUE={0xa7, 0x1, "2e7b7c09181e498e2fc183fa0d4f44d5678c6028f3f0f62c7d961da6a6cf9db7af1a2656c389a545df998e44398475769ab7c496eec91e7403e894ec953c6f8af2d6558e105bc868c8d317a55e55f0a3c72b8392bfa6a10804450c7b1472ff2a327a6ad512faf6917415ee456b56df2b82530b9f84381fb4485dad718b98f6f2e01043c4ea5558422d04872ac923417c2f155b01a158963ddf1ecbc4abe34d5a9ac543"}, @NFTA_DATA_VALUE={0x31, 0x1, "8b4b6d9c7e9342f82436d33ac6bef41c0b715b5d68823aff8300e9d1c42a461c2e9e026c5a6fb78112977387d9"}]}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "879dc3147ec50cdf35ce64bbdd210bdf57178c35b26f2aad3137d5d6ed5b9bac7c2581da20e387f8e6d231d54cc24293d57633a5d12a1472f53085cac17815df0124aaa05146144f7b8037b6390e5fa43bd03990d561f61438f58b90485b5eb8eeb54a40fbfb314ce8cb71e45a0c8b7aa2658940815cd0877682b6fa6cc311111566e08023effefc0845911d44f0ab5684b3b47e2ba3e38f7613efd1e715659f5dc734b730c9e0c07c6e0b3dc9a9d13b898a8d813c3b4e402a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "58c28461e2a7e19df7d349ab92ce4980dcf7cabde264a466a52921bfef9c1d7a90d69d4030211c6794bb210e7846b730d7718c0ccffd49cab9a286fe2d2bca29261f31d97c5a7dd02ab65032df3348a4f990c770252920df219c7550e21d536d7815510d8c481dc40232b01c413e788caf68757d253588ff0b5c2493f286e4a0ee"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d889b1e8988ffd6d89e4da17f0ff2842cf49e4af1be7946f1bf8f129381c022f56cdd5538b4ebf696914dbf1e41e60e72735fec07fba6c23f9a1d830a30387a22c869ae16fd02735df900f575012cef3536b7eef55d6181e84c309b4db6984465b8f824a8d4112b37f7f862b565d282c9bbbb49ff6aa8023569059bef91de9718a83d19a7c7138ecc4e47069fb86e2c0971afd7a97796ebff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, '/dev/sg#\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x4fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "400d5a5a6c82b528db"}, @NFTA_DATA_VALUE={0x9, 0x1, "1dcd5394ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f59066141f597fd4bb55dd7d5988367486998faf204c7076044da57d580e99e374fa1d74c7ede4870f5d89fd6d4e609479ebb5072ebe57f08351540e585f86767e57b6ff6b0d3ab0e35b3b90b07255d8acea9d2c5352a580793e144b4a165781253187e83904fb9d6bf0968643a9df84b67d7b38b662ffc9f85aa7303a20930d7bd5beb8427f4395b4a8c08feede45f1046120b58e5510d6328c05f672f9eda95ec040cf06a3f4f22227559780"}, @NFTA_DATA_VALUE={0xa1, 0x1, "5a4d1622c3809ebd03a708e39c3baf1b05626d61c0c6fdfc49328fb1148c575f66069e07ee4e8838041b80a34605a75e97e359435a54757da4b2ca89a4357c500e8bcddbabe844b2107b3c2f28742ef8ba57e1d9f32d06775275960402da730b607a7a7d94779adc9367ac00bb5819cf636e7978aa9e7d4d839a0f632f532cb5e241e89046d62e099b162cbd516eff52662b01ae884c07bb14ec480120"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x26c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "7d9c6a23ee8fc18227c3c755e8a34d0ee87ec480ae99efedfae4316aa37b77f22ffdf5d4aea189fa985399c163d99ee688448a94f01d20c5e74c051cd56b2a28158f72da2d361427740d08d71aa5284be883438dea6ecf08876c88993bcdee3330a7045f7d90c3fe24ec984593b1cf6266fd188a997c7553cd0ab3d9a028bb5d2f4c34d3c4c1674842fd043c387f2acac89b3c7c686255bef226dba277df43213110390b6fa42434a17520a26012135155ef6e7ecd2ab19fe507157daebca30b0e4195940556d92f53bba37d040f025ec3fcbfe6bf929a99afedb52f95b424a84bcd018feb473585d5"}, @NFTA_DATA_VALUE={0x35, 0x1, "4e9957e22609836e805cd35ab84e6993cf56638c3211e44da3fa80c8a73aa2f954779f7c58f1d5155f1e6e117c21aadde5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "6d8b41f25f316ceba6198cf71c34eae2fec89c8c9a361a39e41e068464d412dcf9428cbb7e039e2a63b3ada5e9e9fc09b48ad8f9d2fc664ca8d287dee7af7f60efa7a3355ba70c7dc5459d30801e4282b15ef7e453870c636f3ff7fbef35493587afa4a07093790f38cea6881fc360cfd9fd22b6ff513d63e241de7be73b31afdef74b1e9d03a7441fbb2115b019abf6970ec747f4f5de9dfb7ee15a53bbc4cb7599a725e20e008f04fbdfb31b4afda55b4f8681c0d0b57d83a54b6d0b5af088b74316d2c50fa81cd7c2b19dca"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x2fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "9c668180943534491d385454d80479ce52db48be9f33af5f941fceff58619993d3831cd7b8809da1ad9fd8907dfdb68f51a009314ec4d036bbfd448cddc51bc6cdb6e5fef18cdb3471a7945083f237b9038df5464ab82510979db946e95c9338ce64cbbd0d80bccf467d64344b89bb792f4dad33a0b24a36aefc6e3c61b131a890adb1a518c3f99115b94ec91f44d18c29098f109124cf0de61657d50d970158751e8cf6bc63bcfd28bb610e6f1e68059a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "9fd9840f2eee05f7c79090178ef651719692618d1e954c4cb06e4dcabbff2415243092cb8dd87b1a3fe640cddc3de5a8493a3841d77d2e1e13e0ffbb8f4c9414988c65cd575407ce8bbf53efb54e8bb9b470567d27aa618ece22b9f0fb3156c29701fd608225a5490d0b04c8017bcde20bd55f5febe467a370210b8e0d2fcfc6586fed3fb2a3840b388ae57d88cbb431fc86a226c4abdc9667cef0f0b9d332523862aec7407d15b29804b90b1df31a12a959fe49bfc033fb51ceba007333e9f91e6315aa63583381769cd8e5780cdc751f14491542"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "935a6908a7c66a3ca70dc3778a2f6851e62a7823a1d43c0bc1ae10c53bbc82aed9d8ab9847f841bd2f11fc938ce9d5a01b267ea38af2aad637c010685a"}]}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "6c80eda3273c221e91844d6ffa0071d2bb7cf40b9bb037731be2c0d1bc09a0e9b61a056e49afcbdecc1b53d3e0d321d3d983e66facf1bd16cdb3eb74b990b5a536ae8a44e6a924ae7181cac1e80733d233d2406f73f31738351db91314a65dd4d421e8b11e4864b8bc5dca8e2c50936c63adf68506a2644b1e3b35679d0bfdc5e08692fbf39d3f654833b3c0ee04712d191be45987757578b700cbcc3cb347c5645291fe505aafecbe4ba2dcb19f7d6dd13928458e04f0093c4df27833ad4f0528"}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "08348c570d3ad3b51f1f32c18353f69523aafaf1753d1a8cf19d8fc3aa6f9396dec2baa42e61d4a3e96610c52f6883c18f3458b45fc4e3ccc4322eef63df9fdca2b0fd8691a5c1e7f793d52d3265f2624c"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1470}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

4m50.028455708s ago: executing program 4 (id=2260):
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$netlink(0x10, 0x3, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

4m49.780296543s ago: executing program 4 (id=2262):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$inet6(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2df74dc9bc5590ffffff7f0000000048a629b1f7ef32d0e32ddaecd54bcaa51b4c015dcebb5457ff678708c4a89cf94ef4", 0x31}], 0x1}}], 0x1, 0x4051)
r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xd0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa7, 0x10, 0xa, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0xf3f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x2, 0xb0}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x10, 0x3, 0xb4}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x90, 0x0, 0x5, 0x40, 0x40}, 0x11b, &(0x7f0000000680)={0x5, 0xf, 0x11b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x9, 0x6, 0x2}, @generic={0x26, 0x10, 0xb, "b7d358f9a2fb11fa1f9db8c2b393b5193854cd67b68746d210fa41e33bdf2b7126cee6"}, @ssp_cap={0x10, 0x10, 0xa, 0x5e, 0x1, 0x53, 0xff0f, 0xfffe, [0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x9, 0x1, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "aabd9e02e83e880e589d0f6134e7a7ec"}, @generic={0xbb, 0x10, 0x2, "5834571c336aed7bfce8d9129b4385a8a3f7117c7e21fef8f47ffb162ff0bf366c7cccb2029823e3e960217c72c5da15bfb2e3290860645ff4018e0b4e711231f21e122c5f682a2540bb76c6c9cac11d6d8a9bdc778dd04d0f04235096289a0b293a1182dbcd4a9efef2633c1a73de343585bc087b93e2737104a3d207a4a90f89ef67575a9b0ef6cf23fed1e6eb932f20576bb5407d6be74c3f62a7eb1493b8da1a35cd929a56e1819dbd01fbc1a38d80322c11a799c5c9"}]}, 0x4, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3401}}, {0xef, &(0x7f0000000800)=@string={0xef, 0x3, "9ee317f3c95afb3cb7e638a71a1eb35090187032256a2e3ec72653f2824e0a34a63ca36d0fc7e6c23527e3b743a03c296630cd3e8ef9f62a31b9f17da27490f8fc9ca81e2a113bf16981f157ae8f552ab4dbbe786d63b2db0b261bfc3990efb1ea61ee8f3d4f0a497ec67199d3b0d3f51062397fe910525e356caefb255b5df2a530acdeef35fde4e7ab517ded87f0dd3e6da4639d7e6d78631cd3183d168d2790c12e7a9be217f93b50bdb964172a7445b4735c4213a57541c435bc8c56ce1d0222516ff102cae40ab6363a0271f5f45f481436a63893821e606c662210e394f9b1e08e29d851c34a79da546e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1004}}]})
syz_usb_control_io$hid(r3, &(0x7f0000000bc0)={0x24, &(0x7f0000000a80)={0x40, 0x31, 0x3e, {0x3e, 0x7, "22e640551247dc5d3b9bdaa65c0f15750cb3a05ea16585618a5a536d0495a065960d2f5e5f5e0b93c883756ea25734eae61801e07a8bd75b2ec84918"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f0000000b40)={0x0, 0x22, 0x26, {[@global=@item_012={0x1, 0x1, 0x7, "b2"}, @local=@item_4={0x3, 0x2, 0x6, "18e004a8"}, @main=@item_4={0x3, 0x0, 0xb, "c111c166"}, @local=@item_4={0x3, 0x2, 0x3, "6d54da17"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x0, "92de9966"}, @local=@item_4={0x3, 0x2, 0x5, "a40ee32c"}, @main=@item_4={0x3, 0x0, 0xc, "d193f726"}, @global=@item_4={0x3, 0x1, 0x8, "8910d14c"}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ec7, 0x3, 0x1, {0x22, 0xa72}}}}, &(0x7f0000000d80)={0x2c, &(0x7f0000000c00)={0x0, 0x1, 0x20, "9a7e71703eb0dc38dc7413e1a2755f976bd90c74b5be9425894e4a8f3da93418"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000cc0)={0x20, 0x1, 0x67, "01ae33b7d6a9d176800ee75bf747d07ff9d03aa108c63aba44f84850aaa0e7397a93d82663da56f0401535e6a8bb8e60adb8e802c78e12bc2aa187159149083d2b94ac9c00dc2c12116a0332a5406e42eec30dd26280c61cdf1ec4320a6353b254d7d5f760809e"}, &(0x7f0000000d40)={0x20, 0x3, 0x1, 0x77}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(0xffffffffffffffff, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0x6, 0x1, 0x1000000b4}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1040}], 0x0, 0x0, 0x0})

4m49.175076344s ago: executing program 4 (id=2268):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x0, 0xffffffff, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {}, {}, {}, {0xfd, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x3, 0x1}, {0x0, 0x0, 0x2}, {0x0, 0x1, 0x20}, {}, {}, {}, {0x20}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x3, 0x6}, {0x2, 0x0, 0x6}, {0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='.\x00', 0x0, 0x10454ca, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="000100001600010026bd700000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa4e200000000000000000a01000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="640101020000000000000000000000000000000033000000000000000000000000000000000000010000000000000000010000000000000000000000000000000f0000000000000000000004000000000900000000000000ffffffffffffffff000000000000000000000000000000000200000000000000000000000000000000000000800000000000000000000000000000000000000000000000020000001000000000000000050000000500000008000b0c00000000"], 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000600)="e1202c385a7a4706062588000005adbce107ed3b6cc113720c582eb7ce38d6b231ee21a7ad66590bcdce6d70d8d823c6a26b6cab3cb06eb70c8d0ebbac2fbae5ee", 0xfffffffffffffdfa)
setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e22, 0xaf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, {0xa, 0x4e23, 0x4, @private2, 0xffffffff}, 0x0, {[0x1ff, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0xffffffff]}}, 0x5c)
sched_setscheduler(0x0, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x58af18ea30134976}, "9e93c08785f12768", "000200f7ff0000000000000080000100", "789bbc31", "81b2a576935f6860"}, 0x28)
shutdown(r6, 0x1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)

4m47.989246662s ago: executing program 4 (id=2273):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8100)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x5, 0x47425247, 0xf00, 0x84f2, 0x0, @stepwise={{0x6, 0x7fffffff}, {0x0, 0xd08}, {0x80000002, 0xd}}})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x5, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r3, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x30}}, 0x0)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x1, @sliced={0xfff, [0x1, 0x1, 0x40, 0xfe01, 0x81e, 0x8, 0x6, 0x8, 0x7b5, 0xfc8e, 0x9, 0x1, 0x100, 0xa4, 0x5, 0x2, 0x0, 0x2, 0x1, 0x1, 0x6bd, 0x3, 0x5, 0x5, 0xfff, 0x9, 0x1, 0x5b19, 0xf2, 0x3ff, 0x5, 0x8001, 0x1, 0xe67, 0x9, 0x8, 0x0, 0xb5, 0x3, 0x362, 0x8000, 0x2, 0x656, 0x401, 0x1, 0x2, 0x9, 0x10], 0x8}})
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)
r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000180)={0x60, 0x3, &(0x7f000007c000/0x2000)=nil, &(0x7f000088d000/0x3000)=nil, 0xb8, &(0x7f0000000300)=[{0x7fffffffffffffff, 0x1ff, 0x1}, {0x4, 0x81, 0x101}, {0x3, 0xffffffff, 0x2}, {0x1, 0x8001}, {0x2, 0xaa, 0xc43}], 0xaaaaaaaaaaaaaee, 0x2, 0x20, 0x63, 0x1, 0x4c})
chdir(&(0x7f0000000140)='./file0\x00')
r7 = syz_usbip_server_init(0x1)
syz_usb_connect$uac2(0x5, 0xe2, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000300000010"], 0x0)
write$usbip_server(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35)

4m46.811129728s ago: executing program 4 (id=2282):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
write(r3, &(0x7f0000000040)="0f03000018002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r6)
tkill(r6, 0x12)
tkill(r6, 0x12)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x6, 0x200000000008000}, 0x800003, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x2c000010)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10)
listen(r0, 0xda90)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
accept$inet(r0, 0x0, 0x0)

4m46.67382697s ago: executing program 34 (id=2282):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
write(r3, &(0x7f0000000040)="0f03000018002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r6)
tkill(r6, 0x12)
tkill(r6, 0x12)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x6, 0x200000000008000}, 0x800003, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x2c000010)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10)
listen(r0, 0xda90)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
accept$inet(r0, 0x0, 0x0)

1m9.307261541s ago: executing program 0 (id=3060):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f029, 0x4})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0420800000ff7fffff01000000"], 0xd)

1m9.128965172s ago: executing program 0 (id=3062):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
sendfile(r0, r1, 0x0, 0x8)
r2 = socket$inet6(0xa, 0x6, 0x9)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201e10000000040050be017000000000001090224"], 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x4d67, 0x800, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x65, 0x0, 0x8f, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}}}}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000080)=0x5, 0x4)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
getpeername(r6, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'macvtap0\x00', 0xffff})
ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x12)
fchown(r8, 0x0, 0xee01)
socket(0x11, 0x4, 0x7a0)
setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4)

1m2.05367158s ago: executing program 0 (id=3070):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000002f00090024bd700000000000040000000c0017000000006000000000"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x80000)

1m1.704744126s ago: executing program 0 (id=3071):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000026c0)=@newtaction={0x1c4, 0x1c, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{0x1b0, 0x1, [@m_ipt={0x104, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xda, 0x6, "014779329810c4022ee30685b3fb106e6a0427b38a0251f93f33439dd935b6fba57d261ffc879b0c953897efb70be8967428c62424bf1699b39fb41338c4e3e6aeb861aab3fcc46608314b494f0e6abee365293169e5682dfdf32ce89bcff6b9c7bd630f159bf7c8e6c8fc35ec2a94ca6934f16160146f7afdae6d57a323d887a6bbe862c5e9ceff242bc043613f92ee588a781f447a70833f172bedf13d392ed38099f0aa853e5d87ecb2c758b3742b05045c503c8d35b8c59b80c370cf229660c54ab628665cb09bead64ef8d9882c878dca75d2ef"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ipt={0xa8, 0x14, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}]}, {0x70, 0x6, "9455c836f123afc93a623a5ba247961c97eb287091fd1c5cf78a438315428a6943b9905c7d787f0a5f228a8269d2fc452d75d0d8536f527f8c9546b083f531aabb16951fd32712f4b1035640978f508025eb95aa3b60d376211f0aa24663174d6c041e7212c80b5af9ded9a2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8080}, 0xd080)

1m0.354989174s ago: executing program 6 (id=3076):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008002000000000000800060000020000"], 0x44}}, 0x0)

58.54704609s ago: executing program 6 (id=3077):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x8f, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9dfcd4bb7391bf43ba726f8bea4e3c1a900000004e52b25dd097e755f75a5b3a8299677050e6a8fa87000000000000000000000028c150b5d110bf9316adb3d6468df0740077e13ff2881e45732221c62688d64c581a4f20aa2b70b98dfbb9d3f0bfc460c5dcb66356e8008e71aaafbb510b00000000"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x164, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xa5, 0xc, "bcb58aa868678ad4d484b54923b84fb5697e86b84c761c4c07ef145e32645d9bff4d6290172503542afe35a9c3ecae01e42a2eb5280ac48aab9e673e1fb7f9236371891d0471d6ca3fa9e0c961674b9f458b78db879e863859213f0082022a66a63261eac4f8c433eb43cf0dd3e4ec780f7233aef8c17835a221db40d8ffb9b0ac42506fda4543cc4d6259bc6cbe4e96cb43d236340c271a8aa617dffe2f48935d"}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60f44ca7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f3809d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75391ab4}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x25d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x73}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x11b4, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3d0, 0x3, 0x0, 0x1, [{0x3cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x370, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bb0d8d544303c8d637a481d829c9ddda71553b76e941f51f02f2e7b51a3fc62525db4ec360"}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VALUE={0x76, 0x1, "b83e89d3267f23019920ab1e5a3881f86c592184ffca4f10baf684ae2af458855e1c48c927dbf6d74def6eb39ad082ff300559c88f98d3daed499d08508bde518ac1a1eb92d78f13847654010e9dac4e2b05810aa643c9a9cdffdba3250faee72002dabe07067be4bbcdc8f75219cf1307c7"}, @NFTA_DATA_VALUE={0xd5, 0x1, "b7959c41db5b87b23791b23872b1c385b142c6c5e3d10fff46baf3812d5182211702c463b6859a582fcdc6b275e0f4e56f222a4ab639627d9d9d0e68bf4c379d762df155db36281c6447099a772006bb2aaa54c71a5e60725950d551db06efe970fefaffeae540b823f524d116fc01e9061914ffc70f1abbddc6ef818a9a1785613a97c5a724115a1d22236cd472c4daced5365aa2a0655035897cf7729630d7fd1289810e26e3e51dd136e1bb389459724ec9726d9649d68416c2b3831f3babc53f7b8b6717e4af6974fedfc1362fbec9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xe5, 0x1, "17338e37172f23b8abdecf834e3ca7a74c73037d3a4f99f66fa7d23d2ddff74921d0e28074286563701d2ba1036b5d3e09f0f634ffde7a4c9e9f2e50ba9e3ae79ecd281b90179e7b47d6f02874fda0b230acb2353cf7f7e9ea18afc2dee45978bf550138e09bd44fdca2faf5ee449c15d92a2c1eb546ad557863695114461d0c2fdb0837bbdb3acffa28fa39455554f7379554bfe80c6480c552d5f70ebf279cc34b4c2193b64ae5aa5de36c0134c610f3e5b32c2e83e6a1dcf81a218edcc6db05f9221fff9f05420a014598538054eb9923536c0ef5b6e0ae790aa814a793f85a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd40, 0x3, 0x0, 0x1, [{0x428, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}, @NFTA_DATA_VALUE={0xa7, 0x1, "2e7b7c09181e498e2fc183fa0d4f44d5678c6028f3f0f62c7d961da6a6cf9db7af1a2656c389a545df998e44398475769ab7c496eec91e7403e894ec953c6f8af2d6558e105bc868c8d317a55e55f0a3c72b8392bfa6a10804450c7b1472ff2a327a6ad512faf6917415ee456b56df2b82530b9f84381fb4485dad718b98f6f2e01043c4ea5558422d04872ac923417c2f155b01a158963ddf1ecbc4abe34d5a9ac543"}, @NFTA_DATA_VALUE={0x31, 0x1, "8b4b6d9c7e9342f82436d33ac6bef41c0b715b5d68823aff8300e9d1c42a461c2e9e026c5a6fb78112977387d9"}]}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "879dc3147ec50cdf35ce64bbdd210bdf57178c35b26f2aad3137d5d6ed5b9bac7c2581da20e387f8e6d231d54cc24293d57633a5d12a1472f53085cac17815df0124aaa05146144f7b8037b6390e5fa43bd03990d561f61438f58b90485b5eb8eeb54a40fbfb314ce8cb71e45a0c8b7aa2658940815cd0877682b6fa6cc311111566e08023effefc0845911d44f0ab5684b3b47e2ba3e38f7613efd1e715659f5dc734b730c9e0c07c6e0b3dc9a9d13b898a8d813c3b4e402a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "58c28461e2a7e19df7d349ab92ce4980dcf7cabde264a466a52921bfef9c1d7a90d69d4030211c6794bb210e7846b730d7718c0ccffd49cab9a286fe2d2bca29261f31d97c5a7dd02ab65032df3348a4f990c770252920df219c7550e21d536d7815510d8c481dc40232b01c413e788caf68757d253588ff0b5c2493f286e4a0ee"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d889b1e8988ffd6d89e4da17f0ff2842cf49e4af1be7946f1bf8f129381c022f56cdd5538b4ebf696914dbf1e41e60e72735fec07fba6c23f9a1d830a30387a22c869ae16fd02735df900f575012cef3536b7eef55d6181e84c309b4db6984465b8f824a8d4112b37f7f862b565d282c9bbbb49ff6aa8023569059bef91de9718a83d19a7c7138ecc4e47069fb86e2c0971afd7a97796ebff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, '/dev/sg#\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x528, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "400d5a5a6c82b528db"}, @NFTA_DATA_VALUE={0x9, 0x1, "1dcd5394ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f59066141f597fd4bb55dd7d5988367486998faf204c7076044da57d580e99e374fa1d74c7ede4870f5d89fd6d4e609479ebb5072ebe57f08351540e585f86767e57b6ff6b0d3ab0e35b3b90b07255d8acea9d2c5352a580793e144b4a165781253187e83904fb9d6bf0968643a9df84b67d7b38b662ffc9f85aa7303a20930d7bd5beb8427f4395b4a8c08feede45f1046120b58e5510d6328c05f672f9eda95ec040cf06a3f4f22227559780"}, @NFTA_DATA_VALUE={0xa1, 0x1, "5a4d1622c3809ebd03a708e39c3baf1b05626d61c0c6fdfc49328fb1148c575f66069e07ee4e8838041b80a34605a75e97e359435a54757da4b2ca89a4357c500e8bcddbabe844b2107b3c2f28742ef8ba57e1d9f32d06775275960402da730b607a7a7d94779adc9367ac00bb5819cf636e7978aa9e7d4d839a0f632f532cb5e241e89046d62e099b162cbd516eff52662b01ae884c07bb14ec480120"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x264, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "7d9c6a23ee8fc18227c3c755e8a34d0ee87ec480ae99efedfae4316aa37b77f22ffdf5d4aea189fa985399c163d99ee688448a94f01d20c5e74c051cd56b2a28158f72da2d361427740d08d71aa5284be883438dea6ecf08876c88993bcdee3330a7045f7d90c3fe24ec984593b1cf6266fd188a997c7553cd0ab3d9a028bb5d2f4c34d3c4c1674842fd043c387f2acac89b3c7c686255bef226dba277df43213110390b6fa42434a17520a26012135155ef6e7ecd2ab19fe507157daebca30b0e4195940556d92f53bba37d040f025ec3fcbfe6bf929a99afedb52f95b424a84bcd018feb473585d5"}, @NFTA_DATA_VALUE={0x35, 0x1, "4e9957e22609836e805cd35ab84e6993cf56638c3211e44da3fa80c8a73aa2f954779f7c58f1d5155f1e6e117c21aadde5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "6d8b41f25f316ceba6198cf71c34eae2fec89c8c9a361a39e41e068464d412dcf9428cbb7e039e2a63b3ada5e9e9fc09b48ad8f9d2fc664ca8d287dee7af7f60efa7a3355ba70c7dc5459d30801e4282b15ef7e453870c636f3ff7fbef35493587afa4a07093790f38cea6881fc360cfd9fd22b6ff513d63e241de7be73b31afdef74b1e9d03a7441fbb2115b019abf6970ec747f4f5de9dfb7ee15a53bbc4cb7599a725e20e008f04fbdfb31b4afda55b4f8681c0d0b57d83a54b6d0b5af088b74316d2c50fa8"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x3a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "9c668180943534491d385454d80479ce52db48be9f33af5f941fceff58619993d3831cd7b8809da1ad9fd8907dfdb68f51a009314ec4d036bbfd448cddc51bc6cdb6e5fef18cdb3471a7945083f237b9038df5464ab82510979db946e95c9338ce64cbbd0d80bccf467d64344b89bb792f4dad33a0b24a36aefc6e3c61b131a890adb1a518c3f99115b94ec91f44d18c29098f109124cf0de61657d50d970158751e8cf6bc63bcfd28bb610e6f1e68059a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "9fd9840f2eee05f7c79090178ef651719692618d1e954c4cb06e4dcabbff2415243092cb8dd87b1a3fe640cddc3de5a8493a3841d77d2e1e13e0ffbb8f4c9414988c65cd575407ce8bbf53efb54e8bb9b470567d27aa618ece22b9f0fb3156c29701fd608225a5490d0b04c8017bcde20bd55f5febe467a370210b8e0d2fcfc6586fed3fb2a3840b388ae57d88cbb431fc86a226c4abdc9667cef0f0b9d332523862aec7407d15b29804b90b1df31a12a959fe49bfc033fb51ceba007333e9f91e6315aa63583381769cd8e5780cdc751f14491542"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "935a6908a7c66a3ca70dc3778a2f6851e62a7823a1d43c0bc1ae10c53bbc82aed9d8ab9847f841bd2f11fc938ce9d5a01b267ea38af2aad637c010685a"}]}, @NFTA_SET_ELEM_KEY={0x17c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "cb6a172b62d997201d09ec637d0a515ff782f4c1c38c9eae15cdd58a5e668da3662cd96be4c74cc39051b8eab525c74b7c4083fed66fe62be69dc18b8d32cd4f7085ee077b6f70b7029f45f6e404734c77ab50a27aa6c928fda1215ac6cfd4eb91b8f4d18ba7be3ca627610fc3d217a509333ddc12311d59d5f2078d595900ac2ad60b866b2683e15fecae9b4531821f5c7984365fd3997f3f3dbc6443e1f97a1f"}, @NFTA_DATA_VALUE={0xc3, 0x1, "6c80eda3273c221e91844d6ffa0071d2bb7cf40b9bb037731be2c0d1bc09a0e9b61a056e49afcbdecc1b53d3e0d321d3d983e66facf1bd16cdb3eb74b990b5a536ae8a44e6a924ae7181cac1e80733d233d2406f73f31738351db91314a65dd4d421e8b11e4864b8bc5dca8e2c50936c63adf68506a2644b1e3b35679d0bfdc5e08692fbf39d3f654833b3c0ee04712d191be45987757578b700cbcc3cb347c5645291fe505aafecbe4ba2dcb19f7d6dd13928458e04f0093c4df27833ad4f"}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "08348c570d3ad3b51f1f32c18353f69523aafaf1753d1a8cf19d8fc3aa6f9396dec2baa42e61d4a3e96610c52f6883c18f3458b45fc4e3ccc4322eef63df9fdca2b0fd8691a5c1e7f793d52d3265f2624c"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1540}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

