last executing test programs:

13m12.375948833s ago: executing program 4 (id=723):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a4ac7c"], 0x0)
unshare(0x2000400)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004800), 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x97, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local, {[@noop, @generic={0x82, 0xf, "d1d9c38b25815d025474275fec"}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0)

13m11.047956003s ago: executing program 4 (id=734):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={<r1=>r0, &(0x7f0000000040)=',\x00', 0x458040, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x3e]}, {0x3, 0x2, 0x6, 0x8}}, 0x2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x10})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8000}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x48881)
setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0xffffffff, 0x4)

13m10.996103966s ago: executing program 4 (id=735):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
unshare(0x6a040000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, 0x0, 0x4040884)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x2, 0x50000000, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00')

13m10.707860049s ago: executing program 4 (id=737):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xd}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}}, 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x690b4, 0x0)

13m10.616793854s ago: executing program 4 (id=739):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmsg(0xffffffffffffffff, 0x0, 0x44014)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@hyper}})
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000140)=0xb0000)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

13m10.259776392s ago: executing program 4 (id=742):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, 0x0, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x3b0982, 0x0) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0xf, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async)
r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, <r8=>0x0})
syz_open_procfs(r8, &(0x7f0000000640)='net/nf_conntrack_expect\x00')
keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0)
socket(0x1d, 0x4, 0x6) (async)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000240)={0x0, 0x3, 0xffffffff, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
socket$nl_generic(0x10, 0x3, 0x10)

13m6.054089245s ago: executing program 1 (id=769):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)={0x33}, 0x8)
connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x2c, 0x105640)
ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000180))
getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

13m3.215088888s ago: executing program 1 (id=779):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044890) (async)
r0 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x1, 0x10000004, 0x8}, 0x2c) (async)
r2 = userfaultfd(0x80001) (async)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) (async)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) (async)
close_range(r2, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
sendmsg$inet(r5, 0x0, 0x8084) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x20000001)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0108000000000000f3ff010000020900020073797a30000000000900010073797a30000000002c0003800800014000000000180003801400010076657468305f766c616e00000000000008000240000000041400000011000100"/126], 0x80}}, 0x0)
close(r6) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a20000000000a01010000000000000000010000030900010073797a31000000e13f000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000050900010073797a3100000000140000001100010000000000040000000700000a28f97b"], 0x88}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

13m3.057383621s ago: executing program 1 (id=782):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa6601, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000300)) (async)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="8b52d2ab4de66f9b1a9d8a80c2dbec8c03556c3f2068134863e376be9ea3538840da3c2a15c2af9227957138b5aa859b0173dbe4212552b2c59953152669a4b73270400c5543467c9dde2b26113066bfb7545ca934747f9786315932543c5f687c2be2e35881960e23dd18e919db95347b629859a0414ed8a799185d6bcfe728b1d6f9f42147f6234c0f72c04ff5025f24f818c2898541cbb45aa43bc666d9efc11373b184b848ade82e113daf8f57db305ca1d199bfc65c8b650212208536", @ANYRES32], 0x0) (async)
syz_usb_connect$midi(0x6, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0xb, 0x80, 0xf6, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x66, 0xc4}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x6, 0xd, 0x1, {0xc, 0x25, 0x1, 0x8, "17cfa0aa625578e4"}}}]}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0xa9, 0x10, 0x3, 0x40, 0x7}, 0x10, &(0x7f00000000c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x7, 0x15, 0x3, 0xfa}]}, 0xb, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2409}}, {0xa, &(0x7f0000000240)=@string={0xa, 0x3, "b6e4019473776fc5"}}, {0x5a, &(0x7f0000000280)=@string={0x5a, 0x3, "cb600d4ee1f41cad65ef9ef879b34470c9c6e99836318f00c4d2bb270f7cd9fed1028f91bb4a3ec16f41f9bbd9bfce44578a91584c10ca2e43837a515525855dc4adf3f84f3a8cb5eff7c59551f041999bd297c24fec5633"}}, {0x53, &(0x7f00000006c0)=@string={0x53, 0x3, "bdb44c08c92868a6770edd72e65b70f17c2c1701984ebbe76e7d1e216fd016bf4b1241744215180b8685fc6805db1993e9efb61cac6beed7feaa17ca6314d2ef22372c59918e75123c4a8df43e9471c303"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44a}}, {0x63, &(0x7f00000004c0)=@string={0x63, 0x3, "bb94e7c34e858735004acddf3d493a3c3c2acfab9407d15615e8a8a0ba12900176ca901a99f1355123da2de7c2abfc1ecb9f8c92270affe24ca6b5245c43506b784492c195e77d090a7ab867c4f84daa91a688a8a2b39de4a2e87b8825c9d92c46"}}, {0x82, &(0x7f0000000540)=@string={0x82, 0x3, "2885c8e02b565df196e0b1a1f242688b7fb312bc14d2d65c79a7d0b64f4b54db2eee7f2ffb82da4465815cc311386bbd0f710007b0f13b0f1a64f1bd342537bd8ad829a9cb294774ab59d69ecc4878335ec5828cd5ec143667c84516b196b27d59895cda7e9ab66c12069e01fdf66c7ccc4f9cb02193e38a5c113e519b35887d"}}]}) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
write(r1, &(0x7f00000003c0)="53984b65352e959dce7f83d72f0b88f2c5b4825ae8e8f1145e7ebedcecfc4b39c1aecc5c67282801b3e6cc32c1ce19b49a803d6a7f25292174c3975ca9d4d10c58fd683bd7eb5dcb9f98a758ecbf7894a59dd3e5b2384e131c2eef5ae20e33ed417448cbd5eaadd7c07a24f69d49cb8ec7bf4126ef43459abb1a8cb98d384060236027f88c9b475c7416f6ab69d44f7460a349c7a409b93b77e03b11586ade3fe5d9", 0xa2)

12m59.948907339s ago: executing program 1 (id=814):
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000403512038240000102030109026e00030101c010080b0002010130070904000000010130000a2401100a000700000009040100000102300009040101010102300009050109200040d4840a252500000300010400090402000001023000090402010101023000090582091002fa0a020a25"], 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x2, 0x9e, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x2, 0x1, 0x6, 0x20, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "93"}, {0x5, 0x24, 0x0, 0x9ed9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x3ff, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @dmm={0x7, 0x24, 0x14, 0x80, 0x3ff}, @dmm={0x7, 0x24, 0x14, 0x9a2, 0x5eb}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0x2, 0xd, 0x8000, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x5, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x2, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe, 0x5, 0x87}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x6, 0x6, 0xfa, 0x8, 0xf3}, 0xa0, &(0x7f0000000200)={0x5, 0xf, 0xa0, 0x6, [@generic={0x60, 0x10, 0x2, "db87b7b498f244857c346caa9dab04c6e43d5940ff3954b35c40a3cd67dea191aee79d9ec379c49524b4b037e459be21b0e0fb6a646c3b7369f126f582930207c5984d12d3bf0742b23e31d318daf621946dd00a5040318712280921b1"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0x5, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x2400, 0x870f, 0x3, [0x3f00, 0x3ff0, 0x3f00, 0xff0000, 0xc000]}, @generic={0x7, 0x10, 0x3, "aaed47df"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9, 0xf7, 0xfff7}]}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaab1f, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaab1f, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m58.366596018s ago: executing program 1 (id=819):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmsg(0xffffffffffffffff, 0x0, 0x44014)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@hyper}})
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000140)=0xb0000)
ptrace(0x10, r3)
close_range(r2, 0xffffffffffffffff, 0x0)

12m58.148396894s ago: executing program 1 (id=821):
socket$packet(0x11, 0x2, 0x300)
unshare(0x2c020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xa)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"})
socket$inet(0x2, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6)
ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]})
socket$nl_netfilter(0x10, 0x3, 0xc)

12m56.771979672s ago: executing program 0 (id=827):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000000a000000000000", 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r3, 0x0, 0xffffffdb)
openat$audio1(0xffffffffffffff9c, &(0x7f00000036c0), 0x80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
socket$alg(0x26, 0x5, 0x0)
r5 = socket$kcm(0x2d, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000240)={<r6=>0xffffffffffffffff})
r7 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xecd6, 0x20000, 0x7, 0x304, 0x0, r6})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r8 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfffffffffffffecd}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_NET_NS_PID]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

12m56.237223216s ago: executing program 0 (id=828):
socket$tipc(0x1e, 0x5, 0x0)
epoll_create1(0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x4, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0xfffffffffffffffd, 0x1000000000c27, 0x9, 0x7fffffffffffffff, 0x663, 0x7fffffff}, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x1f4, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1c4, 0x2, [@TCA_CGROUP_EMATCHES={0x1c0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1b4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x5}, {0x9, 0x6, 0x1, "ed2982417d8d"}}}, @TCF_EM_CONTAINER={0x70, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x5}, "cb89fab4eb4b6e787adf0a94bc79db7bb9846034af24583660e416be8415d08089c0fdb877d371b82488d68ce1a460715b27af13b12df0c987e9dbdedbb3a6164275e7c8649825168fb1eb5c17a218e0ab876f6a1c04462031686cc0b70cdc2f6c3fa2"}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x8}, {0x4, 0x6, 0x2, "03005f8d0000"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfff9, 0x8, 0x2}, {0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9}, {{0x2}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0xfff4}, {0x8, 0x9, 0x2, 0x6, 0x4, 0x2, 0x1}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x9}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x101, 0x8, 0x4}, {0x3, 0x0, 0x4}}}, @TCF_EM_META={0x9c, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="a8889ce7750b9b5c"]}, @TCA_EM_META_RVALUE={0x34, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="e992ab292ee805", @TCF_META_TYPE_VAR="56c8f9e0477ae516c4", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR='\vl', @TCF_META_TYPE_VAR="5f3444b1643af83ec4be", @TCF_META_TYPE_VAR="89bd4649fdc5311d", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f73ad61748ca69"]}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR='v', @TCF_META_TYPE_VAR="db44c9", @TCF_META_TYPE_VAR="c08405403688c8489a", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="2da2", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x9, 0x2}, {0xbf0, 0x87, 0x2}}}]}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x7f, 0x4, 0xe8}, [@TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="49ad51e892", @TCF_META_TYPE_INT=0x4]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x84}, 0x40010)

12m56.189285612s ago: executing program 0 (id=829):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
shmctl$IPC_RMID(r2, 0x0) (async)
shmctl$IPC_RMID(r2, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

12m56.052070654s ago: executing program 0 (id=830):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7fffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x1c, 0x1, 0x200, "08000000ff0b57e386b7400000000d0000004d000000000000000000fdff45be", 0x4c314356})
close(r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x4, 0x1, 0x4000}, 0x7d, 0x0, 0x4, 0x0, 0x4, 0xf, 0x10, 0x12, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}}}}]}, 0x78}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)

12m56.042987483s ago: executing program 0 (id=831):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmsg(0xffffffffffffffff, 0x0, 0x44014)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@hyper}})
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000140)=0xb0000)
ptrace(0x10, r3)
close_range(r2, 0xffffffffffffffff, 0x0)

12m55.794471844s ago: executing program 0 (id=833):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d080006"], 0xe8}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r2, r0, &(0x7f0000002080)=0x61, 0x7)
writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="511c62bc9cd3172ba4424c0f71cb0a399447238fd9745fc0c08b793e5964", 0x1e}], 0x1)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x20, 0x1, {0x8, 0xb, 0x1, 0x2, 0x1, 0x5, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x8, 0x9, 0x68}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x420, 0x2, 0x8c, 0x3, {0x8, 0x25, 0x1, 0x103, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfc, 0x3, 0x5, {0x8, 0x25, 0x1, 0x71335d388aa27128, 0x33, 0x96, 0x4}}}}}}}}]}}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x204, 0x149f01)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x2dc, 0x4)
ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000001040)={{{0x3}}, 0x0, 0x8fd, 0x0})

12m55.397071036s ago: executing program 2 (id=835):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000bfd2a9c60ed63b02ef9ec12ffd8a7781d62c90e0da27c50b1c8593729df28e55983b6f3af11dd375f6218ba2e9413e003f5a41a1847bf1fab4a8ba4a160ed9feb3386385240", @ANYRES16=r0, @ANYBLOB="07052abd7000fcdbdf2501000000040001801c0002800c00018008000100030000000c0001800800010004000000"], 0x34}, 0x1, 0x0, 0x0, 0x8002}, 0x20000054)

12m55.361028205s ago: executing program 2 (id=836):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, <r2=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6gre0\x00', <r3=>0x0, 0x29, 0x4, 0x6, 0x9, 0x20, @mcast1, @loopback, 0x40, 0x27, 0x100, 0x1}})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0}, './file1\x00'})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r3, r4, 0x3, 0x4, 0x1}, 0x50)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newlink={0x27c, 0x10, 0x1, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x400c}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x240, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x1ff, 0x80000000}}]}, {0x98, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x791, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xa27, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffff4, 0xa62, 0xb0b1}}, @IFLA_VF_TRUST={0xc, 0x9, {0xff, 0x400}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x45, 0x9, 0xa}}, @IFLA_VF_VLAN={0x10, 0x2, {0x43a, 0x7da, 0x7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x760, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x4}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x9ce, 0x1000, 0x8100}}, {0x14, 0x1, {0x0, 0x39a, 0x2, 0x88a8}}, {0x14, 0x1, {0x600000, 0xd4c, 0x1ff, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xd, 0xe}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x7f}}]}, {0xdc, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x4}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0xc1, 0x8, 0x88a8}}, {0x14, 0x1, {0x8, 0x861, 0x5eee, 0x88a8}}, {0x14, 0x1, {0x0, 0x75c, 0x7fffffff, 0x8100}}, {0x14, 0x1, {0x80000000, 0x676, 0xfff}}, {0x14, 0x1, {0x6, 0x1e8, 0x0, 0x8100}}, {0x14, 0x1, {0x6, 0x687, 0x5, 0x8100}}, {0x14, 0x1, {0x8cc4, 0xcf9, 0xfffff801, 0x88a8}}, {0x14, 0x1, {0x3, 0xaa6, 0x6c4, 0x88a8}}, {0x14, 0x1, {0x9, 0x9f9, 0x0, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x43b, 0x9}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x352, 0x760}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x101, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}}]}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040)

12m55.267796132s ago: executing program 2 (id=837):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x44c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0xffffffff, 0x1, 0x0, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b98, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x7, 0xaa92, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cce, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0xfff, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000000000000000000000000000ffffff8000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000020000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ffffffff00000000000000000000000010000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff64010102000000003c00000002000000ac1e01010000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414aa00000000000000000000000000000000000004000000000003000000000000007f000001000000000000000000000000000000003c00000002"], 0x23c}}, 0x0)

12m55.267061982s ago: executing program 2 (id=838):
syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000006980)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0x90, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x2, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x47b1544a55d5904c, 0x1, 0xce, 0x4, {0x8, 0x25, 0x1, 0x2, 0x0, 0x88, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8f, 0x4, 0x3, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x95, 0x7}}}}}}}}]}}, &(0x7f0000006ec0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000006b00)=@string={0x2}}, {0x26, &(0x7f0000006b80)=@string={0x26, 0x3, "7f34cdaa3463492124070017ceeecd0044bce35be3f278a14d87ec891ac31be0906ac334"}}, {0x0, 0x0}, {0x0, 0x0}]})
r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/62, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000180)=0x2, 0x4)
execve(0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000006980)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0x90, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x2, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x47b1544a55d5904c, 0x1, 0xce, 0x4, {0x8, 0x25, 0x1, 0x2, 0x0, 0x88, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8f, 0x4, 0x3, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x95, 0x7}}}}}}}}]}}, &(0x7f0000006ec0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000006b00)=@string={0x2}}, {0x26, &(0x7f0000006b80)=@string={0x26, 0x3, "7f34cdaa3463492124070017ceeecd0044bce35be3f278a14d87ec891ac31be0906ac334"}}, {0x0, 0x0}, {0x0, 0x0}]}) (async)
syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) (async)
syz_usb_control_io$uac3(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) (async)
syz_usb_control_io$uac2(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
socket$kcm(0x10, 0x2, 0x10) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/62, 0x33e000, 0x1000}, 0x20) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000180)=0x2, 0x4) (async)
execve(0x0, 0x0, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) (async)

12m54.981135422s ago: executing program 32 (id=742):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, 0x0, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x3b0982, 0x0) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0xf, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async)
r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, <r8=>0x0})
syz_open_procfs(r8, &(0x7f0000000640)='net/nf_conntrack_expect\x00')
keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0)
socket(0x1d, 0x4, 0x6) (async)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000240)={0x0, 0x3, 0xffffffff, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
socket$nl_generic(0x10, 0x3, 0x10)

12m54.003694952s ago: executing program 2 (id=843):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmsg(0xffffffffffffffff, 0x0, 0x44014)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@hyper}})
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000140)=0xb0000)
ptrace(0x10, r3)
close_range(r2, 0xffffffffffffffff, 0x0)

12m53.5005348s ago: executing program 2 (id=844):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00')
syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/146, 0x92}], 0x1)

12m43.035287495s ago: executing program 33 (id=821):
socket$packet(0x11, 0x2, 0x300)
unshare(0x2c020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xa)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"})
socket$inet(0x2, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6)
ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]})
socket$nl_netfilter(0x10, 0x3, 0xc)

12m40.701840673s ago: executing program 34 (id=833):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d080006"], 0xe8}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r2, r0, &(0x7f0000002080)=0x61, 0x7)
writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="511c62bc9cd3172ba4424c0f71cb0a399447238fd9745fc0c08b793e5964", 0x1e}], 0x1)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x20, 0x1, {0x8, 0xb, 0x1, 0x2, 0x1, 0x5, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x8, 0x9, 0x68}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x420, 0x2, 0x8c, 0x3, {0x8, 0x25, 0x1, 0x103, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfc, 0x3, 0x5, {0x8, 0x25, 0x1, 0x71335d388aa27128, 0x33, 0x96, 0x4}}}}}}}}]}}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x204, 0x149f01)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x2dc, 0x4)
ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000001040)={{{0x3}}, 0x0, 0x8fd, 0x0})

12m38.26465948s ago: executing program 35 (id=844):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00')
syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/146, 0x92}], 0x1)

43.455846526s ago: executing program 6 (id=5403):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000005000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000020000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ffffffff00000000000000000000000010000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff64010102000000003c00000002000000ac1e01010000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414aa00000000000000000000000000000000000004000000000003000000000000007f000001000000000000000000000000000000003c00000002"], 0x23c}}, 0x0)

43.455532831s ago: executing program 6 (id=5404):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85220000c}], 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
connect$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x4, 0x2, 0x7, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_pidfd_open(r0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0)
ioctl$FS_IOC_GETVERSION(r8, 0xc040ff0b, &(0x7f0000000180))

42.214329951s ago: executing program 6 (id=5416):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x40}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x7fe, 0x2)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x27d}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d7", 0x3c}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd", 0x29}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}], 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xa, 0x40, 0x7, {0x8, 0xb, 0x29, 0x0, 0x1, 0x3, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x3, 0x9, 0xc5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x6, 0xfd, {0x8, 0x25, 0x1, 0x40, 0x3, 0xb3, 0x4012}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf8, 0x8, 0x3, {0x8, 0x25, 0x1, 0x3, 0x60, 0x3, 0x4}}}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x10, 0x0})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000080)={0x20004, r3, 0x2})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

39.036288441s ago: executing program 6 (id=5432):
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(des3_ede)\x00'}, 0xfffffffffffffe5d)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lblc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64810102, 0x4e23, 0x2003, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041)
r5 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb})
r6 = socket$inet(0x2, 0x80001, 0x84)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x0, '\x00', 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, {}, {0x5, 0x2}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}})
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20)

39.004560733s ago: executing program 6 (id=5433):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1b)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x8)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000180)=""/21, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
preadv(r3, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000001ac0)=0xd)
sendmsg(0xffffffffffffffff, 0x0, 0x44014)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$setregs(0xd, r8, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

38.877585884s ago: executing program 6 (id=5434):
r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8100)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={'sha512\x00'}})
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$revoke(0x3, r2)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
openat$nvme_fabrics(0xffffff9c, 0x0, 0x80081, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
gettid()
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000200)="b1a495795e87bc646f3849e82eeb6a16b4265309f05b60a12d2b17514df412f068cf883da32551f6f5c13e39e0193ff3fc15d281b5c0aab449d0", 0x3a}, {&(0x7f0000000900)="3c771fa30342c1b2498a14ebc58155c39a961d3dba71b58406ca067b74348eb343e45ce13b846bfc734228f134884aa54b580e515242333cc5209d9c76d591c7721b1fe209ec8254017700665670e27a9d452062f7117934c38e1ccb2d7eba40855ee3e38cba89f7676045b499b12f599e8de64b761570d4c69c55f86f6d47719ab3da27749765c74b92288c9352145c2d3d887e5be9b9919dbee421bae2fa848569778b22ce8c47a8ff7c6b1646d4cc70e039fef94022eb4811dead", 0xbc}, {&(0x7f0000000a00)="d0ffdca0184e192a5325b75d47a5ef4ac83e5e29519c4a9bb6fc9cd16b3c976ba04201274659114ab4302d3b0ee2158571e283f3b0d742f9f55f2c1fa6683a6576983a3313039d5c31700bc5dbd4dd21240d390dab1c0bd986124bca061c11c1439e5933044718adefa455831ee677fa38cd753577c0ead1f2c02f4097a181babb07cb35efca14f6c7150d500912d9fa4657ed655cae081e81f8869a82a3e5750bcd5e1d13af7d5a6d2948657c", 0xad}, {&(0x7f0000000ac0)="fa423c11a30c177c768bcfcdf57c494edc70a426326b54f5361e12dd7b1c6070bdc77860dd398dcc278912fcaab362b38a847e7f007bd0e41ffcc245228eb090d126e54823bc75c5ef449820890d6d6d3121d98fa79eedb9263574bdde6460f45784adfa29a10863854d1f378933b938e253d5a99a5222fe27bda882a19dccacdfb894a44cba47330a80465a0d", 0x8d}, {&(0x7f0000000b80)="a89b56d78df12ffb54883287df6d7be4d5b4b013f74db542f1aacf92823f44156b0c3b2578c2d0312d9002a72ba7493cd994eb4d46f5afe7352c487bd514db383872ad8f756abc00a37476efea4bea514f33c407ac0e6d173889c857db1efd9f7b9b1b88fb7aecc28f377c8d64891f5aaa9a81a1016f91b8dfd926bba8a48a161544e78869b15d69beaac895ed9219bf246e381641514e5ee1b87314557c82b6e0a04115a6fd9b85dda1bed58bc77e903145c504dee35e5ca7a9f429a568424941017f83d60908ebda5f195ebdde05dcda7993744282c662508bfdc05007f1f3466ce0db38b21f644d3edfbdf6", 0xed}, {&(0x7f0000000c80)="1bdcd85b1312de45cdb30550821e08e3f2b484048485b940742d6c8e6cec88b4e78ba4713ba505be2fabfd3457c71a4be3b254c96210780868a9071738718a0c54ca368dc1c25d872dc9616ee4c213ea7fdabc32a6573f64186368565dea994d1bbb665d66b763b25fd0941c5825b161e98a", 0x72}, {&(0x7f0000000d00)="6b9e88444ea32bb84021adb4a9c6a4065372d4db0282a9764a62f803ce86e91a1d805d345d44a11f9ec3e38a7a5f4854824f2aedea5f366f4dd5c7efa327e155481674ef097d262f76c90ecd059ec4ae1c1d7d643b4078713d8a5e9062d8b45b3ecc86ef0e70c387f53c8c7d132390ed857f76aa2c0eda062ce14d7f9fc6e09777fc81636979dcb077aebabfccbd14c57e47ed5f3a89705921dff7995cd9d6e4fefd428ff928df32afd909d8fda8c1fa4ba8850c4ef59cd959bad6c01b4c10285f2bf3a469db98b7bb72cf91ad7e6a6b74fd5688e0914bf1aa6c602a74d0dfe4c18445d64c030bb06ff3a3147f08ecee8a4a", 0xf2}], 0x7}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r3)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000580)=@chain={'key_or_keyring:', r5})
keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r2, r5}, &(0x7f00000000c0)=""/119, 0x77, &(0x7f0000000280)={&(0x7f0000000140)={'crct10dif\x00'}, &(0x7f0000000180)="65c5f4798944f1031f012ee70781e57ac321c935b12cae494e031b230951e2f8ebeb090ad0912531070b7ca122cdc4a337552c3f3271d1c5088114f3557c6cc93949140b0529518610479c601673bc4f4486fd6959a627ca7b010b89c7730e10a642592d1b2bfa8c93453656e2bfc44f54f730a22aa9af443a71f0e20f6438933e0ab97947e0f584bd79e578d398d459524f54df36d8bd99ee66fd251a74e0011b832d326b94f5ce5ed7f99f486b858ae1e8792c8e4b2a7d5af1bd4e207c4e06e9f2caaac0ef851b32d7c757a0138bee58dd4851c2153c4b13f469a2292b5fefc3551bcd2c4e5b2d56a4d8db38bb824817612b937cfaf763", 0xf8})
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x5, 0x47425247, 0xf00, 0x84f2, 0x0, @stepwise={{0x6, 0x7fffffff}, {0x0, 0xd08}, {0x80000002, 0xd}}})

