last executing test programs:

14m1.759322852s ago: executing program 2 (id=3329):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = dup(r0)
ioctl$FIONREAD(r1, 0x8001af85, &(0x7f0000000180))

14m1.628803913s ago: executing program 2 (id=3331):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x4008811) (async)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0xe8)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x400, 0xfffffff7, {<r3=>0xffffffffffffffff}, {r2}, 0x4, 0x8000000000000002})
sched_getattr(r3, &(0x7f0000000180)={0x38}, 0x38, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000000) (async)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa6f81, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085)
keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r6 = socket(0x11, 0x800000002, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={'virt_wifi0\x00', {0x2, 0x0, @private=0xf30a4000}}) (async)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x9, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x2, 0x43, &(0x7f00000007c0)=""/67, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xd, 0x9, 0x20000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7fffffff}, 0x94) (async)
write$UHID_INPUT(r8, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) (async)
ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000300)={0x2, 0x12c, @ioapic={0x80a0000, 0x9, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x5, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x8, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x49, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x81, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xfe}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0xb}, {0x2, 0x0, 0x1, '\x00', 0x7f}, {0x45, 0x51, 0x6, '\x00', 0x8}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x3, '\x00', 0x7}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd2, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x8, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x0, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0xb, 0x0, '\x00', 0x6}]}}) (async)
dup2(r4, r4) (async)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x7fffffff)

14m0.625017948s ago: executing program 2 (id=3335):
capset(0x0, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = fanotify_init(0x200, 0x48801)
fanotify_mark(r4, 0x1, 0x1001, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x7, 0x4)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x8, 0xffffffff})
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
recvmsg$kcm(r6, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540))
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840)
socket$nl_netfilter(0x10, 0x3, 0xc)

13m58.591413033s ago: executing program 2 (id=3343):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b"])
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
r5 = getpgid(0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
r6 = syz_pidfd_open(r5, 0x0)
pidfd_send_signal(r6, 0x21, 0x0, 0x4)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x7fec, @mcast2, 0x5}, 0x1a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)

13m55.238805917s ago: executing program 2 (id=3368):
r0 = fanotify_init(0x200, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, 0x0}, @name="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"})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r2}, 0x38)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x3, r2}, 0x38)
fanotify_mark(r0, 0x1, 0x8000009, r1, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x39, 0x1a, r3, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89f3, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"})
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)={0x84, 0x8, 0x2, 0xa, 0x0, [@loopback, @empty, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, 0x48)

13m54.356757861s ago: executing program 2 (id=3369):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000200)=@ethtool_regs={0x4, 0x0, 0x22, "2a161d2d7137f20a8f1597f02515fcead4e12da07d070ae7b6f057150c6ce28437f3"}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}})

13m53.919022701s ago: executing program 32 (id=3369):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000200)=@ethtool_regs={0x4, 0x0, 0x22, "2a161d2d7137f20a8f1597f02515fcead4e12da07d070ae7b6f057150c6ce28437f3"}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}})

3m54.455085923s ago: executing program 4 (id=6216):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40a00, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f00000004c0)=@x86={0x7b, 0x40, 0x27, 0x0, 0x2, 0x5, 0x4, 0x7f, 0x8, 0x9, 0x2, 0x7, 0x0, 0x96a7, 0x8, 0x6, 0x27, 0xfa, 0x3, '\x00', 0x8, 0x5})
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x431, 0x0, 0x8, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xfd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000894}, 0x20004010)
syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100008b4cd740402053d8f6f8410203010902120001020000000904"], 0x0)

3m50.929162065s ago: executing program 4 (id=6228):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)

3m50.262151398s ago: executing program 4 (id=6229):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000780)=ANY=[@ANYBLOB="0001"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048094)

3m49.789185966s ago: executing program 4 (id=6234):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000004c0)=@secondary)
add_key$keyring(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

3m48.773408265s ago: executing program 4 (id=6238):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x20004804)

3m47.330747905s ago: executing program 4 (id=6245):
socket(0x10, 0x3, 0x0)
socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
pipe2(&(0x7f0000000200)={<r2=>0x0, <r3=>0x0}, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff})
ppoll(&(0x7f0000000080)=[{r4, 0x491}], 0x1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000300)="01", 0x1)
write(0xffffffffffffffff, &(0x7f0000000100)="2800000014000100000000000000000001000000ffffffff0000000000000000ffffff", 0x23)
socket$unix(0x1, 0x1, 0x0)
read(r2, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
unshare(0x6a060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f0000000b80)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000002840)=""/4101, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x64}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

3m46.342160365s ago: executing program 33 (id=6245):
socket(0x10, 0x3, 0x0)
socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
pipe2(&(0x7f0000000200)={<r2=>0x0, <r3=>0x0}, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff})
ppoll(&(0x7f0000000080)=[{r4, 0x491}], 0x1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000300)="01", 0x1)
write(0xffffffffffffffff, &(0x7f0000000100)="2800000014000100000000000000000001000000ffffffff0000000000000000ffffff", 0x23)
socket$unix(0x1, 0x1, 0x0)
read(r2, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
unshare(0x6a060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f0000000b80)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000002840)=""/4101, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x64}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

1m8.343193288s ago: executing program 6 (id=6844):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xe00)
syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500002800000000000690780a210104ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6b490835ef717800f40000"], 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001200578300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x38}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001200578300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x38}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000340)=0xff) (async)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000340)=0xff)
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) (async)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000}) (async)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000})
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000001c0)={0x0, r4})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) (async)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680))
fremovexattr(0xffffffffffffffff, &(0x7f0000000180)=@random={'user.', 'l2tp\x00'})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1)
readv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/90, 0x5a}], 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x4001, 0x3, 0x430, 0x300, 0xb, 0x148, 0x0, 0x148, 0x398, 0x230, 0x242, 0x398, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x4, 0x0, 0x2, 0x5775d278, 0x1ff, 0x1}, 0x20)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x1ad)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r7, 0x40a0ae49, &(0x7f0000000000)={0x6, 0x10000, 0x0, r5, 0x100000}) (async)
ioctl$KVM_IOEVENTFD(r7, 0x40a0ae49, &(0x7f0000000000)={0x6, 0x10000, 0x0, r5, 0x100000})
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000600)={0x2, 0x0, &(0x7f0000000380)=""/202, &(0x7f0000000480)=""/87, &(0x7f0000000580)=""/104, 0x8000000})
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000001c0)={r10, 0x1}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000001c0)={r10, 0x1}, 0x8)

1m5.109421496s ago: executing program 6 (id=6849):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x40)
flock(r2, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
pwrite64(r4, &(0x7f0000000380)='k', 0x1, 0xc)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x1, 0x10, 0x40, 0x64, 0x0, 0xff, 0x6, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x5, 0x0, 0x1, 0x9, 0x4, 0x4, 0x4e21, 0x4e21, 0x1, 0x1}}}}}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000240)}, 0x10)
write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0x9ffc)
close_range(0xffffffffffffffff, r2, 0x0)
r7 = timerfd_create(0x1, 0x0)
timerfd_settime(r7, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xa0, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x5, 0xd}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x40, 0x6, 0x2, 0x20, 0xfc}, 0xb, &(0x7f0000000140)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x0, 0x0}, {0x8a, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1007}}]})
r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0xd)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r9, 0x2007ffb)
sendfile(r8, r9, 0x0, 0x1000000201002)
r10 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20001)
ioctl$IOC_PR_RESERVE(r10, 0x401070c9, 0x0)
flock(r1, 0x1)
open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9f02e7ae1a91adac}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00082abd7000fbdbdf258600000008003100060000000800220176020000080022145b194d0008009f0005000000080022013a020000050019010b0000001aaceb89bdc02e620000e84301b7c484e89388c7174644fd"], 0x44}, 0x1, 0x0, 0x0, 0x48d1}, 0x40800)

1m2.81154031s ago: executing program 0 (id=6857):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000a00)="b002401d42b755c94142dfeb56e69ee92fb553bbe868a4be6fba0d398c1476c229eb8a3adcb877aab2b787762fd27d5f6d6ad9a4a2a47ce39ca6e3d760cc358243db3e44e58902158e35675b209a041d546325ceff9884bda4f9fe1902ad539cf6c75b084a384d94e7216a1daa987b43280a330090fe001faf5977e6806a474c3ebbcc323190bad3dfb465dad9653e3c9c24bd86fd965db3adffb3bde57540e967954dd5a1f2389d7348b1a44d938c3f32298bd5e10c28ead285bffb9ff418ce6562a1e417ed73d0f2624bb5796c", 0xce}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8)
close(r2)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40)
ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400))
r5 = getpid()
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setattr(r5, &(0x7f0000000340)={0x38, 0x3, 0x1000002d, 0x12000, 0x299d4, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$binfmt_script(r7, &(0x7f0000001b00), 0xfffffd9d)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x88}}, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b290100010000000109022000010100803209040000"], 0x0)

1m2.000143066s ago: executing program 6 (id=6858):
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x3, 0x63a11720, 0x5, 0xb3, 0x61c, 0x1ff, 0x7, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x8, 0xfffff001, 0xfffffffa, 0xffffe550}}, &(0x7f0000000480)=0xb0)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x2968, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0xd6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0xb, 0xfb}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="0521280000002811f70ba3810300cb4fdca04d0f920d54f365c5b1d43ee44fbf6fb93f0808051fab0489791fb1"], 0x0, 0x0, 0x0, 0x0}, 0x0)

59.605667881s ago: executing program 0 (id=6867):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x90}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$video4linux(&(0x7f0000000180), 0x5, 0x40)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000240)={0x0, 0xfffffffb, 0x1008, 0x1})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
read(r5, &(0x7f0000000840)=""/40, 0x28)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000bc0)={0x800100, 0xfffffffc, 0x0, 0x724f, 0x0, 0x3})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000300)={{0x9, 0xf}, {0x1, 0x4}, 0x1ff, 0x3, 0xc})
r7 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r8 = syz_genetlink_get_family_id$devlink(0x0, r2)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f23b130730d78f9e5c34d16133000873faf3068b8ade7c9bb5a01cbdae4939f2f6c1790cb487ff433ce239d4d50621f93983e5f9aaa4048fc50b2a01b3c73339dcef4820c23abd80019d0db7171207f9028f6948e812907d57", @ANYRES16=r8, @ANYBLOB="080028bd7000fcdbdf2505000000080001007063690011000200303030303a30303a31302e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24000004)
sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRES8=r7, @ANYRESOCT=r8, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4c001}, 0x8c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})

59.277496589s ago: executing program 5 (id=6868):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x44c, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x438, 0x1, [@m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x5, 0x3c, 0x4, 0x0, 0x0, 0x0, 0x9, 0xff, 0xaca7, 0x80, 0x5, 0xd, 0x6, 0x6, 0x2, 0x4, 0xe, 0x5, 0xffff, 0xff5, 0x0, 0x8, 0x78c, 0xf4, 0x6f66, 0x3, 0x1, 0x3, 0x1, 0x2, 0x2, 0xc, 0xa4, 0x3f, 0x9, 0xfffffffc, 0x3, 0x7, 0xfffffffc, 0x2, 0x7f, 0x8, 0x1, 0x200, 0x8, 0xff, 0x101, 0x7, 0x5, 0x7fffffff, 0xf58c, 0x2, 0x4002, 0x6, 0x8, 0xa95, 0x2, 0x4, 0x4d6, 0xfffffffa, 0x5, 0x7, 0xe, 0x8, 0xff, 0x95d0, 0x7, 0x10000, 0x8, 0x10000, 0x1, 0x3, 0x7cc03512, 0xfffffff8, 0x8, 0x10001, 0x5, 0x4, 0x0, 0x9, 0x3, 0x1, 0x7, 0x684f, 0xdfbb, 0xb, 0x5, 0xfffffa21, 0x200, 0xc, 0x6, 0x5, 0x3, 0x9, 0x10000, 0x5, 0xffffffff, 0x39, 0x6, 0xc, 0x100, 0x60000, 0x4b8f, 0x75, 0x80000000, 0x2, 0x1, 0xae, 0x800, 0x8, 0x8, 0x4, 0x4, 0x6, 0x7ff, 0x9, 0xbd, 0x0, 0xfc41, 0x2, 0x2105, 0x3, 0x7c2, 0x6, 0x1, 0x1, 0x2, 0x2, 0x6, 0x0, 0x0, 0x4, 0x50e3, 0xffff, 0x7f, 0x1, 0x2, 0xf1a, 0x5, 0x8, 0xf2, 0x1, 0x1, 0x0, 0xf2, 0x40, 0x7, 0xfffffff8, 0x2, 0x44, 0x5, 0x1, 0xbf, 0x101, 0x800, 0xfffffff9, 0x4, 0x9, 0x9, 0x0, 0x6c2, 0x7, 0xe, 0x8, 0x5, 0x8000, 0x5, 0x7, 0x8, 0x8000, 0xfffffffd, 0x100, 0x5, 0x280b, 0xcb95, 0x0, 0x4, 0x6a8000, 0x8, 0x1, 0x7, 0x0, 0x6, 0x3, 0x8, 0x1, 0x1, 0x6fa, 0xfff, 0xffff, 0x8001, 0xd28, 0x3, 0x8, 0x9, 0x80, 0x7, 0x9f, 0x7, 0x7fff, 0x1a, 0x9, 0xfff, 0x5, 0x6, 0x4, 0xcb, 0xff, 0x7c1, 0x8, 0xfffff5c1, 0x200000, 0x7, 0x6f8, 0x8, 0xfff, 0x10000, 0xe, 0x80000001, 0xf909, 0xfffff730, 0x6, 0x6, 0x5, 0x3, 0x5, 0x2, 0x1ff, 0x1, 0x59e1, 0x6, 0x9, 0x9, 0x401, 0x9, 0x3, 0x11dfeeca, 0x100, 0x8, 0x5, 0x4, 0x10000, 0xfffff0c8, 0x6, 0xce980000, 0x99a, 0xcad, 0x5, 0xd8, 0xfffffb87, 0x5, 0x8, 0x10, 0x7]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x44c}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x4e23, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x5, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a000000021000100000000000000e0ff00000000000000000000000000000000ffffffff000000000000000000000000fffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100ac141440000000000000000003000011fe8000000000000000000000000000aae0000001000000000000000000000000fe8000000000000000000000000000bb3c05"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)