57.573432561s ago: executing program 0 (id=3079):
ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000))
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14)
r1 = accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x800)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000140))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x1, 'geneve1\x00', {}, 0x800})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000580)={0x1}, 0x4)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000780)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={<r4=>0x0, @rand_addr, @loopback}, &(0x7f0000000840)=0xc)
recvfrom$packet(r1, &(0x7f00000007c0)=""/4, 0x4, 0x1, &(0x7f0000000880)={0x11, 0x17, r4, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000b80)={{'\x00', 0x2}, {0x7}, 0x142, 0x0, 0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)="675e08f8fdf034f3547a08531a0a80d238549ada44c02bf0d1aac07beb4837d2f955f3a1bbd6839be3dad43d8487eaeb984b8d97ac13bd830c393e25d1deecc1189f85dc3013edfda61f648a3f1fa164fe081f9b95ee96a62de6453f83e083fa", 0x60, 0x0, &(0x7f00000009c0)={0x2, 0x142, {0x0, 0xc, 0xd7, "58b3a16baa5435affd63423fa4831a1e44d9da42834607f4b1e03de6e22d52249b25c0b836313ede401f3e64697082193cfddc9e4c54573a5bb1d6cd46cc3471dad4df3b9f0367ff96d98e306c3aa62252cb05bb89c9472ef81a3116a1570e2bc85ce23f55c3b5325aa6c908514ad12d8ae265932c28eaeb3c54b252263baf457d4a13c32446dc0276fc3dc05bbae603498e87426252fe4722039627b82699213a9d6e702723593f1da914e0fbe283a2de953a9ad421995d724be9e8530202f37d23aff0e186e5599c11c5ddec455857cd1ea62f7536e6", 0x5e, "f8bb72c66195779edfbb6caf4b397b580610496f7edee57697a21540b70d030e7bb58039136cebf6045e4a4c6c53227b6751e01932d8bcc6d507e70c519e0ac8da20e844b9fd94116f928d3578677dcc89c9ec53031ab52b1be99d412d4c"}, 0x67, "963903d5304f5d4a5a6784078c47ef016f98379b6508a390a76965996d5d52f80f8c3c0a25b486c0a0ea3e44ad767991ce07ab60c77d876b453aac35b50d50efb34b1068f76d314238511db1e08829fb9e7247e3cf745b610bfc177227fdb57d3c7bfa9cd980db"}, 0x1b5})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000c00)={<r5=>r3, 0x1, 0x101})
setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000c40)=0x1, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r5)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x60, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b673a0a0aa"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f1175c4a7f74dd61ceb03570b5"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a0a708e80f"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000e40), r6)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r8, 0x300, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000094)
r9 = accept$phonet_pipe(r5, &(0x7f0000000f40), &(0x7f0000000f80)=0x10)
sendmsg(r9, &(0x7f0000002100)={&(0x7f0000000fc0)=@can, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001040)="9167", 0x2}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="92d7e63e53ee37edcc5c4d12d313af", 0xf}], 0x3}, 0x20000807)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000002180), r6)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x3c, r10, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xddc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80888e0}, 0xc010)
newfstatat(0xffffffffffffff9c, &(0x7f0000002280)='./file0\x00', &(0x7f00000022c0), 0x800)
sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r10, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000002440), &(0x7f0000002480)=0x4)
pipe(&(0x7f00000024c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000002540), r6)
sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x68, r12, 0x104, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xca, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10008000}, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r11, 0x8004e500, &(0x7f0000002680)=r5)

57.444033533s ago: executing program 6 (id=3081):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc)
r2 = syz_open_dev$dri(&(0x7f0000000800), 0x0, 0x40000)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000240)={0x0, 0x0, 0x0})
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)='i', 0x1}], 0x1}, 0x8010)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000000)={0x7, 'veth0_to_bridge\x00', {0x7}})
flock(r3, 0x2)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000004)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x4, 0xb, 0x8080000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x104b)
preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/229, 0xe5}], 0x1, 0x3, 0x0)
socket$inet6(0xa, 0x6, 0xfffffeff)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={<r8=>0x0, 0x1, 0xfffb}, &(0x7f00000003c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000400)={r8, 0x32, "cf3b543e876ebe30551dfe43bade00649950dc51417eb9364e061def9fb14b3ed01d8c83f65e127ba369afe133cdc1d0f4ad"}, &(0x7f0000000440)=0x3a)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES16=r6, @ANYBLOB="dcfb0bbae2c4cf540ef926de044d731cfad033254b58e4cee669408159989e5ac9600685048d0ffca247835a83ffa245d291ccab87424e6f66952c2ab32cfaf345b166dc914e163419cc77904ebbff5ad79f1c2c5ed9d6f38bf5a953978f16ec09d4df7ad1b12747d904da53bfeb8bcb5888cc10c042bb9b81e17332abe10145b1e159a4810320078c32172952c42de5cbcbf73ffcbb91110c74f2ac8b7fcc83ba01de3d670f86ad22e1486e62ded4150d0f1f9b61c59c610a1500ec2286e54dc9c4928b8552b3d3c58ce731f428f5b812c26a36da5399b6d3ea0fd944472cfc824844da4b786b190739810e8f29", @ANYRESHEX=r1, @ANYBLOB="9e6e3d77afbef9fd9f7b44166df2bc67cb2a0f435b2976e019d4de586771ccc62e1240be672e3deb9332d383599a27d7bc30c7fa506a894a25182f2985dfcb0bda5e39a7766874503f4ded6722c40bf801fc024a8b00db643ee47a9efc13d94ffc703eb0be110ae7d0e63bc35449af8c7e79829242d7e37ab16a584a01a82993c15f05dc5ba0f968804292ce306c2da745e94d3a69c6c9e0a2a3d8f6911ac149c15c7559c1dc475182dd086f7a5ef6e133a7cf45bb1a97c97b6a33159660986d54949951e7b65496a5c488eb203f8363747b9b96240fe7933fc53affae71d2", @ANYBLOB="bdb2550fb233d4d7e68ca30476daea04b15e"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6)
sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x19054900}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000003d2858ba54a9ea76da6a1e7cdb7255c1091481308fe174ed4f44a530171c7797429374410bece1071654bb04194ae56c3804f801bcb2579b4473957c15bdd2cfd9b8d9c9eb8246cb361ec92592f1e94cb7dfcb40a662684b2552dcf267584acc618680b8c87325b8e275ce85c925111d3c06753eeb754281c5799a7e1973b2da2bfd83c7c9059649acca7cd4e043d5e6f7bbf49a8f266815ac999dd2b54539343afca97df0d253d839c866cdfbce548a2c7be8d0834108c75ccfbc5f2b2cac5d98d385ce7d5542794a017712088c5a78d110982f39ca568baa296af419b1ebdfe3b4abf92f61873b92308146f3c2d6884e9f3020", @ANYRES16=r9, @ANYBLOB="00042bbd7000fedbdf25100000000c0099000500000009000000"], 0x20}}, 0x40)
r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x109401, 0x0)
write$vga_arbiter(r10, &(0x7f0000000000)=@unlock_all, 0xb)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x7, 0x400002b, 0x6, 0x100000, 0xfffffffc, 0x6})

55.362969883s ago: executing program 0 (id=3083):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="200086dd030017000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)

51.35351287s ago: executing program 6 (id=3087):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000026c0)=@newtaction={0x1c4, 0x1c, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{0x1b0, 0x1, [@m_ipt={0x104, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xda, 0x6, "014779329810c4022ee30685b3fb106e6a0427b38a0251f93f33439dd935b6fba57d261ffc879b0c953897efb70be8967428c62424bf1699b39fb41338c4e3e6aeb861aab3fcc46608314b494f0e6abee365293169e5682dfdf32ce89bcff6b9c7bd630f159bf7c8e6c8fc35ec2a94ca6934f16160146f7afdae6d57a323d887a6bbe862c5e9ceff242bc043613f92ee588a781f447a70833f172bedf13d392ed38099f0aa853e5d87ecb2c758b3742b05045c503c8d35b8c59b80c370cf229660c54ab628665cb09bead64ef8d9882c878dca75d2ef"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ipt={0xa8, 0x14, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}]}, {0x70, 0x6, "9455c836f123afc93a623a5ba247961c97eb287091fd1c5cf78a438315428a6943b9905c7d787f0a5f228a8269d2fc452d75d0d8536f527f8c9546b083f531aabb16951fd32712f4b1035640978f508025eb95aa3b60d376211f0aa24663174d6c041e7212c80b5af9ded9a2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8080}, 0xd080)

51.197624816s ago: executing program 6 (id=3089):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x8f, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9dfcd4bb7391bf43ba726f8bea4e3c1a900000004e52b25dd097e755f75a5b3a8299677050e6a8fa87000000000000000000000028c150b5d110bf9316adb3d6468df0740077e13ff2881e45732221c62688d64c581a4f20aa2b70b98dfbb9d3f0bfc460c5dcb66356e8008e71aaafbb510b00000000"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x164, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xa5, 0xc, "bcb58aa868678ad4d484b54923b84fb5697e86b84c761c4c07ef145e32645d9bff4d6290172503542afe35a9c3ecae01e42a2eb5280ac48aab9e673e1fb7f9236371891d0471d6ca3fa9e0c961674b9f458b78db879e863859213f0082022a66a63261eac4f8c433eb43cf0dd3e4ec780f7233aef8c17835a221db40d8ffb9b0ac42506fda4543cc4d6259bc6cbe4e96cb43d236340c271a8aa617dffe2f48935d"}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60f44ca7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f3809d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75391ab4}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x25d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x73}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x11b4, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3d0, 0x3, 0x0, 0x1, [{0x3cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x370, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bb0d8d544303c8d637a481d829c9ddda71553b76e941f51f02f2e7b51a3fc62525db4ec360"}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VALUE={0x76, 0x1, "b83e89d3267f23019920ab1e5a3881f86c592184ffca4f10baf684ae2af458855e1c48c927dbf6d74def6eb39ad082ff300559c88f98d3daed499d08508bde518ac1a1eb92d78f13847654010e9dac4e2b05810aa643c9a9cdffdba3250faee72002dabe07067be4bbcdc8f75219cf1307c7"}, @NFTA_DATA_VALUE={0xd5, 0x1, "b7959c41db5b87b23791b23872b1c385b142c6c5e3d10fff46baf3812d5182211702c463b6859a582fcdc6b275e0f4e56f222a4ab639627d9d9d0e68bf4c379d762df155db36281c6447099a772006bb2aaa54c71a5e60725950d551db06efe970fefaffeae540b823f524d116fc01e9061914ffc70f1abbddc6ef818a9a1785613a97c5a724115a1d22236cd472c4daced5365aa2a0655035897cf7729630d7fd1289810e26e3e51dd136e1bb389459724ec9726d9649d68416c2b3831f3babc53f7b8b6717e4af6974fedfc1362fbec9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xe5, 0x1, "17338e37172f23b8abdecf834e3ca7a74c73037d3a4f99f66fa7d23d2ddff74921d0e28074286563701d2ba1036b5d3e09f0f634ffde7a4c9e9f2e50ba9e3ae79ecd281b90179e7b47d6f02874fda0b230acb2353cf7f7e9ea18afc2dee45978bf550138e09bd44fdca2faf5ee449c15d92a2c1eb546ad557863695114461d0c2fdb0837bbdb3acffa28fa39455554f7379554bfe80c6480c552d5f70ebf279cc34b4c2193b64ae5aa5de36c0134c610f3e5b32c2e83e6a1dcf81a218edcc6db05f9221fff9f05420a014598538054eb9923536c0ef5b6e0ae790aa814a793f85a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd40, 0x3, 0x0, 0x1, [{0x428, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}, @NFTA_DATA_VALUE={0xa7, 0x1, "2e7b7c09181e498e2fc183fa0d4f44d5678c6028f3f0f62c7d961da6a6cf9db7af1a2656c389a545df998e44398475769ab7c496eec91e7403e894ec953c6f8af2d6558e105bc868c8d317a55e55f0a3c72b8392bfa6a10804450c7b1472ff2a327a6ad512faf6917415ee456b56df2b82530b9f84381fb4485dad718b98f6f2e01043c4ea5558422d04872ac923417c2f155b01a158963ddf1ecbc4abe34d5a9ac543"}, @NFTA_DATA_VALUE={0x31, 0x1, "8b4b6d9c7e9342f82436d33ac6bef41c0b715b5d68823aff8300e9d1c42a461c2e9e026c5a6fb78112977387d9"}]}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "879dc3147ec50cdf35ce64bbdd210bdf57178c35b26f2aad3137d5d6ed5b9bac7c2581da20e387f8e6d231d54cc24293d57633a5d12a1472f53085cac17815df0124aaa05146144f7b8037b6390e5fa43bd03990d561f61438f58b90485b5eb8eeb54a40fbfb314ce8cb71e45a0c8b7aa2658940815cd0877682b6fa6cc311111566e08023effefc0845911d44f0ab5684b3b47e2ba3e38f7613efd1e715659f5dc734b730c9e0c07c6e0b3dc9a9d13b898a8d813c3b4e402a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "58c28461e2a7e19df7d349ab92ce4980dcf7cabde264a466a52921bfef9c1d7a90d69d4030211c6794bb210e7846b730d7718c0ccffd49cab9a286fe2d2bca29261f31d97c5a7dd02ab65032df3348a4f990c770252920df219c7550e21d536d7815510d8c481dc40232b01c413e788caf68757d253588ff0b5c2493f286e4a0ee"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d889b1e8988ffd6d89e4da17f0ff2842cf49e4af1be7946f1bf8f129381c022f56cdd5538b4ebf696914dbf1e41e60e72735fec07fba6c23f9a1d830a30387a22c869ae16fd02735df900f575012cef3536b7eef55d6181e84c309b4db6984465b8f824a8d4112b37f7f862b565d282c9bbbb49ff6aa8023569059bef91de9718a83d19a7c7138ecc4e47069fb86e2c0971afd7a97796ebff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, '/dev/sg#\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x528, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "400d5a5a6c82b528db"}, @NFTA_DATA_VALUE={0x9, 0x1, "1dcd5394ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f59066141f597fd4bb55dd7d5988367486998faf204c7076044da57d580e99e374fa1d74c7ede4870f5d89fd6d4e609479ebb5072ebe57f08351540e585f86767e57b6ff6b0d3ab0e35b3b90b07255d8acea9d2c5352a580793e144b4a165781253187e83904fb9d6bf0968643a9df84b67d7b38b662ffc9f85aa7303a20930d7bd5beb8427f4395b4a8c08feede45f1046120b58e5510d6328c05f672f9eda95ec040cf06a3f4f22227559780"}, @NFTA_DATA_VALUE={0xa1, 0x1, "5a4d1622c3809ebd03a708e39c3baf1b05626d61c0c6fdfc49328fb1148c575f66069e07ee4e8838041b80a34605a75e97e359435a54757da4b2ca89a4357c500e8bcddbabe844b2107b3c2f28742ef8ba57e1d9f32d06775275960402da730b607a7a7d94779adc9367ac00bb5819cf636e7978aa9e7d4d839a0f632f532cb5e241e89046d62e099b162cbd516eff52662b01ae884c07bb14ec480120"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x264, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "7d9c6a23ee8fc18227c3c755e8a34d0ee87ec480ae99efedfae4316aa37b77f22ffdf5d4aea189fa985399c163d99ee688448a94f01d20c5e74c051cd56b2a28158f72da2d361427740d08d71aa5284be883438dea6ecf08876c88993bcdee3330a7045f7d90c3fe24ec984593b1cf6266fd188a997c7553cd0ab3d9a028bb5d2f4c34d3c4c1674842fd043c387f2acac89b3c7c686255bef226dba277df43213110390b6fa42434a17520a26012135155ef6e7ecd2ab19fe507157daebca30b0e4195940556d92f53bba37d040f025ec3fcbfe6bf929a99afedb52f95b424a84bcd018feb473585d5"}, @NFTA_DATA_VALUE={0x35, 0x1, "4e9957e22609836e805cd35ab84e6993cf56638c3211e44da3fa80c8a73aa2f954779f7c58f1d5155f1e6e117c21aadde5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "6d8b41f25f316ceba6198cf71c34eae2fec89c8c9a361a39e41e068464d412dcf9428cbb7e039e2a63b3ada5e9e9fc09b48ad8f9d2fc664ca8d287dee7af7f60efa7a3355ba70c7dc5459d30801e4282b15ef7e453870c636f3ff7fbef35493587afa4a07093790f38cea6881fc360cfd9fd22b6ff513d63e241de7be73b31afdef74b1e9d03a7441fbb2115b019abf6970ec747f4f5de9dfb7ee15a53bbc4cb7599a725e20e008f04fbdfb31b4afda55b4f8681c0d0b57d83a54b6d0b5af088b74316d2c50fa8"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x3a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "9c668180943534491d385454d80479ce52db48be9f33af5f941fceff58619993d3831cd7b8809da1ad9fd8907dfdb68f51a009314ec4d036bbfd448cddc51bc6cdb6e5fef18cdb3471a7945083f237b9038df5464ab82510979db946e95c9338ce64cbbd0d80bccf467d64344b89bb792f4dad33a0b24a36aefc6e3c61b131a890adb1a518c3f99115b94ec91f44d18c29098f109124cf0de61657d50d970158751e8cf6bc63bcfd28bb610e6f1e68059a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "9fd9840f2eee05f7c79090178ef651719692618d1e954c4cb06e4dcabbff2415243092cb8dd87b1a3fe640cddc3de5a8493a3841d77d2e1e13e0ffbb8f4c9414988c65cd575407ce8bbf53efb54e8bb9b470567d27aa618ece22b9f0fb3156c29701fd608225a5490d0b04c8017bcde20bd55f5febe467a370210b8e0d2fcfc6586fed3fb2a3840b388ae57d88cbb431fc86a226c4abdc9667cef0f0b9d332523862aec7407d15b29804b90b1df31a12a959fe49bfc033fb51ceba007333e9f91e6315aa63583381769cd8e5780cdc751f14491542"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "935a6908a7c66a3ca70dc3778a2f6851e62a7823a1d43c0bc1ae10c53bbc82aed9d8ab9847f841bd2f11fc938ce9d5a01b267ea38af2aad637c010685a"}]}, @NFTA_SET_ELEM_KEY={0x17c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "cb6a172b62d997201d09ec637d0a515ff782f4c1c38c9eae15cdd58a5e668da3662cd96be4c74cc39051b8eab525c74b7c4083fed66fe62be69dc18b8d32cd4f7085ee077b6f70b7029f45f6e404734c77ab50a27aa6c928fda1215ac6cfd4eb91b8f4d18ba7be3ca627610fc3d217a509333ddc12311d59d5f2078d595900ac2ad60b866b2683e15fecae9b4531821f5c7984365fd3997f3f3dbc6443e1f97a1f"}, @NFTA_DATA_VALUE={0xc3, 0x1, "6c80eda3273c221e91844d6ffa0071d2bb7cf40b9bb037731be2c0d1bc09a0e9b61a056e49afcbdecc1b53d3e0d321d3d983e66facf1bd16cdb3eb74b990b5a536ae8a44e6a924ae7181cac1e80733d233d2406f73f31738351db91314a65dd4d421e8b11e4864b8bc5dca8e2c50936c63adf68506a2644b1e3b35679d0bfdc5e08692fbf39d3f654833b3c0ee04712d191be45987757578b700cbcc3cb347c5645291fe505aafecbe4ba2dcb19f7d6dd13928458e04f0093c4df27833ad4f"}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "08348c570d3ad3b51f1f32c18353f69523aafaf1753d1a8cf19d8fc3aa6f9396dec2baa42e61d4a3e96610c52f6883c18f3458b45fc4e3ccc4322eef63df9fdca2b0fd8691a5c1e7f793d52d3265f2624c"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1540}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