23.720758233s ago: executing program 36 (id=5434):
r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8100)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={'sha512\x00'}})
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$revoke(0x3, r2)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
openat$nvme_fabrics(0xffffff9c, 0x0, 0x80081, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
gettid()
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000200)="b1a495795e87bc646f3849e82eeb6a16b4265309f05b60a12d2b17514df412f068cf883da32551f6f5c13e39e0193ff3fc15d281b5c0aab449d0", 0x3a}, {&(0x7f0000000900)="3c771fa30342c1b2498a14ebc58155c39a961d3dba71b58406ca067b74348eb343e45ce13b846bfc734228f134884aa54b580e515242333cc5209d9c76d591c7721b1fe209ec8254017700665670e27a9d452062f7117934c38e1ccb2d7eba40855ee3e38cba89f7676045b499b12f599e8de64b761570d4c69c55f86f6d47719ab3da27749765c74b92288c9352145c2d3d887e5be9b9919dbee421bae2fa848569778b22ce8c47a8ff7c6b1646d4cc70e039fef94022eb4811dead", 0xbc}, {&(0x7f0000000a00)="d0ffdca0184e192a5325b75d47a5ef4ac83e5e29519c4a9bb6fc9cd16b3c976ba04201274659114ab4302d3b0ee2158571e283f3b0d742f9f55f2c1fa6683a6576983a3313039d5c31700bc5dbd4dd21240d390dab1c0bd986124bca061c11c1439e5933044718adefa455831ee677fa38cd753577c0ead1f2c02f4097a181babb07cb35efca14f6c7150d500912d9fa4657ed655cae081e81f8869a82a3e5750bcd5e1d13af7d5a6d2948657c", 0xad}, {&(0x7f0000000ac0)="fa423c11a30c177c768bcfcdf57c494edc70a426326b54f5361e12dd7b1c6070bdc77860dd398dcc278912fcaab362b38a847e7f007bd0e41ffcc245228eb090d126e54823bc75c5ef449820890d6d6d3121d98fa79eedb9263574bdde6460f45784adfa29a10863854d1f378933b938e253d5a99a5222fe27bda882a19dccacdfb894a44cba47330a80465a0d", 0x8d}, {&(0x7f0000000b80)="a89b56d78df12ffb54883287df6d7be4d5b4b013f74db542f1aacf92823f44156b0c3b2578c2d0312d9002a72ba7493cd994eb4d46f5afe7352c487bd514db383872ad8f756abc00a37476efea4bea514f33c407ac0e6d173889c857db1efd9f7b9b1b88fb7aecc28f377c8d64891f5aaa9a81a1016f91b8dfd926bba8a48a161544e78869b15d69beaac895ed9219bf246e381641514e5ee1b87314557c82b6e0a04115a6fd9b85dda1bed58bc77e903145c504dee35e5ca7a9f429a568424941017f83d60908ebda5f195ebdde05dcda7993744282c662508bfdc05007f1f3466ce0db38b21f644d3edfbdf6", 0xed}, {&(0x7f0000000c80)="1bdcd85b1312de45cdb30550821e08e3f2b484048485b940742d6c8e6cec88b4e78ba4713ba505be2fabfd3457c71a4be3b254c96210780868a9071738718a0c54ca368dc1c25d872dc9616ee4c213ea7fdabc32a6573f64186368565dea994d1bbb665d66b763b25fd0941c5825b161e98a", 0x72}, {&(0x7f0000000d00)="6b9e88444ea32bb84021adb4a9c6a4065372d4db0282a9764a62f803ce86e91a1d805d345d44a11f9ec3e38a7a5f4854824f2aedea5f366f4dd5c7efa327e155481674ef097d262f76c90ecd059ec4ae1c1d7d643b4078713d8a5e9062d8b45b3ecc86ef0e70c387f53c8c7d132390ed857f76aa2c0eda062ce14d7f9fc6e09777fc81636979dcb077aebabfccbd14c57e47ed5f3a89705921dff7995cd9d6e4fefd428ff928df32afd909d8fda8c1fa4ba8850c4ef59cd959bad6c01b4c10285f2bf3a469db98b7bb72cf91ad7e6a6b74fd5688e0914bf1aa6c602a74d0dfe4c18445d64c030bb06ff3a3147f08ecee8a4a", 0xf2}], 0x7}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r3)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000580)=@chain={'key_or_keyring:', r5})
keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r2, r5}, &(0x7f00000000c0)=""/119, 0x77, &(0x7f0000000280)={&(0x7f0000000140)={'crct10dif\x00'}, &(0x7f0000000180)="65c5f4798944f1031f012ee70781e57ac321c935b12cae494e031b230951e2f8ebeb090ad0912531070b7ca122cdc4a337552c3f3271d1c5088114f3557c6cc93949140b0529518610479c601673bc4f4486fd6959a627ca7b010b89c7730e10a642592d1b2bfa8c93453656e2bfc44f54f730a22aa9af443a71f0e20f6438933e0ab97947e0f584bd79e578d398d459524f54df36d8bd99ee66fd251a74e0011b832d326b94f5ce5ed7f99f486b858ae1e8792c8e4b2a7d5af1bd4e207c4e06e9f2caaac0ef851b32d7c757a0138bee58dd4851c2153c4b13f469a2292b5fefc3551bcd2c4e5b2d56a4d8db38bb824817612b937cfaf763", 0xf8})
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x5, 0x47425247, 0xf00, 0x84f2, 0x0, @stepwise={{0x6, 0x7fffffff}, {0x0, 0xd08}, {0x80000002, 0xd}}})

5.674132309s ago: executing program 9 (id=5649):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x40}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x7fe, 0x2)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x27d}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d7", 0x3c}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd", 0x29}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}], 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

5.665463423s ago: executing program 7 (id=5650):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40)
close(r0)
r1 = socket$inet6(0xa, 0x1, 0x84)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, &(0x7f0000000080)='7', 0x1)
write$char_usb(r2, &(0x7f0000000280)='L', 0x1)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x8100, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x20000000000000d, 0x12)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f00001de000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b8af05d10000000000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d90100000020207f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b877000f00d0", 0x4a}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000400)={0x1, 0x0, [{0x80000008, 0x5, 0x44ae5a9f, 0x5, 0x80000000}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
landlock_restrict_self(r3, 0xa)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="002abd7000ffdbdf250c000000040003800c00010a153cbae23d3f6e8008000100685e0f1dbdd493623a5a1194a2b7e5388dd2313abc4cd66c334daa081d19acbd3674cefeb514cef3315a0a0f4695fa79809aa0016882377744cdd671568ec3e6ebc37d3bcf610af4d8e684e78c725bc966b9fc6eb66cd54623e08122fbcbc5647ed8970667bad6cb73bc0fcc9bb78881873348949b45a8227f95a96ef137e44a89309b108d55e8ea3ee0728ba1", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4c041}, 0x80)
r9 = socket(0x1, 0x2, 0x6d64ce)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000180)={0xbb, 0x0, &(0x7f0000000140)=[r9, 0xffffffffffffffff, r3, r2]}, 0x4)
getsockopt$bt_hci(r7, 0x84, 0x1, &(0x7f0000000680)=""/4079, &(0x7f0000000240)=0xfef)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0])
mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1084828, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xe, 0x43, 0x6b, 0x8, 0xccd, 0x8e, 0xa900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0xbc, 0x11, 0x2, 0x89, 0x18, 0x4a, 0x4, [], [{{0x9, 0x5, 0x91c46c3e7ac7f8e5, 0x16, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x3, 0x0, 0x7}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})

5.514619823s ago: executing program 9 (id=5652):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x48100)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000000))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdc02, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x20008004)

5.403921554s ago: executing program 9 (id=5653):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8000040000000002, 0xffffffffffffffff}) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = eventfd2(0xe5c, 0x80000) (async)
r6 = eventfd2(0x42000006, 0x801)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000240)={r6, 0x7, 0x2, r5}) (async, rerun: 64)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r6, 0x7, 0x2, r5}) (async, rerun: 64)
write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "452cb084725a73864ae693cf7416cf4d2a07e1b6858e193d6ca03540191ad7b2136bd949dd221ebe7918872348d4bf67c9ca65b90fd89d9240713359e25ed988539c80cef8affdca1893cbc328ec44b724068088a56de3aaea98c3235321a5c5fd4197a554a11c414a7477897ea208c80f98c21ede4db2f199a0b9d2ae2e729920de3c0b5180a7f5e557c5c3e158955b2a786eca94a99b644f0115744bf047c027a3ed3ae1513287f7a0a75938d569545edb22f827316b3da7b9a6fffb8238888c8b91d1feb16dec1b61f50d7f5ecdfb9929f5ee8f77bdf41d16a4cd69458caa97873c82bdb26de051"}, 0xf4)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
close(r7)
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x7, 0x1, 0x68, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x3, 0x40a, [0x0, 0x200000000540, 0x200000000646, 0x200000000676], 0x0, &(0x7f0000000200), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x0, 0x20, 0x6002, 'veth0_macvtap\x00', 'syzkaller1\x00', 'lo\x00', 'vlan0\x00', @random="040be7aa9035", [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, [0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xabc6a00f47acf65e}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x5, 0x60, 0xfbfb, 'vlan0\x00', 'batadv_slave_1\x00', 'veth0_to_bond\x00', 'macvlan0\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xfe, 0x18e, 0x1be, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0xd}, {0x1}]}}}, @helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'syz0\x00'}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3, 0x2, {0xf9}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xa, 0xfb, {0x7fffffff}}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x61}}}}]}, {0x0, '\x00', 0x2, 0x1, 0x1, [{0x9, 0xc, 0xdada, 'veth1_virt_wifi\x00', 'sit0\x00', 'veth1_to_batadv\x00', 'ip6_vti0\x00', @broadcast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"04faa581342c78db89492bebb057c1b3ccbdaac0c706a264ec7a218d7bec"}}}]}]}, 0x482) (async)
r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0)
syz_usb_control_io(r9, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

5.140718711s ago: executing program 9 (id=5656):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7ffffffffffffffd}, {}, 0x70bd28, 0x3500, 0x2, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc7539(ecb(blowfish),poly1305)\x00'}, 0xa0, 0x0, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in=@loopback}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x100, 0x22}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x32e, 0xc50, 0x1, 0x101, 0x5, 0x101, 0x8]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfffffffa}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x42000)

4.968188303s ago: executing program 9 (id=5658):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000006c0)={0x0, 0x11}, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000001c0)=0x2)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.783656828s ago: executing program 5 (id=5666):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x6}, {0x0, 0x0, 0x12}, {}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1003}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {0x0, 0xffffffff}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x3}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x4}, {0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4, 0x3}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1000}, {}, {0x0, 0x0, 0x0, 0x1ff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x8, 0xfffffffa}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x20008, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/46], 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000030000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

3.414989541s ago: executing program 5 (id=5667):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={0x2, 0x0, 0x52c, 0x3, '\x00', 0x401})
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmmsg(r0, &(0x7f0000001a80), 0x0, 0x8004)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0)

3.16305986s ago: executing program 8 (id=5669):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x331}], 0x1}}], 0x1, 0x42054)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="41f31a07472727233819222dc27bf762e63a31d09e51e299d5cdfcd1d30cefc7063f6938d6f1ec5d922797cda858e1abfada7c1fb8a88738bef654e09dff32524189dc3787244a7e0b7313f6fffc3233bd3670a1d5a2f1d105e4007a9e6f41d1fb7d8090d9d56aa5d0047f8395523fb653365d1a404cf7243469168fc769960dadb119570fac822b5593adfd002233cf1791270a7698ed249c55f37d7ba7f0080a3da62d566e66d4c0758998516557b7133e5b5058a09ad630a1c1beb0e72d346fe135", 0xc3}, {0x0}], 0x2}}], 0x1, 0x20000040)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3.059775584s ago: executing program 7 (id=5670):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000ffdbdf252b00000008000300", @ANYRES32=r2, @ANYBLOB="28005180243ba680040006001100010022794b000600000000000000000000001400020001000000080026006c09000004004600050034"], 0x58}}, 0x20004800) (fail_nth: 2)

3.025078293s ago: executing program 8 (id=5671):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x331}], 0x1}}], 0x1, 0x42054)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="41f31a07472727233819222dc27bf762e63a31d09e51e299d5cdfcd1d30cefc7063f6938d6f1ec5d922797cda858e1abfada7c1fb8a88738bef654e09dff32524189dc3787244a7e0b7313f6fffc3233bd3670a1d5a2f1d105e4007a9e6f41d1fb7d8090d9d56aa5d0047f8395523fb653365d1a404cf7243469168fc769960dadb119570fac822b5593adfd002233cf1791270a7698ed249c55f37d7ba7f0080a3da62d566e66d4c0758998516557b7133e5b5058a09ad630a1c1beb0e72d346fe135", 0xc3}, {0x0}], 0x2}}], 0x1, 0x20000040)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

2.896182661s ago: executing program 7 (id=5673):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000003580)=[{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f00000004c0)="a8d07cee6d4e9ce02c2029fb3501d07c23435d11405c4f89e83f5ae700b509defbafce9712c72082fc22b4c6eb0075f6223c8d5928b69473ad62aaae460674867a046ad5b510bb5d37224a19adfbffc6c29796eed953ae23f31730c1207cdfafd481c40ecfd47a8e147b03b6d01f0606192dc46af639f7509a25bea9a8345bd8e7be5d7260edf07a21f40100000000000000d6cbf7ded678a80259d2f62839fbb27be1e603c21a1688d66ffe429cdeb6d5540000000000000000000000000000133e8a60969f69b5efa4e0ded8510ed50595bb", 0xd3}, {&(0x7f0000000700)="ec8bdaf53ab25402cfb5ee0ed9f8e04c474b3e5f085c1d724f0cd6c2257dcc5e8bc94e6cc40b157be24d2f08cb2536cd78d6fd236be167b18d721525af8309bc5a373b0f142cebb71c14c0b501d4cfddb07e528302593bbeaf5b6ff983d50992dbd39834369679a5fd6370ed26f1ef1d9ffbba6068b5d55c9123e1e3c13c009dfc5f8e57710f5b33cbfd225d966b440bf2b5f09300e5bc97a0f9e0e8", 0x9c}, {&(0x7f0000002080)="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", 0xe4d}, {&(0x7f00000035c0)="3b713eb1698bc606a0816238a95103f28338fddeedcc70d64335a4ec604102fc0db442f4fc882ada559071e3a05082d431bb8786", 0x34}], 0x4, &(0x7f0000003540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x80001)
recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0)

2.839179884s ago: executing program 8 (id=5674):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x40}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x7fe, 0x2)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d1", 0x27d}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d7", 0x3c}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd", 0x29}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}], 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

2.791764234s ago: executing program 3 (id=5675):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x10001})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000"], 0x24}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2.7389406s ago: executing program 7 (id=5676):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x38, r1, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x6}]}]}]}, 0x38}}, 0x20004800)

2.643206868s ago: executing program 7 (id=5677):
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x80000001, 0x4}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

2.621383535s ago: executing program 3 (id=5678):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="c037cea49058ecd82b1abdb24bc0a5337ac451973dec51a6463c2d22656f6c1547c21cac2bb8616abbb78866710f29c43d415a7cb3720c4065126ac8a47d662c501ff8842fd80e1b2843908f0fb785fc6c", @ANYRES16=r1, @ANYBLOB="010028bd70000000000001000000140002007767300000000000000000000000000008000500010000000800070008000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x5b0, 0xffffffff, 0x1e0, 0x0, 0x358, 0xfeffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0x1a0, 0x1e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3d11b30a, 0x8, 0x2, 0x1, 'syz0\x00', 0x4}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @mcast1, [0xff000000, 0xff000000, 0xffff00, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x4}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x7f7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8)
fallocate(r2, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r2, 0x2000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
r5 = fanotify_init(0x200, 0x0)
open_by_handle_at(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000a70400000500000003000000030000000dad26e7a19b30d6709337e34615968a13ee978de38058751a5c8247f73e786503b21d48cf8dd8640260a7de4ace1144624111b7ad331d6374658e7ec54efea3c08e36088f1d975b9e454504e0e5699ccaa6b85a50faa2591a65cbfaaaa10f1a"], 0x4000)
fanotify_mark(r5, 0x101, 0x1, r4, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0x1ff, 0x0)

2.619855332s ago: executing program 8 (id=5679):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xfffffffd, 0x2752789b59c001a2, 0x400, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
dup2(r3, r1)
close(r1)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

2.472330275s ago: executing program 5 (id=5680):
r0 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x400}, &(0x7f0000000340), &(0x7f0000000080), 0x0)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000000)={0x0, 0x3b27, 0x80, 0x3, 0x8f, 0x0, r0}, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

2.292827493s ago: executing program 8 (id=5681):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca3808e8b8bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca476174e543a37052c6e08007c7afd75fabaf66450709ff061959d02d4f6e0c120fdfaad713688d9af3e70e752f3698b8cd0d75efd5eb50f5c4ef48aa62b641104abb1ce0e8ebcea9485d77bb9b523a47f1de80c1456f62e1387435d3f41d2d6c9e04c1f51401aa6b5204972b93c5783233a1002a1c0d9680c43f078cb2fac20df2296408b52ac0338cee4c92445b44b8d802184f15b34dcd5be61c6f55f73559343ad384c6d05afae20646676c06b0d4bba9d96bdb045fb0e8b50b7a84489a59bc371e066b4ae38c5cb05035cbe8d2123dd28d85db900da33b1f01dd306558dc437606314814aaf7416b8e1e4ab0d9fc2a220d009edee9d94fd184c52a5c4fbee4197f30986533be2b656535c6621f15d4a700de437afd57cb91c00e692b5b4bcfbac44a33a917c9fce46b308775e1ba4e4d93388a11deda12d7270634704d2e2846caedba24b226247029d706b423a295689289bfa250f45ae88432d5721129c9ad9a5f4c5bdd4d653a024e9b16c0e96b35920fbd236d1566cc2efd366f327b04e508254cea66bd2977e016757f0cd7169706543cf2571b99084098464ab7dba3b313cc17463d3d26dadf42f5327637d67464d3dcf6ec8d88621c51892bf61685f551df8bd2620976d502ef3df7456865e1b45136bf141b9444680b6658127b7e8d088af71b9206fd177e579b81f284c6aa7694e8241f34ac5308e98776afeeaad59a473d500d9ad99c594e44b6e9a739c218b97ddc1c8219d134cb14fb1513fdae7ecca1ad9beacdb16e577e8820a239011aab5504da2eb368fb8718773026e44c3e63ab2e4f5d8c2ab2e0c69a64d85131a9d1af9cec", 0x331}], 0x1}}], 0x1, 0x42054)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="41f31a07472727233819222dc27bf762e63a31d09e51e299d5cdfcd1d30cefc7063f6938d6f1ec5d922797cda858e1abfada7c1fb8a88738bef654e09dff32524189dc3787244a7e0b7313f6fffc3233bd3670a1d5a2f1d105e4007a9e6f41d1fb7d8090d9d56aa5d0047f8395523fb653365d1a404cf7243469168fc769960dadb119570fac822b5593adfd002233cf1791270a7698ed249c55f37d7ba7f0080a3da62d566e66d4c0758998516557b7133e5b5058a09ad630a1c1beb0e72d346fe135", 0xc3}, {0x0}], 0x2}}], 0x1, 0x20000040)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

2.088047161s ago: executing program 5 (id=5682):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x4}], 0x1c)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r3=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r3, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = syz_io_uring_setup(0x6395, &(0x7f00000002c0)={0x0, 0x76ed, 0x2000, 0x2, 0x234}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000700))
io_uring_enter(r4, 0x8ad, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8)
syz_usb_connect$midi(0x5, 0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="1201500200000008410e464240000102030109023c00010140100109040000030103300609050302d7030408070524e4014109050b02200000389d05250101110905091bff0306770405250101caa746e8d1315dc10a4ef3152f34ee596fb92ce729f0f9eb10fa9ec00d7a86a6c3e224ee12217704b831de94438cc6011bd01ab019d6d692e285c3aa84131edb13d7a2e3ccc045048c2f6d306fcbeaa0d7bc9709c3e33f7e7cab2fe3970a1903469948d5e35d"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffc, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@private1, @in=@multicast2, @in=@multicast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@local, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x1, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x33, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001a4001250a0000000000000000000000f3df1ce6e68159c709a4edc89055d0869b8e4eb49e823fae0373a6bb"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

2.051530839s ago: executing program 8 (id=5683):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r3)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x4000004)
fsetxattr$trusted_overlay_redirect(r2, 0x0, 0x0, 0x0, 0x1)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
fsopen(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r6, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0xa1c7)

1.779668628s ago: executing program 9 (id=5684):
syz_emit_ethernet(0x68, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffcc1782f828043f5aaa0008004503005a00000000402f907800000000e0000001008022eb00000000000010000800000086dd080088be00000000100000000100000000000000080022eb00000000200000020200000000000000000400000800655800000000"], 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041)
ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x4, 0x0, 0x1, 0x7, 0xa, 0x410}})
preadv2(r1, 0x0, 0x0, 0x80000000, 0xfff, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10)
socket(0x10, 0x3, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85eda"], 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402)
ioctl$int_in(r5, 0x5452, &(0x7f0000000200)=0x4)
write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, &(0x7f0000000300)={0x0, 0xb, 0x88, {0x88, 0x30, "06c19797003dee7054da1422a0dce295629ee9deb88d031b40a351d2d83081e66c63fe7bec60e7d0193610f15398aaf88b1351626ec34858705b9afad5cc56831aec1cbd7a07ea3df6233d8edf99a31f2c31b402c30650e513dc6ec5d721377d42530e4ff6fdf655c0b084ab6a0f4bc45d745553d482dfc955d1c02d017db22fa1a84fea1ff1"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}, &(0x7f0000000400)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x3, "17f76d3b"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xb, "feed76bf"}, @main=@item_012={0x2, 0x0, 0x9, "52d5"}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_012={0x1, 0x1, 0x6, "ab"}, @global=@item_012={0x1, 0x1, 0xb, '_'}, @local=@item_4={0x3, 0x2, 0xa, "2f0161ca"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6b, 0x80, 0x1, {0x22, 0x89a}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x18, 0x90, "284afc8b71dc94eacf34f732db231c8fc997dbeabec423a83f7359d71547ea1be61d5aff383fcdbc455a7ea3e879cb33ef7de6be0b3baa133475c91ec452e675c20d8c46a04002d516a6fd85ac560c46ef6aa9535fb661cd905e80070554509931291bffbd6189f93761a9467227cac12f139a983879ba1fd87d26aa75fa9ce0c4e17eeb8eae895b828e3c085d5d7b1a"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x65}, &(0x7f00000006c0)={0x20, 0x1, 0x58, "834e3d76af575356360c970400000000000000d3c42f2a56467df5f1eebc9f18ad20ec41934db3d9f4ef4bef68e0fed9355400b12446e1653a99e1cbe260b17cb37c10e7634b2d184f5444a53b2d5d6e500293fef1b10828"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x5}})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)