59.082804508s ago: executing program 5 (id=6869):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGABS0(r2, 0x80184540, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c)

58.665396935s ago: executing program 6 (id=6871):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480ff7f0905811765"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
pwritev2(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)="99", 0x1}], 0x1, 0xfffffc01, 0x81, 0x0)
fsopen(&(0x7f0000000040)='ceph\x00', 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f00000001c0)=0x28)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r5, 0x0, 0x0)
close(r5)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x10f, 0xd, 0x0, &(0x7f0000000140))
syz_usb_connect$uac2(0x5, 0xa1, &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x20, 0x9f, "", [{{0x9, 0x4, 0x0, 0x68, 0x1, 0x7, 0x1, 0x3, 0xf1, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xf8, 0x81, 0x2}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xef, 0xe, 0x3, 0x40, 0x7}, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="030a2cc00f3066bdb8048dafcb73ccd1554b7dc31a00126f88c377b62cfcbb4626a5c388fd8b1add041daa9d3082fe76f3fc83b64118415b8378694bc3b95e95ab17a9bc779a237e87d8877a9f2897422767e1f770dfc78a64ca4fdadf03e4cf0b13c76b8b51f164263c290547385dd1f68c9924a1e91ee8a3d49f7caf5c52908a878760d51838f1540800000000875e71d4"], 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0xaa, &(0x7f0000000340)=@string={0xaa, 0x3, "f9b967e8ec26e29efcf55ac3a25c74675cd9c01c9cb924b965f050f9f7bf217e51e8b26e9ae649eca20007f401dee05c8f6fe6fc26df50ef354ba8dbdc78455bb2f5a03ff728b300e127cbced6580ccb8c49fa2380a35b63ee1acb8534c749b9362363d13d2757a3c99ad030dd317826e0a1ba48c5b7ee607355fd5eede11653e05dce61544a764e88e1a8548a3b5fc692047ebd2c8b61b9e32ea9c5c880fd00ee92299bcadc80ad"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140c}}, {0x37, &(0x7f0000000240)=@string={0x37, 0x3, "bea962c656611f792bea34ccf4254725e735a1b12834e06e5d197d29f9f078cb7505a434dc0657a6821092daa79924523456c7dd6a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x439}}]})
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x801, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@dev={0xfe, 0x80, '\x00', 0x20}, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x21, 0x11f, 0x7, 0x0, 0x2000, 0x800010, r7})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query, @ldst={0x3, 0x2, 0x4, 0x0, 0x9, 0x0, 0x8}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x80, 0x0, 0x0, 0x417cd1bbc0dca426, 0x4, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0x9, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[r8], &(0x7f0000000500)=[{0x1, 0x4, 0xd, 0xb}, {0x3, 0x2, 0x6, 0x6}, {0x3, 0x3, 0xb, 0x1}, {0x3, 0x4, 0x5, 0x9}, {0x0, 0x1, 0x4, 0x6}, {0x0, 0x1, 0x3, 0xc}], 0x10, 0x5ebe}, 0x94)

58.537114649s ago: executing program 5 (id=6872):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180))
ptrace$getenv(0x4201, r0, 0x4, &(0x7f00000002c0))
ptrace$cont(0x21, r0, 0x5, 0x4)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000500)=r1, 0x4)
sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @loopback}, 0x10, 0x0}, 0x200440e4)
fallocate(r1, 0x0, 0x1000000, 0x3)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014)
r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="fd6009c1e45e6458c9522d1e026f0b5f5d00b614b4"])
syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@local}, &(0x7f0000000340)=0xc)
r11 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x800, 0xfffffffe, 0x399})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0xfffe, {0xffffffff}}, 0xb)
io_uring_enter(r11, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0)
r12 = dup(r9)
syz_ublk_setup_queues(r12, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x1, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7a92, 0x0, 0x20000000, 0x57, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

57.349449322s ago: executing program 1 (id=6876):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x755002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1015)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r3 = socket$pppoe(0x18, 0x1, 0x0)
accept(r3, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)}, 0x20)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x40000)
ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f0000000140))
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000080002, 0x180, 0x2000000400000004, 0x4, 0xf2, 0x3, 0x0, 0x45, 0x0, 0x9d0a9ae, 0xfffffffffffffffe, 0x8, 0x0, 0x8], 0x8000000, 0x385310})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

57.123073709s ago: executing program 1 (id=6878):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x1000, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl(r5, 0x4048aecb, &(0x7f0000600000))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000011000/0x400000)=nil)
ioctl(r5, 0x4048aecb, &(0x7f0000600100)="070000000000000001000000ffffffff01")
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x2040)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000)

56.960611942s ago: executing program 1 (id=6880):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000e00)="020a030002000000e4a17c45c8d262c9d76d0103", 0x14}, {&(0x7f0000001380)="f7cc5458", 0x4}], 0x2}, 0x48000)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000841}, 0x8000)

56.777854045s ago: executing program 1 (id=6881):
unshare(0x60000000)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)
io_uring_setup(0x671d, &(0x7f00000001c0)={0x0, 0x8a74, 0x4000, 0x1, 0x5c})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
name_to_handle_at(r4, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0), 0x400)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x24)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000140)=0x6, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080"], 0x24}}, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, r8, 0xf3b3b000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)

56.35436724s ago: executing program 1 (id=6883):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000080), 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_emit_ethernet(0x139, &(0x7f00000002c0)={@empty, @broadcast, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x18, 0x4, 0x0, 0x2, 0x127, 0x64, 0x0, 0xdb, 0x21, 0x0, @local, @multicast2, {[@noop, @lsrr={0x83, 0x1b, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @local, @local, @loopback]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0xb, "f0ca96bae0e203dad4"}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x6, 0x11, "f64891ba9b5bc989bf7326b59d6f66"}, {0x7, 0x9, "2139059725bba4"}]}]}}, "c17e7ee064447d373d29e9e8594e7ffa3b1484c3e32e3e9f78138ae9728d61e46d51d0208dd62f36b040135cead54b5274f344645622e0baced487cec77c490e18edfa02e9acb49b060cb78546d553e8430d810b635e9ab1ffdd7ece82c749122ab8198f1d841ac14fa26f2b8ac5ea43f781cc1daf11f67095870f6a70891dfe202ab737ce2742cf720da823cce170e56cf13f5186963c57ec36e9166c86eff2be126b381b3e5bf2b0ceab55fd4433a365ea3fd2aab86f87f5549c9dc7c44718294403f3060da1"}}}}, &(0x7f0000000440)={0x0, 0x3, [0xe96, 0xcbd, 0x51a, 0x7dd]})
syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000200)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881)
r2 = dup(r1)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x1}}, 0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x6}, &(0x7f0000000600)=0x8)
sendmsg$netlink(r0, 0x0, 0x4004010)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f0000000040))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000200081dc28bd70000300000002000004ff0000031f00000008000b009acaaf5649b78d6d739b5cb56694c1f4631e98209b805f701b9349a82d59a33ca73dcdc83c2e49a7d70070f57b1a7f954dab0844cd13c69273139da0d6a4b7e0a2748b20f35e9abf0cf6ea0cd9f481"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x4, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40048c0)

56.203735875s ago: executing program 0 (id=6885):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000000c0)={0x9f0902, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"})
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000001, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d06, &(0x7f00000000c0)=0x39)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
socket(0x10, 0x3, 0x0)
r3 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff0007058102"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
mmap(&(0x7f00000ff000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001000)=""/145, 0x91}], 0x1)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x340000, 0x4d2, 0xde, 0x84, 0x16, "bc113800000000000000000600"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x0, 0x2, {}, {}, 0x0, 0x2})
timer_create(0x0, &(0x7f0000000180)={0x0, 0x1, 0x1}, &(0x7f00000001c0))
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2ac65)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0)

56.118165817s ago: executing program 3 (id=6886):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r0, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) (async)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b74318860809050725018705ee7b09050a000002810bac090504"], 0x0)

56.014914435s ago: executing program 5 (id=6887):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00'], 0x50)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r2, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="4c741df91ff6940907cf7e7f1419bc8187db263416ad5ca8fd66cf8a1f3aff1c52eb1146936bae73901a23a93b6637322718f972a30e2ace10780b22cb003d00", 0x40}, {&(0x7f00000005c0)="2fb7", 0x2}, {&(0x7f0000000600)='(', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='B', 0x1}], 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="10000000000000000000000105000000"], 0x10}}], 0x2, 0x4000045)
ioctl$TCFLSH(r1, 0x540b, 0x0)
r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300))
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x5c}}, 0x0)

55.901523617s ago: executing program 5 (id=6888):
socket$kcm(0xf, 0x3, 0x2)
userfaultfd(0x80801)
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x4000005, 0xc000, 0x4, 0x9, 0x5, 0x8, 0x3, 0xa, 0xb9, 0x1, 0x12, 0x5, 0xcc}, {0x804, 0xff62, 0x1, 0x45, 0x3, 0xfd, 0x2, 0xff, 0x0, 0x0, 0x6, 0x7f, 0x20d}, {0x0, 0x3, 0x4, 0x3, 0x84, 0x7, 0x3, 0x50, 0x8, 0x1, 0x4, 0x9, 0x24aa}], 0xffffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0x4}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0x1}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006080)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xfff3}, {}, {0x9, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)

55.402481031s ago: executing program 6 (id=6889):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x3a3543, 0x0)
write(r2, &(0x7f0000000380)='100000', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
write(r3, &(0x7f0000000200)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r4, &(0x7f0000000280)='0', 0x1)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
pwritev(r5, &(0x7f0000002700)=[{&(0x7f0000000140)="252a14b7a2", 0x5}, {0x0}], 0x2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x758e6000)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214e, 0x8c040, 0x3, 0xce})
io_uring_enter(r6, 0xf79, 0xcf74, 0x16, 0x0, 0xffffffffffffffd4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

55.396949211s ago: executing program 1 (id=6890):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket(0x10, 0x80003, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe, 0x10}}}, 0x24}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000000080), 0x1}, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_pidfd_open(0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
io_cancel(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00')
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)

55.264740569s ago: executing program 5 (id=6891):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001400)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0xa8, 0x150, 0xffffffff, 0xa8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast, @port, @port=0x2}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @local, @remote, @icmp_id, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00')
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a)
getdents(r1, &(0x7f0000001ec0)=""/4101, 0x1005)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0})
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b9000000001"], 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x5, 0x4000, 0x0, 0x0}], 0x1})
unshare(0x2c020400)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x68)
r5 = socket$kcm(0xf, 0x0, 0x2)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0xb4, &(0x7f0000000500)="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", 0xffffff11, 0x0, &(0x7f0000000900)="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"})
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000e00)="020a030002000000e4a17c45c8d262c9d76d0103", 0x14}, {&(0x7f0000001380)="f7cc5458", 0x4}], 0x2}, 0x48000)

54.908435901s ago: executing program 3 (id=6892):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000002780)={{}, {0x1, 0x2}, [], {0x4, 0x6}, [], {0x10, 0x3}, {0x20, 0x5}}, 0xffffffffffffff8c, 0x0) (async)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x102030405060708, {}, 0x20}, 0x18)
connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0xee}, 0xff}, 0x18)
getpeername(r0, 0x0, &(0x7f0000000180)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee0, 0x8010, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000)
recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async, rerun: 32)
unshare(0x22020600) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r3, 0x0, 0x0}, 0x20) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) (async, rerun: 64)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') (async, rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
pread64(r5, 0x0, 0x0, 0x4)

54.768786317s ago: executing program 6 (id=6893):
open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
dup2(r0, r1) (async)
syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) (async)
syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e1d}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = eventfd2(0xfffffffc, 0x0)
write$eventfd(r4, &(0x7f0000000000)=0xffffffffffffffff, 0x8)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) (async)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x201, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffbff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008811) (async)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) (async)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085)
r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r6, r6}, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, 0x0, 0x0) (async)
r8 = dup2(r5, r5)
ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)=0x2) (async)
fsopen(&(0x7f00000004c0)='nfsd\x00', 0x0)