48.659007452s ago: executing program 6 (id=3090):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xcb, 0x4a, 0x6, 0x40, 0x19d2, 0xff61, 0xb089, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x96, 0x0, 0x3, "", [{{0x9, 0x4, 0xbd, 0x95, 0x0, 0x2, 0x2, 0xff, 0x10}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x1, 0xd, 0x1, 0xff, 0x8}, 0x0, 0x0})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r3, 0x11, 0x66, 0x0, &(0x7f0000000040))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000240)={0x9, 0x7ff, 0xd, 0x5, 0x28})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@private=0xa010100, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@tmpl={0x184, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x4, 0x3, 0x0, 0x0, 0x0, 0x6e}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x33}, 0x0, @in=@multicast2, 0x3504, 0x0, 0x0, 0x4, 0x0, 0x40ce}, {{@in=@multicast1, 0x4d4, 0x32}, 0xa, @in=@local, 0x5, 0x4, 0x1, 0x7, 0x0, 0x0, 0x400}, {{@in6=@mcast2, 0x0, 0x6c}, 0x2, @in=@multicast2, 0xffffffff, 0x1, 0x2, 0x0, 0x10000, 0x0, 0x1}]}]}, 0x23c}}, 0x80c4)
r5 = dup2(r2, r2)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5)
write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x2d, 0x6, 0x0, {0x4, 0x5, 0x4, 0x0, '%%\\\x1a'}}, 0x2d)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="200086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)

39.96992943s ago: executing program 35 (id=3083):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="200086dd030017000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)

39.113200134s ago: executing program 2 (id=3100):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18)
sendto$inet6(r2, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0xcaa1, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
r4 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0)
copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0)
syz_usb_connect$uac2(0x2, 0x9b, &(0x7f0000002ec0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x7, 0x0, 0x1b, {0x8, 0xb, 0x0, 0x2, 0x1, 0x2, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x3, 0x19, 0x5d}, [@input_terminal={0x10, 0x24, 0x2, 0x1, 0x400, 0x3, 0x4a, 0x4, 0xfffff98c, 0x0, 0x4, 0x46}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x8, 0x9, 0x3, 0x5, 0x10, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0xf, 0x4, {0x8, 0x25, 0x1, 0x82, 0x3c, 0x6, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xfc, 0x10, 0xfc, {0x8, 0x25, 0x1, 0x82, 0x33, 0x8, 0x2}}}}}}}}]}}, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0})

31.937420809s ago: executing program 36 (id=3090):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xcb, 0x4a, 0x6, 0x40, 0x19d2, 0xff61, 0xb089, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x96, 0x0, 0x3, "", [{{0x9, 0x4, 0xbd, 0x95, 0x0, 0x2, 0x2, 0xff, 0x10}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x1, 0xd, 0x1, 0xff, 0x8}, 0x0, 0x0})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r3, 0x11, 0x66, 0x0, &(0x7f0000000040))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000240)={0x9, 0x7ff, 0xd, 0x5, 0x28})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@private=0xa010100, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@tmpl={0x184, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x4, 0x3, 0x0, 0x0, 0x0, 0x6e}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x33}, 0x0, @in=@multicast2, 0x3504, 0x0, 0x0, 0x4, 0x0, 0x40ce}, {{@in=@multicast1, 0x4d4, 0x32}, 0xa, @in=@local, 0x5, 0x4, 0x1, 0x7, 0x0, 0x0, 0x400}, {{@in6=@mcast2, 0x0, 0x6c}, 0x2, @in=@multicast2, 0xffffffff, 0x1, 0x2, 0x0, 0x10000, 0x0, 0x1}]}]}, 0x23c}}, 0x80c4)
r5 = dup2(r2, r2)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5)
write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x2d, 0x6, 0x0, {0x4, 0x5, 0x4, 0x0, '%%\\\x1a'}}, 0x2d)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="200086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)

31.407483393s ago: executing program 2 (id=3104):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet(0x2, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000004780)={'ipvlan1\x00', &(0x7f0000000100)=@ethtool_link_settings={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1, 0x0, 0x4]}})
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="00000c0000000700014e"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$uac3(0x6, 0xc8, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x3, 0x80, 0x9, {0x8, 0xb, 0x1, 0x0, 0x1, 0x24, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x7e41a50f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x1, 0x5, 0xb, "ab65"}, @as_header={0x17, 0x24, 0x1, 0x7, 0x2, 0x4a39, 0x3, 0x0, 0x3, 0x1191, 0x90}, @as_header={0x17, 0x24, 0x1, 0x2, 0x7, 0x4, 0x1002, 0x0, 0x8, 0x8, 0x8}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf9, 0x2, 0x1, 0x3, "d900"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0xc, 0x95, {0xa, 0x25, 0x25, 0xd1ef, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd5, 0xa, 0x6, {0xa, 0x25, 0x25, 0x7fff, 0x0, 0xffff}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x0, 0x7, 0x5, 0x8, 0x81}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x4, [{0xd0, &(0x7f0000000280)=@string={0xd0, 0x3, "37a782268b8be2175cf5045aa2f18a3ade2ccbdb47685284e77f5e0a615d08e7ee4f74d921d407d28ba75e110fa65ddd8520962f8edfcfffa3ab2975e1501c3577de096a35abb975c5bcb38fc3a1cff0b90d5bd8a38c4783c9e054638684b18324345dc111f6d374073c9f67c78651d844408f8b350da32a1749bc4f5aa1b78acf428eb5aee09ed3282613cbecada3791592a6f97bdbfd2f7f4f37c8b0fd97f5292f1aea4ffbda7cfef1394f06671584eb39d7359ae6f91cc88b02d02594aa8510e559ccadd993b1bc16c89f50fc"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x861}}, {0xf4, &(0x7f00000003c0)=@string={0xf4, 0x3, "1fa4d4a955c948e1fc710fe90c56cb8954cf6ee6935d091ae02487db6d96e0c02af2e529003d39657676bd81ddb88ea3916e63b6d9bbadf4938dd3968e99fa789d729896cc1533eaac3e8647a534c0eaead986e73d63664ba652d5d4a96864e2ae51a9786a26d6230694da39f2fd081c00fb6e3d5464a226f394f37ff92c6be0ae4c141f0fb427fdeff418a3a620b342805b00c9e410afc9ae1b25f819e2f0cb39882d4ca6b29c54e06a4bfd32989318cf2771aab9fdd45d563e04f479030b612e11b3da25c343f9b691b90c9b547fb22ad5f6181f3035455ae2a28d9bcad87425c3830e8ab710d6aefeade1fbe5c0c5d0f0"}}, {0xc, &(0x7f00000004c0)=@string={0xc, 0x3, "a3cd9e606f475e330196"}}]})

27.030162246s ago: executing program 5 (id=3111):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042080"], 0xd)

25.224914271s ago: executing program 5 (id=3112):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0xec041, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) (fail_nth: 4)

25.224623502s ago: executing program 2 (id=3113):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
socket$rds(0x15, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp6(0xa, 0x3, 0x2)
socket$inet6(0xa, 0x3, 0x8000000003c)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x80000)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x6, 0x56c6, {<r4=>0xffffffffffffffff}, {0xffffffffffffffff}, 0xb60c, 0x3})
process_vm_writev(r4, &(0x7f0000001540)=[{&(0x7f0000000240)=""/119, 0x77}, {&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/131, 0x83}], 0x4, &(0x7f0000001600)=[{&(0x7f0000001580)=""/115, 0x73}], 0x1, 0x0)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x48, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x620b}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x3}, r3, 0x8001}}, 0x48)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

22.636440085s ago: executing program 2 (id=3114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = gettid()
r2 = getpid()
rt_tgsigqueueinfo(r2, r1, 0x5, &(0x7f00000003c0)={0xd, 0x1858, 0x6})
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'vxcan1\x00', {0x4}, 0x26})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="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", 0x123}], 0x1}, 0x20004000)

20.613091981s ago: executing program 5 (id=3115):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x8d, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000017010fff03000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4bab19d69a5addee134dd447034da6dd89704603d31a3d25b9d5f46cfd43d9e29aac7422920d98e1463256bd4cc929373ad9000000000faf6a95a04ad3b9db9b230f8224a3d6db187a94e5dadfe181d20d3a4bd08e8b0e6eeb79fdee230dd852a36dfc9046d03b8f316b2d460ca5d08c515d914db8ce430ea0237911c440ee750fe787aaffa83b809651c529e4cf68c8219a827ea003c59e3e51b00cd7f9464f37be2eb3e1475819ad37edcc238b85ab205a2b394916815d9cf7bf3f8e3d19a4697756299e21f2afd3ae31e0f09b8153965635216de47156f4e5fc97cb04f9c5e13256be1d9e0a94f9c6387940de1bcd7b532d16ebba216601cf23be6a7c259550bd059a5a7aee85eb558de8201c1d9c7b29e27313f61cf0b07dd790071bdbceabdd32ce2bcc279b1575a1431b03e5dc37307d15a2782175c87dad1a3aadf48b382bea4ae0b423edee0e12ada4c1dacc40bf387630792ab5c7ed6e2ef7e8a77268b0ff8978ccddfa8da4521d24b3fddc70d181c20caa9a584df9b2e"], 0x18}], 0x4924924924924fd, 0x0)

19.591738778s ago: executing program 5 (id=3116):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0xd080)

19.173881413s ago: executing program 5 (id=3117):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x80000004}, 0x1c)

18.611565886s ago: executing program 2 (id=3118):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042080"], 0xd)

18.555655346s ago: executing program 5 (id=3124):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4)

17.420570259s ago: executing program 2 (id=3119):
socket$igmp6(0xa, 0x3, 0x2) (async)
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, &(0x7f0000000040)) (async)
prlimit64(0x0, 0xe, 0x0, &(0x7f0000000040))
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x53, 0x20040000)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x100})
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r6, 0x8b01, &(0x7f0000000040))

2.506033224s ago: executing program 37 (id=3124):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4)

0s ago: executing program 38 (id=3119):
socket$igmp6(0xa, 0x3, 0x2) (async)
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, &(0x7f0000000040)) (async)
prlimit64(0x0, 0xe, 0x0, &(0x7f0000000040))
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x53, 0x20040000)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x100})
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r6, 0x8b01, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