1.664211097s ago: executing program 7 (id=5685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x110)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r0}, 0x18)
connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0xa00, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4084)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f00000005c0)={0x5, 0x0, [{0x40000000, 0xffffffff, 0x4, 0xffffff89, 0x6, 0xa9, 0x2}, {0xc0000000, 0x100, 0x4, 0x5, 0x400003, 0x40000002, 0x100003}, {0x4, 0x4, 0x1, 0xe2, 0xfffffffd, 0x56fecc05, 0x2000005}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf3, 0x6, 0x80000001}, {0xa, 0x4, 0x7, 0x0, 0x7f, 0x9, 0x7ff}]})
syz_usb_connect(0x2, 0x7d3, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x2e, 0x5c, 0x8d, 0x20, 0x2304, 0x225, 0xf623, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c1, 0x3, 0x7c, 0x7, 0x10, 0x0, "", [{{0x9, 0x4, 0x5d, 0x3, 0xc, 0x9c, 0x7e, 0xe1, 0x8, [@generic={0x8e, 0x8, "26dbb37144ccdd339770b7a8611c6b3abab5a3f7380c2dd988e96609228c79eb2c1749ba9c7953b0f506adf1360c08ac6931bf00d0016df31a4c1a9fdf4ace78a83461bcc276a13ec9ebd6b90b397dc4757b70da07224032ef611a3e83ecd61b7acaed3b43dcbb73b100ce1c7880837872b92121ca22b25ff8314a6169b1f9a7c516f343b1e60d4ee302f6c9"}], [{{0x9, 0x5, 0x2, 0x0, 0x6b65379eb452db1, 0x3, 0x3, 0x0, [@generic={0xe9, 0x2, "f8598b46f090c1b5210e04e15ad31385d75b8ec3e56f5e335b68590fdf44319ecbbf216a1e0b8210fe37175490c56da5a54c07bac58a7cd8afce8f83dedfc0359341f55b39fa030d57d93c3a6bf318c400a41442fb80f9cad62b08cd25a04a0c4e3571250a7798fe7a93714ba5aa661468565cfcc2a5281229cc09119245ac2dfc00076427f4b838cb9e8a46be2656ed607172e1966b84686070e1121d626b498253f8c933261ef909500174c14287a5f85d34aae2e6b472ced578c8cdfdf3b8c2c23a1af96b618b3b200b22ff867305ce02337f7657f079a43f3eb31d2d642f0cfb3295579980"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x9, 0x0, 0x5}}, {{0x9, 0x5, 0x63244e94e27af9c6, 0x0, 0x40, 0x0, 0xe, 0x8}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6f, 0x7f, 0x4, [@generic={0x25, 0x30, "499d82ce31c6f6334d331bc305c8a4541df3880b3822a7b22e9b1f43e215d24113d9a3"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x2}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x4, 0x6, 0x6}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0xd6, 0x0, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x6, 0x14, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc7, 0x6fa0}, @generic={0x7c, 0x6, "0b7c14faa146753c0cf37fd08b132c84cc479bdc615c8719b9bc84ca4c150e4d7abe3ad37825d0b78f7a7824b7b926e596ece3d4207c546c5742f88e179320dae724f98b07d614acdeea1cff58bf6007954daba5929f0635c14046fa5441f60e142156b7e86e411fa45f9cb8daf44e17cf1d9105e68a037952c1"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x60, 0x0, 0x6, 0x5}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x8, 0x6, 0x8}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x7f, 0x5}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x6, 0x8, 0xdc, [@generic={0x68, 0x30, "d0c3de8862c8a977ed38068f01f64ed78d150e6548a8866b957f07f0e30f7bee63c96c701cee05d9f072884ed5669fc5b2fc689d7c923bb942f7d01b1841ccf1152b4d1d650f6aada8dc53c3b4587bed8664daf35dbc8dff2e45eb2329217e06be1dc011f3a6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0xd, 0x0, 0x4, [@generic={0x97, 0x9, "2e76f8f652799a9aa1dba71a75a8f86d9ea6e74e6244ccf5d6f1a3270b2cbe17a177f7f343b8c849b3a6c46cb910c08620941bd72bc31db19d59b917922651dd16c1494f893aa1cc53e23fc2d92e959b407995ad305d3b905a6685e097fcb03d5d8c82db398f93efaba0057ade461c4721d3f76081647270cd520f4ef29c884b9f301e7bcacb7cf8ffe5a23019b2d53a231824faf9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}]}}, {{0x9, 0x4, 0x83, 0x6, 0xc, 0x44, 0x70, 0xc9, 0xfe, [@generic={0xc3, 0x2b, "359d93016064364eff9990417d568245dc255014cd87fa51617e6f3a60f09376c4b96299487fa7f99606c58b655d0afe5b11e934ada4a071568673a56de14f51df1b4b05a171b688860491a8502cffae7d9c0eea5f94dd2764675227135998850c159a70b1b8f5c669cc56c89b7b6eabeaf5bdc8033ba1d20cd9ec2a31bcaf8651238141cd4dc737ed982f4341c03b7cd8237e06763f0d6f45116500a5661f094470350f1eef129171e646732757c0dc13cb0466ade602cf635ebddaa5f73accd3"}], [{{0x9, 0x5, 0xb, 0x3, 0x200, 0x5, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3629ed2bd79fad25, 0x8, 0x10}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x16, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0xbc13}, @generic={0x6a, 0x6, "a2d74c7c6a048c8d1ac1670a7b08d543b5cf8de765e5b66443aea1de2912627a49974e0ea0025dfe56b5b990910b70d0e6da69c6b3645c99f6f7d4fe113ddc63b4083a5c973ca012d37b2dac3ca393add2e4f446f2be8114d07bfaadb44094b24a81e5150839e54d"}]}}, {{0x9, 0x5, 0x86, 0xc, 0x8, 0x26, 0x9, 0x7}}, {{0x9, 0x5, 0x1, 0x8, 0x0, 0x4, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x8, 0x81, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x3}, @generic={0x23, 0x1, "3d49df27813baace38ed84e87ae8fa7588889af684c8eea1e81c9224c4f3973198"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x7, 0x53, 0x7c}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x8, 0xa, 0x89, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xbd9}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x2, 0x5, 0x3, [@generic={0xb8, 0xa, "8f479ccd98e3d639a26a28e76dea36b98c1d4ca04b424803685d8dc5a0ecf0a5d9adf24eb4e157a0ee92add74f6e30fc3a0bd7379c9692c04ab5f035b88659a78d960bb0cfc09c8e4af2bf61af8adddf9905b2d575ad7c13372993e3bea8cd9f68382dadd565ca4b6d35072844cd230325149278829d2746088f7f5777a450012ebb656e993cc66977d8c7a00983217775ae000dca4dde45440515f11f64d22a1978dbd80e1da7b878099a6d745cc24db8317d128620"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x4, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xed, 0xc, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x8, 0x40, 0xf3}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x8, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}]}}]}}, {{0x9, 0x4, 0x89, 0x67, 0x1, 0xff, 0xff, 0xff, 0x4, [@hid_hid={0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x225}}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "48c6cc0b"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x7, 0x0, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x1ff, 0x9, 0x5, 0x8, 0x2}, @obex={0x5, 0x24, 0x15, 0x7ff}, @obex={0x5, 0x24, 0x15, 0xa3b}, @obex={0x5, 0x24, 0x15, 0xf817}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x7a, 0x3, 0x8}]}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x6, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x9}, @generic={0xe0, 0xd, "d65b931255edf5aa523dbe4b22bfaca104e9bbd0e27a2428f41986d3e11b5fa8394fa1c849c37949a8f3b0a9253db7263e366a6fbaf5e99abea5b683a008eb2dc882cc4aa0c525df4b9e60155e7218d930b2517e8378d6a1bf04aa8064ca7f5be3162cdcaeab84d39cea0cd14c3a05a0688967891aaa1976bf9f66ba9d839b92163b750b4c1b630a7ddcc7b5b903f5f916cab84e39062b59404096c766790627be6cb425bbf6d92532ae2fe01da1071cb8a55b66e026b74900746b2c3fc7b3b114d6ff78c1b474f16419f5abbe5f51a4f8e5abfeaeae057700e18cfde10c"}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x110, 0x2, 0xe2, 0x2, 0x40, 0x8}, 0x2c, &(0x7f0000000e00)={0x5, 0xf, 0x2c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0xa, 0x7}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x5, 0xf0f, 0x567, [0xc00f, 0xff00c0, 0xc0, 0xffbec0, 0xff0000]}]}, 0x1, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x40a}}]})
syz_usb_connect$cdc_ncm(0x5, 0x6f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x68, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0xc, 0x80, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d9"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x3, 0x1, 0x6}, {0x6, 0x24, 0x1a, 0x8, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xb, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xef, 0xd0, 0x1}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x1, 0x7, 0x9, 0xed80f5aa8061d106, 0x2}, 0x33, &(0x7f0000000280)={0x5, 0xf, 0x33, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x5, 0x8800, 0xaf1, [0xc000, 0x3f00]}, @ssp_cap={0xc, 0x10, 0xa, 0xf, 0x0, 0x1, 0x0, 0x372}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xe6, 0x2, 0x1, 0x2098, 0x7f}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x403}}]})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x4c, r1, 0x101, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x20, 0x1, 0x4, 0x0, {0x1, 0x3, 0x0, 0x2bd, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x9, 0x1}}]}, 0x4c}}, 0x20004800)

946.796884ms ago: executing program 3 (id=5686):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000003580)=[{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f00000004c0)="a8d07cee6d4e9ce02c2029fb3501d07c23435d11405c4f89e83f5ae700b509defbafce9712c72082fc22b4c6eb0075f6223c8d5928b69473ad62aaae460674867a046ad5b510bb5d37224a19adfbffc6c29796eed953ae23f31730c1207cdfafd481c40ecfd47a8e147b03b6d01f0606192dc46af639f7509a25bea9a8345bd8e7be5d7260edf07a21f40100000000000000d6cbf7ded678a80259d2f62839fbb27be1e603c21a1688d66ffe429cdeb6d5540000000000000000000000000000133e8a60969f69b5efa4e0ded8510ed50595bb", 0xd3}, {&(0x7f0000000700)="ec8bdaf53ab25402cfb5ee0ed9f8e04c474b3e5f085c1d724f0cd6c2257dcc5e8bc94e6cc40b157be24d2f08cb2536cd78d6fd236be167b18d721525af8309bc5a373b0f142cebb71c14c0b501d4cfddb07e528302593bbeaf5b6ff983d50992dbd39834369679a5fd6370ed26f1ef1d9ffbba6068b5d55c9123e1e3c13c009dfc5f8e57710f5b33cbfd225d966b440bf2b5f09300e5bc97a0f9e0e8", 0x9c}, {&(0x7f0000002080)="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", 0xe4d}, {&(0x7f00000035c0)="3b713eb1698bc606a0816238a95103f28338fddeedcc70d64335a4ec604102fc0db442f4fc882ada559071e3a05082d431bb878678c37e9f191d795017", 0x3d}], 0x4, &(0x7f0000003540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x80001)
recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0)

632.833209ms ago: executing program 3 (id=5687):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x38, r1, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x6}]}]}]}, 0x38}}, 0x20004800)

367.988712ms ago: executing program 5 (id=5688):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001480)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003000000000000000000000000000000000021000000000000000000004e2200000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0)

325.435285ms ago: executing program 3 (id=5689):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x28, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
pidfd_send_signal(r4, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', <r5=>0x0})
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802)

256.823608ms ago: executing program 5 (id=5690):
r0 = getpid()
syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x48, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x800, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "3138ee"}, @sack={0x5, 0x16, [0x0, 0xfffffffa, 0x9fd, 0x2, 0x80]}, @exp_fastopen={0xfe, 0x14, 0xf989, "ff384d5a35c74299427b77d3bb4518fd"}]}}}}}}}}, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0)
setns(r3, 0x24020000)
unshare(0x100000)
r4 = socket(0x2, 0x3, 0x5)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x4000000, &(0x7f0000000000)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
recvmmsg(r4, &(0x7f0000006680)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x100, 0x0)

0s ago: executing program 3 (id=5691):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4044081)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000001044000000080003000000", @ANYRES32=r5, @ANYBLOB="0c00238006000100f1000000"], 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