54.56596747s ago: executing program 3 (id=6894):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
unshare(0x22020600)
sync_file_range(r0, 0xd, 0x4000000000010002, 0xf)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)="ad4f15f7c5", 0x5}, 0x68)
unshare(0x40000000)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xa20000, 0x4, 0x3b4e, r1, 0x0, &(0x7f0000000080)={0x9a0913, 0x6, '\x00', @value64=0x4}})

54.489396264s ago: executing program 0 (id=6895):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x8800)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r0, 0xffffffffffffffff, 0x12, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40)

53.858338397s ago: executing program 3 (id=6896):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020301010000000000000000000000051fff0340000008000800034007d178ce080001000400000a080004400000000a080004400000001a0800011002000011080001000100002c0800034000000009"], 0x54}, 0x1, 0x0, 0x0, 0x8004040}, 0x8014) (async)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020301010000000000000000000000051fff0340000008000800034007d178ce080001000400000a080004400000000a080004400000001a0800011002000011080001000100002c0800034000000009"], 0x54}, 0x1, 0x0, 0x0, 0x8004040}, 0x8014)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) (async)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080), 0x0) (async)
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r4, 0x0, r1, 0x0, 0x317e, 0x4)
write$P9_RREAD(r2, &(0x7f0000000840)=ANY=[], 0xb)
write$tun(r2, &(0x7f0000000840)=ANY=[], 0x11b0)
syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) (async)
syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r10, 0x8)
accept4(r10, 0x0, 0x0, 0x0) (async)
r11 = accept4(r10, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000240)=@int=0x10000, 0x4)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x98, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0x138}}, 0x0)
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x111, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x111, 0x1}}, 0x20)

53.705400352s ago: executing program 0 (id=6897):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)={0x0, 0xb, 0x1, '\x00'}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

53.446050448s ago: executing program 3 (id=6898):
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xa100)
lseek(r0, 0x4000000007, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0xa383190d1c24edc6, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x2, 0xd82, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x110}}}, &(0x7f0000000380)=<r5=>0x0)
r6 = syz_io_uring_setup(0x2b0e, &(0x7f0000000000)={0x0, 0x6ccc, 0x2, 0x2, 0xa3}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x0, 0x0, 0x1000000, 0x5, 0x3}}, 0x1)
r7 = syz_ublk_setup_io_uring(0x76a3, &(0x7f0000000480)={0x0, 0x6a13, 0x80, 0x2, 0x1b1}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r8 = syz_io_uring_setup(0xfc5, &(0x7f00000005c0)={0x0, 0x2d20, 0x8, 0x1, 0x289}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0))
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x0, 0x7452, 0x1000, 0x3, 0x32b}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe2fc, 0x200, 0x1, 0x288, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5908, 0x2, 0x2, 0x28b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6282, 0x1000, 0x0, 0x2d7}, <r9=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x33df, 0x80, 0x3, 0x1da}}], 0x4, &(0x7f0000002e40)={0x2e, 0x5, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x3, 0x803, 0x0, &(0x7f0000001e40)=@buf_512="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"}}, &(0x7f0000002ec0))
r10 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001001, 0x3d7})
close_range(r10, 0xffffffffffffffff, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000003180)={0x0, 0xa723, 0x40000, 0x1, 0x20a}, &(0x7f0000003200)=[{0x0, 0x0, <r11=>0xffffffffffffffff, {0x0, 0xf279, 0x8000, 0x1, 0x52}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5913, 0x10, 0x3, 0x23}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b72, 0x10, 0x2, 0x3f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe56, 0x40, 0x0, 0x1bb}}], 0x4, &(0x7f0000004480)={0x2e, 0xe, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x5, 0x9e5, 0x0, &(0x7f0000003480)=@buf_1k="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"}}, &(0x7f0000004500))
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_ublk_setup_queues(r4, r5, &(0x7f00000003c0)={0x0, 0xab8d, 0x8000, 0x1, 0x2fc, 0x0, r6}, &(0x7f0000002f00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3957, 0x20, 0x1, 0x29e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbf6, 0x4000, 0x1, 0x3bb, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xae5c, 0x80, 0x3, 0x20f, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8409, 0x4000, 0x1, 0x307, 0x0, r10}}], 0x4, &(0x7f0000005540)={0x2e, 0x10, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r12, '\x00', {0x1, 0xcec, 0x0, &(0x7f0000004540)=@buf_4k="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"}}, &(0x7f00000055c0))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bridge0\x00', <r13=>0x0})
r14 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x8010)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r15=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%ps    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r15}, &(0x7f00000001c0), &(0x7f0000000200)='%pK    \x00'}, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r16 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_PARM(r16, 0xc0cc5616, &(0x7f0000000040)={0xd, @output={0x1000, 0x0, {0x2, 0xf}, 0x9000, 0x6}})
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x58)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x3a})

53.187651209s ago: executing program 0 (id=6899):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}})
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x3, 0x0, 0xe, 0x401, 0xd6, "193b9a520070d017b7fae6c080153ba60af83c5704e1feb690141055d3d16140890d157fa98c8e51157e78d4ef649480cc26934a927d61afab1af5ff544bf2e5ceaecaf842112fcd7e0bfbb835f1f60728cb012752edbcd0111aa43c31998f56bc6a4ceb5c38a31707227c8f7a2efc1f18f4cb290cba7e9bbba6f05b829c10284b5a70efd5b6e08163dd2187b9151e53d31a9594cdb252e31eff03243516c01762891762798392a8e9910990690f328e6792a49062ad57893f35ac6858d24125b06309146ad42270b1bf56bcc7639abf974f9c2a1198"}, 0xdf, 0x2)
r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xfffffffffffffe3f})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0d, &(0x7f0000000040))
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x278, 0xffffffff, 0x98, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x1e0, 0x1e0, 0x1e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x2, "cdbcfa51ca3f888a410773265e3c27d481d146b5956dc4a66fbf6ba58700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
fsopen(&(0x7f0000000000)='ext2\x00', 0x1)

53.18147922s ago: executing program 3 (id=6900):
r0 = socket(0x2b, 0x1, 0x1)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000140))
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x10}}, 0x18)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[r2, r3, r3, r1, r3, 0xffffffffffffffff, r3, r0, r2]}, 0x9)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000012c0)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, <r6=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, <r7=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, r7, &(0x7f00000002c0)=[{0x1}], 0xdeadbeef, 0x8, 0x1})
syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket(0x2b, 0x1, 0x1) (async)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) (async)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000140)) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) (async)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x10}}, 0x18) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[r2, r3, r3, r1, r3, 0xffffffffffffffff, r3, r0, r2]}, 0x9) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000012c0)={0x48, 0x2, r4}) (async)
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) (async)
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, r7, &(0x7f00000002c0)=[{0x1}], 0xdeadbeef, 0x8, 0x1}) (async)
syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)

0s ago: executing program 34 (id=6899):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}})
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x3, 0x0, 0xe, 0x401, 0xd6, "193b9a520070d017b7fae6c080153ba60af83c5704e1feb690141055d3d16140890d157fa98c8e51157e78d4ef649480cc26934a927d61afab1af5ff544bf2e5ceaecaf842112fcd7e0bfbb835f1f60728cb012752edbcd0111aa43c31998f56bc6a4ceb5c38a31707227c8f7a2efc1f18f4cb290cba7e9bbba6f05b829c10284b5a70efd5b6e08163dd2187b9151e53d31a9594cdb252e31eff03243516c01762891762798392a8e9910990690f328e6792a49062ad57893f35ac6858d24125b06309146ad42270b1bf56bcc7639abf974f9c2a1198"}, 0xdf, 0x2)
r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xfffffffffffffe3f})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0d, &(0x7f0000000040))
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x278, 0xffffffff, 0x98, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x1e0, 0x1e0, 0x1e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x2, "cdbcfa51ca3f888a410773265e3c27d481d146b5956dc4a66fbf6ba58700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
fsopen(&(0x7f0000000000)='ext2\x00', 0x1)

kernel console output (not intermixed with test programs):