 13983:13984 ioctl c0306201 200000000080 returned -14
[  645.449260][T13984] binder: 13983:13984 ioctl c0306201 2000000003c0 returned -14
[  645.571450][   T49] usb 3-1: USB disconnect, device number 66
[  645.647888][T13990] FAULT_INJECTION: forcing a failure.
[  645.647888][T13990] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  645.647924][T13990] CPU: 0 UID: 0 PID: 13990 Comm: syz.2.2815 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  645.647950][T13990] Tainted: [L]=SOFTLOCKUP
[  645.647957][T13990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  645.647969][T13990] Call Trace:
[  645.647977][T13990]  <TASK>
[  645.647986][T13990]  dump_stack_lvl+0xe8/0x150
[  645.648014][T13990]  should_fail_ex+0x46b/0x600
[  645.648045][T13990]  _copy_to_user+0x31/0xb0
[  645.648069][T13990]  simple_read_from_buffer+0xe1/0x170
[  645.648095][T13990]  proc_fail_nth_read+0x1be/0x230
[  645.648119][T13990]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  645.648143][T13990]  ? rw_verify_area+0x2ac/0x4e0
[  645.648164][T13990]  ? __fget_files+0x2a/0x420
[  645.648182][T13990]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  645.648203][T13990]  vfs_read+0x212/0xa80
[  645.648233][T13990]  ? __pfx_vfs_read+0x10/0x10
[  645.648261][T13990]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  645.648286][T13990]  ? lockdep_hardirqs_on+0x7a/0x110
[  645.648310][T13990]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  645.648332][T13990]  ? mutex_lock_nested+0x152/0x1d0
[  645.648360][T13990]  ? fdget_pos+0x252/0x320
[  645.648389][T13990]  ksys_read+0x156/0x270
[  645.648413][T13990]  ? __pfx_ksys_read+0x10/0x10
[  645.648443][T13990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.648465][T13990]  do_syscall_64+0x174/0x580
[  645.648488][T13990]  ? trace_irq_disable+0x3b/0x140
[  645.648513][T13990]  ? clear_bhb_loop+0x40/0x90
[  645.648537][T13990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.648556][T13990] RIP: 0033:0x7f7a4b66d68e
[  645.648574][T13990] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  645.648590][T13990] RSP: 002b:00007f7a498fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  645.648610][T13990] RAX: ffffffffffffffda RBX: 00007f7a498fe6c0 RCX: 00007f7a4b66d68e
[  645.648625][T13990] RDX: 000000000000000f RSI: 00007f7a498fe0a0 RDI: 0000000000000005
[  645.648638][T13990] RBP: 00007f7a498fe090 R08: 0000000000000000 R09: 0000000000000000
[  645.648650][T13990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  645.648662][T13990] R13: 00007f7a4b926038 R14: 00007f7a4b925fa0 R15: 00007ffc11d173b8
[  645.648692][T13990]  </TASK>
[  645.678247][T13988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2814'.
[  645.865929][T12146] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  646.025642][T13992] program syz.6.2816 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  646.544766][ T5794] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  646.632324][T14000] binder: 13999:14000 ioctl c0306201 200000000080 returned -14
[  646.642548][T14000] binder: 13999:14000 ioctl c0306201 2000000003c0 returned -14
[  646.706578][ T5794] usb 7-1: Using ep0 maxpacket: 16
[  646.713869][ T5794] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.713905][ T5794] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  646.713931][ T5794] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  646.713955][ T5794] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  646.772593][ T5794] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  646.772624][ T5794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  646.772645][ T5794] usb 7-1: SerialNumber: syz
[  646.834183][T13998] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  646.842460][T13998] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  646.863078][ T5794] hub 7-1:1.0: bad descriptor, ignoring hub
[  646.863117][ T5794] hub 7-1:1.0: probe with driver hub failed with error -5
[  647.089622][T13998] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  647.089827][T13998] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  647.389416][T12146] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  647.389443][T12146] usb 6-1: config 0 has no interface number 0
[  647.389485][T12146] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  647.389512][T12146] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  647.389538][T12146] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  647.469074][T12146] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  647.469104][T12146] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  647.469125][T12146] usb 6-1: Product: syz
[  647.469139][T12146] usb 6-1: SerialNumber: syz
[  647.484645][T12146] usb 6-1: config 0 descriptor??
[  647.887082][T12146] cm109 6-1:0.8: invalid payload size 0, expected 4
[  647.905733][T12146] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input25
[  649.576764][T14018] mmap: syz.2.2823 (14018) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  650.021742][ T5794] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71
[  650.054373][    C1] cm109_urb_ctl_callback: 3 callbacks suppressed
[  650.054399][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  650.054983][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  650.055216][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  650.055446][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  650.055673][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  650.055901][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  650.056132][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  650.056355][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  650.056591][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  650.056811][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  650.187071][ T5794] usb 7-1: USB disconnect, device number 30
[  650.224229][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  650.234996][T12146] usb 6-1: USB disconnect, device number 23
[  650.399004][T14020] FAULT_INJECTION: forcing a failure.
[  650.399004][T14020] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  650.399041][T14020] CPU: 0 UID: 0 PID: 14020 Comm: syz.2.2824 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  650.399068][T14020] Tainted: [L]=SOFTLOCKUP
[  650.399075][T14020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  650.399087][T14020] Call Trace:
[  650.399095][T14020]  <TASK>
[  650.399104][T14020]  dump_stack_lvl+0xe8/0x150
[  650.399132][T14020]  should_fail_ex+0x46b/0x600
[  650.399164][T14020]  _copy_from_iter+0x1d3/0x1670
[  650.399199][T14020]  ? rcu_is_watching+0x15/0xb0
[  650.399234][T14020]  ? __pfx__copy_from_iter+0x10/0x10
[  650.399261][T14020]  ? __alloc_skb+0x27d/0x7d0
[  650.399281][T14020]  ? __alloc_skb+0x27d/0x7d0
[  650.399307][T14020]  ? netlink_sendmsg+0x650/0xb40
[  650.399330][T14020]  ? skb_put+0x11b/0x210
[  650.399355][T14020]  netlink_sendmsg+0x6c0/0xb40
[  650.399388][T14020]  ? __pfx_netlink_sendmsg+0x10/0x10
[  650.399415][T14020]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  650.399450][T14020]  ? aa_sock_msg_perm+0x122/0x200
[  650.399472][T14020]  ? __pfx_netlink_sendmsg+0x10/0x10
[  650.399495][T14020]  sock_sendmsg_nosec+0x13a/0x180
[  650.399527][T14020]  ____sys_sendmsg+0x55c/0x870
[  650.399556][T14020]  ? __pfx_____sys_sendmsg+0x10/0x10
[  650.399588][T14020]  ? import_iovec+0x73/0xa0
[  650.399612][T14020]  ___sys_sendmsg+0x2a5/0x360
[  650.399635][T14020]  ? __lock_acquire+0x6b5/0x2d10
[  650.399662][T14020]  ? __pfx____sys_sendmsg+0x10/0x10
[  650.399718][T14020]  ? __fget_files+0x2a/0x420
[  650.399738][T14020]  ? __fget_files+0x3a6/0x420
[  650.399766][T14020]  __x64_sys_sendmsg+0x1b7/0x290
[  650.399793][T14020]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  650.399834][T14020]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.399855][T14020]  do_syscall_64+0x174/0x580
[  650.399879][T14020]  ? trace_irq_disable+0x3b/0x140
[  650.399903][T14020]  ? clear_bhb_loop+0x40/0x90
[  650.399926][T14020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.399946][T14020] RIP: 0033:0x7f7a4b6ace59
[  650.399965][T14020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.399981][T14020] RSP: 002b:00007f7a498fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  650.400002][T14020] RAX: ffffffffffffffda RBX: 00007f7a4b925fa0 RCX: 00007f7a4b6ace59
[  650.400016][T14020] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000009
[  650.400030][T14020] RBP: 00007f7a498fe090 R08: 0000000000000000 R09: 0000000000000000
[  650.400042][T14020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  650.400054][T14020] R13: 00007f7a4b926038 R14: 00007f7a4b925fa0 R15: 00007ffc11d173b8
[  650.400082][T14020]  </TASK>
[  650.474382][T12146] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  650.827820][T14032] binder: 14031:14032 ioctl c0306201 200000000080 returned -14
[  650.830213][T14032] binder: 14031:14032 ioctl c0306201 2000000003c0 returned -14
[  652.943730][T14040] veth0_vlan: entered allmulticast mode
[  653.105292][T12146] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  653.414631][ T5715] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  653.434704][T12146] usb 6-1: Using ep0 maxpacket: 32
[  653.460124][T12146] usb 6-1: config 8 has an invalid interface number: 37 but max is 0
[  653.460151][T12146] usb 6-1: config 8 has no interface number 0
[  653.460186][T12146] usb 6-1: config 8 interface 37 has no altsetting 0
[  653.491013][T12146] usb 6-1: New USB device found, idVendor=0b57, idProduct=89b6, bcdDevice=c8.fb
[  653.491042][T12146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.491063][T12146] usb 6-1: Product: syz
[  653.491078][T12146] usb 6-1: Manufacturer: syz
[  653.491092][T12146] usb 6-1: SerialNumber: syz
[  653.830443][T14051] FAULT_INJECTION: forcing a failure.
[  653.830443][T14051] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  653.830478][T14051] CPU: 0 UID: 0 PID: 14051 Comm: syz.5.2838 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  653.830506][T14051] Tainted: [L]=SOFTLOCKUP
[  653.830514][T14051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  653.830525][T14051] Call Trace:
[  653.830533][T14051]  <TASK>
[  653.830542][T14051]  dump_stack_lvl+0xe8/0x150
[  653.830571][T14051]  should_fail_ex+0x46b/0x600
[  653.830604][T14051]  _copy_from_iter+0x1d3/0x1670
[  653.830636][T14051]  ? rcu_is_watching+0x15/0xb0
[  653.830669][T14051]  ? __pfx__copy_from_iter+0x10/0x10
[  653.830697][T14051]  ? __alloc_skb+0x27d/0x7d0
[  653.830716][T14051]  ? __alloc_skb+0x27d/0x7d0
[  653.830743][T14051]  ? netlink_sendmsg+0x650/0xb40
[  653.830768][T14051]  ? skb_put+0x11b/0x210
[  653.830793][T14051]  netlink_sendmsg+0x6c0/0xb40
[  653.830826][T14051]  ? __pfx_netlink_sendmsg+0x10/0x10
[  653.830851][T14051]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  653.830879][T14051]  ? aa_sock_msg_perm+0x122/0x200
[  653.830899][T14051]  ? __pfx_netlink_sendmsg+0x10/0x10
[  653.830923][T14051]  sock_sendmsg_nosec+0x13a/0x180
[  653.830956][T14051]  ____sys_sendmsg+0x55c/0x870
[  653.830986][T14051]  ? __pfx_____sys_sendmsg+0x10/0x10
[  653.831019][T14051]  ? import_iovec+0x73/0xa0
[  653.831042][T14051]  ___sys_sendmsg+0x2a5/0x360
[  653.831064][T14051]  ? __lock_acquire+0x6b5/0x2d10
[  653.831094][T14051]  ? __pfx____sys_sendmsg+0x10/0x10
[  653.831160][T14051]  ? __fget_files+0x2a/0x420
[  653.831182][T14051]  ? __fget_files+0x3a6/0x420
[  653.831210][T14051]  __x64_sys_sendmsg+0x1b7/0x290
[  653.831237][T14051]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  653.831277][T14051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.831299][T14051]  do_syscall_64+0x174/0x580
[  653.831323][T14051]  ? trace_irq_disable+0x3b/0x140
[  653.831348][T14051]  ? clear_bhb_loop+0x40/0x90
[  653.831372][T14051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.831392][T14051] RIP: 0033:0x7f4a18e8ce59
[  653.831411][T14051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  653.831427][T14051] RSP: 002b:00007f4a170de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  653.831448][T14051] RAX: ffffffffffffffda RBX: 00007f4a19105fa0 RCX: 00007f4a18e8ce59
[  653.831462][T14051] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  653.831475][T14051] RBP: 00007f4a170de090 R08: 0000000000000000 R09: 0000000000000000
[  653.831488][T14051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  653.831501][T14051] R13: 00007f4a19106038 R14: 00007f4a19105fa0 R15: 00007ffd2ddc7978
[  653.831531][T14051]  </TASK>
[  654.259951][T14053] binder: 14052:14053 ioctl c0306201 200000000080 returned -14
[  654.273890][T14053] binder: 14052:14053 ioctl c0306201 2000000003c0 returned -14
[  654.411444][T14057] FAULT_INJECTION: forcing a failure.
[  654.411444][T14057] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  654.411481][T14057] CPU: 0 UID: 0 PID: 14057 Comm: syz.5.2841 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  654.411512][T14057] Tainted: [L]=SOFTLOCKUP
[  654.411520][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  654.411532][T14057] Call Trace:
[  654.411540][T14057]  <TASK>
[  654.411549][T14057]  dump_stack_lvl+0xe8/0x150
[  654.411578][T14057]  should_fail_ex+0x46b/0x600
[  654.411610][T14057]  _copy_from_user+0x2d/0xb0
[  654.411633][T14057]  video_usercopy+0x36f/0x1450
[  654.411668][T14057]  ? __pfx_subdev_do_ioctl_lock+0x10/0x10
[  654.411763][T14057]  ? __pfx_video_usercopy+0x10/0x10
[  654.411802][T14057]  ? __fget_files+0x2a/0x420
[  654.411825][T14057]  ? __fget_files+0x2a/0x420
[  654.411843][T14057]  ? __fget_files+0x3a6/0x420
[  654.411865][T14057]  v4l2_ioctl+0x190/0x1e0
[  654.411894][T14057]  ? __pfx_v4l2_ioctl+0x10/0x10
[  654.411921][T14057]  __se_sys_ioctl+0xff/0x170
[  654.411947][T14057]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.411970][T14057]  do_syscall_64+0x174/0x580
[  654.411995][T14057]  ? trace_irq_disable+0x3b/0x140
[  654.412019][T14057]  ? clear_bhb_loop+0x40/0x90
[  654.412041][T14057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.412061][T14057] RIP: 0033:0x7f4a18e8ce59
[  654.412089][T14057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  654.412105][T14057] RSP: 002b:00007f4a170de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  654.412127][T14057] RAX: ffffffffffffffda RBX: 00007f4a19105fa0 RCX: 00007f4a18e8ce59
[  654.412142][T14057] RDX: 0000200000000340 RSI: 000000004020565a RDI: 0000000000000003
[  654.412155][T14057] RBP: 00007f4a170de090 R08: 0000000000000000 R09: 0000000000000000
[  654.412168][T14057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  654.412181][T14057] R13: 00007f4a19106038 R14: 00007f4a19105fa0 R15: 00007ffd2ddc7978
[  654.412218][T14057]  </TASK>
[  654.748460][T12146] usbhid 6-1:8.37: couldn't find an input interrupt endpoint
[  654.754610][ T5715] usb 3-1: Using ep0 maxpacket: 8
[  654.762919][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  654.762953][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  654.762992][ T5715] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  654.763014][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.818246][T12146] usb 6-1: USB disconnect, device number 24
[  654.831856][ T5715] usb 3-1: config 0 descriptor??
[  655.185003][ T5794] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  655.334785][ T5794] usb 1-1: Using ep0 maxpacket: 16
[  655.343419][ T5794] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  655.343456][ T5794] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  655.343481][ T5794] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  655.343507][ T5794] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  655.391268][ T5794] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  655.391299][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  655.391320][ T5794] usb 1-1: SerialNumber: syz
[  655.505353][T14062] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  655.505636][T14062] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  655.534236][ T5794] hub 1-1:1.0: bad descriptor, ignoring hub
[  655.534276][ T5794] hub 1-1:1.0: probe with driver hub failed with error -5
[  655.751470][T14062] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  655.757347][T14062] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  656.009253][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2844'.
[  656.178775][ T5715] usbhid 3-1:0.0: can't add hid device: -71
[  656.178883][ T5715] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  656.204665][ T5715] usb 3-1: USB disconnect, device number 67
[  656.913051][T14083] binder: 14082:14083 ioctl c0306201 200000000080 returned -14
[  656.930862][T14083] binder: 14082:14083 ioctl c0306201 2000000003c0 returned -14
[  657.028318][T14085] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2850'.
[  657.054777][T12419] usb 7-1: new full-speed USB device number 31 using dummy_hcd
[  657.232948][T12419] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4
[  657.233423][ T5794] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[  657.261298][T12419] usb 7-1: config 0 interface 0 has no altsetting 0
[  657.279567][T12419] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  657.279597][T12419] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  657.279620][T12419] usb 7-1: Product: syz
[  657.279635][T12419] usb 7-1: Manufacturer: syz
[  657.279650][T12419] usb 7-1: SerialNumber: syz
[  657.319859][T12419] usb 7-1: config 0 descriptor??
[  657.352671][ T5794] usb 1-1: USB disconnect, device number 34
[  657.412700][T12419] usb 7-1: selecting invalid altsetting 0
[  657.969910][ T5794] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  658.147637][ T5794] usb 6-1: Using ep0 maxpacket: 16
[  658.171114][ T5794] usb 6-1: unable to get BOS descriptor or descriptor too short
[  658.203397][T12419] usb 7-1: USB disconnect, device number 31
[  658.416598][ T5794] usb 6-1: config 4 has an invalid interface number: 127 but max is 0
[  658.416628][ T5794] usb 6-1: config 4 has no interface number 0
[  658.416660][ T5794] usb 6-1: config 4 interface 127 has no altsetting 0
[  658.485428][ T5794] usb 6-1: string descriptor 0 read error: -22
[  658.485565][ T5794] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48
[  658.485591][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.911909][T14098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  659.030080][T14098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  659.098151][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  659.336382][ T5794] usb 6-1: USB disconnect, device number 25
[  660.023011][T14106] binder: 14103:14106 ioctl c0306201 200000000080 returned -14
[  660.093861][T14108] binder: 14103:14108 ioctl c0306201 2000000003c0 returned -14
[  660.944564][T12419] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[  660.945953][T14119] FAULT_INJECTION: forcing a failure.
[  660.945953][T14119] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  660.945985][T14119] CPU: 0 UID: 0 PID: 14119 Comm: syz.2.2862 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  660.946014][T14119] Tainted: [L]=SOFTLOCKUP
[  660.946021][T14119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  660.946033][T14119] Call Trace:
[  660.946041][T14119]  <TASK>
[  660.946050][T14119]  dump_stack_lvl+0xe8/0x150
[  660.946080][T14119]  should_fail_ex+0x46b/0x600
[  660.946112][T14119]  _copy_from_iter+0x1d3/0x1670
[  660.946143][T14119]  ? rcu_is_watching+0x15/0xb0
[  660.946179][T14119]  ? __pfx__copy_from_iter+0x10/0x10
[  660.946206][T14119]  ? __alloc_skb+0x27d/0x7d0
[  660.946225][T14119]  ? __alloc_skb+0x27d/0x7d0
[  660.946251][T14119]  ? netlink_sendmsg+0x650/0xb40
[  660.946274][T14119]  ? skb_put+0x11b/0x210
[  660.946299][T14119]  netlink_sendmsg+0x6c0/0xb40
[  660.946332][T14119]  ? __pfx_netlink_sendmsg+0x10/0x10
[  660.946359][T14119]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  660.946387][T14119]  ? aa_sock_msg_perm+0x122/0x200
[  660.946409][T14119]  ? __pfx_netlink_sendmsg+0x10/0x10
[  660.946433][T14119]  sock_sendmsg_nosec+0x13a/0x180
[  660.946464][T14119]  ____sys_sendmsg+0x55c/0x870
[  660.946493][T14119]  ? __pfx_____sys_sendmsg+0x10/0x10
[  660.946526][T14119]  ? import_iovec+0x73/0xa0
[  660.946550][T14119]  ___sys_sendmsg+0x2a5/0x360
[  660.946574][T14119]  ? __lock_acquire+0x6b5/0x2d10
[  660.946603][T14119]  ? __pfx____sys_sendmsg+0x10/0x10
[  660.946669][T14119]  ? __fget_files+0x2a/0x420
[  660.946688][T14119]  ? __fget_files+0x3a6/0x420
[  660.946718][T14119]  __x64_sys_sendmsg+0x1b7/0x290
[  660.946745][T14119]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  660.946787][T14119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.946808][T14119]  do_syscall_64+0x174/0x580
[  660.946832][T14119]  ? trace_irq_disable+0x3b/0x140
[  660.946857][T14119]  ? clear_bhb_loop+0x40/0x90
[  660.946882][T14119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.946902][T14119] RIP: 0033:0x7f7a4b6ace59
[  660.946921][T14119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.946938][T14119] RSP: 002b:00007f7a498fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  660.946959][T14119] RAX: ffffffffffffffda RBX: 00007f7a4b925fa0 RCX: 00007f7a4b6ace59
[  660.946974][T14119] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000006
[  660.946986][T14119] RBP: 00007f7a498fe090 R08: 0000000000000000 R09: 0000000000000000
[  660.946999][T14119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  660.947011][T14119] R13: 00007f7a4b926038 R14: 00007f7a4b925fa0 R15: 00007ffc11d173b8
[  660.947040][T14119]  </TASK>
[  661.099388][ T5794] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  661.280328][T12419] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  661.280356][T12419] usb 7-1: config 0 has no interface number 0
[  661.280400][T12419] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  661.280427][T12419] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  661.280470][T12419] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  661.284751][T12419] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  661.284779][T12419] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  661.284801][T12419] usb 7-1: Product: syz
[  661.284815][T12419] usb 7-1: SerialNumber: syz
[  661.364681][ T5794] usb 6-1: Using ep0 maxpacket: 16
[  661.372877][ T5794] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  661.372915][ T5794] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  661.372942][ T5794] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  661.372966][ T5794] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  661.450201][ T5794] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  661.450234][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  661.450254][ T5794] usb 6-1: SerialNumber: syz
[  661.543767][T14114] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  661.552802][T14114] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  661.571264][T12419] usb 7-1: config 0 descriptor??
[  661.617868][ T5794] hub 6-1:1.0: bad descriptor, ignoring hub
[  661.617904][ T5794] hub 6-1:1.0: probe with driver hub failed with error -5
[  661.649916][T12419] cm109 7-1:0.8: invalid payload size 0, expected 4
[  661.688458][T12419] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input26
[  661.786238][T14114] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  661.787120][T14114] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  662.360203][T14124] tmpfs: Unknown parameter 'mp'
[  663.480822][    C0] cm109_urb_ctl_callback: 706 callbacks suppressed
[  663.480849][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  663.481092][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  663.481481][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  663.481701][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  663.481919][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  663.482206][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  663.482458][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  663.482681][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  663.482954][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  663.483179][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  663.519839][T12419] usb 7-1: USB disconnect, device number 32
[  663.519919][    C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  663.662119][ T5794] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  663.710823][T14136] netlink: 'syz.0.2866': attribute type 11 has an invalid length.
[  663.729297][ T5794] usb 6-1: USB disconnect, device number 26
[  663.760145][T12419] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  664.643487][T14147] program syz.6.2871 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  664.732850][T14151] program syz.2.2872 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  664.960060][T14157] FAULT_INJECTION: forcing a failure.
[  664.960060][T14157] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  664.960097][T14157] CPU: 0 UID: 0 PID: 14157 Comm: syz.0.2873 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  664.960124][T14157] Tainted: [L]=SOFTLOCKUP
[  664.960152][T14157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  664.960164][T14157] Call Trace:
[  664.960173][T14157]  <TASK>
[  664.960182][T14157]  dump_stack_lvl+0xe8/0x150
[  664.960210][T14157]  should_fail_ex+0x46b/0x600
[  664.960244][T14157]  _copy_from_user+0x2d/0xb0
[  664.960268][T14157]  comedi_unlocked_ioctl+0x603/0x1b00
[  664.960305][T14157]  ? kasan_quarantine_put+0xbb/0x1f0
[  664.960336][T14157]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  664.960373][T14157]  ? do_vfs_ioctl+0x117b/0x1540
[  664.960402][T14157]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  664.960461][T14157]  ? __fget_files+0x2a/0x420
[  664.960483][T14157]  ? __fget_files+0x2a/0x420
[  664.960502][T14157]  ? __fget_files+0x3a6/0x420
[  664.960520][T14157]  ? __fget_files+0x2a/0x420
[  664.960543][T14157]  ? bpf_lsm_file_ioctl+0x9/0x20
[  664.960567][T14157]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  664.960590][T14157]  __se_sys_ioctl+0xff/0x170
[  664.960615][T14157]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.960637][T14157]  do_syscall_64+0x174/0x580
[  664.960661][T14157]  ? trace_irq_disable+0x3b/0x140
[  664.960685][T14157]  ? clear_bhb_loop+0x40/0x90
[  664.960718][T14157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.960738][T14157] RIP: 0033:0x7f7754eece59
[  664.960757][T14157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  664.960774][T14157] RSP: 002b:00007f7753146028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  664.960799][T14157] RAX: ffffffffffffffda RBX: 00007f7755165fa0 RCX: 00007f7754eece59
[  664.960813][T14157] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000003
[  664.960826][T14157] RBP: 00007f7753146090 R08: 0000000000000000 R09: 0000000000000000
[  664.960839][T14157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  664.960851][T14157] R13: 00007f7755166038 R14: 00007f7755165fa0 R15: 00007ffedd022c88
[  664.960881][T14157]  </TASK>
[  665.874569][ T5794] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  666.034708][ T5794] usb 7-1: Using ep0 maxpacket: 16
[  666.041135][ T5794] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  666.041172][ T5794] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  666.041199][ T5794] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  666.041223][ T5794] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  666.042970][ T5794] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  666.042999][ T5794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  666.043032][ T5794] usb 7-1: SerialNumber: syz
[  666.156201][T14169] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  666.156536][T14169] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  666.186900][ T5794] hub 7-1:1.0: bad descriptor, ignoring hub
[  666.187879][ T5794] hub 7-1:1.0: probe with driver hub failed with error -5
[  666.369029][T14167] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  666.369123][T14167] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  666.664830][    T9] usb 3-1: new full-speed USB device number 68 using dummy_hcd