.473068][  T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.487636][T15287] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[ 1043.629959][T23767] FAULT_INJECTION: forcing a failure.
[ 1043.629959][T23767] name failslab, interval 1, probability 0, space 0, times 0
[ 1043.647297][  T995] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1043.656183][T23767] CPU: 1 UID: 0 PID: 23767 Comm: syz.5.5395 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1043.656212][T23767] Tainted: [L]=SOFTLOCKUP
[ 1043.656218][T23767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1043.656229][T23767] Call Trace:
[ 1043.656235][T23767]  <TASK>
[ 1043.656244][T23767]  dump_stack_lvl+0xe8/0x150
[ 1043.656271][T23767]  should_fail_ex+0x40c/0x560
[ 1043.656299][T23767]  should_failslab+0xa8/0x100
[ 1043.656327][T23767]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[ 1043.656354][T23767]  ? dh_data_from_key+0x15e/0x280
[ 1043.656471][T23767]  kmemdup_noprof+0x2b/0x70
[ 1043.656496][T23767]  dh_data_from_key+0x15e/0x280
[ 1043.656518][T23767]  __keyctl_dh_compute+0x34c/0xd10
[ 1043.656579][T23767]  ? __lock_acquire+0x683/0x2cd0
[ 1043.656592][T23767]  ? __pfx___keyctl_dh_compute+0x10/0x10
[ 1043.656614][T23767]  ? __might_fault+0xaf/0x130
[ 1043.656640][T23767]  keyctl_dh_compute+0x124/0x180
[ 1043.656661][T23767]  ? __pfx_keyctl_dh_compute+0x10/0x10
[ 1043.656696][T23767]  __se_sys_keyctl+0x44c/0x9d0
[ 1043.656722][T23767]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 1043.656739][T23767]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1043.656752][T23767]  ? __fget_files+0x3a2/0x420
[ 1043.656768][T23767]  ? fput+0xa0/0xd0
[ 1043.656779][T23767]  ? ksys_write+0x242/0x270
[ 1043.656800][T23767]  ? __pfx_ksys_write+0x10/0x10
[ 1043.656831][T23767]  ? __x64_sys_keyctl+0x20/0xc0
[ 1043.656861][T23767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1043.656880][T23767]  do_syscall_64+0x174/0x580
[ 1043.656890][T23767]  ? trace_irq_disable+0x3b/0x140
[ 1043.656905][T23767]  ? clear_bhb_loop+0x40/0x90
[ 1043.656917][T23767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1043.656927][T23767] RIP: 0033:0x7f302399ce59
[ 1043.656938][T23767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1043.656953][T23767] RSP: 002b:00007f302490a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1043.656973][T23767] RAX: ffffffffffffffda RBX: 00007f3023c15fa0 RCX: 00007f302399ce59
[ 1043.656986][T23767] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017
[ 1043.656998][T23767] RBP: 00007f302490a090 R08: 0000200000000180 R09: 0000000000000000
[ 1043.657011][T23767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1043.657022][T23767] R13: 00007f3023c16038 R14: 00007f3023c15fa0 R15: 00007f3023d3fa48
[ 1043.657040][T23767]  </TASK>
[ 1043.902827][T15287] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1043.906581][  T808] usb 8-1: GET_CAPABILITIES returned 0
[ 1043.912057][T15287] usb 9-1: not running at top speed; connect to a high speed hub
[ 1043.916802][  T808] usbtmc 8-1:16.0: can't read capabilities
[ 1043.972013][T15287] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4
[ 1043.988517][T15287] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[ 1043.997994][  T995] usb 4-1: Using ep0 maxpacket: 8
[ 1044.003217][T15287] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.012465][T15287] usb 9-1: Product: syz
[ 1044.017591][T15287] usb 9-1: Manufacturer: syz
[ 1044.023638][  T995] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1044.037263][T15287] usb 9-1: SerialNumber: syz
[ 1044.044897][  T995] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[ 1044.054324][  T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.062603][  T995] usb 4-1: Product: syz
[ 1044.064413][T23773] fuse: Bad value for 'fd'
[ 1044.066878][  T995] usb 4-1: Manufacturer: syz
[ 1044.076209][  T995] usb 4-1: SerialNumber: syz
[ 1044.083869][  T995] usb 4-1: config 0 descriptor??
[ 1044.144984][  T808] usb 8-1: USB disconnect, device number 96
[ 1044.149602][  T995] msi2500 4-1:0.0: Registered as swradio24
[ 1044.161581][  T995] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 1044.295608][  T995] usb 4-1: USB disconnect, device number 65
[ 1044.352304][T15287] usb 9-1: Audio class v2/v3 interfaces need an interface association
[ 1044.413511][T15287] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1044.430560][T15287] usb 9-1: USB disconnect, device number 24
[ 1044.474141][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1044.544772][T23781] program syz.6.5399 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1044.587861][T23783] FAULT_INJECTION: forcing a failure.
[ 1044.587861][T23783] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1044.601234][T23783] CPU: 1 UID: 0 PID: 23783 Comm: syz.6.5400 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1044.601252][T23783] Tainted: [L]=SOFTLOCKUP
[ 1044.601256][T23783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1044.601263][T23783] Call Trace:
[ 1044.601267][T23783]  <TASK>
[ 1044.601272][T23783]  dump_stack_lvl+0xe8/0x150
[ 1044.601291][T23783]  should_fail_ex+0x40c/0x560
[ 1044.601305][T23783]  _copy_from_user+0x2d/0xb0
[ 1044.601318][T23783]  do_sock_getsockopt+0x200/0x7e0
[ 1044.601336][T23783]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1044.601358][T23783]  ? __fget_files+0x3a2/0x420
[ 1044.601369][T23783]  ? __fget_files+0x2a/0x420
[ 1044.601384][T23783]  __x64_sys_getsockopt+0x1a4/0x240
[ 1044.601400][T23783]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1044.601411][T23783]  do_syscall_64+0x174/0x580
[ 1044.601422][T23783]  ? trace_irq_disable+0x3b/0x140
[ 1044.601436][T23783]  ? clear_bhb_loop+0x40/0x90
[ 1044.601448][T23783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1044.601458][T23783] RIP: 0033:0x7fecc899ce59
[ 1044.601469][T23783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1044.601478][T23783] RSP: 002b:00007fecc98c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1044.601490][T23783] RAX: ffffffffffffffda RBX: 00007fecc8c15fa0 RCX: 00007fecc899ce59
[ 1044.601497][T23783] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000003
[ 1044.601504][T23783] RBP: 00007fecc98c4090 R08: 0000200000000480 R09: 0000000000000000
[ 1044.601511][T23783] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001
[ 1044.601517][T23783] R13: 00007fecc8c16038 R14: 00007fecc8c15fa0 R15: 00007fecc8d3fa48
[ 1044.601532][T23783]  </TASK>
[ 1044.836191][T23785] FAULT_INJECTION: forcing a failure.
[ 1044.836191][T23785] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1044.851809][T23785] CPU: 0 UID: 0 PID: 23785 Comm: syz.6.5401 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1044.851839][T23785] Tainted: [L]=SOFTLOCKUP
[ 1044.851845][T23785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1044.851855][T23785] Call Trace:
[ 1044.851862][T23785]  <TASK>
[ 1044.851870][T23785]  dump_stack_lvl+0xe8/0x150
[ 1044.851898][T23785]  should_fail_ex+0x40c/0x560
[ 1044.851922][T23785]  _copy_from_iter+0x1d3/0x1660
[ 1044.851940][T23785]  ? skb_set_owner_w+0x263/0x3d0
[ 1044.851969][T23785]  ? __pfx__copy_from_iter+0x10/0x10
[ 1044.851994][T23785]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 1044.852015][T23785]  skb_copy_datagram_from_iter+0xe6/0x720
[ 1044.852126][T23785]  ? dev_get_by_index+0x22/0x2d0
[ 1044.852147][T23785]  ? skb_put+0x112/0x210
[ 1044.852173][T23785]  packet_sendmsg+0x36ab/0x5040
[ 1044.852258][T23785]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 1044.852297][T23785]  ? __lock_acquire+0x683/0x2cd0
[ 1044.852332][T23785]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1044.852352][T23785]  ? aa_sk_perm+0x6d5/0x900
[ 1044.852382][T23785]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1044.852403][T23785]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1044.852436][T23785]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1044.852462][T23785]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1044.852485][T23785]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1044.852508][T23785]  ____sys_sendmsg+0x9b9/0xa20
[ 1044.852541][T23785]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1044.852575][T23785]  ? import_iovec+0x73/0xa0
[ 1044.852599][T23785]  ___sys_sendmsg+0x2a5/0x360
[ 1044.852630][T23785]  ? __lock_acquire+0x683/0x2cd0
[ 1044.852652][T23785]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1044.852683][T23785]  ? kstrtouint+0x6e/0xe0
[ 1044.852732][T23785]  ? __fget_files+0x2a/0x420
[ 1044.852753][T23785]  ? __fget_files+0x3a2/0x420
[ 1044.852782][T23785]  __sys_sendmmsg+0x27c/0x4e0
[ 1044.852812][T23785]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1044.852836][T23785]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[ 1044.852878][T23785]  ? ksys_write+0x242/0x270
[ 1044.852905][T23785]  ? __pfx_ksys_write+0x10/0x10
[ 1044.852934][T23785]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1044.852961][T23785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1044.852980][T23785]  do_syscall_64+0x174/0x580
[ 1044.852996][T23785]  ? trace_irq_disable+0x3b/0x140
[ 1044.853021][T23785]  ? clear_bhb_loop+0x40/0x90
[ 1044.853043][T23785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1044.853062][T23785] RIP: 0033:0x7fecc899ce59
[ 1044.853079][T23785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1044.853095][T23785] RSP: 002b:00007fecc98c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1044.853115][T23785] RAX: ffffffffffffffda RBX: 00007fecc8c15fa0 RCX: 00007fecc899ce59
[ 1044.853128][T23785] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004
[ 1044.853140][T23785] RBP: 00007fecc98c4090 R08: 0000000000000000 R09: 0000000000000000
[ 1044.853152][T23785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1044.853163][T23785] R13: 00007fecc8c16038 R14: 00007fecc8c15fa0 R15: 00007fecc8d3fa48
[ 1044.853191][T23785]  </TASK>
[ 1045.417432][ T5727] usb 8-1: new high-speed USB device number 97 using dummy_hcd
[ 1045.442354][T23804] fuse: Bad value for 'fd'
[ 1045.569087][ T5727] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1045.583081][ T5727] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1045.596525][ T5727] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1045.615395][ T5727] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1045.628455][T23787] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1045.676601][ T5727] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[ 1045.767579][  T808] usb 6-1: new low-speed USB device number 92 using dummy_hcd
[ 1045.917554][  T808] usb 6-1: device descriptor read/64, error -71
[ 1045.931183][T23818] FAULT_INJECTION: forcing a failure.
[ 1045.931183][T23818] name failslab, interval 1, probability 0, space 0, times 0
[ 1045.945256][T23818] CPU: 1 UID: 0 PID: 23818 Comm: syz.8.5413 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1045.945287][T23818] Tainted: [L]=SOFTLOCKUP
[ 1045.945293][T23818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1045.945303][T23818] Call Trace:
[ 1045.945310][T23818]  <TASK>
[ 1045.945317][T23818]  dump_stack_lvl+0xe8/0x150
[ 1045.945343][T23818]  should_fail_ex+0x40c/0x560
[ 1045.945367][T23818]  should_failslab+0xa8/0x100
[ 1045.945394][T23818]  kmem_cache_alloc_node_noprof+0x8f/0x680
[ 1045.945419][T23818]  ? __alloc_skb+0x1d7/0x7a0
[ 1045.945440][T23818]  ? __local_bh_enable_ip+0xd0/0x130
[ 1045.945466][T23818]  __alloc_skb+0x1d7/0x7a0
[ 1045.945491][T23818]  netlink_ack+0x136/0xb30
[ 1045.945513][T23818]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1045.945533][T23818]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1045.945701][T23818]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1045.945730][T23818]  netlink_rcv_skb+0x2a4/0x4a0
[ 1045.945756][T23818]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1045.945777][T23818]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1045.945815][T23818]  ? down_read+0x270/0x2e0
[ 1045.945865][T23818]  ? genl_rcv+0xd/0x40
[ 1045.945886][T23818]  genl_rcv+0x28/0x40
[ 1045.945903][T23818]  netlink_unicast+0x7bb/0x940
[ 1045.945936][T23818]  netlink_sendmsg+0x813/0xb40
[ 1045.945970][T23818]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1045.945997][T23818]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1045.946023][T23818]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1045.946046][T23818]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1045.946072][T23818]  ____sys_sendmsg+0x9b9/0xa20
[ 1045.946099][T23818]  ? __might_fault+0xaf/0x130
[ 1045.946126][T23818]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1045.946159][T23818]  ? import_iovec+0x73/0xa0
[ 1045.946184][T23818]  ___sys_sendmsg+0x2a5/0x360
[ 1045.946208][T23818]  ? __lock_acquire+0x683/0x2cd0
[ 1045.946231][T23818]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1045.946288][T23818]  ? __fget_files+0x2a/0x420
[ 1045.946310][T23818]  ? __fget_files+0x3a2/0x420
[ 1045.946340][T23818]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1045.946369][T23818]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1045.946404][T23818]  ? __pfx_ksys_write+0x10/0x10
[ 1045.946436][T23818]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1045.946456][T23818]  do_syscall_64+0x174/0x580
[ 1045.946472][T23818]  ? trace_irq_disable+0x3b/0x140
[ 1045.946498][T23818]  ? clear_bhb_loop+0x40/0x90
[ 1045.946520][T23818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1045.946538][T23818] RIP: 0033:0x7f13dcb9ce59
[ 1045.946556][T23818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1045.946572][T23818] RSP: 002b:00007f13dadf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1045.946592][T23818] RAX: ffffffffffffffda RBX: 00007f13dce15fa0 RCX: 00007f13dcb9ce59
[ 1045.946605][T23818] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1045.946617][T23818] RBP: 00007f13dadf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1045.946628][T23818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1045.946638][T23818] R13: 00007f13dce16038 R14: 00007f13dce15fa0 R15: 00007f13dcf3fa48
[ 1045.946675][T23818]  </TASK>
[ 1046.317210][  T995] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1046.350438][   T29] kauditd_printk_skb: 71 callbacks suppressed
[ 1046.350455][   T29] audit: type=1326 audit(1781381089.250:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23821 comm="syz.8.5415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dcb9ce59 code=0x7ffc0000
[ 1046.381086][  T808] usb 6-1: new low-speed USB device number 93 using dummy_hcd
[ 1046.392951][   T29] audit: type=1326 audit(1781381089.250:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23821 comm="syz.8.5415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dcb9ce59 code=0x7ffc0000
[ 1046.418198][   T29] audit: type=1326 audit(1781381089.290:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23821 comm="syz.8.5415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f13dcb9ce59 code=0x7ffc0000
[ 1046.442994][   T29] audit: type=1326 audit(1781381089.290:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23821 comm="syz.8.5415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dcb9ce59 code=0x7ffc0000
[ 1046.473053][   T29] audit: type=1326 audit(1781381089.290:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23821 comm="syz.8.5415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dcb9ce59 code=0x7ffc0000
[ 1046.498450][  T995] usb 4-1: Using ep0 maxpacket: 8
[ 1046.515311][   T29] audit: type=1326 audit(1781381089.290:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23821 comm="syz.8.5415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f13dcb9ce59 code=0x7ffc0000
[ 1046.517227][  T808] usb 6-1: device descriptor read/64, error -71
[ 1046.558476][  T995] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1046.569719][  T995] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1046.580905][  T995] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1046.591239][  T995] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1046.606054][  T995] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1046.618951][  T995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.677460][  T808] usb usb6-port1: attempt power cycle
[ 1046.685934][   T29] audit: type=1326 audit(1781381089.580:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23821 comm="syz.8.5415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dcb9ce59 code=0x7ffc0000
[ 1046.714823][   T29] audit: type=1326 audit(1781381089.580:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23821 comm="syz.8.5415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dcb9ce59 code=0x7ffc0000
[ 1046.739861][   T29] audit: type=1326 audit(1781381089.610:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23821 comm="syz.8.5415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13dcb9ce59 code=0x7ffc0000
[ 1046.764704][   T29] audit: type=1326 audit(1781381089.610:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23821 comm="syz.8.5415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dcb9ce59 code=0x7ffc0000
[ 1046.835931][  T995] usb 4-1: GET_CAPABILITIES returned 0
[ 1046.841689][  T995] usbtmc 4-1:16.0: can't read capabilities
[ 1046.868490][  T995] usb 8-1: USB disconnect, device number 97
[ 1047.027236][  T808] usb 6-1: new low-speed USB device number 94 using dummy_hcd
[ 1047.050744][  T808] usb 6-1: device descriptor read/8, error -71
[ 1047.052150][T15288] usb 4-1: USB disconnect, device number 66
[ 1047.307360][  T808] usb 6-1: new low-speed USB device number 95 using dummy_hcd
[ 1047.336594][T23842] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5422'.
[ 1047.353960][  T808] usb 6-1: device descriptor read/8, error -71
[ 1047.367035][T23842] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1047.381470][T23842] bond1: entered promiscuous mode
[ 1047.386742][T23842] bond1: entered allmulticast mode
[ 1047.403069][T23842] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1047.411313][T23842] team0: Port device bond1 added
[ 1047.427224][T23842] team0: Port device bond1 removed
[ 1047.438926][T23842] bond1 (unregistering): Released all slaves
[ 1047.495189][  T808] usb usb6-port1: unable to enumerate USB device
[ 1047.977457][  T808] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1048.147209][  T808] usb 4-1: Using ep0 maxpacket: 32
[ 1048.155939][  T808] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1048.168273][  T808] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1048.175331][  T808] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1048.185011][  T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1048.205459][  T808] usb 4-1: config 0 descriptor??
[ 1048.257206][   T10] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1048.435783][T23858] netlink: 'syz.7.5427': attribute type 27 has an invalid length.
[ 1048.439816][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1048.457670][   T10] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1048.471240][   T10] usb 9-1: string descriptor 0 read error: -22
[ 1048.478614][   T10] usb 9-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40
[ 1048.487839][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1048.503339][   T10] usbhid 9-1:1.0: fixing wrong optional hid class descriptors count
[ 1048.512985][   T10] usbhid 9-1:1.0: can't add hid device: -22
[ 1048.519111][   T10] usbhid 9-1:1.0: probe with driver usbhid failed with error -22
[ 1048.687177][T15288] usb 8-1: new high-speed USB device number 98 using dummy_hcd
[ 1048.704570][T23852] xt_CONNSECMARK: invalid mode: 0
[ 1048.779455][  T808] corsair-cpro 0003:1B1C:0C10.003F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0
[ 1048.844678][T15288] usb 8-1: config 220 has an invalid interface number: 76 but max is 2
[ 1048.853338][T15288] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1048.862556][T15288] usb 8-1: config 220 has an invalid descriptor of length 157, skipping remainder of the config
[ 1048.873462][T15288] usb 8-1: config 220 has no interface number 2
[ 1048.880034][T15288] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1048.894195][T15288] usb 8-1: config 220 interface 0 has no altsetting 0
[ 1048.901264][T15288] usb 8-1: config 220 interface 76 has no altsetting 0
[ 1048.908680][T15288] usb 8-1: config 220 interface 1 has no altsetting 0
[ 1048.919071][T15288] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1048.928320][T15288] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1048.937427][T15288] usb 8-1: Product: syz
[ 1048.941630][T15288] usb 8-1: Manufacturer: syz
[ 1048.946220][T15288] usb 8-1: SerialNumber: syz
[ 1049.018365][  T995] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1049.159218][  T995] usb 6-1: device descriptor read/64, error -71
[ 1049.168691][T23858] xt_hashlimit: size too large, truncated to 1048576
[ 1049.173999][T23859] xt_hashlimit: size too large, truncated to 1048576
[ 1049.348029][T15288] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1049.367806][T15288] uvcvideo 8-1:220.0: No valid video chain found.
[ 1049.379047][T15288] usb 8-1: selecting invalid altsetting 0
[ 1049.412170][T15288] usb 8-1: selecting invalid altsetting 0
[ 1049.425596][T15288] usbtest 8-1:220.1: probe with driver usbtest failed with error -22
[ 1049.434110][  T995] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1049.462298][T15288] usb 8-1: USB disconnect, device number 98
[ 1049.578124][  T995] usb 6-1: device descriptor read/64, error -71
[ 1049.636842][T15287] IPVS: starting estimator thread 0...
[ 1049.690049][  T995] usb usb6-port1: attempt power cycle
[ 1049.728749][T23877] IPVS: using max 31 ests per chain, 74400 per kthread
[ 1049.887238][T15288] usb 8-1: new high-speed USB device number 99 using dummy_hcd
[ 1050.037213][  T995] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1050.047157][T15288] usb 8-1: Using ep0 maxpacket: 32
[ 1050.054173][T15288] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1050.065664][T15288] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.074042][  T995] usb 6-1: device descriptor read/8, error -71
[ 1050.082685][T15288] usb 8-1: config 0 descriptor??
[ 1050.096944][T15288] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1050.337186][  T995] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1050.358339][  T995] usb 6-1: device descriptor read/8, error -71
[ 1050.467609][  T995] usb usb6-port1: unable to enumerate USB device
[ 1050.609233][T15288] gspca_nw80x: reg_w err -110
[ 1050.614333][T15288] nw80x 8-1:0.0: probe with driver nw80x failed with error -110
[ 1050.750607][T14516] usb 9-1: USB disconnect, device number 25
[ 1050.791921][   T10] usb 8-1: USB disconnect, device number 99
[ 1050.801161][  T808] corsair-cpro 0003:1B1C:0C10.003F: probe with driver corsair-cpro failed with error -71
[ 1050.858253][  T808] usb 4-1: USB disconnect, device number 67
[ 1050.996170][T23894] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5437'.
[ 1051.213839][T23897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1051.247198][   T10] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1051.883285][T23929] FAULT_INJECTION: forcing a failure.
[ 1051.883285][T23929] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1051.904880][T23929] CPU: 1 UID: 0 PID: 23929 Comm: syz.3.5451 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1051.904909][T23929] Tainted: [L]=SOFTLOCKUP
[ 1051.904916][T23929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1051.904925][T23929] Call Trace:
[ 1051.904933][T23929]  <TASK>
[ 1051.904941][T23929]  dump_stack_lvl+0xe8/0x150
[ 1051.904968][T23929]  should_fail_ex+0x40c/0x560
[ 1051.904994][T23929]  _copy_from_user+0x2d/0xb0
[ 1051.905017][T23929]  __sys_connect+0x155/0x460
[ 1051.905043][T23929]  ? __pfx___sys_connect+0x10/0x10
[ 1051.905078][T23929]  ? __pfx_ksys_write+0x10/0x10
[ 1051.905108][T23929]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1051.905127][T23929]  __x64_sys_connect+0x7a/0x90
[ 1051.905151][T23929]  do_syscall_64+0x174/0x580
[ 1051.905168][T23929]  ? trace_irq_disable+0x3b/0x140
[ 1051.905193][T23929]  ? clear_bhb_loop+0x40/0x90
[ 1051.905214][T23929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1051.905232][T23929] RIP: 0033:0x7f123b39ce59
[ 1051.905249][T23929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1051.905264][T23929] RSP: 002b:00007f123c322028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1051.905283][T23929] RAX: ffffffffffffffda RBX: 00007f123b615fa0 RCX: 00007f123b39ce59
[ 1051.905297][T23929] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003
[ 1051.905308][T23929] RBP: 00007f123c322090 R08: 0000000000000000 R09: 0000000000000000
[ 1051.905319][T23929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1051.905329][T23929] R13: 00007f123b616038 R14: 00007f123b615fa0 R15: 00007f123b73fa48
[ 1051.905362][T23929]  </TASK>
[ 1052.644153][T23947] FAULT_INJECTION: forcing a failure.
[ 1052.644153][T23947] name failslab, interval 1, probability 0, space 0, times 0
[ 1052.665746][T23947] CPU: 0 UID: 0 PID: 23947 Comm: syz.5.5458 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1052.665775][T23947] Tainted: [L]=SOFTLOCKUP
[ 1052.665782][T23947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1052.665792][T23947] Call Trace:
[ 1052.665799][T23947]  <TASK>
[ 1052.665807][T23947]  dump_stack_lvl+0xe8/0x150
[ 1052.665834][T23947]  should_fail_ex+0x40c/0x560
[ 1052.665866][T23947]  should_failslab+0xa8/0x100
[ 1052.665894][T23947]  kmem_cache_alloc_node_noprof+0x8f/0x680
[ 1052.665920][T23947]  ? __alloc_skb+0x1d7/0x7a0
[ 1052.665942][T23947]  ? __local_bh_enable_ip+0xd0/0x130
[ 1052.665965][T23947]  __alloc_skb+0x1d7/0x7a0
[ 1052.665992][T23947]  netlink_ack+0x136/0xb30
[ 1052.666014][T23947]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1052.666036][T23947]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1052.666061][T23947]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1052.666091][T23947]  netlink_rcv_skb+0x2a4/0x4a0
[ 1052.666115][T23947]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1052.666136][T23947]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1052.666176][T23947]  ? down_read+0x270/0x2e0
[ 1052.666195][T23947]  ? genl_rcv+0xd/0x40
[ 1052.666216][T23947]  genl_rcv+0x28/0x40
[ 1052.666234][T23947]  netlink_unicast+0x7bb/0x940
[ 1052.666267][T23947]  netlink_sendmsg+0x813/0xb40
[ 1052.666300][T23947]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1052.666328][T23947]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1052.666354][T23947]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1052.666376][T23947]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1052.666403][T23947]  ____sys_sendmsg+0x9b9/0xa20
[ 1052.666429][T23947]  ? __might_fault+0xaf/0x130
[ 1052.666458][T23947]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1052.666493][T23947]  ? import_iovec+0x73/0xa0
[ 1052.666517][T23947]  ___sys_sendmsg+0x2a5/0x360
[ 1052.666541][T23947]  ? __lock_acquire+0x683/0x2cd0
[ 1052.666563][T23947]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1052.666622][T23947]  ? __fget_files+0x2a/0x420
[ 1052.666643][T23947]  ? __fget_files+0x3a2/0x420
[ 1052.666674][T23947]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1052.666702][T23947]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1052.666737][T23947]  ? __pfx_ksys_write+0x10/0x10
[ 1052.666766][T23947]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.666786][T23947]  do_syscall_64+0x174/0x580
[ 1052.666802][T23947]  ? trace_irq_disable+0x3b/0x140
[ 1052.666826][T23947]  ? clear_bhb_loop+0x40/0x90
[ 1052.666857][T23947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.666874][T23947] RIP: 0033:0x7f302399ce59