71][T24344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1495.915104][T24344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1495.915128][T24344] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1495.915170][T24344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1495.919877][T24344] usb 4-1: config 0 descriptor??
[ 1496.042420][T24336] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[ 1496.185590][T24336] usb 6-1: device descriptor read/64, error -71
[ 1496.282060][T30474] tipc: Started in network mode
[ 1496.282079][T30474] tipc: Node identity S, cluster identity 4711
[ 1496.296352][T30474] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1496.340535][T24344] hid_parser_main: 330 callbacks suppressed
[ 1496.340601][T24344] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0
[ 1496.340634][T24344] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0
[ 1496.340664][T24344] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0
[ 1496.340693][T24344] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0
[ 1496.340720][T24344] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0
[ 1496.340748][T24344] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0
[ 1496.340776][T24344] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0
[ 1496.340804][T24344] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0
[ 1496.340832][T24344] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0
[ 1496.340861][T24344] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0
[ 1496.442548][T24336] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[ 1496.442948][T24344] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1496.445590][T30474] syz.0.6643 (30474): drop_caches: 2
[ 1496.575792][T24336] usb 6-1: device descriptor read/64, error -71
[ 1496.596911][T24344] usb 2-1: USB disconnect, device number 51
[ 1496.683698][T24336] usb usb6-port1: attempt power cycle
[ 1496.755726][ T5678] usb 4-1: USB disconnect, device number 91
[ 1496.887769][T30493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6649'.
[ 1497.032465][T24336] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 1497.054631][T24336] usb 6-1: device descriptor read/8, error -71
[ 1497.267120][T30510] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6653'.
[ 1497.267229][T30510] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6653'.
[ 1497.293954][T24336] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[ 1497.314386][T24336] usb 6-1: device descriptor read/8, error -71
[ 1497.424225][T24336] usb usb6-port1: unable to enumerate USB device
[ 1498.202266][T24345] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1498.222286][T24336] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1498.242408][T24344] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1498.352460][T24336] usb 4-1: device descriptor read/64, error -71
[ 1498.353784][T24345] usb 1-1: Using ep0 maxpacket: 16
[ 1498.354344][T24345] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1498.355446][T24345] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1498.355472][T24345] usb 1-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1498.355497][T24345] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1498.355528][T24345] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1498.355548][T24345] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1498.357590][T24345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1498.357612][T24345] usb 1-1: Product: syz
[ 1498.357625][T24345] usb 1-1: Manufacturer: syz
[ 1498.357639][T24345] usb 1-1: SerialNumber: syz
[ 1498.359830][T24345] usb 1-1: config 0 descriptor??
[ 1498.360723][T30533] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1498.483688][T24344] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[ 1498.487058][T24344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1498.487179][T24344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1498.522912][T24344] usb 2-1: config 0 descriptor??
[ 1498.573560][T30533] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1498.600180][T24345] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input138
[ 1498.602293][T24336] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1498.742464][T24336] usb 4-1: device descriptor read/64, error -71
[ 1498.801118][T30533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1498.803942][T30533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1498.853509][T24336] usb usb4-port1: attempt power cycle
[ 1498.870781][T24345] usb 1-1: USB disconnect, device number 49
[ 1498.870882][    C1] synaptics_usb 1-1:0.0: synusb_irq - usb_submit_urb failed with result: -19
[ 1499.062894][T24344] uclogic 0003:5543:0064.0053: unexpected long global item
[ 1499.063712][T24344] uclogic 0003:5543:0064.0053: parse failed
[ 1499.063901][T24344] uclogic 0003:5543:0064.0053: probe with driver uclogic failed with error -22
[ 1499.192471][T24336] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1499.213604][T24336] usb 4-1: device descriptor read/8, error -71
[ 1499.257020][T30540] FAULT_INJECTION: forcing a failure.
[ 1499.257020][T30540] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1499.257054][T30540] CPU: 1 UID: 0 PID: 30540 Comm: syz.5.6663 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1499.257082][T30540] Tainted: [L]=SOFTLOCKUP
[ 1499.257089][T30540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1499.257101][T30540] Call Trace:
[ 1499.257110][T30540]  <TASK>
[ 1499.257119][T30540]  dump_stack_lvl+0xe8/0x150
[ 1499.257150][T30540]  should_fail_ex+0x410/0x560
[ 1499.257177][T30540]  _copy_from_user+0x2d/0xb0
[ 1499.257203][T30540]  do_ipt_set_ctl+0x743/0xe20
[ 1499.257345][T30540]  ? rcu_is_watching+0x16/0xb0
[ 1499.257373][T30540]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[ 1499.257408][T30540]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1499.257438][T30540]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1499.257472][T30540]  nf_setsockopt+0x26f/0x290
[ 1499.257512][T30540]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1499.257533][T30540]  do_sock_setsockopt+0x17c/0x1b0
[ 1499.257559][T30540]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1499.257585][T30540]  do_syscall_64+0x166/0x520
[ 1499.257605][T30540]  ? trace_irq_disable+0x3b/0x140
[ 1499.257622][T30540]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.257640][T30540]  ? clear_bhb_loop+0x70/0xc0
[ 1499.257661][T30540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.257677][T30540] RIP: 0033:0x7fa35379e159
[ 1499.257693][T30540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1499.257708][T30540] RSP: 002b:00007fa3546cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1499.257727][T30540] RAX: ffffffffffffffda RBX: 00007fa353a25fa0 RCX: 00007fa35379e159
[ 1499.257740][T30540] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[ 1499.257750][T30540] RBP: 00007fa3546cf090 R08: 00000000000002e0 R09: 0000000000000000
[ 1499.257761][T30540] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[ 1499.257772][T30540] R13: 00007fa353a26038 R14: 00007fa353a25fa0 R15: 00007fa353b4fa48
[ 1499.257797][T30540]  </TASK>
[ 1499.482387][T24336] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1499.503010][T24336] usb 4-1: device descriptor read/8, error -71
[ 1499.536417][T24339] usb 2-1: USB disconnect, device number 52
[ 1499.596169][T30542] ip_tables: iptables: counters copy to user failed while replacing table
[ 1499.622955][T24336] usb usb4-port1: unable to enumerate USB device
[ 1499.960708][T24345] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1499.999245][T30551] fuse: Unknown parameter ''
[ 1500.123728][T24345] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1500.126095][T24345] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1500.126157][T24345] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1500.126190][T24345] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1500.126423][T24345] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1500.187175][T24345] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1500.187201][T24345] usb 6-1: Product: syz
[ 1500.187215][T24345] usb 6-1: Manufacturer: syz
[ 1500.236690][T24345] cdc_wdm 6-1:1.0: skipping garbage
[ 1500.236712][T24345] cdc_wdm 6-1:1.0: skipping garbage
[ 1500.236726][T24345] cdc_wdm 6-1:1.0: skipping garbage
[ 1500.236750][T24345] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1500.406311][T30555] nvme_fabrics: missing parameter 'transport=%s'
[ 1500.465295][T24344] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1500.497940][T30546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1500.498412][T30546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1500.613188][T24344] usb 1-1: Using ep0 maxpacket: 16
[ 1500.613714][T30562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6672'.
[ 1500.617745][T24344] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1500.617796][T24344] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[ 1500.619019][T24344] usb 1-1: config 9 has an invalid interface number: 57 but max is 0
[ 1500.619046][T24344] usb 1-1: config 9 has no interface number 0
[ 1500.619078][T24344] usb 1-1: config 9 interface 57 has no altsetting 0
[ 1500.679805][T24344] usb 1-1: string descriptor 0 read error: -22
[ 1500.679953][T24344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1500.716089][T24339] usb 6-1: USB disconnect, device number 13
[ 1500.885175][   T30] kauditd_printk_skb: 99 callbacks suppressed
[ 1500.885194][   T30] audit: type=1326 audit(1790060202.151:11171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30568 comm="syz.6.6675" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357159e159 code=0x7ffc0000
[ 1500.885266][   T30] audit: type=1326 audit(1790060202.151:11172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30568 comm="syz.6.6675" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357159e159 code=0x7ffc0000
[ 1500.885311][   T30] audit: type=1326 audit(1790060202.151:11173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30568 comm="syz.6.6675" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357159e159 code=0x7ffc0000
[ 1500.885968][   T30] audit: type=1326 audit(1790060202.151:11174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30568 comm="syz.6.6675" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357159e159 code=0x7ffc0000
[ 1500.886020][   T30] audit: type=1326 audit(1790060202.151:11175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30568 comm="syz.6.6675" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357159e159 code=0x7ffc0000
[ 1500.886074][   T30] audit: type=1326 audit(1790060202.151:11176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30568 comm="syz.6.6675" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357159e159 code=0x7ffc0000
[ 1500.887374][   T30] audit: type=1326 audit(1790060202.151:11178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30568 comm="syz.6.6675" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f357159e159 code=0x7ffc0000
[ 1500.887451][   T30] audit: type=1326 audit(1790060202.151:11179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30568 comm="syz.6.6675" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357159e159 code=0x7ffc0000
[ 1500.887492][   T30] audit: type=1326 audit(1790060202.151:11180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30568 comm="syz.6.6675" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357159e159 code=0x7ffc0000
[ 1500.887529][   T30] audit: type=1326 audit(1790060202.151:11177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30568 comm="syz.6.6675" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357159e159 code=0x7ffc0000
[ 1501.151718][T30569] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6675'.
[ 1501.702528][T24331] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1501.791995][T24344] video4linux radio48: keene_cmd_set failed (-71)
[ 1501.796415][T24344] radio-keene 1-1:9.57: V4L2 device registered as radio48
[ 1501.838919][T24344] usb 1-1: USB disconnect, device number 50
[ 1501.873928][T24331] usb 2-1: Using ep0 maxpacket: 32
[ 1501.877393][T24331] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1501.878438][T24331] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[ 1501.878460][T24331] usb 2-1: config 0 has no interface number 0
[ 1501.878499][T24331] usb 2-1: config 0 interface 12 has no altsetting 0
[ 1501.928071][T24331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1501.928090][T24331] usb 2-1: Product: syz
[ 1501.928100][T24331] usb 2-1: Manufacturer: syz
[ 1501.928110][T24331] usb 2-1: SerialNumber: syz
[ 1501.962096][T24331] usb 2-1: config 0 descriptor??
[ 1502.033817][ T5618] Bluetooth: hci5: command 0x0406 tx timeout
[ 1502.696914][T24331] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71
[ 1502.696951][T24331] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[ 1502.696963][T24331] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1502.697014][T24331] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[ 1502.722087][T24331] usb 2-1: USB disconnect, device number 53
[ 1503.032277][T24336] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1503.202267][T24336] usb 1-1: Using ep0 maxpacket: 32
[ 1503.204398][T24336] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1503.204436][T24336] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62
[ 1503.205348][T24336] usb 1-1: config 8 has an invalid interface number: 94 but max is 0
[ 1503.205388][T24336] usb 1-1: config 8 has no interface number 0
[ 1503.205422][T24336] usb 1-1: config 8 interface 94 has no altsetting 0
[ 1503.207593][T24336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.207621][T24336] usb 1-1: Product: syz
[ 1503.207632][T24336] usb 1-1: Manufacturer: syz
[ 1503.207644][T24336] usb 1-1: SerialNumber: syz
[ 1503.506795][T30608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6682'.
[ 1503.835057][T30607] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[ 1503.889878][T30607] bond2 (unregistering): Released all slaves
[ 1504.290315][T24336] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[ 1504.301657][T24336] gspca_sn9c2028: read1 error -71
[ 1504.312957][T24336] gspca_sn9c2028: read1 error -71
[ 1504.313696][T24336] gspca_sn9c2028: read1 error -71
[ 1504.313764][T24336] sn9c2028 1-1:8.94: probe with driver sn9c2028 failed with error -71
[ 1504.347949][T24336] usb 1-1: USB disconnect, device number 51
[ 1504.692434][T24349] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1504.855022][T24349] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1504.859400][T24349] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1504.859427][T24349] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1504.859448][T24349] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1504.859502][T24349] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1504.862386][T24349] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1504.862412][T24349] usb 4-1: Product: syz
[ 1504.862428][T24349] usb 4-1: Manufacturer: syz
[ 1504.982919][T24349] cdc_wdm 4-1:1.0: skipping garbage
[ 1504.982938][T24349] cdc_wdm 4-1:1.0: skipping garbage
[ 1504.982950][T24349] cdc_wdm 4-1:1.0: skipping garbage
[ 1504.982971][T24349] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1505.246124][T30616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1505.246471][T30616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1505.389293][T24349] usb 4-1: USB disconnect, device number 96
[ 1505.512221][T24345] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1505.666650][T24345] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1505.693311][T24345] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1505.693331][T24345] usb 1-1: Product: syz
[ 1505.693342][T24345] usb 1-1: SerialNumber: syz
[ 1505.707883][T24345] usb 1-1: config 0 descriptor??
[ 1505.998507][T24345] usb 1-1: USB disconnect, device number 52
[ 1506.125749][ T7567] IPVS: starting estimator thread 0...
[ 1506.212723][T30642] IPVS: using max 41 ests per chain, 98400 per kthread
[ 1506.241835][ T7558] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1506.262297][T24349] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1506.266047][T30641] syzkaller0: entered promiscuous mode
[ 1506.266077][T30641] syzkaller0: entered allmulticast mode
[ 1506.393044][T24349] usb 6-1: device descriptor read/64, error -71
[ 1506.632301][T24349] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1506.782550][T24349] usb 6-1: device descriptor read/64, error -71
[ 1506.892659][T24349] usb usb6-port1: attempt power cycle
[ 1506.943188][T30651] bond2 (unregistering): Released all slaves
[ 1507.232276][T24349] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1507.256746][T24349] usb 6-1: device descriptor read/8, error -71
[ 1507.257772][T30653] dvmrp0: entered allmulticast mode
[ 1507.492925][T24349] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1507.515474][T24349] usb 6-1: device descriptor read/8, error -71
[ 1507.571013][T30664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1507.575062][T30664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1507.629003][T24349] usb usb6-port1: unable to enumerate USB device
[ 1507.792252][T24345] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1507.924155][T24345] usb 4-1: device descriptor read/64, error -71
[ 1508.062309][T24336] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1508.163411][T24345] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1508.244189][T24336] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1508.262481][T24336] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1508.262499][T24336] usb 2-1: Product: syz
[ 1508.262509][T24336] usb 2-1: SerialNumber: syz
[ 1508.283380][T24336] usb 2-1: config 0 descriptor??
[ 1508.302598][T24345] usb 4-1: device descriptor read/64, error -71
[ 1508.412622][T24345] usb usb4-port1: attempt power cycle
[ 1508.654176][T24336] usb 2-1: USB disconnect, device number 54
[ 1508.752360][T24345] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1508.775593][T24345] usb 4-1: device descriptor read/8, error -71
[ 1509.012250][T24345] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1509.050458][T24345] usb 4-1: device descriptor read/8, error -71
[ 1509.152730][T24345] usb usb4-port1: unable to enumerate USB device
[ 1509.292548][T24349] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1509.450075][T24349] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1509.451642][T24349] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1509.451659][T24349] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1509.451672][T24349] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1509.451698][T24349] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1509.509018][T24349] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1509.509048][T24349] usb 6-1: Product: syz
[ 1509.509062][T24349] usb 6-1: Manufacturer: syz
[ 1509.567935][T24349] cdc_wdm 6-1:1.0: skipping garbage
[ 1509.567959][T24349] cdc_wdm 6-1:1.0: skipping garbage
[ 1509.567974][T24349] cdc_wdm 6-1:1.0: skipping garbage
[ 1509.567998][T24349] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1509.643648][   T30] kauditd_printk_skb: 91 callbacks suppressed
[ 1509.643667][   T30] audit: type=1326 audit(1790060210.911:11272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30678 comm="syz.0.6701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5615f9e159 code=0x0
[ 1509.701575][   T30] audit: type=1326 audit(1790060210.961:11273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30678 comm="syz.0.6701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5615f9e159 code=0x0
[ 1509.797090][T30675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1509.817669][T30675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1509.881848][T24336] usb 6-1: USB disconnect, device number 18