[  666.838697][    T9] usb 3-1: config 150 has an invalid interface number: 204 but max is 2
[  666.838784][    T9] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  666.838807][    T9] usb 3-1: config 150 has no interface number 0
[  666.838852][    T9] usb 3-1: config 150 interface 204 has no altsetting 0
[  666.884809][    T9] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  666.884901][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.884921][    T9] usb 3-1: Product: syz
[  666.884936][    T9] usb 3-1: Manufacturer: syz
[  666.884951][    T9] usb 3-1: SerialNumber: syz
[  667.436347][    T9] xr_serial 3-1:150.204: skipping garbage
[  667.436406][    T9] xr_serial 3-1:150.204: xr_serial converter detected
[  667.576560][    T9] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  667.576847][    T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  667.687827][    T9] usb 3-1: USB disconnect, device number 68
[  667.887573][    T9] xr_serial 3-1:150.204: device disconnected
[  667.948993][T14182] program syz.5.2883 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  668.104232][T14185] FAULT_INJECTION: forcing a failure.
[  668.104232][T14185] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  668.104268][T14185] CPU: 0 UID: 0 PID: 14185 Comm: syz.0.2885 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  668.104297][T14185] Tainted: [L]=SOFTLOCKUP
[  668.104304][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  668.104315][T14185] Call Trace:
[  668.104322][T14185]  <TASK>
[  668.104331][T14185]  dump_stack_lvl+0xe8/0x150
[  668.104359][T14185]  should_fail_ex+0x46b/0x600
[  668.104390][T14185]  _copy_from_user+0x2d/0xb0
[  668.104421][T14185]  memdup_user+0x5e/0xd0
[  668.104445][T14185]  strndup_user+0x68/0xd0
[  668.104466][T14185]  __keyctl_dh_compute+0x4bc/0xd10
[  668.104492][T14185]  ? __lock_acquire+0x6b5/0x2d10
[  668.104517][T14185]  ? __pfx___keyctl_dh_compute+0x10/0x10
[  668.104549][T14185]  ? __might_fault+0xaf/0x130
[  668.104586][T14185]  keyctl_dh_compute+0x124/0x180
[  668.104609][T14185]  ? __pfx_keyctl_dh_compute+0x10/0x10
[  668.104637][T14185]  ? do_raw_spin_lock+0x12b/0x2f0
[  668.104664][T14185]  __se_sys_keyctl+0x44c/0x9e0
[  668.104695][T14185]  ? __pfx___se_sys_keyctl+0x10/0x10
[  668.104722][T14185]  ? lockdep_hardirqs_on+0x7a/0x110
[  668.104747][T14185]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  668.104770][T14185]  ? rt_mutex_slowunlock+0x1cb/0x300
[  668.104789][T14185]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  668.104818][T14185]  ? fput+0xa0/0xd0
[  668.104836][T14185]  ? ksys_write+0x248/0x270
[  668.104862][T14185]  ? __pfx_ksys_write+0x10/0x10
[  668.104891][T14185]  ? __x64_sys_keyctl+0x20/0xc0
[  668.104919][T14185]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.104940][T14185]  do_syscall_64+0x174/0x580
[  668.104965][T14185]  ? clear_bhb_loop+0x40/0x90
[  668.104987][T14185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.105004][T14185] RIP: 0033:0x7f7754eece59
[  668.105023][T14185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  668.105040][T14185] RSP: 002b:00007f7753146028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  668.105061][T14185] RAX: ffffffffffffffda RBX: 00007f7755165fa0 RCX: 00007f7754eece59
[  668.105075][T14185] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000017
[  668.105088][T14185] RBP: 00007f7753146090 R08: 0000200000000100 R09: 0000000000000000
[  668.105102][T14185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  668.105114][T14185] R13: 00007f7755166038 R14: 00007f7755165fa0 R15: 00007ffedd022c88
[  668.105144][T14185]  </TASK>
[  668.140595][T14186] program syz.5.2884 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  668.230503][ T5794] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71
[  668.415508][ T5794] usb 7-1: USB disconnect, device number 33
[  668.694852][T12419] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  668.850374][T12419] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  668.850403][T12419] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  668.850424][T12419] usb 6-1: config 220 has no interface number 2
[  668.850492][T12419] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  668.850520][T12419] usb 6-1: config 220 interface 0 has no altsetting 0
[  668.850539][T12419] usb 6-1: config 220 interface 76 has no altsetting 0
[  668.850557][T12419] usb 6-1: config 220 interface 1 has no altsetting 0
[  668.925031][T12419] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  668.925065][T12419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.925086][T12419] usb 6-1: Product: syz
[  668.925101][T12419] usb 6-1: Manufacturer: syz
[  668.925116][T12419] usb 6-1: SerialNumber: syz
[  669.081925][T14205] program syz.2.2892 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  669.211540][T12419] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  669.211574][T12419] uvcvideo 6-1:220.0: No valid video chain found.
[  669.211630][T12419] usb 6-1: selecting invalid altsetting 0
[  669.268795][T12419] usb 6-1: selecting invalid altsetting 0
[  669.268835][T12419] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  669.310549][T12419] usb 6-1: USB disconnect, device number 27
[  669.584296][T14215] program syz.6.2896 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  669.970315][T14223] program syz.5.2899 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  670.357207][   T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  670.435874][ T5794] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  670.506558][   T10] usb 1-1: Using ep0 maxpacket: 8
[  670.509122][   T10] usb 1-1: config 0 has too many interfaces: 152, using maximum allowed: 32
[  670.509150][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 152
[  670.513155][   T10] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  670.513193][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.513214][   T10] usb 1-1: Product: syz
[  670.513230][   T10] usb 1-1: Manufacturer: syz
[  670.513245][   T10] usb 1-1: SerialNumber: syz
[  670.584586][ T5794] usb 3-1: Using ep0 maxpacket: 16
[  670.586990][ T5794] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  670.587022][ T5794] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  670.587048][ T5794] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  670.587073][ T5794] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  670.588715][ T5794] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  670.588743][ T5794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  670.588764][ T5794] usb 3-1: SerialNumber: syz
[  670.668338][   T10] usb 1-1: config 0 descriptor??
[  670.702491][T14232] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  670.702692][T14232] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  670.724474][ T5794] hub 3-1:1.0: bad descriptor, ignoring hub
[  670.724514][ T5794] hub 3-1:1.0: probe with driver hub failed with error -5
[  670.940351][T14232] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  670.941509][T14232] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  670.963069][T14229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  670.963670][T14229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.153060][   T10] gspca_main: se401-2.14.0 probing 047d:5003
[  671.391720][   T10] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  671.391854][   T10] se401 1-1:0.0: probe with driver se401 failed with error -71
[  671.478227][   T10] usb 1-1: USB disconnect, device number 35
[  672.374838][ T5701] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  672.819267][T14253] FAULT_INJECTION: forcing a failure.
[  672.819267][T14253] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  672.819303][T14253] CPU: 0 UID: 0 PID: 14253 Comm: syz.0.2910 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  672.819335][T14253] Tainted: [L]=SOFTLOCKUP
[  672.819343][T14253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  672.819355][T14253] Call Trace:
[  672.819364][T14253]  <TASK>
[  672.819373][T14253]  dump_stack_lvl+0xe8/0x150
[  672.819403][T14253]  should_fail_ex+0x46b/0x600
[  672.819435][T14253]  _copy_to_user+0x31/0xb0
[  672.819479][T14253]  simple_read_from_buffer+0xe1/0x170
[  672.819504][T14253]  proc_fail_nth_read+0x1be/0x230
[  672.819528][T14253]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  672.819552][T14253]  ? rw_verify_area+0x2ac/0x4e0
[  672.819575][T14253]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  672.819597][T14253]  vfs_read+0x212/0xa80
[  672.819627][T14253]  ? __pfx_vfs_read+0x10/0x10
[  672.819652][T14253]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  672.819678][T14253]  ? lockdep_hardirqs_on+0x7a/0x110
[  672.819702][T14253]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  672.819726][T14253]  ? mutex_lock_nested+0x152/0x1d0
[  672.819756][T14253]  ? fdget_pos+0x252/0x320
[  672.819785][T14253]  ksys_read+0x156/0x270
[  672.819811][T14253]  ? __pfx_ksys_read+0x10/0x10
[  672.819841][T14253]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.819863][T14253]  do_syscall_64+0x174/0x580
[  672.819886][T14253]  ? trace_irq_disable+0x3b/0x140
[  672.819910][T14253]  ? clear_bhb_loop+0x40/0x90
[  672.819934][T14253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.819954][T14253] RIP: 0033:0x7f7754ead68e
[  672.819974][T14253] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  672.819991][T14253] RSP: 002b:00007f7753145fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  672.820022][T14253] RAX: ffffffffffffffda RBX: 00007f77531466c0 RCX: 00007f7754ead68e
[  672.820035][T14253] RDX: 000000000000000f RSI: 00007f77531460a0 RDI: 0000000000000005
[  672.820047][T14253] RBP: 00007f7753146090 R08: 0000000000000000 R09: 0000000000000000
[  672.820059][T14253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  672.820072][T14253] R13: 00007f7755166038 R14: 00007f7755165fa0 R15: 00007ffedd022c88
[  672.820103][T14253]  </TASK>
[  673.148506][ T5794] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  673.267786][ T5794] usb 3-1: USB disconnect, device number 69
[  673.534743][ T5701] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  673.534773][ T5701] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  673.534794][ T5701] usb 6-1: config 220 has no interface number 2
[  673.534862][ T5701] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  673.534890][ T5701] usb 6-1: config 220 interface 0 has no altsetting 0
[  673.534908][ T5701] usb 6-1: config 220 interface 76 has no altsetting 0
[  673.534927][ T5701] usb 6-1: config 220 interface 1 has no altsetting 0
[  673.542110][ T5701] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  673.542141][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.542161][ T5701] usb 6-1: Product: syz
[  673.542176][ T5701] usb 6-1: Manufacturer: syz
[  673.542191][ T5701] usb 6-1: SerialNumber: syz
[  673.941315][T14257] program syz.0.2912 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  673.979936][ T5701] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  673.979973][ T5701] uvcvideo 6-1:220.0: No valid video chain found.
[  673.980032][ T5701] usb 6-1: selecting invalid altsetting 0
[  674.088537][ T5701] usb 6-1: selecting invalid altsetting 0
[  674.088576][ T5701] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  674.160588][ T5701] usb 6-1: USB disconnect, device number 28
[  674.325699][T14264] syzkaller0: tun_chr_ioctl cmd 1074025677
[  674.325884][T14264] syzkaller0: linktype set to 780
[  674.724670][ T5701] usb 3-1: new low-speed USB device number 70 using dummy_hcd
[  674.877529][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  674.877581][ T5701] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  674.877605][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.917882][ T5701] usb 3-1: config 0 descriptor??
[  674.919848][T14268] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  675.094665][ T5794] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  675.247916][ T5794] usb 6-1: config 0 has no interfaces?
[  675.250862][ T5794] usb 6-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46
[  675.250890][ T5794] usb 6-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0
[  675.251030][ T5794] usb 6-1: Product: syz
[  675.251047][ T5794] usb 6-1: Manufacturer: syz
[  675.307175][ T5794] usb 6-1: config 0 descriptor??
[  675.558121][ T5701] usbhid 3-1:0.0: can't add hid device: -71
[  675.558245][ T5701] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  675.574686][T12146] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  675.613536][ T5701] usb 3-1: USB disconnect, device number 70
[  675.643449][ T5715] usb 6-1: USB disconnect, device number 29
[  675.766232][T12146] usb 1-1: Using ep0 maxpacket: 8
[  675.772670][T12146] usb 1-1: unable to get BOS descriptor or descriptor too short
[  675.774304][T12146] usb 1-1: config 4 interface 0 has no altsetting 0
[  675.783409][T12146] usb 1-1: string descriptor 0 read error: -22
[  675.783512][T12146] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  675.783535][T12146] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  675.847706][T12146] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  675.905491][T12146] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  675.905858][T12146] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  675.905902][T12146] usb 1-1: media controller created
[  676.224861][T12146] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  676.401719][T14284] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[  676.401744][T14284] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  676.421086][T14284] vhci_hcd vhci_hcd.0: Device attached
[  676.564879][T14288] program syz.5.2922 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  676.648171][ T5701] usb 45-1: new low-speed USB device number 8 using vhci_hcd
[  676.794771][ T5794] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  676.925484][T14295] program syz.0.2925 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  676.954886][ T5794] usb 7-1: Using ep0 maxpacket: 16
[  676.958213][T14285] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 6
[  676.959370][ T7381] vhci_hcd vhci_hcd.6: stop threads
[  676.959392][ T7381] vhci_hcd vhci_hcd.6: release socket
[  676.971023][ T7381] vhci_hcd vhci_hcd.6: disconnect device
[  676.998585][ T5794] usb 7-1: unable to get BOS descriptor or descriptor too short
[  676.998669][ T5794] usb 7-1: no configurations
[  676.998682][ T5794] usb 7-1: can't read configurations, error -22
[  677.204633][ T5779] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  677.386133][ T5779] usb 3-1: Using ep0 maxpacket: 16
[  677.389257][ T5779] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  677.389289][ T5779] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  677.389314][ T5779] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  677.389337][ T5779] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  677.390906][ T5779] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  677.390932][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  677.390952][ T5779] usb 3-1: SerialNumber: syz
[  677.394014][T12146] zl10353_read_register: readreg error (reg=127, ret==0)
[  677.507217][T14291] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  677.507384][T14291] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  677.509500][ T5779] hub 3-1:1.0: bad descriptor, ignoring hub
[  677.509532][ T5779] hub 3-1:1.0: probe with driver hub failed with error -5
[  677.716861][T14291] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  677.717545][T14291] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  677.924868][T14305] FAULT_INJECTION: forcing a failure.
[  677.924868][T14305] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  677.924903][T14305] CPU: 0 UID: 0 PID: 14305 Comm: syz.6.2930 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  677.924931][T14305] Tainted: [L]=SOFTLOCKUP
[  677.924937][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  677.924949][T14305] Call Trace:
[  677.924961][T14305]  <TASK>
[  677.924970][T14305]  dump_stack_lvl+0xe8/0x150
[  677.925000][T14305]  should_fail_ex+0x46b/0x600
[  677.925032][T14305]  _copy_to_user+0x31/0xb0
[  677.925057][T14305]  simple_read_from_buffer+0xe1/0x170
[  677.925083][T14305]  proc_fail_nth_read+0x1be/0x230
[  677.925107][T14305]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  677.925130][T14305]  ? rw_verify_area+0x2ac/0x4e0
[  677.925151][T14305]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  677.925173][T14305]  vfs_read+0x212/0xa80
[  677.925204][T14305]  ? __pfx_vfs_read+0x10/0x10
[  677.925229][T14305]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  677.925255][T14305]  ? lockdep_hardirqs_on+0x7a/0x110
[  677.925279][T14305]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  677.925303][T14305]  ? mutex_lock_nested+0x152/0x1d0
[  677.925331][T14305]  ? fdget_pos+0x252/0x320
[  677.925359][T14305]  ksys_read+0x156/0x270
[  677.925383][T14305]  ? __pfx_ksys_read+0x10/0x10
[  677.925415][T14305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.925437][T14305]  do_syscall_64+0x174/0x580
[  677.925464][T14305]  ? clear_bhb_loop+0x40/0x90
[  677.925489][T14305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.925509][T14305] RIP: 0033:0x7f71c8a4d68e
[  677.925537][T14305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  677.925554][T14305] RSP: 002b:00007f71c6ce5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  677.925575][T14305] RAX: ffffffffffffffda RBX: 00007f71c6ce66c0 RCX: 00007f71c8a4d68e
[  677.925589][T14305] RDX: 000000000000000f RSI: 00007f71c6ce60a0 RDI: 0000000000000003
[  677.925602][T14305] RBP: 00007f71c6ce6090 R08: 0000000000000000 R09: 0000000000000000
[  677.925616][T14305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  677.925629][T14305] R13: 00007f71c8d06038 R14: 00007f71c8d05fa0 R15: 00007ffdeb950588
[  677.925659][T14305]  </TASK>
[  678.323624][   T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  678.486851][   T10] usb 6-1: device descriptor read/64, error -71
[  678.528068][T12146] usb 1-1: USB disconnect, device number 37
[  678.735188][   T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  678.864898][   T10] usb 6-1: device descriptor read/64, error -71
[  678.988899][   T10] usb usb6-port1: attempt power cycle
[  679.364658][   T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  679.388811][   T10] usb 6-1: device descriptor read/8, error -71
[  679.634857][   T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  679.657718][   T10] usb 6-1: device descriptor read/8, error -71
[  679.776324][   T10] usb usb6-port1: unable to enumerate USB device
[  680.684918][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2934'.
[  680.929095][ T5779] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  680.978534][ T5779] usb 3-1: USB disconnect, device number 71
[  681.000221][T14326] program syz.6.2936 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  681.197864][T14328] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[  681.197893][T14328] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  681.197997][T14328] vhci_hcd vhci_hcd.0: Device attached
[  681.315494][ T5614] Bluetooth: hci3: unexpected event for opcode 0x0c5b
[  681.335053][   T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  681.411585][T14336] program syz.0.2941 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  681.487055][   T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  681.487084][   T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  681.487105][   T10] usb 6-1: config 220 has no interface number 2
[  681.487171][   T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  681.487199][   T10] usb 6-1: config 220 interface 0 has no altsetting 0
[  681.487219][   T10] usb 6-1: config 220 interface 76 has no altsetting 0
[  681.487249][   T10] usb 6-1: config 220 interface 1 has no altsetting 0
[  681.490685][   T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  681.490713][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.490733][   T10] usb 6-1: Product: syz
[  681.490749][   T10] usb 6-1: Manufacturer: syz
[  681.490764][   T10] usb 6-1: SerialNumber: syz
[  681.514554][ T5611] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  681.685958][ T5611] usb 7-1: Using ep0 maxpacket: 16
[  681.689115][T14329] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 7
[  681.689638][ T6973] vhci_hcd vhci_hcd.6: stop threads
[  681.689657][ T6973] vhci_hcd vhci_hcd.6: release socket
[  681.689797][ T6973] vhci_hcd vhci_hcd.6: disconnect device
[  681.724669][ T5611] usb 7-1: unable to get BOS descriptor or descriptor too short
[  681.724810][ T5611] usb 7-1: no configurations
[  681.724825][ T5611] usb 7-1: can't read configurations, error -22
[  681.744638][ T5779] usb 3-1: new full-speed USB device number 72 using dummy_hcd
[  681.784744][ T5701] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  681.833725][   T10] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  681.833761][   T10] uvcvideo 6-1:220.0: No valid video chain found.
[  681.833817][   T10] usb 6-1: selecting invalid altsetting 0
[  681.917586][   T10] usb 6-1: selecting invalid altsetting 0
[  681.917625][   T10] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  681.939414][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  681.939447][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  681.939484][ T5779] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  681.939507][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.942398][   T10] usb 6-1: USB disconnect, device number 34
[  681.997479][ T5779] usb 3-1: config 0 descriptor??
[  682.563820][T14341] program syz.6.2943 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  682.643512][ T5779] isku 0003:1E7D:319C.000C: item fetching failed at offset 3/7
[  682.650652][ T5779] isku 0003:1E7D:319C.000C: parse failed
[  682.650729][ T5779] isku 0003:1E7D:319C.000C: probe with driver isku failed with error -22
[  682.843400][T14347] program syz.6.2946 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  683.807411][ T5611] usb 3-1: USB disconnect, device number 72
[  684.370307][T14363] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  684.370336][T14363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  684.390819][T14363] vhci_hcd vhci_hcd.0: Device attached
[  684.617561][ T5611] usb 33-1: new low-speed USB device number 17 using vhci_hcd
[  684.634361][T14368] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2952'.
[  684.654688][ T5701] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  684.739958][T14370] program syz.6.2953 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  684.806616][ T5701] usb 1-1: Using ep0 maxpacket: 16
[  684.817938][ T5701] usb 1-1: unable to get BOS descriptor or descriptor too short
[  684.818022][ T5701] usb 1-1: no configurations
[  684.818037][ T5701] usb 1-1: can't read configurations, error -22
[  684.842623][T14364] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 15
[  684.856991][   T57] vhci_hcd vhci_hcd.0: stop threads
[  684.857016][   T57] vhci_hcd vhci_hcd.0: release socket
[  684.857088][   T57] vhci_hcd vhci_hcd.0: disconnect device
[  684.912629][T14372] program syz.6.2954 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  685.128998][T14375] FAULT_INJECTION: forcing a failure.
[  685.128998][T14375] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  685.129031][T14375] CPU: 0 UID: 0 PID: 14375 Comm: syz.2.2956 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  685.129056][T14375] Tainted: [L]=SOFTLOCKUP
[  685.129063][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  685.129075][T14375] Call Trace:
[  685.129083][T14375]  <TASK>
[  685.129091][T14375]  dump_stack_lvl+0xe8/0x150
[  685.129118][T14375]  should_fail_ex+0x46b/0x600
[  685.129148][T14375]  _copy_from_iter+0x1d3/0x1670
[  685.129179][T14375]  ? rcu_is_watching+0x15/0xb0
[  685.129214][T14375]  ? __pfx__copy_from_iter+0x10/0x10
[  685.129241][T14375]  ? __alloc_skb+0x27d/0x7d0
[  685.129261][T14375]  ? __alloc_skb+0x27d/0x7d0
[  685.129287][T14375]  ? netlink_sendmsg+0x650/0xb40
[  685.129311][T14375]  ? skb_put+0x11b/0x210
[  685.129336][T14375]  netlink_sendmsg+0x6c0/0xb40
[  685.129366][T14375]  ? __pfx_netlink_sendmsg+0x10/0x10
[  685.129392][T14375]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  685.129428][T14375]  ? aa_sock_msg_perm+0x122/0x200
[  685.129450][T14375]  ? __pfx_netlink_sendmsg+0x10/0x10
[  685.129473][T14375]  sock_sendmsg_nosec+0x13a/0x180
[  685.129505][T14375]  ____sys_sendmsg+0x55c/0x870
[  685.129531][T14375]  ? __pfx_____sys_sendmsg+0x10/0x10
[  685.129559][T14375]  ? import_iovec+0x73/0xa0
[  685.129582][T14375]  ___sys_sendmsg+0x2a5/0x360
[  685.129605][T14375]  ? __lock_acquire+0x6b5/0x2d10
[  685.129632][T14375]  ? __pfx____sys_sendmsg+0x10/0x10
[  685.129681][T14375]  ? __fget_files+0x2a/0x420
[  685.129700][T14375]  ? __fget_files+0x3a6/0x420
[  685.129724][T14375]  __x64_sys_sendmsg+0x1b7/0x290
[  685.129746][T14375]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  685.129783][T14375]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.129804][T14375]  do_syscall_64+0x174/0x580
[  685.129825][T14375]  ? trace_irq_disable+0x3b/0x140
[  685.129850][T14375]  ? clear_bhb_loop+0x40/0x90
[  685.129873][T14375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.129892][T14375] RIP: 0033:0x7f7a4b6ace59
[  685.129909][T14375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  685.129934][T14375] RSP: 002b:00007f7a498fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  685.129955][T14375] RAX: ffffffffffffffda RBX: 00007f7a4b925fa0 RCX: 00007f7a4b6ace59
[  685.129969][T14375] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000003
[  685.129981][T14375] RBP: 00007f7a498fe090 R08: 0000000000000000 R09: 0000000000000000
[  685.129992][T14375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  685.130003][T14375] R13: 00007f7a4b926038 R14: 00007f7a4b925fa0 R15: 00007ffc11d173b8
[  685.130030][T14375]  </TASK>
[  685.145077][T14376] program syz.6.2955 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  685.663998][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  685.664100][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  685.681354][T14383] FAULT_INJECTION: forcing a failure.
[  685.681354][T14383] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  685.681391][T14383] CPU: 0 UID: 0 PID: 14383 Comm: syz.2.2958 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  685.681419][T14383] Tainted: [L]=SOFTLOCKUP
[  685.681436][T14383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  685.681449][T14383] Call Trace:
[  685.681457][T14383]  <TASK>
[  685.681465][T14383]  dump_stack_lvl+0xe8/0x150
[  685.681494][T14383]  should_fail_ex+0x46b/0x600
[  685.681526][T14383]  _copy_from_user+0x2d/0xb0
[  685.681553][T14383]  kvm_vm_ioctl_clear_dirty_log+0x59b/0x8e0
[  685.681592][T14383]  kvm_vm_ioctl+0x9f4/0xd50
[  685.681619][T14383]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  685.681661][T14383]  ? kasan_quarantine_put+0xbb/0x1f0
[  685.681699][T14383]  ? tomoyo_path_number_perm+0x219/0x630
[  685.681731][T14383]  ? tomoyo_path_number_perm+0x219/0x630
[  685.681763][T14383]  ? do_vfs_ioctl+0x117b/0x1540
[  685.681792][T14383]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  685.681851][T14383]  ? __fget_files+0x2a/0x420
[  685.681874][T14383]  ? __fget_files+0x2a/0x420
[  685.681890][T14383]  ? __fget_files+0x3a6/0x420
[  685.681907][T14383]  ? __fget_files+0x2a/0x420
[  685.681927][T14383]  ? bpf_lsm_file_ioctl+0x9/0x20
[  685.681950][T14383]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  685.681975][T14383]  __se_sys_ioctl+0xff/0x170
[  685.682000][T14383]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.682023][T14383]  do_syscall_64+0x174/0x580
[  685.682050][T14383]  ? clear_bhb_loop+0x40/0x90