[ 1052.666891][T23947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1052.666906][T23947] RSP: 002b:00007f302490a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1052.666926][T23947] RAX: ffffffffffffffda RBX: 00007f3023c15fa0 RCX: 00007f302399ce59
[ 1052.666940][T23947] RDX: 0000000020008004 RSI: 0000200000001200 RDI: 0000000000000003
[ 1052.666952][T23947] RBP: 00007f302490a090 R08: 0000000000000000 R09: 0000000000000000
[ 1052.666963][T23947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1052.666975][T23947] R13: 00007f3023c16038 R14: 00007f3023c15fa0 R15: 00007f3023d3fa48
[ 1052.667004][T23947]  </TASK>
[ 1052.728476][T15288] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[ 1053.153595][T15288] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1053.164945][T15288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.174230][T15288] usb 4-1: Product: syz
[ 1053.179088][T15288] usb 4-1: Manufacturer: syz
[ 1053.216312][T15288] usb 4-1: SerialNumber: syz
[ 1053.246506][T15288] usb 4-1: config 0 descriptor??
[ 1053.340181][T23962] FAULT_INJECTION: forcing a failure.
[ 1053.340181][T23962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1053.354804][T23962] CPU: 0 UID: 0 PID: 23962 Comm: syz.8.5463 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1053.354836][T23962] Tainted: [L]=SOFTLOCKUP
[ 1053.354843][T23962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1053.354853][T23962] Call Trace:
[ 1053.354861][T23962]  <TASK>
[ 1053.354870][T23962]  dump_stack_lvl+0xe8/0x150
[ 1053.354897][T23962]  should_fail_ex+0x40c/0x560
[ 1053.354922][T23962]  _copy_from_user+0x2d/0xb0
[ 1053.354953][T23962]  kstrtouint_from_user+0xd6/0x180
[ 1053.354974][T23962]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1053.355017][T23962]  proc_fail_nth_write+0x8e/0x210
[ 1053.355041][T23962]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1053.355072][T23962]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1053.355094][T23962]  vfs_write+0x296/0xba0
[ 1053.355126][T23962]  ? __pfx_vfs_write+0x10/0x10
[ 1053.355152][T23962]  ? __fget_files+0x2a/0x420
[ 1053.355178][T23962]  ? __fget_files+0x3a2/0x420
[ 1053.355198][T23962]  ? __fget_files+0x2a/0x420
[ 1053.355228][T23962]  ksys_write+0x150/0x270
[ 1053.355255][T23962]  ? __pfx_ksys_write+0x10/0x10
[ 1053.355288][T23962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1053.355308][T23962]  do_syscall_64+0x174/0x580
[ 1053.355327][T23962]  ? trace_irq_disable+0x3b/0x140
[ 1053.355353][T23962]  ? clear_bhb_loop+0x40/0x90
[ 1053.355375][T23962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1053.355393][T23962] RIP: 0033:0x7f13dcb5d68e
[ 1053.355410][T23962] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1053.355426][T23962] RSP: 002b:00007f13dadf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1053.355445][T23962] RAX: ffffffffffffffda RBX: 00007f13dadf66c0 RCX: 00007f13dcb5d68e
[ 1053.355458][T23962] RDX: 0000000000000001 RSI: 00007f13dadf60a0 RDI: 0000000000000004
[ 1053.355469][T23962] RBP: 00007f13dadf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1053.355480][T23962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1053.355491][T23962] R13: 00007f13dce16038 R14: 00007f13dce15fa0 R15: 00007f13dcf3fa48
[ 1053.355521][T23962]  </TASK>
[ 1053.575329][T15288] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1053.692792][T23970] FAULT_INJECTION: forcing a failure.
[ 1053.692792][T23970] name failslab, interval 1, probability 0, space 0, times 0
[ 1053.710112][T23970] CPU: 1 UID: 0 PID: 23970 Comm: syz.8.5467 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1053.710140][T23970] Tainted: [L]=SOFTLOCKUP
[ 1053.710147][T23970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1053.710156][T23970] Call Trace:
[ 1053.710164][T23970]  <TASK>
[ 1053.710172][T23970]  dump_stack_lvl+0xe8/0x150
[ 1053.710199][T23970]  should_fail_ex+0x40c/0x560
[ 1053.710223][T23970]  should_failslab+0xa8/0x100
[ 1053.710251][T23970]  __kmalloc_noprof+0xe8/0x750
[ 1053.710276][T23970]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1053.710381][T23970]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1053.710413][T23970]  genl_family_rcv_msg_doit+0xda/0x340
[ 1053.710428][T23970]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1053.710443][T23970]  ? apparmor_capable+0x126/0x170
[ 1053.710456][T23970]  ? bpf_lsm_capable+0x9/0x20
[ 1053.710466][T23970]  ? security_capable+0x7e/0x2c0
[ 1053.710483][T23970]  genl_rcv_msg+0x614/0x7a0
[ 1053.710497][T23970]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1053.710507][T23970]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1053.710520][T23970]  ? __pfx_nl80211_new_mpath+0x10/0x10
[ 1053.710529][T23970]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1053.710542][T23970]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1053.710559][T23970]  netlink_rcv_skb+0x226/0x4a0
[ 1053.710574][T23970]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1053.710585][T23970]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1053.710606][T23970]  ? down_read+0x270/0x2e0
[ 1053.710616][T23970]  ? genl_rcv+0xd/0x40
[ 1053.710627][T23970]  genl_rcv+0x28/0x40
[ 1053.710637][T23970]  netlink_unicast+0x7bb/0x940
[ 1053.710654][T23970]  netlink_sendmsg+0x813/0xb40
[ 1053.710672][T23970]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1053.710688][T23970]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1053.710702][T23970]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1053.710715][T23970]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1053.710729][T23970]  ____sys_sendmsg+0x9b9/0xa20
[ 1053.710744][T23970]  ? __might_fault+0xaf/0x130
[ 1053.710760][T23970]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1053.710778][T23970]  ? import_iovec+0x73/0xa0
[ 1053.710792][T23970]  ___sys_sendmsg+0x2a5/0x360
[ 1053.710805][T23970]  ? __lock_acquire+0x683/0x2cd0
[ 1053.710818][T23970]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1053.710849][T23970]  ? __fget_files+0x2a/0x420
[ 1053.710862][T23970]  ? __fget_files+0x3a2/0x420
[ 1053.710878][T23970]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1053.710894][T23970]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1053.710916][T23970]  ? __pfx_ksys_write+0x10/0x10
[ 1053.710933][T23970]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1053.710944][T23970]  do_syscall_64+0x174/0x580
[ 1053.710954][T23970]  ? trace_irq_disable+0x3b/0x140
[ 1053.710969][T23970]  ? clear_bhb_loop+0x40/0x90
[ 1053.710981][T23970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1053.710991][T23970] RIP: 0033:0x7f13dcb9ce59
[ 1053.711002][T23970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1053.711016][T23970] RSP: 002b:00007f13dadf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1053.711034][T23970] RAX: ffffffffffffffda RBX: 00007f13dce15fa0 RCX: 00007f13dcb9ce59
[ 1053.711047][T23970] RDX: 0000000000008010 RSI: 0000200000000340 RDI: 0000000000000003
[ 1053.711057][T23970] RBP: 00007f13dadf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1053.711068][T23970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1053.711079][T23970] R13: 00007f13dce16038 R14: 00007f13dce15fa0 R15: 00007f13dcf3fa48
[ 1053.711102][T23970]  </TASK>
[ 1054.247201][  T808] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1054.397310][  T808] usb 6-1: device descriptor read/64, error -71
[ 1054.519697][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.527613][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.557315][T15287] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1054.637311][  T808] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 1054.727632][T15287] usb 9-1: Using ep0 maxpacket: 16
[ 1054.743483][T15287] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[ 1054.756912][T15287] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[ 1054.770732][T15287] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1054.777231][  T808] usb 6-1: device descriptor read/64, error -71
[ 1054.780641][T15287] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.814564][T15287] usb 9-1: Product: syz
[ 1054.818881][T15287] usb 9-1: Manufacturer: syz
[ 1054.824403][T15287] usb 9-1: SerialNumber: syz
[ 1054.898288][  T808] usb usb6-port1: attempt power cycle
[ 1055.055814][T15287] cdc_ncm 9-1:1.0: bind() failure
[ 1055.068881][   T10] usb 8-1: new high-speed USB device number 100 using dummy_hcd
[ 1055.080650][T15287] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[ 1055.088701][T15287] cdc_ncm 9-1:1.1: bind() failure
[ 1055.099778][T15287] usb 9-1: USB disconnect, device number 27
[ 1055.229727][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1055.240877][  T808] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[ 1055.248586][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1055.258490][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1055.272011][   T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1055.281169][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.290575][  T808] usb 6-1: device descriptor read/8, error -71
[ 1055.299524][   T10] usb 8-1: config 0 descriptor??
[ 1055.537300][  T808] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[ 1055.557711][  T808] usb 6-1: device descriptor read/8, error -71
[ 1055.667644][  T808] usb usb6-port1: unable to enumerate USB device
[ 1055.748255][   T10] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[ 1055.770370][T15288] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1055.808659][T15288] usb 4-1: USB disconnect, device number 68
[ 1056.765440][T24008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5482'.
[ 1056.977268][   T10] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1057.087202][T15288] usb 8-1: reset high-speed USB device number 100 using dummy_hcd
[ 1057.107314][   T10] usb 9-1: device descriptor read/64, error -71
[ 1057.228115][T15288] usb 8-1: device descriptor read/64, error -32
[ 1057.337382][ T5727] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1057.355309][   T10] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1057.477462][T15288] usb 8-1: reset high-speed USB device number 100 using dummy_hcd
[ 1057.487302][   T10] usb 9-1: device descriptor read/64, error -71
[ 1057.512171][ T5727] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1057.523333][ T5727] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1057.533519][ T5727] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1057.542895][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.554831][T24014] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1057.568379][ T5727] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1057.598890][   T10] usb usb9-port1: attempt power cycle
[ 1057.618911][T15288] usb 8-1: device descriptor read/64, error -32
[ 1057.737212][  T995] usb 6-1: new full-speed USB device number 104 using dummy_hcd
[ 1057.813643][T24014] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20257
[ 1057.823304][T15298] usb 4-1: USB disconnect, device number 69
[ 1057.877194][T15288] usb 8-1: reset high-speed USB device number 100 using dummy_hcd
[ 1057.897671][T15288] usb 8-1: device descriptor read/8, error -32
[ 1057.904885][  T995] usb 6-1: config 0 has no interfaces?
[ 1057.912106][  T995] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1057.921329][  T995] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1057.929414][  T995] usb 6-1: Manufacturer: syz
[ 1057.935913][  T995] usb 6-1: config 0 descriptor??
[ 1057.948469][   T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1057.977964][   T10] usb 9-1: device descriptor read/8, error -71
[ 1058.069863][T24025] sctp: [Deprecated]: syz.7.5488 (pid 24025) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1058.069863][T24025] Use struct sctp_sack_info instead
[ 1058.088380][T24024] sctp: [Deprecated]: syz.7.5488 (pid 24024) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1058.088380][T24024] Use struct sctp_sack_info instead
[ 1058.144020][T24018] netlink: 'syz.5.5486': attribute type 27 has an invalid length.
[ 1058.159536][ T5727] usb 6-1: USB disconnect, device number 104
[ 1058.217177][   T10] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1058.237626][   T10] usb 9-1: device descriptor read/8, error -71
[ 1058.347683][   T10] usb usb9-port1: unable to enumerate USB device
[ 1058.427203][T15288] usb 8-1: reset high-speed USB device number 100 using dummy_hcd
[ 1058.441985][T24028] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5489'.
[ 1058.459976][T15288] usb 8-1: device reset changed ep0 maxpacket size!
[ 1058.467231][   T46] usb 8-1: USB disconnect, device number 100
[ 1058.617259][   T46] usb 8-1: new high-speed USB device number 101 using dummy_hcd
[ 1058.785468][   T46] usb 8-1: Using ep0 maxpacket: 8
[ 1058.812119][   T46] usb 8-1: config 0 has an invalid interface number: 186 but max is 0
[ 1058.822532][   T46] usb 8-1: config 0 has no interface number 0
[ 1058.836775][   T46] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1058.849183][   T46] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1058.861673][   T46] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1058.875349][   T46] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 102, changing to 10
[ 1058.891220][   T46] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 24624, setting to 1024
[ 1058.905384][   T46] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1058.949004][   T46] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1058.961655][   T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1058.972421][   T46] usb 8-1: Product: syz
[ 1058.977843][   T46] usb 8-1: Manufacturer: syz
[ 1058.985901][   T46] usb 8-1: SerialNumber: syz
[ 1058.998981][   T46] usb 8-1: config 0 descriptor??
[ 1059.211787][   T46] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[ 1059.605008][T24047] fuse: Bad value for 'fd'
[ 1059.638854][T24050] FAULT_INJECTION: forcing a failure.
[ 1059.638854][T24050] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1059.658644][T24050] CPU: 0 UID: 0 PID: 24050 Comm: syz.8.5497 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1059.658670][T24050] Tainted: [L]=SOFTLOCKUP
[ 1059.658677][T24050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1059.658690][T24050] Call Trace:
[ 1059.658697][T24050]  <TASK>
[ 1059.658702][T24050]  dump_stack_lvl+0xe8/0x150
[ 1059.658719][T24050]  should_fail_ex+0x40c/0x560
[ 1059.658733][T24050]  _copy_from_iter+0x1d3/0x1660
[ 1059.658747][T24050]  ? unwind_next_frame+0x8f/0x2550
[ 1059.658760][T24050]  ? __pfx__copy_from_iter+0x10/0x10
[ 1059.658778][T24050]  bcm_sendmsg+0x171/0x6a0
[ 1059.658890][T24050]  ? __pfx_bcm_sendmsg+0x10/0x10
[ 1059.658907][T24050]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1059.658922][T24050]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1059.658935][T24050]  ? __pfx_bcm_sendmsg+0x10/0x10
[ 1059.658950][T24050]  ____sys_sendmsg+0x9b9/0xa20
[ 1059.658965][T24050]  ? __might_fault+0xaf/0x130
[ 1059.658981][T24050]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1059.658999][T24050]  ? import_iovec+0x73/0xa0
[ 1059.659012][T24050]  ___sys_sendmsg+0x2a5/0x360
[ 1059.659026][T24050]  ? __lock_acquire+0x683/0x2cd0
[ 1059.659038][T24050]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1059.659068][T24050]  ? __fget_files+0x2a/0x420
[ 1059.659079][T24050]  ? __fget_files+0x3a2/0x420
[ 1059.659095][T24050]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1059.659110][T24050]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1059.659129][T24050]  ? __pfx_ksys_write+0x10/0x10
[ 1059.659146][T24050]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1059.659157][T24050]  do_syscall_64+0x174/0x580
[ 1059.659173][T24050]  ? clear_bhb_loop+0x40/0x90
[ 1059.659185][T24050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1059.659195][T24050] RIP: 0033:0x7f13dcb9ce59
[ 1059.659205][T24050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1059.659214][T24050] RSP: 002b:00007f13dadf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1059.659225][T24050] RAX: ffffffffffffffda RBX: 00007f13dce15fa0 RCX: 00007f13dcb9ce59
[ 1059.659233][T24050] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[ 1059.659239][T24050] RBP: 00007f13dadf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1059.659246][T24050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1059.659252][T24050] R13: 00007f13dce16038 R14: 00007f13dce15fa0 R15: 00007f13dcf3fa48
[ 1059.659267][T24050]  </TASK>
[ 1059.664924][T24047] binder: 24044:24047 ioctl 4018620d 0 returned -22
[ 1060.105306][T24057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5500'.
[ 1060.202558][T24061] FAULT_INJECTION: forcing a failure.
[ 1060.202558][T24061] name failslab, interval 1, probability 0, space 0, times 0
[ 1060.218643][T24061] CPU: 1 UID: 0 PID: 24061 Comm: syz.5.5501 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1060.218670][T24061] Tainted: [L]=SOFTLOCKUP
[ 1060.218677][T24061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1060.218688][T24061] Call Trace:
[ 1060.218695][T24061]  <TASK>
[ 1060.218703][T24061]  dump_stack_lvl+0xe8/0x150
[ 1060.218732][T24061]  should_fail_ex+0x40c/0x560
[ 1060.218757][T24061]  should_failslab+0xa8/0x100
[ 1060.218784][T24061]  ? skb_clone+0x212/0x3a0
[ 1060.218803][T24061]  kmem_cache_alloc_noprof+0x87/0x650
[ 1060.218836][T24061]  skb_clone+0x212/0x3a0
[ 1060.218856][T24061]  __netlink_deliver_tap+0x413/0x860
[ 1060.218893][T24061]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1060.218918][T24061]  netlink_deliver_tap+0x19c/0x1b0
[ 1060.218943][T24061]  netlink_sendskb+0x68/0x140
[ 1060.218969][T24061]  netlink_rcv_skb+0x2a4/0x4a0
[ 1060.218993][T24061]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1060.219015][T24061]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1060.219056][T24061]  ? down_read+0x270/0x2e0
[ 1060.219074][T24061]  ? genl_rcv+0xd/0x40
[ 1060.219096][T24061]  genl_rcv+0x28/0x40
[ 1060.219113][T24061]  netlink_unicast+0x7bb/0x940
[ 1060.219146][T24061]  netlink_sendmsg+0x813/0xb40
[ 1060.219181][T24061]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1060.219209][T24061]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1060.219237][T24061]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1060.219260][T24061]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1060.219286][T24061]  ____sys_sendmsg+0x9b9/0xa20
[ 1060.219312][T24061]  ? __might_fault+0xaf/0x130
[ 1060.219341][T24061]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1060.219376][T24061]  ? import_iovec+0x73/0xa0
[ 1060.219401][T24061]  ___sys_sendmsg+0x2a5/0x360
[ 1060.219427][T24061]  ? __lock_acquire+0x683/0x2cd0
[ 1060.219450][T24061]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1060.219511][T24061]  ? __fget_files+0x2a/0x420
[ 1060.219532][T24061]  ? __fget_files+0x3a2/0x420
[ 1060.219563][T24061]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1060.219591][T24061]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1060.219633][T24061]  ? __pfx_ksys_write+0x10/0x10
[ 1060.219667][T24061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1060.219687][T24061]  do_syscall_64+0x174/0x580
[ 1060.219704][T24061]  ? trace_irq_disable+0x3b/0x140
[ 1060.219729][T24061]  ? clear_bhb_loop+0x40/0x90
[ 1060.219751][T24061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1060.219768][T24061] RIP: 0033:0x7f302399ce59
[ 1060.219786][T24061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1060.219802][T24061] RSP: 002b:00007f302490a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1060.219823][T24061] RAX: ffffffffffffffda RBX: 00007f3023c15fa0 RCX: 00007f302399ce59
[ 1060.219836][T24061] RDX: 0000000000004000 RSI: 0000200000000f00 RDI: 0000000000000003
[ 1060.219849][T24061] RBP: 00007f302490a090 R08: 0000000000000000 R09: 0000000000000000
[ 1060.219861][T24061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1060.219872][T24061] R13: 00007f3023c16038 R14: 00007f3023c15fa0 R15: 00007f3023d3fa48
[ 1060.219903][T24061]  </TASK>
[ 1061.054371][T24076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5507'.
[ 1061.189728][   T46] usb 8-1: USB disconnect, device number 101
[ 1061.561458][T24099] x_tables: ip_tables: CT target: only valid in raw table, not €
[ 1061.942740][T24116] program syz.7.5521 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1062.059334][T24120] FAULT_INJECTION: forcing a failure.
[ 1062.059334][T24120] name failslab, interval 1, probability 0, space 0, times 0
[ 1062.096985][T24120] CPU: 1 UID: 0 PID: 24120 Comm: syz.5.5523 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1062.097013][T24120] Tainted: [L]=SOFTLOCKUP
[ 1062.097020][T24120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1062.097031][T24120] Call Trace:
[ 1062.097038][T24120]  <TASK>
[ 1062.097047][T24120]  dump_stack_lvl+0xe8/0x150
[ 1062.097075][T24120]  should_fail_ex+0x40c/0x560
[ 1062.097099][T24120]  should_failslab+0xa8/0x100
[ 1062.097126][T24120]  ? skb_clone+0x212/0x3a0
[ 1062.097144][T24120]  kmem_cache_alloc_noprof+0x87/0x650
[ 1062.097177][T24120]  skb_clone+0x212/0x3a0
[ 1062.097196][T24120]  __netlink_deliver_tap+0x413/0x860
[ 1062.097232][T24120]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1062.097258][T24120]  netlink_deliver_tap+0x19c/0x1b0
[ 1062.097284][T24120]  netlink_sendskb+0x68/0x140
[ 1062.097307][T24120]  netlink_rcv_skb+0x2a4/0x4a0
[ 1062.097331][T24120]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1062.097353][T24120]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1062.097391][T24120]  ? down_read+0x270/0x2e0
[ 1062.097411][T24120]  ? genl_rcv+0xd/0x40
[ 1062.097430][T24120]  genl_rcv+0x28/0x40
[ 1062.097446][T24120]  netlink_unicast+0x7bb/0x940
[ 1062.097479][T24120]  netlink_sendmsg+0x813/0xb40
[ 1062.097512][T24120]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1062.097542][T24120]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1062.097570][T24120]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1062.097592][T24120]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1062.097619][T24120]  ____sys_sendmsg+0x9b9/0xa20
[ 1062.097645][T24120]  ? __might_fault+0xaf/0x130
[ 1062.097674][T24120]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1062.097709][T24120]  ? import_iovec+0x73/0xa0
[ 1062.097734][T24120]  ___sys_sendmsg+0x2a5/0x360
[ 1062.097759][T24120]  ? __lock_acquire+0x683/0x2cd0
[ 1062.097782][T24120]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1062.097844][T24120]  ? __fget_files+0x2a/0x420
[ 1062.097865][T24120]  ? __fget_files+0x3a2/0x420
[ 1062.097896][T24120]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1062.097932][T24120]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1062.097969][T24120]  ? __pfx_ksys_write+0x10/0x10
[ 1062.098002][T24120]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1062.098023][T24120]  do_syscall_64+0x174/0x580
[ 1062.098041][T24120]  ? trace_irq_disable+0x3b/0x140
[ 1062.098067][T24120]  ? clear_bhb_loop+0x40/0x90
[ 1062.098089][T24120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1062.098108][T24120] RIP: 0033:0x7f302399ce59
[ 1062.098125][T24120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1062.098142][T24120] RSP: 002b:00007f302490a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1062.098161][T24120] RAX: ffffffffffffffda RBX: 00007f3023c15fa0 RCX: 00007f302399ce59
[ 1062.098174][T24120] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000004
[ 1062.098186][T24120] RBP: 00007f302490a090 R08: 0000000000000000 R09: 0000000000000000
[ 1062.098198][T24120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1062.098209][T24120] R13: 00007f3023c16038 R14: 00007f3023c15fa0 R15: 00007f3023d3fa48
[ 1062.098239][T24120]  </TASK>
[ 1062.523367][T24127] FAULT_INJECTION: forcing a failure.
[ 1062.523367][T24127] name failslab, interval 1, probability 0, space 0, times 0
[ 1062.594486][T24127] CPU: 0 UID: 0 PID: 24127 Comm: syz.5.5525 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1062.594512][T24127] Tainted: [L]=SOFTLOCKUP
[ 1062.594519][T24127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1062.594530][T24127] Call Trace:
[ 1062.594538][T24127]  <TASK>
[ 1062.594546][T24127]  dump_stack_lvl+0xe8/0x150
[ 1062.594574][T24127]  should_fail_ex+0x40c/0x560
[ 1062.594601][T24127]  should_failslab+0xa8/0x100
[ 1062.594630][T24127]  __kvmalloc_node_noprof+0x16e/0x890
[ 1062.594657][T24127]  ? __nf_register_net_hook+0x232/0x930
[ 1062.594746][T24127]  ? nf_hook_entries_grow+0x287/0x740
[ 1062.594807][T24127]  nf_hook_entries_grow+0x287/0x740
[ 1062.594847][T24127]  __nf_register_net_hook+0x2c9/0x930
[ 1062.594884][T24127]  nf_register_net_hook+0xb2/0x190
[ 1062.594904][T24127]  nf_register_net_hooks+0x44/0x1b0
[ 1062.594925][T24127]  nf_defrag_ipv4_enable+0x87/0x120
[ 1062.594949][T24127]  nf_ct_netns_do_get+0x18c/0x5c0
[ 1062.594999][T24127]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[ 1062.595018][T24127]  ? rcu_is_watching+0x15/0xb0
[ 1062.595038][T24127]  ? __bitmap_set+0x12f/0x170
[ 1062.595093][T24127]  ? nf_ct_netns_get+0xe9/0x320
[ 1062.595114][T24127]  nft_ct_get_init+0x5bf/0x9c0
[ 1062.595163][T24127]  nf_tables_newrule+0x179e/0x28a0
[ 1062.595225][T24127]  ? __pfx_nf_tables_newrule+0x10/0x10
[ 1062.595244][T24127]  ? nfnl_pernet+0x23/0x240
[ 1062.595267][T24127]  ? nfnl_pernet+0x23/0x240
[ 1062.595299][T24127]  ? __nla_parse+0x40/0x60
[ 1062.595326][T24127]  nfnetlink_rcv+0x1288/0x28c0
[ 1062.595382][T24127]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1062.595422][T24127]  ? ref_tracker_free+0x689/0x830
[ 1062.595466][T24127]  ? skb_clone+0x246/0x3a0
[ 1062.595489][T24127]  ? __netlink_deliver_tap+0x811/0x860
[ 1062.595522][T24127]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1062.595546][T24127]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1062.595575][T24127]  netlink_unicast+0x7bb/0x940
[ 1062.595610][T24127]  netlink_sendmsg+0x813/0xb40
[ 1062.595646][T24127]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1062.595674][T24127]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1062.595702][T24127]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1062.595724][T24127]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1062.595750][T24127]  ____sys_sendmsg+0x9b9/0xa20
[ 1062.595774][T24127]  ? __might_fault+0xaf/0x130
[ 1062.595803][T24127]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1062.595839][T24127]  ? import_iovec+0x73/0xa0
[ 1062.595865][T24127]  ___sys_sendmsg+0x2a5/0x360
[ 1062.595897][T24127]  ? __lock_acquire+0x683/0x2cd0
[ 1062.595921][T24127]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1062.595985][T24127]  ? __fget_files+0x2a/0x420
[ 1062.596006][T24127]  ? __fget_files+0x3a2/0x420
[ 1062.596039][T24127]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1062.596068][T24127]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1062.596105][T24127]  ? __pfx_ksys_write+0x10/0x10
[ 1062.596139][T24127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1062.596159][T24127]  do_syscall_64+0x174/0x580
[ 1062.596177][T24127]  ? trace_irq_disable+0x3b/0x140
[ 1062.596203][T24127]  ? clear_bhb_loop+0x40/0x90
[ 1062.596226][T24127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1062.596244][T24127] RIP: 0033:0x7f302399ce59
[ 1062.596262][T24127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1062.596278][T24127] RSP: 002b:00007f302490a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1062.596298][T24127] RAX: ffffffffffffffda RBX: 00007f3023c15fa0 RCX: 00007f302399ce59
[ 1062.596312][T24127] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1062.596324][T24127] RBP: 00007f302490a090 R08: 0000000000000000 R09: 0000000000000000