[ 1510.262451][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1510.492317][T24336] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1510.582352][T24331] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1510.653269][T24336] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1510.695556][T24336] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1510.695579][T24336] usb 2-1: Product: syz
[ 1510.695590][T24336] usb 2-1: SerialNumber: syz
[ 1510.702021][T24336] usb 2-1: config 0 descriptor??
[ 1510.762883][T24331] usb 6-1: Using ep0 maxpacket: 8
[ 1510.763385][T24331] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1510.786734][T24331] usb 6-1: config 16 has an invalid descriptor of length 201, skipping remainder of the config
[ 1510.786825][T24331] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1510.786866][T24331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1510.957319][T30697] netlink: 'syz.0.6707': attribute type 32 has an invalid length.
[ 1511.018930][T24336] usb 2-1: USB disconnect, device number 55
[ 1511.356972][T30709] loop5: detected capacity change from 0 to 7
[ 1511.380472][T30709] Dev loop5: unable to read RDB block 7
[ 1511.380517][T30709]  loop5: unable to read partition table
[ 1511.380732][T30709] loop5: partition table beyond EOD, truncated
[ 1511.380747][T30709] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1512.264826][ T4935] Bluetooth: hci3: command 0x0406 tx timeout
[ 1513.312806][T24336] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1513.473290][T24336] usb 2-1: Using ep0 maxpacket: 32
[ 1513.476121][T24336] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1513.476202][T24336] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1513.477428][T24336] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[ 1513.477449][T24336] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[ 1513.477467][T24336] usb 2-1: config 14 has no interface number 0
[ 1513.477486][T24336] usb 2-1: config 14 has no interface number 1
[ 1513.477523][T24336] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1513.477557][T24336] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1513.477575][T24336] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1513.477592][T24336] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1513.477610][T24336] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 1513.477639][T24336] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1513.477656][T24336] usb 2-1: config 14 interface 57 has no altsetting 0
[ 1513.477668][T24336] usb 2-1: config 14 interface 228 has no altsetting 0
[ 1513.535739][T24336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1513.535767][T24336] usb 2-1: Product: syz
[ 1513.535784][T24336] usb 2-1: Manufacturer: syz
[ 1513.535802][T24336] usb 2-1: SerialNumber: syz
[ 1513.906500][T24331] usb 6-1: string descriptor 0 read error: -71
[ 1513.942335][T24331] usb 6-1: USB disconnect, device number 19
[ 1514.106933][T24336] legousbtower 2-1:14.57: interrupt endpoints not found
[ 1514.148871][T30736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1514.149286][T30736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1514.232762][ T5678] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1514.281279][T30741] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[ 1514.372207][ T5678] usb 4-1: device descriptor read/64, error -71
[ 1514.521059][T24336] legousbtower 2-1:14.228: get version request failed: -71
[ 1514.521243][T24336] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71
[ 1514.557801][T24336] usb 2-1: USB disconnect, device number 56
[ 1514.623331][ T5678] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1514.763031][ T5678] usb 4-1: device descriptor read/64, error -71
[ 1514.894369][ T5678] usb usb4-port1: attempt power cycle
[ 1514.942952][T30750] bond2: option ad_user_port_key: invalid value (48421)
[ 1514.942975][T30750] bond2: option ad_user_port_key: allowed values 0 - 1023
[ 1514.950809][T30750] bond2 (unregistering): Released all slaves
[ 1515.152304][T24349] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[ 1515.232456][ T5678] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1515.253631][ T5678] usb 4-1: device descriptor read/8, error -71
[ 1515.387763][T24349] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1515.388638][T24349] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1515.388675][T24349] usb 1-1: can't read configurations, error -71
[ 1515.512273][ T5678] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1515.533849][ T5678] usb 4-1: device descriptor read/8, error -71
[ 1515.653090][ T5678] usb usb4-port1: unable to enumerate USB device
[ 1516.480034][T30770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6724'.
[ 1516.622287][T24349] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1516.774833][T24349] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1516.780866][T30779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6727'.
[ 1516.803264][T24349] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1516.803301][T24349] usb 6-1: Product: syz
[ 1516.803311][T24349] usb 6-1: SerialNumber: syz
[ 1516.834934][T24349] usb 6-1: config 0 descriptor??
[ 1516.952209][T24331] usb 2-1: new full-speed USB device number 57 using dummy_hcd
[ 1517.106758][T24331] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1517.111510][T24331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1517.136717][T24349] usb 6-1: USB disconnect, device number 20
[ 1517.149876][T24331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1517.149894][T24331] usb 2-1: Product: syz
[ 1517.149904][T24331] usb 2-1: Manufacturer: syz
[ 1517.149914][T24331] usb 2-1: SerialNumber: syz
[ 1517.180992][T24331] usb 2-1: config 0 descriptor??
[ 1517.221308][T24331] adutux 2-1:0.0: interrupt endpoints not found
[ 1517.262653][   T30] audit: type=1326 audit(1790060218.521:11274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.0.6729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1517.262717][   T30] audit: type=1326 audit(1790060218.521:11275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.0.6729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1517.266748][   T30] audit: type=1326 audit(1790060218.531:11276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.0.6729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1517.267126][   T30] audit: type=1326 audit(1790060218.531:11277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.0.6729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1517.267273][   T30] audit: type=1326 audit(1790060218.531:11278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.0.6729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1517.270037][   T30] audit: type=1326 audit(1790060218.531:11279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.0.6729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1517.271794][   T30] audit: type=1326 audit(1790060218.531:11280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.0.6729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1517.331040][   T30] audit: type=1326 audit(1790060218.571:11281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.0.6729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1517.367798][   T30] audit: type=1326 audit(1790060218.591:11282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.0.6729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1517.407058][   T30] audit: type=1326 audit(1790060218.661:11283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.0.6729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1518.077416][T30796] bond2 (unregistering): Released all slaves
[ 1518.432415][ T5678] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[ 1518.502353][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1518.583068][ T5678] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1518.584125][ T5678] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[ 1518.584153][ T5678] usb 6-1: config 0 has no interface number 0
[ 1518.584195][ T5678] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1518.584225][ T5678] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1518.587255][ T5678] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[ 1518.587282][ T5678] usb 6-1: Manufacturer: syz
[ 1518.587298][ T5678] usb 6-1: SerialNumber: syz
[ 1518.610189][ T5678] usb 6-1: config 0 descriptor??
[ 1519.294087][ T5678] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.214/input/input139
[ 1519.519600][T24344] usb 6-1: USB disconnect, device number 21
[ 1519.900704][ T5678] usb 2-1: USB disconnect, device number 57
[ 1520.362281][T24331] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1520.382465][ T5678] usb 4-1: new low-speed USB device number 105 using dummy_hcd
[ 1520.527737][T24331] usb 2-1: Using ep0 maxpacket: 16
[ 1520.528511][T24331] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1520.532606][T24331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1520.533301][ T5678] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1520.572367][ T5678] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1520.572385][ T5678] usb 4-1: config 0 has no interface number 0
[ 1520.572412][ T5678] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1520.572429][ T5678] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1520.572457][ T5678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1520.577350][T24331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.577368][T24331] usb 2-1: Product: syz
[ 1520.577379][T24331] usb 2-1: Manufacturer: syz
[ 1520.577390][T24331] usb 2-1: SerialNumber: syz
[ 1520.579317][ T5678] usb 4-1: config 0 descriptor??
[ 1520.583069][T30819] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1520.631440][T24331] usb 2-1: config 0 descriptor??
[ 1520.700638][T24331] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1520.700676][T24331] em28xx 2-1:0.0: DVB interface 0 found: bulk
[ 1520.712695][ T5678] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1520.843644][T30828] loop5: detected capacity change from 0 to 159
[ 1520.847684][T30828]  loop5: p1 < > p3 p4
[ 1520.847707][T30828] loop5: partition table partially beyond EOD, truncated
[ 1520.949724][T30828] loop5: p3 size 3645588866 extends beyond EOD, truncated
[ 1520.957329][T30828] loop5: p4 start 33554432 is beyond EOD, truncated
[ 1520.989428][T24344] usb 4-1: USB disconnect, device number 105
[ 1521.076576][ T5617] udevd[5617]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[ 1521.105605][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[ 1521.323447][T24331] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1521.731238][T24331] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1521.731258][T24331] em28xx 2-1:0.0: board has no eeprom
[ 1521.822588][T24336] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1521.971116][T30817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1521.987943][T24336] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1521.991829][T30817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1522.029208][T24336] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1522.029240][T24336] usb 6-1: Product: syz
[ 1522.029251][T24336] usb 6-1: SerialNumber: syz
[ 1522.069022][T24336] usb 6-1: config 0 descriptor??
[ 1522.072360][T24331] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1522.072387][T24331] em28xx 2-1:0.0: dvb set to bulk mode.
[ 1522.098601][ T5678] em28xx 2-1:0.0: Binding DVB extension
[ 1522.126712][T24331] usb 2-1: USB disconnect, device number 58
[ 1522.149188][T24331] em28xx 2-1:0.0: Disconnecting em28xx
[ 1522.478342][ T5678] em28xx 2-1:0.0: Registering input extension
[ 1522.479490][T24331] em28xx 2-1:0.0: Closing input extension
[ 1522.548652][T24336] usb 6-1: USB disconnect, device number 22
[ 1522.694045][T24331] em28xx: Freeing device
[ 1522.801212][T30859] FAULT_INJECTION: forcing a failure.
[ 1522.801212][T30859] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1522.801246][T30859] CPU: 0 UID: 0 PID: 30859 Comm: syz.1.6749 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1522.801272][T30859] Tainted: [L]=SOFTLOCKUP
[ 1522.801280][T30859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1522.801292][T30859] Call Trace:
[ 1522.801300][T30859]  <TASK>
[ 1522.801309][T30859]  dump_stack_lvl+0xe8/0x150
[ 1522.801342][T30859]  should_fail_ex+0x410/0x560
[ 1522.801369][T30859]  _copy_from_user+0x2d/0xb0
[ 1522.801396][T30859]  do_handle_open+0xf2/0xae0
[ 1522.801427][T30859]  ? __pfx_do_handle_open+0x10/0x10
[ 1522.801453][T30859]  ? ksys_write+0x1fc/0x270
[ 1522.801485][T30859]  ? __pfx_ksys_write+0x10/0x10
[ 1522.801524][T30859]  do_syscall_64+0x166/0x520
[ 1522.801549][T30859]  ? trace_irq_disable+0x3b/0x140
[ 1522.801581][T30859]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1522.801601][T30859]  ? clear_bhb_loop+0x70/0xc0
[ 1522.801625][T30859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1522.801646][T30859] RIP: 0033:0x7fe3b8b9e159
[ 1522.801693][T30859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1522.801711][T30859] RSP: 002b:00007fe3b998f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[ 1522.801734][T30859] RAX: ffffffffffffffda RBX: 00007fe3b8e25fa0 RCX: 00007fe3b8b9e159
[ 1522.801750][T30859] RDX: 0000000000000600 RSI: 0000200000000280 RDI: 0000000000000003
[ 1522.801764][T30859] RBP: 00007fe3b998f090 R08: 0000000000000000 R09: 0000000000000000
[ 1522.801778][T30859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1522.801791][T30859] R13: 00007fe3b8e26038 R14: 00007fe3b8e25fa0 R15: 00007fe3b8f4fa48
[ 1522.801823][T30859]  </TASK>
[ 1523.289931][T30866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6750'.
[ 1523.652271][T24336] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[ 1523.812966][T24336] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1523.816847][T24336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1523.816873][T24336] usb 1-1: Product: syz
[ 1523.816884][T24336] usb 1-1: Manufacturer: syz
[ 1523.816894][T24336] usb 1-1: SerialNumber: syz
[ 1523.856742][T24336] usb 1-1: config 0 descriptor??
[ 1524.160603][T24336] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1524.672766][T24331] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1524.822626][T24331] usb 6-1: Using ep0 maxpacket: 8
[ 1524.823410][T24331] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1524.824572][T24331] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1524.824609][T24331] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1524.824630][T24331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1524.828602][T30872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6745'.
[ 1524.893270][T24331] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[ 1524.893291][T24331] usb 6-1: Product: syz
[ 1524.893301][T24331] usb 6-1: Manufacturer: syz
[ 1524.893312][T24331] usb 6-1: SerialNumber: syz
[ 1524.930795][T24331] usb 6-1: config 0 descriptor??
[ 1525.068675][T30881] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0
[ 1525.085213][T24331] rc_core: IR keymap rc-imon-rsc not found
[ 1525.085233][T24331] Registered IR keymap rc-empty
[ 1525.087716][T24331] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1525.120004][T24331] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input141
[ 1525.240771][T24344] usb 6-1: USB disconnect, device number 23
[ 1525.625493][T24336] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1525.715177][   T30] kauditd_printk_skb: 13 callbacks suppressed
[ 1525.715197][   T30] audit: type=1326 audit(1790060226.981:11297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30883 comm="syz.6.6754" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f357159e159 code=0x0
[ 1525.904997][T24344] usb 1-1: USB disconnect, device number 55
[ 1526.081943][T30887] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1526.095104][T30887] bond1 (unregistering): Released all slaves
[ 1526.157829][T30891] netlink: 'syz.3.6756': attribute type 10 has an invalid length.
[ 1526.157849][T30891] netlink: 67 bytes leftover after parsing attributes in process `syz.3.6756'.
[ 1526.191047][T30891] vlan1: entered promiscuous mode
[ 1526.255408][T30891] team0: Port device vlan1 added
[ 1527.285233][T30916] pimreg0: tun_chr_ioctl cmd 1074025677
[ 1527.290792][T30916] pimreg0: linktype set to 1
[ 1527.834902][T30926] loop5: detected capacity change from 0 to 7
[ 1527.840306][T30926] Dev loop5: unable to read RDB block 7
[ 1527.840335][T30926]  loop5: unable to read partition table
[ 1527.840502][T30926] loop5: partition table beyond EOD, truncated
[ 1527.840516][T30926] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1529.386053][T30958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1529.390002][T30958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1529.399438][T30959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1529.411168][T30959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1529.630327][T24349] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1529.795691][T24349] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[ 1529.799992][T24349] usb 4-1: config 1 has an invalid interface number: 27 but max is 1
[ 1529.800011][T24349] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1529.800024][T24349] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[ 1529.800039][T24349] usb 4-1: config 1 has no interface number 2
[ 1529.853309][T24349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1529.853333][T24349] usb 4-1: Product: syz
[ 1529.853344][T24349] usb 4-1: Manufacturer: syz
[ 1529.853354][T24349] usb 4-1: SerialNumber: syz
[ 1530.116876][T24349] usb 4-1: selecting invalid altsetting 1
[ 1530.116895][T24349] speedtch 4-1:1.0: speedtch_bind: setting interface to  1 failed (-22)!
[ 1530.117001][T24349] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -22!
[ 1530.117052][T24349] speedtch 4-1:1.0: probe with driver speedtch failed with error -22
[ 1530.171484][T24349] usb 4-1: selecting invalid altsetting 1
[ 1530.171507][T24349] speedtch 4-1:1.27: speedtch_bind: setting interface to  1 failed (-22)!
[ 1530.191825][T24349] speedtch 4-1:1.27: usbatm_usb_probe: bind failed: -22!
[ 1530.191863][T24349] speedtch 4-1:1.27: probe with driver speedtch failed with error -22
[ 1530.258801][T24349] usb 4-1: selecting invalid altsetting 1
[ 1530.258826][T24349] speedtch 4-1:1.1: speedtch_bind: setting interface to  1 failed (-22)!
[ 1530.259346][T24349] speedtch 4-1:1.1: usbatm_usb_probe: bind failed: -22!
[ 1530.259401][T24349] speedtch 4-1:1.1: probe with driver speedtch failed with error -22
[ 1530.324263][T24349] usb 4-1: USB disconnect, device number 106
[ 1530.865414][T30969] loop5: detected capacity change from 0 to 7
[ 1530.870418][T30969] Dev loop5: unable to read RDB block 7
[ 1530.870450][T30969]  loop5: unable to read partition table
[ 1530.870597][T30969] loop5: partition table beyond EOD, truncated
[ 1530.870647][T30969] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1531.136776][T30973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1531.154395][T30973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1531.165832][T30974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1531.176445][T30974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1531.259375][T30981] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1531.372411][T24331] usb 4-1: new full-speed USB device number 107 using dummy_hcd
[ 1531.502646][T24331] usb 4-1: device descriptor read/64, error -71
[ 1531.752355][T24331] usb 4-1: new full-speed USB device number 108 using dummy_hcd
[ 1531.902410][T24331] usb 4-1: device descriptor read/64, error -71
[ 1532.012438][T24331] usb usb4-port1: attempt power cycle