[  685.682075][T14383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.682094][T14383] RIP: 0033:0x7f7a4b6ace59
[  685.682112][T14383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  685.682129][T14383] RSP: 002b:00007f7a498fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  685.682151][T14383] RAX: ffffffffffffffda RBX: 00007f7a4b925fa0 RCX: 00007f7a4b6ace59
[  685.682165][T14383] RDX: 00002000000000c0 RSI: 00000000c018aec0 RDI: 0000000000000004
[  685.682179][T14383] RBP: 00007f7a498fe090 R08: 0000000000000000 R09: 0000000000000000
[  685.682191][T14383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  685.682204][T14383] R13: 00007f7a4b926038 R14: 00007f7a4b925fa0 R15: 00007ffc11d173b8
[  685.682235][T14383]  </TASK>
[  685.995199][T14387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2961'.
[  686.059251][T14389] program syz.0.2962 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  686.129404][T14391] program syz.0.2963 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  686.199115][T14393] FAULT_INJECTION: forcing a failure.
[  686.199115][T14393] name failslab, interval 1, probability 0, space 0, times 0
[  686.199152][T14393] CPU: 0 UID: 0 PID: 14393 Comm: syz.0.2964 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  686.199180][T14393] Tainted: [L]=SOFTLOCKUP
[  686.199188][T14393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  686.199200][T14393] Call Trace:
[  686.199208][T14393]  <TASK>
[  686.199217][T14393]  dump_stack_lvl+0xe8/0x150
[  686.199247][T14393]  should_fail_ex+0x46b/0x600
[  686.199280][T14393]  should_failslab+0xa8/0x100
[  686.199304][T14393]  __kmalloc_cache_noprof+0xa0/0x6d0
[  686.199326][T14393]  ? xfrm_policy_alloc+0x78/0x310
[  686.199351][T14393]  ? xfrm_policy_alloc+0x78/0x310
[  686.199382][T14393]  xfrm_policy_alloc+0x78/0x310
[  686.199421][T14393]  xfrm_compile_policy+0x242/0x3c0
[  686.199455][T14393]  xfrm_user_policy+0x5a9/0x970
[  686.199482][T14393]  ? xfrm_user_policy+0x3cc/0x970
[  686.199510][T14393]  ? __pfx_xfrm_user_policy+0x10/0x10
[  686.199537][T14393]  ? apparmor_capable+0x126/0x170
[  686.199565][T14393]  ? bpf_lsm_capable+0x9/0x20
[  686.199590][T14393]  ? security_capable+0x7e/0x2c0
[  686.199627][T14393]  do_ipv6_setsockopt+0x1615/0x3150
[  686.199663][T14393]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  686.199687][T14393]  ? get_pid_task+0x20/0x1f0
[  686.199719][T14393]  ? __lock_acquire+0x6b5/0x2d10
[  686.199763][T14393]  ? aa_sk_perm+0x703/0x950
[  686.199795][T14393]  ? __fget_files+0x2a/0x420
[  686.199820][T14393]  ? __pfx_aa_sk_perm+0x10/0x10
[  686.199852][T14393]  ? aa_sock_opt_perm+0x131/0x1f0
[  686.199876][T14393]  ipv6_setsockopt+0x59/0x170
[  686.199900][T14393]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  686.199923][T14393]  do_sock_setsockopt+0x17c/0x1b0
[  686.199955][T14393]  __x64_sys_setsockopt+0x143/0x1b0
[  686.199981][T14393]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.200004][T14393]  do_syscall_64+0x174/0x580
[  686.200027][T14393]  ? trace_irq_disable+0x3b/0x140
[  686.200051][T14393]  ? clear_bhb_loop+0x40/0x90
[  686.200075][T14393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.200095][T14393] RIP: 0033:0x7f7754eece59
[  686.200114][T14393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  686.200131][T14393] RSP: 002b:00007f7753146028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  686.200152][T14393] RAX: ffffffffffffffda RBX: 00007f7755165fa0 RCX: 00007f7754eece59
[  686.200167][T14393] RDX: 0000000000000023 RSI: 0000000000000029 RDI: 0000000000000004
[  686.200179][T14393] RBP: 00007f7753146090 R08: 00000000000000e8 R09: 0000000000000000
[  686.200192][T14393] R10: 0000200000002700 R11: 0000000000000246 R12: 0000000000000001
[  686.200205][T14393] R13: 00007f7755166038 R14: 00007f7755165fa0 R15: 00007ffedd022c88
[  686.200234][T14393]  </TASK>
[  686.629007][T14396] program syz.6.2965 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  686.848647][T14405] FAULT_INJECTION: forcing a failure.
[  686.848647][T14405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  686.850297][T14405] CPU: 0 UID: 0 PID: 14405 Comm: syz.6.2969 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  686.850328][T14405] Tainted: [L]=SOFTLOCKUP
[  686.850335][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  686.850347][T14405] Call Trace:
[  686.850355][T14405]  <TASK>
[  686.850365][T14405]  dump_stack_lvl+0xe8/0x150
[  686.850394][T14405]  should_fail_ex+0x46b/0x600
[  686.850426][T14405]  _copy_to_user+0x31/0xb0
[  686.850451][T14405]  simple_read_from_buffer+0xe1/0x170
[  686.850477][T14405]  proc_fail_nth_read+0x1be/0x230
[  686.850501][T14405]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  686.850524][T14405]  ? rw_verify_area+0x2ac/0x4e0
[  686.850547][T14405]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  686.850568][T14405]  vfs_read+0x212/0xa80
[  686.850598][T14405]  ? __pfx_vfs_read+0x10/0x10
[  686.850623][T14405]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  686.850648][T14405]  ? lockdep_hardirqs_on+0x7a/0x110
[  686.850671][T14405]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  686.850695][T14405]  ? mutex_lock_nested+0x152/0x1d0
[  686.850723][T14405]  ? fdget_pos+0x252/0x320
[  686.850751][T14405]  ksys_read+0x156/0x270
[  686.850777][T14405]  ? __pfx_ksys_read+0x10/0x10
[  686.850796][T14405]  ? fput+0xa0/0xd0
[  686.850821][T14405]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.850843][T14405]  do_syscall_64+0x174/0x580
[  686.850867][T14405]  ? trace_irq_disable+0x3b/0x140
[  686.850890][T14405]  ? clear_bhb_loop+0x40/0x90
[  686.850915][T14405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.850935][T14405] RIP: 0033:0x7f71c8a4d68e
[  686.850957][T14405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  686.850974][T14405] RSP: 002b:00007f71c6ce5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  686.850996][T14405] RAX: ffffffffffffffda RBX: 00007f71c6ce66c0 RCX: 00007f71c8a4d68e
[  686.851010][T14405] RDX: 000000000000000f RSI: 00007f71c6ce60a0 RDI: 0000000000000004
[  686.851023][T14405] RBP: 00007f71c6ce6090 R08: 0000000000000000 R09: 0000000000000000
[  686.851036][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  686.851048][T14405] R13: 00007f71c8d06038 R14: 00007f71c8d05fa0 R15: 00007ffdeb950588
[  686.851079][T14405]  </TASK>
[  687.182774][T14408] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2970'.
[  687.409169][T14413] program syz.6.2972 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  687.615987][   T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  687.784562][   T10] usb 1-1: Using ep0 maxpacket: 16
[  687.792956][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.792992][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  687.793017][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  687.794812][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  687.856420][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  687.856453][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  687.856473][   T10] usb 1-1: SerialNumber: syz
[  687.906140][ T5701] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  687.943116][T14411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  687.943507][T14411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  687.978176][   T10] hub 1-1:1.0: bad descriptor, ignoring hub
[  687.978212][   T10] hub 1-1:1.0: probe with driver hub failed with error -5
[  687.993664][ T5779] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  688.120115][ T5701] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  688.120143][ T5701] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  688.120172][ T5701] usb 6-1: config 220 has no interface number 2
[  688.127031][ T5701] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  688.141103][ T5701] usb 6-1: config 220 interface 0 has no altsetting 0
[  688.141134][ T5701] usb 6-1: config 220 interface 76 has no altsetting 0
[  688.141154][ T5701] usb 6-1: config 220 interface 1 has no altsetting 0
[  688.217912][ T5779] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  688.218017][ T5779] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  688.218044][ T5779] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  688.271410][ T5701] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  688.271704][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.271728][ T5701] usb 6-1: Product: syz
[  688.271743][ T5701] usb 6-1: Manufacturer: syz
[  688.278281][ T5701] usb 6-1: SerialNumber: syz
[  688.326040][ T5779] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  688.326072][ T5779] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.326092][ T5779] usb 7-1: Product: syz
[  688.326108][ T5779] usb 7-1: Manufacturer: syz
[  688.326123][ T5779] usb 7-1: SerialNumber: syz
[  688.572684][T14410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  688.572876][T14410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  688.617710][ T5779] usb 7-1: config 0 descriptor??
[  688.631130][T14418] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  688.631344][T14418] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  688.678547][ T5779] usb 7-1: ucan: probing device on interface #0
[  688.889164][T14421] FAULT_INJECTION: forcing a failure.
[  688.889164][T14421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  688.889199][T14421] CPU: 1 UID: 0 PID: 14421 Comm: syz.2.2975 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  688.889227][T14421] Tainted: [L]=SOFTLOCKUP
[  688.889235][T14421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  688.889247][T14421] Call Trace:
[  688.889255][T14421]  <TASK>
[  688.889265][T14421]  dump_stack_lvl+0xe8/0x150
[  688.889294][T14421]  should_fail_ex+0x46b/0x600
[  688.889327][T14421]  _copy_from_user+0x2d/0xb0
[  688.889350][T14421]  comedi_unlocked_ioctl+0xaef/0x1b00
[  688.889388][T14421]  ? kasan_quarantine_put+0xbb/0x1f0
[  688.889418][T14421]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  688.889445][T14421]  ? tomoyo_path_number_perm+0x219/0x630
[  688.889476][T14421]  ? tomoyo_path_number_perm+0x219/0x630
[  688.889507][T14421]  ? do_vfs_ioctl+0x117b/0x1540
[  688.889536][T14421]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  688.889601][T14421]  ? __fget_files+0x2a/0x420
[  688.889625][T14421]  ? __fget_files+0x3a6/0x420
[  688.889644][T14421]  ? __fget_files+0x2a/0x420
[  688.889666][T14421]  ? bpf_lsm_file_ioctl+0x9/0x20
[  688.889690][T14421]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  688.889709][T14421]  __se_sys_ioctl+0xff/0x170
[  688.889733][T14421]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.889755][T14421]  do_syscall_64+0x174/0x580
[  688.889779][T14421]  ? trace_irq_disable+0x3b/0x140
[  688.889803][T14421]  ? clear_bhb_loop+0x40/0x90
[  688.889827][T14421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.889847][T14421] RIP: 0033:0x7f7a4b6ace59
[  688.889866][T14421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.889883][T14421] RSP: 002b:00007f7a498fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  688.889905][T14421] RAX: ffffffffffffffda RBX: 00007f7a4b925fa0 RCX: 00007f7a4b6ace59
[  688.889920][T14421] RDX: 0000200000000080 RSI: 000000008028640c RDI: 0000000000000003
[  688.889933][T14421] RBP: 00007f7a498fe090 R08: 0000000000000000 R09: 0000000000000000
[  688.889945][T14421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  688.889957][T14421] R13: 00007f7a4b926038 R14: 00007f7a4b925fa0 R15: 00007ffc11d173b8
[  688.889987][T14421]  </TASK>
[  689.226744][ T5779] usb 7-1: ucan: device reported invalid device info
[  689.226767][ T5779] usb 7-1: ucan: probe failed; try to update the device firmware
[  689.269053][ T5701] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  689.269090][ T5701] uvcvideo 6-1:220.0: No valid video chain found.
[  689.269148][ T5701] usb 6-1: selecting invalid altsetting 0
[  689.378350][ T5701] usb 6-1: selecting invalid altsetting 0
[  689.378442][ T5701] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  689.387696][ T5701] usb 6-1: USB disconnect, device number 35
[  689.724755][ T5611] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  690.379406][   T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[  690.514298][   T10] usb 1-1: USB disconnect, device number 40
[  690.758809][T14435] comedi comedi0: Minor 2147483647 is invalid!
[  690.961806][T14439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2981'.
[  691.253180][T14443] FAULT_INJECTION: forcing a failure.
[  691.253180][T14443] name failslab, interval 1, probability 0, space 0, times 0
[  691.253217][T14443] CPU: 0 UID: 0 PID: 14443 Comm: syz.2.2982 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  691.253244][T14443] Tainted: [L]=SOFTLOCKUP
[  691.253252][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  691.253263][T14443] Call Trace:
[  691.253271][T14443]  <TASK>
[  691.253279][T14443]  dump_stack_lvl+0xe8/0x150
[  691.253313][T14443]  should_fail_ex+0x46b/0x600
[  691.253346][T14443]  should_failslab+0xa8/0x100
[  691.253371][T14443]  __kmalloc_noprof+0xfe/0x7e0
[  691.253393][T14443]  ? tomoyo_encode+0x28b/0x550
[  691.253414][T14443]  ? tomoyo_encode+0x28b/0x550
[  691.253449][T14443]  tomoyo_encode+0x28b/0x550
[  691.253477][T14443]  tomoyo_realpath_from_path+0x58d/0x5d0
[  691.253510][T14443]  ? tomoyo_path_number_perm+0x219/0x630
[  691.253540][T14443]  tomoyo_path_number_perm+0x246/0x630
[  691.253572][T14443]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  691.253600][T14443]  ? __lock_acquire+0x6b5/0x2d10
[  691.253627][T14443]  ? do_raw_spin_lock+0x12b/0x2f0
[  691.253678][T14443]  ? __fget_files+0x2a/0x420
[  691.253701][T14443]  ? __fget_files+0x2a/0x420
[  691.253720][T14443]  ? __fget_files+0x3a6/0x420
[  691.253739][T14443]  ? __fget_files+0x2a/0x420
[  691.253762][T14443]  security_file_ioctl+0xc3/0x2a0
[  691.253792][T14443]  __se_sys_ioctl+0x47/0x170
[  691.253818][T14443]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.253839][T14443]  do_syscall_64+0x174/0x580
[  691.253865][T14443]  ? trace_irq_disable+0x3b/0x140
[  691.253889][T14443]  ? clear_bhb_loop+0x40/0x90
[  691.253914][T14443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.253934][T14443] RIP: 0033:0x7f7a4b6ace59
[  691.253951][T14443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.253967][T14443] RSP: 002b:00007f7a498fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  691.253988][T14443] RAX: ffffffffffffffda RBX: 00007f7a4b925fa0 RCX: 00007f7a4b6ace59
[  691.254002][T14443] RDX: 0000200000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  691.254015][T14443] RBP: 00007f7a498fe090 R08: 0000000000000000 R09: 0000000000000000
[  691.254028][T14443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  691.254040][T14443] R13: 00007f7a4b926038 R14: 00007f7a4b925fa0 R15: 00007ffc11d173b8
[  691.254070][T14443]  </TASK>
[  691.330004][T14443] ERROR: Out of memory at tomoyo_realpath_from_path.
[  691.330136][T14443] comedi comedi0: Minor 2147483647 is invalid!
[  691.849126][  T823] usb 7-1: USB disconnect, device number 38
[  692.169653][T14451] program syz.6.2985 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  692.404591][ T5611] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  692.493869][T14458] FAULT_INJECTION: forcing a failure.
[  692.493869][T14458] name failslab, interval 1, probability 0, space 0, times 0
[  692.493905][T14458] CPU: 1 UID: 0 PID: 14458 Comm: syz.0.2988 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  692.493932][T14458] Tainted: [L]=SOFTLOCKUP
[  692.493940][T14458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  692.493952][T14458] Call Trace:
[  692.493960][T14458]  <TASK>
[  692.493969][T14458]  dump_stack_lvl+0xe8/0x150
[  692.493998][T14458]  should_fail_ex+0x46b/0x600
[  692.494041][T14458]  should_failslab+0xa8/0x100
[  692.494066][T14458]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  692.494096][T14458]  ? __anon_vma_prepare+0xcb/0x4a0
[  692.494114][T14458]  ? __anon_vma_prepare+0xcb/0x4a0
[  692.494140][T14458]  __anon_vma_prepare+0xcb/0x4a0
[  692.494165][T14458]  uffd_lock_vma+0x1f4/0x2d0
[  692.494194][T14458]  mfill_get_vma+0xc5/0x6d0
[  692.494224][T14458]  userfaultfd_ioctl+0x213a/0x86c0
[  692.494258][T14458]  ? stack_depot_save_flags+0x33/0x810
[  692.494289][T14458]  ? kasan_save_track+0x4f/0x80
[  692.494313][T14458]  ? kasan_save_track+0x3e/0x80
[  692.494337][T14458]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  692.494396][T14458]  ? kasan_quarantine_put+0xbb/0x1f0
[  692.494436][T14458]  ? tomoyo_path_number_perm+0x219/0x630
[  692.494463][T14458]  ? tomoyo_path_number_perm+0x219/0x630
[  692.494494][T14458]  ? do_vfs_ioctl+0x117b/0x1540
[  692.494522][T14458]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  692.494580][T14458]  ? __fget_files+0x2a/0x420
[  692.494603][T14458]  ? __fget_files+0x2a/0x420
[  692.494621][T14458]  ? __fget_files+0x3a6/0x420
[  692.494638][T14458]  ? __fget_files+0x2a/0x420
[  692.494661][T14458]  ? bpf_lsm_file_ioctl+0x9/0x20
[  692.494684][T14458]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  692.494708][T14458]  __se_sys_ioctl+0xff/0x170
[  692.494732][T14458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.494754][T14458]  do_syscall_64+0x174/0x580
[  692.494778][T14458]  ? trace_irq_disable+0x3b/0x140
[  692.494803][T14458]  ? clear_bhb_loop+0x40/0x90
[  692.494826][T14458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.494846][T14458] RIP: 0033:0x7f7754eece59
[  692.494865][T14458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  692.494880][T14458] RSP: 002b:00007f7753146028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  692.494901][T14458] RAX: ffffffffffffffda RBX: 00007f7755165fa0 RCX: 00007f7754eece59
[  692.494916][T14458] RDX: 0000200000000280 RSI: 00000000c020aa07 RDI: 0000000000000004
[  692.494930][T14458] RBP: 00007f7753146090 R08: 0000000000000000 R09: 0000000000000000
[  692.494942][T14458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  692.494955][T14458] R13: 00007f7755166038 R14: 00007f7755165fa0 R15: 00007ffedd022c88
[  692.494985][T14458]  </TASK>
[  692.564626][ T5611] usb 3-1: Using ep0 maxpacket: 16
[  692.837164][ T5611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  692.837201][ T5611] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  692.837244][ T5611] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  692.837268][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.890198][ T5611] usb 3-1: config 0 descriptor??
[  693.709015][ T5715] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  693.795108][ T5611] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max
[  693.815431][ T5611] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  693.815466][ T5611] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  693.815496][ T5611] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  693.815523][ T5611] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  693.815561][ T5611] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  693.815588][ T5611] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  693.815615][ T5611] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  693.815643][ T5611] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  693.815670][ T5611] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  693.815697][ T5611] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  693.955917][ T5611] HID 045e:07da: Invalid code 65791 type 1
[  693.965570][ T5611] HID 045e:07da: Invalid code 768 type 1
[  693.965600][ T5611] HID 045e:07da: Invalid code 769 type 1
[  693.965615][ T5611] HID 045e:07da: Invalid code 770 type 1
[  693.965629][ T5611] HID 045e:07da: Invalid code 771 type 1
[  693.965643][ T5611] HID 045e:07da: Invalid code 772 type 1
[  693.965657][ T5611] HID 045e:07da: Invalid code 773 type 1
[  693.965671][ T5611] HID 045e:07da: Invalid code 774 type 1
[  693.965684][ T5611] HID 045e:07da: Invalid code 775 type 1
[  693.965697][ T5611] HID 045e:07da: Invalid code 776 type 1
[  694.216545][ T5611] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000D/input/input28
[  694.351838][T14469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2991'.
[  694.699348][ T5715] usb 7-1: Using ep0 maxpacket: 32
[  694.713786][ T5715] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  694.713821][ T5715] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  694.713845][ T5715] usb 7-1: config 0 interface 0 has no altsetting 0
[  694.713879][ T5715] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  694.713903][ T5715] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.734613][ T5777] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  694.815596][   T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  694.838223][ T5611] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  694.859836][ T5611] usb 3-1: USB disconnect, device number 73
[  694.964563][   T10] usb 1-1: Using ep0 maxpacket: 8
[  694.968616][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  694.968664][   T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  694.972604][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  694.972634][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.972654][   T10] usb 1-1: Product: syz
[  694.972668][   T10] usb 1-1: Manufacturer: syz
[  694.972683][   T10] usb 1-1: SerialNumber: syz
[  695.652216][ T5715] usb 7-1: config 0 descriptor??
[  695.681665][T14474] fido_id[14474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  696.760983][ T5715] usb 7-1: can't set config #0, error -71
[  696.763263][ T5715] usb 7-1: USB disconnect, device number 39
[  697.661788][ T5777] usb 6-1: device descriptor read/all, error -71
[  697.683416][   T10] cdc_ncm 1-1:1.0: bind() failure
[  697.763815][   T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  697.763862][   T10] cdc_ncm 1-1:1.1: bind() failure
[  697.874850][   T10] usb 1-1: USB disconnect, device number 41
[  698.331984][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 4 > 1
[  698.332019][ T5614] Bluetooth: hci0: unexpected event for opcode 0x0c03
[  698.417589][T14489] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in;
[  698.417589][T14489]    program syz.5.2998 not setting count and/or reply_len properly
[  698.475344][T14486] netlink: 'syz.5.2998': attribute type 3 has an invalid length.
[  698.475366][T14486] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2998'.
[  698.504712][T14486] blktrace: Concurrent blktraces are not allowed on sg0
[  698.878635][T14493] program syz.0.2999 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  699.574728][ T5611] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  699.702562][T14509] fuse: Bad value for 'fd'
[  699.811400][ T5611] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46
[  699.811433][ T5611] usb 1-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0
[  699.811454][ T5611] usb 1-1: Product: syz
[  699.811470][ T5611] usb 1-1: Manufacturer: syz
[  699.867142][ T5611] usb 1-1: config 0 descriptor??
[  699.901724][ T5611] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  699.916969][   T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  699.935072][ T5611] ftdi_sio ttyUSB0: unknown device type: 0xa446
[  700.065058][   T10] usb 7-1: Using ep0 maxpacket: 32
[  700.076346][   T10] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  700.076377][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.115802][ T5614] Bluetooth: hci3: adv larger than maximum supported
[  700.115824][ T5614] Bluetooth: hci3: Malformed LE Event: 0x0d
[  700.168590][ T5701] usb 1-1: USB disconnect, device number 42
[  700.205042][   T10] usb 7-1: config 0 descriptor??
[  700.234405][ T5701] ftdi_sio 1-1:0.0: device disconnected
[  700.301978][   T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  700.567316][T14511] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3004'.
[  701.365557][   T10] gspca_vc032x: reg_r err -110
[  701.365693][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365708][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365717][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365726][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365736][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365745][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365754][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365763][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365772][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365780][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365789][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365798][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365808][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365818][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365827][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365837][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365847][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365857][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  701.365898][   T10] gspca_vc032x: Unknown sensor...
[  701.365989][   T10] vc032x 7-1:0.0: probe with driver vc032x failed with error -22
[  701.477108][T14507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.477692][T14507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.081912][T14516] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  702.081942][T14516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  702.082823][T14516] vhci_hcd vhci_hcd.0: Device attached
[  703.714614][ T5338] usb 33-1: new low-speed USB device number 18 using vhci_hcd
[  704.648277][T12146] usb 7-1: USB disconnect, device number 40
[  704.650396][T14517] vhci_hcd: connection reset by peer
[  704.652565][ T7386] vhci_hcd vhci_hcd.0: stop threads
[  704.652590][ T7386] vhci_hcd vhci_hcd.0: release socket
[  704.652658][ T7386] vhci_hcd vhci_hcd.0: disconnect device
[  704.945265][T14523] program syz.6.3009 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  704.976259][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 4 > 1
[  704.976293][ T5614] Bluetooth: hci3: unexpected event for opcode 0x0c03
[  705.057274][T14524] usb usb8: usbfs: process 14524 (syz.0.3010) did not claim interface 0 before use
[  705.140625][T14525] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in;
[  705.140625][T14525]    program syz.0.3010 not setting count and/or reply_len properly
[  705.200542][T14525] netlink: 'syz.0.3010': attribute type 3 has an invalid length.
[  705.200564][T14525] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3010'.
[  705.229006][T14525] blktrace: Concurrent blktraces are not allowed on sg0
[  705.466681][T14528] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3012'.
[  705.552302][T14531] netlink: 'syz.6.3013': attribute type 4 has an invalid length.
[  705.552420][T14531] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3013'.
[  706.954579][   T49] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  707.459002][   T49] usb 7-1: Using ep0 maxpacket: 16
[  707.479417][   T49] usb 7-1: config 127 has an invalid interface number: 124 but max is 0
[  707.479446][   T49] usb 7-1: config 127 has no interface number 0
[  707.479481][   T49] usb 7-1: config 127 interface 124 has no altsetting 0
[  707.507192][   T49] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  707.507224][   T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.507245][   T49] usb 7-1: Product: syz
[  707.507260][   T49] usb 7-1: Manufacturer: syz
[  707.507275][   T49] usb 7-1: SerialNumber: syz
[  708.570734][   T49] usb 7-1: can't set config #127, error -71
[  708.639084][   T49] usb 7-1: USB disconnect, device number 41
[  709.045770][ T5338] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  709.359459][T14547] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(35)
[  709.359486][T14547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  709.359577][T14547] vhci_hcd vhci_hcd.0: Device attached
[  709.576577][   T49] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  709.617726][T14548] vhci_hcd: connection closed
[  709.626380][T14272] vhci_hcd vhci_hcd.2: stop threads