[ 1062.596336][T24127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1062.596348][T24127] R13: 00007f3023c16038 R14: 00007f3023c15fa0 R15: 00007f3023d3fa48
[ 1062.596379][T24127]  </TASK>
[ 1063.804286][T24162] FAULT_INJECTION: forcing a failure.
[ 1063.804286][T24162] name failslab, interval 1, probability 0, space 0, times 0
[ 1063.817883][T24162] CPU: 0 UID: 0 PID: 24162 Comm: syz.5.5533 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1063.817910][T24162] Tainted: [L]=SOFTLOCKUP
[ 1063.817917][T24162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1063.817927][T24162] Call Trace:
[ 1063.817935][T24162]  <TASK>
[ 1063.817943][T24162]  dump_stack_lvl+0xe8/0x150
[ 1063.817969][T24162]  should_fail_ex+0x40c/0x560
[ 1063.817994][T24162]  should_failslab+0xa8/0x100
[ 1063.818020][T24162]  ? skb_clone+0x212/0x3a0
[ 1063.818038][T24162]  kmem_cache_alloc_noprof+0x87/0x650
[ 1063.818070][T24162]  skb_clone+0x212/0x3a0
[ 1063.818091][T24162]  __netlink_deliver_tap+0x413/0x860
[ 1063.818128][T24162]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1063.818155][T24162]  netlink_deliver_tap+0x19c/0x1b0
[ 1063.818180][T24162]  netlink_unicast+0x77f/0x940
[ 1063.818212][T24162]  netlink_sendmsg+0x813/0xb40
[ 1063.818246][T24162]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1063.818274][T24162]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1063.818301][T24162]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1063.818324][T24162]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1063.818350][T24162]  ____sys_sendmsg+0x9b9/0xa20
[ 1063.818375][T24162]  ? __might_fault+0xaf/0x130
[ 1063.818403][T24162]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1063.818438][T24162]  ? import_iovec+0x73/0xa0
[ 1063.818462][T24162]  ___sys_sendmsg+0x2a5/0x360
[ 1063.818487][T24162]  ? __lock_acquire+0x683/0x2cd0
[ 1063.818510][T24162]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1063.818569][T24162]  ? __fget_files+0x2a/0x420
[ 1063.818589][T24162]  ? __fget_files+0x3a2/0x420
[ 1063.818620][T24162]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1063.818647][T24162]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1063.818685][T24162]  ? __pfx_ksys_write+0x10/0x10
[ 1063.818718][T24162]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1063.818738][T24162]  do_syscall_64+0x174/0x580
[ 1063.818756][T24162]  ? trace_irq_disable+0x3b/0x140
[ 1063.818787][T24162]  ? clear_bhb_loop+0x40/0x90
[ 1063.818809][T24162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1063.818827][T24162] RIP: 0033:0x7f302399ce59
[ 1063.818844][T24162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1063.818860][T24162] RSP: 002b:00007f302490a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1063.818879][T24162] RAX: ffffffffffffffda RBX: 00007f3023c15fa0 RCX: 00007f302399ce59
[ 1063.818893][T24162] RDX: 0000000020008004 RSI: 0000200000001200 RDI: 0000000000000003
[ 1063.818905][T24162] RBP: 00007f302490a090 R08: 0000000000000000 R09: 0000000000000000
[ 1063.818917][T24162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1063.818927][T24162] R13: 00007f3023c16038 R14: 00007f3023c15fa0 R15: 00007f3023d3fa48
[ 1063.818957][T24162]  </TASK>
[ 1064.452821][T24168] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[ 1064.459367][T24168] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1064.531097][T24168] vhci_hcd vhci_hcd.0: Device attached
[ 1064.797229][   T46] usb 50-1: SetAddress Request (2) to port 0
[ 1064.821179][   T46] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1064.854160][T24169] vhci_hcd: connection closed
[ 1064.854373][T22121] vhci_hcd vhci_hcd.8: stop threads
[ 1064.884999][T22121] vhci_hcd vhci_hcd.8: release socket
[ 1064.906408][T22121] vhci_hcd vhci_hcd.8: disconnect device
[ 1065.266937][ T4947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1065.281366][ T4947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1065.294721][ T4947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1065.302540][ T4947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1065.310577][ T4947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1065.691287][T24192] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1065.915348][T24202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5546'.
[ 1066.688708][T24224] FAULT_INJECTION: forcing a failure.
[ 1066.688708][T24224] name failslab, interval 1, probability 0, space 0, times 0
[ 1066.719079][T24224] CPU: 0 UID: 0 PID: 24224 Comm: syz.7.5553 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1066.719104][T24224] Tainted: [L]=SOFTLOCKUP
[ 1066.719108][T24224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1066.719114][T24224] Call Trace:
[ 1066.719119][T24224]  <TASK>
[ 1066.719124][T24224]  dump_stack_lvl+0xe8/0x150
[ 1066.719141][T24224]  should_fail_ex+0x40c/0x560
[ 1066.719155][T24224]  should_failslab+0xa8/0x100
[ 1066.719172][T24224]  __kmalloc_cache_noprof+0x88/0x660
[ 1066.719186][T24224]  ? mpi_alloc+0x52/0x140
[ 1066.719261][T24224]  mpi_alloc+0x52/0x140
[ 1066.719272][T24224]  mpi_read_raw_data+0x139/0x970
[ 1066.719282][T24224]  ? rcu_is_watching+0x15/0xb0
[ 1066.719298][T24224]  dh_set_secret+0x193/0x320
[ 1066.719335][T24224]  ? crypto_create_tfm_node+0x7f/0x3c0
[ 1066.719372][T24224]  ? __pfx_dh_set_secret+0x10/0x10
[ 1066.719381][T24224]  ? crypto_create_tfm_node+0x20d/0x3c0
[ 1066.719395][T24224]  ? crypto_alloc_tfm_node+0x3b5/0x3e0
[ 1066.719408][T24224]  ? __keyctl_dh_compute+0x3df/0xd10
[ 1066.719426][T24224]  __keyctl_dh_compute+0x5ae/0xd10
[ 1066.719446][T24224]  ? __pfx___keyctl_dh_compute+0x10/0x10
[ 1066.719466][T24224]  ? __might_fault+0xaf/0x130
[ 1066.719491][T24224]  keyctl_dh_compute+0x124/0x180
[ 1066.719503][T24224]  ? __pfx_keyctl_dh_compute+0x10/0x10
[ 1066.719520][T24224]  __se_sys_keyctl+0x44c/0x9d0
[ 1066.719533][T24224]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 1066.719547][T24224]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1066.719560][T24224]  ? __fget_files+0x3a2/0x420
[ 1066.719575][T24224]  ? fput+0xa0/0xd0
[ 1066.719587][T24224]  ? ksys_write+0x242/0x270
[ 1066.719601][T24224]  ? __pfx_ksys_write+0x10/0x10
[ 1066.719617][T24224]  ? __x64_sys_keyctl+0x20/0xc0
[ 1066.719629][T24224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1066.719639][T24224]  do_syscall_64+0x174/0x580
[ 1066.719649][T24224]  ? trace_irq_disable+0x3b/0x140
[ 1066.719663][T24224]  ? clear_bhb_loop+0x40/0x90
[ 1066.719675][T24224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1066.719684][T24224] RIP: 0033:0x7fc34579ce59
[ 1066.719695][T24224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1066.719704][T24224] RSP: 002b:00007fc346688028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1066.719715][T24224] RAX: ffffffffffffffda RBX: 00007fc345a15fa0 RCX: 00007fc34579ce59
[ 1066.719723][T24224] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017
[ 1066.719729][T24224] RBP: 00007fc346688090 R08: 0000200000000180 R09: 0000000000000000
[ 1066.719736][T24224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1066.719742][T24224] R13: 00007fc345a16038 R14: 00007fc345a15fa0 R15: 00007fc345b3fa48
[ 1066.719757][T24224]  </TASK>
[ 1066.998839][ T5629] Bluetooth: hci2: command 0x2016 tx timeout
[ 1067.005176][T22121] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.061735][T24227] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5554'.
[ 1067.076155][T24225] kvm: user requested TSC rate below hardware speed
[ 1067.135307][T24188] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1067.173631][T24188] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1067.217603][T24188] bridge_slave_0: entered allmulticast mode
[ 1067.226271][T24188] bridge_slave_0: entered promiscuous mode
[ 1067.294669][T22121] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.381826][T24188] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1067.397212][T20819] Bluetooth: hci0: command tx timeout
[ 1067.416237][T24188] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1067.456901][T24188] bridge_slave_1: entered allmulticast mode
[ 1067.481492][T24188] bridge_slave_1: entered promiscuous mode
[ 1067.542170][T22121] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.722547][T24188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1067.767699][T24243] FAULT_INJECTION: forcing a failure.
[ 1067.767699][T24243] name failslab, interval 1, probability 0, space 0, times 0
[ 1067.812965][T24188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1067.844685][T24243] CPU: 0 UID: 0 PID: 24243 Comm: syz.3.5559 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1067.844713][T24243] Tainted: [L]=SOFTLOCKUP
[ 1067.844720][T24243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1067.844730][T24243] Call Trace:
[ 1067.844738][T24243]  <TASK>
[ 1067.844746][T24243]  dump_stack_lvl+0xe8/0x150
[ 1067.844772][T24243]  should_fail_ex+0x40c/0x560
[ 1067.844797][T24243]  should_failslab+0xa8/0x100
[ 1067.844827][T24243]  __kvmalloc_node_noprof+0x16e/0x890
[ 1067.844854][T24243]  ? nf_hook_entries_grow+0x287/0x740
[ 1067.844884][T24243]  ? __pfx___mutex_lock+0x10/0x10
[ 1067.844907][T24243]  nf_hook_entries_grow+0x287/0x740
[ 1067.844944][T24243]  __nf_register_net_hook+0x2c9/0x930
[ 1067.844972][T24243]  nf_register_net_hook+0xb2/0x190
[ 1067.844994][T24243]  nf_register_net_hooks+0x44/0x1b0
[ 1067.845015][T24243]  nf_ct_netns_do_get+0x3bf/0x5c0
[ 1067.845038][T24243]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[ 1067.845057][T24243]  ? rcu_is_watching+0x15/0xb0
[ 1067.845079][T24243]  ? __bitmap_set+0x12f/0x170
[ 1067.845107][T24243]  ? nf_ct_netns_get+0xe9/0x320
[ 1067.845128][T24243]  nft_ct_get_init+0x5bf/0x9c0
[ 1067.845151][T24243]  nf_tables_newrule+0x179e/0x28a0
[ 1067.845187][T24243]  ? __pfx_nf_tables_newrule+0x10/0x10
[ 1067.845205][T24243]  ? nfnl_pernet+0x23/0x240
[ 1067.845227][T24243]  ? nfnl_pernet+0x23/0x240
[ 1067.845262][T24243]  ? __nla_parse+0x40/0x60
[ 1067.845289][T24243]  nfnetlink_rcv+0x1288/0x28c0
[ 1067.845349][T24243]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1067.845396][T24243]  ? ref_tracker_free+0x689/0x830
[ 1067.845442][T24243]  ? skb_clone+0x246/0x3a0
[ 1067.845464][T24243]  ? __netlink_deliver_tap+0x811/0x860
[ 1067.845499][T24243]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1067.845523][T24243]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1067.845553][T24243]  netlink_unicast+0x7bb/0x940
[ 1067.845588][T24243]  netlink_sendmsg+0x813/0xb40
[ 1067.845622][T24243]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1067.845651][T24243]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1067.845678][T24243]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1067.845701][T24243]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1067.845728][T24243]  ____sys_sendmsg+0x9b9/0xa20
[ 1067.845754][T24243]  ? __might_fault+0xaf/0x130
[ 1067.845783][T24243]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1067.845818][T24243]  ? import_iovec+0x73/0xa0
[ 1067.845843][T24243]  ___sys_sendmsg+0x2a5/0x360
[ 1067.845868][T24243]  ? __lock_acquire+0x683/0x2cd0
[ 1067.845892][T24243]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1067.845955][T24243]  ? __fget_files+0x2a/0x420
[ 1067.845976][T24243]  ? __fget_files+0x3a2/0x420
[ 1067.846009][T24243]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1067.846039][T24243]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1067.846075][T24243]  ? __pfx_ksys_write+0x10/0x10
[ 1067.846109][T24243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1067.846130][T24243]  do_syscall_64+0x174/0x580
[ 1067.846148][T24243]  ? trace_irq_disable+0x3b/0x140
[ 1067.846173][T24243]  ? clear_bhb_loop+0x40/0x90
[ 1067.846197][T24243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1067.846216][T24243] RIP: 0033:0x7f123b39ce59
[ 1067.846233][T24243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1067.846249][T24243] RSP: 002b:00007f123c322028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1067.846268][T24243] RAX: ffffffffffffffda RBX: 00007f123b615fa0 RCX: 00007f123b39ce59
[ 1067.846282][T24243] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1067.846294][T24243] RBP: 00007f123c322090 R08: 0000000000000000 R09: 0000000000000000
[ 1067.846306][T24243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1067.846317][T24243] R13: 00007f123b616038 R14: 00007f123b615fa0 R15: 00007f123b73fa48
[ 1067.846348][T24243]  </TASK>
[ 1068.350867][T22121] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.446694][T24188] team0: Port device team_slave_0 added
[ 1068.456313][T24188] team0: Port device team_slave_1 added
[ 1068.545374][T24256] syzkaller0: entered promiscuous mode
[ 1068.557941][T24256] syzkaller0: entered allmulticast mode
[ 1068.576984][T24188] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1068.600840][T24188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1068.630995][T24188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1068.652525][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.666513][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.674644][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.681674][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.689750][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.698102][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.714147][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.730416][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.730517][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.730562][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.730651][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.730660][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.730746][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.730755][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.730849][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.730859][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.730941][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.730950][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.731031][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.731040][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.731123][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.731131][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.731215][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.731223][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.731299][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.731305][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.731364][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.731371][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.731434][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.731440][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.731503][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.731509][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.731574][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.731581][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.731645][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.731652][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.731719][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.731725][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.731809][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.745876][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.745970][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.745978][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746041][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746048][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746115][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746121][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746190][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746197][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746262][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746269][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746340][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746347][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746412][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746418][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746479][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746485][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746555][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746562][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746626][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746632][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746698][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746705][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746771][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746787][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746866][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746874][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.746954][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.746962][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.747047][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.747055][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.747361][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.747370][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.747434][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.747441][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.747530][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.747537][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.747605][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.747611][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.747673][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.747680][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.747742][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.747748][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.747820][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.747827][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.747894][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.747900][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.747964][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.747971][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.748034][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.748042][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.748118][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.748128][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.748212][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.748220][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.748301][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.748310][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.748390][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.748398][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.748479][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.748487][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.748631][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.748640][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.748721][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.748730][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.748819][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.748828][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.748920][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.748929][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.749030][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.749040][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.749120][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.749129][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.749206][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.749215][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.749293][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.749303][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.749387][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.749396][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.749473][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.749482][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.749562][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.749570][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.749651][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.749659][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.749742][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.749750][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.749842][T24261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.749851][T24261] binder: 24260:24261 ioctl 4018620d 2000000000c0 returned -16
[ 1068.779416][T24261] binder: 24260:24261 unknown command 0
[ 1068.779431][T24261] binder: 24260:24261 ioctl c0306201 200000000080 returned -22
[ 1069.482760][T20819] Bluetooth: hci0: command tx timeout
[ 1069.960726][   T46] usb 50-1: device descriptor read/8, error -110
[ 1070.350059][   T46] usb usb50-port1: attempt power cycle
[ 1070.503780][   T10] usb 6-1: new full-speed USB device number 105 using dummy_hcd
[ 1070.691021][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1070.717723][   T10] usb 6-1: not running at top speed; connect to a high speed hub
[ 1070.745240][   T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4
[ 1070.798378][   T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[ 1070.807499][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.815509][   T10] usb 6-1: Product: syz
[ 1070.829842][   T10] usb 6-1: Manufacturer: syz
[ 1070.843888][   T10] usb 6-1: SerialNumber: syz
[ 1070.938470][   T46] usb usb50-port1: unable to enumerate USB device
[ 1071.555688][T20819] Bluetooth: hci0: command tx timeout
[ 1072.145609][T24188] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1072.152756][T24188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1072.181235][T24188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1072.215073][   T10] usb 6-1: Audio class v2/v3 interfaces need an interface association
[ 1072.334974][   T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1072.371029][   T10] usb 6-1: USB disconnect, device number 105
[ 1072.431438][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1072.575323][T24188] hsr_slave_0: entered promiscuous mode
[ 1072.602682][T24188] hsr_slave_1: entered promiscuous mode
[ 1072.622404][T24188] debugfs: 'hsr0' already exists in 'hsr'
[ 1072.636152][T24188] Cannot create hsr debugfs directory
[ 1072.659248][T15288] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[ 1072.733277][T22121] bridge_slave_1: left allmulticast mode
[ 1072.740239][T22121] bridge_slave_1: left promiscuous mode
[ 1072.746019][T22121] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1072.759927][T22121] bridge_slave_0: left allmulticast mode
[ 1072.765603][T22121] bridge_slave_0: left promiscuous mode
[ 1072.772481][T22121] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1072.849181][T15288] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1072.874321][T15288] usb 4-1: not running at top speed; connect to a high speed hub
[ 1072.899263][T15288] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4
[ 1072.938084][T15288] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[ 1072.957992][T15288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.964414][T24307] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5577'.
[ 1072.973802][T15288] usb 4-1: Product: syz
[ 1072.979791][T15288] usb 4-1: Manufacturer: syz
[ 1072.985093][T15288] usb 4-1: SerialNumber: syz
[ 1072.993463][T24307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5577'.
[ 1073.166979][T22121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1073.188882][T22121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1073.199423][T22121] bond0 (unregistering): Released all slaves
[ 1073.453654][ T5293] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1073.457011][T24320] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5578'.
[ 1073.627386][T20819] Bluetooth: hci0: command tx timeout
[ 1073.720896][T15288] usb 4-1: Audio class v2/v3 interfaces need an interface association
[ 1073.848032][T24329] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5582'.
[ 1073.862185][T24329] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5582'.
[ 1073.885429][T15288] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1073.961221][T15288] usb 4-1: USB disconnect, device number 70
[ 1073.991031][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1074.050964][   T46] usb 6-1: new full-speed USB device number 106 using dummy_hcd
[ 1074.070818][T22121] hsr_slave_0: left promiscuous mode
[ 1074.106855][T22121] hsr_slave_1: left promiscuous mode
[ 1074.130493][T22121] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1074.153615][T22121] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1074.175267][T22121] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1074.193289][T22121] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1074.219842][T22121] veth1_macvtap: left promiscuous mode
[ 1074.229233][   T46] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1074.237758][T22121] veth0_macvtap: left promiscuous mode
[ 1074.245721][   T46] usb 6-1: not running at top speed; connect to a high speed hub
[ 1074.245914][T22121] veth1_vlan: left promiscuous mode
[ 1074.264212][T22121] veth0_vlan: left promiscuous mode
[ 1074.269595][   T46] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4
[ 1074.292711][   T46] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[ 1074.308002][   T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.322349][   T46] usb 6-1: Product: syz
[ 1074.326667][   T46] usb 6-1: Manufacturer: syz
[ 1074.348029][   T46] usb 6-1: SerialNumber: syz
[ 1074.437432][T14516] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1074.607128][T14516] usb 9-1: Using ep0 maxpacket: 32
[ 1074.632879][T14516] usb 9-1: config 4 has an invalid interface number: 8 but max is 0
[ 1074.661366][T14516] usb 9-1: config 4 has no interface number 0
[ 1074.681607][T14516] usb 9-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1074.696604][T14516] usb 9-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0
[ 1074.720924][T14516] usb 9-1: config 4 interface 8 has no altsetting 0
[ 1074.752391][T14516] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65
[ 1074.763383][T14516] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.771521][T14516] usb 9-1: Product: syz
[ 1074.775760][T14516] usb 9-1: Manufacturer: syz
[ 1074.782471][T14516] usb 9-1: SerialNumber: syz
[ 1074.847152][   T10] usb 8-1: new full-speed USB device number 102 using dummy_hcd
[ 1074.898231][T22121] team0 (unregistering): Port device team_slave_1 removed
[ 1074.924380][T22121] team0 (unregistering): Port device team_slave_0 removed
[ 1074.977194][  T995] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1075.010351][T14516] opticon 9-1:4.8: opticon converter detected
[ 1075.026822][T14516] usb 9-1: opticon converter now attached to ttyUSB0
[ 1075.044241][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1075.062604][   T10] usb 8-1: not running at top speed; connect to a high speed hub
[ 1075.075799][T14516] usb 9-1: USB disconnect, device number 32
[ 1075.083343][   T10] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4
[ 1075.105483][   T10] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[ 1075.122496][T14516] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[ 1075.142459][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.147338][  T995] usb 4-1: Using ep0 maxpacket: 32