[ 1532.053614][ T5686] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1532.224644][ T5686] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1532.246098][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1532.246119][ T5686] usb 1-1: Product: syz
[ 1532.246130][ T5686] usb 1-1: SerialNumber: syz
[ 1532.267729][ T5686] usb 1-1: config 0 descriptor??
[ 1532.383232][T24331] usb 4-1: new full-speed USB device number 109 using dummy_hcd
[ 1532.408201][T24331] usb 4-1: device descriptor read/8, error -71
[ 1532.645006][T24331] usb 4-1: new full-speed USB device number 110 using dummy_hcd
[ 1532.664876][T24331] usb 4-1: device descriptor read/8, error -71
[ 1532.667315][ T5686] usb 1-1: USB disconnect, device number 56
[ 1532.776322][T24331] usb usb4-port1: unable to enumerate USB device
[ 1533.595563][T24331] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1533.743888][T24331] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1533.745760][T24331] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1533.745780][T24331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1533.745794][T24331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1533.745826][T24331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1533.745845][T24331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1533.747687][T24331] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1533.747711][T24331] usb 2-1: Product: syz
[ 1533.747727][T24331] usb 2-1: Manufacturer: syz
[ 1533.781982][T24331] cdc_wdm 2-1:1.0: skipping garbage
[ 1533.782035][T24331] cdc_wdm 2-1:1.0: skipping garbage
[ 1533.886202][T24331] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1533.886220][T24331] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1533.996205][T31016] cdc_wdm 2-1:1.0: Error submitting int urb - -90
[ 1534.015369][T31016] cdc_wdm 2-1:1.0: Error submitting int urb - -90
[ 1534.036572][T31016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1534.037131][T31016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1534.170068][T24344] usb 2-1: USB disconnect, device number 59
[ 1534.548413][   T30] audit: type=1326 audit(1790060235.811:11298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31034 comm="syz.1.6795" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3b8b9e159 code=0x0
[ 1535.087454][T31051] ip_tables: iptables: counters copy to user failed while replacing table
[ 1535.087536][T31051] FAULT_INJECTION: forcing a failure.
[ 1535.087536][T31051] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1535.087566][T31051] CPU: 0 UID: 0 PID: 31051 Comm: syz.5.6797 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1535.087593][T31051] Tainted: [L]=SOFTLOCKUP
[ 1535.087601][T31051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1535.087615][T31051] Call Trace:
[ 1535.087622][T31051]  <TASK>
[ 1535.087633][T31051]  dump_stack_lvl+0xe8/0x150
[ 1535.087667][T31051]  should_fail_ex+0x410/0x560
[ 1535.087697][T31051]  _copy_to_user+0x31/0xb0
[ 1535.087728][T31051]  simple_read_from_buffer+0xe1/0x170
[ 1535.087764][T31051]  proc_fail_nth_read+0x1bb/0x230
[ 1535.087786][T31051]  ? common_file_perm+0x20e/0x2b0
[ 1535.087817][T31051]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1535.087853][T31051]  ? rw_verify_area+0x24a/0x4c0
[ 1535.087886][T31051]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1535.087918][T31051]  vfs_read+0x213/0xa80
[ 1535.087953][T31051]  ? __pfx___mutex_lock+0x10/0x10
[ 1535.087982][T31051]  ? __pfx_vfs_read+0x10/0x10
[ 1535.088014][T31051]  ? __fget_files+0x2a/0x420
[ 1535.088047][T31051]  ? __fget_files+0x3a2/0x420
[ 1535.088074][T31051]  ? __fget_files+0x2a/0x420
[ 1535.088111][T31051]  ksys_read+0x150/0x270
[ 1535.088144][T31051]  ? __pfx_ksys_read+0x10/0x10
[ 1535.088185][T31051]  do_syscall_64+0x166/0x520
[ 1535.088209][T31051]  ? trace_irq_disable+0x3b/0x140
[ 1535.088229][T31051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1535.088251][T31051]  ? clear_bhb_loop+0x70/0xc0
[ 1535.088277][T31051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1535.088298][T31051] RIP: 0033:0x7fa35375e98e
[ 1535.088318][T31051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1535.088336][T31051] RSP: 002b:00007fa3546cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1535.088359][T31051] RAX: ffffffffffffffda RBX: 00007fa3546cf6c0 RCX: 00007fa35375e98e
[ 1535.088375][T31051] RDX: 000000000000000f RSI: 00007fa3546cf0a0 RDI: 0000000000000004
[ 1535.088389][T31051] RBP: 00007fa3546cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1535.088403][T31051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1535.088416][T31051] R13: 00007fa353a26038 R14: 00007fa353a25fa0 R15: 00007fa353b4fa48
[ 1535.088448][T31051]  </TASK>
[ 1535.802645][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1536.332480][ T8482] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1536.482939][ T8482] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1536.486974][ T8482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1536.486993][ T8482] usb 4-1: Product: syz
[ 1536.487004][ T8482] usb 4-1: Manufacturer: syz
[ 1536.487015][ T8482] usb 4-1: SerialNumber: syz
[ 1536.575612][T24344] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1536.656929][T31073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6805'.
[ 1536.907861][T31063] hsr0: entered allmulticast mode
[ 1536.907903][T31063] hsr_slave_0: entered allmulticast mode
[ 1536.907924][T31063] hsr_slave_1: entered allmulticast mode
[ 1537.023052][T31078] hsr0: left allmulticast mode
[ 1537.023078][T31078] hsr_slave_0: left allmulticast mode
[ 1537.023096][T31078] hsr_slave_1: left allmulticast mode
[ 1537.081346][ T5686] usb 4-1: USB disconnect, device number 111
[ 1537.634110][T24344] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1537.634263][T24344] ath9k_htc: Failed to initialize the device
[ 1537.634866][ T5686] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1537.792879][T31099] macvlan1: entered promiscuous mode
[ 1537.810210][T31099] macvlan1: left promiscuous mode
[ 1537.872410][ T5618] Bluetooth: hci4: command 0x0406 tx timeout
[ 1538.392214][T24349] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1538.553041][T24349] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1538.554769][T24349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1538.554799][T24349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1538.554816][T24349] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1538.554846][T24349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1538.559166][T24349] usb 6-1: config 0 descriptor??
[ 1538.606363][T24344] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1538.792276][T24344] usb 1-1: Using ep0 maxpacket: 16
[ 1538.793193][T24344] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[ 1538.797123][T24344] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1538.797143][T24344] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1538.797163][T24344] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1538.797188][T24344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1538.802695][T24344] usb 1-1: config 0 descriptor??
[ 1539.156810][T31112] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 1539.243425][T24344] elan 0003:04F3:074D.0054: failed to start in urb: -90
[ 1539.269787][T24344] input: HID 04f3:074d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04F3:074D.0054/input/input142
[ 1539.337628][T24344] elan 0003:04F3:074D.0054: input,hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.0-1/input0
[ 1539.435504][ T5686] usb 1-1: USB disconnect, device number 57
[ 1539.630479][T31115] fido_id[31115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1539.936800][T24349] plantronics 0003:047F:FFFF.0055: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1540.030377][T31120] netlink: 'syz.3.6817': attribute type 1 has an invalid length.
[ 1540.044864][T31120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6817'.
[ 1540.044886][T31120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6817'.
[ 1540.103078][T31103] netlink: 'syz.5.6813': attribute type 1 has an invalid length.
[ 1540.195430][T31124] fuse: Bad value for 'fd'
[ 1540.202074][T31103] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1540.373661][T31110] mac80211_hwsim hwsim65 wlan1: entered promiscuous mode
[ 1540.441109][T31131] ip_tables: iptables: counters copy to user failed while replacing table
[ 1541.582522][T24344] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1541.734786][T24344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1541.736582][T24344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1541.736648][T24344] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1541.736689][T24344] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x7F, changing to 0xF
[ 1541.736713][T24344] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64
[ 1541.741801][T24344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.741828][T24344] usb 2-1: Product: syz
[ 1541.741844][T24344] usb 2-1: Manufacturer: syz
[ 1541.741860][T24344] usb 2-1: SerialNumber: syz
[ 1541.881932][T31158] FAULT_INJECTION: forcing a failure.
[ 1541.881932][T31158] name failslab, interval 1, probability 0, space 0, times 0
[ 1541.881967][T31158] CPU: 0 UID: 0 PID: 31158 Comm: syz.3.6828 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1541.881995][T31158] Tainted: [L]=SOFTLOCKUP
[ 1541.882003][T31158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1541.882016][T31158] Call Trace:
[ 1541.882025][T31158]  <TASK>
[ 1541.882034][T31158]  dump_stack_lvl+0xe8/0x150
[ 1541.882069][T31158]  should_fail_ex+0x410/0x560
[ 1541.882102][T31158]  should_failslab+0xa8/0x100
[ 1541.882130][T31158]  __kmalloc_cache_noprof+0xa3/0x600
[ 1541.882154][T31158]  ? io_ring_ctx_alloc+0x54/0xb80
[ 1541.882185][T31158]  ? io_ring_ctx_alloc+0x54/0xb80
[ 1541.882223][T31158]  io_ring_ctx_alloc+0x54/0xb80
[ 1541.882256][T31158]  ? io_prepare_config+0x8c8/0xc70
[ 1541.882285][T31158]  io_uring_create+0x50/0x990
[ 1541.882321][T31158]  __se_sys_io_uring_setup+0x2a8/0x2c0
[ 1541.882346][T31158]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1541.882377][T31158]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[ 1541.882417][T31158]  ? __pfx_ksys_write+0x10/0x10
[ 1541.882460][T31158]  do_syscall_64+0x166/0x520
[ 1541.882487][T31158]  ? trace_irq_disable+0x3b/0x140
[ 1541.882509][T31158]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1541.882531][T31158]  ? clear_bhb_loop+0x70/0xc0
[ 1541.882555][T31158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1541.882577][T31158] RIP: 0033:0x7faf0779e159
[ 1541.882597][T31158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1541.882615][T31158] RSP: 002b:00007faf059f5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 1541.882638][T31158] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007faf0779e159
[ 1541.882654][T31158] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000e26
[ 1541.882686][T31158] RBP: 0000200000000a80 R08: 0000200000000340 R09: 0000000000000000
[ 1541.882702][T31158] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[ 1541.882718][T31158] R13: 0000200000000b10 R14: 00007faf059f5fd8 R15: 0000000000000000
[ 1541.882752][T31158]  </TASK>
[ 1542.079448][ T8482] usb 6-1: USB disconnect, device number 24
[ 1542.422088][T20449] bond0 (unregistering): Released all slaves
[ 1542.912434][T24345] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 1543.072366][T24345] usb 1-1: Using ep0 maxpacket: 32
[ 1543.073261][T24345] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1543.075158][T24345] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[ 1543.075185][T24345] usb 1-1: config 0 has no interface number 0
[ 1543.075264][T24345] usb 1-1: config 0 interface 12 has no altsetting 0
[ 1543.077770][T24344] cdc_ncm 2-1:1.0: bind() failure
[ 1543.098415][T24344] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1543.098484][T24344] cdc_ncm 2-1:1.1: bind() failure
[ 1543.141203][T24345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1543.141231][T24345] usb 1-1: Product: syz
[ 1543.141247][T24345] usb 1-1: Manufacturer: syz
[ 1543.141263][T24345] usb 1-1: SerialNumber: syz
[ 1543.168603][T24345] usb 1-1: config 0 descriptor??
[ 1543.305087][T24331] usb 2-1: USB disconnect, device number 60
[ 1543.721162][T31187] bridge0: port 3(veth0_to_bridge) entered blocking state
[ 1543.724530][T31187] bridge0: port 3(veth0_to_bridge) entered disabled state
[ 1543.724715][T31187] veth0_to_bridge: entered allmulticast mode
[ 1543.726598][T31187] veth0_to_bridge: entered promiscuous mode
[ 1543.726746][T31187] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1543.727287][T31187] bridge0: port 3(veth0_to_bridge) entered blocking state
[ 1543.727391][T31187] bridge0: port 3(veth0_to_bridge) entered forwarding state
[ 1543.932587][T24345] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1543.932718][T24345] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[ 1543.932738][T24345] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1543.932849][T24345] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[ 1543.941351][T24345] usb 1-1: USB disconnect, device number 59
[ 1544.112264][T24331] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1544.218381][T31195] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6839'.
[ 1544.262471][T24331] usb 4-1: Using ep0 maxpacket: 32
[ 1544.263920][T24331] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1544.267552][T24331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1544.267595][T24331] usb 4-1: config 0 has no interfaces?
[ 1544.267615][T24331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.288179][T24331] usb 4-1: config 0 descriptor??
[ 1544.521597][T31189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6837'.
[ 1544.552753][ T5686] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1544.688562][T24345] usb 4-1: USB disconnect, device number 112
[ 1544.724979][ T5686] usb 6-1: Using ep0 maxpacket: 16
[ 1544.725997][ T5686] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1544.727525][ T5686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1544.727554][ T5686] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1544.727592][ T5686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.731261][ T5686] usb 6-1: config 0 descriptor??
[ 1545.117465][T31195] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1545.486792][T31208] syzkaller0: entered promiscuous mode
[ 1545.486810][T31208] syzkaller0: entered allmulticast mode
[ 1545.550369][T31208] binder_alloc: 31207: binder_alloc_buf, no vma
[ 1545.640883][ T5686] usbhid 6-1:0.0: can't add hid device: -71
[ 1545.641490][ T5686] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1545.667396][ T5686] usb 6-1: USB disconnect, device number 25
[ 1546.026035][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.026092][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.145289][T31219] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6844'.
[ 1546.147605][T31220] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6844'.
[ 1546.611592][T31225] binder: 31224:31225 ioctl c0306201 200000000680 returned -14
[ 1546.776695][T31227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6846'.
[ 1547.592158][T31233] binfmt_misc: register: failed to install interpreter ./file0
[ 1547.667090][   T30] audit: type=1326 audit(1790060248.931:11299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31238 comm="syz.0.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1547.667167][   T30] audit: type=1326 audit(1790060248.931:11300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31238 comm="syz.0.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5615f5aebb code=0x7ffc0000
[ 1547.667216][   T30] audit: type=1326 audit(1790060248.931:11301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31238 comm="syz.0.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1547.667349][   T30] audit: type=1326 audit(1790060248.931:11302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31238 comm="syz.0.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1547.667399][   T30] audit: type=1326 audit(1790060248.931:11303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31238 comm="syz.0.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1547.667446][   T30] audit: type=1326 audit(1790060248.931:11304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31238 comm="syz.0.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1547.668514][   T30] audit: type=1326 audit(1790060248.931:11305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31238 comm="syz.0.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1547.668569][   T30] audit: type=1326 audit(1790060248.931:11306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31238 comm="syz.0.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5615f9e159 code=0x7ffc0000
[ 1547.668617][   T30] audit: type=1326 audit(1790060248.931:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31238 comm="syz.0.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5615f5a5ac code=0x7ffc0000
[ 1547.668665][   T30] audit: type=1326 audit(1790060248.931:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31238 comm="syz.0.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5615f5a60e code=0x7ffc0000
[ 1550.702389][T31257] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6853'.
[ 1550.702767][T31257] Unknown options in mask b7f2
[ 1550.728874][T31257] ip_tables: iptables: counters copy to user failed while replacing table
[ 1550.754178][T31262] netlink: 'syz.0.6851': attribute type 1 has an invalid length.
[ 1550.812634][T24344] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1550.921894][T31266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6855'.
[ 1550.964800][T31266] bond1: Invalid ad_actor_system MAC address.
[ 1550.964822][T31266] bond1: option ad_actor_system: invalid value (3303287)
[ 1550.967089][T31266] bond1 (unregistering): Released all slaves
[ 1550.992514][T24344] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1550.996635][T24344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1550.996659][T24344] usb 2-1: Product: syz
[ 1550.996674][T24344] usb 2-1: Manufacturer: syz
[ 1550.996688][T24344] usb 2-1: SerialNumber: syz
[ 1551.043583][T24331] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1551.069658][ T8482] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1551.194859][T24331] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1551.197303][T24331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1551.222033][T24331] usb 4-1: config 0 descriptor??
[ 1551.243052][T24331] cp210x 4-1:0.0: cp210x converter detected
[ 1551.490222][T31253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1551.490860][T31253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1551.542545][T24345] usb 6-1: new low-speed USB device number 26 using dummy_hcd
[ 1551.712282][T24345] usb 6-1: Invalid ep0 maxpacket: 64
[ 1551.762394][ T5678] usb 2-1: USB disconnect, device number 61
[ 1551.843623][T24331] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71
[ 1551.843644][T24331] cp210x 4-1:0.0: GPIO initialisation failed: -71
[ 1551.862859][T24345] usb 6-1: new low-speed USB device number 27 using dummy_hcd
[ 1551.886068][T24331] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1551.890753][T24331] usb 4-1: USB disconnect, device number 113
[ 1551.912359][T24331] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1551.912955][T24331] cp210x 4-1:0.0: device disconnected
[ 1551.963063][ T5686] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1552.022368][T24345] usb 6-1: Invalid ep0 maxpacket: 64
[ 1552.022567][T24345] usb usb6-port1: attempt power cycle
[ 1552.103166][ T8482] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1552.103325][ T8482] ath9k_htc: Failed to initialize the device