[  709.626408][T14272] vhci_hcd vhci_hcd.2: release socket
[  709.626476][T14272] vhci_hcd vhci_hcd.2: disconnect device
[  709.655380][T12146] usb 37-1: new low-speed USB device number 18 using vhci_hcd
[  709.655447][T12146] usb 37-1: enqueue for inactive port 0
[  709.770092][   T49] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  709.770119][   T49] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  709.770139][   T49] usb 7-1: config 220 has no interface number 2
[  709.770208][   T49] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  709.770235][   T49] usb 7-1: config 220 interface 0 has no altsetting 0
[  709.770252][   T49] usb 7-1: config 220 interface 76 has no altsetting 0
[  709.770270][   T49] usb 7-1: config 220 interface 1 has no altsetting 0
[  709.773085][   T49] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  709.773117][   T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.773138][   T49] usb 7-1: Product: syz
[  709.773153][   T49] usb 7-1: Manufacturer: syz
[  709.773168][   T49] usb 7-1: SerialNumber: syz
[  709.864588][T12146] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  711.867902][ T5779] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  712.024587][ T5779] usb 6-1: Using ep0 maxpacket: 16
[  712.027037][ T5779] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  712.027074][ T5779] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  712.027100][ T5779] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  712.027132][ T5779] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  712.229168][   T49] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  712.229208][   T49] uvcvideo 7-1:220.0: No valid video chain found.
[  712.229270][   T49] usb 7-1: selecting invalid altsetting 0
[  712.390024][   T49] usb 7-1: selecting invalid altsetting 0
[  712.390065][   T49] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  712.422010][   T49] usb 7-1: USB disconnect, device number 42
[  712.423917][ T5779] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  712.423946][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  712.423966][ T5779] usb 6-1: SerialNumber: syz
[  712.517003][T14562] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  712.517263][T14562] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  712.552482][ T5779] hub 6-1:1.0: bad descriptor, ignoring hub
[  712.552521][ T5779] hub 6-1:1.0: probe with driver hub failed with error -5
[  712.684592][  T823] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  712.764264][T14561] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  712.764579][T14561] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  712.836856][  T823] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  712.836885][  T823] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  712.836906][  T823] usb 3-1: config 220 has no interface number 2
[  712.836985][  T823] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  712.837014][  T823] usb 3-1: config 220 interface 0 has no altsetting 0
[  712.837034][  T823] usb 3-1: config 220 interface 76 has no altsetting 0
[  712.837053][  T823] usb 3-1: config 220 interface 1 has no altsetting 0
[  712.839864][  T823] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  712.839895][  T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.840005][  T823] usb 3-1: Product: syz
[  712.840020][  T823] usb 3-1: Manufacturer: syz
[  712.840036][  T823] usb 3-1: SerialNumber: syz
[  713.761154][T14570] veth1_macvtap: left promiscuous mode
[  713.761189][T14570] macsec0: entered promiscuous mode
[  713.761209][T14570] macsec0: entered allmulticast mode
[  713.773431][T14573] veth1_macvtap: entered promiscuous mode
[  713.773457][T14573] veth1_macvtap: entered allmulticast mode
[  713.774457][T14573] macsec0: left promiscuous mode
[  713.774655][T14573] macsec0: left allmulticast mode
[  713.774671][T14573] veth1_macvtap: left allmulticast mode
[  714.850091][T14576] program syz.6.3028 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  715.013667][  T823] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  715.013705][  T823] uvcvideo 3-1:220.0: No valid video chain found.
[  715.013764][  T823] usb 3-1: selecting invalid altsetting 0
[  715.265368][  T823] usb 3-1: selecting invalid altsetting 0
[  715.265408][  T823] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  715.321829][  T823] usb 3-1: USB disconnect, device number 74
[  716.611338][  T823] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  716.616845][ T5779] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  716.783709][  T823] usb 3-1: unable to get BOS descriptor or descriptor too short
[  716.803302][  T823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  716.803330][  T823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  716.842929][  T823] usb 3-1: string descriptor 0 read error: -22
[  716.843098][  T823] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  716.843122][  T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.935176][  T823] usb 3-1: selecting invalid altsetting 1
[  716.937125][  T823] usb 3-1: unit 6 not found!
[  718.342797][ T5779] usb 6-1: USB disconnect, device number 38
[  720.763396][  T823] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[  721.439379][T14598] FAULT_INJECTION: forcing a failure.
[  721.439379][T14598] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  721.439415][T14598] CPU: 0 UID: 0 PID: 14598 Comm: syz.2.3035 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  721.439444][T14598] Tainted: [L]=SOFTLOCKUP
[  721.439455][T14598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  721.439467][T14598] Call Trace:
[  721.439476][T14598]  <TASK>
[  721.439484][T14598]  dump_stack_lvl+0xe8/0x150
[  721.439513][T14598]  should_fail_ex+0x46b/0x600
[  721.439547][T14598]  _copy_to_iter+0x404/0x17d0
[  721.439589][T14598]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  721.439611][T14598]  ? __pfx__copy_to_iter+0x10/0x10
[  721.439637][T14598]  ? rt_spin_lock+0x1e0/0x400
[  721.439658][T14598]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  721.439686][T14598]  __skb_datagram_iter+0xf8/0x980
[  721.439714][T14598]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  721.439748][T14598]  skb_copy_datagram_iter+0xb5/0x240
[  721.439788][T14598]  netlink_recvmsg+0x2c3/0xa50
[  721.439823][T14598]  ? __pfx_netlink_recvmsg+0x10/0x10
[  721.439852][T14598]  ? __pfx_aa_sk_perm+0x10/0x10
[  721.439884][T14598]  ? rcu_is_watching+0x15/0xb0
[  721.439912][T14598]  ? aa_sock_msg_perm+0x122/0x200
[  721.439932][T14598]  ? __pfx_netlink_recvmsg+0x10/0x10
[  721.439959][T14598]  sock_recvmsg_nosec+0x130/0x170
[  721.439994][T14598]  ____sys_recvmsg+0x23d/0x4f0
[  721.440026][T14598]  ? __pfx_____sys_recvmsg+0x10/0x10
[  721.440064][T14598]  ? import_iovec+0x73/0xa0
[  721.440088][T14598]  ___sys_recvmsg+0x215/0x5a0
[  721.440118][T14598]  ? __pfx____sys_recvmsg+0x10/0x10
[  721.440147][T14598]  ? __fget_files+0x2a/0x420
[  721.440184][T14598]  ? __fget_files+0x3a6/0x420
[  721.440213][T14598]  do_recvmmsg+0x32b/0x7e0
[  721.440246][T14598]  ? __pfx_do_recvmmsg+0x10/0x10
[  721.440281][T14598]  ? get_timespec64+0x119/0x1b0
[  721.440308][T14598]  ? __pfx_get_timespec64+0x10/0x10
[  721.440344][T14598]  __x64_sys_recvmmsg+0x1b7/0x250
[  721.440374][T14598]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  721.440407][T14598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.440428][T14598]  do_syscall_64+0x174/0x580
[  721.440452][T14598]  ? trace_irq_disable+0x3b/0x140
[  721.440475][T14598]  ? clear_bhb_loop+0x40/0x90
[  721.440500][T14598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.440520][T14598] RIP: 0033:0x7f7a4b6ace59
[  721.440539][T14598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  721.440556][T14598] RSP: 002b:00007f7a498fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  721.440578][T14598] RAX: ffffffffffffffda RBX: 00007f7a4b925fa0 RCX: 00007f7a4b6ace59
[  721.440593][T14598] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  721.440606][T14598] RBP: 00007f7a498fe090 R08: 0000200000003700 R09: 0000000000000000
[  721.440619][T14598] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  721.440631][T14598] R13: 00007f7a4b926038 R14: 00007f7a4b925fa0 R15: 00007ffc11d173b8
[  721.440662][T14598]  </TASK>
[  722.057377][T14600] Invalid option length (1048308) for dns_resolver key
[  723.294123][T14604] ./bus: Can't lookup blockdev
[  723.546069][T14604] netlink: 'syz.5.3034': attribute type 6 has an invalid length.
[  723.546104][T14604] netlink: 'syz.5.3034': attribute type 7 has an invalid length.
[  723.546117][T14604] netlink: 'syz.5.3034': attribute type 8 has an invalid length.
[  723.757243][  T823] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  723.798412][  T823] usb 3-1: USB disconnect, device number 75
[  725.707448][ T5779] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  725.896985][ T5779] usb 7-1: Using ep0 maxpacket: 16
[  727.215024][ T5779] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  727.215064][ T5779] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  727.215089][ T5779] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  727.215113][ T5779] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  727.218463][ T5779] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  727.218491][ T5779] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  727.218513][ T5779] usb 7-1: SerialNumber: syz
[  728.758735][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3045'.
[  729.062643][ T5779] usb 7-1: can't set config #1, error -71
[  729.065679][ T5779] usb 7-1: USB disconnect, device number 43
[  729.193532][T14631] FAULT_INJECTION: forcing a failure.
[  729.193532][T14631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  729.193569][T14631] CPU: 1 UID: 0 PID: 14631 Comm: syz.6.3046 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  729.193598][T14631] Tainted: [L]=SOFTLOCKUP
[  729.193605][T14631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  729.193617][T14631] Call Trace:
[  729.193625][T14631]  <TASK>
[  729.193635][T14631]  dump_stack_lvl+0xe8/0x150
[  729.193664][T14631]  should_fail_ex+0x46b/0x600
[  729.193695][T14631]  _copy_from_iter+0x1d3/0x1670
[  729.193728][T14631]  ? rcu_is_watching+0x15/0xb0
[  729.193762][T14631]  ? __pfx__copy_from_iter+0x10/0x10
[  729.193790][T14631]  ? __alloc_skb+0x27d/0x7d0
[  729.193811][T14631]  ? __alloc_skb+0x27d/0x7d0
[  729.193836][T14631]  ? netlink_sendmsg+0x650/0xb40
[  729.193860][T14631]  ? skb_put+0x11b/0x210
[  729.193890][T14631]  netlink_sendmsg+0x6c0/0xb40
[  729.193922][T14631]  ? __pfx_netlink_sendmsg+0x10/0x10
[  729.193949][T14631]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  729.193979][T14631]  ? aa_sock_msg_perm+0x122/0x200
[  729.194000][T14631]  ? __pfx_netlink_sendmsg+0x10/0x10
[  729.194024][T14631]  sock_sendmsg_nosec+0x13a/0x180
[  729.194057][T14631]  ____sys_sendmsg+0x55c/0x870
[  729.194086][T14631]  ? __pfx_____sys_sendmsg+0x10/0x10
[  729.194119][T14631]  ? import_iovec+0x73/0xa0
[  729.194145][T14631]  ___sys_sendmsg+0x2a5/0x360
[  729.194167][T14631]  ? __lock_acquire+0x6b5/0x2d10
[  729.194195][T14631]  ? __pfx____sys_sendmsg+0x10/0x10
[  729.194261][T14631]  ? __fget_files+0x2a/0x420
[  729.194281][T14631]  ? __fget_files+0x3a6/0x420
[  729.194310][T14631]  __x64_sys_sendmsg+0x1b7/0x290
[  729.194338][T14631]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  729.194377][T14631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.194399][T14631]  do_syscall_64+0x174/0x580
[  729.194424][T14631]  ? trace_irq_disable+0x3b/0x140
[  729.194448][T14631]  ? clear_bhb_loop+0x40/0x90
[  729.194472][T14631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.194492][T14631] RIP: 0033:0x7f71c8a8ce59
[  729.194510][T14631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.194527][T14631] RSP: 002b:00007f71c6ce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  729.194548][T14631] RAX: ffffffffffffffda RBX: 00007f71c8d05fa0 RCX: 00007f71c8a8ce59
[  729.194562][T14631] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003
[  729.194594][T14631] RBP: 00007f71c6ce6090 R08: 0000000000000000 R09: 0000000000000000
[  729.194607][T14631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  729.194619][T14631] R13: 00007f71c8d06038 R14: 00007f71c8d05fa0 R15: 00007ffdeb950588
[  729.194648][T14631]  </TASK>
[  729.607299][T14634] ./bus: Can't lookup blockdev
[  730.930960][T14634] netlink: 'syz.6.3050': attribute type 6 has an invalid length.
[  730.930981][T14634] netlink: 'syz.6.3050': attribute type 7 has an invalid length.
[  730.930996][T14634] netlink: 'syz.6.3050': attribute type 8 has an invalid length.
[  732.326591][ T5701] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  735.615570][ T5614] Bluetooth: hci3: unexpected event 0x20 length: 10 > 7
[  736.935784][ T5779] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  736.940052][ T5701] usb 1-1: device not accepting address 43, error -71
[  742.712703][T14686] Bluetooth: hci4: command 0x0406 tx timeout
[  744.110342][T14695] FAULT_INJECTION: forcing a failure.
[  744.110342][T14695] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  744.110372][T14695] CPU: 1 UID: 0 PID: 14695 Comm: syz.6.3074 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  744.110392][T14695] Tainted: [L]=SOFTLOCKUP
[  744.110397][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  744.110407][T14695] Call Trace:
[  744.110413][T14695]  <TASK>
[  744.110421][T14695]  dump_stack_lvl+0xe8/0x150
[  744.110444][T14695]  should_fail_ex+0x46b/0x600
[  744.110468][T14695]  strncpy_from_user+0x36/0x2b0
[  744.110490][T14695]  do_getname+0x77/0x250
[  744.110512][T14695]  user_path_at+0x2a/0x160
[  744.110531][T14695]  __se_sys_mount+0x2dc/0x420
[  744.110549][T14695]  ? __pfx___se_sys_mount+0x10/0x10
[  744.110568][T14695]  ? __x64_sys_mount+0x20/0xc0
[  744.110582][T14695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.110597][T14695]  do_syscall_64+0x174/0x580
[  744.110615][T14695]  ? trace_irq_disable+0x3b/0x140
[  744.110633][T14695]  ? clear_bhb_loop+0x40/0x90
[  744.110650][T14695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.110664][T14695] RIP: 0033:0x7f71c8a8ce59
[  744.110678][T14695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.110691][T14695] RSP: 002b:00007f71c6ce6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  744.110707][T14695] RAX: ffffffffffffffda RBX: 00007f71c8d05fa0 RCX: 00007f71c8a8ce59
[  744.110717][T14695] RDX: 00002000000000c0 RSI: 00002000000001c0 RDI: 0000000000000000
[  744.110726][T14695] RBP: 00007f71c6ce6090 R08: 0000000000000000 R09: 0000000000000000
[  744.110740][T14695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  744.110749][T14695] R13: 00007f71c8d06038 R14: 00007f71c8d05fa0 R15: 00007ffdeb950588
[  744.110771][T14695]  </TASK>
[  745.050118][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3076'.
[  747.240883][T14706] program syz.6.3077 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  747.487759][T14712] FAULT_INJECTION: forcing a failure.
[  747.487759][T14712] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  747.487795][T14712] CPU: 1 UID: 0 PID: 14712 Comm: syz.2.3078 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  747.487823][T14712] Tainted: [L]=SOFTLOCKUP
[  747.487830][T14712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  747.487841][T14712] Call Trace:
[  747.487849][T14712]  <TASK>
[  747.487858][T14712]  dump_stack_lvl+0xe8/0x150
[  747.487887][T14712]  should_fail_ex+0x46b/0x600
[  747.487920][T14712]  _copy_from_iter+0x1d3/0x1670
[  747.487954][T14712]  ? rcu_is_watching+0x15/0xb0
[  747.487988][T14712]  ? __pfx__copy_from_iter+0x10/0x10
[  747.488016][T14712]  ? __alloc_skb+0x27d/0x7d0
[  747.488035][T14712]  ? __alloc_skb+0x27d/0x7d0
[  747.488060][T14712]  ? netlink_sendmsg+0x650/0xb40
[  747.488094][T14712]  ? skb_put+0x11b/0x210
[  747.488118][T14712]  netlink_sendmsg+0x6c0/0xb40
[  747.488151][T14712]  ? __pfx_netlink_sendmsg+0x10/0x10
[  747.488177][T14712]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  747.488207][T14712]  ? aa_sock_msg_perm+0x122/0x200
[  747.488229][T14712]  ? __pfx_netlink_sendmsg+0x10/0x10
[  747.488254][T14712]  sock_sendmsg_nosec+0x13a/0x180
[  747.488286][T14712]  ____sys_sendmsg+0x55c/0x870
[  747.488314][T14712]  ? __pfx_____sys_sendmsg+0x10/0x10
[  747.488347][T14712]  ? import_iovec+0x73/0xa0
[  747.488371][T14712]  ___sys_sendmsg+0x2a5/0x360
[  747.488395][T14712]  ? __lock_acquire+0x6b5/0x2d10
[  747.488424][T14712]  ? __pfx____sys_sendmsg+0x10/0x10
[  747.488479][T14712]  ? __fget_files+0x2a/0x420
[  747.488499][T14712]  ? __fget_files+0x3a6/0x420
[  747.488531][T14712]  __x64_sys_sendmsg+0x1b7/0x290
[  747.488558][T14712]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  747.488595][T14712]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.488617][T14712]  do_syscall_64+0x174/0x580
[  747.488641][T14712]  ? trace_irq_disable+0x3b/0x140
[  747.488665][T14712]  ? clear_bhb_loop+0x40/0x90
[  747.488689][T14712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.488709][T14712] RIP: 0033:0x7f7a4b6ace59
[  747.488729][T14712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  747.488746][T14712] RSP: 002b:00007f7a498dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  747.488767][T14712] RAX: ffffffffffffffda RBX: 00007f7a4b926090 RCX: 00007f7a4b6ace59
[  747.488781][T14712] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003
[  747.488794][T14712] RBP: 00007f7a498dd090 R08: 0000000000000000 R09: 0000000000000000
[  747.488807][T14712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  747.488819][T14712] R13: 00007f7a4b926128 R14: 00007f7a4b926090 R15: 00007ffc11d173b8
[  747.488850][T14712]  </TASK>
[  747.589306][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  747.589407][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  755.918629][T14744] program syz.6.3089 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  759.468536][ T5611] usb 7-1: new full-speed USB device number 44 using dummy_hcd
[  761.546123][ T5701] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  763.005718][T14769] FAULT_INJECTION: forcing a failure.
[  763.005718][T14769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  763.005757][T14769] CPU: 1 UID: 0 PID: 14769 Comm: syz.2.3095 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  763.005786][T14769] Tainted: [L]=SOFTLOCKUP
[  763.005794][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  763.005807][T14769] Call Trace:
[  763.005815][T14769]  <TASK>
[  763.005824][T14769]  dump_stack_lvl+0xe8/0x150
[  763.005853][T14769]  should_fail_ex+0x46b/0x600
[  763.005886][T14769]  _copy_to_user+0x31/0xb0
[  763.005911][T14769]  simple_read_from_buffer+0xe1/0x170
[  763.005938][T14769]  proc_fail_nth_read+0x1be/0x230
[  763.005961][T14769]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  763.005985][T14769]  ? rw_verify_area+0x2ac/0x4e0
[  763.006007][T14769]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  763.006029][T14769]  vfs_read+0x212/0xa80
[  763.006059][T14769]  ? __pfx_vfs_read+0x10/0x10
[  763.006082][T14769]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  763.006107][T14769]  ? lockdep_hardirqs_on+0x7a/0x110
[  763.006131][T14769]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  763.006154][T14769]  ? mutex_lock_nested+0x152/0x1d0
[  763.006180][T14769]  ? fdget_pos+0x252/0x320
[  763.006209][T14769]  ksys_read+0x156/0x270
[  763.006234][T14769]  ? __pfx_ksys_read+0x10/0x10
[  763.006265][T14769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.006287][T14769]  do_syscall_64+0x174/0x580
[  763.006311][T14769]  ? trace_irq_disable+0x3b/0x140
[  763.006336][T14769]  ? clear_bhb_loop+0x40/0x90
[  763.006360][T14769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.006379][T14769] RIP: 0033:0x7f7a4b66d68e
[  763.006398][T14769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  763.006415][T14769] RSP: 002b:00007f7a498dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  763.006436][T14769] RAX: ffffffffffffffda RBX: 00007f7a498dd6c0 RCX: 00007f7a4b66d68e
[  763.006451][T14769] RDX: 000000000000000f RSI: 00007f7a498dd0a0 RDI: 0000000000000004
[  763.006463][T14769] RBP: 00007f7a498dd090 R08: 0000000000000000 R09: 0000000000000000
[  763.006476][T14769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  763.006488][T14769] R13: 00007f7a4b926128 R14: 00007f7a4b926090 R15: 00007ffc11d173b8
[  763.006518][T14769]  </TASK>
[  767.973156][ T5611] usb 7-1: device descriptor read/all, error -110
[  768.265598][ T5611] usb 7-1: new full-speed USB device number 45 using dummy_hcd
[  768.412347][T14686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  768.630350][ T5611] usb 7-1: device descriptor read/64, error -32
[  768.792796][ T5611] usb usb7-port1: attempt power cycle
[  769.562621][T14686] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  769.588995][T14686] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  770.607710][T14686] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  770.723869][ T5701] usb 3-1: new full-speed USB device number 78 using dummy_hcd
[  771.703868][T14686] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  774.463837][ T5614] Bluetooth: hci1: command tx timeout
[  776.049668][T14686] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  776.399432][T14686] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  777.385917][T14686] Bluetooth: hci1: command tx timeout
[  777.390867][T14686] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  777.578510][T14686] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  777.579496][T14686] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  779.493465][ T5617] Bluetooth: hci1: command tx timeout
[  779.615991][ T5701] usb usb3-port1: attempt power cycle
[  781.865794][ T5617] Bluetooth: hci5: command tx timeout
[  782.240440][ T5617] Bluetooth: hci1: command tx timeout
[  784.186861][ T5614] Bluetooth: hci5: command tx timeout
[  784.337042][T14831] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3114'.
[  785.216804][T14830] 8021q: VLANs not supported on vxcan1
[  786.237577][ T5614] Bluetooth: hci5: command tx timeout
[  786.273761][ T5614] Bluetooth: hci4: unexpected event 0x20 length: 10 > 7
[  788.318279][ T5614] Bluetooth: hci5: command tx timeout
[  799.814536][    C0] sched: DL replenish lagged too much
[  804.839854][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  806.388614][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  806.437958][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  806.439163][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  806.440266][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  808.050507][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  808.135861][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  808.140852][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  808.629029][T14864] Bluetooth: hci2: command tx timeout
[  809.130725][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  809.130836][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  809.201778][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  809.204264][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  811.113981][ T5614] Bluetooth: hci2: command tx timeout
[  811.166253][T14851] veth1_macvtap: left promiscuous mode
[  811.166287][T14851] macsec0: entered promiscuous mode
[  811.371891][ T5614] Bluetooth: hci6: command tx timeout
[  813.122007][ T5614] Bluetooth: hci2: command tx timeout
[  813.442061][ T5614] Bluetooth: hci6: command tx timeout
[  815.202177][ T5614] Bluetooth: hci2: command tx timeout
[  815.522207][ T5614] Bluetooth: hci6: command tx timeout
[  817.602274][ T5614] Bluetooth: hci6: command tx timeout
[  835.101854][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  835.307599][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  835.309271][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  835.458796][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  835.606728][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  835.703109][T14800] bridge0: port 1(bridge_slave_0) entered blocking state
[  835.703411][T14800] bridge0: port 1(bridge_slave_0) entered disabled state
[  835.703698][T14800] bridge_slave_0: entered allmulticast mode
[  835.707763][T14800] bridge_slave_0: entered promiscuous mode
[  835.728348][T14800] bridge0: port 2(bridge_slave_1) entered blocking state
[  835.728701][T14800] bridge0: port 2(bridge_slave_1) entered disabled state
[  835.728925][T14800] bridge_slave_1: entered allmulticast mode
[  835.890767][T14800] bridge_slave_1: entered promiscuous mode
[  837.869628][ T5614] Bluetooth: hci4: command tx timeout
[  839.091801][ T5617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  839.169961][ T5617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  839.181823][ T5617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  839.225499][ T5617] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  839.236294][ T5617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  840.013631][T14686] Bluetooth: hci4: command tx timeout
[  842.082879][ T5614] Bluetooth: hci4: command tx timeout
[  842.842962][ T5617] Bluetooth: hci7: command tx timeout
[  844.162792][ T5614] Bluetooth: hci4: command tx timeout
[  844.886172][ T5614] Bluetooth: hci7: command tx timeout
[  846.963816][ T5614] Bluetooth: hci7: command tx timeout
[  849.052936][ T5617] Bluetooth: hci7: command tx timeout
[  867.804667][T14855] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR
[  867.951323][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  868.107591][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  868.137858][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  868.155271][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  868.157575][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  870.544996][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  870.545104][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  872.277595][ T5617] Bluetooth: hci1: command tx timeout
[  872.324779][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  873.459326][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  873.490744][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  873.501079][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  873.512739][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  874.919571][ T5614] Bluetooth: hci1: command tx timeout
[  876.732978][ T5614] Bluetooth: hci3: command tx timeout
[  876.971093][ T5614] Bluetooth: hci1: command tx timeout
[  878.857305][ T5614] Bluetooth: hci3: command tx timeout
[  879.129044][ T5614] Bluetooth: hci1: command tx timeout
[  881.550400][ T5614] Bluetooth: hci3: command tx timeout
[  881.609791][T14862] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR
[  883.712917][ T5617] Bluetooth: hci3: command tx timeout
[  892.442175][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  892.520282][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  892.534503][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  892.537174][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  892.537957][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  894.856562][ T5617] Bluetooth: hci2: command tx timeout
[  897.246316][ T5614] Bluetooth: hci2: command tx timeout
[  899.386989][ T5614] Bluetooth: hci2: command tx timeout
[  901.529454][ T5614] Bluetooth: hci2: command tx timeout
[  902.816139][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  902.957854][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  903.049709][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  903.051336][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  903.052127][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  905.203654][ T5614] Bluetooth: hci5: command tx timeout
[  907.283502][ T5614] Bluetooth: hci5: command tx timeout
[  909.410026][ T5614] Bluetooth: hci5: command tx timeout
[  911.540363][ T5614] Bluetooth: hci5: command tx timeout