[ 1075.157476][T14516] opticon 9-1:4.8: device disconnected
[ 1075.166605][  T995] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1075.173232][   T10] usb 8-1: Product: syz
[ 1075.176250][  T995] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8
[ 1075.182307][   T10] usb 8-1: Manufacturer: syz
[ 1075.192120][  T995] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[ 1075.202336][   T10] usb 8-1: SerialNumber: syz
[ 1075.205738][  T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.215074][  T995] usb 4-1: Product: syz
[ 1075.220618][  T995] usb 4-1: Manufacturer: syz
[ 1075.225317][  T995] usb 4-1: SerialNumber: syz
[ 1075.243308][T24363] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1075.275362][ T5293] 8021q: adding VLAN 0 to HW filter on device eth18
[ 1075.316535][   T46] usb 6-1: Audio class v2/v3 interfaces need an interface association
[ 1075.432844][   T46] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1075.495338][  T995] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1075.516041][   T46] usb 6-1: USB disconnect, device number 106
[ 1075.526690][  T995] usb 4-1: MIDIStreaming interface descriptor not found
[ 1075.565807][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1075.704715][T22121] IPVS: stop unused estimator thread 0...
[ 1075.736015][T24188] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1075.761881][   T10] usb 8-1: Audio class v2/v3 interfaces need an interface association
[ 1075.769318][  T995] usb 4-1: USB disconnect, device number 71
[ 1075.790299][T24188] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1075.822397][T24188] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1075.849074][T24188] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1075.879629][T24188] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1075.900263][   T10] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1075.915266][T24188] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1075.924904][T24188] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1075.944120][T24188] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1075.996522][   T10] usb 8-1: USB disconnect, device number 102
[ 1076.145300][T24188] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1076.203017][T24188] 8021q: adding VLAN 0 to HW filter on device team0
[ 1076.369983][ T7190] udevd[7190]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1076.403443][T15438] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1076.410558][T15438] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1076.475599][ T6131] udevd[6131]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1076.496503][T15438] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1076.503604][T15438] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1076.844050][T24188] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1076.995294][T24188] veth0_vlan: entered promiscuous mode
[ 1077.045289][T24188] veth1_vlan: entered promiscuous mode
[ 1077.190878][T24188] veth0_macvtap: entered promiscuous mode
[ 1077.207013][ T5293] 8021q: adding VLAN 0 to HW filter on device eth19
[ 1077.236609][T24188] veth1_macvtap: entered promiscuous mode
[ 1077.325392][T24188] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1077.386312][T24188] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1077.425150][   T35] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.484608][   T35] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.515486][   T35] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.543008][   T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.988209][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1078.039719][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1078.172422][T24428] FAULT_INJECTION: forcing a failure.
[ 1078.172422][T24428] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1078.173443][T21664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1078.204863][T24428] CPU: 1 UID: 0 PID: 24428 Comm: syz.8.5600 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1078.204890][T24428] Tainted: [L]=SOFTLOCKUP
[ 1078.204896][T24428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1078.204906][T24428] Call Trace:
[ 1078.204913][T24428]  <TASK>
[ 1078.204921][T24428]  dump_stack_lvl+0xe8/0x150
[ 1078.204946][T24428]  should_fail_ex+0x40c/0x560
[ 1078.204970][T24428]  _copy_from_iter+0x1d3/0x1660
[ 1078.204996][T24428]  ? _copy_from_iter+0x21b/0x1660
[ 1078.205017][T24428]  ? __pfx__copy_from_iter+0x10/0x10
[ 1078.205040][T24428]  ? __pfx__copy_from_iter+0x10/0x10
[ 1078.205065][T24428]  copy_page_from_iter+0x219/0x2d0
[ 1078.205087][T24428]  skb_copy_datagram_from_iter+0x2f4/0x720
[ 1078.205117][T24428]  tun_get_user+0xc71/0x4350
[ 1078.205157][T24428]  ? aa_file_perm+0x18b/0x15f0
[ 1078.205179][T24428]  ? aa_file_perm+0x4ed/0x15f0
[ 1078.205195][T24428]  ? __pfx_tun_get_user+0x10/0x10
[ 1078.205224][T24428]  ? __lock_acquire+0x683/0x2cd0
[ 1078.205246][T24428]  ? kstrtoull+0x12f/0x1d0
[ 1078.205278][T24428]  ? ref_tracker_alloc+0x341/0x4b0
[ 1078.205296][T24428]  ? get_pid_task+0x20/0x1f0
[ 1078.205321][T24428]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1078.205342][T24428]  ? tun_get+0x1c/0x2f0
[ 1078.205367][T24428]  ? tun_get+0x1c/0x2f0
[ 1078.205397][T24428]  ? tun_get+0x1c/0x2f0
[ 1078.205422][T24428]  ? tun_get+0x1c/0x2f0
[ 1078.205451][T24428]  tun_chr_write_iter+0x113/0x200
[ 1078.205479][T24428]  vfs_write+0x612/0xba0
[ 1078.205511][T24428]  ? __pfx_vfs_write+0x10/0x10
[ 1078.205544][T24428]  ? __fget_files+0x2a/0x420
[ 1078.205573][T24428]  ksys_write+0x150/0x270
[ 1078.205598][T24428]  ? __pfx_ksys_write+0x10/0x10
[ 1078.205630][T24428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.205650][T24428]  do_syscall_64+0x174/0x580
[ 1078.205667][T24428]  ? trace_irq_disable+0x3b/0x140
[ 1078.205691][T24428]  ? clear_bhb_loop+0x40/0x90
[ 1078.205713][T24428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.205731][T24428] RIP: 0033:0x7f13dcb9ce59
[ 1078.205748][T24428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1078.205764][T24428] RSP: 002b:00007f13dadf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1078.205783][T24428] RAX: ffffffffffffffda RBX: 00007f13dce15fa0 RCX: 00007f13dcb9ce59
[ 1078.205796][T24428] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003
[ 1078.205808][T24428] RBP: 00007f13dadf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1078.205820][T24428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1078.205831][T24428] R13: 00007f13dce16038 R14: 00007f13dce15fa0 R15: 00007f13dcf3fa48
[ 1078.205867][T24428]  </TASK>
[ 1078.206361][T21664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1078.815353][ T5293] 8021q: adding VLAN 0 to HW filter on device eth20
[ 1078.887250][  T995] usb 8-1: new high-speed USB device number 103 using dummy_hcd
[ 1078.976058][T24460] FAULT_INJECTION: forcing a failure.
[ 1078.976058][T24460] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1079.032290][T24460] CPU: 0 UID: 0 PID: 24460 Comm: syz.8.5609 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1079.032317][T24460] Tainted: [L]=SOFTLOCKUP
[ 1079.032323][T24460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1079.032334][T24460] Call Trace:
[ 1079.032341][T24460]  <TASK>
[ 1079.032349][T24460]  dump_stack_lvl+0xe8/0x150
[ 1079.032375][T24460]  should_fail_ex+0x40c/0x560
[ 1079.032401][T24460]  _copy_to_user+0x31/0xb0
[ 1079.032425][T24460]  simple_read_from_buffer+0xe1/0x170
[ 1079.032451][T24460]  proc_fail_nth_read+0x1bb/0x230
[ 1079.032478][T24460]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1079.032505][T24460]  ? rw_verify_area+0x24a/0x4c0
[ 1079.032531][T24460]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1079.032554][T24460]  vfs_read+0x213/0xa80
[ 1079.032582][T24460]  ? __pfx___mutex_lock+0x10/0x10
[ 1079.032603][T24460]  ? __pfx_vfs_read+0x10/0x10
[ 1079.032628][T24460]  ? __fget_files+0x2a/0x420
[ 1079.032654][T24460]  ? __fget_files+0x3a2/0x420
[ 1079.032674][T24460]  ? __fget_files+0x2a/0x420
[ 1079.032706][T24460]  ksys_read+0x150/0x270
[ 1079.032732][T24460]  ? __pfx_ksys_read+0x10/0x10
[ 1079.032755][T24460]  ? __pfx_ppp_ioctl+0x10/0x10
[ 1079.032872][T24460]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.032892][T24460]  do_syscall_64+0x174/0x580
[ 1079.032909][T24460]  ? trace_irq_disable+0x3b/0x140
[ 1079.032934][T24460]  ? clear_bhb_loop+0x40/0x90
[ 1079.032956][T24460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.032974][T24460] RIP: 0033:0x7f13dcb5d68e
[ 1079.032992][T24460] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1079.033008][T24460] RSP: 002b:00007f13dadf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1079.033028][T24460] RAX: ffffffffffffffda RBX: 00007f13dadf66c0 RCX: 00007f13dcb5d68e
[ 1079.033042][T24460] RDX: 000000000000000f RSI: 00007f13dadf60a0 RDI: 0000000000000005
[ 1079.033053][T24460] RBP: 00007f13dadf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1079.033065][T24460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1079.033076][T24460] R13: 00007f13dce16038 R14: 00007f13dce15fa0 R15: 00007f13dcf3fa48
[ 1079.033106][T24460]  </TASK>
[ 1079.087170][  T995] usb 8-1: Using ep0 maxpacket: 8
[ 1079.310484][  T995] usb 8-1: config index 0 descriptor too short (expected 30, got 18)
[ 1079.469885][  T995] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1079.556514][  T995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.610307][  T995] usb 8-1: Product: syz
[ 1079.626616][  T995] usb 8-1: Manufacturer: syz
[ 1079.655699][  T995] usb 8-1: SerialNumber: syz
[ 1079.690434][  T995] usb 8-1: config 0 descriptor??
[ 1079.736778][T24469] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[24473] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[24469]
[ 1079.755118][  T995] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1079.776605][  T995] usb 8-1: setting power ON
[ 1079.792737][  T995] dvb-usb: bulk message failed: -22 (2/0)
[ 1079.813889][   T29] kauditd_printk_skb: 3 callbacks suppressed
[ 1079.813901][   T29] audit: type=1800 audit(1781381122.700:2566): pid=24469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5608" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[ 1079.883865][  T995] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1079.905155][T24479] FAULT_INJECTION: forcing a failure.
[ 1079.905155][T24479] name fail_futex, interval 1, probability 0, space 0, times 1
[ 1079.915970][T24469] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5608'.
[ 1079.955380][  T995] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1079.956416][T24479] CPU: 0 UID: 0 PID: 24479 Comm: syz.8.5613 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1079.956442][T24479] Tainted: [L]=SOFTLOCKUP
[ 1079.956449][T24479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1079.956460][T24479] Call Trace:
[ 1079.956468][T24479]  <TASK>
[ 1079.956476][T24479]  dump_stack_lvl+0xe8/0x150
[ 1079.956501][T24479]  should_fail_ex+0x40c/0x560
[ 1079.956525][T24479]  get_futex_key+0x1b3/0x1590
[ 1079.956555][T24479]  ? __pfx_get_futex_key+0x10/0x10
[ 1079.956571][T24479]  ? __kmalloc_cache_noprof+0x318/0x660
[ 1079.956600][T24479]  ? __asan_memset+0x22/0x50
[ 1079.956625][T24479]  futex_requeue+0x252/0x1d40
[ 1079.956656][T24479]  ? kstrtouint+0x6e/0xe0
[ 1079.956682][T24479]  ? get_pid_task+0x20/0x1f0
[ 1079.956705][T24479]  ? __pfx_futex_requeue+0x10/0x10
[ 1079.956732][T24479]  ? get_pid_task+0x20/0x1f0
[ 1079.956754][T24479]  ? get_pid_task+0x20/0x1f0
[ 1079.956793][T24479]  ? ksys_write+0x1e6/0x270
[ 1079.956819][T24479]  do_futex+0x362/0x420
[ 1079.956840][T24479]  ? __pfx_vfs_write+0x10/0x10
[ 1079.956866][T24479]  ? __pfx_do_futex+0x10/0x10
[ 1079.956894][T24479]  __se_sys_futex+0x3a8/0x450
[ 1079.956917][T24479]  ? ksys_write+0x242/0x270
[ 1079.956940][T24479]  ? __pfx___se_sys_futex+0x10/0x10
[ 1079.956961][T24479]  ? __pfx_ksys_write+0x10/0x10
[ 1079.956989][T24479]  ? __x64_sys_futex+0x21/0xf0
[ 1079.957008][T24479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.957028][T24479]  do_syscall_64+0x174/0x580
[ 1079.957045][T24479]  ? trace_irq_disable+0x3b/0x140
[ 1079.957073][T24479]  ? clear_bhb_loop+0x40/0x90
[ 1079.957093][T24479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.957111][T24479] RIP: 0033:0x7f13dcb9ce59
[ 1079.957128][T24479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1079.957143][T24479] RSP: 002b:00007f13dadb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1079.957161][T24479] RAX: ffffffffffffffda RBX: 00007f13dce16180 RCX: 00007f13dcb9ce59
[ 1079.957175][T24479] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc
[ 1079.957192][T24479] RBP: 00007f13dadb4090 R08: 0000200000048000 R09: 0000000000000000
[ 1079.957204][T24479] R10: 0000200000fd7ff0 R11: 0000000000000246 R12: 0000000000000001
[ 1079.957215][T24479] R13: 00007f13dce16218 R14: 00007f13dce16180 R15: 00007f13dcf3fa48
[ 1079.957243][T24479]  </TASK>
[ 1080.084832][T24481] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5605'.
[ 1080.605553][  T995] usb 8-1: media controller created
[ 1080.644048][T24481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5605'.
[ 1080.651148][  T995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1080.754109][  T995] usb 8-1: selecting invalid altsetting 6
[ 1080.771083][  T995] usb 8-1: digital interface selection failed (-22)
[ 1080.799459][  T995] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1080.831888][  T995] usb 8-1: setting power OFF
[ 1080.880680][  T995] dvb-usb: bulk message failed: -22 (2/0)
[ 1080.921404][  T995] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1080.942959][  T995] (NULL device *): no alternate interface
[ 1081.081992][  T995] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1081.140905][  T995] usb 8-1: USB disconnect, device number 103
[ 1081.350493][  T995] IPVS: starting estimator thread 0...
[ 1081.371293][T24518] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5627'.
[ 1081.448385][T24520] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1081.608791][T24535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5632'.
[ 1081.685971][T24537] FAULT_INJECTION: forcing a failure.
[ 1081.685971][T24537] name failslab, interval 1, probability 0, space 0, times 0
[ 1081.700537][T24537] CPU: 1 UID: 0 PID: 24537 Comm: syz.9.5634 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1081.700564][T24537] Tainted: [L]=SOFTLOCKUP
[ 1081.700571][T24537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1081.700581][T24537] Call Trace:
[ 1081.700589][T24537]  <TASK>
[ 1081.700597][T24537]  dump_stack_lvl+0xe8/0x150
[ 1081.700623][T24537]  should_fail_ex+0x40c/0x560
[ 1081.700647][T24537]  should_failslab+0xa8/0x100
[ 1081.700675][T24537]  __kmalloc_cache_noprof+0x88/0x660
[ 1081.700701][T24537]  ? mpi_alloc+0x52/0x140
[ 1081.700726][T24537]  mpi_alloc+0x52/0x140
[ 1081.700746][T24537]  mpi_read_raw_data+0x139/0x970
[ 1081.700773][T24537]  dh_set_secret+0x200/0x320
[ 1081.700791][T24537]  ? crypto_create_tfm_node+0x7f/0x3c0
[ 1081.700818][T24537]  ? __pfx_dh_set_secret+0x10/0x10
[ 1081.700834][T24537]  ? crypto_create_tfm_node+0x20d/0x3c0
[ 1081.700861][T24537]  ? crypto_alloc_tfm_node+0x3b5/0x3e0
[ 1081.700886][T24537]  ? __keyctl_dh_compute+0x3df/0xd10
[ 1081.700917][T24537]  __keyctl_dh_compute+0x5ae/0xd10
[ 1081.700955][T24537]  ? __pfx___keyctl_dh_compute+0x10/0x10
[ 1081.700994][T24537]  ? __might_fault+0xaf/0x130
[ 1081.701038][T24537]  keyctl_dh_compute+0x124/0x180
[ 1081.701059][T24537]  ? __pfx_keyctl_dh_compute+0x10/0x10
[ 1081.701092][T24537]  __se_sys_keyctl+0x44c/0x9d0
[ 1081.701115][T24537]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 1081.701139][T24537]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1081.701163][T24537]  ? __fget_files+0x3a2/0x420
[ 1081.701190][T24537]  ? fput+0xa0/0xd0
[ 1081.701217][T24537]  ? ksys_write+0x242/0x270
[ 1081.701243][T24537]  ? __pfx_ksys_write+0x10/0x10
[ 1081.701273][T24537]  ? __x64_sys_keyctl+0x20/0xc0
[ 1081.701293][T24537]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1081.701313][T24537]  do_syscall_64+0x174/0x580
[ 1081.701328][T24537]  ? trace_irq_disable+0x3b/0x140
[ 1081.701353][T24537]  ? clear_bhb_loop+0x40/0x90
[ 1081.701374][T24537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1081.701391][T24537] RIP: 0033:0x7f150119ce59
[ 1081.701407][T24537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1081.701421][T24537] RSP: 002b:00007f15020b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1081.701440][T24537] RAX: ffffffffffffffda RBX: 00007f1501415fa0 RCX: 00007f150119ce59
[ 1081.701454][T24537] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017
[ 1081.701466][T24537] RBP: 00007f15020b6090 R08: 0000200000000180 R09: 0000000000000000
[ 1081.701478][T24537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1081.701489][T24537] R13: 00007f1501416038 R14: 00007f1501415fa0 R15: 00007f150153fa48
[ 1081.701518][T24537]  </TASK>
[ 1082.240527][T24549] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5638'.
[ 1082.730224][T15298] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 1082.756536][T24568] FAULT_INJECTION: forcing a failure.
[ 1082.756536][T24568] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1082.784845][T24568] CPU: 0 UID: 0 PID: 24568 Comm: syz.7.5646 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1082.784872][T24568] Tainted: [L]=SOFTLOCKUP
[ 1082.784879][T24568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1082.784890][T24568] Call Trace:
[ 1082.784898][T24568]  <TASK>
[ 1082.784906][T24568]  dump_stack_lvl+0xe8/0x150
[ 1082.784941][T24568]  should_fail_ex+0x40c/0x560
[ 1082.784966][T24568]  _copy_from_user+0x2d/0xb0
[ 1082.784989][T24568]  ___sys_sendmsg+0x1c6/0x360
[ 1082.785015][T24568]  ? __lock_acquire+0x683/0x2cd0
[ 1082.785039][T24568]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1082.785098][T24568]  ? __fget_files+0x2a/0x420
[ 1082.785118][T24568]  ? __fget_files+0x3a2/0x420
[ 1082.785149][T24568]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1082.785178][T24568]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1082.785212][T24568]  ? __pfx_ksys_write+0x10/0x10
[ 1082.785244][T24568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1082.785264][T24568]  do_syscall_64+0x174/0x580
[ 1082.785282][T24568]  ? trace_irq_disable+0x3b/0x140
[ 1082.785307][T24568]  ? clear_bhb_loop+0x40/0x90
[ 1082.785330][T24568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1082.785348][T24568] RIP: 0033:0x7fc34579ce59
[ 1082.785365][T24568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1082.785381][T24568] RSP: 002b:00007fc346688028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1082.785400][T24568] RAX: ffffffffffffffda RBX: 00007fc345a15fa0 RCX: 00007fc34579ce59
[ 1082.785414][T24568] RDX: 0000000020004800 RSI: 0000200000000300 RDI: 0000000000000003
[ 1082.785426][T24568] RBP: 00007fc346688090 R08: 0000000000000000 R09: 0000000000000000
[ 1082.785438][T24568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1082.785449][T24568] R13: 00007fc345a16038 R14: 00007fc345a15fa0 R15: 00007fc345b3fa48
[ 1082.785479][T24568]  </TASK>
[ 1083.060082][T15298] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1083.076124][T15298] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[ 1083.098915][T15298] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7
[ 1083.138816][T15298] usb 6-1: string descriptor 0 read error: -22
[ 1083.145641][T15298] usb 6-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40
[ 1083.184588][T24578] sctp: [Deprecated]: syz.3.5651 (pid 24578) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1083.184588][T24578] Use struct sctp_sack_info instead
[ 1083.205195][T15298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.347191][   T46] usb 8-1: new high-speed USB device number 104 using dummy_hcd
[ 1083.497821][   T46] usb 8-1: too many configurations: 9, using maximum allowed: 8
[ 1083.506658][   T46] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.515722][   T46] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1083.528508][   T46] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1083.537516][   T46] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.559450][   T46] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1083.570927][   T46] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1083.579791][   T46] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.589253][   T46] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1083.604279][   T46] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1083.619548][   T46] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.629722][   T46] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1083.641749][   T46] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1083.653393][T15298] usb 6-1: Can't set UAC3 power state to 1 for id 10
[ 1083.670378][   T46] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.679488][   T46] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1083.692078][T15298] usb 6-1: 2:0: failed to get current value for ch 0 (-71)
[ 1083.699368][T14517] usb 4-1: new full-speed USB device number 72 using dummy_hcd
[ 1083.709209][   T46] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1083.719457][   T46] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.732968][   T46] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1083.754997][T15298] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[ 1083.765947][T15298] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 1083.784768][T15298] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[ 1083.793114][   T46] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1083.805530][   T46] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.815082][   T46] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1083.832191][   T46] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1083.842810][   T46] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.861982][T14517] usb 4-1: config 0 has an invalid interface number: 231 but max is 0
[ 1083.865089][   T46] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1083.882263][T14517] usb 4-1: config 0 has no interface number 0
[ 1083.893730][   T46] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1083.903774][T14517] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1083.912796][T15298] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[ 1083.927050][   T46] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1083.938358][T14517] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[ 1083.946500][   T46] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1083.955582][T14517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.962527][   T46] usb 8-1: Product: syz
[ 1083.965111][T14517] usb 4-1: Product: syz
[ 1083.969729][T15298] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[ 1083.972585][T14517] usb 4-1: Manufacturer: syz
[ 1083.980464][   T46] usb 8-1: Manufacturer: syz
[ 1083.986107][T14517] usb 4-1: SerialNumber: syz
[ 1083.995077][   T46] usb 8-1: SerialNumber: syz
[ 1083.998598][ T5701] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1084.009503][T15298] usb 6-1: USB disconnect, device number 107
[ 1084.031666][   T46] usb 8-1: config 0 descriptor??
[ 1084.040652][T14517] usb 4-1: config 0 descriptor??
[ 1084.054645][T24589] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1084.076926][   T46] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0
[ 1084.098557][ T5633] usb 9-1: new full-speed USB device number 33 using dummy_hcd
[ 1084.114271][T14517] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, f6:3d:76:af:d1:4c
[ 1084.179261][ T5701] usb 10-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[ 1084.190879][ T5701] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 253
[ 1084.202617][ T5701] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[ 1084.212923][ T5701] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1084.221369][ T5701] usb 10-1: Product: syz
[ 1084.226489][ T5701] usb 10-1: Manufacturer: syz
[ 1084.231743][ T5701] usb 10-1: SerialNumber: syz
[ 1084.246737][ T5701] usb 10-1: config 0 descriptor??
[ 1084.258570][ T5701] gspca_main: sunplus-2.14.0 probing 055f:c630
[ 1084.259398][ T5633] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1084.288353][ T5633] usb 9-1: config 0 has no interface number 0
[ 1084.310216][ T5633] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 1084.326245][T14517] usb 4-1: USB disconnect, device number 72
[ 1084.327158][ T5633] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1084.337704][T14517] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[ 1084.387662][ T5633] usb 9-1: Product: syz
[ 1084.397614][ T5633] usb 9-1: Manufacturer: syz
[ 1084.408974][ T5633] usb 9-1: SerialNumber: syz
[ 1084.432412][ T5633] usb 9-1: config 0 descriptor??
[ 1084.488144][ T5633] usb 9-1: selecting invalid altsetting 1
[ 1084.528821][ T5633] dvb_ttusb_budget: ttusb_init_controller: error
[ 1084.550853][    C1] usb 8-1: yurex_control_callback - control failed: -2
[ 1084.594234][ T5633] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1084.615836][T24575] fuse: Bad value for 'fd'
[ 1084.635880][T24575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.665465][T24575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.728865][T24616] netlink: 'syz.3.5663': attribute type 4 has an invalid length.
[ 1084.782618][   T46] usb 8-1: USB disconnect, device number 104
[ 1084.792128][ T5633] DVB: Unable to find symbol stv0299_attach()
[ 1084.807959][   T46] yurex 8-1:0.0: USB YUREX #0 now disconnected
[ 1084.936961][ T5633] DVB: Unable to find symbol tda8083_attach()
[ 1084.949039][T24623] FAULT_INJECTION: forcing a failure.
[ 1084.949039][T24623] name failslab, interval 1, probability 0, space 0, times 0
[ 1084.963894][ T5633] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[ 1084.972773][T24623] CPU: 1 UID: 0 PID: 24623 Comm: syz.3.5665 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1084.972802][T24623] Tainted: [L]=SOFTLOCKUP
[ 1084.972807][T24623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1084.972818][T24623] Call Trace:
[ 1084.972826][T24623]  <TASK>
[ 1084.972834][T24623]  dump_stack_lvl+0xe8/0x150
[ 1084.972860][T24623]  should_fail_ex+0x40c/0x560
[ 1084.972885][T24623]  should_failslab+0xa8/0x100
[ 1084.972912][T24623]  __kmalloc_noprof+0xe8/0x750
[ 1084.972936][T24623]  ? mpi_alloc+0x77/0x140
[ 1084.972953][T24623]  ? __kmalloc_cache_noprof+0x157/0x660
[ 1084.972979][T24623]  mpi_alloc+0x77/0x140
[ 1084.973000][T24623]  mpi_read_raw_data+0x139/0x970
[ 1084.973027][T24623]  dh_set_secret+0x200/0x320
[ 1084.973045][T24623]  ? crypto_create_tfm_node+0x7f/0x3c0
[ 1084.973070][T24623]  ? __pfx_dh_set_secret+0x10/0x10
[ 1084.973084][T24623]  ? crypto_create_tfm_node+0x20d/0x3c0
[ 1084.973108][T24623]  ? crypto_alloc_tfm_node+0x3b5/0x3e0
[ 1084.973130][T24623]  ? __keyctl_dh_compute+0x3df/0xd10
[ 1084.973162][T24623]  __keyctl_dh_compute+0x5ae/0xd10
[ 1084.973197][T24623]  ? __pfx___keyctl_dh_compute+0x10/0x10
[ 1084.973246][T24623]  ? __might_fault+0xaf/0x130
[ 1084.973285][T24623]  keyctl_dh_compute+0x124/0x180
[ 1084.973306][T24623]  ? __pfx_keyctl_dh_compute+0x10/0x10
[ 1084.973337][T24623]  __se_sys_keyctl+0x44c/0x9d0
[ 1084.973363][T24623]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 1084.973387][T24623]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1084.973410][T24623]  ? __fget_files+0x3a2/0x420
[ 1084.973438][T24623]  ? fput+0xa0/0xd0
[ 1084.973458][T24623]  ? ksys_write+0x242/0x270
[ 1084.973487][T24623]  ? __pfx_ksys_write+0x10/0x10
[ 1084.973516][T24623]  ? __x64_sys_keyctl+0x20/0xc0