[ 1552.103885][ T5678] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1552.136074][ T5686] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[ 1552.138790][ T5686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1552.138852][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1552.294591][ T5686] rtsx_usb 1-1:1.0: probe with driver rtsx_usb failed with error -22
[ 1552.399195][T24345] usb 6-1: new low-speed USB device number 28 using dummy_hcd
[ 1552.415026][T24345] usb 6-1: Invalid ep0 maxpacket: 64
[ 1552.562430][T24345] usb 6-1: new low-speed USB device number 29 using dummy_hcd
[ 1552.583368][T24345] usb 6-1: Invalid ep0 maxpacket: 64
[ 1552.583549][T24345] usb usb6-port1: unable to enumerate USB device
[ 1553.222767][T26483] Bluetooth: hci0: command 0x0406 tx timeout
[ 1553.323573][ T5686] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1553.472227][ T5686] usb 4-1: Using ep0 maxpacket: 8
[ 1553.473949][ T5686] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[ 1553.474698][ T5686] usb 4-1: config 0 has no interfaces?
[ 1553.477063][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1553.477087][ T5686] usb 4-1: Product: syz
[ 1553.477103][ T5686] usb 4-1: Manufacturer: syz
[ 1553.477118][ T5686] usb 4-1: SerialNumber: syz
[ 1553.525792][ T5686] usb 4-1: config 0 descriptor??
[ 1553.837589][ T5678] usb 4-1: USB disconnect, device number 114
[ 1553.942409][ T5686] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1554.092598][ T5686] usb 2-1: Using ep0 maxpacket: 32
[ 1554.093454][ T5686] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1554.098631][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1554.098680][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1554.098787][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1554.101308][ T5686] usb 2-1: config 0 descriptor??
[ 1554.153406][ T5686] hub 2-1:0.0: USB hub found
[ 1554.353638][ T5686] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1554.693570][T24345] usb 1-1: USB disconnect, device number 60
[ 1554.749469][ T5686] hid-generic 0003:046D:C31C.0056: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0
[ 1554.789561][ T5686] usb 2-1: USB disconnect, device number 62
[ 1554.925512][T31300] fido_id[31300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1555.192242][T24345] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1555.346687][T24345] usb 1-1: Using ep0 maxpacket: 8
[ 1555.347527][T24345] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1555.350814][T24345] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1555.350863][T24345] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1555.350929][T24345] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1555.350959][T24345] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1555.350987][T24345] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1555.402435][T24345] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1555.402497][T24345] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1555.402537][T24345] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1555.402565][T24345] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1555.402597][T24345] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1555.467898][T24345] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1555.467960][T24345] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1555.467995][T24345] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1555.468026][T24345] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1555.468058][T24345] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1555.537205][T24345] usb 1-1: string descriptor 0 read error: -22
[ 1555.537350][T24345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1555.600527][T24345] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1555.964925][T31319] xt_bpf: check failed: parse error
[ 1555.967043][T31319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6873'.
[ 1556.582526][ T5678] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1557.187514][T31341] bond2 (unregistering): Released all slaves
[ 1558.099645][ T5686] usb 1-1: USB disconnect, device number 61
[ 1558.482270][T24345] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1558.502380][ T5686] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[ 1558.632196][T24345] usb 4-1: Using ep0 maxpacket: 16
[ 1558.633079][T24345] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[ 1558.634102][T24345] usb 4-1: config 0 has an invalid interface number: 126 but max is 0
[ 1558.634127][T24345] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1558.634153][T24345] usb 4-1: config 0 has no interface number 0
[ 1558.634180][T24345] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1558.634198][T24345] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[ 1558.634217][T24345] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[ 1558.634235][T24345] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 31353, setting to 1024
[ 1558.634252][T24345] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1558.634268][T24345] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1558.634296][T24345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1558.636803][T24345] usb 4-1: config 0 descriptor??
[ 1558.638034][T31366] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1558.638272][T31366] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1558.689446][ T5686] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[ 1558.706764][ T5686] usb 1-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[ 1558.706887][ T5686] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 12032, setting to 64
[ 1558.706912][ T5686] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1558.721076][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1558.721150][ T5686] usb 1-1: Product: syz
[ 1558.721191][ T5686] usb 1-1: Manufacturer: syz
[ 1558.721236][ T5686] usb 1-1: SerialNumber: syz
[ 1558.753639][T24345] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1558.967510][T24345] usb 4-1: USB disconnect, device number 115
[ 1558.990774][T31363] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1559.017719][ T5686] snd-usb-caiaq 1-1:1.0: invalid EPs
[ 1559.017746][ T5686] usb 1-1: unable to init card! (ret=-22)
[ 1559.018144][ T5686] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[ 1559.151516][T31376] xt_NETMAP: bad rangesize 37.
[ 1559.230985][ T5678] usb 1-1: USB disconnect, device number 62
[ 1559.433067][ T5686] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1559.584063][ T5686] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1559.585062][ T5686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1559.585152][ T5686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1559.585191][ T5686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1559.594696][ T5686] usb 6-1: config 0 descriptor??
[ 1560.047715][ T5686] hid_parser_main: 80 callbacks suppressed
[ 1560.047740][ T5686] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0
[ 1560.047771][ T5686] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0
[ 1560.047797][ T5686] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0
[ 1560.049615][ T5686] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0
[ 1560.049647][ T5686] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0
[ 1560.049674][ T5686] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0
[ 1560.049853][ T5686] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0
[ 1560.151353][ T5686] cp2112 0003:10C4:EA90.0057: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[ 1560.239884][ T5686] cp2112 0003:10C4:EA90.0057: Part Number: 0x00 Device Version: 0x00
[ 1560.676744][T31402] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6896'.
[ 1560.697417][T31402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6896'.
[ 1560.847559][ T5686] cp2112 0003:10C4:EA90.0057: error reading lock byte: -32
[ 1560.921557][T31376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1560.931488][T31376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1561.281686][T31413] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1561.312209][T24336] usb 6-1: reset high-speed USB device number 31 using dummy_hcd
[ 1561.387652][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1561.388862][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1561.389370][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1561.389759][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1561.390174][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1561.390577][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1561.390993][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1561.391395][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1561.391836][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1561.392301][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1562.239554][ T8482] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1562.637757][ T8482] usb 1-1: Using ep0 maxpacket: 8
[ 1563.581190][ T8482] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1565.053062][    C0] sched: DL replenish lagged too much
[ 1566.392182][    C0] net_ratelimit: 12437 callbacks suppressed
[ 1566.392206][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1566.392603][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1566.393029][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1566.393416][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1566.393811][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1566.394197][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1566.394584][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1566.395038][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1566.395439][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1566.395845][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1568.428118][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1568.905605][ T8482] usb 1-1: unable to read config index 0 descriptor/start: -110
[ 1568.905648][ T8482] usb 1-1: can't read configurations, error -110
[ 1571.402287][    C0] net_ratelimit: 13793 callbacks suppressed
[ 1571.402310][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1571.402675][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1571.403026][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1571.403443][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1571.403780][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1571.404124][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1571.404460][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1571.404797][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1571.405191][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1571.405576][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1572.678644][T24336] usb 6-1: device descriptor read/64, error -110
[ 1573.143243][T24336] usb 6-1: reset high-speed USB device number 31 using dummy_hcd
[ 1573.349826][ T8482] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1574.186727][ T8482] usb 1-1: device descriptor read/64, error -32
[ 1574.346232][ T8482] usb usb1-port1: attempt power cycle
[ 1576.412404][    C0] net_ratelimit: 15563 callbacks suppressed
[ 1576.412430][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1576.412497][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1576.412774][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1576.413245][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1576.413640][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1576.414022][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1576.414037][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1576.414511][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1576.414875][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1576.415208][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1577.651066][T24336] usb 6-1: device descriptor read/64, error -32
[ 1577.677485][ T8482] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1579.298401][ T8482] usb 1-1: device descriptor read/8, error -32
[ 1581.422235][    C0] net_ratelimit: 15290 callbacks suppressed
[ 1581.422259][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1581.422587][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1581.422906][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1581.423103][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1581.423507][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1581.423876][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1581.424321][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1581.424516][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1581.424711][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1581.425071][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1582.273987][T24336] usb 6-1: reset high-speed USB device number 31 using dummy_hcd
[ 1583.587432][T24336] usb 6-1: device descriptor read/8, error -32
[ 1586.432112][    C0] net_ratelimit: 15928 callbacks suppressed
[ 1586.432136][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1586.432556][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1586.432728][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1586.432936][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1586.433233][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1586.433654][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1586.433944][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1586.434018][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1586.434316][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1586.434737][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1591.442504][    C1] net_ratelimit: 16177 callbacks suppressed
[ 1591.442529][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1591.442544][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1591.442951][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1591.443299][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1591.443772][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1591.443830][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1591.444171][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1591.444613][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1591.445146][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1591.445253][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1596.452218][    C0] net_ratelimit: 13640 callbacks suppressed
[ 1596.452243][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1596.452599][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1596.452674][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1596.453047][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1596.453470][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1596.453819][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1596.454028][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1596.454327][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1596.454755][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1596.455133][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1601.462280][    C0] net_ratelimit: 13892 callbacks suppressed
[ 1601.462312][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1601.462617][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1601.462657][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1601.463134][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1601.463545][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1601.463877][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1601.464097][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1601.464301][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1601.464661][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1601.464981][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1606.472236][    C0] net_ratelimit: 15743 callbacks suppressed
[ 1606.472259][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1606.472620][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1606.473046][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1606.473133][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1606.473425][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1606.473732][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1606.474217][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1606.474399][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1606.474621][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1606.474976][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1609.294404][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 1609.307986][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 1611.482295][    C1] net_ratelimit: 15650 callbacks suppressed
[ 1611.482319][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1611.482368][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1611.482738][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1611.483203][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1611.483606][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1611.483782][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1611.483970][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1611.484475][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1611.484869][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1611.485202][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1616.492217][    C1] net_ratelimit: 15474 callbacks suppressed
[ 1616.492241][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1616.492339][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1616.492736][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1616.493104][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1616.493596][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1616.493661][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1616.494011][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1616.494352][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1616.494823][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1616.495111][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1621.502252][    C0] net_ratelimit: 16981 callbacks suppressed
[ 1621.502276][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1621.502622][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1621.503084][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1621.503179][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1621.503487][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1621.503805][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1621.504255][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1621.504536][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1621.504647][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1621.505014][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1626.512185][    C1] net_ratelimit: 17957 callbacks suppressed
[ 1626.512209][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1626.512526][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1626.512911][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1626.513232][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1626.513512][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1626.513660][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1626.514082][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1626.514399][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1626.514744][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1626.514870][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1631.522464][    C0] net_ratelimit: 14919 callbacks suppressed