[  927.962130][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  928.027874][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  928.048247][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  928.097989][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  928.098885][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  930.427029][ T5617] Bluetooth: hci6: command tx timeout
[  932.483036][ T5617] Bluetooth: hci6: command tx timeout
[  932.819077][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  932.819188][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  934.733786][ T5614] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  934.779960][ T5614] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  934.810960][ T5614] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  934.826923][ T5614] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  934.877704][ T5614] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  935.758322][ T5617] Bluetooth: hci6: command tx timeout
[  937.842930][ T5614] Bluetooth: hci6: command tx timeout
[  937.848674][ T5614] Bluetooth: hci8: command tx timeout
[  939.923028][ T5614] Bluetooth: hci8: command tx timeout
[  942.003034][ T5614] Bluetooth: hci8: command tx timeout
[  944.096666][ T5614] Bluetooth: hci8: command tx timeout
[  959.898535][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  959.969779][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  959.987105][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  960.018984][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  960.021332][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  962.162960][ T5617] Bluetooth: hci3: command tx timeout
[  964.289595][T14686] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  964.342037][T14686] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  964.346693][T14686] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  964.478537][T14686] Bluetooth: hci4: command 0x0406 tx timeout
[  964.478573][T14686] Bluetooth: hci3: command tx timeout
[  964.684096][T14864] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  964.685865][T14864] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  966.793993][T14864] Bluetooth: hci7: command 0x0406 tx timeout
[  966.794054][T14864] Bluetooth: hci3: command tx timeout
[  968.764880][ T5617] Bluetooth: hci9: command tx timeout
[  968.803453][ T5614] Bluetooth: hci3: command tx timeout
[  970.859459][ T5614] Bluetooth: hci9: command tx timeout
[  974.036711][T14686] Bluetooth: hci9: command tx timeout
[  976.374303][T14686] Bluetooth: hci9: command tx timeout
[  989.776116][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  989.835873][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  989.867305][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  989.897453][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  989.901032][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  990.543500][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  990.604839][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  990.606955][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  990.672126][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  990.683124][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  992.402991][T14686] Bluetooth: hci0: command tx timeout
[  992.963097][ T5614] Bluetooth: hci2: command tx timeout
[  994.483234][ T5614] Bluetooth: hci0: command tx timeout
[  995.042974][ T5614] Bluetooth: hci2: command tx timeout
[  995.442969][ T5614] Bluetooth: hci1: command 0x0406 tx timeout
[  995.567998][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  995.576509][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  996.697963][T14686] Bluetooth: hci0: command tx timeout
[  997.123016][T14686] Bluetooth: hci2: command tx timeout
[  998.722839][T14686] Bluetooth: hci0: command tx timeout
[  999.262958][ T5614] Bluetooth: hci2: command tx timeout
[ 1016.772446][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1016.836257][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1016.840488][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1016.842632][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1016.868009][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1019.270755][T14686] Bluetooth: hci5: command tx timeout
[ 1021.293773][ T5614] Bluetooth: hci5: command tx timeout
[ 1023.899408][T14686] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1023.944712][T14686] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1023.948049][T14686] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1023.965384][T14686] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1023.969936][T14686] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1024.579380][ T5614] Bluetooth: hci5: command tx timeout
[ 1026.243337][T14686] Bluetooth: hci6: command tx timeout
[ 1026.643144][ T5614] Bluetooth: hci5: command tx timeout
[ 1028.327147][T14686] Bluetooth: hci6: command tx timeout
[ 1030.402868][T14686] Bluetooth: hci6: command tx timeout
[ 1030.533091][   T38] INFO: task syz-executor:14777 blocked for more than 145 seconds.
[ 1030.533091][   T38] INFO: task syz-executor:14777 blocked for more than 145 seconds.
[ 1030.533119][   T38]       Tainted: G             L      syzkaller #0
[ 1030.533131][   T38]       Blocked by coredump.
[ 1030.533137][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1030.533164][   T38] task:syz-executor    state:D stack:20808 pid:14777 tgid:14777 ppid:1      task_flags:0x40054c flags:0x00080003
[ 1030.533220][   T38] Call Trace:
[ 1030.533228][   T38]  <TASK>
[ 1030.533242][   T38]  __schedule+0x172b/0x5550
[ 1030.533271][   T38]  ? __lock_acquire+0x6b5/0x2d10
[ 1030.533318][   T38]  ? __pfx___schedule+0x10/0x10
[ 1030.533354][   T38]  rt_mutex_schedule+0x76/0xf0
[ 1030.533382][   T38]  rt_mutex_slowlock_block+0x505/0x670
[ 1030.533429][   T38]  rt_mutex_slowlock+0x2dc/0x780
[ 1030.533451][   T38]  ? rt_mutex_slowlock+0x1fd/0x780
[ 1030.533471][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1030.533501][   T38]  ? rcu_barrier+0x4c/0x580
[ 1030.533524][   T38]  ? rcu_barrier+0x4c/0x580
[ 1030.533561][   T38]  ? rcu_barrier+0x4c/0x580
[ 1030.533577][   T38]  mutex_lock_nested+0x168/0x1d0
[ 1030.533606][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1030.533630][   T38]  rcu_barrier+0x4c/0x580
[ 1030.533658][   T38]  netdev_run_todo+0x2ff/0x12c0
[ 1030.533690][   T38]  ? rtnl_is_locked+0x9/0x20
[ 1030.533719][   T38]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1030.533746][   T38]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1030.533776][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1030.533807][   T38]  ? netdev_state_change+0x1ca/0x220
[ 1030.533831][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[ 1030.533853][   T38]  tun_chr_close+0x13f/0x1c0
[ 1030.533875][   T38]  __fput+0x461/0xa70
[ 1030.533906][   T38]  task_work_run+0x1d9/0x270
[ 1030.533934][   T38]  ? __pfx_task_work_run+0x10/0x10
[ 1030.533959][   T38]  ? do_exit+0x70a/0x22c0
[ 1030.533979][   T38]  ? kmem_cache_free+0x187/0x6c0
[ 1030.534001][   T38]  ? put_net+0x191/0x260
[ 1030.534028][   T38]  ? do_exit+0x70a/0x22c0
[ 1030.534052][   T38]  do_exit+0x70f/0x22c0
[ 1030.534076][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1030.534105][   T38]  ? __pfx_do_exit+0x10/0x10
[ 1030.534126][   T38]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1030.534146][   T38]  ? reacquire_held_locks+0x104/0x190
[ 1030.534174][   T38]  ? rt_spin_lock+0x1e0/0x400
[ 1030.534204][   T38]  do_group_exit+0x21b/0x2d0
[ 1030.534228][   T38]  ? rt_spin_unlock+0x160/0x200
[ 1030.534250][   T38]  get_signal+0x1284/0x1330
[ 1030.534297][   T38]  arch_do_signal_or_restart+0xbc/0x840
[ 1030.547648][   T38]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1030.547705][   T38]  exit_to_user_mode_loop+0x104/0x710
[ 1030.547733][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1030.547783][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1030.547805][   T38]  do_syscall_64+0x353/0x580
[ 1030.547830][   T38]  ? trace_irq_disable+0x3b/0x140
[ 1030.547851][   T38]  ? clear_bhb_loop+0x40/0x90
[ 1030.547872][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1030.547892][   T38] RIP: 0033:0x7fabb3bed68e
[ 1030.547910][   T38] RSP: 002b:00007ffc0c37aa18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1030.547930][   T38] RAX: 0000000000000048 RBX: 000055557c629500 RCX: 00007fabb3bed68e
[ 1030.547944][   T38] RDX: 0000000000000048 RSI: 00007fabb49d4670 RDI: 0000000000000003
[ 1030.547980][   T38] RBP: 0000000000000001 R08: 00007ffc0c37aa94 R09: 000000000000000c
[ 1030.547994][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1030.548006][   T38] R13: 0000000000000000 R14: 00007fabb49d4670 R15: 0000000000000000
[ 1030.548032][   T38]  </TASK>
[ 1030.548043][   T38] INFO: task syz-executor:14800 blocked for more than 145 seconds.
[ 1030.548061][   T38]       Tainted: G             L      syzkaller #0
[ 1030.548072][   T38]       Blocked by coredump.
[ 1030.548079][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1030.548087][   T38] task:syz-executor    state:D stack:19808 pid:14800 tgid:14800 ppid:1      task_flags:0x40054c flags:0x00080003
[ 1030.548137][   T38] Call Trace:
[ 1030.548145][   T38]  <TASK>
[ 1030.548156][   T38]  __schedule+0x172b/0x5550
[ 1030.548179][   T38]  ? __lock_acquire+0x6b5/0x2d10
[ 1030.548228][   T38]  ? __pfx___schedule+0x10/0x10
[ 1030.548265][   T38]  rt_mutex_schedule+0x76/0xf0
[ 1030.548291][   T38]  rt_mutex_slowlock_block+0x505/0x670
[ 1030.548343][   T38]  rt_mutex_slowlock+0x2dc/0x780
[ 1030.548365][   T38]  ? rt_mutex_slowlock+0x1fd/0x780
[ 1030.548385][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1030.548415][   T38]  ? rcu_barrier+0x4c/0x580
[ 1030.548438][   T38]  ? rcu_barrier+0x4c/0x580
[ 1030.548462][   T38]  ? rcu_barrier+0x4c/0x580
[ 1030.548479][   T38]  mutex_lock_nested+0x168/0x1d0
[ 1030.548533][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1030.548558][   T38]  rcu_barrier+0x4c/0x580
[ 1030.548586][   T38]  netdev_run_todo+0x2ff/0x12c0
[ 1030.548616][   T38]  ? rtnl_is_locked+0x9/0x20
[ 1030.548645][   T38]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1030.548672][   T38]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1030.548702][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1030.548733][   T38]  ? netdev_state_change+0x1ca/0x220
[ 1030.548757][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[ 1030.548778][   T38]  tun_chr_close+0x13f/0x1c0
[ 1030.548800][   T38]  __fput+0x461/0xa70
[ 1030.548831][   T38]  task_work_run+0x1d9/0x270
[ 1030.548860][   T38]  ? __pfx_task_work_run+0x10/0x10
[ 1030.548884][   T38]  ? do_exit+0x70a/0x22c0
[ 1030.548902][   T38]  ? kmem_cache_free+0x187/0x6c0
[ 1030.548921][   T38]  ? put_net+0x191/0x260
[ 1030.548945][   T38]  ? do_exit+0x70a/0x22c0
[ 1030.548971][   T38]  do_exit+0x70f/0x22c0
[ 1030.548995][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1030.549022][   T38]  ? __pfx_do_exit+0x10/0x10
[ 1030.549041][   T38]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1030.549060][   T38]  ? reacquire_held_locks+0x104/0x190
[ 1030.549085][   T38]  ? rt_spin_lock+0x1e0/0x400
[ 1030.549115][   T38]  do_group_exit+0x21b/0x2d0
[ 1030.549137][   T38]  ? rt_spin_unlock+0x160/0x200
[ 1030.549159][   T38]  get_signal+0x1284/0x1330
[ 1030.549206][   T38]  arch_do_signal_or_restart+0xbc/0x840
[ 1030.549231][   T38]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1030.549250][   T38]  ? kmem_cache_free+0x526/0x6c0
[ 1030.549288][   T38]  exit_to_user_mode_loop+0x104/0x710
[ 1030.549312][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1030.549341][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1030.549363][   T38]  do_syscall_64+0x353/0x580
[ 1030.549387][   T38]  ? trace_irq_disable+0x3b/0x140
[ 1030.549410][   T38]  ? clear_bhb_loop+0x40/0x90
[ 1030.549434][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1030.549454][   T38] RIP: 0033:0x7fe606c0d68e
[ 1030.549472][   T38] RSP: 002b:00007fff3c41ede8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1030.549492][   T38] RAX: 0000000000000088 RBX: 0000555559879500 RCX: 00007fe606c0d68e
[ 1030.549506][   T38] RDX: 0000000000000088 RSI: 00007fe6079f4670 RDI: 0000000000000003
[ 1030.549518][   T38] RBP: 0000000000000001 R08: 00007fff3c41ee64 R09: 000000000000000c
[ 1030.549540][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1030.549552][   T38] R13: 0000000000000000 R14: 00007fe6079f4670 R15: 0000000000000000
[ 1030.549581][   T38]  </TASK>
[ 1030.549639][   T38] 
[ 1030.549639][   T38] Showing all locks held in the system:
[ 1030.549720][   T38] 5 locks held by ktimers/0/16:
[ 1030.549767][   T38]  #0: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1030.549920][   T38]  #1: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1030.549974][   T38]  #2: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[ 1030.550018][   T38]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1030.550059][   T38]  #4: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[ 1030.550111][   T38] 5 locks held by ksoftirqd/1/31:
[ 1030.550122][   T38]  #0: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1030.550174][   T38]  #1: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1030.550225][   T38]  #2: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[ 1030.550268][   T38]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[ 1030.550318][   T38]  #4: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0
[ 1030.550362][   T38] 1 lock held by khungtaskd/38:
[ 1030.550372][   T38]  #0: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1030.550419][   T38] 3 locks held by kworker/u8:3/57:
[ 1030.550430][   T38]  #0: ffff888032977138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1030.550483][   T38]  #1: ffffc9000123fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1030.550546][   T38]  #2: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[ 1030.550623][   T38] 2 locks held by getty/5362:
[ 1030.550634][   T38]  #0: ffff888036e5c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1030.550725][   T38]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x465/0x1490
[ 1030.550782][   T38] 3 locks held by kworker/0:4/5701:
[ 1030.550793][   T38]  #0: ffff88813fe57938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1030.550844][   T38]  #1: ffffc90004be7c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1030.550897][   T38]  #2: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.550947][   T38] 4 locks held by kworker/u8:31/7383:
[ 1030.550958][   T38]  #0: ffff88801be9e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1030.551009][   T38]  #1: ffffc90003af7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1030.551058][   T38]  #2: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1030.551103][   T38]  #3: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.551151][   T38] 6 locks held by kworker/1:9/12146:
[ 1030.551163][   T38]  #0: ffff88813fe56538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1030.551216][   T38]  #1: ffffc9000d9dfc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1030.551271][   T38]  #2: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1030.551322][   T38]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1030.551376][   T38]  #4: ffffffff8f8e0778 (&tbl->lock){+...}-{3:3}, at: neigh_periodic_work+0x73/0xe90
[ 1030.551423][   T38]  #5: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1030.551471][   T38] 1 lock held by syz.0.3083/14726:
[ 1030.551482][   T38]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.551542][   T38] 1 lock held by syz-executor/14777:
[ 1030.551554][   T38]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.551597][   T38] 1 lock held by syz-executor/14800:
[ 1030.551609][   T38]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.551653][   T38] 1 lock held by syz.5.3124/14843:
[ 1030.551664][   T38]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.551714][   T38] 1 lock held by syz-executor/14855:
[ 1030.551730][   T38]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.551773][   T38] 1 lock held by syz-executor/14862:
[ 1030.551784][   T38]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.551829][   T38] 2 locks held by syz-executor/14900:
[ 1030.551840][   T38]  #0: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1030.551885][   T38]  #1: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.551929][   T38] 2 locks held by syz-executor/14908:
[ 1030.551940][   T38]  #0: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1030.551982][   T38]  #1: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.552025][   T38] 2 locks held by syz-executor/14934:
[ 1030.552035][   T38]  #0: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1030.552078][   T38]  #1: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.552122][   T38] 1 lock held by syz-executor/14964:
[ 1030.552134][   T38]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.552178][   T38] 1 lock held by syz-executor/14973:
[ 1030.552189][   T38]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.552233][   T38] 1 lock held by syz-executor/15005:
[ 1030.552244][   T38]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.552287][   T38] 1 lock held by syz-executor/15010:
[ 1030.552298][   T38]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1030.552343][   T38] 1 lock held by syz-executor/15042:
[ 1030.552354][   T38]  #0: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[ 1030.552400][   T38] 1 lock held by syz-executor/15047:
[ 1030.552411][   T38]  #0: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[ 1030.552455][   T38] 2 locks held by syz-executor/15080:
[ 1030.552466][   T38]  #0: ffffffff8fd15308 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1030.552518][   T38]  #1: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[ 1030.552574][   T38] 2 locks held by syz-executor/15081:
[ 1030.552586][   T38]  #0: ffffffff8ef133c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1030.552637][   T38]  #1: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[ 1030.552685][   T38] 2 locks held by syz-executor/15120:
[ 1030.552696][   T38]  #0: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1030.565182][   T38]  #1: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x850
[ 1030.565234][   T38] 4 locks held by syz-executor/15130:
[ 1030.565247][   T38]  #0: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1030.565290][   T38]  #1: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x850
[ 1030.565335][   T38]  #2: ffffffff8f7a1560 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x28/0x110
[ 1030.565383][   T38]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1030.565432][   T38] 
[ 1030.565514][   T38] =============================================
[ 1030.565514][   T38] 
[ 1030.565566][   T38] NMI backtrace for cpu 1
[ 1030.565584][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1030.565615][   T38] Tainted: [L]=SOFTLOCKUP
[ 1030.565622][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1030.565633][   T38] Call Trace:
[ 1030.565641][   T38]  <TASK>
[ 1030.565650][   T38]  dump_stack_lvl+0xe8/0x150
[ 1030.565678][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 1030.565741][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1030.565767][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[ 1030.565790][   T38]  sys_info+0x135/0x170
[ 1030.565817][   T38]  watchdog+0xfd3/0x1030
[ 1030.565847][   T38]  ? watchdog+0x1c9/0x1030
[ 1030.565875][   T38]  kthread+0x388/0x470
[ 1030.565897][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1030.565917][   T38]  ? __pfx_kthread+0x10/0x10
[ 1030.565939][   T38]  ret_from_fork+0x514/0xb70
[ 1030.565964][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1030.565987][   T38]  ? __switch_to+0xc79/0x1410
[ 1030.566008][   T38]  ? __pfx_kthread+0x10/0x10
[ 1030.566030][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1030.566068][   T38]  </TASK>
[ 1030.566089][   T38] Sending NMI from CPU 1 to CPUs 0:
[ 1030.566121][    C0] NMI backtrace for cpu 0
[ 1030.566137][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1030.566159][    C0] Tainted: [L]=SOFTLOCKUP
[ 1030.566165][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1030.566175][    C0] RIP: 0010:save_dst_trace_buffer+0x1a2/0x5b0
[ 1030.566200][    C0] Code: f7 dc 48 89 1c 24 48 8d 9b 80 b5 80 9a 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 74 08 48 89 df e8 12 69 1a f9 48 83 3b 00 <74> 07 e8 27 91 ae f8 eb 23 48 89 df be 08 00 00 00 e8 98 6b 1a f9
[ 1030.566214][    C0] RSP: 0018:ffffc90000156a20 EFLAGS: 00000282
[ 1030.566228][    C0] RAX: dffffc0000000000 RBX: ffffffff9a82cdc0 RCX: ffff88801de88000
[ 1030.566241][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[ 1030.566251][    C0] RBP: ffffc90000156bc0 R08: 0000000000000000 R09: 0000000000000100
[ 1030.566261][    C0] R10: ffffc90000156980 R11: fffff5200002ad34 R12: e00000000cafa647
[ 1030.566273][    C0] R13: e00000000cafa646 R14: 1ffffffff35059b8 R15: e00000000cafa646
[ 1030.566285][    C0] FS:  0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000
[ 1030.566298][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1030.566309][    C0] CR2: 0000559a044b2ab8 CR3: 000000007e166000 CR4: 00000000003526f0
[ 1030.566324][    C0] Call Trace:
[ 1030.566329][    C0]  <TASK>
[ 1030.566339][    C0]  ? __pfx_save_dst_trace_buffer+0x10/0x10
[ 1030.566359][    C0]  ? ref_tracker_alloc+0x2c2/0x4a0
[ 1030.566380][    C0]  ? dst_init+0x26d/0x490
[ 1030.566398][    C0]  ? dst_alloc+0x12a/0x170
[ 1030.566416][    C0]  ? ip_route_output_key_hash_rcu+0x14d0/0x25e0
[ 1030.566432][    C0]  ? ip_route_output_key_hash+0x18d/0x2a0
[ 1030.566446][    C0]  ? ip_route_output_flow+0x2a/0x150
[ 1030.566466][    C0]  ? ip_route_me_harder+0x742/0xf90
[ 1030.566487][    C0]  ? synproxy_send_tcp+0x34c/0x670
[ 1030.566563][    C0]  ? synproxy_send_client_synack+0x8c1/0xe30
[ 1030.566584][    C0]  ? nft_synproxy_eval_v4+0x34a/0x4e0
[ 1030.566651][    C0]  ? nft_synproxy_do_eval+0x305/0x580
[ 1030.566672][    C0]  ? nft_do_chain+0x48d/0x1ae0
[ 1030.566709][    C0]  ? nft_do_chain_inet+0x360/0x4b0
[ 1030.566745][    C0]  ? nf_hook_slow+0xc5/0x220
[ 1030.566765][    C0]  ? NF_HOOK+0x21f/0x3c0
[ 1030.566782][    C0]  ? NF_HOOK+0x336/0x3c0
[ 1030.566799][    C0]  ? process_backlog+0x569/0xc60
[ 1030.566813][    C0]  ? __napi_poll+0xab/0x550
[ 1030.566833][    C0]  ? net_rx_action+0x696/0xe00
[ 1030.566847][    C0]  ? handle_softirqs+0x1de/0x6d0
[ 1030.566868][    C0]  ? run_ktimerd+0x69/0x100
[ 1030.566882][    C0]  ? nf_hook_slow+0xc5/0x220
[ 1030.566901][    C0]  ? NF_HOOK+0x21f/0x3c0
[ 1030.566918][    C0]  ? NF_HOOK+0x336/0x3c0
[ 1030.566934][    C0]  ? process_backlog+0x569/0xc60
[ 1030.566949][    C0]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1030.566975][    C0]  dst_init+0x26d/0x490
[ 1030.566996][    C0]  dst_alloc+0x12a/0x170
[ 1030.567017][    C0]  ip_route_output_key_hash_rcu+0x14d0/0x25e0
[ 1030.567042][    C0]  ? ip_route_output_key_hash+0xd8/0x2a0
[ 1030.567057][    C0]  ip_route_output_key_hash+0x18d/0x2a0
[ 1030.567074][    C0]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[ 1030.567095][    C0]  ip_route_output_flow+0x2a/0x150
[ 1030.567116][    C0]  ? ip_route_me_harder+0x730/0xf90
[ 1030.567138][    C0]  ip_route_me_harder+0x742/0xf90
[ 1030.567164][    C0]  ? __pfx_ip_route_me_harder+0x10/0x10
[ 1030.567192][    C0]  ? __cookie_v4_init_sequence+0x25d/0x500
[ 1030.567210][    C0]  ? kmem_cache_alloc_node_noprof+0x2a7/0x710
[ 1030.567236][    C0]  synproxy_send_tcp+0x34c/0x670
[ 1030.567259][    C0]  synproxy_send_client_synack+0x8c1/0xe30
[ 1030.567285][    C0]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[ 1030.567307][    C0]  ? nft_jhash_init+0x4c8/0x670
[ 1030.567326][    C0]  ? synproxy_pernet+0x45/0x270
[ 1030.567350][    C0]  nft_synproxy_eval_v4+0x34a/0x4e0
[ 1030.567374][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[ 1030.567397][    C0]  ? nf_ip_checksum+0x13c/0x510
[ 1030.567414][    C0]  nft_synproxy_do_eval+0x305/0x580
[ 1030.567438][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 1030.567467][    C0]  nft_do_chain+0x48d/0x1ae0
[ 1030.567482][    C0]  ? unwind_next_frame+0xa6/0x2550
[ 1030.567508][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[ 1030.567522][    C0]  ? unwind_next_frame+0xa6/0x2550
[ 1030.567553][    C0]  ? __lock_acquire+0x6b5/0x2d10
[ 1030.567575][    C0]  nft_do_chain_inet+0x360/0x4b0
[ 1030.567591][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1030.567610][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1030.567627][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1030.567645][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1030.567660][    C0]  nf_hook_slow+0xc5/0x220
[ 1030.567682][    C0]  NF_HOOK+0x21f/0x3c0
[ 1030.567700][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1030.567719][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1030.567736][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1030.567753][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[ 1030.567772][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1030.567793][    C0]  ? ip_local_deliver+0x12a/0x1b0
[ 1030.567813][    C0]  NF_HOOK+0x336/0x3c0
[ 1030.567829][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1030.567850][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1030.567867][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1030.567884][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1030.567903][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1030.567924][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1030.567941][    C0]  ? process_backlog+0x271/0xc60
[ 1030.567955][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1030.567973][    C0]  process_backlog+0x569/0xc60
[ 1030.567988][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1030.568012][    C0]  __napi_poll+0xab/0x550
[ 1030.568039][    C0]  net_rx_action+0x696/0xe00
[ 1030.568059][    C0]  ? __pfx_net_rx_action+0x10/0x10
[ 1030.568086][    C0]  handle_softirqs+0x1de/0x6d0
[ 1030.568110][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[ 1030.568125][    C0]  run_ktimerd+0x69/0x100
[ 1030.568141][    C0]  smpboot_thread_fn+0x541/0xa50
[ 1030.568156][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[ 1030.568174][    C0]  kthread+0x388/0x470
[ 1030.568190][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1030.568205][    C0]  ? __pfx_kthread+0x10/0x10
[ 1030.568222][    C0]  ret_from_fork+0x514/0xb70
[ 1030.568240][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1030.568257][    C0]  ? __switch_to+0xc79/0x1410
[ 1030.568272][    C0]  ? __pfx_kthread+0x10/0x10
[ 1030.568289][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1030.568314][    C0]  </TASK>
[ 1030.582790][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1030.582812][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1030.582841][   T38] Tainted: [L]=SOFTLOCKUP
[ 1030.582849][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1030.582860][   T38] Call Trace:
[ 1030.582869][   T38]  <TASK>
[ 1030.582878][   T38]  vpanic+0x56c/0xa60
[ 1030.582908][   T38]  ? __pfx___schedule+0x10/0x10
[ 1030.582932][   T38]  ? __pfx_vpanic+0x10/0x10
[ 1030.582967][   T38]  panic+0xc5/0xd0
[ 1030.582993][   T38]  ? __pfx_panic+0x10/0x10
[ 1030.583021][   T38]  ? preempt_schedule_thunk+0x16/0x40
[ 1030.583054][   T38]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[ 1030.583078][   T38]  watchdog+0x102c/0x1030
[ 1030.583109][   T38]  ? watchdog+0x1c9/0x1030
[ 1030.583136][   T38]  kthread+0x388/0x470
[ 1030.583159][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1030.583178][   T38]  ? __pfx_kthread+0x10/0x10
[ 1030.583200][   T38]  ret_from_fork+0x514/0xb70
[ 1030.583226][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1030.583249][   T38]  ? __switch_to+0xc79/0x1410
[ 1030.583271][   T38]  ? __pfx_kthread+0x10/0x10
[ 1030.583294][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1030.583330][   T38]  </TASK>
[ 1030.583597][   T38] Kernel Offset: disabled