[ 1084.973536][T24623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1084.973555][T24623]  do_syscall_64+0x174/0x580
[ 1084.973574][T24623]  ? clear_bhb_loop+0x40/0x90
[ 1084.973596][T24623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1084.973614][T24623] RIP: 0033:0x7f123b39ce59
[ 1084.973631][T24623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1084.973647][T24623] RSP: 002b:00007f123c322028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1084.973666][T24623] RAX: ffffffffffffffda RBX: 00007f123b615fa0 RCX: 00007f123b39ce59
[ 1084.973680][T24623] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017
[ 1084.973692][T24623] RBP: 00007f123c322090 R08: 0000200000000180 R09: 0000000000000000
[ 1084.973704][T24623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1084.973715][T24623] R13: 00007f123b616038 R14: 00007f123b615fa0 R15: 00007f123b73fa48
[ 1084.973744][T24623]  </TASK>
[ 1085.257270][ T5633] usb 9-1: USB disconnect, device number 33
[ 1086.331711][   T46] usb 10-1: USB disconnect, device number 2
[ 1086.937615][   T46] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 1087.110712][   T46] usb 6-1: Using ep0 maxpacket: 8
[ 1087.131395][   T46] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1087.145737][   T46] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 983
[ 1087.159253][   T46] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32
[ 1087.185489][   T46] usb 6-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40
[ 1087.203899][   T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1087.214410][   T46] usb 6-1: Product: syz
[ 1087.221712][   T46] usb 6-1: Manufacturer: syz
[ 1087.227314][ T5633] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1087.239819][   T46] usb 6-1: SerialNumber: syz
[ 1087.254231][T24688] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1087.265410][T24688] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1087.367212][T15287] usb 8-1: new full-speed USB device number 105 using dummy_hcd
[ 1087.389922][ T5633] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1087.411523][ T5633] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1087.441922][ T5633] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1087.463827][ T5633] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1087.504882][   T46] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1087.519804][ T5633] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1087.534252][T15287] usb 8-1: config 124 has an invalid interface number: 93 but max is 2
[ 1087.552739][   T46] usb 6-1: MIDIStreaming interface descriptor not found
[ 1087.566066][T15287] usb 8-1: config 124 contains an unexpected descriptor of type 0x2, skipping
[ 1087.577232][ T5633] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1087.604643][T15287] usb 8-1: config 124 has an invalid interface number: 131 but max is 2
[ 1087.615620][ T5633] usb 10-1: config 0 descriptor??
[ 1087.645591][T15287] usb 8-1: config 124 contains an unexpected descriptor of type 0x1, skipping
[ 1087.689800][T15287] usb 8-1: config 124 has an invalid interface number: 137 but max is 2
[ 1087.705340][   T46] usb 6-1: USB disconnect, device number 108
[ 1087.726787][T15287] usb 8-1: config 124 has no interface number 0
[ 1087.741603][T15287] usb 8-1: config 124 has no interface number 1
[ 1087.754558][T15287] usb 8-1: config 124 has no interface number 2
[ 1087.762355][T15287] usb 8-1: config 124 interface 93 altsetting 3 endpoint 0x2 has invalid maxpacket 11697, setting to 64
[ 1087.784501][T15287] usb 8-1: config 124 interface 93 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64
[ 1087.798793][T15287] usb 8-1: config 124 interface 93 altsetting 3 has an endpoint descriptor with address 0xC6, changing to 0x86
[ 1087.812916][T15287] usb 8-1: config 124 interface 93 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[ 1087.833913][T15287] usb 8-1: config 124 interface 93 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[ 1087.857739][T15287] usb 8-1: config 124 interface 93 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[ 1087.879977][T15287] usb 8-1: config 124 interface 93 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[ 1087.898290][T15287] usb 8-1: config 124 interface 93 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[ 1087.912630][T15287] usb 8-1: config 124 interface 93 altsetting 3 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[ 1087.915127][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1087.924552][T15287] usb 8-1: config 124 interface 131 altsetting 6 endpoint 0xB has invalid maxpacket 512, setting to 64
[ 1087.954808][T15287] usb 8-1: config 124 interface 131 altsetting 6 has a duplicate endpoint with address 0x86, skipping
[ 1087.974235][T15287] usb 8-1: config 124 interface 131 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[ 1087.990872][T15287] usb 8-1: config 124 interface 131 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[ 1088.003947][T15287] usb 8-1: config 124 interface 131 altsetting 6 endpoint 0x8 has invalid wMaxPacketSize 0
[ 1088.015642][T15287] usb 8-1: config 124 interface 131 altsetting 6 has a duplicate endpoint with address 0x8, skipping
[ 1088.037350][T15287] usb 8-1: config 124 interface 131 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[ 1088.071997][ T5633] hid_parser_main: 47 callbacks suppressed
[ 1088.072013][ T5633] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0
[ 1088.108592][ T5633] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0
[ 1088.125936][T15287] usb 8-1: config 124 interface 131 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[ 1088.137939][ T5633] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0
[ 1088.146153][ T5633] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0
[ 1088.155915][T15287] usb 8-1: config 124 interface 131 altsetting 6 has a duplicate endpoint with address 0xA, skipping
[ 1088.173291][ T5633] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0
[ 1088.182986][T15287] usb 8-1: config 124 interface 131 altsetting 6 has a duplicate endpoint with address 0x9, skipping
[ 1088.201506][T15287] usb 8-1: config 124 interface 137 altsetting 103 has a duplicate endpoint with address 0x8, skipping
[ 1088.217952][ T5633] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1088.246859][T15287] usb 8-1: config 124 interface 93 has no altsetting 0
[ 1088.256558][T15287] usb 8-1: config 124 interface 131 has no altsetting 0
[ 1088.284680][T15287] usb 8-1: config 124 interface 137 has no altsetting 0
[ 1088.303498][T15287] usb 8-1: Dual-Role OTG device on HNP port
[ 1088.314736][T15287] usb 8-1: New USB device found, idVendor=2304, idProduct=0225, bcdDevice=f6.23
[ 1088.327025][T15287] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1088.337743][T15287] usb 8-1: Product: syz
[ 1088.342833][T15287] usb 8-1: Manufacturer: syz
[ 1088.392041][T15287] usb 8-1: SerialNumber: syz
[ 1088.442663][T24700] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1088.597325][T24709] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1088.681285][T24700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.697819][T24700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.711158][T24715] 
[ 1088.713527][T24715] =====================================================
[ 1088.720497][T24715] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1088.728167][T24715] syzkaller #0 Tainted: G             L     
[ 1088.734171][T24715] -----------------------------------------------------
[ 1088.741214][T24715] syz.9.5684/24715 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1088.749021][T24715] ffff88802b25dbe8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 1088.757845][T24715] 
[ 1088.757845][T24715] and this task is already holding:
[ 1088.765200][T24715] ffff88806e8f5028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xcb/0xc00
[ 1088.775041][T24715] which would create a new lock dependency:
[ 1088.780921][T24715]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[ 1088.789085][T24715] 
[ 1088.789085][T24715] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1088.798537][T24715]  (&dev->event_lock#2){..-.}-{3:3}
[ 1088.798566][T24715] 
[ 1088.798566][T24715] ... which became SOFTIRQ-irq-safe at:
[ 1088.811426][T24715]   lock_acquire+0x106/0x350
[ 1088.816009][T24715]   _raw_spin_lock_irqsave+0x40/0x60
[ 1088.821286][T24715]   input_inject_event+0xa4/0x330
[ 1088.826372][T24715]   led_trigger_event+0x138/0x210
[ 1088.831457][T24715]   kbd_bh+0x1c6/0x2e0
[ 1088.835572][T24715]   tasklet_action_common+0x2da/0x4a0
[ 1088.840931][T24715]   handle_softirqs+0x225/0x840
[ 1088.845768][T24715]   run_ksoftirqd+0x36/0x60
[ 1088.850260][T24715]   smpboot_thread_fn+0x57c/0xa80
[ 1088.855276][T24715]   kthread+0x389/0x470
[ 1088.859421][T24715]   ret_from_fork+0x514/0xb70
[ 1088.864122][T24715]   ret_from_fork_asm+0x1a/0x30
[ 1088.868963][T24715] 
[ 1088.868963][T24715] to a SOFTIRQ-irq-unsafe lock:
[ 1088.876034][T24715]  (tasklist_lock){.+.+}-{3:3}
[ 1088.876060][T24715] 
[ 1088.876060][T24715] ... which became SOFTIRQ-irq-unsafe at:
[ 1088.888662][T24715] ...
[ 1088.888730][T24715]   lock_acquire+0x106/0x350
[ 1088.895874][T24715]   _raw_read_lock+0x36/0x50
[ 1088.900459][T24715]   __do_wait+0xd9/0x720
[ 1088.904691][T24715]   do_wait+0x1e7/0x510
[ 1088.908844][T24715]   kernel_wait+0xd6/0x1c0
[ 1088.913252][T24715]   call_usermodehelper_exec_work+0xbe/0x230
[ 1088.919233][T24715]   process_scheduled_works+0xa8e/0x14e0
[ 1088.924879][T24715]   worker_thread+0xa47/0xfb0
[ 1088.929549][T24715]   kthread+0x389/0x470
[ 1088.933697][T24715]   ret_from_fork+0x514/0xb70
[ 1088.938363][T24715]   ret_from_fork_asm+0x1a/0x30
[ 1088.943205][T24715] 
[ 1088.943205][T24715] other info that might help us debug this:
[ 1088.943205][T24715] 
[ 1088.953416][T24715] Chain exists of:
[ 1088.953416][T24715]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[ 1088.953416][T24715] 
[ 1088.967051][T24715]  Possible interrupt unsafe locking scenario:
[ 1088.967051][T24715] 
[ 1088.975419][T24715]        CPU0                    CPU1
[ 1088.980769][T24715]        ----                    ----
[ 1088.986184][T24715]   lock(tasklist_lock);
[ 1088.990417][T24715]                                local_irq_disable();
[ 1088.997155][T24715]                                lock(&dev->event_lock#2);
[ 1089.004409][T24715]                                lock(&client->buffer_lock);
[ 1089.011766][T24715]   <Interrupt>
[ 1089.015256][T24715]     lock(&dev->event_lock#2);
[ 1089.020135][T24715] 
[ 1089.020135][T24715]  *** DEADLOCK ***
[ 1089.020135][T24715] 
[ 1089.028261][T24715] 7 locks held by syz.9.5684/24715:
[ 1089.033440][T24715]  #0: ffff88802b676110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0
[ 1089.042625][T24715]  #1: ffff8880203da230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330
[ 1089.052725][T24715]  #2: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330
[ 1089.062379][T24715]  #3: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 1089.071948][T24715]  #4: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[ 1089.081087][T24715]  #5: ffff88806e8f5028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xcb/0xc00
[ 1089.091267][T24715]  #6: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 1089.100314][T24715] 
[ 1089.100314][T24715] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1089.110701][T24715]  -> (&dev->event_lock#2){..-.}-{3:3} {
[ 1089.116341][T24715]     IN-SOFTIRQ-W at:
[ 1089.120483][T24715]                       lock_acquire+0x106/0x350
[ 1089.126798][T24715]                       _raw_spin_lock_irqsave+0x40/0x60
[ 1089.133817][T24715]                       input_inject_event+0xa4/0x330
[ 1089.140574][T24715]                       led_trigger_event+0x138/0x210
[ 1089.147329][T24715]                       kbd_bh+0x1c6/0x2e0
[ 1089.153125][T24715]                       tasklet_action_common+0x2da/0x4a0
[ 1089.160220][T24715]                       handle_softirqs+0x225/0x840
[ 1089.166791][T24715]                       run_ksoftirqd+0x36/0x60
[ 1089.173017][T24715]                       smpboot_thread_fn+0x57c/0xa80
[ 1089.179769][T24715]                       kthread+0x389/0x470
[ 1089.185652][T24715]                       ret_from_fork+0x514/0xb70
[ 1089.192054][T24715]                       ret_from_fork_asm+0x1a/0x30
[ 1089.198633][T24715]     INITIAL USE at:
[ 1089.202601][T24715]                      lock_acquire+0x106/0x350
[ 1089.208826][T24715]                      _raw_spin_lock_irqsave+0x40/0x60
[ 1089.215760][T24715]                      input_inject_event+0xa4/0x330
[ 1089.222427][T24715]                      kbd_led_trigger_activate+0xbc/0x100
[ 1089.229612][T24715]                      led_trigger_set+0x525/0x940
[ 1089.236107][T24715]                      led_trigger_set_default+0x263/0x2a0
[ 1089.243298][T24715]                      led_classdev_register_ext+0x761/0x9a0
[ 1089.250661][T24715]                      input_leds_connect+0x4de/0x750
[ 1089.257415][T24715]                      input_register_device+0xd12/0x1150
[ 1089.264519][T24715]                      atkbd_connect+0x6fa/0x9f0
[ 1089.270835][T24715]                      serio_driver_probe+0x82/0xb0
[ 1089.277505][T24715]                      really_probe+0x254/0xae0
[ 1089.283798][T24715]                      __driver_probe_device+0x1f5/0x380
[ 1089.290813][T24715]                      driver_probe_device+0x4f/0x240
[ 1089.297570][T24715]                      __driver_attach+0x342/0x620
[ 1089.304058][T24715]                      bus_for_each_dev+0x23b/0x2c0
[ 1089.310638][T24715]                      serio_handle_event+0x1af/0xfc0
[ 1089.317391][T24715]                      process_scheduled_works+0xa8e/0x14e0
[ 1089.324659][T24715]                      worker_thread+0xa47/0xfb0
[ 1089.330974][T24715]                      kthread+0x389/0x470
[ 1089.336770][T24715]                      ret_from_fork+0x514/0xb70
[ 1089.343083][T24715]                      ret_from_fork_asm+0x1a/0x30
[ 1089.349573][T24715]   }
[ 1089.352154][T24715]   ... key      at: [<ffffffff9a7b15a0>] input_allocate_device.__key.7+0x0/0x20
[ 1089.361365][T24715] -> (&client->buffer_lock){....}-{3:3} {
[ 1089.367087][T24715]    INITIAL USE at:
[ 1089.370964][T24715]                    lock_acquire+0x106/0x350
[ 1089.377016][T24715]                    _raw_spin_lock_irqsave+0x40/0x60
[ 1089.383771][T24715]                    evdev_ioctl_handler+0x1a86/0x1f60
[ 1089.390617][T24715]                    __se_sys_ioctl+0xfc/0x170
[ 1089.396767][T24715]                    do_syscall_64+0x174/0x580
[ 1089.402904][T24715]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1089.410346][T24715]  }
[ 1089.412829][T24715]  ... key      at: [<ffffffff9a7b1840>] evdev_open.__key.27+0x0/0x20
[ 1089.420971][T24715]  ... acquired at:
[ 1089.424756][T24715]    _raw_spin_lock+0x2e/0x40
[ 1089.429428][T24715]    evdev_pass_values+0xcb/0xc00
[ 1089.434441][T24715]    evdev_events+0x1e6/0x340
[ 1089.439105][T24715]    input_pass_values+0x288/0x890
[ 1089.444210][T24715]    input_event_dispose+0x330/0x6b0
[ 1089.449484][T24715]    input_inject_event+0x1dd/0x330
[ 1089.454669][T24715]    evdev_write+0x325/0x4c0
[ 1089.459247][T24715]    vfs_write+0x296/0xba0
[ 1089.463656][T24715]    ksys_write+0x150/0x270
[ 1089.468148][T24715]    do_syscall_64+0x174/0x580
[ 1089.472898][T24715]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1089.478948][T24715] 
[ 1089.481254][T24715] 
[ 1089.481254][T24715] the dependencies between the lock to be acquired
[ 1089.481262][T24715]  and SOFTIRQ-irq-unsafe lock:
[ 1089.494745][T24715]   -> (tasklist_lock){.+.+}-{3:3} {
[ 1089.500041][T24715]      HARDIRQ-ON-R at:
[ 1089.504178][T24715]                         lock_acquire+0x106/0x350
[ 1089.510666][T24715]                         _raw_read_lock+0x36/0x50
[ 1089.517161][T24715]                         __do_wait+0xd9/0x720
[ 1089.523304][T24715]                         do_wait+0x1e7/0x510
[ 1089.529360][T24715]                         kernel_wait+0xd6/0x1c0
[ 1089.535678][T24715]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1089.543563][T24715]                         process_scheduled_works+0xa8e/0x14e0
[ 1089.551354][T24715]                         worker_thread+0xa47/0xfb0
[ 1089.557931][T24715]                         kthread+0x389/0x470
[ 1089.563988][T24715]                         ret_from_fork+0x514/0xb70
[ 1089.570560][T24715]                         ret_from_fork_asm+0x1a/0x30
[ 1089.577312][T24715]      SOFTIRQ-ON-R at:
[ 1089.581453][T24715]                         lock_acquire+0x106/0x350
[ 1089.587941][T24715]                         _raw_read_lock+0x36/0x50
[ 1089.594439][T24715]                         __do_wait+0xd9/0x720
[ 1089.600581][T24715]                         do_wait+0x1e7/0x510
[ 1089.606639][T24715]                         kernel_wait+0xd6/0x1c0
[ 1089.612953][T24715]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1089.620837][T24715]                         process_scheduled_works+0xa8e/0x14e0
[ 1089.628369][T24715]                         worker_thread+0xa47/0xfb0
[ 1089.634947][T24715]                         kthread+0x389/0x470
[ 1089.641005][T24715]                         ret_from_fork+0x514/0xb70
[ 1089.647579][T24715]                         ret_from_fork_asm+0x1a/0x30
[ 1089.654330][T24715]      INITIAL USE at:
[ 1089.658383][T24715]                        lock_acquire+0x106/0x350
[ 1089.664785][T24715]                        _raw_write_lock_irq+0x3d/0x50
[ 1089.671629][T24715]                        copy_process+0x29eb/0x4380
[ 1089.678202][T24715]                        kernel_clone+0x2d7/0x940
[ 1089.684605][T24715]                        user_mode_thread+0x110/0x180
[ 1089.691353][T24715]                        rest_init+0x23/0x300
[ 1089.697407][T24715]                        start_kernel+0x38a/0x3e0
[ 1089.703952][T24715]                        x86_64_start_reservations+0x24/0x30
[ 1089.711350][T24715]                        x86_64_start_kernel+0x137/0x1b0
[ 1089.718359][T24715]                        common_startup_64+0x13e/0x147
[ 1089.725197][T24715]      INITIAL READ USE at:
[ 1089.729685][T24715]                             lock_acquire+0x106/0x350
[ 1089.736522][T24715]                             _raw_read_lock+0x36/0x50
[ 1089.743363][T24715]                             __do_wait+0xd9/0x720
[ 1089.749853][T24715]                             do_wait+0x1e7/0x510
[ 1089.756259][T24715]                             kernel_wait+0xd6/0x1c0
[ 1089.762925][T24715]                             call_usermodehelper_exec_work+0xbe/0x230
[ 1089.771156][T24715]                             process_scheduled_works+0xa8e/0x14e0
[ 1089.779030][T24715]                             worker_thread+0xa47/0xfb0
[ 1089.785950][T24715]                             kthread+0x389/0x470
[ 1089.792354][T24715]                             ret_from_fork+0x514/0xb70
[ 1089.799277][T24715]                             ret_from_fork_asm+0x1a/0x30
[ 1089.806378][T24715]    }
[ 1089.809034][T24715]    ... key      at: [<ffffffff8e60a058>] tasklist_lock+0x18/0x40
[ 1089.817033][T24715]    ... acquired at:
[ 1089.820995][T24715]    _raw_read_lock+0x36/0x50
[ 1089.825668][T24715]    send_sigurg+0x12b/0x420
[ 1089.830249][T24715]    sk_send_sigurg+0x6c/0x2e0
[ 1089.835007][T24715]    queue_oob+0x42c/0x4f0
[ 1089.839490][T24715]    unix_stream_sendmsg+0xc30/0xde0
[ 1089.844763][T24715]    ____sys_sendmsg+0x9b9/0xa20
[ 1089.849695][T24715]    ___sys_sendmsg+0x2a5/0x360
[ 1089.854535][T24715]    __x64_sys_sendmsg+0x1bd/0x2a0
[ 1089.859638][T24715]    do_syscall_64+0x174/0x580
[ 1089.864387][T24715]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1089.870439][T24715] 
[ 1089.872748][T24715]  -> (&f_owner->lock){....}-{3:3} {
[ 1089.878042][T24715]     INITIAL USE at:
[ 1089.882009][T24715]                      lock_acquire+0x106/0x350
[ 1089.888236][T24715]                      _raw_write_lock_irq+0x3d/0x50
[ 1089.894904][T24715]                      __f_setown+0x5f/0x380
[ 1089.900877][T24715]                      fcntl_dirnotify+0x3fd/0x6a0
[ 1089.907407][T24715]                      do_fcntl+0x77e/0x1a30
[ 1089.913380][T24715]                      __se_sys_fcntl+0xc8/0x150
[ 1089.919701][T24715]                      do_syscall_64+0x174/0x580
[ 1089.926017][T24715]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1089.933636][T24715]     INITIAL READ USE at:
[ 1089.938042][T24715]                           lock_acquire+0x106/0x350
[ 1089.944719][T24715]                           _raw_read_lock_irqsave+0x48/0x60
[ 1089.952106][T24715]                           send_sigio+0x38/0x370
[ 1089.958520][T24715]                           dnotify_handle_event+0x169/0x440
[ 1089.965878][T24715]                           fsnotify+0x18a5/0x1b60
[ 1089.972373][T24715]                           fsnotify_access+0x22b/0x2a0
[ 1089.979310][T24715]                           iterate_dir+0x323/0x4d0
[ 1089.985890][T24715]                           __se_sys_getdents64+0xf1/0x280
[ 1089.993114][T24715]                           do_syscall_64+0x174/0x580
[ 1089.999866][T24715]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1090.007928][T24715]   }
[ 1090.010503][T24715]   ... key      at: [<ffffffff9a493880>] file_f_owner_allocate.__key+0x0/0x20
[ 1090.019532][T24715]   ... acquired at:
[ 1090.023408][T24715]    _raw_read_lock_irqsave+0x48/0x60
[ 1090.028773][T24715]    send_sigio+0x38/0x370
[ 1090.033182][T24715]    kill_fasync+0x24d/0x4d0
[ 1090.037762][T24715]    lease_break_callback+0x26/0x30
[ 1090.042974][T24715]    __break_lease+0x80d/0x1e70
[ 1090.047811][T24715]    vfs_symlink+0x27c/0x330
[ 1090.052387][T24715]    filename_symlinkat+0x1cd/0x410
[ 1090.057573][T24715]    __se_sys_symlinkat+0x4e/0x2b0
[ 1090.062668][T24715]    do_syscall_64+0x174/0x580
[ 1090.067417][T24715]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1090.073472][T24715] 
[ 1090.075779][T24715] -> (&new->fa_lock){....}-{3:3} {
[ 1090.080893][T24715]    INITIAL USE at:
[ 1090.084772][T24715]                    lock_acquire+0x106/0x350
[ 1090.090826][T24715]                    _raw_write_lock_irq+0x3d/0x50
[ 1090.097318][T24715]                    fasync_remove_entry+0xf1/0x1c0
[ 1090.103898][T24715]                    pipe_fasync+0xa9/0x1f0
[ 1090.109780][T24715]                    __fput+0x88d/0xa50
[ 1090.115317][T24715]                    task_work_run+0x1d9/0x270
[ 1090.121462][T24715]                    exit_to_user_mode_loop+0x193/0x6b0
[ 1090.128382][T24715]                    do_syscall_64+0x353/0x580
[ 1090.134526][T24715]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1090.141967][T24715]    INITIAL READ USE at:
[ 1090.146282][T24715]                         lock_acquire+0x106/0x350
[ 1090.152768][T24715]                         _raw_read_lock_irqsave+0x48/0x60
[ 1090.159957][T24715]                         kill_fasync+0x199/0x4d0
[ 1090.166361][T24715]                         lease_break_callback+0x26/0x30
[ 1090.173381][T24715]                         __break_lease+0x80d/0x1e70
[ 1090.180048][T24715]                         vfs_symlink+0x27c/0x330
[ 1090.186448][T24715]                         filename_symlinkat+0x1cd/0x410
[ 1090.193455][T24715]                         __se_sys_symlinkat+0x4e/0x2b0
[ 1090.200380][T24715]                         do_syscall_64+0x174/0x580
[ 1090.206968][T24715]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1090.214845][T24715]  }
[ 1090.217330][T24715]  ... key      at: [<ffffffff9a4938a0>] fasync_insert_entry.__key+0x0/0x20
[ 1090.225999][T24715]  ... acquired at:
[ 1090.229784][T24715]    _raw_read_lock_irqsave+0x48/0x60
[ 1090.235149][T24715]    kill_fasync+0x199/0x4d0
[ 1090.239731][T24715]    evdev_pass_values+0x552/0xc00
[ 1090.244830][T24715]    evdev_events+0x1e6/0x340
[ 1090.249492][T24715]    input_pass_values+0x288/0x890
[ 1090.254597][T24715]    input_event_dispose+0x330/0x6b0
[ 1090.259871][T24715]    input_inject_event+0x1dd/0x330
[ 1090.265064][T24715]    evdev_write+0x325/0x4c0
[ 1090.269637][T24715]    vfs_write+0x296/0xba0
[ 1090.274047][T24715]    ksys_write+0x150/0x270
[ 1090.278540][T24715]    do_syscall_64+0x174/0x580
[ 1090.283291][T24715]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1090.289341][T24715] 
[ 1090.291651][T24715] 
[ 1090.291651][T24715] stack backtrace:
[ 1090.297527][T24715] CPU: 0 UID: 0 PID: 24715 Comm: syz.9.5684 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1090.297549][T24715] Tainted: [L]=SOFTLOCKUP
[ 1090.297555][T24715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1090.297565][T24715] Call Trace:
[ 1090.297572][T24715]  <TASK>
[ 1090.297579][T24715]  dump_stack_lvl+0xe8/0x150
[ 1090.297598][T24715]  __lock_acquire+0x2a37/0x2cd0
[ 1090.297622][T24715]  ? kill_fasync+0x199/0x4d0
[ 1090.297643][T24715]  lock_acquire+0x106/0x350
[ 1090.297657][T24715]  ? kill_fasync+0x199/0x4d0
[ 1090.297678][T24715]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1090.297698][T24715]  ? evdev_pass_values+0xcb/0xc00
[ 1090.297715][T24715]  _raw_read_lock_irqsave+0x48/0x60
[ 1090.297737][T24715]  ? kill_fasync+0x199/0x4d0
[ 1090.297758][T24715]  kill_fasync+0x199/0x4d0
[ 1090.297778][T24715]  ? kill_fasync+0x53/0x4d0
[ 1090.297798][T24715]  evdev_pass_values+0x552/0xc00
[ 1090.297816][T24715]  ? evdev_pass_values+0x6a1/0xc00
[ 1090.297832][T24715]  evdev_events+0x1e6/0x340
[ 1090.297845][T24715]  ? evdev_events+0x79/0x340
[ 1090.297859][T24715]  ? input_pass_values+0x8d/0x890
[ 1090.297882][T24715]  input_pass_values+0x288/0x890
[ 1090.297906][T24715]  ? input_handle_event+0x6fd/0xf10
[ 1090.297925][T24715]  input_event_dispose+0x330/0x6b0
[ 1090.297945][T24715]  input_inject_event+0x1dd/0x330
[ 1090.297964][T24715]  ? input_inject_event+0xb5/0x330
[ 1090.297984][T24715]  evdev_write+0x325/0x4c0
[ 1090.297999][T24715]  ? __lock_acquire+0x683/0x2cd0
[ 1090.298014][T24715]  ? __pfx_evdev_write+0x10/0x10
[ 1090.298030][T24715]  ? bpf_lsm_file_permission+0x9/0x20
[ 1090.298051][T24715]  ? security_file_permission+0x75/0x260
[ 1090.298070][T24715]  ? rw_verify_area+0x203/0x4c0
[ 1090.298091][T24715]  ? __pfx_evdev_write+0x10/0x10
[ 1090.298105][T24715]  vfs_write+0x296/0xba0
[ 1090.298128][T24715]  ? __pfx_vfs_write+0x10/0x10
[ 1090.298149][T24715]  ? __fget_files+0x2a/0x420
[ 1090.298167][T24715]  ? __fget_files+0x2a/0x420
[ 1090.298184][T24715]  ? __fget_files+0x3a2/0x420
[ 1090.298201][T24715]  ? __fget_files+0x2a/0x420
[ 1090.298220][T24715]  ksys_write+0x150/0x270
[ 1090.298242][T24715]  ? __pfx_ksys_write+0x10/0x10
[ 1090.298265][T24715]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1090.298280][T24715]  do_syscall_64+0x174/0x580
[ 1090.298294][T24715]  ? trace_irq_disable+0x3b/0x140
[ 1090.298316][T24715]  ? clear_bhb_loop+0x40/0x90
[ 1090.298332][T24715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1090.298347][T24715] RIP: 0033:0x7f150119ce59
[ 1090.298362][T24715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1090.298383][T24715] RSP: 002b:00007f1502095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1090.298401][T24715] RAX: ffffffffffffffda RBX: 00007f1501416090 RCX: 00007f150119ce59
[ 1090.298413][T24715] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 000000000000000a
[ 1090.298423][T24715] RBP: 00007f1501232d6f R08: 0000000000000000 R09: 0000000000000000
[ 1090.298433][T24715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1090.298443][T24715] R13: 00007f1501416128 R14: 00007f1501416090 R15: 00007f150153fa48
[ 1090.298460][T24715]  </TASK>
[ 1090.633617][T15287] usb 8-1: USB disconnect, device number 105
[ 1090.707891][ T5727] usb 10-1: USB disconnect, device number 3