[ 1631.522488][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1631.522611][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1631.522856][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1631.523181][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1631.523603][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1631.523972][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1631.524002][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1631.524304][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1631.524712][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1631.525109][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1633.064401][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1636.532481][    C0] net_ratelimit: 15640 callbacks suppressed
[ 1636.532507][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1636.532541][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1636.532934][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1636.533302][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1636.533758][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1636.533919][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1636.534335][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1636.534705][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1636.535189][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1636.535246][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1641.542241][    C0] net_ratelimit: 15748 callbacks suppressed
[ 1641.542266][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1641.542659][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1641.542987][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1641.543409][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1641.543439][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1641.543831][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1641.544150][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1641.544603][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1641.545145][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1641.545546][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1646.552376][    C1] net_ratelimit: 13470 callbacks suppressed
[ 1646.552389][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1646.552400][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1646.552765][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1646.553215][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1646.553610][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1646.553878][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1646.553935][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1646.554424][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1646.554847][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1646.555184][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1651.562370][    C0] net_ratelimit: 15326 callbacks suppressed
[ 1651.562412][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1651.562508][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1651.563062][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1651.563498][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1651.563846][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1651.564011][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1651.564335][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1651.564734][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1651.565154][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1651.565451][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1656.572266][    C0] net_ratelimit: 15854 callbacks suppressed
[ 1656.572287][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1656.572725][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1656.572800][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1656.573053][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1656.573521][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1656.573918][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1656.574167][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1656.574253][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1656.574714][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1656.575150][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1661.582091][    C0] net_ratelimit: 15156 callbacks suppressed
[ 1661.582116][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1661.582421][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1661.582853][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1661.583219][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1661.583431][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1661.583520][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1661.583952][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1661.584621][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1661.584758][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1661.584966][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1666.592314][    C0] net_ratelimit: 15822 callbacks suppressed
[ 1666.592339][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1666.592518][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1666.592715][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1666.593197][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1666.593661][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1666.594000][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1666.594090][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1666.594475][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1666.594870][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1666.595233][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1669.642409][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.655803][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 1671.602263][    C0] net_ratelimit: 16583 callbacks suppressed
[ 1671.602272][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1671.602287][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1671.602649][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1671.602975][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1671.603474][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1671.603742][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1671.603868][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1671.604200][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1671.604701][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1671.605126][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1676.612401][    C0] net_ratelimit: 15729 callbacks suppressed
[ 1676.612424][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1676.612836][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1676.612839][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1676.613149][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1676.613584][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1676.613959][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1676.614218][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1676.614284][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1676.614750][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1676.615182][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1681.622214][    C0] net_ratelimit: 15396 callbacks suppressed
[ 1681.622247][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1681.622697][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1681.623121][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1681.623474][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1681.623543][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1681.623876][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1681.624352][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1681.624749][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1681.625147][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1681.625483][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1686.632086][    C0] net_ratelimit: 14513 callbacks suppressed
[ 1686.632106][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1686.632558][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1686.632612][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1686.632916][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1686.633275][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1686.633577][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1686.633995][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1686.634330][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1686.634668][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1686.634676][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1691.642348][    C0] net_ratelimit: 13732 callbacks suppressed
[ 1691.642370][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1691.642768][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1691.643175][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1691.643521][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1691.643663][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1691.643799][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1691.644230][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1691.644608][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1691.644945][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1691.645294][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1696.652172][    C0] net_ratelimit: 14332 callbacks suppressed
[ 1696.652195][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1696.652660][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1696.652691][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1696.653020][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1696.653466][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1696.653820][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1696.654294][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1696.654696][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1696.655135][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1696.655199][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1701.662227][    C0] net_ratelimit: 14822 callbacks suppressed
[ 1701.662251][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1701.662658][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1701.663033][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1701.663502][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1701.663557][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1701.663908][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1701.664305][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1701.664641][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1701.665129][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1701.665536][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1706.672240][    C0] net_ratelimit: 14685 callbacks suppressed
[ 1706.672263][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1706.672469][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1706.672682][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1706.673023][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1706.673391][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1706.673734][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1706.674017][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1706.674361][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1706.674755][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1706.675099][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1711.682216][    C0] net_ratelimit: 15029 callbacks suppressed
[ 1711.682240][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1711.682635][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1711.683062][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1711.683513][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1711.683818][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1711.683935][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1711.684242][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1711.684703][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1711.685111][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1711.685528][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1716.693374][    C0] net_ratelimit: 15214 callbacks suppressed
[ 1716.693399][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1716.693729][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1716.694135][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1716.694621][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1716.694875][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1716.695037][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1716.695467][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1716.695737][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1716.695971][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1716.696331][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1721.702256][    C0] net_ratelimit: 16486 callbacks suppressed
[ 1721.702280][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1721.702765][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1721.703216][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1721.703564][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1721.703850][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1721.703957][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1721.704467][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1721.704714][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1721.704866][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1721.705295][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1726.712118][    C0] net_ratelimit: 15922 callbacks suppressed
[ 1726.712142][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1726.712633][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1726.713051][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1726.713474][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1726.713847][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1726.713859][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1726.714185][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1726.714565][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1726.714720][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1726.715099][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1730.475417][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.488487][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 1731.722474][    C0] net_ratelimit: 14826 callbacks suppressed
[ 1731.722474][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1731.722499][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1731.722836][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1731.723237][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1731.723421][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1731.723644][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1731.724013][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1731.724390][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1731.724752][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:cb:d5:c9:29:73, vlan:0)
[ 1731.725083][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1733.394684][   T31] INFO: task kworker/0:6:5686 blocked for more than 159 seconds.
[ 1733.394715][   T31]       Tainted: G             L      syzkaller #0
[ 1733.394728][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1733.394739][   T31] task:kworker/0:6     state:D stack:20904 pid:5686  tgid:5686  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1733.394798][   T31] Workqueue: usb_hub_wq hub_event
[ 1733.394881][   T31] Call Trace:
[ 1733.394889][   T31]  <TASK>
[ 1733.394904][   T31]  __schedule+0x17db/0x58f0
[ 1733.394953][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1733.394993][   T31]  ? __pfx___schedule+0x10/0x10
[ 1733.395047][   T31]  ? schedule+0x90/0x2b0
[ 1733.395075][   T31]  schedule+0x164/0x2b0
[ 1733.395103][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1733.395129][   T31]  __mutex_lock+0x7c1/0x1550
[ 1733.395163][   T31]  ? __mutex_lock+0x5d4/0x1550
[ 1733.395196][   T31]  ? hub_event+0x618/0x4d30
[ 1733.395225][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1733.395262][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1733.395291][   T31]  ? pm_runtime_barrier+0x140/0x1c0
[ 1733.395325][   T31]  hub_event+0x618/0x4d30
[ 1733.395352][   T31]  ? __lock_acquire+0x747/0x2de0
[ 1733.395383][   T31]  ? __lock_acquire+0x747/0x2de0
[ 1733.395406][   T31]  ? look_up_lock_class+0x57/0x110
[ 1733.395435][   T31]  ? register_lock_class+0x31/0x2e0
[ 1733.395479][   T31]  ? trace_hrtimer_start+0x82/0x200
[ 1733.395521][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1733.395562][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1733.395599][   T31]  ? rcu_is_watching+0x16/0xb0
[ 1733.395629][   T31]  ? process_scheduled_works+0x97a/0x1630
[ 1733.395661][   T31]  process_scheduled_works+0xc3d/0x1630
[ 1733.395724][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1733.395761][   T31]  ? assign_work+0x3cf/0x5d0
[ 1733.395796][   T31]  worker_thread+0xa47/0xfb0
[ 1733.395842][   T31]  ? __kthread_parkme+0x71/0x1f0
[ 1733.395885][   T31]  kthread+0x38b/0x480
[ 1733.395909][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1733.395938][   T31]  ? __pfx_kthread+0x10/0x10
[ 1733.395961][   T31]  ret_from_fork+0x514/0xb70
[ 1733.395988][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1733.396011][   T31]  ? __switch_to+0xc89/0x1420
[ 1733.396045][   T31]  ? __pfx_kthread+0x10/0x10
[ 1733.396069][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1733.396122][   T31]  </TASK>
[ 1733.396232][   T31] 
[ 1733.396232][   T31] Showing all locks held in the system:
[ 1733.396242][   T31] locks held by kthreadd/2: 1, last CPU#0:
[ 1733.396319][   T31]  #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[ 1733.396444][   T31] locks held by kworker/0:1/10: 3, on CPU#0:
[ 1733.396465][   T31]  #0: ffff888034b9f540 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1733.396551][   T31]  #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1733.396622][   T31]  #2: ffff88807b9620e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[ 1733.396765][   T31] locks held by kworker/u8:0/12: 3, last CPU#1:
[ 1733.396780][   T31]  #0: ffff888012a54940 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1733.396834][   T31]  #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1733.396905][   T31]  #2: ffff88802bd58260 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110
[ 1733.396964][   T31] locks held by pr/ttyS0/16: 1, last CPU#1:
[ 1733.396978][   T31]  #0: ffffffff8ec36538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[ 1733.397033][   T31] locks held by khungtaskd/31: 1, last CPU#1:
[ 1733.397048][   T31]  #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1733.397100][   T31] locks held by kworker/u8:2/37: 4, last CPU#1:
[ 1733.397114][   T31]  #0: ffff88802f85b140 ((wq_completion)wg-kex-wg2#23){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1733.397177][   T31]  #1: ffffc90000ad7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1733.397235][   T31]  #2: ffff88802a755440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[ 1733.397298][   T31]  #3: ffff888025c96640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[ 1733.397362][   T31] locks held by kworker/u8:3/49: 2, last CPU#1:
[ 1733.397377][   T31]  #0: ffff888052a42940 ((wq_completion)wg-kex-wg0#25){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1733.397439][   T31]  #1: ffffc90000ba7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1733.397523][   T31] locks held by kworker/u8:4/59: 4, last CPU#1: